Win32/Adware.ConvertAd.AII removal

The Win32/Adware.ConvertAd.AII is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.ConvertAd.AII virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Adware.ConvertAd.AII?


File Info:
name: 972E743BE5E548C72166.mlw
path: /opt/CAPEv2/storage/binaries/ff31686ee77a29ec2dc874e2ca57ee67f5e491d964711c136cb3b36e450383d4
crc32: EB57FFE2
md5: 972e743be5e548c72166f63a781101db
sha1: 959718093a8f7050d0d0709aa2af34184d4665fa
sha256: ff31686ee77a29ec2dc874e2ca57ee67f5e491d964711c136cb3b36e450383d4
sha512: 478e5595ee9d1c86459f5e043b64de9bb263197e11925d3955ecbc745ec22cc197e056ae483e76fe4e702cf7064007a48e4ae73061c27a2c26ab76b8890aea9a
ssdeep: 3072:P0h9A3J5rQLDC3etXl3MKlOSNo/rwieEWw6cY2wWQJ9nda:MvXl3MKgSazwieE7kwO
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17075C4D1B942F031E25548790A55A19182393E721FAB4C73FFB1B63E9AFC9E1B214B13
sha3_384: 0d2da045aa9f0dbea410ccd748f899fbb8271cf1bf8bf406952d51d81a6eebfa840c25aa4f0897ab882fc5fd0a805a36
ep_bytes: e8a05f0000e995feffff8bff558bec8b
timestamp: 2016-06-02 18:22:39

Version Info:
0: [No Data]

Win32/Adware.ConvertAd.AII also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.972e743be5e548c7
ALYac	Trojan.GenericKD.32226603
Zillya	Adware.ConvertAD.Win32.34198
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.be5e54
Cyren	W32/S-804521a0!Eldorado
ESET-NOD32	a variant of Win32/Adware.ConvertAd.AII
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKD.32226603
NANO-Antivirus	Trojan.Win32.Crypted.egdvkl
MicroWorld-eScan	Trojan.GenericKD.32226603
Avast	Win32:ConvertAd-AT [Adw]
Ad-Aware	Trojan.GenericKD.32226603
Emsisoft	Trojan.GenericKD.32226603 (B)
McAfee-GW-Edition	PUP-XLD-LI
Sophos	Generic ML PUA (PUA)
Ikarus	not-a-virus:AdWare.ConvertAd
Jiangmin	AdWare.ConvertAd.mtf
Antiy-AVL	Trojan/Generic.ASMalwS.18F558A
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKD.32226603
McAfee	PUP-XLD-LI
MAX	malware (ai score=83)
APEX	Malicious
Rising	Trojan.Generic@ML.97 (RDML:d6QeWXqyh/tBRCIXrgEU3w)
Yandex	Trojan.GenAsa!wbvn3YvlY60
SentinelOne	Static AI – Suspicious PE
AVG	Win32:ConvertAd-AT [Adw]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Win32/Adware.ConvertAd.AII?

Win32/Adware.ConvertAd.AII removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X