Solved! Use HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE (Adware Downware) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE – Adware Downware removal

File MD5 Virus Alias
HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE aca72e3e425c2f75fd2fb4415c0509ee Adware Downware
HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE aca72e3e425c2f75fd2fb4415c0509ee Trojan NSIS

HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE size: 645880 bytes
HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE hash: ACA72E3E425C2F75FD2FB4415C0509EE

Created files:

C:\HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE
%SysDir%\HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE
%SysDir%\WINDOWSOTURUM.EXE
%WinDir%OTURUM.EXE
%AppData%\Windows Sesion Manager.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Sesion Manager: “%AppData%\Windows Sesion Manager.exe”

Detected by UnHackMe:

HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE
Default location: %SYSDIR%\HOTSPOTSHIELD_BY_ANCHORFREE_317-589.EXE

Dropper information:
MD5: 2425cfc4127a8cdd8bc13a37f1783895
File size: 1501184 bytes

Leave a Reply