We received the file DUALPAGESVC.EXE and detected that DUALPAGESVC.EXE is not good.
DUALPAGESVC.EXE is Adware. You should remove the file DUALPAGESVC.EXE.
Kill the process DUALPAGESVC.EXE and remove DUALPAGESVC.EXE from Windows.
Malware Analysis of DUALPAGESVC.EXE
Full path on a computer: %Program Files%\dualpage\dualpagesvc.exe
Detected by UnHackMe:
DUALPAGESVC.EXE
Default location: %Program Files%\dualpage\dualpagesvc.exe
Removal Results: Success
Number of reboot: 1
DUALPAGESVC.EXE is known as:
Adware.Kraddare.HB
DUALPAGESVC.EXE hash:
- MD5: 2c4a6c2c0f8f818d04b3fc5a04edeba9
The file tries to download information from some web sites.
How to quickly detect DUALPAGESVC.EXE presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Dualpage KB25031400\DisplayName: “Internet Dualpage KB25031400 ”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Dualpage KB25031400\UninstallString: “%Program Files%\dualpage\uninst.exe”
- HKLM\System\CurrentControlSet\Services\dualpage\ImagePath: “%Program Files%\dualpage\dualpagesvc.exe”
- HKLM\System\CurrentControlSet\Services\dualpage\DisplayName: “dualpage svc”
Folders:
- %Program Files%\dualpage
Files:
- %Program Files%\dualpage\dualpage.exe
- %Program Files%\dualpage\dualpagecnt.exe
- %Program Files%\dualpage\dualpagesvc.exe
- %Program Files%\dualpage\uninst.exe
- %WinDir%\dualpage.ini