AdWare.Win32.Funshion information

The AdWare.Win32.Funshion is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.Win32.Funshion virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine AdWare.Win32.Funshion?


File Info:
name: 9DECCD2D687C0084DCB8.mlw
path: /opt/CAPEv2/storage/binaries/01e7bc029b88819e8044d7d7561046a54aeaaf854266b3eee4c969bd488db76b
crc32: CABA0FB7
md5: 9deccd2d687c0084dcb8a702a5144331
sha1: 62011749f38fdde64a4963d146cd2fdab93ef6f7
sha256: 01e7bc029b88819e8044d7d7561046a54aeaaf854266b3eee4c969bd488db76b
sha512: aa71a65915bd20709a17c25570fba7d3c503e2be15e2e026781082aa0a2e91ac2d256c2c53b1e452bfacfae792ffee471c44d65db1dd93989daa974e95521f7a
ssdeep: 98304:4NGIyHKogIcCyVoaa4cvKRTuznHWOxKNwspLhg:4SJavcveaWO0Nxpe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1940612603E8AC23AD3B60073CAF9972B3116B565172471C7AAD40F6CAE705D37E3671A
sha3_384: 7c462490f5855a42101df1ff52972fac7a6246de9a371bbcebe3822ea69af18235d96c043b6165eb65cba227f412ccc2
ep_bytes: e8adab0000e989feffff8bff558bec51
timestamp: 2019-12-24 05:52:46

Version Info:
0: [No Data]

AdWare.Win32.Funshion also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKD.46124820
FireEye	Generic.mg.9deccd2d687c0084
ALYac	Trojan.GenericKD.46124820
K7AntiVirus	Unwanted-Program ( 00587ece1 )
K7GW	Unwanted-Program ( 00587ece1 )
ESET-NOD32	a variant of Win32/Funshion.A potentially unwanted
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Funshion.gen
BitDefender	Trojan.GenericKD.46124820
NANO-Antivirus	Riskware.Win32.Funshion.exjpqz
Ad-Aware	Trojan.GenericKD.46124820
Sophos	Generic ML PUA (PUA)
Zillya	Adware.Funshion.Win32.77
TrendMicro	PUA_Funshion
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Emsisoft	Application.AdFun (A)
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASMalwS.31949E0
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Trojan.GenericKD.46124820
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.Funshion.R329036
McAfee	GenericRXAA-AA!9DECCD2D687C
VBA32	BScope.Adware.Funshion
Malwarebytes	Malware.AI.1900892956
APEX	Malicious
Rising	Trojan.Generic@ML.99 (RDMK:GAeIYPxjF9ggTfo4tAv+aw)
Yandex	Trojan.GenAsa!hubH6a0qBg4
eGambit	Unsafe.AI_Score_99%
Fortinet	Adware/Funshion.A
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove AdWare.Win32.Funshion?

AdWare.Win32.Funshion removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X