Should I remove “Adware.ConvertAd.1352”?

The Adware.ConvertAd.1352 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.ConvertAd.1352 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Adware.ConvertAd.1352?


File Info:
name: B63F5E0A10C5231EBFD0.mlw
path: /opt/CAPEv2/storage/binaries/c626f3fe71c59354a831d37ce842e9c8301e74e25f8dd4e6424f30d66b4de576
crc32: 6D713E81
md5: b63f5e0a10c5231ebfd0e78681e9b058
sha1: 012905694aef035f99f94d1491ad30806e90cc65
sha256: c626f3fe71c59354a831d37ce842e9c8301e74e25f8dd4e6424f30d66b4de576
sha512: 7642505aadecf5bc0cc6d955ec8a7b412e09fe774b921fce359af9fef46309e121416746417063fc678b0c3b90099defcf16fad693810a2630aa483e6a35cf18
ssdeep: 768:zB9LpcLA0hY50NXpEnbJYVPl7GvED/nvjcsfyfnh:3pcL/YyindYVPT4lfh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T102336C1235E1C032C4A76A3059B4E6A15BBF78432671429F7BE8157E6FA07D08F7839B
sha3_384: 4e1059756bd0534b3c404c429ce8945d185d8faa3ca5301a3f3c324868b4e4a5c9427dcb4ed34b94a3798982af57fd7f
ep_bytes: e82d190000e989feffff8bff565733f6
timestamp: 2015-12-01 05:56:53

Version Info:
0: [No Data]

Adware.ConvertAd.1352 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Adware.ConvertAd.1352
FireEye	Generic.mg.b63f5e0a10c5231e
McAfee	Artemis!B63F5E0A10C5
Cylance	Unsafe
Zillya	Adware.Somoto.Win32.1288
Alibaba	AdWare:Win32/ConvertAd.aa7c6b27
Cybereason	malicious.a10c52
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.ConvertAd.ADE
Baidu	Win32.Adware.Generic.dc
Kaspersky	not-a-virus:HEUR:AdWare.Win32.ConvertAd.vho
BitDefender	Gen:Variant.Adware.ConvertAd.1352
NANO-Antivirus	Riskware.Win32.ClickMeIn.dyzwuw
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114c53d3
Ad-Aware	Gen:Variant.Adware.ConvertAd.1352
Emsisoft	Gen:Variant.Adware.ConvertAd.1352 (B)
Comodo	Application.Win32.Midie.A@60×218
DrWeb	Adware.ClickMeIn.4516
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!PUP
Sophos	Generic PUA AB (PUA)
Ikarus	PUA.ConvertAd
GData	Gen:Variant.Adware.ConvertAd.1352
Jiangmin	AdWare.ConvertAd.aihb
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1121614
MAX	malware (ai score=60)
Antiy-AVL	Trojan/Generic.ASMalwS.15E3C38
SUPERAntiSpyware	PUP.ConvertAd/Variant
APEX	Malicious
Microsoft	Trojan:Win32/Wacatac.A!ml
Cynet	Malicious (score: 99)
AhnLab-V3	PUP/Win32.ConvertAd.C859123
ALYac	Gen:Variant.Adware.ConvertAd.1352
VBA32	BScope.Adware.ConvertAd
Yandex	Trojan.GenAsa!o4yfhbeh4Tc
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/ConvertAd
AVG	Win32:Malware-gen
Panda	Generic Suspicious

How to remove Adware.ConvertAd.1352?

Adware.ConvertAd.1352 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X