Remove AdHelper.g - Spyware Removal Information

More than 1309737 spyware signatures and growing

Spywarelib Search

Search in:

Spywares

Files

Md5

Registry

Adware.AdHelper.g Analysis Report

Threat Submitted On: 5/10/2007 3:37:30 PM

Threat Analysed On: 5/10/2007 8:37:30 PM

Threat Updated On: 11/8/2009 12:56:22 AM

Type : Adware

Symptoms of AdHelper.g

Displays porn/abusive content or intrusive third-party advertisements.
Shows deceptive or false warning.
Generates advertisement even when the program is not running
Synchronously installs other bundled program.
The program can places unwanted adverts on computer screen.

Removal Recommended (Click here to remove automatically)

Removal Recommended

Information

Alias : AdWare.Win32.AdHelper.g

Md5 Hash : [492ebef53d6c85e32c0c81e5f2dd4825]

File Size : (81920 bytes)

Technical Details

Here are the Technical findings of our analysis team after analyzing this malware in detail :-

Creates the following infected Files on user's System

Note:

Delete the following Files to remove Infection

File: updatesr.ini
Path : %workingdir%

	Md5Hash :


		6ccb126d780ad2f432af7fa17cfa3b4d ( 82 bytes)


		96c514d4e00b23295a75a1db4e9eb1b1 ( 81 bytes)

File: [randomname].exe
Path : %workingdir%

	Md5Hash :


		12bc388f77a67cbb60ebc7b0d32541dc ( 81940 bytes)


		2c4b815d543ff92c2470b4b158402fcc ( 81938 bytes)


		3fec77892d1798838116499b86f48586 ( 81941 bytes)


		492ebef53d6c85e32c0c81e5f2dd4825 ( 81920 bytes)


		5b5d74385310b50d9325ef86d1ee44ae ( 81937 bytes)


		5e6cd350cff1f9e555a86b87c367adf1 ( 81950 bytes)


		607e3933a7467ef45bef1b52b2f8ddd0 ( 81943 bytes)


		778f07a4c6aea657078d8694af8c0089 ( 81935 bytes)


		7e31065998ef70caf94d246efdf6b5a6 ( 81936 bytes)


		83ccb4209e7b819f5e1b848855bdb052 ( 81942 bytes)


		9f1207c91784552be6aba544b21da141 ( 77826 bytes)


		b77014627bab7d57a13ecef8baff885e ( 81939 bytes)


		be74e7dbe80a024d6bed4165e9d01878 ( 81945 bytes)

Also creates the following files on user's System which are also created by Genuine Software :-

Note:

These file(s) can be kept as they are also created by genuine Software.

File : updatesr.ini
Path : %workingdir%

	Md5Hash :


		1069070fb17091d88cd1e366e95be987 ( 82 bytes)


		3e4fc7fe3320e15b716ffab9db4130a3 ( 82 bytes)


		499b8465a427d8a99e43bcf403c4b8ff ( 82 bytes)


		53c853a51cedda293271f72b728abe24 ( 82 bytes)


		55d79f159cd3250417efebbe617229aa ( 82 bytes)


		5947036ffbba2be5b44d8e56a752726f ( 82 bytes)


		9ca4617fc8306ad05a11a35c04cbfdb6 ( 82 bytes)


		be3840a238589d7b204370910330c097 ( 82 bytes)


		c759b9fa531ee1d03c2df5c2b2ef45dc ( 82 bytes)


		ce05e9ebd16290c8e4bdd1931da6f690 ( 82 bytes)


		f9a21df9b984c3a964241128ce96fdb9 ( 82 bytes)

NOTE:

1. %workingdir% Refers to the current directory in which user is working.

Important: We strongly recommend that you backup the Registry before making any changes to it. Incorrect changes to the Registry can result in permanent data loss or corrupted Files. Modify the malicious\suspicious Subkeys only.

Click Here for more spywarelib.com recommended PC Security and Optimization Tools

To modify registry entries in Windows Operating System:
Follow Steps:
1. Click Start > Run
2. Type “regedit” : to open registry editor
3. Navigate to required registry Key from the Left Tree control and modify accordingly.