suggestor Adware

Removing suggestor
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits

---

suggestor Also known as:

[Kaspersky]AdWare.Win32.Suggestor.q;
[Other]W32/Runner.N

---

Visible Symptoms:
Files in system folders:
[%WINDOWS%]\system32y3aqsoepa.exe
[%SYSTEM%]\y3aqsoepa.exe
[%SYSTEM%]\jphaxyap.byv
[%SYSTEM%]\vf1v62x.dll
[%SYSTEM%]\whcixm7.exe
[%WINDOWS%]\system32y3aqsoepa.exe
[%SYSTEM%]\y3aqsoepa.exe
[%SYSTEM%]\jphaxyap.byv
[%SYSTEM%]\vf1v62x.dll
[%SYSTEM%]\whcixm7.exe

How to detect suggestor:

Files:
[%WINDOWS%]\system32y3aqsoepa.exe
[%SYSTEM%]\y3aqsoepa.exe
[%SYSTEM%]\jphaxyap.byv
[%SYSTEM%]\vf1v62x.dll
[%SYSTEM%]\whcixm7.exe
[%WINDOWS%]\system32y3aqsoepa.exe
[%SYSTEM%]\y3aqsoepa.exe
[%SYSTEM%]\jphaxyap.byv
[%SYSTEM%]\vf1v62x.dll
[%SYSTEM%]\whcixm7.exe

Registry Keys:
HKEY_CLASSES_ROOT\qhwrydhms.kweaj.1
HKEY_CLASSES_ROOT\bbatley.swsf
HKEY_CLASSES_ROOT\bbatley.swsf.1
HKEY_CLASSES_ROOT\bbatley.zmtm
HKEY_CLASSES_ROOT\bbatley.zmtm.1
HKEY_CLASSES_ROOT\clsid\{65bd126c-9e4b-4371-911f-ee85ca17d52b}
HKEY_CLASSES_ROOT\clsid\{8bc199b4-330d-4009-ab9c-d55ac919de8d}
HKEY_CLASSES_ROOT\clsid\{d5ba18f2-ff61-465f-831d-a6850b94fc01}
HKEY_CLASSES_ROOT\interface\{a4468667-44b0-414e-b191-8d75753cb537}
HKEY_CLASSES_ROOT\interface\{d8a7eb2e-2b43-4640-872d-bb1cd9fcae59}
HKEY_CLASSES_ROOT\iyrruaq.givymmqxm
HKEY_CLASSES_ROOT\iyrruaq.givymmqxm.1
HKEY_CLASSES_ROOT\iyrruaq.vdrw
HKEY_CLASSES_ROOT\iyrruaq.vdrw.1
HKEY_CLASSES_ROOT\qhwrydhms.hrhx.1
HKEY_CLASSES_ROOT\typelib\{3d9de4f1-840e-4820-86ce-1ee96e11945a}
HKEY_CLASSES_ROOT\typelib\{4149bded-afbc-4cae-a9e7-92bac8718d75}
HKEY_LOCAL_MACHINE\software\m0n7l5s
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{8bc199b4-330d-4009-ab9c-d55ac919de8d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\kchgb
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\trqz5
HKEY_LOCAL_MACHINE\software\oxqgp

Registry Values:
HKEY_CLASSES_ROOT\clsid\{4a5b13c6-11f6-46c1-acb4-17d0c0ead3bc}
HKEY_CLASSES_ROOT\clsid\{4a5b9a6a-836c-4ea7-b2fd-b46aa1a381c8}
HKEY_CLASSES_ROOT\protocols\filter\text/html
HKEY_CLASSES_ROOT\protocols\filter\text/html
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\logons
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\policies
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing suggestor:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

---

Also Be Aware of the Following Threats:
Dark.FTP Backdoor Removal