wsupdsvc.exe – Adware WhiteSmoke

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

wsupdsvc.exe – Adware WhiteSmoke removal

File Virus Alias
wsupdsvc.exe Adware WhiteSmoke

Created files:

%Program Files%\Uninstall Information\ib_uninst_0\uninstall.exe – Adware WhiteSmoke
%Common AppData%\UpdaterService\wsupdsvc.exe – Adware WhiteSmoke
%Temp%\ibtmpe032517\intallLog – Adware WhiteSmoke

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\UpdaterService\Type: 20000000
HKLM\System\CurrentControlSet\Services\UpdaterService\Start: 02000000
HKLM\System\CurrentControlSet\Services\UpdaterService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\UpdaterService\DisplayName: WhiteSmoke Updater Service
HKLM\System\CurrentControlSet\Services\UpdaterService\ImagePath: “%Common AppData%\UpdaterService\wsupdsvc.exe” /SERVICE

Detected by UnHackMe:

wsupdsvc.exe
Default location: %Common AppData%\UpdaterService\wsupdsvc.exe

Dropper information:
SHA256: 50250392a4253c57299adae6c95fc1c881b390db73d5add728c8db98911f6eaa
SHA1: 826f82df1fd001d818a90e4e78de1addb776057f
MD5: 6f3812807b7f4f6a72676a8d6ee95dea
File size: 537464 bytes

Leave a Reply