PehPai

Description: Adware
Risk Level: Low
Date of First Occurence: Friday, May 09, 2008
Software Developer: (unknown)
Brief Info: Adware Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
Removal: This threat can be removed using "Spyware Terminator"

REMOVER SPYWARE »

Geographical Distribution of Threat "PehPai"

Threat Info

View All

Detected Items

  1. Detected Files: %APPDATA%\ZapSpot\ZapSpot.exe MD5: 06298F678A45AC5FE2808A5F2B4AFC7D Size:761930 MD5: 19DB77BA1CC8FD332BB69A7F4F3ED186 Size:594456 MD5: 2C7DCA7CB12B3231578B43A0759ACCE9 Size:761930 MD5: 7FE70A18C1AA62F22EA3D19A9795745A Size:741450 MD5: D5A0A59BF590C0B49545A1A6A4FB8026 Size:786432 MD5: F70E877957F3298693EEEBF72064CB97 Size:737816 MD5: DBA7650ADE5256D86DE92D5D34CFA9BB Size:750104 MD5: 3D095A7A143BEE4F5504F93AB3B53C2D Size:479800 MD5: 5D8369B1A7A54625DFF3BBC61F20C7A3 Size:753738 MD5: CD161B41D95DC4D90F2CE2CB4ADF9B0C Size:729162 MD5: 78BAFD3BA306A06C660BEA3EBB534371 Size:881176 MD5: 827F768069F0EBFD3191092E2E8E6746 Size:754200 and more.... %APPDATA%\ZapSpot\System\Etc\P3OfrMgr.exe MD5: DAECB3058E717724FCEA6FAAB440085D Size:278528 MD5: 89298414C8A5BCAF84CE9247FABB8F26 Size:274432 %USERDOCUMENTS%\My ZapSpot\GoldDiver.exe MD5: A7D2002A22EB44EB67F25F57B1F110CB Size:792055 MD5: 947F18F3C1E1D1D97691FCAD6F7DE1F4 Size:826452 MD5: 2D2EFFF0CAFA6D15DE0C292501BCF269 Size:658784 %USERDOCUMENTS%\My ZapSpot\22 - GoldDiver.exe MD5: C26F54C55B56C50A524D86AFCE9F695A Size:669952 %USERDOCUMENTS%\My ZapSpot\08 - FROG.exe MD5: 622B67D976DF3D67F95CBDFDCE0CDCC5 Size:664080 %USERDOCUMENTS%\My ZapSpot\Bully Frog.exe MD5: 7C45AEF38151FCC51CB21DC02F4B2D96 Size:664656 %USERDOCUMENTS%\My ZapSpot\nightsparks.exe MD5: 2C3B8AD150A4432245E0B8B02280B958 Size:693144 MD5: 2200043517F659E202906B3D52E9B83E Size:693144 %USERDOCUMENTS%\My ZapSpot\hotdogvendor.exe MD5: 3CA6F3A8385B3630B522461276746B2C Size:678496 %USERDOCUMENTS%\My ZapSpot\colorbreak.exe MD5: 00D77CB0C94D01756DB09BBB5000ADF1 Size:446032 %USERDOCUMENTS%\My ZapSpot\BubbleBound.exe MD5: 4186439A45F7A68A7878D41D5D913797 Size:663816 MD5: F4963631740CBE9CE8F908B04836E6AA Size:757100 %USERDOCUMENTS%\My ZapSpot\Ameba.exe MD5: B64A2F5F822F25F0FE928124D2D4CFD5 Size:649504 %USERDOCUMENTS%\My ZapSpot\xmas.exe MD5: DE61837A87D9F2F68995B380DEA5E3C5 Size:782769 MD5: 7A6F26152F5BD0261334426BDA99904B Size:817166 MD5: 429CD9E621AB219686F8C2581359D7F2 Size:799153 MD5: E9ED72B0A32CA90DA3847C5C7F5E42BC Size:643456 MD5: D70AAF2CB32F7228EA3AF63688D7525F Size:784343 %USERDOCUMENTS%\My ZapSpot\sortsport.exe MD5: