How to remove "Adware.KorAd"?

The Adware.KorAd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.KorAd virus can do?

Presents an Authenticode digital signature
Queries information on disks, possibly for anti-virtualization
Attempts to modify proxy settings
Attempts to modify browser security settings

Related domains:

z.whorecord.xyz

tpop.kpzip.com

tj.kpzip.com

a.tomx.xyz

hotnews.dftoutiao.com

How to determine Adware.KorAd?


File Info:
crc32: AAE328B7
md5: 991690a66ce7bf0498bc3c6ec29e80d6
name: tpopplus-3.exe
sha1: 3e40999c8a16afbd513ea78bc69dd18ef055f3dc
sha256: b9c30200ec192ecb681208c54faab7d174bb93e46801bcb46e62ea3a0fb37389
sha512: 558d52581e688a2864caf408f7acc7b70764c077ab91c1ccefff89da8a0ca9044de7f357a8a0aef218baf02c7429ae629948b811c9277da53b557e61f2430377
ssdeep: 24576:dn8Vd5V4Kq8saC7SS7XP99u23PJRKb2qgVCMl+DibU5yL66RL8:paZ8d7/bPiyqgVCMl+DibU0LfRw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2019
InternalName: TPopPlus
FileVersion: 1.0.0.9
CompanyName: TODO: 
ProductName: TPopPlus
ProductVersion: 1.0.0.9
FileDescription: TPopPlus
OriginalFilename: TPopPlus.exe
Translation: 0x0409 0x04b0

Adware.KorAd also known as:

DrWeb	Program.Kuaizip.6
MicroWorld-eScan	Trojan.GenericKD.42586592
FireEye	Trojan.GenericKD.42586592
ALYac	Trojan.GenericKD.42586592
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 0055caed1 )
BitDefender	Trojan.GenericKD.42586592
K7GW	Adware ( 0055caed1 )
Avast	Win32:UnwantedSig [PUP]
GData	Trojan.GenericKD.42586592
Kaspersky	not-a-virus:RiskTool.Win32.KuaiZip.brx
Alibaba	RiskWare:Win32/KuaiZip.84838a29
NANO-Antivirus	Riskware.Win32.Kuaizip.gqcdye
ViRobot	Adware.Kuaizip.1378840.D
Ad-Aware	Trojan.GenericKD.42586592
Sophos	Generic PUA DO (PUA)
Zillya	Tool.KuaiZip.Win32.1
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.42586592 (B)
Ikarus	AdWare.KuziTui
Jiangmin	RiskTool.KuaiZip.go
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D289D1E0
ZoneAlarm	not-a-virus:RiskTool.Win32.KuaiZip.brx
Microsoft	PUA:Win32/KuaiZip
AhnLab-V3	PUP/Win32.RL_Generic.R292165
McAfee	GenericRXAA-AA!991690A66CE7
MAX	malware (ai score=85)
VBA32	BScope.Adware.Burden
Malwarebytes	Adware.KorAd
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/KuaiZip.U potentially unwanted
Rising	Trojan.Ludicrouz!8.FB9A (CLOUD)
Yandex	Riskware.KuaiZip!
Fortinet	PossibleThreat.MU
AVG	FileRepMalware [PUP]

How to remove Adware.KorAd?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Adware.KorAd”?