Dmitry Sokolov recommends UnHackMe!
UnHackMe is a powerful tool against malware.
UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!
(5 / 5)
Adware.Mutabaha.937 also known as Hacktool ( 655367771 ), AdWare.ELEX.bh, a variant of Win32/ELEX.HD potentially unwanted.
Malware Analysis of Adware.Mutabaha.937 – ACGPRO.EXE
Created files:
C:\Documents and Settings\LocalService\Cookies\system@yessearches[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@yessearches[1].txt
%Program Files%\ACGPro\ACGPro Update\ACGPro.exe
%Program Files%\GtkFree\GtkFree Update\GtkFree.exe
%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe
Autostart registry keys:
HKLM\Software\Classes\AmigoHTML.NARYC4MAR452DWMECJZECYNNAA\shell\open\command\: “”%Local Appdata%\Amigo\Application\amigo.exe” — “%1″”
HKLM\Software\Clients\StartMenuInternet\amigo.exe\shell\open\command\: “”%Local Appdata%\Amigo\Application\amigo.exe””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall sto\UninstallString: “”%Program Files%\SearchesToYesbnd\unIns.exe” /cf={A16B1AF7-982D-40C3-B5C1-633E1A6A6678}”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall sto\DisplayName: “yessearches Uninstall”
HKLM\System\CurrentControlSet\Services\ggbugreport\ImagePath: “”%Program Files%\SearchesToYesbnd\bugreport.exe” {154DFF63-3402-4815-941A-AAD63AE8B428}”
HKLM\System\CurrentControlSet\Services\ggbugreport\DisplayName: “ggbugreport”
HKLM\System\CurrentControlSet\Services\GtkFree\ImagePath: “”%Program Files%\GtkFree\GtkFree Update\GtkFree.exe” {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678}”
HKLM\System\CurrentControlSet\Services\GtkFree\DisplayName: “GtkFree Update”
HKLM\System\CurrentControlSet\Services\Updater.Mail.Ru\ImagePath: “%Program Files%\Mail.Ru\MailRuUpdater\MailRuUpdater.exe –s”
HKLM\System\CurrentControlSet\Services\Updater.Mail.Ru\DisplayName: “Updater.Mail.Ru”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\amigo: “%Local Appdata%\Amigo\Application\amigo.exe –no-startup-window”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MailRuUpdater: “%Local Appdata%\Mail.Ru\MailRuUpdater.exe”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\GenieoUpdaterService: “”%Appdata%\Genieo\Application\Updater\bin\genupdater.exe” -wait 5″
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\GenieoSystemTray: “”%Appdata%\Genieo\Application\TrayUi\bin\gentray.exe””
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Online Weather: “%Local Appdata%\WebPlayer\Online Weather\WebPlayer.exe”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer\UninstallString: “%Local Appdata%\Unity\WebPlayer\Uninstall.exe /CurrentUser”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer\DisplayName: “Unity Web Player”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Online Weather\UninstallString: “”%Local Appdata%\WebPlayer\uninstall.exe” _?=%Local Appdata%\WebPlayer\Online Weather”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Online Weather\DisplayName: “Online Weather”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater\UninstallString: “%Local Appdata%\Mail.Ru\MailRuUpdater.exe uninstall”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo\DisplayName: “Genieo”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo\UninstallString: “%Appdata%\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo\UninstallString: “”%Local Appdata%\Amigo\Application\44.4.2403.3\Installer\setup.exe” –uninstall”
HKCU\Software\Amigo\UninstallString: “%Local Appdata%\Amigo\Application\44.4.2403.3\Installer\setup.exe”
Detected by UnHackMe:
ACGPRO.EXE
Default location: %PROGRAM FILES%\ACGPRO\ACGPRO UPDATE\ACGPRO.EXE
Dropper hash(md5): 99193b03807318f22d0f3d663165fd7c
UnHackMe
removes malware invisible for your antivirus!
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.