Malware

How to remove “AdWare.Win32.Gator.fg”?

Malware Removal

The AdWare.Win32.Gator.fg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.Gator.fg virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine AdWare.Win32.Gator.fg?


File Info:

crc32: DBB8A873
md5: 1af5bd7e393773acab618a7244c205d0
name: 1AF5BD7E393773ACAB618A7244C205D0.mlw
sha1: 9f521ad10820ca63ba899f68f3ada1699dea61ff
sha256: 2ee47b4bf98e03a92848b3ffe111a1efcf5b19a700a72066a080b3f37180b2a1
sha512: fd1fb8ca3ac124007ea32e9a865cbbef2bc98b905aa7a02e32f08b4357000042cb2003e5ea2b08516e86b7b4526b04a7bd1c21e1d7b24bbcf07c2e7bd9bcaa39
ssdeep: 6144:xbKif9ZjWcmUUa2jn2FLjzbcwfSZ4sX9zQI6F4:BhFZMhjnWjzwwmEI6i
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

ProductVersion: 5.1.0.0
FileVersion: 5.1.0.0
OriginalFilename: divxenc.exe
FileDescription:
Translation: 0x0409 0x04e4

AdWare.Win32.Gator.fg also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Adware.Heur.oq2@R0w1JZoi
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 004f82371 )
BitDefenderGen:Adware.Heur.oq2@R0w1JZoi
K7GWAdware ( 004f82371 )
Cybereasonmalicious.e39377
TrendMicroTROJ_GEN.R002C0PKH20
BaiduWin32.Adware.Agent.n
CyrenW32/S-f017212c!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Trojan.Generic-6221838-0
Kasperskynot-a-virus:AdWare.Win32.Gator.fg
AlibabaTrojan:Win32/runner.ali1000044
AegisLabAdware.Win32.Gator.2!c
AvastWin32:Adware-DNA [Adw]
Ad-AwareGen:Adware.Heur.oq2@R0w1JZoi
SophosGeneric PUA JP (PUA)
ComodoApplicUnwnt@#f7scfnajle0m
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebAdware.Gator.origin
InvinceaGeneric PUA JP (PUA)
McAfee-GW-EditionBehavesLike.Win32.PUPXAX.dm
FireEyeGeneric.mg.1af5bd7e393773ac
EmsisoftGen:Adware.Heur.oq2@R0w1JZoi (B)
IkarusPUA.Gator.Trickler
JiangminAdware/Gator
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_99%
MAXmalware (ai score=62)
Antiy-AVLGrayWare[AdWare]/Win32.Gator.a
MicrosoftTrojan:Win32/EmotetCrypt!ml
GridinsoftAdware.Win32.Agent.oa
ArcabitAdware.Heur.EAA6F1
ZoneAlarmnot-a-virus:AdWare.Win32.Gator.fg
GDataGen:Adware.Heur.oq2@R0w1JZoi
CynetMalicious (score: 100)
AhnLab-V3Adware/Win32.Gator.R228418
Acronissuspicious
McAfeeAdware-GAIN
VBA32BScope.Adware.Gator
MalwarebytesAdware.Gator
ESET-NOD32a variant of Win32/Adware.Gator.Trickler.I
TrendMicro-HouseCallTROJ_GEN.R002C0PKH20
RisingAdware.Gator-Trickler!1.A7ED (CLASSIC)
YandexTrojan.GenAsa!pLIck0qZYxY
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Gator
BitDefenderThetaGen:NN.ZexaF.34634.oq2@a0w1JZoi
AVGWin32:Adware-DNA [Adw]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Generic/HEUR/QVM19.1.5857.Malware.Gen

How to remove AdWare.Win32.Gator.fg?

AdWare.Win32.Gator.fg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment