Home Malware Programs Adware PortalMore

PortalMore

Posted: August 18, 2014

Threat Metric

Ranking: 16,449
Threat Level: 2/10
Infected PCs: 2,967
First Seen: August 18, 2014
Last Seen: December 19, 2024
OS(es) Affected: Windows


PortalMore is an adware application that may be able to display several pop-up or banner ads attempting to offer various products or services throughout the internet. Use of the PortalMore ads may redirect your web browser to several unwanted sites or pages that have questionable content. The PortalMore ads may cause your web browser to perform poorly in some cases where you may become annoyed by certain pages loading slowly. Stopping the PortalMore ads from appearing or causing redirects will take the action of completely removing PortalMore from your system, including any related plugins or add-on components loaded from the installation of PortalMore.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\PortalMore\bin\PortalMore.BrowserAdapter.exe File name: PortalMore.BrowserAdapter.exe
Size: 96.54 KB (96544 bytes)
MD5: dc4a4f28e0d32dd32f04f50f7cdfc0c7
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PortalMore\bin
Group: Malware file
Last Updated: August 19, 2014
%PROGRAMFILES(x86)%\PortalMore\bin\PortalMore.PurBrowse64.exe File name: PortalMore.PurBrowse64.exe
Size: 287 KB (287008 bytes)
MD5: fe3ba50a85da353417560b49efc5a51a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PortalMore\bin
Group: Malware file
Last Updated: August 19, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{D0609631-6D6C-4B4F-BD22-2CF74DC40526}{EC380E04-27F0-4855-8A23-3C9EE2C20B1F}HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{B4FDB093-34F6-4A49-8133-61B3072261AC}SOFTWARE\Microsoft\Tracing\PortalMore_RASAPI32SOFTWARE\Microsoft\Tracing\PortalMore_RASMANCSSOFTWARE\Microsoft\Tracing\updatePortalMore_RASAPI32SOFTWARE\Microsoft\Tracing\updatePortalMore_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{B4FDB093-34F6-4A49-8133-61B3072261AC}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B4FDB093-34F6-4A49-8133-61B3072261AC}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B4FDB093-34F6-4A49-8133-61B3072261AC}SOFTWARE\PortalMoreSOFTWARE\Wow6432Node\Microsoft\Tracing\PortalMore_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\PortalMore_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\updatePortalMore_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updatePortalMore_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{B4FDB093-34F6-4A49-8133-61B3072261AC}SOFTWARE\Wow6432Node\PortalMoreSYSTEM\ControlSet001\services\eventlog\Application\Update PortalMoreSYSTEM\ControlSet001\services\Update PortalMoreSYSTEM\ControlSet002\services\eventlog\Application\Update PortalMoreSYSTEM\ControlSet002\services\Update PortalMoreSYSTEM\CurrentControlSet\services\eventlog\Application\Update PortalMoreSYSTEM\CurrentControlSet\services\Update PortalMoreHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}PortalMore

Additional Information

The following directories were created:
%PROGRAMFILES%\PortalMore%PROGRAMFILES(x86)%\PortalMore%Temp%\PortalMore
Loading...