Emsisoft Malware-Info

Name: Adware.Win32.FlashGame

Risklevel: Low Risk

Description:

This application secretly will also install Adware.Mongoose and RK on victim machine.

Removal instructions for Adware FlashGame:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware FlashGame.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: FlashGame.exe

Screenshots:

FlashGameFlashGameFlashGameFlashGame

Used folders:

  • C:\Program Files\????????\
  • C:\Program Files\????????\data\
  • C:\Program Files\????????\images\
  • C:\Program Files\????????\img_flash\
  • C:\Program Files\????????\sort\0\
  • C:\Program Files\????????\Uninstall\
  • C:\WINDOWS\System32\
  • C:\WINDOWS\System32\CatRoot2\
  • C:\WINDOWS\????????\
  • C:\Documents and Settings\All Users\Desktop\
  • C:\Documents and Settings\All Users\Start Menu\
  • C:\Documents and Settings\All Users\Start Menu\Programs\????????\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009092820091005\
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009100920091010\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\

Used files:

  • C:\Program Files\????????\blank.htm
    [414 Bytes] HTM File
  • C:\Program Files\????????\FlashGame.exe
    [172032 Bytes] EXE File
  • C:\Program Files\????????\play.htm
    [1609 Bytes] HTM File
  • C:\Program Files\????????\right.htm
    [1015 Bytes] HTM File
  • C:\Program Files\????????\????????.htm
    [82 Bytes] HTM File
  • C:\Program Files\????????\data\db.ldb
    [64 Bytes] LDB File
  • C:\Program Files\????????\data\db.mdb
    [126976 Bytes] MDB File
  • C:\Program Files\????????\images\bar_no.gif
    [248 Bytes] GIF File
  • C:\Program Files\????????\images\bar_yes.gif
    [142 Bytes] GIF File
  • C:\Program Files\????????\images\bg.gif
    [16413 Bytes] GIF File
  • C:\Program Files\????????\images\bg_fav.gif
    [172 Bytes] GIF File
  • C:\Program Files\????????\images\btn_close_mouseclick.gif
    [134 Bytes] GIF File
  • C:\Program Files\????????\images\btn_close_mouseout.gif
    [107 Bytes] GIF File
  • C:\Program Files\????????\images\btn_close_mouseover.gif
    [107 Bytes] GIF File
  • C:\Program Files\????????\images\btn_mix_mouseclick.gif
    [114 Bytes] GIF File
  • C:\Program Files\????????\images\btn_mix_mouseout.gif
    [88 Bytes] GIF File
  • C:\Program Files\????????\images\btn_mix_mouseover.gif
    [88 Bytes] GIF File
  • C:\Program Files\????????\images\btn_play_close.gif
    [90 Bytes] GIF File
  • C:\Program Files\????????\images\btn_play_max.gif
    [85 Bytes] GIF File
  • C:\Program Files\????????\images\btn_play_mix.gif
    [81 Bytes] GIF File
  • C:\Program Files\????????\images\btn_play_normal.gif
    [87 Bytes] GIF File
  • C:\Program Files\????????\images\logo_18.gif
    [990 Bytes] GIF File
  • C:\Program Files\????????\images\youxi123.ico
    [2238 Bytes] ICO File
  • C:\Program Files\????????\img_flash\1504.jpg
    [17991 Bytes] JPG File
  • C:\Program Files\????????\img_flash\1549.jpg
    [15011 Bytes] JPG File
  • C:\Program Files\????????\img_flash\1993.jpg
    [15224 Bytes] JPG File
  • C:\Program Files\????????\img_flash\3452.jpg
    [3507 Bytes] JPG File
  • C:\Program Files\????????\img_flash\3453.jpg
    [5804 Bytes] JPG File
  • C:\Program Files\????????\img_flash\5.jpg
    [4868 Bytes] JPG File
  • C:\Program Files\????????\img_flash\6.jpg
    [3169 Bytes] JPG File
  • C:\Program Files\????????\sort\0\1.txt
    [373 Bytes] TXT File
  • C:\Program Files\????????\Uninstall\IRIMG1.JPG
    [5432 Bytes] JPG File
  • C:\Program Files\????????\Uninstall\IRIMG2.JPG
    [25186 Bytes] JPG File
  • C:\Program Files\????????\Uninstall\uninstall.dat
    [60480 Bytes] DAT File
  • C:\Program Files\????????\Uninstall\uninstall.xml
    [9574 Bytes] XML File
  • C:\WINDOWS\System32\MSINET.OCX
    [117507 Bytes] OCX File
  • C:\WINDOWS\System32\CatRoot2\dberr.txt
    [4739 Bytes] TXT File
  • C:\WINDOWS\????????\uninstall.exe
    [451072 Bytes] EXE File
  • C:\Documents and Settings\All Users\Desktop\????????.lnk
    [1577 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\????????.lnk
    [1577 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\????????\????????.lnk
    [1589 Bytes] LNK File
  • C:\Documents and Settings\All Users\Start Menu\Programs\????????\??? ????????.lnk
    [1667 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
    [18 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    [29735 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
    [216 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    [216 Bytes] File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\????????.lnk
    [1595 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Cookies\index.dat
    [32768 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
    [16384 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\index.dat
    [32768 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009092820091005\index.dat
    [32768 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\History\History.IE5\MSHist012009100920091010\index.dat
    [32768 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\crinstaller.exe
    [357024 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\crverify.exe
    [246432 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\CSM2F.tmp
    [160416 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\setup_youxi123.exe
    [752728 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\~DFEB08.tmp
    [16384 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    [81920 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\1549[1].jpg
    [15011 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\3453[1].jpg
    [5804 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\banner[1].jpg
    [31278 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\3452[1].jpg
    [3507 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\5[1].jpg
    [4868 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\CIStyles[1].css
    [1053 Bytes] CSS File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\1504[1].jpg
    [17991 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\1879[1].jpg
    [0 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\1[1].txt
    [373 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\BundleOptout[1].htm
    [3842 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\1993[1].jpg
    [15224 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\6[1].jpg
    [3169 Bytes] JPG File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\BundleAbort[1].htm
    [1194 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\campaignstatus[1].htm
    [511 Bytes] HTM File

Additional information might be found here:

Search at Google for Adware FlashGame Search at Google for Adware FlashGame
Search at Bing for Adware FlashGame Search at Bing for Adware FlashGame
Search at Yahoo for Adware FlashGame Search at Yahoo for Adware FlashGame

How can I protect myself from Adware FlashGame?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software