Adware.WarThunder

 

* Registry path

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WarThunder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{588057c5-eee2-4E0E-948A-DFFFAE323721}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8e8ec2a4-874c-4F8C-99E5-CABD77948699}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F947E452-3463-4DBD-9A62-26657305BEEA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder sat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder sun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder05
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WarThunder24

 

* Files pah

 

C^Windows^System32^Tasks\WarThunder24
C^Windows^System32^Tasks\WarThunder sun
C^Windows^System32^Tasks\WarThunder sat
C^Users^Ad^Desktop\WarThunder.lnk
C^Users^Ad^AppData^Roaming^ZU_warthunder\wt.ico
C^Users^Ad^AppData^Roaming^ZU_WarThunder\Unpin.vbs
C^Users^Ad^AppData^Roaming^ZU_WarThunder\Uninstaller.exe
C^Users^Ad^AppData^Roaming^ZU_WarThunder\TaskScheduler.dll
C^Users^Ad^AppData^Roaming^ZU_WarThunder\PinItem.vbs
C^Users^Ad^AppData^Roaming^ZU_WarThunder\CreateShortcut.dll
C^Users^Ad^AppData^Roaming^Microsoft^Windows^Start Menu^Programs\WarThunder.lnk

 

C^Users^Ad^AppData^Roaming^ZU_WarThunder