How to remove “Adware:Win32/ConvertAd”?

The Adware:Win32/ConvertAd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware:Win32/ConvertAd virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Adware:Win32/ConvertAd?


File Info:
name: 3A8044ACECB41B206DF7.mlw
path: /opt/CAPEv2/storage/binaries/261cc95d4861e6efc7964fed2bd97066d8785a16021ff1515a6d9960653e8a5f
crc32: 42291061
md5: 3a8044acecb41b206df74c18933eb02a
sha1: 34fa500a8694ca8110cda0b9ad49c9a50abf0117
sha256: 261cc95d4861e6efc7964fed2bd97066d8785a16021ff1515a6d9960653e8a5f
sha512: ace0e7e92a827b705450ba2882bfd9044b2bb3d6059c48af6a4cda8bbed9291e7e13dc9c4016982a362f3f414897a0b898bb2f6c534b49ed88cfe67d03678b68
ssdeep: 49152:Sd79WrKiew+i62T/xBjbj36QCEglzOsIPu+vNR:SakyRCEgNOd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E1361821EBF08E2BE07F3779A47202429AB5F59BA761D64E361C705C2F327045C85B6B
sha3_384: 28e4a5135bd744b7764161ee697bd51c07d2065defdce34ac6ed6ed932eb4997c848e980befc8d3aa6d4413adb1149e8
ep_bytes: ff25643b8c000000000000000000383b
timestamp: 2023-10-04 18:41:31

Version Info:
Translation: 0x0000 0x04b0
Comments: PNJ SAP Connect
CompanyName: PNJ
FileDescription: PNJ_SAP_Connect
FileVersion: 1.4.0.0
InternalName: PNJ_SAP_Connect.exe
LegalCopyright: Copyright ©  2023 PNJ
LegalTrademarks: pnj.com.vn
OriginalFilename: PNJ_SAP_Connect.exe
ProductName: PNJ_SAP_Connect
ProductVersion: 1.4.0.0
Assembly Version: 1.4.0.0

Adware:Win32/ConvertAd also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Adware.Win32.ConvertAd.2!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.464687
FireEye	Gen:Variant.Lazy.464687
Malwarebytes	Malware.AI.4248314795
Sangfor	Adware.Msil.ConvertAd.Vzcc
Alibaba	AdWare:MSIL/ConvertAd.78e65d50
Cybereason	malicious.cecb41
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H09BM24
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.ConvertAd.gen
BitDefender	Gen:Variant.Lazy.464687
Avast	FileRepMalware [Misc]
Emsisoft	Gen:Variant.Lazy.464687 (B)
VIPRE	Gen:Variant.Lazy.464687
Sophos	Generic Reputation PUA (PUA)
Google	Detected
Varist	W32/ABRisk.ZHBO-8923
Antiy-AVL	GrayWare[AdWare]/MSIL.ConvertAd
Microsoft	Adware:Win32/ConvertAd
Arcabit	Trojan.Lazy.D7172F
ZoneAlarm	not-a-virus:HEUR:AdWare.MSIL.ConvertAd.gen
GData	Gen:Variant.Lazy.464687
ALYac	Gen:Variant.Lazy.464687
MAX	malware (ai score=82)
Cylance	unsafe
Rising	Adware.ConvertAd!8.BA (TFE:D:GJt5GFuj43E)
Yandex	PUA.ConvertAd!TL1KisXwMY0
MaxSecure	Trojan.Malware.74444617.susgen
Fortinet	PossibleThreat
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS

How to remove Adware:Win32/ConvertAd?

Adware:Win32/ConvertAd removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X