Adware

Adware.Sciagnij (file analysis)

Malware Removal

The Adware.Sciagnij is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Sciagnij virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
serwisy.gazeta.pl

How to determine Adware.Sciagnij?


File Info:

crc32: 9CD3E8D6
md5: 2fc0851067fe74b772bc2dc460983a7c
name: 2FC0851067FE74B772BC2DC460983A7C.mlw
sha1: 7629069bf66c33e3bc8b45b80f65586f908c9108
sha256: dbf8601cda8244048ab5b8a8101906a9d4b0f97cce2309f3ab256ee88321cac9
sha512: 3e208050761cab33b8daa308443435783af212a1de1100bc61599aa8cf3523c24e7686ae6d895f755f241e3a356c9cbc2a5631e1e275cd71cb6bcff3fcde6a4a
ssdeep: 49152:Jde6qQeDzB2V7LIbudZsceuu2A7R4rc2mQ1Axgc+ZwS:mVQlLIbiZTQPd4r7egc6
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Adware.Sciagnij also known as:

MicroWorld-eScanTrojan.GenericKD.45661876
FireEyeGeneric.mg.2fc0851067fe74b7
ZillyaAdware.BrowseFox.Win32.244996
SUPERAntiSpywareTrojan.Agent/Gen-Multi
SangforMalware
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/A-50f321ee!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastFileRepMetagen [Adw]
BitDefenderTrojan.GenericKD.45661876
NANO-AntivirusTrojan.Win32.Sciagnij.eoatyd
Paloaltogeneric.ml
AegisLabTrojan.Multi.Generic.mgrw
Ad-AwareTrojan.GenericKD.45661876
EmsisoftApplication.Downloader (A)
DrWebAdware.Downware.14151
VIPRETrojan.Win32.Generic!BT
TrendMicroHT_SCIAGNIJ_GH0105D7.UVPM
McAfee-GW-EditionBehavesLike.Win32.PUP.vc
SophosGeneric PUA HG (PUA)
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKD.45661876
JiangminDownloader.Sciagnij.k
AviraPUA/Sciagnij.Gen
Antiy-AVLTrojan/Win32.TSGeneric
ArcabitTrojan.Generic.D2B8BEB4
ViRobotAdware.Sciagnij.2205696.IM
MicrosoftTrojan:Win32/Bitrep.B
CynetMalicious (score: 90)
AhnLab-V3PUP/Win32.Sciagnij.R175467
McAfeeArtemis!2FC0851067FE
MAXmalware (ai score=86)
VBA32Downloader.Sciagnij
MalwarebytesAdware.Sciagnij
ESET-NOD32a variant of Win32/Sciagnij.A potentially unwanted
TrendMicro-HouseCallHT_SCIAGNIJ_GH0105D7.UVPM
YandexTrojan.GenAsa!TJgTLC51XAo
IkarusPUA.Sciagnij
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Sciagnij
AVGFileRepMetagen [Adw]
Cybereasonmalicious.bf66c3
Qihoo-360HEUR/QVM11.1.0000.Malware.Gen

How to remove Adware.Sciagnij?

Adware.Sciagnij removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment