Análisis realizado por : Byron Jon Gelera   
 Alias

PUP.Optional.1ClickSystemMechanic (Malwarebytes); not-a-virus:RiskTool.Win32.SpeedUpMyPC.appw (Kaspersky)

 Plataforma:

Windows

 Riesgo general:
 Potencial de destrucción:
 Potencial de distribución:
 Infección divulgada:
 Revelación de la información:
Bajo
Medio
High
Crítico

  • Tipo de malware
    Potentially Unwanted Application

  • Destructivo?
    No

  • Cifrado
     

  • In the Wild:
    Sí

  Resumen y descripción

Canal de infección Eliminado por otro tipo de malware

Puede haberlo instalado manualmente un usuario.

  Detalles técnicos

Tamaño del archivo 5,401,936 bytes
Tipo de archivo EXE
Residente en memoria No
Fecha de recepción de las muestras iniciales 06 de marzo de 2018
Carga útil Drops files, Connects to URLs/IPs

Detalles de entrada

Puede haberlo instalado manualmente un usuario.

Instalación

Agrega las carpetas siguientes:

  • %Program Files%\1~Click~SystemMechanic on {Computer name}
  • %ProgramData%\1~Click~SystemMechanic on {Computer name}
  • %Program Files%\Driver Updater
  • %ProgramData%\Microsoft\Windows\Start Menu\Programs\1~Click~SystemMechanic on {Computer name}

(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Infiltra los archivos siguientes:

  • %Program Files%\1~Click~SystemMechanic on {Computer name}\unins000.dat
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\unins000.exe
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\oscm.exe
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\oscm.exe.config
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\AppRes.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\Microsoft.Win32.TaskScheduler.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\Microsoft.TeamFoundation.Common.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\TaskScheduler.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\NAudio.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\TAFactory.IconPack.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\Interop.IWshRuntimeLibrary.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\x64\SQLite.Interop.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\x86\SQLite.Interop.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\System.Data.SQLite.DLL
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\HtmlRenderer.dll
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\HtmlRenderer.WinForms.dll
  • %ProgramData%\1~Click~SystemMechanic on {Computer name}\mpc.db
  • %ProgramData%\1~Click~SystemMechanic on {Computer name}\mpcstartrepair_en.mp3
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\english_apc_en.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\danish_apc_da.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\Dutch_apc_nl.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\finish_apc_fi.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\French_apc_fr.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\german_apc_de.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\italian_apc_it.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\japanese_apc_ja.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\norwegian_apc_no.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\portuguese_apc_ptbr.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\russian_apc_ru.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\spanish_apc_es.ini
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\langs\swedish_apc_sv.ini
  • %ProgramData%\Microsoft\Windows\Start Menu\Programs\1~Click~SystemMechanic on {Computer name}\1~Click~SystemMechanic.lnk
  • %ProgramData%\Microsoft\Windows\Start Menu\Programs\1~Click~SystemMechanic on {Computer name}\Buy 1~Click~SystemMechanic.lnk
  • %ProgramData%\Microsoft\Windows\Start Menu\Programs\1~Click~SystemMechanic on {Computer name}\Uninstall 1~Click~SystemMechanic.lnk
  • %Program Files%\1~Click~SystemMechanic on {Computer name}\unins000.msg
  • %Program Files%\Driver Updater\unins000.exe
  • %Program Files%\Driver Updater\aptdu.exe
  • %Program Files%\Driver Updater\aptdu.exe.config
  • %Program Files%\Driver Updater\DUContent.dll
  • %Program Files%\Driver Updater\Microsoft.Win32.TaskScheduler.dll
  • %Program Files%\Driver Updater\TaskScheduler.dll
  • %Program Files%\Driver Updater\NAudio.dll
  • %Program Files%\Driver Updater\TAFactory.IconPack.dll
  • %Program Files%\Driver Updater\Interop.IWshRuntimeLibrary.dll
  • %Program Files%\Driver Updater\System.ServiceModel.dll
  • %Program Files%\Driver Updater\dp\7z.dll
  • %Program Files%\Driver Updater\dp\7z.exe
  • %Program Files%\Driver Updater\dp\difxapi.dll
  • %Program Files%\Driver Updater\dp\difxapi64.dll
  • %Program Files%\Driver Updater\dp\DPInst32.exe
  • %Program Files%\Driver Updater\dp\DPInst64.exe
  • %Program Files%\Driver Updater\dp\DriversPath.exe
  • %Program Files%\Driver Updater\dp\FileValidator.exe
  • %Program Files%\Driver Updater\Delimon.Win32.IO.dll
  • %Program Files%\Driver Updater\Langs\danish_du_da.ini
  • %Program Files%\Driver Updater\Langs\Dutch_du_nl.ini
  • %Program Files%\Driver Updater\Langs\english_du_en.ini
  • %Program Files%\Driver Updater\Langs\finish_du_fi.ini
  • %Program Files%\Driver Updater\Langs\French_du_fr.ini
  • %Program Files%\Driver Updater\Langs\german_du_de.ini
  • %Program Files%\Driver Updater\Langs\italian_du_it.ini
  • %Program Files%\Driver Updater\Langs\japanese_du_ja.ini
  • %Program Files%\Driver Updater\Langs\norwegian_du_no.ini
  • %Program Files%\Driver Updater\Langs\portuguese_du_ptbr.ini
  • %Program Files%\Driver Updater\Langs\russian_du_ru.ini
  • %Program Files%\Driver Updater\Langs\spanish_du_es.ini
  • %Program Files%\Driver Updater\Langs\swedish_du_sv.ini
  • %Program Files%\Driver Updater\danish_iss.ini
  • %Program Files%\Driver Updater\Dutch_iss.ini
  • %Program Files%\Driver Updater\english_iss.ini
  • %Program Files%\Driver Updater\finish_iss.ini
  • %Program Files%\Driver Updater\French_iss.ini
  • %Program Files%\Driver Updater\german_iss.ini
  • %Program Files%\Driver Updater\italian_iss.ini
  • %Program Files%\Driver Updater\japanese_iss.ini
  • %Program Files%\Driver Updater\norwegian_iss.ini
  • %Program Files%\Driver Updater\portuguese_iss.ini
  • %Program Files%\Driver Updater\russian_iss.ini
  • %Program Files%\Driver Updater\spanish_iss.ini
  • %Program Files%\Driver Updater\swedish_iss.ini
  • %System Root%\Users\Public\Desktop\1~Click~SystemMechanic.lnk
  • %System%\Tasks\Driver Updater_Logon
  • %Application Data%\driverdetails.com\Driver Updater\res.bin
  • %System%\Tasks\Driver Updater_Diverdetails_DDelayScheduled

