Win32/Adware.VrBrothers.AE potentially unwanted (file analysis)

The Win32/Adware.VrBrothers.AE potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.VrBrothers.AE potentially unwanted virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it

Related domains:

z.whorecord.xyz

soft.anjian.com

a.tomx.xyz

How to determine Win32/Adware.VrBrothers.AE potentially unwanted?


File Info:
crc32: 2490443C
md5: f17eb68aac6a3f041dfc0635756e0ee6
name: qm924chs1780_102.exe
sha1: b539d4ac456e71bd188589e71d04ba9df42fb602
sha256: e211b0c9d7c382878c16fb9981f31185cb0dfae5ae466984c5cc91f5d763a22b
sha512: 07c619a171b1142bfcb7a2e3c62100e86c19fac7f91948ccf1e1ecd480596f00ec2ab93a52ce204c992201177991dd44cac2902a3f302627ab04e891f24f961d
ssdeep: 196608:mWJLpfphDERMYBL4LHOoRi5jJ010WkQ02+SGkrUPtYIzgQvaqB8:mWRpuRJ4DOoOjieWWSsQ6B8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: x5144x5f1fx8f6fx4ef6                                                        
Comments: This installation was built with Inno Setup.
ProductName: x6309x952ex7cbex70759                                                       
ProductVersion:                     
FileDescription: x6309x952ex7cbex70759 Setup                                                 
Translation: 0x0000 0x04b0

Win32/Adware.VrBrothers.AE potentially unwanted also known as:

MicroWorld-eScan	Trojan.GenericKD.42145873
FireEye	Trojan.GenericKD.42145873
CAT-QuickHeal	TjnDownldr.Wauchos.S12831
McAfee	Artemis!F17EB68AAC6A
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.GenericKD.42145873
F-Prot	W32/A-3d6a2cb6!Eldorado
Symantec	Trojan.Gen.2
Paloalto	generic.ml
GData	Win32.Adware.VrBrothers.C
Kaspersky	Trojan-Downloader.Win32.Wauchos.br
Alibaba	TrojanDownloader:Win32/Wauchos.f54d88d1
NANO-Antivirus	Trojan.Win32.Small.bobwnt
Rising	Trojan.Generic@ML.94 (RDML:iulrZ0kTioXptkEbz/8qCQ)
Ad-Aware	Trojan.GenericKD.42145873
Sophos	Generic PUA LF (PUA)
DrWeb	Trojan.BtcMine.3151
Zillya	Trojan.PatchedCRTD.Win32.10990
McAfee-GW-Edition	Artemis
MaxSecure	Trojan.Malware.74812398.susgen
Emsisoft	Trojan.GenericKD.42145873 (B)
Cyren	W32/Trojan.LMMY-7350
Webroot	W32.Trojan.Gen
MAX	malware (ai score=99)
Arcabit	Trojan.Generic.D2831851
ALYac	Trojan.GenericKD.42145873
Malwarebytes	Adware.VRBrothers
ESET-NOD32	a variant of Win32/Adware.VrBrothers.AE potentially unwanted
eGambit	Unsafe.AI_Score_57%
Fortinet	Riskware/VrBrothers
AVG	Win32:Small-HUAK [Trj]
Avast	Win32:Small-HUAK [Trj]

How to remove Win32/Adware.VrBrothers.AE potentially unwanted?

Win32/Adware.VrBrothers.AE potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Adware.VrBrothers.AE potentially unwanted (file analysis)