Generic6.BCPC

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Generic6.BCPC also known as Trj/Genetic.gen, Adware/Win32.Agent.

Malware Analysis of Generic6.BCPC – 1WKOQAFYH4MGHT.EXE

Created files:

%Program Files%\bestadblocker\1wkoqAFYh4MGHt.dat
%Program Files%\bestadblocker\1wkoqAFYh4MGHt.dll
%Program Files%\bestadblocker\1wkoqAFYh4MGHt.exe
%Program Files%\bestadblocker\1wkoqAFYh4MGHt.tlb
%Program Files%\PriceMinus\5eAHKCajQQELqz.dat

Autostart registry keys:

HKLM\Software\Classes\CLSID\{329BECD8-9883-4849-B1DB-7566AD83DD95}\InprocServer32\: “%Program Files%\bestadblocker\1wkoqAFYh4MGHt.dll”
HKLM\Software\Classes\CLSID\{E01F9A27-0406-4509-B9EE-B7C6581E9E84}\InprocServer32\: “%Program Files%\PriceMinus\5eAHKCajQQELqz.dll”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{06B99631-BFA2-3B7A-F58B-D067C2BA59B7}\DisplayName: “PriceMinus”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{06B99631-BFA2-3B7A-F58B-D067C2BA59B7}\UninstallString: “”%Program Files%\PriceMinus\5eAHKCajQQELqz.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\DisplayName: “bestadblocker”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\UninstallString: “”%Program Files%\bestadblocker\1wkoqAFYh4MGHt.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}\DisplayName: “Yoono Twitter LinkedIn Yo”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}\UninstallString: “”%Program Files%\Yoono Twitter LinkedIn Yo\Yoono Twitter LinkedIn Yo.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””

Detected by UnHackMe:

1WKOQAFYH4MGHT.EXE
Default location: %PROGRAM FILES%\BESTADBLOCKER\1WKOQAFYH4MGHT.EXE

Dropper hash(md5): 5feae630480dde8ecba9a558a288ec00

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

4
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera