Malware

AdWare.Win32.OpenCandy.kw removal

Malware Removal

The AdWare.Win32.OpenCandy.kw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.OpenCandy.kw virus can do?

  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine AdWare.Win32.OpenCandy.kw?


File Info:

crc32: F07E72A6
md5: bea551a08165b3c34c9448420780963c
name: darkwave-studio-3.7.6.exe
sha1: adab9c806cf691d15ca54091eeb64973aff2b386
sha256: 17d4b4135f2aaf7bb962d88a637972877074815da8e37e104f1d76aedb99116e
sha512: 1aca454d8f093761d6a272763d6b8c653efeec7cee91404529467876838d616f562efe969f3ebeaea31e750137249eaa7f37861b2916224168bc0b35652a087c
ssdeep: 49152:GlpN481x40uvwxl0zU2k5S1JaKE1hof2dOmzgl9AQNFqjpegRo0EKnUuF:GHdug2kYaKEA2dOmUAWAjLRocUA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

AdWare.Win32.OpenCandy.kw also known as:

K7AntiVirusUnwanted-Program ( 0040fa551 )
K7GWUnwanted-Program ( 0040fa551 )
ArcabitPUP.Adware.OpenCandy
TrendMicroADW_OPENCANDY
NANO-AntivirusRiskware.Win32.OpenCandy.emlxxt
F-ProtW32/OpenCandy.E
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallADW_OPENCANDY
Paloaltogeneric.ml
GDataWin32.Application.OpenCandy.O
Kasperskynot-a-virus:AdWare.Win32.OpenCandy.kw
AegisLabTrojan.Win32.Generic.4!c
EmsisoftApplication.AdInstall (A)
DrWebAdware.OpenCandy.128
CyrenW32/Adware.EMSZ-6921
AviraPUA/OpenCandy.Gen
Antiy-AVLGrayWare[AdWare]/Win32.OpenCandy.a
MicrosoftPUA:Win32/CandyOpen
Endgamemalicious (moderate confidence)
ZoneAlarmnot-a-virus:AdWare.Win32.OpenCandy.kw
VBA32AdWare.OpenCandy
MalwarebytesPUP.Optional.OpenCandy
ESET-NOD32Win32/OpenCandy potentially unsafe
RisingMalware.Undefined!8.C (CLOUD)
FortinetAdware/OpenCandy
AVGWin32:OpenCandy-D [PUP]
AvastWin32:OpenCandy-D [PUP]

How to remove AdWare.Win32.OpenCandy.kw?

AdWare.Win32.OpenCandy.kw removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment