What is AdAntiHS.exe?

AdAntiHS.exe is part of AdAntiHS and developed by ????????????? according to the AdAntiHS.exe version information.

AdAntiHS.exe's description is "????"

AdAntiHS.exe is usually located in the 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\' folder.

Some of the anti-virus scanners at VirusTotal detected AdAntiHS.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on AdAntiHS.exe:

PropertyValue
Product nameAdAntiHS
Company name?????????????
File description????
Internal nameAdAntiHS.exe
Original filenameAdAntiHS.exe
Legal copyrightCopyright (C) 2016 ?????????????
Product version1, 0, 0, 1
File version1, 0, 0, 1

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product nameAdAntiHS
Company name?????????????
File description????
Internal nameAdAntiHS.exe
Original filenameAdAntiHS.exe
Legal copyrightCopyright (C) 2016 ?????????????
Product version1, 0, 0, 1
File version1, 0, 0, 1

Digital signatures [?]

AdAntiHS.exe is not signed.

VirusTotal report

29 of the 57 anti-virus programs at VirusTotal detected the AdAntiHS.exe file. That's a 51% detection rate.

ScannerDetection Name
Ad-Aware Gen:Variant.Graftor.298551
ALYac Gen:Variant.Graftor.298551
Arcabit Trojan.Graftor.D48E37
Avast Win32:Malware-gen
AVG Clicker.BMEW
Avira TR/Clicker.pxyhg
AVware Trojan.Win32.Generic!BT
BitDefender Gen:Variant.Graftor.298551
CrowdStrike malicious_confidence_100% (W)
Cyren W32/Heuristic-KPP!Eldorado
Emsisoft Gen:Variant.Graftor.298551 (B)
ESET-NOD32 a variant of Win32/TrojanClicker.Small.NDO
F-Prot W32/Heuristic-KPP!Eldorado
F-Secure Gen:Variant.Graftor.298551
Fortinet Malware_Generic.P0
GData Gen:Variant.Graftor.298551
Invincea trojandownloader.win32.redosdru.d!bit
K7AntiVirus Spyware ( 004f71241 )
K7GW Spyware ( 004f71241 )
McAfee Artemis!2A18AF9EDF83
McAfee-GW-Edition BehavesLike.Win32.Injector.nz
MicroWorld-eScan Gen:Variant.Graftor.298551
Panda Trj/Genetic.gen
Rising Malware.Heuristic!ET (rdm+)
Sophos Mal/Generic-S
Symantec Trojan.Gen.2
TrendMicro-HouseCall TROJ_GEN.R08NH09IJ16
VIPRE Trojan.Win32.Generic!BT
ViRobot Trojan.Win32.S.Graftor.32768.A[h]
29 of the 57 anti-virus programs detected the AdAntiHS.exe file.

AdAntiHS.exe removal instructions

The instructions below shows how to remove AdAntiHS.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the AdAntiHS.exe file for removal, restart your computer and scan it again to verify that AdAntiHS.exe has been successfully removed. Here are the removal instructions in more detail:

  1. Download and install FreeFixer: http://www.freefixer.com/download.html
  2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
    Screenshot of Start Scan button
  3. When the scan is finished, locate AdAntiHS.exe in the scan result and tick the checkbox next to the AdAntiHS.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate AdAntiHS.exe in the scan result.
    Red arrow point on the unwanted file
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdAntiHS.exe
  4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the AdAntiHS.exe file.
    Screenshot of Fix button
  5. Restart your computer.
  6. Start FreeFixer and scan your computer again. If AdAntiHS.exe still remains in the scan result, proceed with the next step. If AdAntiHS.exe is gone from the scan result you're done.
  7. If AdAntiHS.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
  8. Restart your computer.
  9. Start FreeFixer and scan your computer again. Verify that AdAntiHS.exe no longer appear in the scan result.
Please select the option that best describe your thoughts on the removal instructions given above








Free Questionnaires

Folder name variants

AdAntiHS.exe may also be located in other folders than C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\. The most common variants are listed below:

Hashes [?]

PropertyValue
MD52a18af9edf835c79a1f95b3c3a0a549e
SHA256d357ceb2ea237e92a8028f70dd72c8fd817a2cc0e766876fb0f46fbda333661b

Error Messages

These are some of the error messages that can appear related to adantihs.exe:

adantihs.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

adantihs.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

???? has stopped working.

End Program - adantihs.exe. This program is not responding.

adantihs.exe is not a valid Win32 application.

adantihs.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with AdAntiHS.exe?

To help other users, please let us know what you will do with AdAntiHS.exe:



What did other users do?

The poll result listed below shows what users chose to do with AdAntiHS.exe. 100% have voted for removal. Based on votes from 4 users.

Votes
Keep0 %
0
Remove100 %
4

NOTE: Please do not use this poll as the only source of input to determine what you will do with AdAntiHS.exe. Only 4 users has voted so far so it does not offer a high degree of confidence.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

SibD writes

1 thumb

The file runs every time you boot the system. If removed, restored when system start and run.
When the default path unavailable, created in the folder
%systemdrive%\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup and run.
I have not found where he is recovering

# 24 Sep 2016, 2:46

Roger Karlsson writes

0 thumbs

@SibD: Thank you very much for sharing! Please keep us updated if you find out more about the AdAntiHS.exe file.

# 25 Sep 2016, 23:50

Carlos writes

1 thumb

If the AdAntiHS.exe file is removed from %systemdrive%\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup, I noticed a commonstartup file is created at %systemdrive%\Windows\pss. I've deleted that too. Cleaned the registry of mentions of AdAntiHS but upon restarting, it all comes back. The only registries I have not erased that still mention AdAntiHS.exe are some appCompatCache keys, which as far as I understand are more a history of programs that have executed on the computer. FreeFixer detects and remove the executable well enough, but upon restart it comes back. Any other ideas on how to proceed?

# 11 Oct 2016, 5:28

Leave a reply