Home Malware Programs Adware Adware.OpenCandy

Adware.OpenCandy

Posted: March 2, 2011

Threat Metric

Ranking: 170
Threat Level: 2/10
Infected PCs: 595,273
First Seen: February 19, 2011
Last Seen: October 17, 2023
OS(es) Affected: Windows

Even the best security companies sometimes make mistakes, as is the case with the Adware.OpenCandy malware detection. Adware.OpenCandy is a completely harmless marketing tool bundled with program installations but has no real benefits to a computer user. Because this pseudo-adware has no serious advantages, most users will want to delete Adware.OpenCandy or avoid installing it. Adware.OpenCandy may leave behind trace elements that can easily be removed manually or through security applications.

Adware.OpenCandy is Just a Little Adware, Nothing More

Almost everyone will only come into contact with Adware.OpenCandy after intentionally downloading and installing another program. Adware.OpenCandy is used to allow software developers to 'partner' their products with other ones that are recommended during installation. This process only nags the user during installation and is neutral behavior rather than malicious. The Adware.OpenCandy program has also been verified to be bundled with PDF creation applications specifically.

The user may or may not be able to opt out of installing Adware.OpenCandy during the process, since different installation packages will incorporate Adware.OpenCandy in slightly different ways. Many programs that currently use Adware.OpenCandy are gradually moving towards non-OpenCandy installation packages.

Detecting and Removing Adware.OpenCandy

Adware.OpenCandy will be detected as a very low-level threat by many anti-malware scanners. These security products may require recent updates to spot Adware.OpenCandy, because this adware was identified as a threat by Microsoft only in February of 2011.

Although Adware.OpenCandy is not technically a threat, generally there's no reason to keep Adware.OpenCandy on your system. Adware.OpenCandy will leave behind files and registry entries that should be deleted as a matter of course, since your system will run more smoothly with less trivial garbage in it. The remnants of Adware.OpenCandy serve no purpose and may confuse your system and cause errors if left to accumulate with the remains of other leftover removed programs.

Manually deleting Adware.OpenCandy's files isn't likely to cause damage to your system. However, the manual removal of Adware.OpenCandy's registry entries can harm your computer if you delete the wrong entries. Given the risk, less experienced users should content themselves with using scanners and other anti-malware programs to delete Adware.OpenCandy's traces fully.

