Malware

How to remove “AdWare.Win32.StartSurf.btmk”?

Malware Removal

The AdWare.Win32.StartSurf.btmk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.StartSurf.btmk virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
all.fingersleep.bid
none.coalrate.men

How to determine AdWare.Win32.StartSurf.btmk?


File Info:

crc32: 3CDCFE12
md5: c9a4ae73099668dd602a5fc32068d63c
name: C9A4AE73099668DD602A5FC32068D63C.mlw
sha1: 181cc4dfdc2001159357faa2d8976ad0e3d3dae9
sha256: 1dbe76ec83c3149b8d78cd45dce0cd1820ca468f74c78db7ad25d85d6bcd9a3e
sha512: f7298df70c30817f636f250f1b77ffea1833055be21decd972133f0ed90cad6a965bf46e0c45bb44d73858875ea196016bb977287d493ca84a6fc3d55cda0644
ssdeep: 24576:PG1swSsvF3I0MateG/hLho7AoHOYrbWh9UGpNe1aRUP+d0:PG1s/OICbty7Ao0Ta+0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

AdWare.Win32.StartSurf.btmk also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053ba2f1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CynetMalicious (score: 100)
ALYacApplication.Bundler.iStartSurf.1.Gen
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.133601
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/StartSurf.a50be80f
K7GWTrojan ( 0053ba2f1 )
Cybereasonmalicious.309966
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GIYH
APEXMalicious
AvastFileRepMalware
Kasperskynot-a-virus:AdWare.Win32.StartSurf.btmk
BitDefenderApplication.Bundler.iStartSurf.1.Gen
NANO-AntivirusTrojan.Win32.Kryptik.fgdasn
MicroWorld-eScanApplication.Bundler.iStartSurf.1.Gen
TencentMalware.Win32.Gencirc.114d01c7
Ad-AwareApplication.Bundler.iStartSurf.1.Gen
SophosMal/Generic-S + Mal/EncPk-AOA
ComodoApplication.Win32.Dlhelper.GJ@8137f9
BitDefenderThetaGen:NN.ZexaF.34266.BsW@aqfbgMdi
McAfee-GW-EditionBehavesLike.Win32.Generic.vz
FireEyeGeneric.mg.c9a4ae73099668dd
EmsisoftApplication.Bundler.iStartSurf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen4
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.272314F
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataApplication.Bundler.iStartSurf.1.Gen
Acronissuspicious
McAfeePacked-FKC!C9A4AE730996
MAXmalware (ai score=77)
VBA32Trojan.Vittalia
MalwarebytesMachineLearning/Anomalous.95%
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexPUA.StartSurf!vDZw4W8bpbs
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CFAU!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove AdWare.Win32.StartSurf.btmk?

AdWare.Win32.StartSurf.btmk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment