AdWare.SearchAssistant removal tips

The AdWare.SearchAssistant is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.SearchAssistant virus can do?

Authenticode signature is invalid

How to determine AdWare.SearchAssistant?


File Info:
name: 1C1B360ABECC13E93D71.mlw
path: /opt/CAPEv2/storage/binaries/3733e4470090ef31aa2182e5a892359852c22a9e383caf5a69e02d9973650fc6
crc32: D5B639CF
md5: 1c1b360abecc13e93d7148ee63c036ed
sha1: 824a6ae8c00d06b84e4a776ef2a6326d5050f9aa
sha256: 3733e4470090ef31aa2182e5a892359852c22a9e383caf5a69e02d9973650fc6
sha512: ac81f6a546ba9161a5f1cfdadd811f34b84f55b73ed9fd148e5c11f7a3903b003bb53836b491da03a6b81b44bae06bfec04cfa02bce7deca650fe7507e646e8c
ssdeep: 12288:GeuZP8f9FgD02sUsvaU29otxMjrjwMjrjbkjrjPDN:GeuZ0fDg+UsyUb7N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7B4D75DA3B2ECBFC041DC324BA5DB0D33A9AA91771CE78F9361662959705D336BA300
sha3_384: 259f1bc26ef20fffb58c951bc9acc19097a485b6ebf6d71abcf763c14df4c1b18f677adbe6a34d5d785c977f4ccbf390
ep_bytes: 6a6068c8fa4300e8b1110000bf940000
timestamp: 2005-03-25 13:58:25

Version Info:
CompanyName: WinSoftware, Ltd.
FileDescription: WinFirewall 2005 Trial Setup Wizard
FileVersion: 2.0.63.6
InternalName: installer.exe
LegalCopyright: (c) WinSoftware, Ltd.  All rights reserved.
OriginalFilename: WinFirewall2005TrialSetup.exe
ProductName: WinFirewall 2005 Trial Setup Wizard
ProductVersion: 2.0.63.6
Translation: 0x0409 0x04e4

AdWare.SearchAssistant also known as:

Lionic	Riskware.Win32.RqBYv.1!c
FireEye	Gen:Adware.Heur.Gq0@RqBYv3oi
McAfee	FakeAV-EJ
Zillya	Adware.SearchAssistant.Win32.45
Sangfor	Adware.Win32.Heur.Gq0@RqBYv3oi
Alibaba	Trojan:Win32/Siscos.30b4a801
Cybereason	malicious.abecc1
Symantec	WinFixer
BitDefender	Gen:Adware.Heur.Gq0@RqBYv3oi
ViRobot	Adware.Searchassistant.535304
MicroWorld-eScan	Gen:Adware.Heur.Gq0@RqBYv3oi
Tencent	Malware.Win32.Gencirc.10caceef
Ad-Aware	Gen:Adware.Heur.Gq0@RqBYv3oi
Emsisoft	Gen:Adware.Heur.Gq0@RqBYv3oi (B)
McAfee-GW-Edition	FakeAV-EJ
Sophos	Generic PUA IC (PUA)
Ikarus	Trojan.Win32.Siscos
GData	Gen:Adware.Heur.Gq0@RqBYv3oi
Antiy-AVL	GrayWare/Win32.Presenoker
Arcabit	Adware.Heur.E6A75E
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win32.RL_Generic.R286276
ALYac	Gen:Adware.Heur.Gq0@RqBYv3oi
MAX	malware (ai score=60)
VBA32	AdWare.SearchAssistant
TrendMicro-HouseCall	TROJ_GEN.R002H06GQ21
Fortinet	Riskware/FakeAV
Panda	Trj/CI.A

How to remove AdWare.SearchAssistant?

AdWare.SearchAssistant removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X