Win64:AdwareSig [Adw] removal instruction

The Win64:AdwareSig [Adw] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64:AdwareSig [Adw] virus can do?

Presents an Authenticode digital signature

How to determine Win64:AdwareSig [Adw]?


File Info:
crc32: 4DE16672
md5: a7f6b79fe424273ac372f4483b666dbf
name: A7F6B79FE424273AC372F4483B666DBF.mlw
sha1: 60e3fd5c66468a1e1a93e771942134bb05c280f1
sha256: 248b3ae5a72070dbf234277db1188a1f9294b522b11296c55c94778f2151508f
sha512: cf8afb38151d51100286a65bd728c83dfe25e6352889842b8210123f4dc8b8b96acf2805f4d90acdf192a79c3e1b236251b4d7fa0961234a4a7667665a793542
ssdeep: 12288:pz0v3Q4PUi2fmCYoYHnacbbUKtS2MXJbx63hggzdNlUotXE4AFEXBE1Nyq:pIPQTikmCYoHKc2Q6TLtNq
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright VioletCeres Ltd. 2018
InternalName: violetceresuey.exe
FileVersion: 2.0.11.2
CompanyName: VioletCeres Ltd.
ProductName: VioletCeres software
ProductVersion: 2.0.11.2
FileDescription: VioletCeres file
OriginalFilename: violetcerespcd.exe
Translation: 0x040c 0x04b0

Win64:AdwareSig [Adw] also known as:

Elastic	malicious (high confidence)
DrWeb	Adware.Searcher.3213
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	AdWare:Win64/OpenSUpdater.aca32c09
Cybereason	malicious.fe4242
Symantec	PUA.OpenSwUpdater
ESET-NOD32	a variant of Win64/Adware.OpenSUpdater.AA
APEX	Malicious
Avast	Win64:AdwareSig [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.DManager.gen
BitDefender	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
NANO-Antivirus	Riskware.Win64.Searcher.fjgwpf
MicroWorld-eScan	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Tencent	Win64.Adware.Opensupdater.Lpva
Ad-Aware	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Sophos	Mal/Generic-S
Comodo	ApplicUnwnt@#1mebwcyy6wzmw
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.TrojanAitInject.tm
FireEye	Generic.mg.a7f6b79fe424273a
Emsisoft	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1129593
Antiy-AVL	Trojan/Generic.ASMalwS.26CB707
Microsoft	PUADlManager:Win32/OpenDownloadManager
GData	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
AhnLab-V3	PUP/Win64.DownloadManager.R235904
McAfee	Artemis!A7F6B79FE424
MAX	malware (ai score=71)
Malwarebytes	Adware.SpecialSearchOffer
Yandex	Trojan.GenAsa!s8HFY41IgjE
Ikarus	AdWare.Opensupdater
Fortinet	Adware/OpenSUpdater.235A
AVG	Win64:AdwareSig [Adw]
Paloalto	generic.ml

How to remove Win64:AdwareSig [Adw]?

Win64:AdwareSig [Adw] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X