C589D8351C1D180F9867DFB406436EA3 Size:868833 %USERDOCUMENTS%\My ZapSpot\Jewels.exe MD5: BA8852F6FEF3A38B03AC2ED585CF05A0 Size:806060 %USERDOCUMENTS%\My ZapSpot\GALACTICMENACE.EXE MD5: C6C394AA88237816D174B8B187BC20E5 Size:844378 %USERDOCUMENTS%\My ZapSpot\FenceOut.exe MD5: D35D3366B8E5007BECD04E94F4ED04D5 Size:806307 %USERDOCUMENTS%\My ZapSpot\colorbreak2.exe MD5: 25B4F7B28B95FCA6E3A119FBF29624C3 Size:1003593 %USERDOCUMENTS%\My ZapSpot\ColorBreak.exe MD5: 6E5117F93BC3ABDC85B990F18BB9C0F4 Size:773119 %USERDOCUMENTS%\My ZapSpot\PehPai[1].exe MD5: 10D39744030FF278B0B879313A115E2C Size:436848 %USERDOCUMENTS%\My ZapSpot\MudSlinger.exe MD5: EA5A75E323585FC47648C4217CD89118 Size:841451 %USERDOCUMENTS%\My ZapSpot\moeboid.exe MD5: D59629ACC0D77F5B7FDCF95F32712B2A Size:826367 MD5: A2A77DC0448C1F0C91E121EC562ABF21 Size:877613 %USERDOCUMENTS%\My ZapSpot\HotDogVendor.exe MD5: D20E3CA5D5BBE913AD5E721520CD1B2F Size:830155 %USERDOCUMENTS%\My ZapSpot\golddiver.exe MD5: 9F052842842646A5C569A1F35FFDFD5C Size:808439 MD5: 8FEDE69E64CF39D8AE6447BB5FD8A115 Size:794624 %USERDOCUMENTS%\My ZapSpot\fenceout.exe MD5: E0A9A95A3885FA7E20B75E5ECB6F8828 Size:822691 %USERDOCUMENTS%\My ZapSpot\latest.exe MD5: 61D7C3DB7211C5315F2983D99BD17A33 Size:1045300 %USERDOCUMENTS%\My ZapSpot\hallowmeenies.exe MD5: 48A9F382A6C03DA68CB4B3CB759681D6 Size:922992 MD5: 2282346007C432578BE9D71ABC5BBE42 Size:852606 %USERDOCUMENTS%\My ZapSpot\galactic.exe MD5: C9704B38CAAF9DB0A6D71F5354883741 Size:912008 %USERDOCUMENTS%\My ZapSpot\Galactic Menace.exe MD5: 3D5844E6322F950E2A545AA03BA4796D Size:722275 %USERDOCUMENTS%\My ZapSpot\mudsling.exe MD5: B23EF769D2B4C5A0A70685DF122A62FC Size:655632 %USERDOCUMENTS%\My ZapSpot\fncout.exe MD5: 83E645C09ED14A1EDFDF2CB9C9AFC37E Size:673824 %USERDOCUMENTS%\My ZapSpot\CavemanCards.exe MD5: B1529F25574B9CDF8FDCEFCE933E1805 Size:665096 %USERDOCUMENTS%\My ZapSpot\JEWELS.EXE MD5: 6DC49E8226E54940F2AD05E0566DA5D2 Size:830304 %USERDOCUMENTS%\My ZapSpot\CAVEMANCARDS.EXE MD5: 192A38943311214B21BE898FC3F1FB71 Size:825616 %USERDOCUMENTS%\My ZapSpot\G029 ?.exe MD5: E69BE114CF60D5CB1A460A81CDE56380 Size:478840 %APPDATA%\ZapSpot\ZapSpot.exe MD5: 23119E387156B6771C15A59DB0F8DF8E Size:479800 MD5: 17EA0B1FB3C513E4C20002D2EDA143D3 Size:831562 MD5: 67D3B860B1DFFC0579394B8649A86149 Size:496136 MD5: 56FDC79A6ADE2613DCC7FF14AC38CA15 Size:606744 MD5: BCF7D49A46B7A8065A100816202BD6CB Size:737354 %USERDOCUMENTS%\My ZapSpot\HIGHSEAS.EXE MD5: 182C2B4E6C4A53CB4D51800B6C2757CB Size:770956 %USERDOCUMENTS%\My ZapSpot\RUNTURKEYRUN.EXE MD5: F9A69068E3AC5DB9924DEC69BD4B9795 Size:768462 %USERDOCUMENTS%\My ZapSpot\COLORBREAK.EXE MD5: B431B487A1AA4D961A31FA2C9FC0235A Size:769864 %USERDOCUMENTS%\My ZapSpot\BullyFrog.exe MD5: 32FD001A29639E278EF9DECA792A544C Size:825335 %USERDOCUMENTS%\My ZapSpot\G080 ?? ? (??).EXE MD5: C7D98F8ED7D5F9E22EBE0007767ADE9C Size:730503 %USERDOCUMENTS%\My ZapSpot\G053 ???.exe MD5: 351B707002BC4822AF7B033F02861BFB Size:855567 %USERDOCUMENTS%\My ZapSpot\myhouse.exe MD5: C8710F501EEE45F2C5D0625A3D174E18 Size:853885 %USERDOCUMENTS%\My ZapSpot\colorbre.exe MD5: A8154EE1230CC465FA5532D9F310D3E1 Size:677792 %USERDOCUMENTS%\My ZapSpot\Moeboid.exe MD5: DBBBA4B6044FA8685188902D68FAEBD1 Size:809983
  2. Detected Files with variable Filenames: MD5: 4965BE66D33F87075D1F47908B97408B Size: 853929 %USERDOCUMENTS%\My ZapSpot\NightSparks[1].exe %USERDOCUMENTS%\My ZapSpot\NIGHTSPARKS.EXE MD5: CBC138EC008374E46F78B1C52F9F6E63 Size: 802897 %USERDOCUMENTS%\My ZapSpot\ColorBreak2[1].exe %USERDOCUMENTS%\My ZapSpot\COLORBREAK2.EXE MD5: FC261801B0F12C7612A204C6277A1F89 Size: 766888 %USERDOCUMENTS%\My ZapSpot\RunTurkeyRun[1].exe %USERDOCUMENTS%\My ZapSpot\RunTurkeyRun.exe MD5: DBA515C99AFF74E1BBC04E85558B644C Size: 825067 %USERDOCUMENTS%\My ZapSpot\mudslinger[1].exe %USERDOCUMENTS%\My ZapSpot\MUDSLINGER.EXE MD5: 8274118935D7BFD94D98E9F59DEE18B4 Size: 813771 %USERDOCUMENTS%\My ZapSpot\HotdogVendor[1].exe %USERDOCUMENTS%\My ZapSpot\HOTDOGVENDOR.EXE %USERDOCUMENTS%\My ZapSpot\Hotdog Vendor v 1.exe MD5: 521D8850BC4338757A1D501A11C5F4E6 Size: 446032 %USERDOCUMENTS%\My ZapSpot\colorbreak.exe %USERDOCUMENTS%\My ZapSpot\.exe MD5: 4163EDD30716969D313657DB8413F074 Size: 663816 %USERDOCUMENTS%\My ZapSpot\BubbleBound.exe %USERDOCUMENTS%\My ZapSpot\Bubble Bound.exe %USERDOCUMENTS%\My ZapSpot\?.exe MD5: A1531D12654EF09F7B493BAA0818F41A Size: 640224 %USERDOCUMENTS%\My ZapSpot\31 - runturkeyrun.exe %USERDOCUMENTS%\My ZapSpot\runturkeyrun.exe MD5: 97C87E0918885C2AF1F7804C3DE35B5B Size: 977670 %USERDOCUMENTS%\My ZapSpot\LATEST.EXE %USERDOCUMENTS%\My ZapSpot\MYHOUSE.EXE MD5: 7A6F26152F5BD0261334426BDA99904B Size: 817166 %USERDOCUMENTS%\My ZapSpot\xmas.exe %USERDOCUMENTS%\My ZapSpot\?.EXE MD5: 2200043517F659E202906B3D52E9B83E Size: 693144 %USERDOCUMENTS%\My ZapSpot\nightsparks.exe %USERDOCUMENTS%\My ZapSpot\.EXE MD5: D243B118F6D92FD7C29BCF1342109333 Size: 678496 %USERDOCUMENTS%\My ZapSpot\??.exe %USERDOCUMENTS%\My ZapSpot\hotdog.exe MD5: 75D4CC15E88E6FDF9933BE12E928A8D4 Size: 661952 %USERDOCUMENTS%\My ZapSpot\?.exe %USERDOCUMENTS%\My ZapSpot\§?ö.exe

Detecting items list:

  1. Files by Name %APPDATA%\ZapSpot\ZapSpot.exe %APPDATA%\ZapSpot\Games\{681FDB0B-DF7A-4E91-9445-0D7CF22687E7}\{681FDB0B-DF7A-4E91-9445-0D7CF22687E7}.gam %APPDATA%\ZapSpot\System\Core.ZDT %APPDATA%\ZapSpot\System\Outbox.ZDT %APPDATA%\ZapSpot\System\Etc\P3OfrMgr.exe %APPDATA%\ZapSpot\System\Skins\ani-logomain-117x84.gif %APPDATA%\ZapSpot\System\Skins\asl-big-about-83x28x2.gif %APPDATA%\ZapSpot\System\Skins\asl-big-games-83x30x2.gif %APPDATA%\ZapSpot\System\Skins\asl-big-home-83x28x2.gif %APPDATA%\ZapSpot\System\Skins\asl-big-join-83x28x2.gif %APPDATA%\ZapSpot\System\Skins\asl-big-support-83x28x2.gif %APPDATA%\ZapSpot\System\Skins\asl-icn-mini-about-32x32x2.gif %APPDATA%\ZapSpot\System\Skins\asl-icn-mini-games-32x32x2.gif %APPDATA%\ZapSpot\System\Skins\asl-icn-mini-home-32x32x2.gif %APPDATA%\ZapSpot\System\Skins\asl-icn-mini-join-32x32x2.gif %APPDATA%\ZapSpot\System\Skins\asl-icn-mini-support-32x32x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-instr-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-mail-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-new-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-pause-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-resume-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\asl-zs-retgame-52x52x2.gif %APPDATA%\ZapSpot\System\Skins\btn-all-games-154x55.gif %APPDATA%\ZapSpot\System\Skins\btn-card-games-154x55.gif %APPDATA%\ZapSpot\System\Skins\btn-relaxing-games-160x55.gif %APPDATA%\ZapSpot\System\Skins\btn-sweating-games-153x57.gif %APPDATA%\ZapSpot\System\Skins\btn-thinking-games-156x57.gif %APPDATA%\ZapSpot\System\Skins\default.skn %APPDATA%\ZapSpot\System\Skins\img-gamearea-593x433.gif %APPDATA%\ZapSpot\System\Skins\img-logomain-small-39x29.gif %APPDATA%\ZapSpot\System\Skins\img-main-640x452.gif %APPDATA%\ZapSpot\System\Skins\img-main-800x572.gif %APPDATA%\ZapSpot\System\Skins\img-poweredby-126x34.gif %APPDATA%\ZapSpot\System\Skins\txt-seemore-128x35.gif %DESKTOP%\ZapSpot.lnk %START_PROGRAMSALL%\ZapSpot.lnk %USERDOCUMENTS%\My ZapSpot\PehPai.exe
  2. Files by Directories %APPDATA%\ZapSpot %USERDOCUMENTS%\My ZapSpot
  3. Registry Keys HKCR\ZapSpot.ZML.1 HKCU\Software\P3 HKCU\Software\P3\P3OfrMgr

« Go to Software Database