The file HNAADVBQR.EXE is malware related.
You must delete the file HNAADVBQR.EXE immediately!
Delete the file HNAADVBQR.EXE without delay!
Kill the process HNAADVBQR.EXE and remove HNAADVBQR.EXE from the Windows startup.
Malware Analysis of HNAADVBQR.EXE
Full path on a computer: %TEMP%\NSI7E74.TMP\HNAADVBQR.EXE
Detected by UnHackMe:
HNAADVBQR.EXE
Default location: %TEMP%\NSI7E74.TMP\HNAADVBQR.EXE
Removal Results: Success
Number of reboot: 1
HNAADVBQR.EXE is known as:
Trojan Downloader
How to quickly detect HNAADVBQR.EXE presence?
![]( "Files")
Files:
Files:- %APPDATA%\ROAMING\MOZILLA\FIREFOX\PROFILES\ZP7TNB55.DEFAULT\EXTENSIONS\05DD836E-2CBD-4204-9FF3-2F8A8665967D@A8876730-FB0C-4057-A2FC-F9C09D438E81.COM\CHROME\CONTENT\API\ASYNCDB.JS
- %APPDATA%\ROAMING\MOZILLA\FIREFOX\PROFILES\ZP7TNB55.DEFAULT\EXTENSIONS\05DD836E-2CBD-4204-9FF3-2F8A8665967D@A8876730-FB0C-4057-A2FC-F9C09D438E81.COM\CHROME\CONTENT\API\BROWSERACTION.JS
- %APPDATA%\ROAMING\MOZILLA\FIREFOX\PROFILES\ZP7TNB55.DEFAULT\EXTENSIONS\05DD836E-2CBD-4204-9FF3-2F8A8665967D@A8876730-FB0C-4057-A2FC-F9C09D438E81.COM\CHROME\CONTENT\API\CONTEXTMENU.JS
- %APPDATA%\ROAMING\MOZILLA\FIREFOX\PROFILES\ZP7TNB55.DEFAULT\EXTENSIONS\05DD836E-2CBD-4204-9FF3-2F8A8665967D@A8876730-FB0C-4057-A2FC-F9C09D438E81.COM\CHROME\CONTENT\API\FIREFOX.JS
- %TEMP%\NSI7E74.TMP\HNAADVBQR.EXE