Home Malware Programs Adware 7-Zip Packages Ads

7-Zip Packages Ads

Posted: October 9, 2015

Threat Metric

Threat Level: 8/10
Infected PCs: 58
First Seen: October 9, 2015
OS(es) Affected: Windows

Despite the intentional similarity of the name, 7-Zip Packages has nothing to do with the legitimate 7-Zip file archiver. 7-Zip Packages is adware that uses the popular installCore distribution platform. Its only function is to display large amounts of online ads that should boost the web traffic to its partners. This way, the owners of sponsored pages may get a consistent flow of visitors, to whom they may try to sell some products. On the other hand, the creators of 7-Zip Packages may receive monetary incentives. The ad-oriented extension may rely on only one delivery tactic: it may travel as an additional component of some cost-free applications. 7-Zip Packages has no official page, and there are no reports that any software platform hosts it. Thanks to the 'bundling' method that it implements, some users may detect the presence of the adware only after it has caused changes in Google Chrome, Mozilla Firefox and Internet Explorer. The commercial materials that 7-Zip Packages may insert may obtain different formats. On the sidebars and the upper and lower part of the sites you view there may be some pop-ups, banners or blinking animations. Since the presence of these ads is not limited to shopping sites, and instead you may see them consistently on different platforms, they may become annoying very quickly. Some real performance problems may facilitate such a potential outcome. The processes of the adware may burden your PC, and, as a result, you may face occasional freezes or crashes. At best, the operating speed may suffer. A troublesome aspect of 7-Zip Packages is that some of its ads may be corrupt and lead to suspicious sites. To keep your system clean, you should eradicate the adware.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\appdata\Roaming\0F1F1C2Y1H1P1C0I0T\7-Zip Packages\uninstaller.exe /Uninstall /NM="7-Zip Packages" /AN="0F1F1C2Y1H1P1C0I0T" /MBN="7-Zip P File name: C:\Users\<username>\appdata\Roaming\0F1F1C2Y1H1P1C0I0T\7-Zip Packages\uninstaller.exe /Uninstall /NM="7-Zip Packages" /AN="0F1F1C2Y1H1P1C0I0T" /MBN="7-Zip P
Mime Type: unknown/exe /Uninstall /NM="7-Zip Packages" /AN="0F1F1C2Y1H1P1C0I0T" /MBN="7-Zip P
Group: Malware file
C:\Users\<username>\appdata\roaming\0f1f1c2y1h1p1c0i0t\7-zip packages\uninstaller.exe File name: C:\Users\<username>\appdata\roaming\0f1f1c2y1h1p1c0i0t\7-zip packages\uninstaller.exe
MD5: 8c7fb9078a63b7e5e899e7a2dbb0db53
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Additional Information

The following URL's were detected:
www.installcore.com
Loading...