gPhotoShow Toolbar
|
Description:
|
Toolbar
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Monday, April 21, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Toolbar/adware that creates pop-ups and advertisements on an infected computer.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "gPhotoShow Toolbar"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\gPhotoShow Toolbar\v3.2.0.0\resources\gps_start.exe
MD5: 8195E69360C9F8F8092E7EA5AF0DF8AB Size:36864
%PROGRAMFILES%\gPhotoShow Toolbar\v3.2.0.0\gPhotoShow_Toolbar.dll
MD5: 24B821B7D2395D5B137090A11A067F3F Size:798720
MD5: 8FD1F48C6ED9D79EFBE639F7B0A5DD5E Size:798720
MD5: D59D5860AA99FBDE5F4382E52502FC12 Size:798720
MD5: 30F51D275A71841894C715A623051F7D Size:798720
MD5: 6F474B5DEBBB33C86BA752B7B37BF1FF Size:798720
MD5: 4F097C7B6045D123E9AECF86BE60E9DB Size:798720
MD5: 25A6B0B2F0F52F24C5EE7205D2889C82 Size:798720
MD5: 24E39F4AD6FC94232EC71FE63D2A69C5 Size:798720
MD5: 10C89DCF9BCEA76AA8999D531840BBEA Size:798720
MD5: BEA5167390B74261C431C43C13C93289 Size:798720
MD5: 78682DD4C35E44BA110301A156589784 Size:798720
MD5: DF200E721E524B507EDFDB220EE014D7 Size:798720
and more....
%PROGRAMFILES%\gPhotoShow Toolbar\v2.0.0.0\gPhotoShow_Toolbar.dll
MD5: DFD493AEDFC2B42C7D11E31A6E149F86 Size:499712
%PROGRAMFILES%\gPhotoShow Toolbar\v3.2.0.0\gPhotoShow_Toolbar.dll
MD5: 7AD30D673A17651A0992CEC4FF8EAAAA Size:798720
MD5: CEDCB39C7D8A84C9B4DFC80AAB6F843B Size:798720
MD5: 00F18BF8E3BC85CEACD9F8DFAD27784F Size:798720
MD5: 03A443963F66145F6DCD60CAF7F0E4C5 Size:798720
MD5: 4A8201B580FFF0F3F536BF72C8EF3873 Size:798720
MD5: 5FD42CE11AD40F745AEEF81E60EA9E02 Size:798720
MD5: CE74CBEC5FF92A109F3303ABBE0C92E2 Size:798720
MD5: AD143142ADB00D5FEBD195DC52C48191 Size:798720
MD5: F1B46AC6B371AE94D29B1C60CEB10F98 Size:798720
MD5: 47679FA3FC0997BBB31A10F072AD0383 Size:798720
MD5: 2BCE2AD585C0B33AB78D2EB1C9E18F03 Size:798720
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%PROGRAMFILES%\gPhotoShow Toolbar\v3.2.0.0\gPhotoShow_Toolbar.dll
%PROGRAMFILES%\gPhotoShow Toolbar\v3.2.0.0\resources\gps_start.exe
%START_PROGRAMSALL%\gPhotoShow Toolbar\Uninstall.lnk
%WINDIR%\gPhotoShow_Toolbar_Uninstaller_6968.exe
- Files by Directories
%PROGRAMFILES%\gPhotoShow Toolbar %START_PROGRAMSALL%\gPhotoShow Toolbar
- Files by CLSID or Name
CLSID=28F4A32B-116F-48FD-B4CE-4273852BB730
CLSID=AE67B5AA-B590-4034-98B5-6AEAAF558B95
- Registry Keys
HKCU\Software\gPhotoShow\gPhotoShow Toolbar
HKLM\SOFTWARE\gPhotoShow\gPhotoShow Toolbar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gPhotoShow Toolbar
- Registry Values
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser ValueName={28F4A32B-116F-48FD-B4CE-4273852BB730}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar ValueName={28F4A32B-116F-48FD-B4CE-4273852BB730}
«
Go to Software Database