Cyclon Gems

By GoldSparrow in Adware

Threat Scorecard

Ranking:	6,381
Threat Level:	20 % (Normal)
Infected Computers:	75,045

First Seen:	May 6, 2014
Last Seen:	April 12, 2024
OS(es) Affected:	Windows

Cyclon Gems, otherwise known as Context2Pro, is a potentially unwanted browser plug-in that may declare to make a PC user's online browsing quality better by saying 'Receive personalized offers and promotions while surfing'. Cyclon Gems may declare to deliver discount coupon advertisements when visiting online shopping-related websites. The Cyclon Gems browser extension is categorized as an adware threat or a potentially unwanted program (PUP). The add-on of Cyclon Gems may be distributed and integrate itself into Web browsers like Internet Explorer, Google Chrome, and Mozilla Firefox as an additional tool through packaged downloads of free applications. Cyclon Gems may decrease the Web browser's performance and display disturbing pop-up advertisements.

Cyclon Gems may propagate using the DomaIQ free application download clients such as bogus downloads involving Web browser updates, hacking software, and other tools). Upon installation, Cyclon Gems may create and show discount coupon advertisements and full screen pop-up advertisements. The browser extension of Cyclon Gems may trace the computer users' online browsing quality by recording websites visited, search requests entered on search providers, IP addresses, clicks on social media websites, OS, full web addresses of websites visited, and other details.

Table of Contents

SpyHunter Detects & Remove Cyclon Gems

File System Details

Cyclon Gems may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	pgcchelper.exe	7e396d4a774a1a4134ba6aba3b26cc6f	9,066
Name: pgcchelper.exe MD5: 7e396d4a774a1a4134ba6aba3b26cc6f Size: 465.92 KB (465920 bytes) Detections: 9,066 Type: Executable File Path: H:\Windows.old\Users\<username>\AppData\Local\pgcchelper\pgcchelper.exe Group: Malware file Last Updated: April 12, 2024
2.	framei.exe	f0b1b497d073254cc6177532bd1a126e	5,387
Name: framei.exe MD5: f0b1b497d073254cc6177532bd1a126e Size: 567.8 KB (567808 bytes) Detections: 5,387 Type: Executable File Path: C:\Users\<username>\AppData\Local\ContextFree\framei.exe Group: Malware file Last Updated: December 6, 2022
3.	conadvanced.exe	14064cd74d1ed190b9fa3297f451e075	4,856
Name: conadvanced.exe MD5: 14064cd74d1ed190b9fa3297f451e075 Size: 579.16 KB (579160 bytes) Detections: 4,856 Type: Executable File Path: C:\DATA\DATA\NEO\AppData\Local\Context2pro\conadvanced.exe Group: Malware file Last Updated: June 29, 2022
4.	nvcmd.exe	505e703afaf7f3dbdac879998cc8bc29	4,322
Name: nvcmd.exe MD5: 505e703afaf7f3dbdac879998cc8bc29 Size: 596.48 KB (596480 bytes) Detections: 4,322 Type: Executable File Path: C:\Users\<username>\AppData\Local\ContextFree\nvcmd.exe Group: Malware file Last Updated: July 25, 2023
5.	cntcmd.exe	36e5b97f7a4afffcb6805ea12e9292d2	4,095
Name: cntcmd.exe MD5: 36e5b97f7a4afffcb6805ea12e9292d2 Size: 596.48 KB (596480 bytes) Detections: 4,095 Type: Executable File Path: C:\Users\<username>\AppData\Local\ContextFree\cntcmd.exe Group: Malware file Last Updated: July 25, 2023
6.	contextfr.exe	9db988516c3a6c86c6f27b99d44837ae	3,126
Name: contextfr.exe MD5: 9db988516c3a6c86c6f27b99d44837ae Size: 551 KB (551000 bytes) Detections: 3,126 Type: Executable File Path: C:\DATA\DATA\NEO\AppData\Local\Context2pro\contextfr.exe Group: Malware file Last Updated: June 29, 2022
7.	conadvanced.exe	748032fbd0ed47ce118e936554127fd9	2,512
Name: conadvanced.exe MD5: 748032fbd0ed47ce118e936554127fd9 Size: 577.11 KB (577112 bytes) Detections: 2,512 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\conadvanced.exe Group: Malware file Last Updated: September 13, 2023
8.	contextfr.exe	0f4d90d0bb503c80165820dac4ad291e	1,727
Name: contextfr.exe MD5: 0f4d90d0bb503c80165820dac4ad291e Size: 557.65 KB (557656 bytes) Detections: 1,727 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\contextfr.exe Group: Malware file Last Updated: December 6, 2021
9.	conadvanced.exe	7a3c058cb9844e78974b06c4b80ef50f	1,648
Name: conadvanced.exe MD5: 7a3c058cb9844e78974b06c4b80ef50f Size: 586.84 KB (586840 bytes) Detections: 1,648 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\conadvanced.exe Group: Malware file Last Updated: June 1, 2022
10.	contextprod.exe	f0e863dc4a4c0fbd95a7b3edf546bc7d	1,256
Name: contextprod.exe MD5: f0e863dc4a4c0fbd95a7b3edf546bc7d Size: 586.84 KB (586840 bytes) Detections: 1,256 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\contextprod.exe Group: Malware file Last Updated: December 6, 2021
11.	contextprod.exe	23c5dfe24ad057c7ee3717004abb69e5	1,165
Name: contextprod.exe MD5: 23c5dfe24ad057c7ee3717004abb69e5 Size: 577.11 KB (577112 bytes) Detections: 1,165 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\contextprod.exe Group: Malware file Last Updated: December 26, 2020
12.	contextprod.exe	94e7f1da370ab9d520ae0d294f08bb62	1,041
Name: contextprod.exe MD5: 94e7f1da370ab9d520ae0d294f08bb62 Size: 579.16 KB (579160 bytes) Detections: 1,041 Type: Executable File Path: C:\DATA\DATA\NEO\AppData\Local\Context2pro\contextprod.exe Group: Malware file Last Updated: June 29, 2022
13.	rkr0.exe	6f5f777e26b1cdf96a503cb963b2bf25	891
Name: rkr0.exe MD5: 6f5f777e26b1cdf96a503cb963b2bf25 Size: 511.41 KB (511416 bytes) Detections: 891 Type: Executable File Path: C:\Users\<username>\AppData\Local\winengine\rkr0.exe Group: Malware file Last Updated: February 22, 2023
14.	pgcchelper_uninstaller.exe	0013060feeadeeb7a63e27155f727830	692
Name: pgcchelper_uninstaller.exe MD5: 0013060feeadeeb7a63e27155f727830 Size: 33.05 KB (33057 bytes) Detections: 692 Type: Executable File Path: H:\Windows.old\Users\<username>\AppData\Local\pgcchelper\pgcchelper_uninstaller.exe Group: Malware file Last Updated: April 12, 2024
15.	Context2pro_Uninstaller.exe	8398dddd3aaef7874ba72284c2cfe41c	683
