Scan Spyware on Twitter
Tuesday, April 25, 2017

Bookmark and Share



addestroyer


        Download

Description: AdDestroyer is an adware that delivers ads to your computer and may or may not be targeted to your search. AdDestroyer claims to be a spyware remover but it sets itself to run when Windows starts and remains memory resident on the compromised computer. It will periodically attempt to contact a server to download updates and instructions.

addestroyer

Warning: A spy-ware removal software uses certain rules for detection and removal of spy-ware, malware, ad-ware and trojan from your PC. ScanSpyware.Net provides this information "AS IS" without warranty of any kind. Your use of this information is at your own risk. We strictly restrict you from using this information if you are not sure about what you are doing.


Recommendation 1: We recommend you to take a backup of Windows Registry before following these manual spyware removal instructions to fix your PC. You can do this by either creating a Restore Point using System Restore Utility in Windows System Tools or using the Export feature of regedit.exe.


Recommendation 2: By trying to remove spy-ware from your PC without getting any help from an expert may produce unexpected results. In case you suspect that your PC is infected with some spy-ware, ad-ware, malware or virus, just follow the instructions available at http://how-to.scanspyware.net/diagnose-and-fix.html to contact us for abolutely FREE help.


Directories

  • C:\Documents and Settings\user-account-name\Start Menu\Programs\AdDestroyer
  • C:\Program Files\AdDestroyer
  • C:\Documents and Settings\All Users\Local Settings\AdDestroyer

Files

  • C:\Documents and Settings\user-account-name\Start Menu\Programs\Startup\AdDestroyer.lnk
  • C:\Program Files\AdDestroyer\UNWISE.EXE
  • C:\Program Files\AdDestroyer\INSTALL.LOG
  • C:\Documents and Settings\user-account-name\Start Menu\Programs\AdDestroyer\AdDestroyer.lnk
  • C:\Program Files\AdDestroyer\AdDestroyer.exe
  • C:\Program Files\AdDestroyer\AdDestroyer.WAV
  • C:\Documents and Settings\All Users\Local Settings\AdDestroyer\ADXML43.dll
  • C:\Windows\System32\SWLAD1.dll (md5:b97a53780f25e8dbdc970e...)
  • C:\Windows\System32\SWLAD2.dll (md5:f6a2fe5533649cb3aa7c01...)
  • C:\Windows\System32\MSrev43.dll (md5:61f0c9b413332ee0483fa4...)
  • C:\Windows\System32\PopOops.dll (md5:5a7085aff4e5e5edea18c9...)
  • C:\Windows\System32\PopOops2.dll (md5:8e53fca0a72ab2fba6458c...)
  • C:\Windows\System32\INNERADINSTALL.LOG (md5:f3c43814ed8cc55f559842...)

Registry Keys

  • HKEY_CLASSES_ROOT\\SWLAD2.SWLAD
  • HKEY_CLASSES_ROOT\\SWLAD2.SWLAD.1
  • HKEY_CLASSES_ROOT\\SWLAD1.SWLAD
  • HKEY_CLASSES_ROOT\\SWLAD1.SWLAD.1
  • HKEY_CLASSES_ROOT\\PopOops.PopOops
  • HKEY_CLASSES_ROOT\\PopOops.PopOops.1
  • HKEY_CLASSES_ROOT\\PopOops2.PopOops
  • HKEY_CLASSES_ROOT\\PopOops2.PopOops.1
  • HKEY_LOCAL_MACHINE\Software\Classes\SWLAD2.SWLAD
  • HKEY_LOCAL_MACHINE\Software\Classes\SWLAD2.SWLAD.1
  • HKEY_LOCAL_MACHINE\Software\Classes\SWLAD1.SWLAD
  • HKEY_LOCAL_MACHINE\Software\Classes\SWLAD1.SWLAD.1
  • HKEY_LOCAL_MACHINE\Software\Classes\PopOops2.PopOops
  • HKEY_LOCAL_MACHINE\Software\Classes\PopOops2.PopOops.1
  • HKEY_LOCAL_MACHINE\Software\Classes\PopOops.PopOops
  • HKEY_LOCAL_MACHINE\Software\Classes\PopOops.PopOops.1
  • HKEY_CLASSES_ROOT\CLSID\{D52433A9-A44C-43AB-A013-24B3C756DD2B}
  • HKEY_CLASSES_ROOT\CLSID\{417386C3-8D4A-4611-9B91-E57E89D603AC}
  • HKEY_CLASSES_ROOT\TypeLib\{D0C29A75-7146-4737-98EE-BC4D7CF44AF9}
  • HKEY_CLASSES_ROOT\TypeLib\{E0D3B292-A0B0-4640-975C-2F882E039F52}
  • HKEY_CLASSES_ROOT\Interface\{B288F21C-A144-4CA2-9B70-8AFA1FAE4B06}
  • HKEY_CLASSES_ROOT\Interface\{6CDC3337-01F7-4A79-A4AF-0B19303CC0BE}
  • HKEY_CLASSES_ROOT\Interface\{795398D0-DC2F-4118-A69C-592273BA9C2B}
  • HKEY_CLASSES_ROOT\Interface\{10D7DB96-56DC-4617-8EAB-EC506ABE6C7E}
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D52433A9-A44C-43AB-A013-24B3C756DD2B}
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{417386C3-8D4A-4611-9B91-E57E89D603AC}
  • HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{D0C29A75-7146-4737-98EE-BC4D7CF44AF9}
  • HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{E0D3B292-A0B0-4640-975C-2F882E039F52}
  • HKEY_LOCAL_MACHINE\Software\Classes\Interface\{B288F21C-A144-4CA2-9B70-8AFA1FAE4B06}
  • HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6CDC3337-01F7-4A79-A4AF-0B19303CC0BE}
  • HKEY_LOCAL_MACHINE\Software\Classes\Interface\{795398D0-DC2F-4118-A69C-592273BA9C2B}
  • HKEY_LOCAL_MACHINE\Software\Classes\Interface\{10D7DB96-56DC-4617-8EAB-EC506ABE6C7E}
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AdDestroyer
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPcache\AdDestroyer
  • HKEY_CURRENT_USER\Software\VB and VBA Program Settings\AdDestroyer\Settings
  • HKEY_CURRENT_USER\Software\VB and VBA Program Settings\AdDestroyer
  • HKEY_USERS\.DEFAULT\Software\VB and VBA Program Settings\AdDestroyer
  • HKEY_LOCAL_MACHINE\Software\dtlbne

Registry Values

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\addestroyer
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\addestroyer
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache\%programfilesdir%\AdDestroyer\AdDestroyer.exe