Norpalla

By GoldSparrow in Adware

Threat Scorecard

Ranking: 12,158
Threat Level: 20 % (Normal)
Infected Computers: 1,162
First Seen: March 12, 2014
Last Seen: August 29, 2023
OS(es) Affected: Windows

Norpalla Image

Norpalla is adware that may state to improve the computer user's Web browsing activities and save time and money by providing numerous discount coupons, sales, offers and deals. After installation on the PC, Norpalla may display unwanted ads, messages and benners in a form of a pop-up box, which may include a variety of deals and offers based on the PC user's queries when he is browsing the Web. Norpalla may insert a browser add-on, plug-in or browser extension to all the Web browsers incorporating Internet Explorer, Google Chrome and Mozilla Firefox installed on the computer. Norpalla may forcibly redirect PC users to unreliable websites that may show annoying pop-up ads and attempt to make a profit from increased traffic of the website and clicks on advertisements.
Norpalla Image 2

SpyHunter Detects & Remove Norpalla

File System Details

Norpalla may create the following file(s):
# File Name MD5 Detections
1. {5906ab0f-5417-45a6-a4f5-8bc38ae936d5}t.sys 41752032871a6ec303c198c28c9bef8c 4
2. Norpalla.FirstRun.exe f30bd621cb5ecd4873babb0b73a87b57 1
3. utilNorpalla.exe 0283edc86a8b56a922e93b7a95ae948c 1
4. {5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gt64.sys c6f481658f7079bae73085012b702190 1
5. {5906ab0f-5417-45a6-a4f5-8bc38ae936d5}t64.sys c532534baa5650cc7a963ffc335b9678 1
6. {5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gt64.sys 5e30607d18d99fd25b9426a91466033c 1
7. {5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gt64.sys 5e57a31417d99f03aef4253e72345f68 1

Registry Details

Norpalla may create the following registry entry or registry entries:
CLSID
{18b20944-f54e-4509-88fa-f0ad137bf8de}
{DD85F972-6C6F-482E-A3DB-82FABC0AA142}
{E766A177-5525-448E-8CA8-76B0E3CC7295}
Software\Microsoft\Internet Explorer\Approved Extensions\{18B20944-F54E-4509-88FA-F0AD137BF8DE}
Software\Microsoft\Internet Explorer\Approved Extensions\{78F5A1E7-DD0D-49F9-871B-1889C9729861}
SOFTWARE\Microsoft\Tracing\Norpalla_RASAPI32
SOFTWARE\Microsoft\Tracing\Norpalla_RASMANCS
SOFTWARE\Microsoft\Tracing\updateNorpalla_RASAPI32
SOFTWARE\Microsoft\Tracing\updateNorpalla_RASMANCS
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18B20944-F54E-4509-88FA-F0AD137BF8DE}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18B20944-F54E-4509-88FA-F0AD137BF8DE}
Software\Norpalla
SOFTWARE\Wow6432Node\Microsoft\Tracing\Norpalla_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\Norpalla_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateNorpalla_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateNorpalla_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{18b20944-f54e-4509-88fa-f0ad137bf8de}
SOFTWARE\Wow6432Node\Norpalla
SYSTEM\ControlSet001\services\eventlog\Application\Update Norpalla
SYSTEM\ControlSet001\services\Update Norpalla
SYSTEM\ControlSet002\services\eventlog\Application\Update Norpalla
SYSTEM\ControlSet002\services\Update Norpalla
SYSTEM\CurrentControlSet\services\eventlog\Application\Update Norpalla
SYSTEM\CurrentControlSet\services\Update Norpalla

Directories

Norpalla may create the following directory or directories:

%PROGRAMFILES%\Norpalla
%PROGRAMFILES(x86)%\Norpalla
%TEMP%\Norpalla

URLs

Norpalla may call the following URLs:

Norpalla

Trending

Most Viewed

Loading...