Threat Database Adware Adware.V-bates

Adware.V-bates

By CagedTech in Adware
Published:
Last updated:

Threat Scorecard

Popularity Rank: 9,728
Threat Level: 20 % (Normal)
Infected Computers: 71,626
First Seen: April 17, 2014
Last Seen: September 25, 2026
OS(es) Affected: Windows

The detection of Adware.V-bates on your system indicates the presence of a potentially unwanted program that may be displaying unwanted advertisements, collecting user data, or performing other malicious activities. It is essential to understand the nature of this threat and take immediate action to remove it and prevent further damage.

What Is Adware.V-bates?

Adware.V-bates is a type of adware program that is designed to display unwanted advertisements, often in the form of pop-ups, banners, or sponsored content. Adware programs like Adware.V-bates can be bundled with free software downloads, infected email attachments, or exploited vulnerabilities in software. Once installed, Adware.V-bates can collect user data, such as browsing history, search queries, and personal information, which can be used for targeted advertising or sold to third-party companies.

How Adware.V-bates Operates

Adware.V-bates operates by infiltrating a system and modifying browser settings, registry entries, or system files to display unwanted advertisements. It can also communicate with its command and control servers to receive updates, report user activity, or download additional malware. Adware.V-bates may use various techniques to evade detection, such as code obfuscation, anti-debugging, or rootkit functionality. Its primary goal is to generate revenue for its developers by displaying advertisements, often at the expense of the user's browsing experience and system performance.

Symptoms of Infection

Common symptoms of Adware.V-bates infection include unwanted pop-ups, banners, or sponsored content displayed on web pages, slow system performance, browser crashes or freezes, and unexpected changes to browser settings or homepage. Users may also notice unfamiliar programs or toolbars installed on their system, or experience difficulties removing unwanted software. If you are experiencing any of these symptoms, it is crucial to take immediate action to remove Adware.V-bates and prevent further damage.

How to Remove Adware.V-bates

  1. Boot your system in Safe Mode with Networking to prevent Adware.V-bates from loading and to allow for a more effective removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove Adware.V-bates and any associated malware.
  3. Uninstall any suspicious programs or software that may be related to Adware.V-bates, using the Control Panel or Settings app.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any modifications made by Adware.V-bates.
  5. Reboot your system and perform a follow-up scan to ensure that Adware.V-bates has been completely removed and that your system is free from any remaining malware.

Conclusion

Removing Adware.V-bates from your system is crucial to prevent further damage and protect your personal data. By following the steps outlined above, you can effectively remove Adware.V-bates and restore your system to a safe and secure state. It is essential to remain vigilant and take proactive measures to prevent future infections, such as keeping your software up-to-date, using reputable anti-malware tools, and being cautious when downloading software or clicking on links from unknown sources. By taking these steps, you can help protect your system and your personal data from the threats posed by Adware.V-bates and other types of malware.

SpyHunter Detects & Remove Adware.V-bates

File System Details

Adware.V-bates may create the following file(s):
# File Name MD5 Detections
1. unins000.exe 717e78c455ac2ee64060c6af9573ce1f 415
2. guardsvc.exe dd97821cb23c35b0aeb5f3ebc2b49ae3 77
3. notifier.exe a6d45e8fe0c45a427c2cc4c6198936c9 72
4. Extension32.dll aa0e6bf5a2e4eef004b18e66c6e65cbc 61
5. NMHClient.exe 34412f7da3886781f7b6184709269653 43
6. v-bates.exe efbbf05c27e939155c74cbd94c177fb3 6
7. ExtensionUpdaterService.exe 48d4915236fa752b5b0b113be3b9dc13 2
8. Extension64.dll db3dfac89b3e713097ff442eb9563df0 1
More files

Registry Details

Adware.V-bates may create the following registry entry or registry entries:
CLSID
{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
{311D8A4B-5FED-4462-9187-F03C29B5731C}
{42435F6D-E271-4F4C-9D4B-1A58112DC19D}
{82C1E22B-0B13-4959-8E7D-FDACCBCC4391}
{A516C81D-0FB7-4306-BBAE-9E42DA16B804}
{D067E3E4-354F-4F8A-8668-1AA03D22CBA1}
{F77B2773-532F-484B-A43B-09E4017CD66E}
Regexp file mask
%TEMP%\v-bates.exe
Software\Classes\Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
Software\Microsoft\Internet Explorer\Stats\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FF Watcher {18C2B3B4-33E4-4155-9227-5367ECB0E35D}.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
SOFTWARE\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\V-bates
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Wow6432Node\V-bates
Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
SYSTEM\ControlSet001\services\Mext Guard
SYSTEM\ControlSet001\services\V-bates Updater
SYSTEM\ControlSet002\services\Mext Guard
SYSTEM\ControlSet002\services\V-bates Updater
SYSTEM\CurrentControlSet\services\Mext Guard
SYSTEM\CurrentControlSet\services\V-bates Updater

Directories

Adware.V-bates may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\ihfgncllfpciihmkjhnehcpolclgokea
%PROGRAMFILES%\V-bates
%PROGRAMFILES(x86)%\V-bates
%ProgramFiles%\BojneidguUn
%ProgramFiles(x86)%\BojneidguUn

URLs

Adware.V-bates may call the following URLs:

V-bates