Win32/ITProductDev.A potentially unwanted removal tips

The Win32/ITProductDev.A potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/ITProductDev.A potentially unwanted virus can do?

Sample contains Overlay data
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/ITProductDev.A potentially unwanted?


File Info:
name: 9BBE0E0F377BEB444EF4.mlw
path: /opt/CAPEv2/storage/binaries/bac966015c4eace56551694322c98199970c5602d3754882667108d9fd07ed24
crc32: B90225CD
md5: 9bbe0e0f377beb444ef4b9b7b1f3b2a1
sha1: 70c35e23b66e99942115f527776f0e5cec9ff666
sha256: bac966015c4eace56551694322c98199970c5602d3754882667108d9fd07ed24
sha512: fc548ca794f84c9909a197383c7e42970b3f17adf5a4e04c9c1305858571774cc4f8916e7c20297bd083a04ba86f5c985071730ea7ad288409747554ff92aaa4
ssdeep: 12288:qg18tl76bRNXRKMDPNKT1zH3CRAmjlPtD:qbXqRNXMMDu173CTPd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D7C4F16E9BA4CC5DD8C2C570EE3D1E8A8B137C3A1139B722BB7AF11585FB8819735142
sha3_384: 98c778fc9cf1dfeeb97c4780506dfeab1cbb4f9bc377923033e63c2359cb750916d26ba892d58276ba1c061d0835e023
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2018-12-15 22:26:14

Version Info:
CompanyName: ITPRODUCTDEV LTD
FileDescription: Televzr Light Desktop
FileVersion: 1.9.103
LegalCopyright: Copyright © 2022 ITPRODUCTDEV LTD
ProductName: Televzr Light
ProductVersion: 1.9.103
Translation: 0x0409 0x04e4

Win32/ITProductDev.A potentially unwanted also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.ITProductDev.4!c
Elastic	malicious (moderate confidence)
Skyhigh	BehavesLike.Win32.Generic.hc
McAfee	RDN/Generic.grp
Malwarebytes	Generic.Malware/Suspicious
K7AntiVirus	Adware ( 005a233d1 )
K7GW	Adware ( 005a233d1 )
CrowdStrike	win/grayware_confidence_90% (D)
ESET-NOD32	Win32/ITProductDev.A potentially unwanted
Avast	Win32:PUP-gen [PUP]
Google	Detected
Varist	W32/Trojan.IWP.gen!Eldorado
Antiy-AVL	GrayWare/Win32.ITProductDev.a
Cynet	Malicious (score: 100)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H06H423
Rising	Trojan.Generic@AI.99 (RDML:7DafcpWjNh94+OcNTsrZnA)
MaxSecure	Trojan.Malware.3411146.susgen
Fortinet	Riskware/ITProductDev
AVG	Win32:PUP-gen [PUP]

How to remove Win32/ITProductDev.A potentially unwanted?

Win32/ITProductDev.A potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X