Adware.Generic.1961583 malicious file

The Adware.Generic.1961583 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Generic.1961583 virus can do?

Dynamic (imported) function loading detected
A process attempted to delay the analysis task.
Reads data out of its own binary image
Authenticode signature is invalid
Installs itself for autorun at Windows startup

How to determine Adware.Generic.1961583?


File Info:
name: 154A40A888A72A5E210C.mlw
path: /opt/CAPEv2/storage/binaries/2324c3b277c3e56f14e4bfb0457594b8b437fd6ea9e586b64f34186a6fba6531
crc32: 80A04F1F
md5: 154a40a888a72a5e210cd05ac40b82fc
sha1: c05bde463dbe8513c932106593b729be094806f5
sha256: 2324c3b277c3e56f14e4bfb0457594b8b437fd6ea9e586b64f34186a6fba6531
sha512: d86fb5fae611609290f85027047f4b0acb4e7615d351191cadadecb213b60ad1c24bd6fd38a229611385f74f26022805553f27776f8cda52e0bc22d7915f8172
ssdeep: 1536:qpgpHzb9dZVX9fHMvG0D3XJ8++Rc2++RTTNyRU/zM4o:ogXdZt9P6D3XJ8x1TTN4CzMN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BA638D1362C69ABBD0944A7141BFD676E3B2AF90015A278337E93F3B3A311918F05387
sha3_384: 20a3a8cbb289fbac3849c5a5acd3da8ce8d52be4874a6f1e31ce4567bba0a01fdac60c8ff4abe0ff9f97771b9052cef8
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
FileDescription: 
FileVersion: 1.0.0.1
LegalCopyright: Copyright (C) 2018
OriginalFilename: foner.exe
ProductName: 
ProductVersion: 
Translation: 0x0000 0x04e4

Adware.Generic.1961583 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.Generic.1961583
FireEye	Adware.Generic.1961583
McAfee	Artemis!154A40A888A7
Cylance	Unsafe
Alibaba	AdWare:Win32/Runner.8b1fb788
Cybereason	malicious.888a72
Arcabit	Adware.Generic.D1DEE6F
Cyren	W32/Dotdo.D.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of NSIS/Adware.Runner.B
TrendMicro-HouseCall	TROJ_GEN.R03FC0PIR21
Kaspersky	HEUR:Trojan.Win32.Agent.gen
BitDefender	Adware.Generic.1961583
NANO-Antivirus	Trojan.Nsis.Dotdo.eyvfyx
Avast	NSIS:AdwareX-gen [Adw]
Tencent	Win32.Trojan.Agent.Dwjq
Ad-Aware	Adware.Generic.1961583
Sophos	Generic PUA MA (PUA)
Comodo	ApplicUnwnt@#84zf8tpbqx3p
TrendMicro	TROJ_GEN.R03FC0PIR21
McAfee-GW-Edition	BehavesLike.Win32.AdwareDotDo.km
Emsisoft	Adware.Generic.1961583 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1127437
MAX	malware (ai score=64)
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Adware.Generic.1961583
Cynet	Malicious (score: 99)
VBA32	Trojan.Agent
ALYac	Adware.Generic.1961583
Malwarebytes	Adware.DotDo.Generic
APEX	Malicious
Rising	Adware.Dotdo/NSIS!1.B0DB (CLASSIC)
Fortinet	NSIS/Agent.GU!tr
AVG	NSIS:AdwareX-gen [Adw]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Adware.Generic.1961583?

Adware.Generic.1961583 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X