About “Win32/OfferCore.C potentially unwanted” infection

The Win32/OfferCore.C potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/OfferCore.C potentially unwanted virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Win32/OfferCore.C potentially unwanted?

File Info:
name: 78C7797E0D642F0464D1.mlw
path: /opt/CAPEv2/storage/binaries/57c655a59ed5e4a5e9aea7e9bfba28dfd2e23b0e554ff3253d0428310df881e6
crc32: 8D2338B7
md5: 78c7797e0d642f0464d1fca3071e47d2
sha1: a89b62a3af4836f649196f1e784762af7568fcfd
sha256: 57c655a59ed5e4a5e9aea7e9bfba28dfd2e23b0e554ff3253d0428310df881e6
sha512: c418e63e05a88d344fa81a763c116e909dcdcfff62332f9144491ebaf694224a724cc8407e9e5488fe67e0501366ef8bd1ab0f5d92c5a617e12b9358e827d715
ssdeep: 196608:U38JJEU16hTZl583S0LJu+mzfDkzUoXOM1ught7Se:V1MlCC0Ybzf4zUoXN8AH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B186012E72E76DEEC1364A7D457292DC54366E30640588DA26FF3B188B37428FE2B705
sha3_384: 6e5cf5c8a5d12b1775ffdd2a52548d2bb0462811f5ef6b54250a7073ee721a396e9df09fefd9020b417d6e4e9fb0af76
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2021-06-03 08:09:11

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Linkvertise GmbH & Co. KG                                   
FileVersion: 4.22.0.1            
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: Linkvertise GmbH & Co. KG                                   
ProductVersion: 4.22.0.1                                          
Translation: 0x0000 0x04b0

Win32/OfferCore.C potentially unwanted also known as:

How to remove Win32/OfferCore.C potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.