Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

SK.ENHANCER.EXE is PUP Optional.MultiPlug.A

$
0
0

The file SK.ENHANCER.EXE is not a virus.
The program SK.ENHANCER.EXE is a system security tool.
But the SK.ENHANCER.EXE tool may be used to compromise computer security by the hacker.
Use the SK.ENHANCER.EXE file at your own risk!
You can delete the SK.ENHANCER.EXE program from your computer with problems.

Malware Analysis of SK.ENHANCER.EXE
Full path on a computer: %Common Appdata%\QuickSet\SK.Enhancer\SK.Enhancer.exe

Detected by UnHackMe:

SK.ENHANCER.EXE
Default location: %Common Appdata%\QuickSet\SK.Enhancer\SK.Enhancer.exe

Removal Results: Success
Number of reboot: 1

SK.ENHANCER.EXE is known as:

PUP.Optional.MultiPlug.A, Trojan-Downloader ( 0048ec4f1 ), Trojan.Symmi.cnlorl, Trojan.Agent.nsR3DbgfvU8, TrojWare.Downloader.Agent.~AKO, TR.Symmi.14078.7, Troj.Undef.(kcloud), W32.Trojan.QAZB-2907, a variant of Win32.TrojanDownloader.Agent.AFD, Trojan-Downloader.Agent, W32.Agent.AFD.tr.dldr, Downloader.Agent2.BRRB, Trojan.Downloader.AFD

SK.ENHANCER.EXE hash:

  • MD5: 83528348154f9f3f3c332191b0849b25
The file tries to connect to the dangerous web site.
How to quickly detect SK.ENHANCER.EXE presence?
Registry:
  • HKCU\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Version: “24,0,0,0″
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\progra~1\ska573~1.enh\psupport.dll c:\progra~1\websea~1\sprote~1.dll”
Folders:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\searchplugins
  • %Local Appdata%\Temp
  • %Common Appdata%\InstallMate
  • %Common Appdata%\InstallMate\FD0865FD
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}
  • %Common Appdata%\QuickSet
  • %Common Appdata%\QuickSet\Setup
  • %Common Appdata%\QuickSet\SK.Enhancer
  • %Common Appdata%\QuickSet\SK.Enhancer\5881886836
  • %Program Files%\Sk.Enhancer
  • %Program Files%\WebSearch
Files:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\searchplugins\WebSearch.xml
  • %Desktop%\error.txt
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\20131122111905.log
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\Custom.dll
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\Readme.txt
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\Setup.dat
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\Setup.exe
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\Setup.ico
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\TsuDll.dll
  • %Common Appdata%\InstallMate\{F3238917-4341-44E8-A603-0B6328C0ABE1}\_Setup.dll
  • %Common Appdata%\QuickSet\SK.Enhancer\5881886836.ini
  • %Common Appdata%\QuickSet\SK.Enhancer\SK.Enhancer.exe
  • %Program Files%\Sk.Enhancer\psupport.dll
  • %Program Files%\Sk.Enhancer\uninstall.exe
  • %Program Files%\WebSearch\sprotector.dll
  • %Program Files%\WebSearch\uninstall.exe
  • %WinDir%\Tasks\SK.Enhancer-S-5881886836.job


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>