Otras modificaciones del sistema

Agrega las siguientes entradas de registro como parte de la rutina de instalación:

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr

HKEY_CURRENT_USER\Software\driverdetails.com

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com

Agrega las siguientes entradas de registro:

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
phone = (855)-332-0124

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
isphone = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
issilent = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
fpxl = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
issrantv = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
islswc = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
showefo = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
efosetting = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
country = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
msl = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
pxl = mpcmsite

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
prereg = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
showtn = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
ovoffdis = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
cta = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
delay = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
cbkpoff = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
showudurec = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
playsound = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
showunins = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
runcam = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
runsrc = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
runpixel = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
isiunidu = 1

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-at = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-context = ""

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}
utm_pubid = ""

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}
x-at = ""

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}
x-context = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_us = (855)-332-0124

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_uk = 0800-031-5066

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_gb = 0800-031-5066

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_au = (61)280-733403

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_fr = 05 82 84 04 06

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_de = 0800 1822 974

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_at = +43 (0)720 902 309

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_ch = +41 (0)44 508 70 37

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_lu = 0800 1822 974

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_jp = 0120-993-506

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Phone_ja = 0120-993-506

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
PurchaseURL = http://store.winpcutils.com/scm/price?

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
RenewURL = http://store.winpcutils.com/scm/renewal?

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
WebURL = http://www.winpcutils.com/

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
EmailURL = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
supporturl = http://www.winpcutils.com/help/

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
affired = 0

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}
Installstring = %Program Files%\1~Click~SystemMechanic on {Computer name}

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
Installstring = %Program Files%\1~Click~SystemMechanic on {Computer name}

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
reg = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
expired = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-ccode = ph

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
phone = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
isphone = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-ip = 103_5_6_243

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-datetime = ""

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
x-fetch = 0

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
paramurl = http://trkr.entireactiv.com/ipfiles/

HKEY_CURRENT_USER\Software\1~Click~SystemMechanic on {Computer name}
LangCode = en

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
LangCode = en

HKEY_LOCAL_MACHINE\SOFTWARE\1~Click~SystemMechanic on {Computer name}
afterInstallUrl = http://ins.entireactiv.com/install/scm/?

