About “Win32/Adware.HPDefender.EIF” infection

The Win32/Adware.HPDefender.EIF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.HPDefender.EIF virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Adware.HPDefender.EIF?


File Info:
crc32: 46B2A4F7
md5: 310b1a56500a147c0afaf909490390c8
name: 310B1A56500A147C0AFAF909490390C8.mlw
sha1: ae2a79628b9186cf72d43649e316b7f8d1fe7487
sha256: 1df2dd52ecf8f359633d6f40a57fc43dc283077bd50b5de9222f674a0154dce5
sha512: b7a8a463c120e561dff7dffeca870bb1fd6013178f9ec83b6996ebe66b9ce04be2b1ea8428636c24623eaee79899e3f6d20ccc28ee84a0fd439d1ebe21b60fc2
ssdeep: 6144:KB+pgU5BY5R2YPx16b59MjkaoBgJ+PxqcT1E97RXwSM4T+mLRMW:KgRauI16bDMj+5ZC8p++mLl
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
InternalName: wzzij
ProductName: ociuhl
OriginalFilename: xt
FileDescription: zbe
Translation: 0x0409 0x04b0

Win32/Adware.HPDefender.EIF also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Adware ( 0053f71e1 )
Elastic	malicious (high confidence)
McAfee	ICLoader
Zillya	Adware.Hpdefender.Win32.9
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	AdWare:Win32/ICLoader.93d09f7e
K7GW	Adware ( 0053f71e1 )
Cybereason	malicious.28b918
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Adware.HPDefender.EIF
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Hpdefender.gen
BitDefender	Dropped:Trojan.GenericKD.46364176
NANO-Antivirus	Riskware.Win32.Hpdefender.fjpfwc
MicroWorld-eScan	Dropped:Trojan.GenericKD.46364176
Tencent	Win32.Adware.Hpdefender.Lfgd
Ad-Aware	Dropped:Trojan.GenericKD.46364176
Sophos	Generic PUA KO (PUA)
Comodo	Malware@#3hyoh07meac5y
BitDefenderTheta	Gen:NN.ZexaF.34266.tC0@a83Hxgci
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OJ621
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Generic.mg.310b1a56500a147c
Emsisoft	Dropped:Trojan.GenericKD.46364176 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1117983
Antiy-AVL	Trojan/Generic.ASMalwS.28AF640
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Dropped:Trojan.GenericKD.46364176
AhnLab-V3	PUP/Win32.Hpdefender.R207014
VBA32	Adware.Hpdefender
MAX	malware (ai score=100)
Malwarebytes	Adware.HPDefender
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0OJ621
Rising	Trojan.Generic@ML.86 (RDML:5YDLvxA7H/gorPKwSKop9w)
Yandex	PUA.Hpdefender!5cYa5pYei8Y
Fortinet	Riskware/HPDefender
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Win32/Adware.HPDefender.EIF?

Win32/Adware.HPDefender.EIF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X