Home Malware Programs Adware Online Ad Scanner

Online Ad Scanner

Posted: October 6, 2014

Threat Metric

Ranking: 12,401
Threat Level: 1/10
Infected PCs: 21,943
First Seen: October 6, 2014
Last Seen: October 9, 2023
OS(es) Affected: Windows

Online Ad Scanner is an adware-related program that is classified as a PUP (Potentially Unwanted Program). Usually, you may find Online Ad Scanner bundled with other free software that you can download from the Internet. Several anti-virus programs detect Online Ad Scanner as an adware since it causes the user's Internet browsers to display annoying advertisements constantly. Moreover, this application is focused on the user's browsing habits, and it collects different types of data.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\Orogenetictonero\OrogeneticC.exe File name: OrogeneticC.exe
Size: 132.09 KB (132096 bytes)
MD5: 172aee8a2212e21f1d8b4ff3b4eef881
Detection count: 211
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Orogenetictonero
Group: Malware file
Last Updated: January 6, 2019
%PROGRAMFILES%\mechstorep\MechStoreDllP.exe File name: MechStoreDllP.exe
Size: 144.89 KB (144896 bytes)
MD5: 26b3e364104bf3f41e4b2318596f29bc
Detection count: 148
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\mechstorep
Group: Malware file
Last Updated: May 26, 2020
%PROGRAMFILES(x86)%\Yenanondmer\YenanW.exe File name: YenanW.exe
Size: 132.09 KB (132096 bytes)
MD5: c8f4cb372894218ab69e4b841efb67c6
Detection count: 98
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Yenanondmer
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\PellileHunHar\PellileH.exe File name: PellileH.exe
Size: 110.08 KB (110080 bytes)
MD5: 007f9c18a1eec228aa974011ac98bfbd
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PellileHunHar
Group: Malware file
Last Updated: January 26, 2022
%PROGRAMFILES(x86)%\HeiseMicArt\HeiseMicArt_.exe File name: HeiseMicArt_.exe
Size: 642.56 KB (642560 bytes)
MD5: a162f462cc8e9a860f8448726de171e8
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\HeiseMicArt
Group: Malware file
Last Updated: January 17, 2017
%PROGRAMFILES(x86)%\Proannexationihonic\ProannexationM.exe File name: ProannexationM.exe
Size: 132.6 KB (132608 bytes)
MD5: 193b425af1bde92e3ca280222bd2b576
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Proannexationihonic
Group: Malware file
Last Updated: August 1, 2018
%PROGRAMFILES(x86)%\PrixHorCol\PrixH.exe File name: PrixH.exe
Size: 131.58 KB (131584 bytes)
MD5: cdaeee78dc44c8743b2b029716b536f1
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PrixHorCol
Group: Malware file
Last Updated: January 24, 2017
C:\Program Files (x86)\mechstorep\MechStoreP_.exe File name: MechStoreP_.exe
Size: 731.64 KB (731648 bytes)
MD5: d46970c4ddc514a62bac8f6ebb256ce9
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\mechstorep\MechStoreP_.exe
Group: Malware file
Last Updated: April 4, 2021
C:\Program Files (x86)\mechstorep\MechStoreP.exe File name: MechStoreP.exe
Size: 749.05 KB (749056 bytes)
MD5: fe7b5ed66af584b7f99027268124e950
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\mechstorep\MechStoreP.exe
Group: Malware file
Last Updated: April 4, 2021
%PROGRAMFILES(x86)%\Huygenianubirol\HuygenianR.exe File name: HuygenianR.exe
Size: 131.07 KB (131072 bytes)
MD5: 9fdbe207a5dd4c4e8cd8ad98278a1bf5
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Huygenianubirol
Group: Malware file
Last Updated: January 26, 2017
%PROGRAMFILES(x86)%\Orogenetictonero\Orogenetictonero_.exe File name: Orogenetictonero_.exe
Size: 642.04 KB (642048 bytes)
MD5: 04f2264633fbf9f089a4e62ef5774836
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Orogenetictonero
Group: Malware file
Last Updated: January 17, 2017
%PROGRAMFILES(x86)%\syncdrived\SyncDriveSrvD.exe File name: SyncDriveSrvD.exe
Size: 144.89 KB (144896 bytes)
MD5: e3fdc58a060739fa0ba852e3a90e4e56
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\syncdrived
Group: Malware file
Last Updated: November 21, 2018
%PROGRAMFILES(x86)%\Proannexationihonic\Proannexationihonic.exe File name: Proannexationihonic.exe
Size: 665.6 KB (665600 bytes)
MD5: 5136538784d59fbe1c4b2b215ce120bf
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Proannexationihonic
Group: Malware file
Last Updated: January 27, 2017
%PROGRAMFILES(x86)%\Proannexationihonic\Proannexationihonic_.exe File name: Proannexationihonic_.exe
Size: 648.19 KB (648192 bytes)
MD5: e1f619f23861566724c256f0028c9958
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Proannexationihonic
Group: Malware file
Last Updated: January 27, 2017
%PROGRAMFILES(x86)%\FissicostateDorlan\FissicostateDorlan_.exe File name: FissicostateDorlan_.exe
Size: 642.04 KB (642048 bytes)
MD5: b406892d96c0c119097a50063c648c09
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\FissicostateDorlan
Group: Malware file
Last Updated: January 17, 2017
%PROGRAMFILES(x86)%\Orogenetictonero\Euphausiidory.exe File name: Euphausiidory.exe
Size: 1.78 MB (1785856 bytes)
MD5: abdf767a98659620074df873c26e7304
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Orogenetictonero
Group: Malware file
Last Updated: January 17, 2017
%PROGRAMFILES(x86)%\Huygenianubirol\Huygenianubirol_.exe File name: Huygenianubirol_.exe
Size: 644.09 KB (644096 bytes)
MD5: 8b3685d0be65a325449952ac15e00aa4
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Huygenianubirol
Group: Malware file
Last Updated: January 26, 2017
%PROGRAMFILES(x86)%\Huygenianubirol\Huygenianubirol.exe File name: Huygenianubirol.exe
Size: 661.5 KB (661504 bytes)
MD5: d9c060521ef51613eeb3034266e2d3c3
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Huygenianubirol
Group: Malware file
Last Updated: January 26, 2017
C:\Program Files\Genericshailli\Genericshailli.exe File name: Genericshailli.exe
Size: 665.6 KB (665600 bytes)
MD5: ed86edd8a0915874cb08daebb51a3e03
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\Genericshailli\Genericshailli.exe
Group: Malware file
Last Updated: September 17, 2021

