Adware

Should I remove “Adware.Terkcop.32 (B)”?

Malware Removal

The Adware.Terkcop.32 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Terkcop.32 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Behavior consistent with a dropper attempting to download the next stage.
  • Network activity contains more than one unique useragent.
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

ringmynorth.biz
allmodel-pro.com
center-ring.info
get-multiple.link

How to determine Adware.Terkcop.32 (B)?


File Info:

crc32: A23E7D35
md5: bd5d5cd67b568a4cbcd8f0a5e1634a23
name: setup.exe
sha1: 45a7a0af7ef90d39da93d75c80fc9c5392bd0d75
sha256: 64edc7923a4067f042d025e223bfe18470cf8d1c54bc50b6696b3bc732433793
sha512: fa5c6113dff1596a7d818a21c2907ba2d681cdc18f60925fa52659c4ee5dcf45fc7e993ae16ea3cda037baee482763d6a451673371fe1bc1d06aec8365503ba7
ssdeep: 3072:hhyPMvGX2gPbH1WPZBeDjR4eZVOnlIZIeEiXbHbTMjTyI2YhtRvcOX6gle2CCBHA:h+Mu7k3E5LOeZ3EiXb7TMjIevNFA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Adware.Terkcop.32 (B) also known as:

MicroWorld-eScanGen:Variant.Adware.Terkcop.32
FireEyeGeneric.mg.bd5d5cd67b568a4c
CAT-QuickHealAdware.Installerex.A8
Qihoo-360HEUR/QVM10.1.CABB.Malware.Gen
McAfeeMultiPlug
CylanceUnsafe
ZillyaAdware.MultiPlug.Win32.354204
SangforMalware
K7AntiVirusUnwanted-Program ( 004c84181 )
BitDefenderGen:Variant.Adware.Terkcop.32
K7GWUnwanted-Program ( 004c84181 )
CrowdStrikewin/malicious_confidence_100% (D)
Invinceaheuristic
BaiduWin32.Adware.Generic.bb
F-ProtW32/S-8fec2e29!Eldorado
SymantecSMG.Heur!gen
APEXMalicious
AvastWin32:MultiPlug-ABB [PUP]
ClamAVWin.Adware.Agent-1305768
GDataWin32.Trojan-Spy.Emotet.DR@gen
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.WebPick.dtnytb
RisingAdWare.Win32.MultiPlug.aq (CLASSIC)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Adware.Terkcop.32 (B)
ComodoApplication.Win32.MultiPlug.HE@5su97b
F-SecureTrojan.TR/ATRAPS.Gen
VIPREMultiPlug (v)
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.dh
Trapminemalicious.high.ml.score
SophosMultiPlug (PUA)
IkarusTrojan.Win32.Crypt
CyrenW32/S-8fec2e29!Eldorado
JiangminTrojanDownloader.Agent.ezpz
WebrootPua.Downloadmanager
AviraTR/ATRAPS.Gen
MAXmalware (ai score=67)
Antiy-AVLTrojan[Downloader]/Win32.Agent.hfxr
MicrosoftBrowserModifier:Win32/Diplugem
ArcabitTrojan.Adware.Terkcop.32
SUPERAntiSpywarePUP.MultiPlug/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.MultiPlug.R156322
Acronissuspicious
VBA32BScope.Trojan.Crossrider
ALYacGen:Variant.Adware.Terkcop.32
Ad-AwareGen:Variant.Adware.Terkcop.32
MalwarebytesPUP.Optional.MultiPlug
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Adware.MultiPlug.MZ
TencentMalware.Win32.Gencirc.10b0fa91
YandexPUA.MultiPlug!
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Generic.AC.1AC122!tr
BitDefenderThetaGen:NN.ZexaF.34128.pyY@ayobOzhi
AVGWin32:MultiPlug-ABB [PUP]
Cybereasonmalicious.67b568
MaxSecureAdware.MultiPlug.OFDZ

How to remove Adware.Terkcop.32 (B)?

Adware.Terkcop.32 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment