What is “Generic.Adware.Gator.A.67B6949C”?

The Generic.Adware.Gator.A.67B6949C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Adware.Gator.A.67B6949C virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family

How to determine Generic.Adware.Gator.A.67B6949C?


File Info:
name: AC9F1406619B778F3DF2.mlw
path: /opt/CAPEv2/storage/binaries/1e9706b427e2dcd20ae7d3260989f98e64df726e1d7d22660b3a1f1c84c1c3c5
crc32: CE7B5E38
md5: ac9f1406619b778f3df2f6b854cc797f
sha1: fb8f5eb4686820b29e3f95bfc648ab0916f726cc
sha256: 1e9706b427e2dcd20ae7d3260989f98e64df726e1d7d22660b3a1f1c84c1c3c5
sha512: b4379541900c169f44df00a37c270efe77e28b01b3e7c67a510a45cf96e20dd5da7065858ee207fef6c7c36209794d118122172116e10ff50a276dd0b3e50e7d
ssdeep: 12288:itXMzqrllX7HwTWs52hzpHq8eTi30yIQr+:iVMilX7HwTD2hQ8eTi3Ig+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T109B4CF76BDC10CF2D991213101AB673AF67DE6941F32C6C3D768DDB52826271E92A2CC
sha3_384: e2ac239496fa30ec60576a0a1fc01942204e1dc311e35b9075ee3f21841c4a9ab78517299da82d2ed7218ed027895b0f
ep_bytes: 00000000000000000000000000000000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Generic.Adware.Gator.A.67B6949C also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.Gator.2!c
MicroWorld-eScan	Generic.Adware.Gator.A.67B6949C
ClamAV	Win.Adware.Gator-2
FireEye	Generic.mg.ac9f1406619b778f
Skyhigh	BehavesLike.Win32.Generic.gh
ALYac	Generic.Adware.Gator.A.67B6949C
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
Alibaba	AdWare:Win32/Gator.d04bd141
CrowdStrike	win/grayware_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Generic.Adware.Gator.A.67B6949C
Avast	Win32:AdwareX-gen [Adw]
Emsisoft	Generic.Adware.Gator.A.67B6949C (B)
Baidu	Win32.Adware.Gator.a
VIPRE	Generic.Adware.Gator.A.67B6949C
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	AdWare.Gator
GData	Generic.Adware.Gator.A.67B6949C
Google	Detected
Antiy-AVL	GrayWare/Win32.Kryptik.pe
Kingsoft	malware.kb.b.996
Arcabit	Generic.Adware.Gator.A.67B6949C
Microsoft	Program:Win32/Wacapew.C!ml
Varist	W32/Heuristic-CO3!Eldorado
AhnLab-V3	Trojan/Win.Bero.R502486
McAfee	GenericRXAA-FA!AC9F1406619B
MAX	malware (ai score=80)
VBA32	suspected of Adware.Gator.10
Malwarebytes	Gator.Adware.Advertising.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CAH24
Rising	Worm.Soltern!1.BB24 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Application
AVG	Win32:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Generic.Adware.Gator.A.67B6949C?

Generic.Adware.Gator.A.67B6949C removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X