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Windows\CurrentVersion\Run\Online Ad ScannerSoftware\okinetpcSoftware\oksitebrokerSOFTWARE\oksyncdrivedSOFTWARE\okwindfindSOFTWARE\okwinfielduseSOFTWARE\okwinloopmSoftware\okwinnetmngSOFTWARE\okwinruleSoftware\Online Ad ScannerSOFTWARE\Wow6432Node\okinetpcSOFTWARE\Wow6432Node\oksyncdrivedSOFTWARE\Wow6432Node\okwindfindSOFTWARE\Wow6432Node\okwinfielduseSOFTWARE\Wow6432Node\okwinloopmSOFTWARE\Wow6432Node\okwinruleHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Online Ad ScannerWindow Field ManaderWindow NetManagerWindow Raws Manager

Additional Information

The following directories were created:
%APPDATA%\OAS%PROGRAMFILES%\Genericshailli%PROGRAMFILES%\Miscreationourino%PROGRAMFILES%\WinLoopM%PROGRAMFILES%\WinRule%PROGRAMFILES%\syslogsp%PROGRAMFILES%\unerodedreeshe%PROGRAMFILES%\windriveuse%PROGRAMFILES%\winhostuse%PROGRAMFILES(x86)%\Citolesotferi%PROGRAMFILES(x86)%\Genericshailli%PROGRAMFILES(x86)%\GenlTybros%PROGRAMFILES(x86)%\Grishildaistpar%PROGRAMFILES(x86)%\Homocyclicushrex%PROGRAMFILES(x86)%\Indrealiari%PROGRAMFILES(x86)%\MechStoreP%PROGRAMFILES(x86)%\Miscreationourino%PROGRAMFILES(x86)%\Orogenetictonero%PROGRAMFILES(x86)%\PellileHunHar%PROGRAMFILES(x86)%\Petrelsrilian%PROGRAMFILES(x86)%\PrevScnP%PROGRAMFILES(x86)%\PrixHorCol%PROGRAMFILES(x86)%\Proannexationihonic%PROGRAMFILES(x86)%\SoftMaskP%PROGRAMFILES(x86)%\SyncDriveD%PROGRAMFILES(x86)%\SyncDriveP%PROGRAMFILES(x86)%\TapFoldP%PROGRAMFILES(x86)%\Unfugitivepocson%PROGRAMFILES(x86)%\WinLoopM%PROGRAMFILES(x86)%\WinRate%PROGRAMFILES(x86)%\WinRouteD%PROGRAMFILES(x86)%\WinRule%PROGRAMFILES(x86)%\flinchesislani%PROGRAMFILES(x86)%\idrived%PROGRAMFILES(x86)%\idrivem%PROGRAMFILES(x86)%\idrivep%PROGRAMFILES(x86)%\nextgenp%PROGRAMFILES(x86)%\periodogramtercac%PROGRAMFILES(x86)%\sitebroker%PROGRAMFILES(x86)%\syshandlem%PROGRAMFILES(x86)%\sysinitp%PROGRAMFILES(x86)%\syslogsp%PROGRAMFILES(x86)%\sysnetm%PROGRAMFILES(x86)%\sysnetp%PROGRAMFILES(x86)%\syspriom%PROGRAMFILES(x86)%\tapfoldd%PROGRAMFILES(x86)%\unerodedreeshe%PROGRAMFILES(x86)%\windfind%PROGRAMFILES(x86)%\windriveuse%PROGRAMFILES(x86)%\winfielduse%PROGRAMFILES(x86)%\winhostuse%PROGRAMFILES(x86)%\winlibp%PROGRAMFILES(x86)%\winloop%PROGRAMFILES(x86)%\winnetmng%PROGRAMFILES(x86)%\winraw

Related Posts

Loading...