About “Adware.DesktopDefender.A” infection

The Adware.DesktopDefender.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.DesktopDefender.A virus can do?

Unconventionial language used in binary resources: Russian
Authenticode signature is invalid

How to determine Adware.DesktopDefender.A?


File Info:
name: 847922DC161FAF1C8BC1.mlw
path: /opt/CAPEv2/storage/binaries/3dd98945e167af1797c1635e8798a86b0842337ee178da133ffc60c72d85a3a3
crc32: F117EDE4
md5: 847922dc161faf1c8bc139cecaced033
sha1: 37b5a8c9d52c6c103914c0404e61325ec7d5c4a8
sha256: 3dd98945e167af1797c1635e8798a86b0842337ee178da133ffc60c72d85a3a3
sha512: 11f809799683d7d147bbac46c3d79e7013d915fce78bbd951f19da525e9b0f031220eb54a95e0334d50ea819751b264f6c4378277fd784be98f0d336d6765c9f
ssdeep: 1536:49WPgAMoGt9HpGxV+Y2s6vFaVwA7FJGuDVTD:rPxVC3+JGuDVT
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T144636D01B2E181F3D54B52797DA95B06AA3FAC005BF046C31F792B5E6E733D0AA39352
sha3_384: 21cd977e0535285fc7be072d33189a98fb3c02e416e9cc83ab7a330a274907e15fbdbe29e86f1efae599c47e3895d096
ep_bytes: 6a0c6800a60010e87901000033c04089
timestamp: 2009-06-11 14:44:10

Version Info:
CompanyName: Nexton Enterprises Ltd.
FileDescription: Contraviro Mail Filter 
FileVersion: 1, 9, 4, 0
InternalName: shellext.dll
LegalCopyright: Nexton Enterprises Ltd. (c) All rights reserved.
OriginalFilename: shellext.dll
ProductName: Contraviro Mail Filter 
ProductVersion: 1, 9, 4, 0
Translation: 0x0409 0x04b0

Adware.DesktopDefender.A also known as:

Lionic	Trojan.Multi.Generic.4!c
MicroWorld-eScan	Adware.DesktopDefender.A
FireEye	Adware.DesktopDefender.A
Skyhigh	Artemis
ALYac	Adware.DesktopDefender.A
Alibaba	AdWare:Win32/UnVirex.843bb127
Symantec	Unvirex
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Adware.UnVirex.B
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Adware.DesktopDefender.A
NANO-Antivirus	Riskware.Win32.DesktopDefender.cyvqgk
Avast	Win32:Adware-gen [Adw]
Tencent	Win32.Trojan.Agen.Qgil
Emsisoft	Adware.DesktopDefender.A (B)
F-Secure	Adware.ADWARE/DesktopDefender.A
Zillya	Adware.UnVirex.Win32.2
Sophos	Generic Reputation PUA (PUA)
Webroot	Adware.Rogue.Security.Products
Google	Detected
Avira	ADWARE/DesktopDefender.A
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Bitrep.B
Arcabit	Adware.DesktopDefender.A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Adware.DesktopDefender.A
Varist	W32/Risk.WIBE-9313
McAfee	Artemis!847922DC161F
MAX	malware (ai score=61)
Cylance	unsafe
Rising	Trojan.Win32.Generic.12351D44 (C64:YzY0OqC+z6yPNE8w)
Yandex	Trojan.GenAsa!gYSJTxMnE+Y
Fortinet	W32/Dx.SWN!tr
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Adware.DesktopDefender.A?

Adware.DesktopDefender.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X