Adware

What is “Adware.SearchProTools”?

Malware Removal

The Adware.SearchProTools is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Adware.SearchProTools virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Collects information about installed applications
  • Checks the CPU name from registry, possibly for anti-virtualization

How to determine Adware.SearchProTools?



File Info:

name: 10C831C797400E5739EC.mlw
path: /opt/CAPEv2/storage/binaries/3dbd1293cd4a2e71dd6ead7492bbb87937c1ebe6a10bb8d7b910a235518c8349
crc32: A2C6979E
md5: 10c831c797400e5739ec2191feedfb6f
sha1: af5ed35c53182ad9ef2f374c65ae7ba5628ebeef
sha256: 3dbd1293cd4a2e71dd6ead7492bbb87937c1ebe6a10bb8d7b910a235518c8349
sha512: a1fbd95b15abc66cae5fa57598908a69fca2f8346f4f5f62f0bacebe55cb4c47c7307f4c2e02753869172fa6e636ea1af56e4c6fed1f45f194bec500e1be50a1
ssdeep: 49152:iHynZ3laotkRZQS+LIOln8/HaX7HfUbNNptDVONdiTWTwda/ul+R6+wM6bi7NJ:Gi3lJz58/HaIbNcG+RJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T125564923E644543AD66E0B36B83B9970183B7E316E358F5F3EAC39084FF72416926647
sha3_384: 466fa5549a94abfe0b5fe3647d882268378318ed86d0e98aa5c83d1db0ea64c5cd62c22d823a93a66df235219e3fb46e
ep_bytes: 558bec83c4f0b87c497d00e830b1c2ff
timestamp: 2019-09-12 20:28:18


Version Info:

CompanyName: US Media Capital
FileDescription: Search Tools
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Adware.SearchProTools also known as:

LionicAdware.Win32.MediaCapital.2!c
DrWebAdware.Searcher.3336
MicroWorld-eScanGen:Variant.Application.Agent.90
FireEyeGen:Variant.Application.Agent.90
McAfeePUP-XMD-VE
MalwarebytesAdware.SearchProTools
SangforAdware.Win32.MediaCapital.gen
AlibabaAdWare:Win32/MediaCapital.28d57626
BitDefenderThetaGen:NN.ZelphiF.34294.@V0@aeMqbHdO
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0PJT21
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:AdWare.Win32.MediaCapital.gen
BitDefenderGen:Variant.Application.Agent.90
Ad-AwareGen:Variant.Application.Agent.90
SophosGeneric PUA KP (PUA)
TrendMicroTROJ_GEN.R002C0PJT21
McAfee-GW-EditionPUP-XMD-VE
EmsisoftGen:Variant.Application.Agent.90 (B)
GDataGen:Variant.Application.Agent.90
JiangminAdWare.MediaCapital.a
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1144313
MAXmalware (ai score=70)
Antiy-AVLTrojan/Generic.ASMalwS.2C52FD3
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
VBA32TScope.Trojan.Delf
ALYacGen:Variant.Application.Agent.90
APEXMalicious
YandexPUA.MediaCapital!TwHvCRgtED0
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Adware.SearchProTools?

Adware.SearchProTools removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment