Dmitry Sokolov recommends UnHackMe!
UnHackMe is a powerful tool against malware.UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!
TR/Agent.566272.43 also known as Trojan.Gen, BehavesLike.Win32.PWSZbot.hm, Adware/Agent.agay.
Malware Analysis of TR/Agent.566272.43 – VWQV1S66GFYZX3.DLL
Created files:
%Common Appdata%\lcklmfcdaijcdhnkpgmfbibhmhipaiga\zDgpnVACv.js
%Program Files%\PriceuLess\VWqv1s66gfYZx3.dat
%Program Files%\PriceuLess\VWqv1s66gfYZx3.dll
%Program Files%\PriceuLess\VWqv1s66gfYZx3.exe
%Program Files%\PriceuLess\VWqv1s66gfYZx3.tlb
Autostart registry keys:
HKLM\Software\Classes\CLSID\{d5d1b6f4-3b1d-4598-a20e-54d00de2e5f6}\InprocServer32\: “%Program Files%\YoutUbeAddBloCkeee\Bbawh5X7wfk3fs.dll”
HKLM\Software\Classes\CLSID\{fb95d2e9-e68a-47dd-bb52-4b699e77ec1d}\InprocServer32\: “%Program Files%\PriceuLess\VWqv1s66gfYZx3.dll”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\DisplayName: “YoutUbeAddBloCkeee”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\UninstallString: “”%Program Files%\YoutUbeAddBloCkeee\Bbawh5X7wfk3fs.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}\DisplayName: “PriceuLess”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}\UninstallString: “”%Program Files%\PriceuLess\VWqv1s66gfYZx3.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
Detected by UnHackMe:
VWQV1S66GFYZX3.DLL
Default location: %PROGRAM FILES%\PRICEULESS\VWQV1S66GFYZX3.DLL
Dropper hash(md5): 5ab921eb4820a6143ac89bd020c49410
UnHackMe
removes malware invisible for your antivirus!
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.