Adware

Win32/Adware.Gator.Trickler.I removal tips

Malware Removal

The Win32/Adware.Gator.Trickler.I is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Adware.Gator.Trickler.I virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/Adware.Gator.Trickler.I?


File Info:

crc32: 8D52E527
md5: 4a93d0e92ca989291d1b0ac2d56aaeea
name: 4A93D0E92CA989291D1B0AC2D56AAEEA.mlw
sha1: 44b86862eec0d52502cb28ba3ef6e6646fa23122
sha256: 1e05587f6584da183f126717626c9faa63020ea41c98ec09c3371a18c061e441
sha512: af98edcbf104bd910bacae9e8baad305ef59e2478520c0685d60da67ea48f71f601112ddbc589c829e552ce1e3f8f9e0bfb2f19b9ebc2b6b49fbfc7197f5ef0a
ssdeep: 6144:K42FMaP+6+tT/JBnjBE3XwfSZ4sXtzQI6FQ:hKbGlJBjBEnwmEI66
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

ProductVersion: 5.1.0.0
FileVersion: 5.1.0.0
OriginalFilename: divxenc.exe
FileDescription:
Translation: 0x0409 0x04e4

Win32/Adware.Gator.Trickler.I also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Adware.Heur.oq2@R0w1JZoi
FireEyeGeneric.mg.4a93d0e92ca98929
McAfeeAdware-GAIN
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabAdware.Win32.Gator.2!c
SangforMalware
K7AntiVirusAdware ( 004f82371 )
BitDefenderGen:Adware.Heur.oq2@R0w1JZoi
K7GWAdware ( 004f82371 )
Cybereasonmalicious.92ca98
TrendMicroTROJ_GEN.R06EC0PKI20
BaiduWin32.Adware.Agent.n
CyrenW32/S-f017212c!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Adware-DNA [Adw]
ClamAVWin.Trojan.Generic-6221838-0
Kasperskynot-a-virus:AdWare.Win32.Gator.fg
AlibabaTrojan:Win32/runner.ali1000044
TencentWin32.Adware.Gator.Pezr
Ad-AwareGen:Adware.Heur.oq2@R0w1JZoi
EmsisoftGen:Adware.Heur.oq2@R0w1JZoi (B)
ComodoPacked.Win32.MUPX.Gen@24tbus
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebAdware.Gator.origin
InvinceaGeneric PUA EE (PUA)
McAfee-GW-EditionBehavesLike.Win32.PUPXAX.dm
SophosGeneric PUA EE (PUA)
IkarusPUA.Gator.Trickler
MaxSecureTrojan.Malware.300983.susgen
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=68)
Antiy-AVLGrayWare[AdWare]/Win32.Gator.a
MicrosoftTrojan:Win32/Ditertag.A
GridinsoftAdware.Win32.Agent.oa
ArcabitAdware.Heur.EAA6F1
ZoneAlarmnot-a-virus:AdWare.Win32.Gator.fg
GDataGen:Adware.Heur.oq2@R0w1JZoi
CynetMalicious (score: 100)
AhnLab-V3Adware/Win32.Gator.R228418
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34634.oq2@a0w1JZoi
VBA32BScope.Adware.Gator
MalwarebytesAdware.Gator
ESET-NOD32a variant of Win32/Adware.Gator.Trickler.I
TrendMicro-HouseCallTROJ_GEN.R06EC0PKI20
RisingAdware.Gator-Trickler!1.A7ED (CLASSIC)
YandexTrojan.GenAsa!pLIck0qZYxY
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/TrickBot.6BBC27CC!tr
AVGWin32:Adware-DNA [Adw]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Generic/HEUR/QVM19.1.5DB7.Malware.Gen

How to remove Win32/Adware.Gator.Trickler.I?

Win32/Adware.Gator.Trickler.I removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment