PeoplePal
|
Description:
|
Spyware
|
|
Risk Level:
|
Low
|
|
Date of First Occurence:
|
Tuesday, April 15, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
REMOVER SPYWARE »
Geographical Distribution of Threat "PeoplePal"
Threat Info
View All
Detected Items
- Detected Files:
%PROGRAMFILES%\PeoplePC\Toolbar\ppaluninst.exe
MD5: E2829E17610AFDE70BA8A4760214A3B6 Size:38134
MD5: 38B61D34D2AFDC03D401D963E759ECB4 Size:39386
MD5: 32436CCE1A98A9F6F0223DDFA375BB2F Size:37122
MD5: 5FF570D352B81F247AE07ACCB5061EA0 Size:60552
MD5: 88BD69A9271B177B37DFF5FF68466279 Size:37486
MD5: 8E3FB5C39EDC2FA47098F2F69B59717D Size:51361
MD5: 36ADDF0C1BB2362128F8A7151B1A5F02 Size:56647
MD5: 3E07729C664EFB2BC6774B1C3A3FF977 Size:36390
MD5: F4D580CFA1F943F6C31F5F6CE987278E Size:60563
%PROGRAMFILES%\PeoplePC\Toolbar\PPalFinish.exe
MD5: 4496CF1571AE33BACC0019E5ECA58943 Size:40008
MD5: 36BBF414D043F9E4D01068D449A821F0 Size:35308
%PROGRAMFILES%\PeoplePC\Toolbar\PPalCleanUp.exe
MD5: D809B05CF31591B5A37EF948978209BA Size:40864
%PROGRAMFILES%\PeoplePC\Toolbar\autils.dll
MD5: 782405F51C5110E7129B39C2D06B6C64 Size:6144
MD5: 0E3ED77687018B71AF91053E0FB6D1D5 Size:11608
%PROGRAMFILES%\PeoplePC\Toolbar\SbUpdate.exe
MD5: 8228DB418F654EF075B307597EFE1D59 Size:106496
%PROGRAMFILES%\PeoplePC\Toolbar\PPCToolbar.dll
MD5: 221A36687956AE7CD3B73DBF22D3E318 Size:198656
MD5: CE3099249A5A30B2024415E6A8DDD8C2 Size:235520
MD5: 3E225A6FFF30D1C3DB517ACFE9202AC6 Size:220672
MD5: D1E599BF4DC742CEEF5FC91BBD4E083B Size:194048
MD5: B3F8C6BDFBA5F557A1718B87A0D7A967 Size:242520
MD5: 3CD0DC19FE6E9E5F23AAA71A9D3A5CFE Size:215552
MD5: E6109C4F74DD2AD72FA8964A20BEA2C6 Size:232960
MD5: 0FFC2E4CF47F226E8245A3E15CD888F8 Size:180224
%PROGRAMFILES%\PeoplePC\Toolbar\ScamGrd.dll
MD5: 0B6AB70C9F83F65BE4AD5E4474D6E9A3 Size:176128
MD5: A83304705C44CEAB6F306DF05E57D72C Size:247128
%PROGRAMFILES%\PeoplePC\Toolbar\FinishInstall.exe
MD5: F6A6EBD7F228214BEF4E6B031FF44ED1 Size:40312
MD5: ED2F3FF421558455E0ADE6FF97902247 Size:34603
- Detected Files with variable Filenames:
MD5: 11058FA1C2D6CBC7B8B6906C8A4D3B9B Size: 235864
%PROGRAMFILES%\PeoplePC\Toolbar\ppctoolbar.dll_7.2.0.0.dll
%PROGRAMFILES%\peoplepc\toolbar\ppctoolbar.dll
%PROGRAMFILES%\PeoplePC\Toolbar\ppctoolbar_7.2.0.0.dll
MD5: E297D60D1FC99D2F89FEB247476D5D15 Size: 237056
%PROGRAMFILES%\peoplepc\toolbar\ppctoolbar.dll
%PROGRAMFILES%\PeoplePC\Toolbar\PPCToolbar_7.0.0.2.dll
%PROGRAMFILES%\PeoplePC\Toolbar\ppctoolbar.dll_7.0.0.2.dll
%PROGRAMFILES%\PeoplePC\Toolbar\ppctoolbar.dll.ren
MD5: DB2831414638DED6012C1E8AD7CD0002 Size: 241664
%PROGRAMFILES%\PeoplePC\Toolbar\ScamGrd.dll
%PROGRAMFILES%\PeoplePC\Toolbar\ScamGrd.dll.ren
Detecting items list:
- Files by Name
%PROGRAMFILES%\PeoplePC\Toolbar\ppaluninst.exe
%PROGRAMFILES%\PeoplePC\Toolbar\PPCToolbar.dll
%PROGRAMFILES%\PeoplePC\Toolbar\ScamGrd.dll
- Files by Directories
%PROGRAMFILES%\PeoplePC\Toolbar
- Files by CLSID or Name
CLSID=7E217599-B625-4681-9913-0FCC50AD51E8
CLSID=7E3659A6-4BC5-4d93-B3FD-8B5ACC2FEDED
CLSID=A8FB8EB3-183B-4598-924D-86F0E5E37085
CLSID=C26EE50A-88C0-4121-B9C7-060633D41163
- Registry Keys
HKCR\AppID\{FA49FEF5-589B-4C74-882A-1B1F25E32BF3}
HKCR\AppID\PPCScamGuard.DLL
HKCR\PeoplePC.Toolbar
HKCR\PeoplePC.Toolbar.1
HKCR\PPCScamGuard.PPCScamBHO
HKCR\PPCScamGuard.PPCScamBHO.1
HKCR\PPCScamGuard.PPCScamTools
HKCR\PPCScamGuard.PPCScamTools.1
HKCR\PPCScamGuard.PPCScamUrlChecker
HKCR\PPCScamGuard.PPCScamUrlChecker.1
HKCU\Software\PeoplePC\Toolbar
HKLM\SOFTWARE\ISPInstaller\PeoplePalStandalone
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E3659A6-4BC5-4d93-B3FD-8B5ACC2FEDED}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A8FB8EB3-183B-4598-924D-86F0E5E37085}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PeoplePC Toolbar
HKLM\SOFTWARE\PeoplePC\BART\InstalledApps\PeoplePal
HKLM\SOFTWARE\PeoplePC\PeoplePal
HKLM\SOFTWARE\PeoplePC\ScamGuard
HKLM\SOFTWARE\PeoplePC\Toolbar
- Registry Values
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser ValueName={A8FB8EB3-183B-4598-924D-86F0E5E37085}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar ValueName={A8FB8EB3-183B-4598-924D-86F0E5E37085}
«
Go to Software Database
