PUP.DownTango
* registry path
hcu_key\software\appdatalow\software\simplytech
hcu_key\software\downtangofttoolbar
hlm_key\%c%\appid\downtangofttoolbar.dll
hlm_key\%c%\clsid\{5aa173d7-438c-4fc3-8daa-493f91770c83}
hlm_key\%c%\clsid\{8eec1a52-3e0a-466e-86ab-c2bde9cd7883}
hlm_key\%c%\clsid\{b0f60aaf-f06a-4295-81c2-058d04e373ad}
hlm_key\%c%\clsid\{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hlm_key\%c%\typelib\{a85e31f1-a6ce-4ace-a560-ec01271b7f55}
hlm_key\%c%\interface\{8da8b89e-0c65-403b-8231-ab22ecfa0687}
hlm_key\%c%\interface\{a928e66c-f501-4e66-9953-855c712f93b2}
hlm_key\%c%\interface\{b0e28fa0-df07-44b6-95ce-48be26db9266}
hlm_key\%c%\interface\{e6b4ee8f-c38e-4994-be28-229a3f92262c}
hlm_key\%c%\interface\{fca8936e-403a-4487-a966-70f80f1d5a6a}
hlm_key\software\downtango
hlm_key\software\google\chrome\extensions\gladcbhcbkdeddbidiblppadjdjalidb
hlm_key\software\microsoft\internet explorer\extensions\{2d8ee268-8d7a-4996-b80b-8999ce8c7fe2}
hlm_key\%x%\uninstall\{4a505538-f48f-412e-9b69-dbac7e3149c3}_is1
hlm_key\software\wow6432node\google\chrome\extensions\gladcbhcbkdeddbidiblppadjdjalidb
hcu_key\software\microsoft\internet explorer\approvedextensionsmigration\{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hcu_key\%x%\ext\settings\{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hcu_key\%x%\ext\stats\{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hlm_key\%x%\explorer\browser helper objects\{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hcu_val\software\microsoft\internet explorer\approved extensions:{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hlm_val\software\microsoft\internet explorer\toolbar:{e327b07a-0e11-4fd4-bef2-b2c5605b59c6}
hcu_val\software\microsoft\internet explorer\main:start page##http://search.certified-toolbar.com
hcu_val\software\microsoft\internet explorer\main:start default_page_url##http://search.certified-toolbar.com
hcu_val\software\microsoft\internet explorer\main:search page##http://search.certified-toolbar.com
hcu_val\software\microsoft\internet explorer\main:search bar##http://search.certified-toolbar.com
hcu_val\software\microsoft\internet explorer\main:default_search_url##http://search.certified-toolbar.com
hlm_val\software\microsoft\internet explorer\main:start page##http://search.certified-toolbar.com
hlm_val\software\microsoft\internet explorer\main:start default_page_url##http://search.certified-toolbar.com
hlm_val\software\microsoft\internet explorer\main:search page##http://search.certified-toolbar.com
hlm_val\software\microsoft\internet explorer\main:search bar##http://search.certified-toolbar.com
hlm_val\software\microsoft\internet explorer\main:default_search_url##http://search.certified-toolbar.com
* files path
C^Users^Ad^AppData^Roaming\downtangofttoolbar\downtangofttoolbar.dll
C^ProgramData^Microsoft^Windows^Start Menu^Programs\downtango\uninstall.lnk
C^ProgramData^Microsoft^Windows^Start Menu^Programs\downtango\downtango.lnk
C^Program Files\red sky\downtango\uninstaller.exe
C^Program Files\red sky\downtango\downtangofttoolbar.exe
C^Program Files\downtangofttoolbar\unins000.exe
C^Program Files\downtangofttoolbar\insttracker.exe
C^Program Files\downtangofttoolbar\firefoxuninstaller.exe
C^Program Files\downtangofttoolbar\firefoxextensionwithff8fix.exe
|
|
|
