Adware:MSIL/OxyPumper information

The Adware:MSIL/OxyPumper is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware:MSIL/OxyPumper virus can do?

Attempts to connect to a dead IP:Port (2 unique times)
Performs some HTTP requests
Unconventionial language used in binary resources: Russian

Related domains:

z.whorecord.xyz

a.tomx.xyz

freegeoip.net

ip-api.com

How to determine Adware:MSIL/OxyPumper?


File Info:
crc32: 2AE709D9
md5: 9cb9b143256f456a8326cedeeeace0c9
name: 9CB9B143256F456A8326CEDEEEACE0C9.mlw
sha1: 0819bdbb6e78ed0ec3b6e018c0162f1e4ea32e55
sha256: d9c67685d70b7a8072400c2c92b241f3ea08900b74c9ce8b7e6eb35ee6f258da
sha512: fffb4f232ce18f6f963b5c1d787aae8065413618e81bfd0d77311455aa13d73ae248ebab991a91cd9ef03b957c4d48dd3d886ee9465d8e5eb1c703cec1259ce0
ssdeep: 49152:b2uEbFZenpDuHws0SuC/CnmhgylJJp3mQ2dbqTV3cIMqSKLi:b2HZen0HySVCnmhgylJJp3mdcVsIMqS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (c) Geo Locator. All rights reserved.
InternalName: geoloc.exe
FileVersion: 3,0,32,41
CompanyName: Geo Locator
ProductName: Geo Locator
ProductVersion: 3,0,32,41
FileDescription: Geo Locator
OriginalFilename: geoloc.exe
Translation: 0x0409 0x04b0

Adware:MSIL/OxyPumper also known as:

MicroWorld-eScan	Gen:Variant.Application.Zusy.218197
FireEye	Generic.mg.9cb9b143256f456a
CAT-QuickHeal	Trojan.Oxypumper
Qihoo-360	Generic/Application.72f
McAfee	Artemis!9CB9B143256F
Cylance	Unsafe
VIPRE	MSIL.Adware.OxyPumper
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
BitDefender	Gen:Variant.Application.Zusy.218197
Cybereason	malicious.3256f4
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.OxyPumper.W
APEX	Malicious
Kaspersky	not-a-virus:AdWare.Win32.ZxrLoader.io
Alibaba	AdWare:Win32/ZxrLoader.a9031630
NANO-Antivirus	Trojan.Win32.ZxrLoader.elthmq
Avast	Win32:Adware-gen [Adw]
Tencent	Msil.Adware.Oxypumper.Hxgj
Ad-Aware	Gen:Variant.Application.Zusy.218197
Sophos	Generic PUA AI (PUA)
F-Secure	Adware.ADWARE/OxyPumper.mulkg
DrWeb	Trojan.DownLoader23.55944
Zillya	Downloader.ZxrLoader.Win32.41
McAfee-GW-Edition	Artemis!PUP
Emsisoft	Gen:Variant.Application.Zusy.218197 (B)
Webroot	W32.Adware.Gen
Avira	ADWARE/OxyPumper.mulkg
MAX	malware (ai score=70)
Antiy-AVL	RiskWare[Downloader]/Win32.ZxrLoader
Kingsoft	Win32.Troj.DownZxrLoade.io.(kcloud)
Microsoft	Adware:MSIL/OxyPumper
Arcabit	Trojan.Application.Zusy.D35455
SUPERAntiSpyware	PUP.ELEX/Variant
ZoneAlarm	not-a-virus:AdWare.Win32.ZxrLoader.io
GData	Gen:Variant.Application.Zusy.218197
Cynet	Malicious (score: 85)
VBA32	BScope.Adware.Sasquor
ALYac	Gen:Variant.Application.Zusy.218197
Malwarebytes	Malware.AI.1095061826
TrendMicro-HouseCall	TROJ_GEN.R002H0CAT21
Rising	Malware.Undefined!8.C (TFE:5:IEHYLEZ0IfD)
Yandex	Trojan.GenAsa!xG/3YOgAQlY
Fortinet	Riskware/ZxrLoader
AVG	Win32:Adware-gen [Adw]
Panda	Trj/GdSda.A

How to remove Adware:MSIL/OxyPumper?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Adware:MSIL/OxyPumper information