Malware

Should I remove “AdWare.Win32.StartSurf.byqf”?

Malware Removal

The AdWare.Win32.StartSurf.byqf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.StartSurf.byqf virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
all.fingersleep.bid
none.coalrate.men

How to determine AdWare.Win32.StartSurf.byqf?


File Info:

crc32: 1D716B94
md5: 13aee6412a86e74016eec7567dba3c93
name: 13AEE6412A86E74016EEC7567DBA3C93.mlw
sha1: 9da89f7785520d385f3b25ec0a842c2ca965b428
sha256: 1a28dc9b53068a8954591247f7dfeba364d67bc0381a352fd77ecaadc619efef
sha512: c2877e9c383622298c2ab3229831986848c20773e18c99c52027aa45452af57b432f59335669a792908e09c95b250f77e594bdb25327f4522b5d9ca6cd6d2fc9
ssdeep: 24576:Yq8hKquqpt1QbJ+VW3I7Ys2Sm6qamUAxQhPA7mhT2my6qNE:DXquqptabWNw6l6s66qNE
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

AdWare.Win32.StartSurf.byqf also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053ba2f1 )
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CynetMalicious (score: 100)
ALYacApplication.Bundler.iStartSurf.1.Gen
CylanceUnsafe
ZillyaTool.Bundler.Win32.20376
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/StartSurf.f47a8312
K7GWTrojan ( 0053ba2f1 )
Cybereasonmalicious.12a86e
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJAJ
APEXMalicious
AvastFileRepMalware
Kasperskynot-a-virus:AdWare.Win32.StartSurf.byqf
BitDefenderApplication.Bundler.iStartSurf.1.Gen
NANO-AntivirusTrojan.Win32.Kryptik.fgutms
MicroWorld-eScanApplication.Bundler.iStartSurf.1.Gen
TencentWin32.Adware.Startsurf.Dxxe
Ad-AwareApplication.Bundler.iStartSurf.1.Gen
SophosMal/Generic-R + Mal/EncPk-AOA
ComodoApplication.Win32.Dlhelper.GJ@8137f9
BitDefenderThetaGen:NN.ZexaCO.34236.SrW@a0h5ard
McAfee-GW-EditionBehavesLike.Win32.Dropper.tt
FireEyeGeneric.mg.13aee6412a86e740
EmsisoftApplication.Bundler.iStartSurf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.Generic.pioo
Antiy-AVLTrojan/Generic.ASMalwS.27BE1F0
MicrosoftTrojan:Win32/Occamy.C
GDataApplication.Bundler.iStartSurf.1.Gen
Acronissuspicious
McAfeePacked-FKC!13AEE6412A86
MAXmalware (ai score=100)
VBA32BScope.Adware.DownloadHelper
MalwarebytesAdware.DLAssistant.Generic
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexTrojan.GenAsa!E+Zay64QIyk
IkarusPUA.Win32.Prepscram
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CFOO!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove AdWare.Win32.StartSurf.byqf?

AdWare.Win32.StartSurf.byqf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment