We received the file KUPING_V4.EXE and detected that KUPING_V4.EXE is not good.
KUPING_V4.EXE is Adware. You should remove the file KUPING_V4.EXE.
Kill the process KUPING_V4.EXE and remove KUPING_V4.EXE from Windows.
Malware Analysis of KUPING_V4.EXE
Full path on a computer:
Removal Results: Success
Number of reboot: 1
KUPING_V4.EXE is known as:
Adware.Kuping
KUPING_V4.EXE hash:
- MD5: 7dee0193e01240d2c874eaf7e2fb9ee7
The file tries to connect to the dangerous web site.
How to quickly detect KUPING_V4.EXE presence?
Registry:
- HKLM\Software\Classes\Applications\: “Setup[26]-kc.exe”
- HKLM\Software\Classes\Applications\KcMusic\Shell\open\command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\open\command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\Playlist\Command\: “”%Program Files%\KcBox\KcMusi_59329\KcMusic.exe” /list “%1″”
- HKLM\Software\Classes\Applications\KcMusic.exe\Shell\Playlist\: “?OEe OoAO?i?