What is “Win32/Adware.VeryFast.M”?

The Win32/Adware.VeryFast.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.VeryFast.M virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
Detects Bochs through the presence of a registry key
Anomalous binary characteristics

How to determine Win32/Adware.VeryFast.M?


File Info:
name: F984F72C7F82A5100EC0.mlw
path: /opt/CAPEv2/storage/binaries/7e931496d1fc362d2c23d9f2e533925396784a8723432b2e91c99699afddd0e6
crc32: 75F1ACB0
md5: f984f72c7f82a5100ec06075f3ce716b
sha1: 3fdd988a81fe9a52cd5b8abc43fa6a0996edd6cc
sha256: 7e931496d1fc362d2c23d9f2e533925396784a8723432b2e91c99699afddd0e6
sha512: 5f99421258fd58e0e759bb4a63331730d7b5fb7d813d62c35a5e3cd9911310e41437aa869aff2690fe541d4b0e186462df6ab788daf4e48737dbd76984ed5b81
ssdeep: 1536:9/T2X/jN2vxZz0DTHUpou08xuICQs5xE+1zyYCDtpXOrm78lXxO:9bG7N2kDTHUpou0sCNPzy5n+qAU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T106A3CF10B754D4A3F8A3CB302564923A5A79AC21F5A04B4F3FD05A586ADD3F19F2D3E1
sha3_384: 3645cce8905ca013f4767eccb7cd44f7a4a7f09a3953348b58d43280eb1bfc317b11a838920505ad45e043c9469fa969
ep_bytes: 558bec81ecf40300005356576a205f33
timestamp: 2021-09-25 21:57:46

Version Info:
0: [No Data]

Win32/Adware.VeryFast.M also known as:

Bkav	W32.Common.3EB9D340
AVG	FileRepMalware [Misc]
Skyhigh	Artemis
McAfee	Artemis!F984F72C7F82
Malwarebytes	PUP.Optional.VeryFast
Zillya	Adware.PCAppStore.Win32.419
Sangfor	Adware.Win32.Veryfast.V5rc
CrowdStrike	win/grayware_confidence_60% (W)
Alibaba	AdWare:Win32/PCAppStore.81359b3d
K7GW	Adware ( 005b21ce1 )
K7AntiVirus	Adware ( 005b21ce1 )
Symantec	PUA.Gen.2
ESET-NOD32	Win32/Adware.VeryFast.M
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.PCAppStore.gen
Avast	FileRepMalware [Misc]
Tencent	Win32.AdWare.Pcappstore.Bujl
F-Secure	Trojan.TR/AVI.Agent.dfasx
DrWeb	Program.Unwanted.5478
Sophos	Generic Reputation PUA (PUA)
Avira	TR/AVI.Agent.dfasx
Antiy-AVL	GrayWare[AdWare]/Win32.PCAppStore.gen
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.PCAppStore.gen
Cylance	unsafe
Fortinet	Adware/VeryFast
DeepInstinct	MALICIOUS

How to remove Win32/Adware.VeryFast.M?

Win32/Adware.VeryFast.M removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X