Home Malware Programs Adware Adware.Groovorio

Adware.Groovorio

Posted: July 18, 2014

Threat Metric

Ranking: 3,155
Threat Level: 2/10
Infected PCs: 77,969
First Seen: July 18, 2014
Last Seen: March 9, 2025
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\Groovorio\BRS\brs.exe File name: brs.exe
Size: 1.07 MB (1074688 bytes)
MD5: 35012a81baa8ff6e6eab0dcdf8415cac
Detection count: 7,078
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\Groovorio\BRS\brs.exe
Group: Malware file
Last Updated: June 14, 2023
%APPDATA%\Groovorio\UpdateProc\bkup.dat File name: bkup.dat
Size: 17.63 KB (17639 bytes)
MD5: a109556cfdde37f7f1dadc03ce93caef
Detection count: 33
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\Groovorio\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\Groovorio\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 485.73 KB (485739 bytes)
MD5: 0e101e51ef73663f08499aacb04b0b64
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Groovorio\UpdateProc
Group: Malware file
Last Updated: March 22, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%PROGRAMFILES%\Groovorio\BRS\brs.exe%PROGRAMFILES(x86)%\Groovorio\BRS\brs.exe%WINDIR%\System32\Tasks\Groovorio%WinDir%\System32\Tasks\Groovorio Updater%windir%\Tasks\Groovorio Updater.job%WINDIR%\Tasks\Groovorio.jobHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\AppID\{FCF8BFD3-39B8-4370-B464-EC2AAACD97CF}SOFTWARE\Classes\Wow6432Node\AppID\{FCF8BFD3-39B8-4370-B464-EC2AAACD97CF}Software\groovorioSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Groovorio Updater.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Groovorio Updater.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GroovorioSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Groovorio UpdaterSOFTWARE\Wow6432Node\Classes\AppID\{FCF8BFD3-39B8-4370-B464-EC2AAACD97CF}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Groovorio

Additional Information

The following directories were created:
%APPDATA%\Groovorio%PROGRAMFILES%\Groovorio%PROGRAMFILES(x86)%\Groovorio%appdata%\GroovorioUpdater
The following URL's were detected:
groovorio.com
Loading...