We received the file PLUS-HD-1.3-BUTTONUTIL64.EXE and detected that PLUS-HD-1.3-BUTTONUTIL64.EXE is not good.
PLUS-HD-1.3-BUTTONUTIL64.EXE is Adware. You should remove the file PLUS-HD-1.3-BUTTONUTIL64.EXE.
Kill the process PLUS-HD-1.3-BUTTONUTIL64.EXE and remove PLUS-HD-1.3-BUTTONUTIL64.EXE from Windows.
Malware Analysis of PLUS-HD-1.3-BUTTONUTIL64.EXE
Full path on a computer: %PROGRAMFILES%\PLUS-HD-1.3\PLUS-HD-1.3-BUTTONUTIL64.EXE
Detected by UnHackMe:
PLUS-HD-1.3-BUTTONUTIL64.EXE
Default location: %PROGRAMFILES%\PLUS-HD-1.3\PLUS-HD-1.3-BUTTONUTIL64.EXE
Removal Results: Success
Number of reboot: 1
PLUS-HD-1.3-BUTTONUTIL64.EXE is known as:
Adware.Plugin
How to quickly detect PLUS-HD-1.3-BUTTONUTIL64.EXE presence?
![]( "Files")
Files:
Files:- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\509508EF-0B14-4616-A557-0D58601BE33D@C4A581E9-0EA6-46DB-A185-58E021EE138C.COM\CHROME\CONTENT\API\FILEMANAGER.JS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\509508EF-0B14-4616-A557-0D58601BE33D@C4A581E9-0EA6-46DB-A185-58E021EE138C.COM\CHROME\CONTENT\API\DOM_BG.JS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\509508EF-0B14-4616-A557-0D58601BE33D@C4A581E9-0EA6-46DB-A185-58E021EE138C.COM\SKIN\SKIN.CSS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\509508EF-0B14-4616-A557-0D58601BE33D@C4A581E9-0EA6-46DB-A185-58E021EE138C.COM\CHROME\CONTENT\API\WEBREQUEST.JS
- %PROGRAMFILES%\PLUS-HD-1.3\PLUS-HD-1.3-BUTTONUTIL64.EXE