Generic6.BPSA also known as GrayWare[AdWare:not-a-virus]/Win32.MultiPlug.heur, Win32.Adware.Generic.bb, BrowserModifier:Win32/Diplugem. Malware Analysis of Generic6.BPSA – 9E31C3364393F57C52DF6EB5CDE4A121.EXE Created files: %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\3239b916a55b6b1b %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\4b6335b2c4d27ab5 %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.dat %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.exe %WinDir%\Tasks\FlavorFavors.job Detected by UnHackMe: 9E31C3364393F57C52DF6EB5CDE4A121.EXE Default location: %COMMON APPDATA%\{B9DE8971-E510-C14E-B9DE-E8971E5125C7}\9E31C3364393F57C52DF6EB5CDE4A121.EXE Dropper hash(md5): 9e31c3364393f57c52df6eb5cde4a121 UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means…

Continue reading →

HW32.Packed.E781 also known as Gen:Variant.Adware.MultiPlug.18, Application.Win32.MultiPlug.HD, Win32.Adware.Generic.bb. Malware Analysis of HW32.Packed.E781 – 9E31C3364393F57C52DF6EB5CDE4A121.EXE Created files: %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\3239b916a55b6b1b %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\4b6335b2c4d27ab5 %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.dat %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.exe %WinDir%\Tasks\FlavorFavors.job Detected by UnHackMe: 9E31C3364393F57C52DF6EB5CDE4A121.EXE Default location: %COMMON APPDATA%\{B9DE8971-E510-C14E-B9DE-E8971E5125C7}\9E31C3364393F57C52DF6EB5CDE4A121.EXE Dropper hash(md5): 9e31c3364393f57c52df6eb5cde4a121 UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means…

Continue reading →

Riskware.Win32.MultiPlug.duqvwk also known as SMG.Heur!cg1, BrowserModifier:Win32/Diplugem, Gen:Variant.Adware.MultiPlug.18. Malware Analysis of Riskware.Win32.MultiPlug.duqvwk – 9E31C3364393F57C52DF6EB5CDE4A121.EXE Created files: %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\3239b916a55b6b1b %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\4b6335b2c4d27ab5 %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.dat %Common Appdata%\{b9de8971-e510-c14e-b9de-e8971e5125c7}\9e31c3364393f57c52df6eb5cde4a121.exe %WinDir%\Tasks\FlavorFavors.job Detected by UnHackMe: 9E31C3364393F57C52DF6EB5CDE4A121.EXE Default location: %COMMON APPDATA%\{B9DE8971-E510-C14E-B9DE-E8971E5125C7}\9E31C3364393F57C52DF6EB5CDE4A121.EXE Dropper hash(md5): 9e31c3364393f57c52df6eb5cde4a121 UnHackMe removes malware invisible for your antivirus! UnHackMe is compatible with most antivirus software. UnHackMe is 100% CLEAN, which means…

Continue reading →