PUP.WebInternet
* Registry path
HKEY_CURRENT_USER\Software\WebinternetsecurityInstalled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASMANCS
HKEY_LOCAL_MACHINE\%x%\Uninstall\Webinternetsecurity
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08AACA98-B7BE-43AE-B418-D795225E9EFC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebInternetSecurity Update Task
HKEY_LOCAL_MACHINE\SOFTWARE\Webinternetsecurity
HKEY_LOCAL_MACHINE\%x%\Run:WebInternetSecurity
* Files path
C\Windows\System32\Tasks\WebInternetSecurity Update Task
C\Program Files\Webinternetsecurity\uninstall.webinternetsecurity.exe
C\Program Files\Webinternetsecurity\WebInternetSecurity.exe
C\Program Files\Webinternetsecurity\ewebstorewrapper.dll
C\Program Files\Webinternetsecurity\makecert.exe
C\Program Files\Webinternetsecurity\certutil.exe
C\Program Files\Webinternetsecurity\libnspr4.dll
C\Program Files\Webinternetsecurity\libplc4.dll
C\Program Files\Webinternetsecurity\nss3.dll
C\Program Files\Webinternetsecurity\smime3.dll
C\Program Files\Webinternetsecurity\softokn3.dll
C\users\user\appdata\Local\WebInternetSecurity\WebInternetSecurity.exe
C\users\user\appdata\Local\WebInternetSecurity\uninstall.webinternetsecurity.exe
C:ProgramData\Microsoft\Windows\Start Menu\Programs\WebInternetSecurity\WebInternetSecurity.lnk
C:Users\All Users\Microsoft\Windows\Start Menu\Programs\WebInternetSecurity\WebInternetSecurity.lnk
|
|
|
