Win32/Adware.Linkular.AH removal

The Win32/Adware.Linkular.AH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.Linkular.AH virus can do?

Creates RWX memory
Anomalous file deletion behavior detected (10+)
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Attempts to modify proxy settings

Related domains:

wpad.local-net

www.wikitweak.com

How to determine Win32/Adware.Linkular.AH?


File Info:
name: 350B39A821A9C5FC3224.mlw
path: /opt/CAPEv2/storage/binaries/980a04563b75cbd2707e401fc9ac420403ab7aedfede6499ffa0a2d2840dfd01
crc32: E1149974
md5: 350b39a821a9c5fc3224fa17e990c824
sha1: 48d64f99014c31d3bafd06266ad703cccf805bcd
sha256: 980a04563b75cbd2707e401fc9ac420403ab7aedfede6499ffa0a2d2840dfd01
sha512: 2831e6eb3113a42b1855cd596c148c608bbdc691b31bdc5342043716eb86686ac63e8ec0065ec387f63505832666ac1a20625f113a6f97a7f0a04486e77a42f5
ssdeep: 1536:cumhxebkJf+FTXJDh+VfSLeB5V9FZrv1yAmyfKWF+:cuxkZuTXJeR3zv9yAmySE+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19B53D05071F0847FD0172BB25EB7ABBBCBB69625192246975B702F7D3921083DA0A393
sha3_384: ad402a28be6e7d10ecccef861dd64b01d5699cc6685b6b2ff874160fce17481d9ced4975db4b119f560344a0a1f146c1
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:52:06

Version Info:
Version: 2.2.3
Translation: 0x0000 0x04e4

Win32/Adware.Linkular.AH also known as:

Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.350b39a821a9c5fc
McAfee	RDN/Generic PUP.x!cl3.b
Cylance	Unsafe
Alibaba	Downloader:Win32/Snojan.9457fced
CrowdStrike	win/malicious_confidence_80% (D)
Symantec	SecurityRisk.Downldr
ESET-NOD32	Win32/Adware.Linkular.AH
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Riskware.Win32.Crypter.ficngn
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	NSIS:Linkular-A [Adw]
Sophos	Generic PUA EI (PUA)
DrWeb	Tool.Crypter.43
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.AdwareAdload.kc
eGambit	Unsafe.AI_Score_94%
Antiy-AVL	Trojan/Generic.ASMalwNS.EF0
Microsoft	Trojan:Win32/Wacatac.A!ml
SentinelOne	Static AI – Malicious PE
Webroot	W32.Dropper.Gen
AVG	NSIS:Linkular-A [Adw]
Cybereason	malicious.9014c3
Panda	PUP/RelevantKnowledge

How to remove Win32/Adware.Linkular.AH?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Adware.Linkular.AH removal