Home Malware Programs Adware Adware.LinkSwift

Adware.LinkSwift

Posted: September 12, 2013

Threat Metric

Ranking: 10,394
Threat Level: 2/10
Infected PCs: 34,431
First Seen: September 12, 2013
Last Seen: September 24, 2023
OS(es) Affected: Windows

Adware.LinkSwift is an adware program that uses pop-ups and browser redirects to display advertisements unrelated to your Web-browsing activities. Although Adware.LinkSwift does include a theoretically functional uninstall tool, malware experts found that using this tool left components of Adware.LinkSwift behind on the affected computer. Additionally, Adware.LinkSwift often is found in the presence of other PC threats and tends to cause general browser performance issues. As is the case for most types of adware, deleting Adware.LinkSwift with appropriate anti-malware programs is your best bet for stabilizing your browser and preventing any future advertisements from displaying without your consent.

Adware.LinkSwift: Swift Links to Content You Probably Don't Want

With compatibility currently confirmed only for Internet Explorer, Adware.LinkSwift is a program designed to display advertisements regularly while you browse the Web – even if you don't want them. Although malware experts have not classified advertising content from Adware.LinkSwift as being definitively malevolent, Adware.LinkSwift does display these advertisements automatically and does not offer any options for disabling them. One of the most side effects of an Adware.LinkSwift infection also is browser performance issues, such as slowdowns and poor Web page loading times, which may be caused by Adware.LinkSwift's resource usage or insistence on forcing your browser to load additional content by default. These advertisements have been seen in two formats thus far: pop-up windows and browser hijacks redirecting you to other sites arbitrarily.

Adware.LinkSwift's history is one that's full of incidents of Adware.LinkSwift being installed without the permission of the PC user, much like its display of advertisements. When considered by itself, Adware.LinkSwift only is a low-level PC threat, but Adware.LinkSwift often is installed with one or more other PC threats that may include additional security issues of their own. Adware.LinkSwift often is installed along with PUPs and questionable toolbars, particularly those related to Delta-search.com and other search sites. Homepage and search engine redirects are the most typical symptoms of these Potentially Unwanted Programs, along with the problems caused by Adware.LinkSwift by itself.

Beating Adware to the Punch on Controlling Your Web Browser

Adware.LinkSwift and other adware programs that control what type of Web pages are loaded in your browser always are security issues to be resolved expediently, and this continues to be true even if the advertisements shown by Adware.LinkSwift's attacks are non-malicious. Because many PC users have experienced major difficulties in deleting Adware.LinkSwift through its supposed uninstall tool, SpywareRemove.com malware experts encourage anti-malware-based solutions and software for removing Adware.LinkSwift. This is specific pertinent in light of the fact that Adware.LinkSwift often is not the only PC threat installed to your computer without your consent.

