About “AdWare.Win32.4Shared” infection

The AdWare.Win32.4Shared is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.Win32.4Shared virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine AdWare.Win32.4Shared?


File Info:
name: C40343BF022D0BC914A0.mlw
path: /opt/CAPEv2/storage/binaries/3a0842e891df30d0e1cc4414ccffea557b39ea47ee191ee4bf136266c521b0e5
crc32: 61AC6C8C
md5: c40343bf022d0bc914a0b2ef998dfab8
sha1: cf9e2844f7e24b05da4ce438602c576259ab3047
sha256: 3a0842e891df30d0e1cc4414ccffea557b39ea47ee191ee4bf136266c521b0e5
sha512: 350f459bc9874b262dcdbf7e3e778eb98f418a9c719e3f251acb1ae2925801c81a6d0a5e12bda4ea3d87ed4e05396cabafcf1757239ff36513deacbc6fd5aead
ssdeep: 6144:wzfnKZCVOSTOaN8aMH3kdTqLWurLqmwlXsXwhV8NmsZ3xTk7rQQYUVBU:2ACt6aNfMUhXvz6wV8UcpEQQYx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18D842334F5D3AAE3C98B02B21121B736DF3BEE04066F999F47414F6EA8601D2DA65707
sha3_384: d0f79f51347a18e8c84d0fca4b97f3c7ea103cb72b3bdb84887fa53ac2bac7289e4493e63524445c7291a07ea7b43f2e
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:35

Version Info:
0: [No Data]

AdWare.Win32.4Shared also known as:

Lionic	Trojan.Win64.Adload.mBnp
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.95639
FireEye	Trojan.GenericKDZ.95639
ALYac	Trojan.GenericKDZ.95639
Zillya	Adware.Vopak.Win32.8110
Alibaba	Malware:Win32/km_2c3f38.None
Cybereason	malicious.4f7e24
Symantec	Trojan.Gen.MBT
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.4Shared.gen
BitDefender	Trojan.GenericKDZ.95639
SUPERAntiSpyware	PUP.ConvertAd/Variant
Avast	Other:Malware-gen [Trj]
Emsisoft	Trojan.GenericKDZ.95639 (B)
DrWeb	Trojan.DownLoader27.1024
VIPRE	Trojan.GenericKDZ.95639
McAfee-GW-Edition	BehavesLike.Win32.AdwareOutBrowse.fc
Sophos	Generic Reputation PUA (PUA)
GData	Trojan.GenericKDZ.95639
Arcabit	Trojan.Generic.D17597
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.4Shared.gen
MAX	malware (ai score=86)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CLB22
SentinelOne	Static AI – Malicious PE
Fortinet	W32/PossibleThreat
AVG	Other:Malware-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (W)

How to remove AdWare.Win32.4Shared?

AdWare.Win32.4Shared removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X