Home Malware Programs Adware Adware.Webfuii

Adware.Webfuii

Posted: February 17, 2014

Threat Metric

Ranking: 19,544
Threat Level: 2/10
Infected PCs: 1,094
First Seen: February 17, 2014
Last Seen: March 3, 2025
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Webfuii\Webfuii.FirstRun.exe File name: Webfuii.FirstRun.exe
Size: 1.09 MB (1091352 bytes)
MD5: 2c1a8fe2bafd35fed3b0d3adc18cbe8c
Detection count: 48
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Webfuii
Group: Malware file
Last Updated: February 17, 2014
%PROGRAMFILES%\Webfuii\updateWebfuii.exe File name: updateWebfuii.exe
Size: 66.84 KB (66840 bytes)
MD5: 8ec12bc888e9544facc27ee584d5378f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Webfuii
Group: Malware file
Last Updated: February 17, 2014
%PROGRAMFILES%\Webfuii\bin\utilWebfuii.exe File name: utilWebfuii.exe
Size: 69.43 KB (69431 bytes)
MD5: 639c568ddddbf88ff2d03dd3173537f6
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Webfuii\bin
Group: Malware file
Last Updated: February 17, 2014
%PROGRAMFILES%\Webfuii\Webfuiibho.dll File name: Webfuiibho.dll
Size: 249.62 KB (249624 bytes)
MD5: 4e842db914ebacb0cb69a20c0bde6379
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Webfuii
Group: Malware file
Last Updated: February 17, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{32B386CA-DAE5-44F3-BEB6-2BC8BA05D0AE}{54DA569F-DC68-4A3C-9641-918CADCD98B7}{6e911b4f-caac-45b4-8e2d-4b79b2b92a07}HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{6E911B4F-CAAC-45B4-8E2D-4B79B2B92A07}Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webfuii.comSOFTWARE\Microsoft\Tracing\updateWebfuii_RASAPI32SOFTWARE\Microsoft\Tracing\updateWebfuii_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6e911b4f-caac-45b4-8e2d-4b79b2b92a07}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E911B4F-CAAC-45B4-8E2D-4B79B2B92A07}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E911B4F-CAAC-45B4-8E2D-4B79B2B92A07}Software\WebfuiiSOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebfuii_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebfuii_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6e911b4f-caac-45b4-8e2d-4b79b2b92a07}SOFTWARE\Wow6432Node\WebfuiiSYSTEM\ControlSet001\services\eventlog\Application\Update WebfuiiSYSTEM\ControlSet001\services\Update WebfuiiSYSTEM\ControlSet002\services\eventlog\Application\Update WebfuiiSYSTEM\ControlSet002\services\Update WebfuiiSYSTEM\CurrentControlSet\services\eventlog\Application\Update WebfuiiSYSTEM\CurrentControlSet\services\Update WebfuiiHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Webfuii

Additional Information

The following directories were created:
%PROGRAMFILES%\Webfuii%PROGRAMFILES(x86)%\Webfuii
The following URL's were detected:
Webfuii
Loading...