Malware

AdWare.Win32.StartSurf.dodg removal tips

Malware Removal

The AdWare.Win32.StartSurf.dodg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.StartSurf.dodg virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Anomalous binary characteristics

Related domains:

make.campzephyr.host
create.guitarchange.site

How to determine AdWare.Win32.StartSurf.dodg?


File Info:

crc32: 7B904040
md5: 7e20684a8da4bb51875aeaae389b4e10
name: 7E20684A8DA4BB51875AEAAE389B4E10.mlw
sha1: f704c25cb4b47a1d6c7a582eae7b0271f3b980ad
sha256: 1dcda8432aa845070f4f01d0f6c63e43d3b459cd7d3d547cdc853894c0d1d6fb
sha512: 996e78ebc326f9d785ba588c2a61705e827f7749c0605d2c88812cb9044e08b5633f2df039964cfeabfacf42a5d5e5158f9afa44e6a65e6d0f3770a12ad93aa7
ssdeep: 24576:yLpY/+uSqA/aGx5pJK+3p/JrchYeFRojB6dnW2WvKO+fBN:FY5p3HmzWTmN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Zispoahs
InternalName: WAOHTIDEI.EXE
FileVersion: 1.3.4.0
CompanyName: xa9Zispoahs
ProductName: WAOHTIDEI
ProductVersion: 1.3.4.0
OriginalFilename: waohtidei.exe
Translation: 0x0409 0x04e4

AdWare.Win32.StartSurf.dodg also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005424571 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Heur.Mint.Zamg.1
CylanceUnsafe
ZillyaAdware.StartSurf.Win32.65309
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaAdWare:Win32/StartSurf.f90e9bfd
K7GWTrojan ( 005424571 )
Cybereasonmalicious.a8da4b
CyrenW32/Kryptik.DID.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GLRL
APEXMalicious
AvastWin32:Malware-gen
Kasperskynot-a-virus:AdWare.Win32.StartSurf.dodg
BitDefenderGen:Heur.Mint.Zamg.1
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
MicroWorld-eScanGen:Heur.Mint.Zamg.1
TencentMalware.Win32.Gencirc.114d49fa
Ad-AwareGen:Heur.Mint.Zamg.1
SophosIStartSurfInstaller (PUA)
ComodoApplication.Win32.Dlhelper.GL@81g4fd
BitDefenderThetaGen:NN.ZexaF.34266.Uw0@a4aKNfji
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.AutoRun.vz
FireEyeGeneric.mg.7e20684a8da4bb51
EmsisoftGen:Heur.Mint.Zamg.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.StartSurf.pks
AviraHEUR/AGEN.1125240
Antiy-AVLTrojan/Generic.ASMalwS.28B2961
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Heur.Mint.Zamg.1
Acronissuspicious
McAfeePacked-FKC!7E20684A8DA4
MAXmalware (ai score=99)
VBA32BScope.Adware.DownloadHelper
MalwarebytesMachineLearning/Anomalous.97%
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.B33C (CLASSIC)
YandexPUA.StartSurf!ldlCPXcb/Uw
IkarusPUA.Dlhelper
FortinetW32/Kryptik.GIST!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove AdWare.Win32.StartSurf.dodg?

AdWare.Win32.StartSurf.dodg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment