Threat Database Adware WordProser Ads

WordProser Ads

By CagedTech in Adware

Threat Scorecard

Ranking: 7,942
Threat Level: 20 % (Normal)
Infected Computers: 32,412
First Seen: October 20, 2014
Last Seen: January 23, 2024
OS(es) Affected: Windows

WordProser is an adware program that is similar to other add-on applications that display advertisements, such as SharkShopper and CutThePrice. The WordProser program is apt to loading various advertisements on your screen that come in many forms, such as banners, pop-under or pop-ups. Use of the WordProser advertisements may lead your Web browser to other sites that may have suspicious content or attempt to offer various services through the Internet. After WordProser has installed, the WordProser advertisements can be generated through various plugins or add-on extensions found in your Web browser. WordProser may be installed by default on the targeted computer when the computer user performs the installation of third party software. Also, WordProser may monitor the computer users online activities and collect data. Removal of those components will eliminate the WordProser program and stop the WordProser advertisements from appearing when you are surfing the Internet.

Aliases

12 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AVG Wordproser.7D0
Fortinet Adware/Vitruvian
Antiy-AVL Trojan/Win32.SGeneric
McAfee-GW-Edition Artemis
DrWeb Adware.Plugin.274
Comodo ApplicUnwnt
Sophos Generic PUA EK
Kaspersky not-a-virus:AdWare.Win32.Vitruvian.a
Symantec Trojan.Gen.2
K7AntiVirus Adware ( 004a9fae1 )
McAfee Artemis!0BF1004D2D52
CAT-QuickHeal AdWare.Win64.r6 (Not a Virus)

SpyHunter Detects & Remove WordProser Ads

File System Details

WordProser Ads may create the following file(s):
# File Name MD5 Detections
1. wpsvc.exe 9774b8a352319d8e1969eaff18709fc3 3,497
2. wpsvc.exe.vir b25922683bff1e1aa8164dc99e25f6e3 3,260
3. wpsvc.exe 6a90987d602e51d9d37828f6177eb17c 3,225
4. wpsvc.exe.vir b3b547f875928fadff3beaf5d3dc1fc5 3,163
5. A0159664.sys 4b9c4a2acc61a0a29dd84e5d7355ad62 2,836
6. wpnfd_1_10_0_1.sys f8971170ff3b508e47ecd2367558892e 2,382
7. wpnfd_1_10_0_1.sys 9d73c4ab327ec78741392378f81085ad 2,143
8. wpnfd_1_10_0_5.sys 5d99ffbc131bedc1e80e1584d0000ac8 1,072
9. wpnfd_1_10_0_2.sys 869359adc102dfcb23727a5570af130a 891
10. WordProserClientIE.dll 79230be78437b4835d32a05e34d8cdf2 654
11. wpnfd_1_10_0_2.sys 10ca6f7dcbf8688b6a817eda4a2e3e7b 522
12. wpnfd_1_10_0_6.sys dfb6480681535b498fd58f1f9d8d7422 438
13. wpnfd_1_10_0_5.sys 76856cd4c95f6be28e429e3a2ac5750d 67
14. WordProserClientIE.dll.vir 42ee2738a6d3128e7336ee4b0e438961 63
15. wpsvc.exe 409aa0858006cef45b827eff34d7a94f 54
16. WordProserClientIE.dll 4a5a090f28520793eedcb7a2f142ce55 38
17. wpnfd_1_10_0_9.sys d3c0038453fd11b098ac4c89b7da31ce 21
18. wpnfd_1_10_0_9.sys 17aa25f4ddd583f4510bf05470483dfc 14
19. WordProserClientIE.dll b4e7a73bd9080a4a137ba3fcf86301b1 9
20. WordProserClientIE.dll f552254bd54fda2b01e229a4fa21ad25 2
21. wpnfd_1_10_0_4.sys 7c47f94089fb8f4f3f37d5b30e684b54 1
22. wpnfd_1_10_0_2.sys b1a87ece0a320d2d71c3bbf7247b8bad 1
23. wpnfd_1_10_0_6.sys d60d1d327c27e7ead4e18e4f5881c523 1
24. wpnfd.sys 23b70f71debec2a59e1c2c1d1c2016a1 1
25. WordProserClientIE.dll 7b1ec8a997bf53b2113f8c549923da38 1

Registry Details

WordProser Ads may create the following registry entry or registry entries:
CLSID
{03A19B15-6866-4B99-97A7-57F359C40931}
{3EBB5099-9732-48AE-B032-58B702D86EEC}
{F6F484C9-29B9-43EC-A924-DCBAAA86B31D}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F6F484C9-29B9-43EC-A924-DCBAAA86B31D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F6F484C9-29B9-43EC-A924-DCBAAA86B31D}
SOFTWARE\Mozilla\Firefox\Extensions\{6e7f6f9f-8ce6-4611-add2-05f0f7049ee6}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{F6F484C9-29B9-43EC-A924-DCBAAA86B31D}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F6F484C9-29B9-43EC-A924-DCBAAA86B31D}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{6e7f6f9f-8ce6-4611-add2-05f0f7049ee6}
SYSTEM\ControlSet001\Enum\Root\LEGACY_WPNFD_1_10_0_1
SYSTEM\ControlSet001\Enum\Root\LEGACY_WPNFD_1_10_0_2
SYSTEM\ControlSet001\services\wpnfd_1_10_0_1
SYSTEM\ControlSet001\services\wpnfd_1_10_0_2
SYSTEM\ControlSet001\services\wpnfd_1_10_0_5
SYSTEM\ControlSet001\services\wpsvc_1.10.0.2
SYSTEM\ControlSet001\services\wpsvc_1.10.0.5
SYSTEM\ControlSet002\Enum\Root\LEGACY_WPNFD_1_10_0_1
SYSTEM\ControlSet002\Enum\Root\LEGACY_WPNFD_1_10_0_2
SYSTEM\ControlSet002\services\wpnfd_1_10_0_1
SYSTEM\ControlSet002\services\wpnfd_1_10_0_2
SYSTEM\ControlSet002\services\wpnfd_1_10_0_5
SYSTEM\ControlSet002\services\wpsvc_1.10.0.2
SYSTEM\ControlSet002\services\wpsvc_1.10.0.5
SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WPNFD_1_10_0_1
SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WPNFD_1_10_0_2
SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_1
SYSTEM\CurrentControlSet\services\wpnfd_1_10_0_2
SYSTEM\CurrentControlSet\services\wpsvc_1.10.0.2

Directories

WordProser Ads may create the following directory or directories:

%PROGRAMFILES%\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441}
%PROGRAMFILES%\WordProser_1.10.0.6
%PROGRAMFILES(x86)%\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441}
%PROGRAMFILES(x86)%\WordProser_1.10.0.6

Trending

Most Viewed

Loading...