PUA.Win32.OptimizerPro.AE

Installation

Fügt die folgenden Prozesse hinzu:

• %Windows%\Temp\Optimizer_Pro.exe /VERYSILENT
• %Program Files%\Optimizer Pro\OptProStart.exe

(Hinweis: %Windows% ist der Windows Ordner, normalerweise C:\Windows oder C:\WINNT.. %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.)

Erstellt die folgenden Ordner:

• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
• %Program Files%\Optimizer Pro

(Hinweis: %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.)

Autostart-Technik

Fügt folgende Registrierungseinträge hinzu, um bei jedem Systemstart automatisch ausgeführt zu werden.

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Optimizer Pro = "%Program Files%\Optimizer Pro\OptProLauncher.exe"

Andere Systemänderungen

Fügt die folgenden Registrierungsschlüssel hinzu:

HKEY_CURRENT_USER\SOFTWARE\Optimizer Pro

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1

Fügt die folgenden Registrierungseinträge hinzu:

HKEY_CURRENT_USER\Software\Optimizer Pro
SetupName = "{malware path and file name}.exe"

HKEY_CURRENT_USER\Software\Optimizer Pro
Language = "2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Setup Version = "5.5.3 (a)"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: App Path = "%Program Files%\Optimizer Pro"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallLocation = "%Program Files%\Optimizer Pro"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Icon Group = "Optimizer Pro"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: User = "{username}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Selected Tasks = "desktopicon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Deselected Tasks = ""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Language = "jp"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayName = "Optimizer Pro v3.1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
UninstallString = "%Program Files%\Optimizer Pro\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
QuietUninstallString = "%Program Files%\Optimizer Pro\unins000.exe /SILENT"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayVersion = "3.1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Publisher = "PC Utilities Pro"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLInfoAbout = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
HelpLink = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLUpdateInfo = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoModify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallDate = "{date}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MajorVersion = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MinorVersion = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
EstimatedSize = "27886"

HKEY_CURRENT_USER\Software\Optimizer Pro
InstallDate = "{date}"

HKEY_CURRENT_USER\Software\Optimizer Pro
AppStart = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
Os = "{value}"

HKEY_CURRENT_USER\Software\Optimizer Pro
MachineGuid = "{GUID}"

HKEY_CURRENT_USER\Software\Optimizer Pro
DelayedStart = "5"

HKEY_CURRENT_USER\Software\Optimizer Pro
Querry = "{random characters}"

HKEY_CURRENT_USER\Software\Optimizer Pro
UninstallURL = "https://{BLOCKED}rt.com/pcutilitiespro/.op-special/purchase?sid=111000809-IL-006"

HKEY_CURRENT_USER\Software\Optimizer Pro
SupportURL = "http://support.{BLOCKED}itiespro.com"

HKEY_CURRENT_USER\Software\Optimizer Pro
HomePageURL = "http://www.{BLOCKED}itiespro.com"

HKEY_CURRENT_USER\Software\Optimizer Pro
BuyNowURL = "{random characters}"

HKEY_CURRENT_USER\Software\Optimizer Pro
UseAds = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
AdsHost = "dl.{BLOCKED}vers.net"

HKEY_CURRENT_USER\Software\Optimizer Pro
AdsDownloadURL = "http://dl.{BLOCKED}rvers.net/121000809/DriverPro.exe"

HKEY_CURRENT_USER\Software\Optimizer Pro
AdsBuyNowURL = "{random characters}"

HKEY_CURRENT_USER\Software\Optimizer Pro
WelcomeURL = ""

Einschleusungsroutine

Schleust die folgenden Dateien ein:

• %Program Files%\Optimizer Pro\file_id.diz
• %Program Files%\Optimizer Pro\OptimizerPro.chm
• %Program Files%\Optimizer Pro\HomePage.url
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\Optimizer Pro\Optimizer Pro.lnk
• %Program Files%\Optimizer Pro\unins000.exe
• %Program Files%\Optimizer Pro\OptProSchedule.exe
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\Optimizer Pro\Optimizer Pro on the Web.lnk
• %Program Files%\Optimizer Pro\OptProSmartScan.exe
• %Program Files%\Optimizer Pro\OptimizerPro.exe
• %Windows%\Temp\Optimizer_Pro.exe
• %Program Files%\Optimizer Pro\unins000.msg
• %Desktop%\Optimizer Pro.lnk
• %Program Files%\Optimizer Pro\OptProUninstaller.exe
• %Program Files%\Optimizer Pro\OptProGuard.exe
• %Program Files%\Optimizer Pro\scan.gif
• %Program Files%\Optimizer Pro\Japanese.ini
• %All Users Profile%\Microsoft\Windows\Start Menu\Programs\Optimizer Pro\Help.lnk
• %Program Files%\Optimizer Pro\sqlite3.dll
• %Program Files%\Optimizer Pro\OptProLauncher.exe
• %Program Files%\Optimizer Pro\unins000.dat
• %Program Files%\Optimizer Pro\OptProStart.exe
• %Program Files%\Optimizer Pro\OptProReminder.exe

(Hinweis: %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %Windows% ist der Windows Ordner, normalerweise C:\Windows oder C:\WINNT.. %Desktop% ist der Ordner 'Desktop' für den aktuellen Benutzer, normalerweise C:\Windows\Profile\{Benutzername}\Desktop unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Desktop unter Windows NT, C:\Dokumente und Einstellungen\{Benutzername}\Desktop unter Windows 2000(32-bit), XP und Server 2003(32-bit) und C:\Users\{Benutzername}\Desktop unter Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) und 10(64-bit).)