We received the file DUALPAGE.EXE and detected that DUALPAGE.EXE is not good.
DUALPAGE.EXE is Adware. You should remove the file DUALPAGE.EXE.
Kill the process DUALPAGE.EXE and remove DUALPAGE.EXE from Windows.
Malware Analysis of DUALPAGE.EXE
Full path on a computer: %Program Files%\dualpage\dualpage.exe
Detected by UnHackMe:
DUALPAGE.EXE
Default location: %Program Files%\dualpage\dualpage.exe
Removal Results: Success
Number of reboot: 1
DUALPAGE.EXE is known as:
Adware.Kraddare.HX
DUALPAGE.EXE hash:
- MD5: 50a90638b6d33ec28b9b9c38e961790e
The file tries to connect to the dangerous web site.
How to quickly detect DUALPAGE.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Dualpage KB25031400\DisplayName: “Internet Dualpage KB25031400 ”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Dualpage KB25031400\UninstallString: “%Program Files%\dualpage\uninst.exe”
- HKLM\System\CurrentControlSet\Services\dualpage\ImagePath: “%Program Files%\dualpage\dualpagesvc.exe”
- HKLM\System\CurrentControlSet\Services\dualpage\DisplayName: “dualpage svc”
Folders:- %Program Files%\dualpage
Files:- %Program Files%\dualpage\dualpage.exe
- %Program Files%\dualpage\dualpagecnt.exe
- %Program Files%\dualpage\dualpagesvc.exe
- %Program Files%\dualpage\uninst.exe
- %WinDir%\dualpage.ini