Remove {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS malware
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS Malware Removal Guide
Manual removal instructions:
Antivirus Report of {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS:
{54e9b4e5-84c4-42a5-a254-fd1f8319fc98}gw.sys
Full path on a computer: %SYSDIR%\DRIVERS\{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\{54e9b4e5-84c4-42a5-a254-fd1f8319fc98}Gw\ImagePath: "system32\drivers\{54e9b4e5-84c4-42a5-a254-fd1f8319fc98}Gw.sys"
Related Files:
%SYSDIR%\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_FOR_KB3135782_RTM~31BF3856AD364E35~X86~~10.0.1.0.CAT
%SYSDIR%\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_FOR_KB3135782~31BF3856AD364E35~X86~~10.0.1.0.CAT
%SYSDIR%\DRIVERS\{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS
%SYSDIR%\GROUPPOLICY\GPT.INI
%SYSDIR%\GROUPPOLICY\MACHINE\REGISTRY.POL
The file {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS was tested and considered as Adware.
Adware displays pop-up ads in order to generate revenue for its author.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS shows pop-up ads or text ads or advertising banners.
Sometimes {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS displays coupons banners for sites you are visiting.
The banners are really annoying and invasive.
There is no way to stop {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS unwanted pop-ups.
Clicking link causes randomly redirecting your browser to the different pages with advertisements of computer speedup utilities fake antiviruses and other unwanted software.
It can be downloaded from the program's web site or bundled with some third-party software.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS is often bundled within the installers from download sites.
Most of software download sites distribute pay-per-install bundles instead of original installers.
We recommend you to download software only from vendor web site or from trusted sources.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS is related to: Adware.BrowseFox.V, {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS.
Virustotal = 30/54
MD5 = 3C2D08C098A1920B70F471D27D4EB437
File Size: 42824
File information:
OriginalFilename: StdLib.sys
FileDescription: StdLib
InternalName: StdLib.sys
CompanyName: StdLib
FileVersion: 1.4.4.6 built by: WinDDK
LegalCopyright: Copyright c 2013 StdLib
| {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS | Malware |
| {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS | Dangerous |
| {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS | High Risk |
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\{54e9b4e5-84c4-42a5-a254-fd1f8319fc98}Gw\ImagePath: "system32\drivers\{54e9b4e5-84c4-42a5-a254-fd1f8319fc98}Gw.sys"
Related Files:
%SYSDIR%\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_FOR_KB3135782_RTM~31BF3856AD364E35~X86~~10.0.1.0.CAT
%SYSDIR%\CATROOT\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PACKAGE_FOR_KB3135782~31BF3856AD364E35~X86~~10.0.1.0.CAT
%SYSDIR%\DRIVERS\{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS
%SYSDIR%\GROUPPOLICY\GPT.INI
%SYSDIR%\GROUPPOLICY\MACHINE\REGISTRY.POL
The file {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS was tested and considered as Adware.
Adware displays pop-up ads in order to generate revenue for its author.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS shows pop-up ads or text ads or advertising banners.
Sometimes {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS displays coupons banners for sites you are visiting.
The banners are really annoying and invasive.
There is no way to stop {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS unwanted pop-ups.
Clicking link causes randomly redirecting your browser to the different pages with advertisements of computer speedup utilities fake antiviruses and other unwanted software.
How did {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS got on my computer?
It can be downloaded from the program's web site or bundled with some third-party software.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS is often bundled within the installers from download sites.
Most of software download sites distribute pay-per-install bundles instead of original installers.
We recommend you to download software only from vendor web site or from trusted sources.
{54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS is related to: Adware.BrowseFox.V, {54E9B4E5-84C4-42A5-A254-FD1F8319FC98}GW.SYS.
Virustotal = 30/54
MD5 = 3C2D08C098A1920B70F471D27D4EB437
File Size: 42824
File information:
OriginalFilename: StdLib.sys
FileDescription: StdLib
InternalName: StdLib.sys
CompanyName: StdLib
FileVersion: 1.4.4.6 built by: WinDDK
LegalCopyright: Copyright c 2013 StdLib
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.