IStartSurfInstaller (PUA) removal

The IStartSurfInstaller (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IStartSurfInstaller (PUA) virus can do?

Executable code extraction
Creates RWX memory

Related domains:

z.whorecord.xyz

a.tomx.xyz

d3vngcy706h320.cloudfront.net

bon.sonjelly.club

How to determine IStartSurfInstaller (PUA)?


File Info:
crc32: 80F1204B
md5: ae20da458fbae28382a0a1bc275d5689
name: setup.exe
sha1: e85d9ff53cb1beb779f18b1aa94f12d090869d51
sha256: 5a68e85218f6ec42d0cbb7e7d87d8242e08c88fac2627c73915fa0245ae8b3e3
sha512: 41d644b76b594c2e5c8b4a9368cdd91863d02c6f8584f356afc6423b73eaec3fedd3cb7cb5443a363ef248e4adb020ab8151b18fb16b383cdeb44dbf75c0369c
ssdeep: 49152:1ZNQhmpdQIg0rK1lWQNyY55CQT4m1+HIqkQNyh0kFJp3yIongj1G+d:3NdQ+G1lWlYest+oqJNyh0kFJ9yIonsF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

IStartSurfInstaller (PUA) also known as:

Bkav	HW32.Packed.
FireEye	Generic.mg.ae20da458fbae283
CAT-QuickHeal	Trojan.SurfSodaInfo.M7
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0055bb171 )
K7GW	Trojan ( 0055bb171 )
Cybereason	malicious.53cb1b
BitDefenderTheta	Gen:NN.ZexaF.34084.1IZ@a8JqZlfi
F-Prot	W32/Kryptik.AQV.gen!Eldorado
APEX	Malicious
GData	Win32.Trojan.Kryptik.OS
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazqRmrau8rlPJXcWDGTisg3Y)
Sophos	IStartSurfInstaller (PUA)
Comodo	Application.Win32.IStartSurf.VISA@8fniqt
F-Secure	Trojan.TR/Dropper.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Trapmine	malicious.high.ml.score
Ikarus	PUA.ICLoader
Cyren	W32/Kryptik.AQV.gen!Eldorado
eGambit	Unsafe.AI_Score_97%
Avira	TR/Dropper.Gen
Antiy-AVL	GrayWare/Win32.Kryptik.guot
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
McAfee	GenericRXJH-SE!AE20DA458FBA
Malwarebytes	Trojan.IStartSurf
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.GYRB
SentinelOne	DFI – Malicious PE
Fortinet	W32/Kryptik.BVKS!tr
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM20.1.2709.Malware.Gen

How to remove IStartSurfInstaller (PUA)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

IStartSurfInstaller (PUA) removal