Malware

AdWare.Win32.StartSurf.cylh removal instruction

Malware Removal

The AdWare.Win32.StartSurf.cylh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.StartSurf.cylh virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

make.campzephyr.host
create.guitarchange.site

How to determine AdWare.Win32.StartSurf.cylh?


File Info:

crc32: 5D953182
md5: 6eedf7613f3c77cfceb5ffde20db36fd
name: 6EEDF7613F3C77CFCEB5FFDE20DB36FD.mlw
sha1: e5bb8e91253feb0a4eb968c58186d295c8a9fdd7
sha256: dfc62f2116ad3c8ae0e34af1dec57ceb59735e54a562b2a339d12a0e3d9346e3
sha512: 0115c2aa152c0ff57e232397aa700abdecab0b33a1da3f9aad1e54f439ffd2a71e757aebf1073c81a0aa89b784eae113bd35a92a890921c717105cb9391866ce
ssdeep: 24576:7oAzkOc7+Save6yCkDFwrPU7UydJa9ljEa+bNEV:7XzfcKjjkKQ7UyApEa+b6V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

AdWare.Win32.StartSurf.cylh also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0053d2701 )
Elasticmalicious (high confidence)
DrWebTrojan.Vittalia.17914
CAT-QuickHealSwbndlr.Dlhelper.V2
McAfeePacked-FKC!6EEDF7613F3C
CylanceUnsafe
ZillyaAdware.StartSurf.Win32.54643
SangforTrojan.Win32.Save.a
AlibabaAdWare:Win32/StartSurf.14b469be
K7GWTrojan ( 00538f291 )
Cybereasonmalicious.13f3c7
CyrenW32/Kryptik.DSV.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GJGK
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
Kasperskynot-a-virus:AdWare.Win32.StartSurf.cylh
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentMalware.Win32.Gencirc.114d39dc
Ad-AwareGen:Heur.Mint.Zamg.1
SophosIStartSurfInstaller (PUA)
BitDefenderThetaAI:Packer.5D6A0AA41F
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.6eedf7613f3c77cf
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen2
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.282454E
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Mint.Zamg.1
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.StartSurf.gen
GDataGen:Heur.Mint.Zamg.1
Acronissuspicious
VBA32BScope.Downloader.DownloadHelper
MAXmalware (ai score=98)
MalwarebytesAdware.IStartSurf
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
IkarusPUA.Dlhelper
FortinetW32/Kryptik.GIST!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove AdWare.Win32.StartSurf.cylh?

AdWare.Win32.StartSurf.cylh removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment