About “Application.Updater.A” infection

The Application.Updater.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Updater.A virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Russian

How to determine Application.Updater.A?


File Info:
crc32: A7820403
md5: a3ff55da011c7d7f12306303fcde23b4
name: A3FF55DA011C7D7F12306303FCDE23B4.mlw
sha1: 3fe8e7da641e704681b7c66c0c426a282fa18fde
sha256: 0391c6628f48d1c34f92b32c4f72246efb94c27dfdc3b6de83bad3a198ffb545
sha512: d7e84e83d074a360acf62f5a7595ef2d1dec18f5260666345465e7462211a0d64d6844f7ae813db5771b2513e5b9635efdcbc2127032dad601d5c894bbf1227d
ssdeep: 12288:cLBnVpdNr4Dqp0ex/9GPCVGitMjlbwWftoY07geFDhWc+wG8JrE1P3ox2uJdtYM:cfpdNMBeR9cljlbwS071ZhWc+wdaStZ
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright SoftwareX Corp 2017
InternalName: SpecS Option Service
FileVersion: 2.0.4.6
CompanyName: SoftX Corp
ProductName: SpecS Option Service
ProductVersion: 2.0.4.6
FileDescription: SpecS Option Service
OriginalFilename: SpecS Option Service
Translation: 0x0009 0x04b0

Application.Updater.A also known as:

Elastic	malicious (high confidence)
DrWeb	Adware.Downware.18209
Cynet	Malicious (score: 100)
ALYac	Application.Updater.A
Cylance	Unsafe
Zillya	Trojan.Inject.Win32.240669
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/OpenSUpdater.29dadac7
Cybereason	malicious.a011c7
ESET-NOD32	a variant of Win64/Adware.OpenSUpdater.A
APEX	Malicious
Avast	FileRepMalware [PUP]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DManager.gen
BitDefender	Application.Updater.A
NANO-Antivirus	Trojan.Win64.Agent.eqcsgq
MicroWorld-eScan	Application.Updater.A
Tencent	Malware.Win32.Gencirc.10b73e55
Ad-Aware	Application.Updater.A
Sophos	Generic ML PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.dh
FireEye	Generic.mg.a3ff55da011c7d7f
Emsisoft	Application.Updater.A (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Inject.aabx
Webroot	W32.Adware.Installcore
Avira	HEUR/AGEN.1108436
Antiy-AVL	Trojan/Generic.ASMalwS.217D775
Microsoft	PUADlManager:Win32/OpenDownloadManager
SUPERAntiSpyware	Adware.OpenSUpdater/Variant
GData	Application.Updater.A
AhnLab-V3	PUP/Win64.Helper.R302258
McAfee	Artemis!A3FF55DA011C
MAX	malware (ai score=99)
Malwarebytes	Adware.SpecialSearchOffer
Panda	PUP/SoftwareUpdater
Ikarus	AdWare.Opensupdater
Fortinet	Adware/OpenSUpdater
AVG	FileRepMalware [PUP]

How to remove Application.Updater.A?

Application.Updater.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X