Malware

AdWare.Win32.StartSurf.cabb information

Malware Removal

The AdWare.Win32.StartSurf.cabb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.StartSurf.cabb virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
bin.memoryson.bid
alt.zincbutter.download

How to determine AdWare.Win32.StartSurf.cabb?


File Info:

crc32: 4C8AD7AE
md5: e791e4809693bce070f96f57fef22b22
name: E791E4809693BCE070F96F57FEF22B22.mlw
sha1: 74a23f033766f65ea36afdadf3f7f143bf271a05
sha256: 5f3c074c3d2ea9730fd47df85f94eb65e833fe8d91372443968e2cf7bc038ce9
sha512: 6c58ce9478ee80784baeba62ffb361ae274371733ad29fa0c8e5a27255ce2562cb1307a7642ddfbf73be229577316e31f321708aa3e1253a35d577123e36763d
ssdeep: 24576:T4avPgmPW3EEiYJgFvF2x21ZuNFh1k1rxCHa0y9K4bQFPEMBanhX9:T1UovFC1km6jeEjnhN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Lawteisl erlemareeh lomoi
InternalName: ITSILOUD.EXE
FileVersion: 3.2.3.2
CompanyName: xa9Lawteisl erlemareeh lomoi
ProductName: ITSILOUD
ProductVersion: 3.2.3.2
OriginalFilename: itsiloud.exe
Translation: 0x0409 0x04e4

AdWare.Win32.StartSurf.cabb also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053ba2f1 )
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CynetMalicious (score: 100)
ALYacApplication.Bundler.iStartSurf.1.Gen
CylanceUnsafe
ZillyaTool.Bundler.Win32.20280
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaAdWare:Win32/StartSurf.97c083ba
K7GWTrojan ( 0053ba2f1 )
Cybereasonmalicious.09693b
CyrenW32/Kryptik.CVO.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJAJ
APEXMalicious
AvastFileRepMalware
Kasperskynot-a-virus:AdWare.Win32.StartSurf.cabb
BitDefenderApplication.Bundler.iStartSurf.1.Gen
NANO-AntivirusRiskware.Win32.StartSurf.fhqbyt
MicroWorld-eScanApplication.Bundler.iStartSurf.1.Gen
TencentMalware.Win32.Gencirc.10cc5a53
Ad-AwareApplication.Bundler.iStartSurf.1.Gen
SophosMal/EncPk-AOA
ComodoApplication.Win32.Dlhelper.GJ@8137f9
BitDefenderThetaGen:NN.ZexaF.34266.@s0@aK3vhkmi
McAfee-GW-EditionBehavesLike.Win32.Rootkit.vz
FireEyeGeneric.mg.e791e4809693bce0
EmsisoftApplication.Bundler.iStartSurf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.fyq
AviraTR/Crypt.XPACK.Gen4
eGambitUnsafe.AI_Score_93%
Antiy-AVLTrojan/Generic.ASMalwS.27D9564
MicrosoftTrojan:Win32/Occamy.C
ArcabitApplication.Bundler.iStartSurf.1.Gen
GDataApplication.Bundler.iStartSurf.1.Gen
AhnLab-V3PUP/Win32.DlHelper.R235406
Acronissuspicious
McAfeePacked-FKC!E791E4809693
MAXmalware (ai score=100)
VBA32BScope.Adware.DownloadHelper
MalwarebytesAdware.DLAssistant.Generic
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexTrojan.GenAsa!eUVikaO0whM
IkarusPUA.Dlhelper
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CFAU!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove AdWare.Win32.StartSurf.cabb?

AdWare.Win32.StartSurf.cabb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment