Trojan.Win32.WSearch.ij removal guide

The Trojan.Win32.WSearch.ij is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.WSearch.ij virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.WSearch.ij?


File Info:
crc32: 6EA7B565
md5: 855e9cd647b48107c4297163d6c4f1f0
name: HA_BTHelper14.exe
sha1: de6508f1652992569f02779e6689d2cdabee26b8
sha256: 78e9f630d4d665eb065233e02439656bcbf824cd64293c777078795777ef0aa6
sha512: 0f8db70247af41425021c7a62df2eddae8f044f97abbf7ac98261009b7a480454ec7d98c45c8efa93039f510987f5044172e9df1cdbc0d9054d4586e6830043f
ssdeep: 24576:BI39dVbIZjR+ftfRF3Didjwf4vffYq/6gSYXAv/O8vpqf3T01QIDslhRjQm:B6dVbIZd+dRAxvYqCaQdp4DQXDsfd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileDescription: BT Helper x5b89x88c5                                                
FileVersion:                     
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName: x5434x56fdx4e50                                                         
Translation: 0x0409 0x04e4

Trojan.Win32.WSearch.ij also known as:

AegisLab	Trojan.Win32.WSearch.4!c
TrendMicro	TROJ_GEN.R002C0DF919
F-Prot	W32/Adware.AN
Symantec	PUA.Gen.2
Paloalto	generic.ml
GData	Win32.Application.Agent.T4NFI9
Kaspersky	Trojan.Win32.WSearch.ij
Alibaba	Trojan:Win32/WSearch.21a3e5ab
ViRobot	Adware.WSearch.1593679
Sophos	Generic PUA NO (PUA)
Comodo	ApplicUnwnt.Win32.Adware.DropWSearc.K0@1ns3r9
F-Secure	Adware.ADSPY/Drop.WSearc
DrWeb	Adware.Cdn
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
Cyren	W32/Trojan5.EOX
Endgame	malicious (moderate confidence)
MaxSecure	Trojan.Malware.1746131.susgen
Avira	ADSPY/Drop.WSearc.K
MAX	malware (ai score=99)
Microsoft	Program:Win32/Vigram.A
ZoneAlarm	Trojan.Win32.WSearch.ij
McAfee	Artemis!855E9CD647B4
VBA32	Trojan.WSearch
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DF919
Tencent	Win32.Trojan.Wsearch.Dzjy
eGambit	Unsafe.AI_Score_54%
Fortinet	W32/WSearch.IJ!tr
AVG	Win32:Adware-gen [Adw]
Avast	Win32:Adware-gen [Adw]
Qihoo-360	Win32/Trojan.60f

How to remove Trojan.Win32.WSearch.ij?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.WSearch.ij removal guide