广告软件。GorillaPrice
简短的个人介绍
广告软件。gorillprice是Malw必威平台APParebytes针对系列的独立安装程序的检测广告软件使用一项服务和几个浏览器扩展程序在受影响的Windows电脑上显示广告。
症状
系统上的广告软件。GorillaPriceis active may notice advertisements both in newly-opened tabs as well as advertisements in open tabs not originating from the sites that are open.
保护
必威平台APP恶意软件保护用户免受广告软件的攻击。GorillaPricewith its real-time protection technology.
必威平台APP伪块广告软件。GorillaPrice
修复
必威平台APP恶意软件可以检测和删除广告软件。GorillaPricewithout further user interaction.
- 请下载伪必威平台APP你的桌面。
- 双击MBSetup.exe然后按照提示安装程序。
- 当你的必威平台APP伪的窗户安装完成后，程序打开到欢迎Malwarebytes屏幕。必威平台APP
- 点击开始按钮。
- 点击扫描开始威胁扫描．
- 点击检疫移除发现的威胁。
- 如果提示完成删除过程，请重新启动系统。
必威平台APP伪删除日志
受广告软件影响的系统中的Malw必威平台APParebytes删除日志的示例。GorillaPrice:
必威平台APPMalwarebytes www.malwarebytes.com -日志详细信息-扫描日期:5/24/17扫描时间:8:59 AM日志文件:mbamsavingool .txt管理员:Yes -软件信息-版本:3.1.2.1733组件版本:1.0.122更新包版本:1.0.2009 License: Premium -系统信息-操作系统:Windows 7 Service Pack 1 CPU: x64文件系统:NTFS用户:{computername}\{username} -扫描摘要-扫描类型:威胁扫描结果:已完成扫描对象:332294检测到的威胁:12威胁隔离:12时间经过:1分钟，22秒-扫描选项-内存:启用启动:启用文件系统:启用档案:启用Rootkits:禁用启发:启用PUP:启用PUM:启用-扫描详细信息-进程:1广告软件。GorillaPrice, C:\PROGRAMDATA\MICROSOFT\WINDOWS\NETWORKCACHEMANAGER\NTCACHE.EXE, Quarantined, [1652], [401367],1.0.2009 Module: 1 Adware.GorillaPrice, C:\PROGRAMDATA\MICROSOFT\WINDOWS\NETWORKCACHEMANAGER\NTCACHE.EXE, Quarantined, [1652], [401367],1.0.2009 Registry Key: 3 Adware.GorillaPrice, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ntcache, Delete-on-Reboot, [1652], [401367],1.0.2009 Adware.SavingsCool.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SavingsCool, Delete-on-Reboot, [970], [351594],1.0.2009 Adware.SavingsCool.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, Delete-on-Reboot, [970], [-1],0.0.0 Registry Value: 4 Adware.SavingsCool.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Delete-on-Reboot, [970], [-1],0.0.0 Adware.SavingsCool.PrxySvrRST, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Delete-on-Reboot, [970], [-1],0.0.0 Adware.SavingsCool.PrxySvrRST, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Delete-on-Reboot, [970], [-1],0.0.0 Adware.SavingsCool.PrxySvrRST, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Delete-on-Reboot, [970], [-1],0.0.0 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 3 Adware.GorillaPrice, C:\PROGRAMDATA\MICROSOFT\WINDOWS\NETWORKCACHEMANAGER\NTCACHE.EXE, Delete-on-Reboot, [1652], [401367],1.0.2009 Adware.GorillaPrice, C:\USERS\{username}\DESKTOP\NTCACHE.EXE, Delete-on-Reboot, [1652], [401367],1.0.2009 Adware.GorillaPrice, C:\USERS\{username}\DESKTOP\NSIS.EXE, Delete-on-Reboot, [1652], [401367],1.0.2009 Physical Sector: 0 (No malicious items detected) (end)
