PUP.wxDfast
* path
C\Users\Ad\AppData\LocalLow\wxDfast\scode_docstart
C\Users\Ad\AppData\LocalLow\wxDfast\products
C\Users\Ad\AppData\LocalLow\wxDfast\jsondb.js
C\Users\Ad\AppData\LocalLow\wxDfast\content.js
C\Users\Ad\AppData\LocalLow\wxDfast\0_i
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\worker.js
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\sqlite.js
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\manifest.json
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\lsdb.js
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\jquery.js
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\indexeddb.js
C\Users\Ad\AppData\Local\Google\Chrome\User Data\Default\Extensions\kblnegkpokomfkjimodbanooejalebha\1.0_0\background.html
C\ProgramData\wxdfast\uninstall.exe
C\ProgramData\wxDfast\settings.ini
C\ProgramData\wxDfast\kblnegkpokomfkjimodbanooejalebha.crx
C\ProgramData\wxDfast\content.js
C\ProgramData\wxDfast\bhoclass.dll
C\ProgramData\wxDfast\background.html
C\ProgramData\Microsoft\Windows\Start Menu\Programs\wxDfast\wxDfast.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\wxDfast\Uninstall.lnk
* delete key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6FFE0A76-36FA-1D5D-50E9-40863A2D141E}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FFE0A76-36FA-1D5D-50E9-40863A2D141E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6FFE0A76-36FA-1D5D-50E9-40863A2D141E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kblnegkpokomfkjimodbanooejalebha
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F4C5E11-0612-48D2-8055-987992AAC432}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6FFE0A76-36FA-1D5D-50E9-40863A2D141E}
* delete value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID | {6FFE0A76-36FA-1D5D-50E9-40863A2D141E}
|
|
|