UPDNRZ.EXE is Adware Funpop

June 29, 2012 by NightWatcher
Filed under: Adware 
: Solved!

Fix it immediately:

We received the file UPDNRZ.EXE and detected that UPDNRZ.EXE is not good.
UPDNRZ.EXE is Adware. You should remove the file UPDNRZ.EXE.
Kill the process UPDNRZ.EXE and remove UPDNRZ.EXE from Windows.

Malware Analysis of UPDNRZ.EXE
Full path on a computer: %Program Files%\nurungzi\updnrz.exe

Detected by UnHackMe:

Item Name: nurungzi
Author: dasung
Related File: %PROGRAM FILES%\NURUNGZI\UPDNRZ.EXE
Type: Registry Run

Item Name: nurungziUpdate
Author:
Related File: %PROGRAM FILES%\NURUNGZI\AGNRZ.EXE
Type: Registry Run

Item Name: agnrz.exe
Author:
Related File: %PROGRAM FILES%\NURUNGZI\AGNRZ.EXE
Type: Running Processes

Removal Results: Success
Number of reboot: 1

UPDNRZ.EXE is known as:

Adware.Funpop, Adware.Kraddare, Adware.Krdr

UPDNRZ.EXE hash:

  • MD5: 9d8073d82d7ceda6c8425c306d0ccca7
The file tries to download information from some web sites.
How to quickly detect UPDNRZ.EXE presence?

Registry:
  • HKLM\Software\Classes\CLSID\{CBCBB24B-72D0-48F3-B03D-C9237C019606}\InprocServer32\: “C:\PROGRA~1\nurungzi\dlnrz.dll”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\nurungzi: “%Program Files%\nurungzi\updnrz.exe”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\nurungziUpdate: “%Program Files%\nurungzi\agnrz.exe”
Folders:
  • %Startmenu%\CA

    Recommended: UnHackMe anti-rootkit and anti-malware

    Premium software: RegRun Security Suite (Good choice for removal and protection)

    Written by

    Malware Hunter.

    Tags: Adware, Funpop, UPDNRZ.EXE

    Comments

    Tell me what you're thinking...
    and oh, if you want a pic to show with your comment, go get a gravatar!

    You must be logged in to post a comment.