How to remove “Win32:Adware-AYH [Adw]”?

The Win32:Adware-AYH [Adw] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Adware-AYH [Adw] virus can do?

Authenticode signature is invalid

How to determine Win32:Adware-AYH [Adw]?


File Info:
name: A4DBAFE232EC99102D86.mlw
path: /opt/CAPEv2/storage/binaries/06f76cab1aa4f60e70e88f97f5d98f3b3c61e109fc407d6ebaa198fcf6173d48
crc32: 5EECFA7F
md5: a4dbafe232ec99102d8649cdcefb6d55
sha1: fc498749bedc55165d2e8d912360f0a4bc5388cf
sha256: 06f76cab1aa4f60e70e88f97f5d98f3b3c61e109fc407d6ebaa198fcf6173d48
sha512: f0e91022c310a505c726dd94721b4164971c503506649f7bbe26afe2c12a1b41e8c54b9af2ba9cbfcaa620cd44ebfe6d2a7e6206870a26aad436d40bc89fb978
ssdeep: 24576:HGmCCCCC46Ux3nzgSQjymIH8kZJ5PfS/X2LHOEoMe4tLf:mmCCCCCymOfcG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6256318CC4148A1D54BA778B4092AD1F2DB7EB2CE61CF511172BE081E3E95B1EB72B7
sha3_384: ae6e61c8ac7dc10ff5b695b35160922db4c6d2332d775a84ab7d88db773f8a6ffc9af775a1d5e11f39f8d40c8045c37d
ep_bytes: e86d360000e978feffff8bff558bec8b
timestamp: 2011-01-14 01:17:57

Version Info:
0: [No Data]

Win32:Adware-AYH [Adw] also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.Lollipop.2!c
FireEye	Generic.mg.a4dbafe232ec9910
Alibaba	AdWare:Win32/Lollipop.2944c8e3
Cybereason	malicious.232ec9
Symantec	Trojan.Gen.MBT
APEX	Malicious
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Lollipop.heur
NANO-Antivirus	Riskware.Win32.Zbot.cxogwv
Tencent	Win32.Trojan.Adware.Lnxz
Comodo	TrojWare.Win32.Skintrim.KX@51eenx
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
Sophos	Generic PUA PM (PUA)
Ikarus	Virus.Win32.Cryptor
eGambit	Unsafe.AI_Score_79%
Antiy-AVL	Trojan/Generic.ASMalwS.2FDDFF8
Microsoft	Program:Win32/Ymacco.AA06
Cynet	Malicious (score: 100)
McAfee	Artemis!A4DBAFE232EC
Rising	Trojan.Generic@ML.84 (RDML:2dn/egIWzLQkK7DD2yHPrQ)
Yandex	PUA.Lollipop!TSpgwG4TCN4
Fortinet	Adware/Lollipop
AVG	Win32:Adware-AYH [Adw]
Avast	Win32:Adware-AYH [Adw]

How to remove Win32:Adware-AYH [Adw]?

Win32:Adware-AYH [Adw] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X