Home Malware Programs Adware Adware.The Windows Session Console Weather

Adware.The Windows Session Console Weather

Posted: February 24, 2017

Threat Metric

Threat Level: 2/10
Infected PCs: 11,188
First Seen: February 24, 2017
Last Seen: October 20, 2024
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\SoftMedia\Win Context Tools\wdscw.exe File name: wdscw.exe
Size: 38.4 KB (38400 bytes)
MD5: e4ab35f6b6e4e4aec9e78d3c643fb4c2
Detection count: 468
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\SoftMedia\Win Context Tools\wdscw.exe
Group: Malware file
Last Updated: October 20, 2024
C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO7U0ORY\wEye1.0.17-release-N[1].exe File name: wEye1.0.17-release-N[1].exe
Size: 630.78 KB (630784 bytes)
MD5: 73a46e3efa2bf68f10b3f405379bba24
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO7U0ORY\wEye1.0.17-release-N[1].exe
Group: Malware file
Last Updated: August 17, 2022

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Installer\Features\8CFFBD1DA2C241D469A4ED383C44783ASOFTWARE\Classes\Installer\Products\8CFFBD1DA2C241D469A4ED383C44783ASOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\69454B367677830448260074E5DA98B0HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{D1DBFFC8-2C2A-4D14-964A-DE83C34487A3}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\SoftMedia\Windows Session Console Weather%PROGRAMFILES%\SoftMedia\Win Context Tools%PROGRAMFILES%\SoftMedia\Windows Session Console Weather%PROGRAMFILES(x86)%\SoftMedia\Win Context Tools%PROGRAMFILES(x86)%\SoftMedia\Windows Session Console Weather
Loading...