Technical Information
Malicious functions
Registers BHO
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{76009263-C91F-12E2-F033-145D6BFCB7DD}]
Modifies file system
Creates the following files
- %TEMP%\2dbf1433\reibxhwrcv.dat
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\guest\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %LOCALAPPDATA%\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- %LOCALAPPDATA%\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %LOCALAPPDATA%\torch\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\kmoiye@scydh.com\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\kmoiye@scydh.com\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\kmoiye@scydh.com\content\bg.js
- %ALLUSERSPROFILE%\youtubeadblocker\reibxhwrcv.dat
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\kmoiye@scydh.com\install.rdf
- %ProgramFiles(x86)%\youtubeadblocker\v1e0y79s1.tlb
- %ProgramFiles(x86)%\youtubeadblocker\v1e0y79s1.dat
- %LOCALAPPDATA%low\{76009263-c91f-12e2-f033-145d6bfcb7dd}\youtubeadblocker.2.7.dat
- %ProgramFiles(x86)%\youtubeadblocker\v1e0y79s1.x64.dll
- %LOCALAPPDATA%\packages\windows_ie_ac_001\ac\{76009263-c91f-12e2-f033-145d6bfcb7dd}\youtubeadblocker.2.7.dat
- %ALLUSERSPROFILE%\youtubeadblocker\reibxhwrcv.exe
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %ProgramFiles(x86)%\youtubeadblocker\v1e0y79s1.dll
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- %TEMP%\2dbf1433\reibxhwrcv.exe
- %TEMP%\2dbf1433\8hw1b.dll
- %TEMP%\2dbf1433\v1e0y79s1.x64.dll
- %TEMP%\2dbf1433\v1e0y79s1.tlb
- %TEMP%\2dbf1433\v1e0y79s1.dll
- %TEMP%\2dbf1433\kmoiye@scydh.com\content\bg.js
- %TEMP%\2dbf1433\kmoiye@scydh.com\install.rdf
- %TEMP%\2dbf1433\kmoiye@scydh.com\chrome.manifest
- %TEMP%\2dbf1433\kmoiye@scydh.com\bootstrap.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\lsdb.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\content.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\manifest.json
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\background.html
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\pggdwhqubjb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\content.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\lsdb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\pggdwhqubjb.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\pimdnmebckbjmenkdfleogdhcmaoacag\1.0\manifest.json
- %ALLUSERSPROFILE%\a028143318e454e0\{4820778d-ab0d-6d18-c316-52a6a0e1d507}
Deletes the following files
- %TEMP%\2dbf1433\reibxhwrcv.dat
- %TEMP%\2dbf1433\reibxhwrcv.exe
- %TEMP%\2dbf1433\8hw1b.dll
- %TEMP%\2dbf1433\v1e0y79s1.x64.dll
- %TEMP%\2dbf1433\v1e0y79s1.tlb
- %TEMP%\2dbf1433\v1e0y79s1.dll
- %TEMP%\2dbf1433\kmoiye@scydh.com\content\bg.js
- %TEMP%\2dbf1433\kmoiye@scydh.com\install.rdf
- %TEMP%\2dbf1433\kmoiye@scydh.com\chrome.manifest
- %TEMP%\2dbf1433\kmoiye@scydh.com\bootstrap.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\lsdb.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\content.js
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\manifest.json
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\background.html
- %TEMP%\2dbf1433\pimdnmebckbjmenkdfleogdhcmaoacag\pggdwhqubjb.js
Modifies the following files
- %LOCALAPPDATA%\google\chrome\user data\default\preferences
Miscellaneous
Creates and executes the following
- '%TEMP%\2dbf1433\reibxhwrcv.exe'
Executes the following
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\YoutubeAdblocker\v1e0Y79S1.x64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\YoutubeAdblocker\v1e0Y79S1.x64.dll"