Aliases

Generic4.BDCS [AVG]Riskware/PUP_z [Fortinet]Win32:Adware-gen [GData]Adware/OpenCandy.A.92 [AntiVir]Win32:Adware-gen [Adw] [Avast]Trojan.Gen.2 [Symantec]Skodna.GameHack.BDF [AVG]Trojan.MulDrop3.49526 [DrWeb]W32/Malware!582e [F-Prot]Generic20.BOJL [AVG]Adware/OpenCandy.A.27 [AntiVir]Win32:Malware-gen [Avast]Riskware [K7AntiVirus]Artemis!0A0836B90697 [McAfee]Adware/OpenCandy.A.593 [AntiVir]
More aliases (60)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\desktop\photoscape-3-7-multi-win.exe File name: photoscape-3-7-multi-win.exe
Size: 21.36 MB (21360800 bytes)
MD5: a0f80b9f04cfa7d05a7bbed895c27450
Detection count: 22,969
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\desktop
Group: Malware file
Last Updated: October 17, 2023
F:\ARQ_HD\2015\DIVERSOS 2015\IMGBURN\ImgBurn V.2.5.8 Multi disc Burning (32 Bits and 64 Bits)\SetupImgBurn_2.5.8.0.exe File name: SetupImgBurn_2.5.8.0.exe
Size: 3.46 MB (3469871 bytes)
MD5: 9685e1b00b7d1b31ede436bd9b12be39
Detection count: 5,902
File type: Executable File
Mime Type: unknown/exe
Path: F:\ARQ_HD\2015\DIVERSOS 2015\IMGBURN\ImgBurn V.2.5.8 Multi disc Burning (32 Bits and 64 Bits)\SetupImgBurn_2.5.8.0.exe
Group: Malware file
Last Updated: October 12, 2023
C:\Users\<username>\AppData\Roaming\OpenCandy\17F01C46EA9A4D4FA509B37242A7FB1F\dlm309c.exe File name: dlm309c.exe
Size: 306.39 KB (306392 bytes)
MD5: 5542cb289a2b671eb3fe776e6ea1b7f9
Detection count: 2,878
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\17F01C46EA9A4D4FA509B37242A7FB1F\dlm309c.exe
Group: Malware file
Last Updated: October 17, 2023
%SYSTEMDRIVE%\Users\<username>\desktop\vidplayasetup_v2.exe File name: vidplayasetup_v2.exe
Size: 32.84 MB (32845784 bytes)
MD5: 0d5f3e3ff517f1df693ca90659287dc9
Detection count: 785
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\desktop
Group: Malware file
Last Updated: September 23, 2023
%LOCALAPPDATA%\Pokki\Engine\ServiceHostAppUpdater.exe File name: ServiceHostAppUpdater.exe
Size: 10.68 MB (10684416 bytes)
MD5: 10ac9b44f94a57c4ef3f8c9f115cab0f
Detection count: 600
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Pokki\Engine
Group: Malware file
Last Updated: August 10, 2023
C:\Users\<username>\AppData\Roaming\OpenCandy\5295FB3403D74EB58457409739F0FEBF\dm.exe File name: dm.exe
Size: 307.67 KB (307672 bytes)
MD5: 887f05f66fcc6d52caf8af044b15d849
Detection count: 527
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\5295FB3403D74EB58457409739F0FEBF\dm.exe
Group: Malware file
Last Updated: July 12, 2023
C:\Users\<username>\AppData\Roaming\RHEng\F348D1601F264C9D8EBDF66F7545B418\dlm309b.exe File name: dlm309b.exe
Size: 306.39 KB (306392 bytes)
MD5: 627168cff57d3e8e13ad1a97839582dd
Detection count: 283
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\RHEng\F348D1601F264C9D8EBDF66F7545B418\dlm309b.exe
Group: Malware file
Last Updated: January 16, 2022
C:\Users\<username>\AppData\Roaming\OpenCandy\F45EE93E20C54F14BC8EFE4CED02E50A\dh.exe File name: dh.exe
Size: 199.15 KB (199152 bytes)
MD5: 41e2cb7ada5954cd64cae8417082f89a
Detection count: 148
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\F45EE93E20C54F14BC8EFE4CED02E50A\dh.exe
Group: Malware file
Last Updated: September 3, 2023
C:\Users\<username>\AppData\Roaming\OpenCandy\1DADB2D9AC0A4454A557D02457256A76\dlm312h.exe File name: dlm312h.exe
Size: 307.67 KB (307672 bytes)
MD5: 702fad0195ab09e975d7c20ed3783597
Detection count: 115
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\1DADB2D9AC0A4454A557D02457256A76\dlm312h.exe
Group: Malware file
Last Updated: July 2, 2023
%APPDATA%\LatestDLMgr.exe File name: LatestDLMgr.exe
Size: 302.88 KB (302888 bytes)
MD5: 41c19d74296b30cdeda698c5de6495c0
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 25, 2016
C:\Windows.old.000\Users\<username>\AppData\Roaming\OpenCandy\OpenCandy_FE3E356FB1D7466C904E79FBBBAD647A\dlm313i.exe File name: dlm313i.exe
Size: 307.67 KB (307672 bytes)
MD5: 424f1ab2618e433f700d3264a34be463
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows.old.000\Users\<username>\AppData\Roaming\OpenCandy\OpenCandy_FE3E356FB1D7466C904E79FBBBAD647A\dlm313i.exe
Group: Malware file
Last Updated: May 25, 2023
%SYSTEMDRIVE%\AdwCleaner\Quarantine\v1\20190108.160741\35\RHEng\6FC7401FB23247B09786481CB58ED343\dlm309e.exe#E78C44F675EEB862 File name: dlm309e.exe#E78C44F675EEB862
Size: 307.68 KB (307680 bytes)
MD5: eaa0b6db9be4ae8283f81a030a512cca
Detection count: 61
Mime Type: unknown/exe#E78C44F675EEB862
Path: %SYSTEMDRIVE%\AdwCleaner\Quarantine\v1\20190108.160741\35\RHEng\6FC7401FB23247B09786481CB58ED343\dlm309e.exe#E78C44F675EEB862
Group: Malware file
Last Updated: October 28, 2021
C:\Users\<username>\AppData\Roaming\OpenCandy\9F52209649704129A58CD2E31569CBB9\dh.exe File name: dh.exe
Size: 199.66 KB (199664 bytes)
MD5: f62876908a20811bdbcb4fe43355ab6e
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\9F52209649704129A58CD2E31569CBB9\dh.exe
Group: Malware file
Last Updated: October 19, 2022
%APPDATA%\OpenCandy\2C01B39B818D47049EDCD5BDD4ED7032\dlm312g.exe File name: dlm312g.exe
Size: 307.67 KB (307672 bytes)
MD5: 31603f2b9d8ced835f1950b09530b2a1
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\OpenCandy\2C01B39B818D47049EDCD5BDD4ED7032
Group: Malware file
Last Updated: May 15, 2020
%APPDATA%\OpenCandy\6205DBE3685A462883AD7659A7095877\dh.exe File name: dh.exe
Size: 199.64 KB (199640 bytes)
MD5: 0f9fc08ec342114923ec68a722c45ddf
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\OpenCandy\6205DBE3685A462883AD7659A7095877
Group: Malware file
Last Updated: February 10, 2020
%APPDATA%\OpenCandy\3482529A2F82476683B5B79EFB337FC9\dh.exe File name: dh.exe
Size: 199.64 KB (199648 bytes)
MD5: 1f1113d526eea3af882e4dc2d0bb0349
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\OpenCandy\3482529A2F82476683B5B79EFB337FC9
Group: Malware file
Last Updated: August 19, 2020
%APPDATA%\OpenCandy\42DF308604A84DFE8245CA9B31E6D5F5\dlm.exe File name: dlm.exe
Size: 306.44 KB (306440 bytes)
MD5: 76548fe2316590f800d0dcee025a1883
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\OpenCandy\42DF308604A84DFE8245CA9B31E6D5F5
Group: Malware file
Last Updated: April 22, 2020
C:\Users\<username>\AppData\Roaming\OpenCandy\A970D64A7ECD4F86A639D2D68C2B742E\dh.exe File name: dh.exe
Size: 199.64 KB (199648 bytes)
MD5: bf70ed5127d671dbd32fa7c388219066
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OpenCandy\A970D64A7ECD4F86A639D2D68C2B742E\dh.exe
Group: Malware file
Last Updated: January 15, 2022
%PROGRAMFILES(x86)%\Hblqdk6z\vnod9r9rxxwd.exe File name: vnod9r9rxxwd.exe
Size: 260.68 KB (260683 bytes)
MD5: 6152ac8ddb5f939daba1c9a42b6095ff
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Hblqdk6z\vnod9r9rxxwd.exe
Group: Malware file
Last Updated: June 26, 2020

More files

Additional Information

The following directories were created:
%APPDATA%\How Inc%APPDATA%\RHEng%APPDATA%\RPEng%APPDATA%\RecLib%APPDATA%\mp3rocket%AppData%\OpenCandy
Loading...