Categories: Adware

Win64/Adware.OpenSUpdater.AW malicious file

The Win64/Adware.OpenSUpdater.AW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Adware.OpenSUpdater.AW virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win64/Adware.OpenSUpdater.AW?


File Info:
name: 858CE5EF2B6973679897.mlwpath: /opt/CAPEv2/storage/binaries/73c5e16716302c6d6ed15925212a4d598eed4d54cd52f21dfd932c9a7b17fb50crc32: EAF648DFmd5: 858ce5ef2b6973679897f5e22bca50desha1: ba73b2c08fa604f42519fb2adb425f2e8a3071fcsha256: 73c5e16716302c6d6ed15925212a4d598eed4d54cd52f21dfd932c9a7b17fb50sha512: 38549b37abf7e45811d2b952e68a4c6e3c7ae7d8aa584af654b61adc473486044ed339648ef2b24b239ac34ce4a5ff41282704d8b1117e928cd17959c98aa33fssdeep: 49152:igCluIWWFvJF7teNYyTPPuxBA+u2t6LMx25v:8lui74uyTPPuxBA+ht6LMxqvtype: PE32+ executable (console) x86-64, for MS Windowstlsh: T14CC53C4AD6B652E0E4B9D2368116B627FDF0785D8334A7E7574147360F22FE0AA3E384sha3_384: 1ee068409772b1e1f0b0642decd82dbeee76930bc842ce2bf918495319b3eedbcb837a0da5d67a3396128d8cbb522b05ep_bytes: 4883ec28e8ef0800004883c428e936fetimestamp: 2021-03-15 08:54:11
Version Info:
CompanyName: PowerBits IncFileDescription: PowerBitsFileVersion: 2.0.7.8InternalName: powerbitsLegalCopyright: PowerBits Inc 2021OriginalFilename: powerbits.exeProductName: PowerBitsProductVersion: 2.0.7.8Translation: 0x0409 0x04b0

Win64/Adware.OpenSUpdater.AW also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.50296355
FireEye	Trojan.GenericKD.50296355
McAfee	Artemis!858CE5EF2B69
Cylance	unsafe
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win64/Adware.OpenSUpdater.AW.gen
APEX	Malicious
BitDefender	Trojan.GenericKD.50296355
Emsisoft	Trojan.GenericKD.50296355 (B)
F-Secure	Heuristic.HEUR/AGEN.1304353
VIPRE	Trojan.GenericKD.50296355
McAfee-GW-Edition	Artemis
Sophos	Generic Reputation PUA (PUA)
GData	Trojan.GenericKD.50296355
Webroot	W32.Trojan.GenKD
Avira	HEUR/AGEN.1304353
Arcabit	Trojan.Generic.D2FF7623
ALYac	Trojan.GenericKD.50296355
MAX	malware (ai score=86)
Malwarebytes	Adware.SpecialSearchOffer
Rising	Adware.OpenSUpdater!8.C9C (CLOUD)
Ikarus	AdWare.Opensupdater
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_90% (W)