Win32/RiskWare.YouXun.AD removal tips

The Win32/RiskWare.YouXun.AD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/RiskWare.YouXun.AD virus can do?

Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

side.compres.123dell.top

How to determine Win32/RiskWare.YouXun.AD?


File Info:
crc32: F1AA3EA3
md5: 40887f5af0020bcc48c4869bcac32b1a
name: 40887F5AF0020BCC48C4869BCAC32B1A.mlw
sha1: d1978018c49036370dcc0c15914c5f09de24dea7
sha256: 1d115dd1d9eed70d18aaca42ddb6307e90cf87091af49faf49e5ecc402e0e1ed
sha512: 3345be2ba2209c8874b7c852281bb69d57f801542ab642b53790a9cd16d59c489c48fd2a7dfe780bf21ac3c39de5f88045a97b6cf5a6a009ae0395276640f691
ssdeep: 49152:cVaLq/BIjfvD/ZPNkDU4TweADCmLeYDKBwvNT0bA1ZrRvpmqN:oaLqCHDhlkDU4TweADCmLeYOBwvNTkuJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) 2021
InternalName: elections
FileVersion: 8.5.1.0
CompanyName: 
Comments: 
ProductName: elections
ProductVersion: 8.5.1.0
FileDescription: Unified Highway Eastern culture
OriginalFilename: elections.exe
Translation: 0x0804 0x04b0

Win32/RiskWare.YouXun.AD also known as:

K7AntiVirus	Riskware ( 0057a9901 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.47433970
Cylance	Unsafe
Zillya	Tool.YouXun.Win32.1289
Sangfor	Trojan.Win32.Save.a
Alibaba	AdWare:Win32/YouXun.102d
K7GW	Riskware ( 0057a9901 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/RiskWare.YouXun.AD
APEX	Malicious
Avast	Win32:Sality [Inf]
Kaspersky	not-a-virus:HEUR:Downloader.Win32.YXdown.gen
BitDefender	Trojan.GenericKD.47433970
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScan	Trojan.GenericKD.47433970
Tencent	Pua:Adware.Win32.Ddlives.16000016
Ad-Aware	Trojan.GenericKD.47433970
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34294.LI0@ayumoGgj
VIPRE	Virus.Win32.Sality.atbh (v)
McAfee-GW-Edition	Artemis!Virus
FireEye	Generic.mg.40887f5af0020bcc
Emsisoft	Trojan.GenericKD.47433970 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Agentb.its
Avira	TR/Patched.Ren.Gen
eGambit	Unsafe.AI_Score_75%
Antiy-AVL	Trojan/Generic.ASMalwS.3465600
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Trojan.GenericKD.47433970
Acronis	suspicious
McAfee	GenericRXQT-YL!40887F5AF002
MAX	malware (ai score=83)
VBA32	BScope.Trojan.FakeAlert
Malwarebytes	Malware.AI.4221208108
Rising	Adware.LinkAdd!1.CD70 (CLASSIC)
Yandex	PUA.Downloader!6414sVtZHtg
Fortinet	Riskware/YouXun
AVG	Win32:Sality [Inf]
Paloalto	generic.ml

How to remove Win32/RiskWare.YouXun.AD?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/RiskWare.YouXun.AD removal tips