Malware

Win32/DigiProtServ.A potentially unwanted malicious file

Malware Removal

The Win32/DigiProtServ.A potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/DigiProtServ.A potentially unwanted virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Attempts to create or modify system certificates
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz
a.tomx.xyz
ocsp.usertrust.com
crl.usertrust.com
ocsp.comodoca.com
crl.comodoca.com

How to determine Win32/DigiProtServ.A potentially unwanted?


File Info:

crc32: B03EF489
md5: 48815e1611f6bf42b723f4838667fff8
name: agp_setup.exe
sha1: 459468e32a84aa23620fe1b19a7579b786c0662a
sha256: 0eaca07f7c4e9357957377e55af52b073332b57559be521aa7ff9ad078a2f3c1
sha512: ab3f8402d052b905cbead85ac5bb5b2401de73af223a624d82535a67cdbdb4be584fe3e3851290dfad5861c00dc9b8208fb512154767bc038949fba83e5620a2
ssdeep: 393216:kzE9ekmL/O5VeEC98RWaKZ/UG6UWaX4YsqwceG:1Zmq5VeTCMahG6UWqOjG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright @ Bit Guardian
ProductVersion: 1.0.0.4
ProductName: Ad Guardian Plus
FileVersion: 1.0.0.4
CompanyName: Ad Guardian Plus
Translation: 0x0409 0x04e4

Win32/DigiProtServ.A potentially unwanted also known as:

DrWebProgram.Unwanted.3484
McAfeeArtemis!48815E1611F6
CylanceUnsafe
GDataWin32.Application.PCvarkWintonic.A (2x)
McAfee-GW-EditionBehavesLike.Win32.BadFile.vc
IkarusPUA.NetFilter
CyrenW32/Trojan.TGCL-6952
MicrosoftPUA:Win32/Presenoker
PandaPUP/MaxSecure
ESET-NOD32a variant of Win32/DigiProtServ.A potentially unwanted
eGambitUnsafe.AI_Score_98%
FortinetRiskware/NetFilter

How to remove Win32/DigiProtServ.A potentially unwanted?

Win32/DigiProtServ.A potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment