Adware.WinYahoo removal tips

Malware Removal

The Adware.WinYahoo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Adware.WinYahoo virus can do?

  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Adware.WinYahoo?


File Info:

crc32: B0E62712
md5: 5f5ba621ca7eab28f36738038d6262c4
name: 5F5BA621CA7EAB28F36738038D6262C4.mlw
sha1: 99279f1bdf2104274a6a2d985447aea6675ec700
sha256: 15a07b4031537470beaa1fef5d0ec81f0c57d3bd99147cddf07076c26e796e1f
sha512: 18e1471603738cf98fe024ddb24ca3d3605119f9ce593e336abd72f538264305effbb5208f5323bdc42eeeeaa754c1920e7b5a073b1feb171a8f0f782362efeb
ssdeep: 12288:D+1CY1wo+m5sIYaqour/WbZtLZCsY0SWQ2oCwrQ+:Ry1VqIYVour/WbHMsXSWQ2oCz+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName: periris
FileVersion: 3.4.17.21
CompanyName: Bubugogepa
LegalTrademarks:
ProductName: Tamupabi Bosako Hotasum
ProductVersion: 1.7.22.12
FileDescription:
OriginalFilename: periris.exe
Translation: 0x0409 0x04e4

Adware.WinYahoo also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 005393151 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
ZillyaAdware.DealPly.Win32.142170
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/DealPly.8963f4ea
K7GWAdware ( 005393151 )
Cybereasonmalicious.1ca7ea
CyrenW32/DealPly.BG.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/DealPly.WC potentially unwanted
APEXMalicious
AvastWin32:DealPly-AJ [Adw]
ClamAVWin.Trojan.Agent-6675955-0
Kasperskynot-a-virus:AdWare.Win32.DealPly.dnwae
BitDefenderAdware.DealPly.2.Gen
NANO-AntivirusRiskware.Win32.DealPly.fhnxuv
MicroWorld-eScanAdware.DealPly.2.Gen
TencentMalware.Win32.Gencirc.10b573e3
Ad-AwareAdware.DealPly.2.Gen
SophosGeneric PUA JJ (PUA)
F-SecureHeuristic.HEUR/AGEN.1125469
BitDefenderThetaGen:NN.ZelphiF.34170.FK0@aeSrusji
VIPRETrojan.Win32.Generic!BT
TrendMicroAdware.Win32.DEALPLY.SMD
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
FireEyeGeneric.mg.5f5ba621ca7eab28
EmsisoftAdware.DealPly.2.Gen (B)
SentinelOneStatic AI – Malicious PE
JiangminAdWare.DealPly.jjkt
AviraHEUR/AGEN.1125469
Antiy-AVLGrayWare[AdWare]/Win32.DealPly
MicrosoftTrojan:Win32/Wacatac.A!ml
ArcabitAdware.DealPly.2.Gen
SUPERAntiSpywarePUP.DealPly/Variant
ZoneAlarmnot-a-virus:AdWare.Win32.DealPly.dnwae
GDataAdware.DealPly.2.Gen
AhnLab-V3PUP/Win32.DealPly.C2677666
Acronissuspicious
McAfeeGenericR-NHS!5F5BA621CA7E
MAXmalware (ai score=99)
VBA32Adware.Presenoker
MalwarebytesAdware.WinYahoo
PandaTrj/Genetic.gen
TrendMicro-HouseCallAdware.Win32.DEALPLY.SMD
RisingAdware.DealPly!1.AA42 (CLASSIC)
YandexTrojan.GenAsa!70aM1XN75KM
IkarusPUA.DealPly
FortinetW32/Agen.9714!tr
AVGWin32:DealPly-AJ [Adw]
Paloaltogeneric.ml

How to remove Adware.WinYahoo?

Adware.WinYahoo removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment