BaseFlash

By CagedTech in Adware

Threat Scorecard

Ranking: 10,741
Threat Level: 20 % (Normal)
Infected Computers: 10,662
First Seen: March 10, 2014
Last Seen: August 5, 2023
OS(es) Affected: Windows

BaseFlash is adware that may show disturbing pop-up advertisements and notifications in a Web browser pertaining to the PC user's surfing routine when the computer user is visiting various potentially commercial websites. The BaseFlash ads and notifications may signify that the computer system is affected by adware or a PUP (potentially unwanted program). BaseFlash may be distributed and install itself onto the computer system packaged with numerous freeware, which computer users can download and install from the Internet. Freeware may often include numerous extra programs, which may be unnecessary for the computer user. Therefore, when the PC user installs any free application, he should carefully follow what he is going to install together with the desired tool that he has selected. Upon installation, BaseFlash may highlight words on the websites that are visited by computer users replacing them with hyperlinks. The BaseFlash links may be embedded within the text, and may come with a double underline to make them different from common links.

SpyHunter Detects & Remove BaseFlash

File System Details

BaseFlash may create the following file(s):
# File Name MD5 Detections
1. ProtectExtension.exe 1faa6c0e5c2752c976017f2ebb774fdc 598
2. ProtectExtension.exe 1a388617b4b93dc72a07f50c653a5ab6 511
3. ProtectExtension.exe 05269ca3bf8c64ea0e49ca183755b9b5 424
4. ProtectExtension.exe a272540d78c7f729d75c02ffa8560f14 99
5. ProtectExtension.exe 3a6b5da5f56d4c8c5258b2c1fb62cd2b 43
6. ProtectExtension.exe 7fa208ad02d125d1fbc8eebc03096b02 40
7. ProtectExtension.exe ba7c16ec983a573f17a539c0dddcef84 40
8. ProtectExtension.exe a3aa6231feec482d156669113d10432e 37
9. ProtectExtension.exe 07148e320177f7d2a745faf7a8876975 34
10. ProtectExtension.exe b5d28c32090210ad430d02ab999a8528 34
11. ProtectExtension.exe 93ff66b423c9e77e5bfcc0e366030beb 34
12. ProtectExtension.exe 7171b9741e2914006911c66d0bf3d53d 33
13. ProtectExtension.exe 493b21d1bc998468d4024ea3561f896c 32
14. ProtectExtension.exe 99f09b21064ac4c2eac1143e15cc10fd 28
15. ProtectExtension.exe f27c5bf270a33a8e043897b612251124 27
16. ProtectExtension.exe be63776448d44a70df14e3ad01d19602 27
17. ProtectExtension.exe c42a805ad4cae2d27e08f2c5c7770424 26
18. ProtectExtension.exe 4667853ddc6582b39c3dd8ddbf30575c 26
19. ProtectExtension.exe c45185efb83b032203f2204152fb1064 24
20. ProtectExtension.exe 3739a0fd6f9ef631e34c32e1a2d9f20b 23
21. ProtectExtension.exe 61aced18bb624a17065732901c43a379 22
22. ProtectExtension.exe 0be529ec185104dc099de5968b4c70e6 22
23. ProtectExtension.exe 07a6dd60e36f56c8e05e0f8db6f9aedf 21
24. ProtectExtension.exe e7c60b9886a406e46e8a15418b22e2fc 20
25. ProtectExtension.exe 5bc7c817ca7407554e57ef38a45ce2df 20
26. ProtectExtension.exe 1b9961425985dff2dd5ed0ffabdedccf 20
27. ProtectExtension.exe b8d420b91092bd98eb83f13c1b90d82e 19
28. ProtectExtension.exe 7f66b500378f8fd69c43331784ee21aa 19
More files

Registry Details

BaseFlash may create the following registry entry or registry entries:
CLSID
{6C51F7E9-8542-4F25-A30F-2060157752E1}
{90A52F08-64AC-4DC6-9D7D-4516670275D3}
Regexp file mask
%Temp%\baseflashSetup.exe
SOFTWARE\Classes\AppID\BaseFlash.DLL
SOFTWARE\Classes\BaseFlash
SOFTWARE\Classes\BaseFlash.1
SOFTWARE\Microsoft\Tracing\ProtectExtension_RASAPI32
SOFTWARE\Microsoft\Tracing\ProtectExtension_RASMANCS
SOFTWARE\Mozilla\Firefox\Extensions\BaseFlash@B1a2s3e4F5l6a7s8h9.es
SOFTWARE\ProtectExtension
SOFTWARE\Wow6432Node\BaseFlash
SOFTWARE\Wow6432Node\Classes\AppID\BaseFlash.DLL
SOFTWARE\Wow6432Node\Microsoft\Tracing\ProtectExtension_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\ProtectExtension_RASMANCS
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\BaseFlash@B1a2s3e4F5l6a7s8h9.es
SOFTWARE\Wow6432Node\ProtectExtension

Directories

BaseFlash may create the following directory or directories:

%appdata%\BaseFlash

URLs

BaseFlash may call the following URLs:

BaseFlash@

1 Comment

thanx for this information this realy helps.

remove the files as stated above and disable any plugins in you browser.

Trending

Most Viewed

Loading...