Adware

Adware.Hypnosis malicious file

Malware Removal

The Adware.Hypnosis is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Hypnosis virus can do?

  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Reads data out of its own binary image
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

p2paccelerators.com
bi.bisrv.com
d27foqb3kkzkt9.cloudfront.net

How to determine Adware.Hypnosis?


File Info:

crc32: 3999497E
md5: ea5916c8a2e4b39cca1d04b5b07fa6f6
name: utorrent-acceleration-tool-free.exe
sha1: 9d514d339ebb97b4f7ed00b4aee738469647f87a
sha256: 5e988191a9e81213d1bb97afc8e215b1fb6d8d0e2f27cece0de593a771ece135
sha512: cb1485adfa7c0692eeaf18c2f7703e00c5d61fca0a20bf8de89ac8c79fedb77d2ce0d2419cbaa426acb8d64272a9067b11f38298958305feb9295b1daf6291d8
ssdeep: 49152:f/1vz/npIMgBD4vmyastLk8INGjjvofnF/E54oTx7NBJxXL+gD:f9LfpRgGvTasTjkfnFSPxLbH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xfffd P2pAccelerators LLC
ProductName: uTorrent Acceleration Tool
FileDescription: uTorrent Acceleration Tool
FileVersion: 4.7.0.0
CompanyName: P2pAccelerators LLC
Translation: 0x0409 0x0000

Adware.Hypnosis also known as:

CylanceUnsafe
ZillyaAdware.AdLoadCRT.Win32.925
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:Downloader.Win32.Agent.ecmu
AlibabaDownloader:Win32/Agent.232ce35b
NANO-AntivirusTrojan.Win32.Agent.eaytvr
ViRobotAdware.Agent.2056840
Endgamemalicious (high confidence)
SophosGeneric PUA JN (PUA)
DrWebProgram.Unwanted.362
VIPRETrojan-Downloader.Win32.Agent
Invinceaheuristic
McAfee-GW-EditionArtemis
EmsisoftApplication.AdLoad (A)
WebrootPua.Downloadmanager
SUPERAntiSpywarePUP.DownWare/Variant
AhnLab-V3Win-PUP/Adload
ZoneAlarmnot-a-virus:Downloader.Win32.Agent.ecmu
ESET-NOD32Win32/DownWare.L potentially unwanted
McAfeeArtemis!EA5916C8A2E4
MAXmalware (ai score=100)
MalwarebytesAdware.Hypnosis
YandexPUA.Downloader!
FortinetRiskware/Agent
AVGFileRepMetagen [PUP]
Qihoo-360Win32/Virus.Downloader.2f0

How to remove Adware.Hypnosis?

Adware.Hypnosis removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment