Remove 2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE malware
2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of 2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE:
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe
Full path on a computer: %PROGRAM FILES%\HC-NEMAP2V26.09\2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE
Autostart registry keys:
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{273E2B74-AD1A-4126-8187-AF772FD5835}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-buttonutil64.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E2F3EE1-B5C-418E-A647-8C16B22A1DF4}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-codedownloader.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74FEA2EF-498A-43BA-8B74-EA115C85BBC}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-helper.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6FE70E6-FC62-43A6-ABAF-E02336615BAE}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-buttonutil.exe"
Related Files:
%Program Files%\HC-nemAP2V26.09\1293297481.mxaddon
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-11.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-4.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-5.exe
The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe has the internal name: HC-nemAP2V26.09.exe. The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe description is: HC-nemAP2V26.09 exe. The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is related to the HCP1.2V26.09. The version of the file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe: 1000.1000.1000.1000. The 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is a part of software product: HC-nemAP2V26.09 LegalCopyright: Copyright 2011.
The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe was tested and considered as Adware.
Adware displays pop-up ads in order to generate revenue for its author.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe shows pop-up ads or text ads or advertising banners.
Sometimes 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe displays coupons banners for sites you are visiting.
The banners are really annoying and invasive.
There is no way to stop 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe unwanted pop-ups.
Clicking link causes randomly redirecting your browser to the different pages with advertisements of computer speedup utilities fake antiviruses and other unwanted software.
It can be downloaded from the program's web site or bundled with some third-party software.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is often bundled within the installers from download sites.
Most of software download sites distribute pay-per-install bundles instead of original installers.
We recommend you to download software only from vendor web site or from trusted sources.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is related to: AdWare.Adwapper, 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe.
Virustotal = 36/56
MD5 = 18EDD84A5638D6CA86A63A8E6AD6873F
File Size: 895384
| 2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE | Malware |
| 2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE | Dangerous |
| 2FE476E0-C722-4983-AD84-11D74EE2DF50-2.EXE | High Risk |
Autostart registry keys:
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{273E2B74-AD1A-4126-8187-AF772FD5835}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-buttonutil64.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E2F3EE1-B5C-418E-A647-8C16B22A1DF4}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-codedownloader.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74FEA2EF-498A-43BA-8B74-EA115C85BBC}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-helper.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6FE70E6-FC62-43A6-ABAF-E02336615BAE}\AppName: "2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe-buttonutil.exe"
Related Files:
%Program Files%\HC-nemAP2V26.09\1293297481.mxaddon
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-11.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-4.exe
%Program Files%\HC-nemAP2V26.09\2fe476e0-c722-4983-ad84-11d74ee2df50-5.exe
The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe has the internal name: HC-nemAP2V26.09.exe. The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe description is: HC-nemAP2V26.09 exe. The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is related to the HCP1.2V26.09. The version of the file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe: 1000.1000.1000.1000. The 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is a part of software product: HC-nemAP2V26.09 LegalCopyright: Copyright 2011.
The file 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe was tested and considered as Adware.
Adware displays pop-up ads in order to generate revenue for its author.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe shows pop-up ads or text ads or advertising banners.
Sometimes 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe displays coupons banners for sites you are visiting.
The banners are really annoying and invasive.
There is no way to stop 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe unwanted pop-ups.
Clicking link causes randomly redirecting your browser to the different pages with advertisements of computer speedup utilities fake antiviruses and other unwanted software.
How did 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe got on my computer?
It can be downloaded from the program's web site or bundled with some third-party software.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is often bundled within the installers from download sites.
Most of software download sites distribute pay-per-install bundles instead of original installers.
We recommend you to download software only from vendor web site or from trusted sources.
2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe is related to: AdWare.Adwapper, 2fe476e0-c722-4983-ad84-11d74ee2df50-2.exe.
Virustotal = 36/56
MD5 = 18EDD84A5638D6CA86A63A8E6AD6873F
File Size: 895384
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.