Free software websites, spammed e-mail file attachments, spammed social networking links and fake advertisements are some of the many infection vectors that may be abused by Adware.LinkSwift. Adware.LinkSwift usually may not be installed alone, and SpywareRemove.com malware researchers consider software bundles to be the most likely source of an Adware.LinkSwift infection.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\LinkSwift\bin\utilLinkSwift.exe File name: utilLinkSwift.exe
Size: 65.31 KB (65312 bytes)
MD5: 10df38f1a1fe6b0865d2885ac09024fe
Detection count: 9,802
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\LinkSwift\bin
Group: Malware file
Last Updated: March 26, 2021
C:\Program Files (x86)\LinkSwift\updateLinkSwift.exe File name: updateLinkSwift.exe
Size: 206.62 KB (206624 bytes)
MD5: dc4d31a8bab280a535376b7c44c81cd0
Detection count: 5,633
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\LinkSwift\updateLinkSwift.exe
Group: Malware file
Last Updated: January 16, 2021
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 2bb86a0ab448fb8baa4986bd5d03bbc4
Detection count: 475
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
%PROGRAMFILES(x86)%\LinkSwift\updater.exe File name: updater.exe
Size: 50.46 KB (50464 bytes)
MD5: 0b9c8589c0bcdd8ac33e177ef4f44a96
Detection count: 286
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\LinkSwift
Group: Malware file
Last Updated: November 25, 2013
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}w64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}w64.sys
Size: 61.11 KB (61112 bytes)
MD5: bf9c0f8babedf44629b376bc637c8c81
Detection count: 176
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 14, 2018
%WINDIR%\System32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}t.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}t.sys
Size: 55.22 KB (55224 bytes)
MD5: a8e2fe9a28a55db99f21a7fbe6a072a0
Detection count: 152
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\System32\drivers
Group: Malware file
Last Updated: November 27, 2019
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}w64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}w64.sys
Size: 61.11 KB (61112 bytes)
MD5: eaeffc1e65f65f9238079aa8a2c72376
Detection count: 84
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: October 6, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}w64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}w64.sys
Size: 61.11 KB (61112 bytes)
MD5: 5476015fc5947ae9eb40ed919c5402f0
Detection count: 77
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: October 6, 2014
%WINDIR%\System32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw.sys
Size: 52.92 KB (52920 bytes)
MD5: 96100423c810c537ff3658ec42420999
Detection count: 75
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\System32\drivers
Group: Malware file
Last Updated: October 6, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}w64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}w64.sys
Size: 61.11 KB (61112 bytes)
MD5: d2d9db0a2cd9c531b724ef909d9614ba
Detection count: 54
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: October 6, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 6f66ef9c3c10404061c8f1662427bcec
Detection count: 44
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 14, 2018
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 704fd2f7b38ffb3bccb45dd39f4946b1
Detection count: 25
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
C:\Program Files (x86)\LinkSwift\LinkSwift.Common.dll File name: LinkSwift.Common.dll
Size: 14.11 KB (14112 bytes)
MD5: 2fe4fff249d0bb8b53c93c5025fdbe86
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\LinkSwift\LinkSwift.Common.dll
Group: Malware file
Last Updated: January 16, 2021
c:\windows\system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: a25925e29be17d251310e0159b7e0509
Detection count: 19
File type: System file
Mime Type: unknown/sys
Path: c:\windows\system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}gw64.sys
Group: Malware file
Last Updated: April 4, 2022
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 6c1f961fad8d58e681848400ef166cd5
Detection count: 16
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 38390afc6779c71ac7b8b4a5ac1411ed
Detection count: 12
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: February 18, 2022
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 66370a429dd48174cc8a7de24793bb28
Detection count: 7
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: 533adffb12046bfe2aa11d920079270b
Detection count: 7
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: aea0d1ab9b4f603c803f046ed558c752
Detection count: 5
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014
system32\drivers\{25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys File name: {25d71abf-7776-46f5-a269-9951331f9030}Gw64.sys
Size: 61.11 KB (61112 bytes)
MD5: f0345338d453f9ef26f2ce9f22c21abe
Detection count: 2
File type: System file
Mime Type: unknown/sys
Path: system32\drivers
Group: Malware file
Last Updated: July 11, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{323420b6-65e5-4657-8106-a27392d4d4aa}{339CA35C-F74A-44C3-BD78-9CE3E8C9C560}{49FB101A-0A00-4E85-A807-8785C2D32604}{62E29692-5062-40FE-9989-1A9E9B8F76A5}File name without pathhttp_static.linkswift.co_0.localstoragehttp_static.linkswift.co_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\LinkSwiftSoftware\Microsoft\Internet Explorer\Approved Extensions\{323420B6-65E5-4657-8106-A27392D4D4AA}Software\Microsoft\Internet Explorer\DOMStorage\linkswift.coSOFTWARE\Microsoft\Tracing\updateLinkSwift_RASAPI32SOFTWARE\Microsoft\Tracing\updateLinkSwift_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{323420b6-65e5-4657-8106-a27392d4d4aa}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{323420B6-65E5-4657-8106-A27392D4D4AA}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{323420B6-65E5-4657-8106-A27392D4D4AA}SOFTWARE\Wow6432Node\LinkSwiftSOFTWARE\Wow6432Node\Microsoft\Tracing\updateLinkSwift_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateLinkSwift_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{323420b6-65e5-4657-8106-a27392d4d4aa}SYSTEM\ControlSet001\services\eventlog\Application\Update LinkSwiftSYSTEM\ControlSet001\services\eventlog\Application\Util LinkSwiftSYSTEM\ControlSet001\services\Update LinkSwiftSYSTEM\ControlSet001\services\Util LinkSwiftSYSTEM\ControlSet002\services\eventlog\Application\Util LinkSwiftSYSTEM\ControlSet002\services\Util LinkSwiftSYSTEM\CurrentControlSet\services\eventlog\Application\Update LinkSwiftSYSTEM\CurrentControlSet\services\eventlog\Application\Util LinkSwiftSYSTEM\CurrentControlSet\services\Update LinkSwiftSYSTEM\CurrentControlSet\services\Util LinkSwiftHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}LinkSwift

Additional Information

The following directories were created:
%PROGRAMFILES%\LinkSwift%PROGRAMFILES(x86)%\LinkSwift%TEMP%\LinkSwift
The following URL's were detected:
LinkSwift
Loading...