Home Malware Programs Adware KingThink


Posted: August 28, 2014

Threat Metric

Ranking: 17,079
Threat Level: 2/10
Infected PCs: 265
First Seen: August 28, 2014
Last Seen: August 1, 2023
OS(es) Affected: Windows

KingThink is an adware application that could be loaded on a system through the installation of random bundled software or freeware programs. When loaded, KingThink is apt to loading pop-up or banner advertisements that attempt to offer various offers for coupon deals or saving money shopping on the internet. The KingThink ads may be part of an ad network known for rendering coupon deal type ads on the internet. Use of the KingThink ads may cause a redirect to random sites that contain unwanted content. Bearing the aggravations of KingThink ads may warrant removal, which can be done through the use of an antispyware tool. Once removed, performance of affected web browsers may return to normal where sites may be loaded at full speed when surfing the internet.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

kingthinkSetup.exe File name: kingthinkSetup.exe
Size: 582.54 KB (582544 bytes)
MD5: a8dc6841a271c743571a7e0a9f046321
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: August 17, 2022

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{A1929A70-25D9-4FFC-BB9B-16738F58EA83}SOFTWARE\Microsoft\Tracing\kingthink_RASAPI32SOFTWARE\Microsoft\Tracing\kingthink_RASMANCSSOFTWARE\Microsoft\Tracing\updatekingthink_RASAPI32SOFTWARE\Microsoft\Tracing\updatekingthink_RASMANCSSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1929A70-25D9-4FFC-BB9B-16738F58EA83}SOFTWARE\Wow6432Node\Microsoft\Tracing\updatekingthink_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updatekingthink_RASMANCSSYSTEM\ControlSet001\services\eventlog\Application\Update kingthinkSYSTEM\ControlSet001\services\Update kingthinkSYSTEM\ControlSet002\services\eventlog\Application\Update kingthinkSYSTEM\ControlSet002\services\Update kingthinkSYSTEM\CurrentControlSet\services\eventlog\Application\Update kingthinkSYSTEM\CurrentControlSet\services\Update kingthink

Additional Information

The following directories were created: