Win32/Adware.DnsWatch.A information

The Win32/Adware.DnsWatch.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.DnsWatch.A virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• A process attempted to delay the analysis task by a long amount of time.
• Installs itself for autorun at Windows startup
• Attempts to modify proxy settings

How to determine Win32/Adware.DnsWatch.A?

File Info:
name: 8FF4AB4BB10DA2633115.mlw
path: /opt/CAPEv2/storage/binaries/a92df4b496a3f8c3fe1602ee8ffe5764cbb0f8e40db46a71087265f451a2c07d
crc32: 3A15353B
md5: 8ff4ab4bb10da26331153425b10148f6
sha1: f6a3a1d700f44f24c3da83baa66814c7977e62af
sha256: a92df4b496a3f8c3fe1602ee8ffe5764cbb0f8e40db46a71087265f451a2c07d
sha512: 8236c94ce670dbcacacdd02573139ab92507715653379e6efa25ea8be8ddd105e42cf5d62bd92249a99b3f5a145e351e2c74bc7b7ec29e8e51e7b080833ebde2
ssdeep: 3072:QK/pV5e7TXJq+457Z9ZL/+lfIETfg2YrPeSqJaFZtE9s2giM0vxj+hDMMZLTE9sX:Q+K0+0i5TYibJahbe+dbeo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AF04022127DC44EBC5B69A362DA3E775F3B19A01A12096873F40EF3F2C970429D1DA97
sha3_384: 3f26717f25ec54e0c4c501bc8a13975081bea31dc0cad5afb5133c10679d0acd0993a65501b3c641231fd71449a9a76a
ep_bytes: 81ec8401000053555633db57895c2418
timestamp: 2013-07-14 20:09:38

Version Info:
FileDescription: Social Privacy DNS
Translation: 0x0409 0x04e4

Win32/Adware.DnsWatch.A also known as:

How to remove Win32/Adware.DnsWatch.A?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.