Threat Database Adware Adware.PacFunction

Adware.PacFunction

By CagedTech in Adware
Published:
Last updated:

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 1,483
First Seen: February 3, 2014
Last Seen: June 16, 2025
OS(es) Affected: Windows

The detection of Adware.PacFunction on your system indicates the presence of a potentially unwanted program that may be displaying unwanted advertisements, collecting user data, or performing other malicious activities. It is essential to take immediate action to remove this threat and prevent further damage to your system and personal data.

What Is Adware.PacFunction?

Adware.PacFunction is a type of malware that is designed to display unwanted advertisements, often in the form of pop-ups, banners, or sponsored content. It may also collect user data, such as browsing history and search queries, to deliver targeted ads. Adware can be bundled with free software, attached to emails, or downloaded from infected websites. Once installed, it can be challenging to remove without proper tools and guidance.

How Adware.PacFunction Operates

Adware.PacFunction operates by infiltrating a system through various means, such as exploiting vulnerabilities, using social engineering tactics, or disguising itself as legitimate software. Once installed, it can modify system settings, create new registry entries, and establish connections with remote servers to download additional malware or transmit user data. Adware can also hijack browser settings, redirecting users to unwanted websites or displaying fake alerts and warnings.

Symptoms of Infection

Common symptoms of Adware.PacFunction infection include an increase in unwanted advertisements, slow system performance, and unexpected browser behavior. You may notice that your browser homepage or search engine has been changed, or that new toolbars or extensions have been installed without your consent. Additionally, you may experience frequent pop-ups, redirects, or warnings that your system is infected with malware.

  • Unwanted advertisements or pop-ups
  • Slow system performance or crashes
  • Unexpected browser behavior or redirects
  • New toolbars or extensions installed without consent
  • Frequent warnings or alerts about malware infections

How to Remove Adware.PacFunction

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for a clean removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of Adware.PacFunction.
  3. Uninstall any suspicious programs or software that may be related to the adware infection.
  4. Reset your browser settings, including Chrome, Firefox, and Edge, to their default values to remove any malicious extensions or add-ons.
  5. Reboot your system and perform a follow-up scan to ensure that all remnants of the malware have been removed.

Conclusion

Removing Adware.PacFunction requires a combination of technical expertise and caution. By following the steps outlined above, you can effectively remove this malware and prevent further damage to your system and personal data. It is essential to remain vigilant and take proactive measures to protect your system from future malware infections, such as keeping your operating system and software up-to-date, using reputable anti-malware tools, and avoiding suspicious downloads or links.

SpyHunter Detects & Remove Adware.PacFunction

File System Details

Adware.PacFunction may create the following file(s):
# File Name MD5 Detections
1. PacFunction.FirstRun.exe 22b002c0fa446ca9b3813c3a34879fea 2
2. updatePacFunction.exe fbfb9c42cb2b0ab4e0b6b17b71babe1b 1
3. utilPacFunction.exe 65b8df52f27bd4d0d98f7cf4da4095fb 1
More files

Registry Details

Adware.PacFunction may create the following registry entry or registry entries:
CLSID
{74B52F4F-B4A9-46F0-ACAE-C5A97AABA21C}
{9aa72d95-59d7-4421-a02c-f93a1187a165}
{CA8E19DE-A0A6-461D-9B40-F67B6D299CC9}
{FA38D168-7DA3-4F0C-8CC0-75A6424113DC}
Software\Microsoft\Internet Explorer\Approved Extensions\{3983585E-5D14-4D1D-A257-35B0D52F2DFC}
Software\Microsoft\Internet Explorer\Approved Extensions\{9AA72D95-59D7-4421-A02C-F93A1187A165}
SOFTWARE\Microsoft\Tracing\PacFunction_RASAPI32
SOFTWARE\Microsoft\Tracing\PacFunction_RASMANCS
SOFTWARE\Microsoft\Tracing\updatePacFunction_RASAPI32
SOFTWARE\Microsoft\Tracing\updatePacFunction_RASMANCS
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{9aa72d95-59d7-4421-a02c-f93a1187a165}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9AA72D95-59D7-4421-A02C-F93A1187A165}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9AA72D95-59D7-4421-A02C-F93A1187A165}
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{9aa72d95-59d7-4421-a02c-f93a1187a165}
SOFTWARE\PacFunction
SOFTWARE\Wow6432Node\Microsoft\Tracing\PacFunction_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\PacFunction_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePacFunction_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePacFunction_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{9aa72d95-59d7-4421-a02c-f93a1187a165}
SOFTWARE\Wow6432Node\PacFunction
SYSTEM\ControlSet001\services\eventlog\Application\Update PacFunction
SYSTEM\ControlSet001\services\Update PacFunction
SYSTEM\ControlSet002\services\eventlog\Application\Update PacFunction
SYSTEM\ControlSet002\services\Update PacFunction
SYSTEM\CurrentControlSet\services\eventlog\Application\Update PacFunction
SYSTEM\CurrentControlSet\services\Update PacFunction

Directories

Adware.PacFunction may create the following directory or directories:

%PROGRAMFILES%\PacFunction
%PROGRAMFILES(x86)%\PacFunction

URLs

Adware.PacFunction may call the following URLs:

PacFunction