Categories: Adware

What is “Win32/Adware.AdSheriff”?

The Win32/Adware.AdSheriff is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.AdSheriff virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Adware.AdSheriff?


File Info:
name: 062F5603544369FA8C34.mlwpath: /opt/CAPEv2/storage/binaries/393b66d6527994c1f80e0d02ea04114e7dbffe3e0993238e6df20db8e41bb9a7crc32: 614F53CBmd5: 062f5603544369fa8c346f99e043600bsha1: 44f3d956b09118ff786860f8956fe3a7b728d246sha256: 393b66d6527994c1f80e0d02ea04114e7dbffe3e0993238e6df20db8e41bb9a7sha512: 000d52c3d4ab9eb1a8c1f81b57c7d1bb998964140ce0efdb34ff04f61f8e68ab216fbd3118fdab304eabe8a7ba3d7b2d52a3cecc62fc9383770fd1e5cf5299d4ssdeep: 384:4u1d3tH84cdIlGROwSFaRl0Ykc7CztIaK9G0oPCxVc3oRwEEKAH0bDl:95cdIGR4wazuaKMsVc3JE1W0dtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A7D2C04667E1DE7AD0210330A96B57AA9F3CDC24B439471F0BC175CEEFB23409D29A26sha3_384: 3be653a9bb640bd5685ef06db4e5bfcbc04516ed52b7f2af3f21002bdc77a012519b8fb25a8aa5846bfc5f021e41bf8dep_bytes: b800104100682176400064ff35000000timestamp: 2006-02-07 11:25:54
Version Info:
CompanyName: FileDescription: Balloon MFC ApplicationFileVersion: 1, 0, 0, 1InternalName: BalloonLegalCopyright: Copyright (C) 2006LegalTrademarks: OriginalFilename: Balloon.EXEProductName: Balloon ApplicationProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Win32/Adware.AdSheriff also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Multi.Generic.4!c
CMC	Generic.Win32.062f560354!MD
Skyhigh	BehavesLike.Win32.PWSGoft.mh
McAfee	GenericRXAA-FA!062F56035443
Cylance	unsafe
Sangfor	PUP.Win32.Adware.AdSheriff
Alibaba	TrojanDownloader:Win32/Renos.a439db9b
CrowdStrike	win/malicious_confidence_90% (W)
VirIT	Trojan.Win32.Fakealert.DV
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Adware.AdSheriff
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Fakealert-25
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Riskware.Win32.Renos.cwyxng
Avast	Win32:Adware-gen [Adw]
Rising	Malware.Undefined!8.C (TFE:5:i637eATrAdF)
TACHYON	Joke/W32.Renos.29594
F-Secure	Trojan.TR/Hijacker.Gen
DrWeb	Trojan.Fakealert
Zillya	Tool.Renos.Win32.273
TrendMicro	TSPY_RENOS
FireEye	Generic.mg.062f5603544369fa
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Hoax.Renos.vo
Webroot	W32.Malware.Downloader
Varist	W32/FakeAlert.JBLS-3178
Avira	TR/Hijacker.Gen
Antiy-AVL	HackTool[Hoax]/Win32.Renos
Xcitium	ApplicUnsaf@#2w3okhyocrjlz
ViRobot	Hoax.Renos.29594
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	TrojanDownloader:Win32/Renos
Google	Detected
AhnLab-V3	Unwanted/Win32.Renos.C23756
BitDefenderTheta	Gen:NN.ZexaF.36680.bm0@aW4!5Bjk
MAX	malware (ai score=100)
VBA32	BScope.Trojan.FakeAlert
Malwarebytes	Generic.Malware/Suspicious
Panda	Adware/SpySheriff
Zoner	Probably Heur.ExeHeaderP
TrendMicro-HouseCall	TSPY_RENOS
Tencent	Win32.Trojan.Hijacker.Hdhl
Yandex	Trojan.GenAsa!S7Kw85saOoo
Ikarus	Trojan-Downloader.Win32.Small
MaxSecure	Trojan.Malware.7682.susgen
Fortinet	Riskware/Renos
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.6b0911
DeepInstinct	MALICIOUS