Threat Database Adware Adware.V-bates

Adware.V-bates

By CagedTech in Adware

Threat Scorecard

Ranking: 4,185
Threat Level: 20 % (Normal)
Infected Computers: 71,180
First Seen: April 17, 2014
Last Seen: April 23, 2024
OS(es) Affected: Windows

SpyHunter Detects & Remove Adware.V-bates

File System Details

Adware.V-bates may create the following file(s):
# File Name MD5 Detections
1. PrefHelper.exe e4f815680844a22f663273fbfebbf52d 4,194
2. PrefHelper.exe 8f0985f985447ea360348002e6923831 3,201
3. Extension64.dll 398827addc04117a4f30641f45240ea6 2,080
4. Extension64.dll 5860afcb81906c5e088a25b32d43981b 1,774
5. Extension32.dll 73f2b158ae70b9ee7cb7ad2cf51b76d6 1,371
6. Extension32.dll 2484163f1b68395d7f55c34985f21a61 1,081
7. ExtensionUpdaterService.exe 43861e6fda9e0240b67f99f137c3a97c 394
8. ExtensionUpdaterService.exe 336a2260e64f51966de6a2ed26f4e621 268
9. PrefHelper.exe fdcac569f04dbc165c2589fa3a88aec8 239
10. PrefHelper.exe 8ab3f5cde73325f10c7039c7662ca0c9 206
11. Extension64.dll 338492dad1f155c7368e112fb3403e43 177
12. Extension64.dll 380c3311da0166a65a1e171edab04cbe 135
13. NMHClient.exe 209ff7761ee957e7f56086b5fbb4166a 104
14. NMHClient.exe 01efb5b119c12683c44a7931e126b5f7 101
15. guardsvc.exe dd97821cb23c35b0aeb5f3ebc2b49ae3 77
16. notifier.exe a6d45e8fe0c45a427c2cc4c6198936c9 72
17. Extension32.dll d77dc854563b43cb99019d44615fe333 61
18. Extension32.dll aa0e6bf5a2e4eef004b18e66c6e65cbc 61
19. ExtensionUpdaterService.exe 17d9cf49ce64d0185697fbc780124f8c 46
20. NMHClient.exe 34412f7da3886781f7b6184709269653 43
21. NMHClient.exe 4fe1155e059e3e7ccc375d31686bf5da 31
22. NMHClient.exe aaeed16b6ac9e8d0fe7a04d6f30ee5ee 9
23. v-bates.exe efbbf05c27e939155c74cbd94c177fb3 6
24. PrefHelper.exe ef986232243228913cfddbdceb91db46 2
25. ExtensionUpdaterService.exe 48d4915236fa752b5b0b113be3b9dc13 2
26. Extension64.dll db3dfac89b3e713097ff442eb9563df0 1
More files

Registry Details

Adware.V-bates may create the following registry entry or registry entries:
CLSID
{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
{311D8A4B-5FED-4462-9187-F03C29B5731C}
{42435F6D-E271-4F4C-9D4B-1A58112DC19D}
{82C1E22B-0B13-4959-8E7D-FDACCBCC4391}
{A516C81D-0FB7-4306-BBAE-9E42DA16B804}
{D067E3E4-354F-4F8A-8668-1AA03D22CBA1}
{F77B2773-532F-484B-A43B-09E4017CD66E}
Regexp file mask
%TEMP%\v-bates.exe
Software\Classes\Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
Software\Microsoft\Internet Explorer\Stats\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FF Watcher {18C2B3B4-33E4-4155-9227-5367ECB0E35D}.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
SOFTWARE\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\V-bates
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Wow6432Node\V-bates
Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
SYSTEM\ControlSet001\services\Mext Guard
SYSTEM\ControlSet001\services\V-bates Updater
SYSTEM\ControlSet002\services\Mext Guard
SYSTEM\ControlSet002\services\V-bates Updater
SYSTEM\CurrentControlSet\services\Mext Guard
SYSTEM\CurrentControlSet\services\V-bates Updater

Directories

Adware.V-bates may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\ihfgncllfpciihmkjhnehcpolclgokea
%PROGRAMFILES%\V-bates
%PROGRAMFILES(x86)%\V-bates
%ProgramFiles%\BojneidguUn
%ProgramFiles(x86)%\BojneidguUn

URLs

Adware.V-bates may call the following URLs:

V-bates

Trending

Most Viewed

Loading...