TF00294823.DLL – Adware bProtector

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TF00294823.DLL – Adware bProtector removal

File MD5 Virus Alias
TF00294823.DLL 0d9c226bfe0eb5f756b728a19b2c6f13 Adware bProtector
TF00294823.DLL 0d9c226bfe0eb5f756b728a19b2c6f13 Trojan Generic

TF00294823.DLL size: 4183552 bytes
TF00294823.DLL hash: 0D9C226BFE0EB5F756B728A19B2C6F13

Created files:

%TEMP%\tf00294823.dll
%Common AppData%\WinTurbo\WinTurbo.dll
%Common AppData%\WinTurbo\WinTurboSvc.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\05f58b7c\Type: 10000000
HKLM\System\CurrentControlSet\Services\05f58b7c\Start: 02000000
HKLM\System\CurrentControlSet\Services\05f58b7c\DisplayName: WinTurbo
HKLM\System\CurrentControlSet\Services\05f58b7c\ImagePath: “%WinDir%\System32\rundll32.exe” “c:\docume~1\alluse~1\applic~1\winturbo\WinTurboSvc.dll”,service

Detected by UnHackMe:

TF00294823.DLL
Default location: %TEMP%\TF00294823.DLL

Dropper information:
MD5: 9a1cd51b51e7407d39ed4e5203e597d8
File size: 4857344 bytes

Leave a Reply