Adware

How to remove “Win64/Adware.Petal.A”?

Malware Removal

The Win64/Adware.Petal.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win64/Adware.Petal.A virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Win64/Adware.Petal.A?


File Info:

crc32: 998EC294
md5: e7f434cc7ae0017c190ccb45b21798f5
name: SpeedZipSetupV2.1.6.6.exe
sha1: 1d43337bcc002b5f36cf120a903ae87d4af9280f
sha256: 1c1170266bf27531a8654f52393191319ae1f385bfdfed0704a467ab2557793b
sha512: 1cae34e733662984ab90277e6993823f966cc56374cd1363afa769ccf51e04b4577875f6e3a5878fceb2fe6ae97ed2eb56aa93f87b09302da5b46bbcb054fe82
ssdeep: 98304:Gn+xgA2+fre4TDGHo0kdEkV3/Z4o88HencqWvyInZ:G+G06ESga0aAOwh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017 x5e7fx897fx540cx57cex7f51x7edcx79d1x6280x6709x9650x8d23x4efbx516cx53f8
InternalName: setup
FileVersion: 2, 1, 6, 6
CompanyName: x5e7fx897fx540cx57cex7f51x7edcx79d1x6280x6709x9650x8d23x4efbx516cx53f8
ProductName: x6781x538bx7f29 x5b89x88c5x7a0bx5e8f
ProductVersion: 2, 1, 6, 6
FileDescription: x6781x538bx7f29 x5b89x88c5x7a0bx5e8f
OriginalFilename: setup.exe
Translation: 0x0804 0x04b0

Win64/Adware.Petal.A also known as:

McAfeeArtemis!E7F434CC7AE0
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusAdware ( 00516aa71 )
K7GWAdware ( 00516aa71 )
SymantecTrojan.Gen.2
GDataWin32.Application.Agent.930HKD
KasperskyHEUR:Trojan.Win32.Generic
AlibabaAdWare:Win32/Petal.19ae8c4d
NANO-AntivirusRiskware.Win64.Petal.eycbod
ViRobotAdware.Petal.4605112
AegisLabTrojan.Win32.Generic.4!c
AvastWin32:Adware-gen [Adw]
TencentMalware.Win32.Gencirc.11699afa
SophosGeneric PUA BN (PUA)
F-SecureAdware.ADWARE/Petal.iycys
DrWebAdware.Siggen.32974
ZillyaTrojan.Generic.Win32.381003
McAfee-GW-EditionArtemis!PUP
Cyren7Z/Application.TZHV
WebrootW32.Trojan.Gen
AviraADWARE/Redcap.eibag
MAXmalware (ai score=99)
ZoneAlarmHEUR:Trojan.Win32.Generic
ESET-NOD32a variant of Win64/Adware.Petal.A
FortinetW32/Generic!tr
AVGWin32:Adware-gen [Adw]

How to remove Win64/Adware.Petal.A?

Win64/Adware.Petal.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment