WdsManPro is an application that usually installs without your knowledge with free software downloads. Identified the 08/30/2015.

Features:

– It belongs to a family of PUP (Potentially Unwanted Program).
– Vendor : PUP.Optional

Main actions :

– It installs as a process launched at startup of the system (RP),
– It installs as a service to be launched each time the system (O23),(SS/SR).
– It creates to many registry keys ‘Software’
– It creates additional folders (O43),
– It moved to the Windows prefetcher folder (O45).

ZHPDiag report:

[MD5.E0DA271341411C06CD94035AEA6D008F] – (.DTools LIMITED – DTools.) — C:\ProgramData\vWdsManProv\WdsManPro.exe [709288] [PID.2380] [MD5.809B39A1A036C20994E68CF322A2519A] – (.DTools LIMITED – DTools.) — C:\ProgramData\3WdsManPro3\WdsManPro.exe [451720] [PID.1964] O23 – Service: WdsManPro Service (WdsManPro) . (…) – C:\ProgramData\tWdsManProt\WdsManPro.exe
O23 – Service: WdsManPro Service (WdsManPro) . (.DTools LIMITED – DTools.) – C:\ProgramData\vWdsManProv\WdsManPro.exe
O23 – Service: WdsManPro Service (WdsManPro) . (.DTools LIMITED – DTools.) – C:\ProgramData\3WdsManPro3\WdsManPro.exe
HKLM\SOFTWARE\Wow6432Node\WdsManPro
HKLM\SOFTWARE\WdsManPro
O43 – CFD: 2015/08/30 16:04:33 – [] D — C:\ProgramData\gWdsManProg
O43 – CFD: 2015/08/30 19:31:42 – [] D — C:\ProgramData\DWdsManProD
O43 – CFD: 2015/08/30 19:43:10 – [] D — C:\ProgramData\6WdsManPro6
O43 – CFD: 2015/08/31 00:47:11 – [] D — C:\ProgramData\pWdsManProp
O43 – CFD: 2015/08/30 13:29:52 – [] D — C:\ProgramData\rWdsManPror
O43 – CFD: 2015/09/01 14:42:53 – [] D — C:\ProgramData\lWdsManProl
O43 – CFD: 2015/09/20 19:07:35 – [] D — C:\ProgramData\iWdsManProi
O43 – CFD: 2015/09/01 15:30:15 – [] D — C:\ProgramData\nWdsManPron
O45 – LFCP:[MD5.7C01CAA9B23D7640AE00672F2FF3A18D] 2015/08/31 13:41:34 A — C:\WINDOWS\Prefetch\WDSMANPRO.EXE-9C6BB8AD.pf
SR – Auto [2015/08/29 16:14:26] [ 709288] WdsManPro Service (WdsManPro) . (.DTools LIMITED.) – C:\ProgramData\vWdsManProv\WdsManPro.exe
HKLM\SYSTEM\CurrentControlSet\Services\WdsManPro

Alias:

Win32/Adware.MultiPlug [ESET Nod32] PUP.Optional.Multiplug.A [ Malwarebytes Antimalware ] Adware.Multiplug

Remove:

– Remove software in Windows Configuration Panel,
Remove with ZHPcleaner
ZHPCleaner_EN2
Diagnose with ZHPDiag
ZHPDiag_2-300x220

2016-12-30T07:34:23+00:00 Categories: Adware, Polluteware, PUP|Tags: , , |Comments Off on PUP.Optional.WdsManPro