PUP.GoforFiles

Threat Scorecard

Ranking: 7,465
Threat Level: 10 % (Normal)
Infected Computers: 48,892
First Seen: January 29, 2014
Last Seen: December 21, 2024
OS(es) Affected: Windows

PUP.GoforFiles has been associated with several adware infections. PUP.GoforFiles and content associated with PUP.GoforFiles may cause various symptoms on affected Web browsers, including changing the victim's home page and search engine, altering its settings and preventing computer users from using the affected Web browser effectively. PUP.GoforFiles is associated with a low quality search engine that can help computer users find what they want, provided that they allow this PUP to remain on their computer and are willing to deal with PUP.GoforFiles' unwanted behaviors and symptoms. PUP.GoforFiles may cause various symptoms, endanger the victims' privacy and security, and make the affected computer run slowly or crash frequently. Because of this, malware analysts strongly advise computer users to remove PUP.GoforFiles immediately, ignore any of its instructions and avoid allowing PUP.GoforFiles to remain on a computer.

Do not Let PUP.GoforFiles Stay on Your PC

As soon as PUP.GoforFiles is installed, PUP.GoforFiles may cause numerous symptoms, change your Web browser and computer settings to allow PUP.GoforFiles to run automatically and create an exception on the Windows Firewall that allows PUP.GoforFiles to communicate with a third party. The following characteristics are common problems associated with PUP.GoforFiles:

  • PUP.GoforFiles may cause Web browser redirects, hijacking the PC user's Web browser and leading it to certain websites forcefully.
  • PUP.GoforFiles may cause the affected Web browser to display numerous pop-ups, which may include advertisements, fake system dialogs and suspicious error messages. PUP.GoforFiles advertisements may endanger your security by promoting known PUPs and online harmful tactics.
  • PUP.GoforFiles may make changes to your Web browser settings, such as changing the affected Web browser's homepage and default search engine.
  • PUP.GoforFiles may track your online activities and keep tabs on your online history and computer settings.

PUP.GoforFiles and content associated with PUP.GoforFiles should be removed immediately. This can be done with the help of a reliable security program. In many occasions, it may be compulsory to undo manually changes associated with PUP.GoforFiles. For example, in many cases it may be necessary to restore your default homepage and search engine manually.

Aliases

2 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Sophos Go For Files
McAfee Artemis!1DD330B80F2E

SpyHunter Detects & Remove PUP.GoforFiles

File System Details

PUP.GoforFiles may create the following file(s):
# File Name MD5 Detections
1. GoForFilesUpdater.exe 13a317e9a45e2e5a864d120d8a2058e0 2,726
2. uninstall20374619.exe 20362d635a0de200a963bd634153312d 1,446
3. uninstall537829.exe defd411295765cb39285d2dd5b264f78 1,138
4. uninstall307649072.exe 13d0eeb75077ff4b5f8b1feaea47d7a6 245
5. uninstall175525351.exe 5c89e24d47562d08d9447f7baa14338d 224
6. goforfilesdl.exe 9c5a02c7a1f7d0006e75bc599fd9d401 167
7. uninstall6232879.exe 9ea85d65a0985ceeac7ef66ee25023a9 88
8. uninstall21258864.exe 2e03fa66681f79fae60bfb160c19b006 72
9. uninstall1763372.exe 62b6907aae6c24948a59c118ccbd9312 68
10. GFFUpdater.exe 36217bbd423acac6fb365bd2893c2cb7 4
11. GoForFiles6wY0w9dvx6.exe 6b125ea6b8da17cf5b73331c8331c2ce 4
12. GoForFilesOXEjJ1pGg9.exe 2699c9800e92397014775c9a95075609 3
13. uninstall.exe 716830e654c6fbe49e26e46316e9bcf2 1
14. C:\Program Files\GoforFiles\uninstall.exe
15. C:\Program Files\GoforFiles\GoforFiles.exe
More files

Registry Details

PUP.GoforFiles may create the following registry entry or registry entries:
File name without path
GoforFiles.lnk
Regexp file mask
%TEMP%\GoForFiles[RANDOM CHARACTERS].exe
%WinDir%\System32\Tasks\GoForFiles Installer Starter
%WinDir%\System32\Tasks\GoforFilesUpdate
%WinDir%\System32\Tasks\Update Service GoForFiles
%WinDir%\Tasks\GoforFilesUpdate.job
SOFTWARE\GoforFiles
SOFTWARE\Microsoft\Tracing\GFFUpdater_RASAPI32
SOFTWARE\Microsoft\Tracing\GFFUpdater_RASMANCS
SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32
SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoForFiles Installer Starter
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoforFilesUpdate
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update Service GoForFiles
SOFTWARE\Wow6432Node\GoforFiles

Directories

PUP.GoforFiles may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\GoforFiles
%AppData%\GoforFiles
%PROGRAMFILES%\GoforFiles
%PROGRAMFILES%\GoforFiles Updater
%PROGRAMFILES(x86)%\GoforFiles
%PROGRAMFILES(x86)%\GoforFiles Updater

URLs

PUP.GoforFiles may call the following URLs:

Goforfiles.com

Trending

Most Viewed

Loading...