What is “Win32/Adware.FileTour.AWH”?

The Win32/Adware.FileTour.AWH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.FileTour.AWH virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32/Adware.FileTour.AWH?


File Info:
name: 93E14C6B7D1CD34C9977.mlw
path: /opt/CAPEv2/storage/binaries/44e529fd05aa5f474a46ed9decc826e3e78ae52cf7e8d67770693db371a7a351
crc32: DF47121C
md5: 93e14c6b7d1cd34c99774a79e979e4a9
sha1: 598869cee9578ad13a6b3f8aa00cf935b49c7ca3
sha256: 44e529fd05aa5f474a46ed9decc826e3e78ae52cf7e8d67770693db371a7a351
sha512: be4482b10715219f2b5f9e27f8b9d1824dcddadba599ca675c00066b0c0ea8ebbc43c929d3240b6d702e97d56750d916160e7fa3724863c98c71d017ab7097b9
ssdeep: 24576:LnUtZSHBhz9RQpfVJby53rK9aBirb2kMBBIScS6MtN9ffTS20o:L4q57KoisKSNtN9XT3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157754A12B284513ED0622F764CAAC594DC3F7B202E568C5F2EF44B4C1E39B41AD76B9E
sha3_384: a04b6f671d53a2298803200ecbfbb759266723446909cd5e45d5adaf1683ba66b3f7714be1330b40abfaaa13ff3b2df0
ep_bytes: 558bec83c4f0b8e8485300e8c8cdecff
timestamp: 2015-08-12 12:47:12

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 6.2.21.4572
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0409 0x04e4

Win32/Adware.FileTour.AWH also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
CAT-QuickHeal	Hoax.FakeInstaller.A9
ALYac	Gen:Variant.Application.Bundler.FileTour.3
Cylance	unsafe
VIPRE	Gen:Variant.Application.Bundler.FileTour.3
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.b7d1cd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.FileTour.AWH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:Downloader.Win32.Generic
BitDefender	Gen:Variant.Application.Bundler.FileTour.3
NANO-Antivirus	Riskware.Win32.ArchSMS.dvewdd
MicroWorld-eScan	Gen:Variant.Application.Bundler.FileTour.3
Avast	Win32:FileTour-BX [Adw]
Tencent	Malware.Win32.Gencirc.10b9360a
Emsisoft	Gen:Variant.Application.Bundler.FileTour.3 (B)
F-Secure	Adware.ADWARE/Adware.Gen4
DrWeb	Trojan.SMSSend.6295
Zillya	Adware.FileTour.Win32.924
McAfee-GW-Edition	BehavesLike.Win32.PUP.th
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.93e14c6b7d1cd34c
Sophos	Generic Reputation PUA (PUA)
Jiangmin	Downloader.Generic.axov
Webroot	W32.Adware.Gen
Avira	ADWARE/Adware.Gen4
Antiy-AVL	HackTool[Hoax]/Win32.ArchSMS
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Application.Bundler.FileTour.3
SUPERAntiSpyware	Adware.Symmi/Variant
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.Generic
GData	Gen:Variant.Application.Bundler.FileTour.3
AhnLab-V3	Trojan/Win32.Gen
Acronis	suspicious
McAfee	GenericRXAA-AA!93E14C6B7D1C
MAX	malware (ai score=76)
VBA32	TScope.Trojan.Delf
Malwarebytes	Neshta.Virus.FileInfector.DDS
Panda	Trj/Genetic.gen
Rising	PUF.Hadsruda!8.13328 (TFE:5:zh7wDXxwYfT)
Yandex	PUA.Downloader!HYuhyLaPGwo
Ikarus	PUA.FileTour
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/FileTour
BitDefenderTheta	Gen:NN.ZelphiF.36350.FL0@aCc3Kygk
AVG	Win32:FileTour-BX [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)

How to remove Win32/Adware.FileTour.AWH?

Win32/Adware.FileTour.AWH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X