TF00294823.DLL – Adware bProtector

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TF00294823.DLL – Adware bProtector removal

FileMD5Virus Alias
TF00294823.DLL 9547d1c9dd00844358ee3d733cd3e95a Adware bProtector
TF00294823.DLL 9547d1c9dd00844358ee3d733cd3e95a Trojan SuspiciousFile
TF00294823.DLL 9547d1c9dd00844358ee3d733cd3e95a Trojan Generic

TF00294823.DLL size: 4188160 bytes
TF00294823.DLL hash: 9547D1C9DD00844358EE3D733CD3E95A

Created files:

%TEMP%\tf00294823.dll
%Common AppData%\Winclean performap\Wincleanperformap.dll
%Common AppData%\Winclean performap\WincleanperformapSvc.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\dd43b191\Type: 10000000
HKLM\System\CurrentControlSet\Services\dd43b191\Start: 02000000
HKLM\System\CurrentControlSet\Services\dd43b191\DisplayName: Winclean performap
HKLM\System\CurrentControlSet\Services\dd43b191\ImagePath: “%WinDir%\System32\rundll32.exe” “c:\docume~1\alluse~1\applic~1\wincle~1\WincleanperformapSvc.dll”,service

Detected by UnHackMe:

TF00294823.DLL
Default location: %TEMP%\TF00294823.DLL

Dropper information:
MD5: 0c8b0774b5142b4d08e922fa5625c9ca
File size: 4868608 bytes

Leave a Reply