Adware.Savepathdeals

by ezclean posted Nov 18, 2020
?

단축키

Prev이전 문서

Next다음 문서

ESC닫기

크게 작게 위로 아래로 댓글로 가기 인쇄

Adware.Savepathdeals

 

*file
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\chrome.manifest
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\content\activity.js
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\content\couponsapp.js
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\content\couponsapp.xul
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\content\intextSB.js
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\install.rdf
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\local\jquery-1.7.1.min.js
C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\savepathdeals@savepathdeals.com\savepathdeals@savepathdeals.com.xpi
C:\Program Files\Savepath Deals\GUID.ini
C:\Program Files\Savepath Deals\SavepathDeals.dll
C:\Program Files\Savepath Deals\SavepathDeals.pem
C:\Program Files\Savepath Deals\SavepathDeals.safariextz
C:\Program Files\Savepath Deals\uicon.ico
C:\Program Files\Savepath Deals\uninst000.exe
C:\Program Files\Savepath Deals\SavepathDeals\activity.js
C:\Program Files\Savepath Deals\SavepathDeals\background.html
C:\Program Files\Savepath Deals\SavepathDeals\background.js
C:\Program Files\Savepath Deals\SavepathDeals\background_intext.js
C:\Program Files\Savepath Deals\SavepathDeals\content.js
C:\Program Files\Savepath Deals\SavepathDeals\content_intext.js
C:\Program Files\Savepath Deals\SavepathDeals\jquery-1.7.1.min.js
C:\Program Files\Savepath Deals\SavepathDeals\manifest.json
C:\Program Files\Savepath Deals\SavepathDeals\savepathdeals.js
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\chrome.manifest
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\content\activity.js
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\content\couponsapp.js
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\content\couponsapp.xul
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\content\intextSB.js
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\install.rdf
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\local\jquery-1.7.1.min.js
C:\Program Files\Savepath Deals\savepathdeals@savepathdeals.com\savepathdeals@savepathdeals.com.xpi
 

*reg_key
HKLM\SOFTWARE\Classes\CLSID\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF}
HKLM\SOFTWARE\Classes\Interface\{95E0F85F-EFF1-49CC-A2BF-BBF6DAA7992C}
HKLM\SOFTWARE\Classes\TypeLib\{91E6F004-F9BB-4E4C-A023-94BA5E56DF8F}
HKLM\SOFTWARE\Classes\SavepathDeals.MyObjectWithSite
HKLM\SOFTWARE\Classes\SavepathDeals.MyObjectWithSite.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savepath Deals
HKLM\SOFTWARE\spd
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPD_UPDATER
HKLM\SYSTEM\CurrentControlSet\Services\spd Updater

 

11111.png