Malware

What is “Win32/Toolbar.Crossrider.AW potentially unwanted”?

Malware Removal

The Win32/Toolbar.Crossrider.AW potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Toolbar.Crossrider.AW potentially unwanted virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
errors.myserverstat.com
a.tomx.xyz

How to determine Win32/Toolbar.Crossrider.AW potentially unwanted?


File Info:

crc32: 528BF0E5
md5: 841dd7c1cf38785536a6712f1a8f3f23
name: 841DD7C1CF38785536A6712F1A8F3F23.mlw
sha1: ca93a4f6a6a480b9774e86cc6b88cdd957ceb3b3
sha256: dc9f0c9dcac02400209ae877afb478b01f84f2591573b7d5074cc274e7dc8846
sha512: 4e0afb20355be2737e4867fc8f6fc5d3887344fbf6d11d42651a83581bc4a084b8316060b566d03b61ff7b38796f06a39ef1eb4055bd8ef9a99470d40e0b0b23
ssdeep: 1536:PQKglfOo0OL0qEhJxZf5/70pOqAcV7W9sWjcd2tC:rsOcYXH1u7t2tC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Toolbar.Crossrider.AW potentially unwanted also known as:

K7AntiVirusAdware ( 004b98f31 )
Elasticmalicious (high confidence)
DrWebTrojan.Crossrider.27207
CynetMalicious (score: 100)
ALYacGen:Application.Heur.gqW@l4jEwbli
CylanceUnsafe
ZillyaTrojan.GoogUpdate.Win32.8867
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/GoogUpdate.bc016770
K7GWAdware ( 004b98f31 )
Cybereasonmalicious.1cf387
BaiduWin32.Adware.CrossRider.a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Toolbar.Crossrider.AW potentially unwanted
APEXMalicious
AvastFileRepMetagen [Malware]
KasperskyTrojan.NSIS.GoogUpdate.lef
BitDefenderGen:Application.Heur.gqW@l4jEwbli
NANO-AntivirusRiskware.Win32.AdLoad.dctyop
MicroWorld-eScanGen:Application.Heur.gqW@l4jEwbli
TencentMalware.Win32.Gencirc.11495cb3
Ad-AwareGen:Application.Heur.gqW@l4jEwbli
SophosGeneric PUA MK (PUA)
ComodoApplication.Win32.InstallCore.GIFI@5j0lo9
BitDefenderThetaGen:NN.ZexaCO.34170.gqW@a4jEwbli
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PUP.nh
FireEyeGeneric.mg.841dd7c1cf387855
EmsisoftGen:Application.Heur.gqW@l4jEwbli (B)
SentinelOneStatic AI – Malicious PE
JiangminAdware.Adload.dv
AviraADWARE/CrossRider.Gen
Antiy-AVLTrojan/Generic.ASMalwS.AE2127
KingsoftWin32.Heur.KVMH017.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.A!ml
SUPERAntiSpywarePUP.InstallCore/Variant
GDataWin32.Adware.Crossrider.AB
Acronissuspicious
McAfeeArtemis!841DD7C1CF38
MAXmalware (ai score=99)
VBA32AdWare.AdLoad
MalwarebytesPUP.Optional.CrossRider
RisingTrojan.Generic@ML.100 (RDML:LSQ3fYR3b+rXmQm39J5ODw)
YandexTrojan.GenAsa!7CxCIRomxog
IkarusTrojan.GoogUpdate
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Win32/Toolbar.Crossrider.AW potentially unwanted?

Win32/Toolbar.Crossrider.AW potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment