OPENTABHPER.EXE is Adware OpenTab

January 31, 2012 by NightWatcher
Filed under: Adware 
: Solved!

Fix it immediately:

We received the file OPENTABHPER.EXE and detected that OPENTABHPER.EXE is not good.
OPENTABHPER.EXE is Adware. You should remove the file OPENTABHPER.EXE.
Kill the process OPENTABHPER.EXE and remove OPENTABHPER.EXE from Windows.

Malware Analysis of OPENTABHPER.EXE
Full path on a computer: %Program Files%\Opentab\opentabhper.exe

Detected by UnHackMe:

Item Name: Opentab.exe
Author: Copyright CIPHERLOGIS All rights reserved.
Related File: %PROGRAM FILES%\OPENTAB\OPENTAB.EXE
Type: Running Processes

After first reboot detected by UnHackMe:

Item Name: {DA742A73-CFA7-4DE2-BF28-1FC51CF214BC}
Author: EVERYZONE, INC.
Related File: %PROGRAM FILES%\OPENTAB\OPENTAB.DLL
Type: Browser Helper Objects

Item Name: opentab
Author:
Related File: %Program Files%\\Opentab\Opentab.exe
Type: Registry Run

Item Name: Opentabhper
Author: Copyright CIPHERLOGIS All rights reserved.
Related File: %PROGRAM FILES%\\OPENTAB\OPENTABHPER.EXE
Type: Registry Run

Item Name: Opentabup
Author: Copyright CIPHERLOGIS All rights reserved.
Related File: %PROGRAM FILES%\\OPENTAB\OPENTABUP.EXE
Type: Registry Run

Removal Results: Success
Number of reboot: 1

OPENTABHPER.EXE is known as:

Adware.OpenTab

OPENTABHPER.EXE hash:

  • MD5: 2ec2abcfe91ad70a33b04d02b8450754
The file tries to download information from some web sites.
How to quickly detect OPENTABHPER.EXE presence?

Registry:
  • HKLM\Software\Classes\CLSID\{DA742A73-CFA7-4DE2-BF28-1FC51CF214BC}\InProcServer32\: “%Program Files%\OpenTab\OpenTab.dll”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\opentab: “%Program Files%\\Opentab\Opentab.exe”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Opentabhper: “%Program Files%\\Opentab\Opentabhper.exe”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Opentabup: “”c:\program files\\opentab\opentabup.exe”"
Folders:
  • %Program Files%\Opentab
Files:
  • %Program Files%\Opentab\hka.dll
  • %Program Files%\Opentab\opentab.dll
  • %Program Files%\Opentab\opentab.exe
  • %Program Files%\Opentab\opentabch.exe
  • %Program Files%\Opentab\opentabhper.exe
  • %Program Files%\Opentab\opentabuninstall.exe
  • %Program Files%\Opentab\opentabup.exe


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Tags: Adware, OpenTab, OPENTABHPER.EXE

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.