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
utm_source = mpcmsite

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
utm_campaign = mpcmsite

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
utm_medium = ""

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
affiliateid = ""

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
pxl = mpcmsite

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
x-at = ""

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
x-context = ""

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
country = ""

HKEY_LOCAL_MACHINE\SOFTWARE\spct-pr
phone = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO = (855)-332-0124

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
ISTELNO = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
issilent = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
affired = 0

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
showwfo = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
wfoset = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
country = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
pxl = DUM2865_DUM2798_DUM1440

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
prereg = 0

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
showtn = 0

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
delay = 30

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
bdInst = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
cbkpoff = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
showunins = 1

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
utm_source = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
utm_campaign = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
utm_medium = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
affiliateid = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
utm_pubid = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
x-base = ""

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
utm_source = dumsm

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
utm_campaign = dumsm

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
utm_medium = dumsm

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
affiliateid = ""

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
pxl = dum2865_dum2798_dum1440

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
utm_pubid = ""

HKEY_CURRENT_USER\Software\driverdetails.com\
Driver Updater
x-base = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_us = 801-447-5902

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_uk = 0800-031-5066

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_gb = 0800-031-5066

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_au = (61)280-733403

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_fr = 05 82 84 04 06

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_de = 0800 1822 974

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_at = +43 (0)720 902 309

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_ch = +41 (0)44 508 70 37

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_lu = 0800 1822 974

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_ja = 0120-993-506

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_jp = 0120-993-506

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_br = +55 21 2391 4319

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_it = +39 069 4802886

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_es = +34 951 203 537

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_ar = +54 11 5236 0324

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_fi = +358 (0)9 4270 4911

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_pt = +351 70 750 2094

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_no = +47 21 95 01 97

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_dk = +45 78 73 09 26

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_se = +46-08124-10298

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO_nl = +31-08-58882839

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
PurchaseURL = http://driverupdater.esecureshoppe.com/du/price?

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
RenewURL = http://driverupdater.esecureshoppe.com/du/renewal?

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
WebURL = http://www.driverdetails.com/

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
EmailURL = driverupdater

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
supporturl = http://www.driverdetails.com/help/

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
x-ccode = ph

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
TELNO = ""

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
ISTELNO = 0

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
reg = 0

HKEY_LOCAL_MACHINE\SOFTWARE\driverdetails.com\
Driver Updater
expired = 0

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
utm_source = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
utm_campaign = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
utm_medium = dumsm

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
affiliateid = ""

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
pxl = dum2865_dum2798_dum1440

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
utm_pubid = ""

HKEY_LOCAL_MACHINE\SOFTWARE\ddtdu-pr
x-base = ""

  Soluciones

Motor de exploración mínimo 9.850
Archivo de patrones de SSAPI: 1.925.00
Fecha de publicación del patrón SSAPI 08 de marzo de 2018

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 3

Eliminar esta clave del Registro

[ aprenda más ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

 
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • 1~Click~SystemMechanic on {Computer name}
  • In HKEY_CURRENT_USER\Software
    • 1~Click~SystemMechanic on {Computer name}
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • spct-pr
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • ddtdu-pr
  • In HKEY_CURRENT_USER\Software
    • driverdetails.com
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • driverdetails.com

Step 4

Buscar y eliminar esta carpeta

[ aprenda más ]
Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción Más opciones avanzadas para que el resultado de la búsqueda incluya todas las carpetas ocultas.
  • %Program Files%\1~Click~SystemMechanic on {Computer name}
  • %ProgramData%\1~Click~SystemMechanic on {Computer name}
  • %Program Files%\Driver Updater
  • %ProgramData%\Microsoft\Windows\Start Menu\Programs\1~Click~SystemMechanic on {Computer name}

Step 5

Buscar y eliminar este archivo

[ aprenda más ]
Puede que algunos de los archivos del componente estén ocultos. Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción Más opciones avanzadas para que el resultado de la búsqueda incluya todos los archivos y carpetas ocultos.
  • %System Root%\Users\Public\Desktop\1~Click~SystemMechanic.lnk
  • %System%\Tasks\Driver Updater_Logon
  • %Application Data%\driverdetails.com\Driver Updater\res.bin
  • %System%\Tasks\Driver Updater_Diverdetails_DDelayScheduled

Step 6

Explorar el equipo con su producto de Trend Micro para eliminar los archivos detectados como PUA_SYSMECH.GB En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.


Rellene nuestra encuesta!