Malware

Downloader.Win32.OfferInstall.adg removal instruction

Malware Removal

The Downloader.Win32.OfferInstall.adg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Downloader.Win32.OfferInstall.adg virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Downloader.Win32.OfferInstall.adg?


File Info:

crc32: 754C3004
md5: 79e0f4bb34d0341c5a7d58c13c1e65de
name: _________________.exe
sha1: 0381934b961f034900359208d137f1004964fe6f
sha256: bf7f5b7f63830eb6a08e057a4e06040814791ab28efb7a2a79d48842cb38d9af
sha512: 7b45d8975bf85bef4c986ce72457a0eae4a2fcf4050658e36fcfbcb9f68663ee07bd9c248f4ce50b8f91a6dff3d06217bc8f8e036d81cd125080a80ec3f6ae75
ssdeep: 49152:txD6abM+KWizb7M7nwoCExGSvzMPjrwA/D:fbM+Azb7MjpbMSL4PwED
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName: Offerbox
Comments: This installation was built with Inno Setup.
ProductName: x41cx438x43e x41ax440x430x444x442
ProductVersion: 0.0.0.1
FileDescription: x41cx438x43e x41ax440x430x444x442 Setup
Translation: 0x0000 0x04b0

Downloader.Win32.OfferInstall.adg also known as:

DrWebProgram.Appset.14
FireEyeGeneric.mg.79e0f4bb34d0341c
Qihoo-360HEUR/QVM42.2.19C9.Malware.Gen
McAfeeArtemis!79E0F4BB34D0
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 0053dc471 )
K7GWAdware ( 0053dc471 )
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:UnwantedSig [PUP]
GDataNSIS.Application.Offerbox.A
Kasperskynot-a-virus:Downloader.Win32.OfferInstall.adg
AlibabaDownloader:Win32/OfferInstall.856a458f
NANO-AntivirusTrojan.Win32.Magala.flpthi
SophosOfferB (PUA)
ComodoApplication.Win32.Appster.CB@7yjsvh
F-SecureHeuristic.HEUR/AGEN.1109570
Invinceaheuristic
EmsisoftApplication.Agent (A)
CyrenW32/S-70232f14!Eldorado
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1109570
Antiy-AVLGrayWare[AdWare]/Win32.Appster.a
Endgamemalicious (high confidence)
SUPERAntiSpywareAdware.AppsetOffer/Variant
ZoneAlarmnot-a-virus:Downloader.Win32.OfferInstall.adg
MicrosoftPUA:Win32/Offerbox
CynetMalicious (score: 85)
AhnLab-V3PUP/Win32.OfferInstaller.R249693
VBA32Downloader.OfferInstall
MalwarebytesPUP.Optional.AppsetOffer
PandaPUP/Multitoolbar
ESET-NOD32a variant of Win32/Appster.D potentially unwanted
RisingAdware.AppsetOffer!1.B831 (CLASSIC)
FortinetRiskware/OfferInstall
AVGWin32:UnwantedSig [PUP]
CrowdStrikewin/malicious_confidence_70% (D)
MaxSecurenot.a.virus.Downloader.OfferInstall.GEN

How to remove Downloader.Win32.OfferInstall.adg?

Downloader.Win32.OfferInstall.adg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment