ADMATCHING.EXE is Adware CloverPlus

August 18, 2012 by NightWatcher
Filed under: Adware 
: Solved!

Fix it immediately:

We received the file ADMATCHING.EXE and detected that ADMATCHING.EXE is not good.
ADMATCHING.EXE is Adware. You should remove the file ADMATCHING.EXE.
Kill the process ADMATCHING.EXE and remove ADMATCHING.EXE from Windows.

Malware Analysis of ADMATCHING.EXE
Full path on a computer: %Program Files%\AdMatching\AdMatching.exe

Detected by UnHackMe:

ADMATCHING.EXE
Default location: %Program Files%\AdMatching\AdMatching.exe

Removal Results: Success
Number of reboot: 1

ADMATCHING.EXE is known as:

Adware.CloverPlus

ADMATCHING.EXE hash:

  • MD5: 58a9a90626bc2c2df5396f6f0bc17b86
The file tries to download information from some web sites.
How to quickly detect ADMATCHING.EXE presence?

Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\AdMatching: “%Program Files%\AdMatching\AdMatching.exe”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\admsys: “%Program Files%\AdMatching\admsys.exe”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\AdMatching: “%Program Files%\AdMatching\AdMatching.exe”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\admsys: “%Program Files%\AdMatching\admsys.exe”
Folders:
  • %Temp%\is-5MVP1.tmp
  • %Program Files%\AdMatching
Files:
  • %Temp%\is-5MVP1.tmp\adinstall.tmp
  • %Program Files%\AdMatching\AdMatching.exe
  • %Program Files%\AdMatching\admsys.exe
  • %Program Files%\AdMatching\unins000.dat
  • %Program Files%\AdMatching\unins000.exe
  • %Program Files%\AdMatching.prj


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.