Name: Context2pro_Uninstaller.exe MD5: 8398dddd3aaef7874ba72284c2cfe41c Size: 33.24 KB (33244 bytes) Detections: 683 Type: Executable File Path: %SYSTEMDRIVE%\INTENSO\ACER\Users\<username>\AppData\Local\Context2pro\Context2pro_Uninstaller.exe Group: Malware file Last Updated: January 31, 2024
16.	clicon.exe	c96fd249523a1ada92e6552de4beb083	463
Name: clicon.exe MD5: c96fd249523a1ada92e6552de4beb083 Size: 450.03 KB (450032 bytes) Detections: 463 Type: Executable File Path: %TEMP%\clicon Group: Malware file Last Updated: April 23, 2020
17.	clicon.exe	7ff02f7a1843ae10b7db13cb0d1342ff	390
Name: clicon.exe MD5: 7ff02f7a1843ae10b7db13cb0d1342ff Size: 446.96 KB (446960 bytes) Detections: 390 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\clicon\clicon.exe Group: Malware file Last Updated: January 21, 2024
18.	contextfr.exe	90a8377dbc6168d8dbb3f830ff30d0af	372
Name: contextfr.exe MD5: 90a8377dbc6168d8dbb3f830ff30d0af Size: 545.79 KB (545792 bytes) Detections: 372 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: April 14, 2020
19.	contextprod.exe	c114870eef4506c79078c4fd165fc1da	349
Name: contextprod.exe MD5: c114870eef4506c79078c4fd165fc1da Size: 573.95 KB (573952 bytes) Detections: 349 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: April 14, 2020
20.	conadvanced.exe	1690a0d0dfcac5c0368f54a3cb2d7507	202
Name: conadvanced.exe MD5: 1690a0d0dfcac5c0368f54a3cb2d7507 Size: 577.12 KB (577128 bytes) Detections: 202 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: May 13, 2014
21.	contextfr.exe	3f5565f13142e74d396c8572970d7a40	151
Name: contextfr.exe MD5: 3f5565f13142e74d396c8572970d7a40 Size: 549.48 KB (549480 bytes) Detections: 151 Type: Executable File Path: C:\Users\<username>\AppData\Local\Context2pro\contextfr.exe Group: Malware file Last Updated: February 25, 2021
22.	pgcchelper_uninstaller.exe	0c2e3cc577106fb3abfd84ce4ff0c842	95
Name: pgcchelper_uninstaller.exe MD5: 0c2e3cc577106fb3abfd84ce4ff0c842 Size: 33.05 KB (33057 bytes) Detections: 95 Type: Executable File Path: C:\Users\<username>\Documents\copia dades\Users\<username>\AppData\Local\pgcchelper\pgcchelper_uninstaller.exe Group: Malware file Last Updated: January 6, 2024
23.	conadvanced.exe	e0fce5970fa5a1229a938a7e5e4d7033	87
Name: conadvanced.exe MD5: e0fce5970fa5a1229a938a7e5e4d7033 Size: 656.38 KB (656384 bytes) Detections: 87 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: December 18, 2019
24.	contextprod.exe	e3cae39c5c0d1fae9e02775b0edf001a	86
Name: contextprod.exe MD5: e3cae39c5c0d1fae9e02775b0edf001a Size: 656.38 KB (656384 bytes) Detections: 86 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: December 18, 2019
25.	conadvanced.exe	32e87f1e65145a1306aa9c9fc604fa27	43
Name: conadvanced.exe MD5: 32e87f1e65145a1306aa9c9fc604fa27 Size: 579.16 KB (579160 bytes) Detections: 43 Type: Executable File Path: %LOCALAPPDATA%\Context2pro Group: Malware file Last Updated: May 13, 2014
26.	pgcchelper_uninstaller.exe	c041f31ff8effc8bce8cc6fb1338953d	1
Name: pgcchelper_uninstaller.exe MD5: c041f31ff8effc8bce8cc6fb1338953d Size: 210.9 KB (210902 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\pgcchelper Group: Malware file Last Updated: May 13, 2014

More files

Registry Details

Cyclon Gems may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

Software\clicon

Software\clicon\Agent\SystemInfo

Software\clicup

Software\clicup\Agent\SystemInfo

Software\Context2pro

Software\ContextFree

Software\Microsoft\Windows\CurrentVersion\Run\clicon-Agent

Software\Microsoft\Windows\CurrentVersion\Run\clicup-Agent

Software\PgccAgent

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

clicon

clicup

Context2pro

ContextFree

pgcchelper

winengine

Directories

Cyclon Gems may create the following directory or directories:

%LOCALAPPDATA%\Context2pro

%LOCALAPPDATA%\ContextFree

%LOCALAPPDATA%\clicup

%LOCALAPPDATA%\pgcchelper

%LOCALAPPDATA%\winengine

%TEMP%\clicon

%TEMP%\clicup

%USERPROFILE%\Local Settings\Application Data\Context2pro

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Cyclon Gems

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Cyclon Gems

File System Details

Registry Details

Directories

Submit Comment

Trending

HackBrowserData Infostealer Malware

WinUpdatesDisabler Ransomware

Capcheck.co.in

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?