Threat Database Adware Adware.V-bates

Adware.V-bates

By CagedTech in Adware

Threat Scorecard

Ranking: 3,582
Threat Level: 20 % (Normal)
Infected Computers: 71,406
First Seen: April 17, 2014
Last Seen: June 26, 2025
OS(es) Affected: Windows

SpyHunter Detects & Remove Adware.V-bates

File System Details

Adware.V-bates may create the following file(s):
# File Name MD5 Detections
1. unins000.exe 717e78c455ac2ee64060c6af9573ce1f 415
2. guardsvc.exe dd97821cb23c35b0aeb5f3ebc2b49ae3 77
3. notifier.exe a6d45e8fe0c45a427c2cc4c6198936c9 72
4. Extension32.dll aa0e6bf5a2e4eef004b18e66c6e65cbc 61
5. NMHClient.exe 34412f7da3886781f7b6184709269653 43
6. v-bates.exe efbbf05c27e939155c74cbd94c177fb3 6
7. ExtensionUpdaterService.exe 48d4915236fa752b5b0b113be3b9dc13 2
8. Extension64.dll db3dfac89b3e713097ff442eb9563df0 1
More files

Registry Details

Adware.V-bates may create the following registry entry or registry entries:
CLSID
{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
{311D8A4B-5FED-4462-9187-F03C29B5731C}
{42435F6D-E271-4F4C-9D4B-1A58112DC19D}
{82C1E22B-0B13-4959-8E7D-FDACCBCC4391}
{A516C81D-0FB7-4306-BBAE-9E42DA16B804}
{D067E3E4-354F-4F8A-8668-1AA03D22CBA1}
{F77B2773-532F-484B-A43B-09E4017CD66E}
Regexp file mask
%TEMP%\v-bates.exe
Software\Classes\Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
Software\Microsoft\Internet Explorer\Approved Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
Software\Microsoft\Internet Explorer\Stats\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\FF Watcher {18C2B3B4-33E4-4155-9227-5367ECB0E35D}.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
SOFTWARE\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\V-bates
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{20AD702C-661E-4534-8CE9-BA4EC9AD6ECC}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}
SOFTWARE\Wow6432Node\V-bates
Software\{D9918B13-81CE-4EE4-9D7C-3676F1714BA7}
SYSTEM\ControlSet001\services\Mext Guard
SYSTEM\ControlSet001\services\V-bates Updater
SYSTEM\ControlSet002\services\Mext Guard
SYSTEM\ControlSet002\services\V-bates Updater
SYSTEM\CurrentControlSet\services\Mext Guard
SYSTEM\CurrentControlSet\services\V-bates Updater

Directories

Adware.V-bates may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\ihfgncllfpciihmkjhnehcpolclgokea
%PROGRAMFILES%\V-bates
%PROGRAMFILES(x86)%\V-bates
%ProgramFiles%\BojneidguUn
%ProgramFiles(x86)%\BojneidguUn

URLs

Adware.V-bates may call the following URLs:

V-bates

Trending

Most Viewed

Loading...