Win32/Adware.Zdengo.DKA (file analysis)

The Win32/Adware.Zdengo.DKA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.Zdengo.DKA virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Adware.Zdengo.DKA?


File Info:
name: E4B8A762644B90E35D59.mlw
path: /opt/CAPEv2/storage/binaries/46e2f217683789131d9f9ff094cfc1a303a8aaf36da726d89ff6de674e5fab47
crc32: A944B9E9
md5: e4b8a762644b90e35d59898ca11d566d
sha1: 13bf3f68da0cda0ed9b6f3e949b2b80a2f8dc920
sha256: 46e2f217683789131d9f9ff094cfc1a303a8aaf36da726d89ff6de674e5fab47
sha512: ff2145f28c52e7cf1a5b040700ee8948a10cab8b8c9222a6a4c80b846d464cab8b961a792ccc807d0823207b4246063db532a5139859d21e27289fc6d4ddd1ae
ssdeep: 24576:q77pXBfwLkIXFHxWB4Ia2j3YmPBY4Wm4gJ4ZvtPptDDpBgDz:MIkGFOFEcBY4yA4ZvtPD/pB8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D495AE01FC88DF6AD16686728AE7D73E9065AC412F55188761CC378868736E43BF63CE
sha3_384: 6c95874e40650f9bad74fd031c63b3816a55a9bc82a17a4ae19f480039b9a9b37b7aeb513f5b0a596b2e595271caf5c3
ep_bytes: e8d66c0000e97ffeffffcccccccc8b4c
timestamp: 2019-03-08 18:53:22

Version Info:
0: [No Data]

Win32/Adware.Zdengo.DKA also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.36861846
FireEye	Generic.mg.e4b8a762644b90e3
McAfee	Artemis!E4B8A762644B
Cylance	Unsafe
Sangfor	Riskware.Win32.Occamy.AA
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Zdengo.DKA
APEX	Malicious
BitDefender	Trojan.GenericKD.36861846
Avast	FileRepMalware [Adw]
Tencent	Malware.Win32.Gencirc.114d94cb
Ad-Aware	Trojan.GenericKD.36861846
Sophos	Generic PUA BD (PUA)
Comodo	ApplicUnwnt@#ueczamhnlw55
Zillya	Adware.Zdengo.Win32.2889
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Trojan.GenericKD.36861846 (B)
GData	Trojan.GenericKD.36861846
Webroot	W32.Adware.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2AE6B7E
Microsoft	Program:Win32/Occamy.AA
ALYac	Trojan.GenericKD.36861846
VBA32	BScope.Adware.Wajam
Malwarebytes	Malware.AI.4248653061
TrendMicro-HouseCall	TROJ_GEN.R002H05JU21
Rising	Trojan.Zpevdo!8.F912 (CLOUD)
MaxSecure	Trojan.Malware.74189516.susgen
Fortinet	Riskware/Zdengo
AVG	FileRepMalware [Adw]
Panda	Trj/GdSda.A

How to remove Win32/Adware.Zdengo.DKA?

Win32/Adware.Zdengo.DKA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X