Adware

Win32/Adware.PCAcceleratePro.V removal instruction

Malware Removal

The Win32/Adware.PCAcceleratePro.V is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Adware.PCAcceleratePro.V virus can do?

  • Scheduled file move on reboot detected
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system

How to determine Win32/Adware.PCAcceleratePro.V?


File Info:

name: 665F909CD766FF80FA44.mlw
path: /opt/CAPEv2/storage/binaries/c96a55af8e51f2925799846704b82c337bf6afb67774f0f18405708f2771279f
crc32: B3F8831B
md5: 665f909cd766ff80fa44b654c86ae43b
sha1: 8142488020d02bec8a7a408ef1c336325f07149f
sha256: c96a55af8e51f2925799846704b82c337bf6afb67774f0f18405708f2771279f
sha512: f82c7e3b98aba8d1a428adaae23650f0d910dd1a516e52b296be0c71070f34ea7ef35b54698b619c3e797601543dfaa6af35106e93c51ee38624ae51bcbd3ad6
ssdeep: 6144:8PB6pr0MiUJJqpmpwgY+2CokASFa0dcQq0xamSYrfCPKqJBTdH6TJO:EgHJemFALuarYGPrJBv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D264DF0967E77E27DD3A477608E6B239B6BAFB010323C7C786450EB71A063C62BC5159
sha3_384: c0b8b2a4d73b479dcde520523b157f8adfb394f06651a536cc43c5c87b568be60cddd18d2aab75fd752ad01146424f1d
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:58

Version Info:

CompanyName: FreeAPCP Team
FileDescription: Setup Additional Software
FileVersion: 1.0.0.1
LegalCopyright: Copyright FreeAPCP Team 2020
ProductName: Setup Additional Software
ProductVersion: 1.0.0.1_7/7/2020.09:53:22
Translation: 0x0000 0x04e4

Win32/Adware.PCAcceleratePro.V also known as:

BkavW32.AIDetect.malware1
LionicRiskware.Win32.Generic.1!c
K7AntiVirusRiskware ( 0040eff71 )
AlibabaAdWare:Win32/PCAcceleratePro.06149874
K7GWRiskware ( 0040eff71 )
ESET-NOD32a variant of Win32/Adware.PCAcceleratePro.V
AvastNSIS:AdwareX-gen [Adw]
SophosGeneric PUA IB (PUA)
McAfee-GW-EditionArtemis
JiangminAdware.Agent.atdq
AviraHEUR/AGEN.1140667
Antiy-AVLTrojan/Generic.ASMalwNS.9B1
GridinsoftRansom.Win32.Sabsik.sa
ViRobotAdware.Pcacceleratepro.316176.B
CynetMalicious (score: 99)
McAfeeArtemis!665F909CD766
MalwarebytesPUP.Optional.PCAcceleratePro
APEXMalicious
SentinelOneStatic AI – Suspicious PE
FortinetAdware/PCAcceleratePro
AVGNSIS:AdwareX-gen [Adw]

How to remove Win32/Adware.PCAcceleratePro.V?

Win32/Adware.PCAcceleratePro.V removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment