Adware.Privitize removal tips

The Adware.Privitize is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Privitize virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Adware.Privitize?


File Info:
name: 4D5BDF906D4CF8DF3B01.mlw
path: /opt/CAPEv2/storage/binaries/1e4f6b3d43b2c198bcb0d97763f4e6e972289c2f6e901dc21675a6e9ca0fd2bd
crc32: 2A8CEDB1
md5: 4d5bdf906d4cf8df3b01c22681a9020a
sha1: 9d89747bfc70d8b9bea44f3ed5b7b28a538d5ee7
sha256: 1e4f6b3d43b2c198bcb0d97763f4e6e972289c2f6e901dc21675a6e9ca0fd2bd
sha512: 6cfcc764eb0dc3fee9278fec54e5ccfc15e4b3f945a77dd2c7f3960b413a815fb4c4d229bf646da67bd4642173402646b0084daa615828964ab42acb40364375
ssdeep: 3072:DFqmotgegZwrDNKzg3IKuKooRELmhQGSrKOn5drM0emHg9T5N:RqmzZZwvWQIKRiLESH5Lkn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DBD3080033F3AA30E9A7933A06EB7BED273DFB258BA169C753403A16C7709D45535A52
sha3_384: 1a7cf40eaad4540e62952d53a45c809d7206cc30705e98c7035cb664536133cb5f70ccb34368173b01b6d08b2633b064
ep_bytes: e8d3300000e97ffeffff558bec518d45
timestamp: 2015-08-28 11:51:43

Version Info:
CompanyName: InternetSecurity Inc
FileDescription: Amazing security tool
FileVersion: 1.0.0.8
InternalName: WIT
LegalCopyright: Copyright 2015 InternetSecurity Inc, All rights reserved.
OriginalFilename: WIT.exe
ProductName: WebInstaller
ProductVersion: 1.0.0.8
Translation: 0x0409 0x04b0

Adware.Privitize also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zusy.4!c
Cynet	Malicious (score: 99)
FireEye	Generic.mg.4d5bdf906d4cf8df
McAfee	GenericRXVY-VQ!4D5BDF906D4C
Cylance	unsafe
Zillya	Trojan.StartPage.Win32.41693
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004fb3b31 )
Alibaba	Trojan:Win32/StartPage.725521d6
K7GW	Trojan ( 004fb3b31 )
VirIT	Trojan.Win32.Startpage.XYT
Cyren	W32/Trojan.WLIO-3049
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/StartPage.AMR
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.452930
NANO-Antivirus	Trojan.Win32.StartPage.dwqznn
MicroWorld-eScan	Gen:Variant.Zusy.452930
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Startpage.ka
TACHYON	Trojan/W32.Agent.137728.TZ
Emsisoft	Gen:Variant.Zusy.452930 (B)
F-Secure	Heuristic.HEUR/AGEN.1306257
VIPRE	Gen:Variant.Zusy.452930
TrendMicro	TROJ_GEN.R053C0PEJ23
McAfee-GW-Edition	BehavesLike.Win32.Infected.ch
Trapmine	malicious.moderate.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	PUA.Techsnab
GData	Win32.Trojan.PSE.16UE6H5
Jiangmin	Trojan.Agent.enph
Avira	HEUR/AGEN.1306257
Antiy-AVL	Trojan/Win32.BTSGeneric
Arcabit	Trojan.Zusy.D6E942
ZoneAlarm	HEUR:Trojan.Win32.Agent.gen
Microsoft	PUA:Win32/Privitize
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5395059
BitDefenderTheta	Gen:NN.ZexaF.36250.iy0@a094xkbi
ALYac	Gen:Variant.Zusy.452930
MAX	malware (ai score=80)
VBA32	Adware.Privitize
Malwarebytes	Malware.AI.256852099
TrendMicro-HouseCall	TROJ_GEN.R053C0PEJ23
Rising	Trojan.StartPage!8.B (TFE:5:GYLIW9rJg3L)
Yandex	Trojan.GenAsa!O1dXp/Jssbo
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Wacatac.B!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Adware.Privitize?

Adware.Privitize removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X