Home Possibly Unwanted Program PUP.Wallpaper Changer

PUP.Wallpaper Changer

Posted: June 20, 2014

Threat Metric

Ranking: 8,508
Threat Level: 1/10
Infected PCs: 24,058
First Seen: June 20, 2014
Last Seen: September 30, 2023
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Config.Msi\48d61a8.rbf File name: 48d61a8.rbf
Size: 735.74 KB (735744 bytes)
MD5: 49d4a743b4832e02faff66579e8e67f8
Detection count: 22,351
Mime Type: unknown/rbf
Path: %SYSTEMDRIVE%\Config.Msi\48d61a8.rbf
Group: Malware file
Last Updated: August 4, 2023
file.exe File name: file.exe
Size: 1.28 MB (1288033 bytes)
MD5: 0c3eff2815903ce2d9626ae1b9950fbe
Detection count: 99
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 8, 2020
setup.exe File name: setup.exe
Size: 490.82 KB (490827 bytes)
MD5: 520addead3ea963c4923686ca567cc63
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 20, 2014

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Digital Distribution\Wallpaper ChangerSOFTWARE\Microsoft\Tracing\Wallpaper Changer_RASAPI32SOFTWARE\Microsoft\Tracing\Wallpaper Changer_RASMANCSSoftware\Microsoft\Windows\CurrentVersion\Run\Wallpaper ChangerSOFTWARE\Wow6432Node\Digital Distribution\Wallpaper ChangerSOFTWARE\Wow6432Node\Microsoft\Tracing\Wallpaper Changer_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\Wallpaper Changer_RASMANCS

Additional Information

The following directories were created:
%LOCALAPPDATA%\WPFBChanger%PROGRAMFILES%\Wallpaper Changer%PROGRAMFILES(x86)%\Wallpaper Changer
Loading...