Adware.Pirrit
Posted: January 23, 2014
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Ranking: | 6,799 |
---|---|
Threat Level: | 2/10 |
Infected PCs: | 300,367 |
First Seen: | January 23, 2014 |
---|---|
Last Seen: | October 14, 2023 |
OS(es) Affected: | Windows |
Adware.Pirrit is adware that may display random pop-up advertisements or advertisements linked to the PC user's surfing habits in a web browser when a computer user is visiting various questionable websites. The Adware.Pirrit ads may indicate that a PC is corrupted by adware or a potentially unwanted program. Adware.Pirrit may propagate and install itself onto the PC through packaged free software, which computer users can download and install from the Internet. Free applications may often carry various extra software, which may be not necessary for the PC user. Therefore, when the computer user installs any free tool, he should carefully look through what he is going to install together with the desired program that has been selected. When installed, the Adware.Pirrit browser extension may highlight words on the websites that are visited by computer users substituting them with hyperlinks. These Adware.Pirrit links may be added within the text, and may come with a double underline to separate them from normal links. When the PC user rolls the mouse over the link, the pop-up advertisements of Adware.Pirrit may emerge on the desktop. If the PC user clicks on the Adware.Pirrit pop-up links, the makers of the browser plug-in may make a profit from these ad clicks.
Aliases
More aliases (34)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: f84f55d365a414e52d3d0821a60855e5
Detection count: 363
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: ee8bda935c173d53fa6b8da4585e88bc
Detection count: 326
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: 80485cc586df371dcc9c86c1a33cd170
Detection count: 176
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: 2843a01b05c92f7b2bb3bd56c0a3886a
Detection count: 119
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: e4fb25d368c4b69ebd24d67d1f899040
Detection count: 117
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: b9de551766ec5d6524c1d6c3966c8fb0
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: e12a76cca3c59c6f2f41dca30d7fc06f
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 831.48 KB (831488 bytes)
MD5: f89ed6e2bf840b0681b43adc4fbe2109
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%SystemDrive%\Program Files\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 9cb50c1dc0734aa571b562605f5a11cb
Detection count: 49
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Program Files\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: 0a68e284f7db0068d6f1c60691d8ac6a
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: e7ffa68f4a9e8a25c33b8514021fbb37
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 831.48 KB (831488 bytes)
MD5: 2f7a6667fbca9e3d6cc08c99e190d029
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 968d4f1863413bc72c88892a58aa146d
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 163e236b2de9240d630c5f406e04c2fd
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%SystemDrive%\Program Files\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: a969ee001d1e5f85d9807cf673e11781
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Program Files\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 8d0107719204715e22affdbcaa734c93
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%SystemDrive%\Program Files\WinSystem\Cleaner\WinSystemCleaner.exe
File name: WinSystemCleaner.exeSize: 1.06 MB (1062912 bytes)
MD5: dd2219ddf44d5319d3fd0a5aafbec6df
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Program Files\WinSystem\Cleaner
Group: Malware file
Last Updated: January 13, 2017
%SystemDrive%\Program Files\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: a30bea5db94bb8feb9f6b7cdfc34c99a
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Program Files\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 93170b03f6655d0c99c9a20880c6aa29
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exe
File name: WinSystemUpdater.exeSize: 240.64 KB (240640 bytes)
MD5: 09f8718526460a801f9756608cc33630
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WinSystem\Updater
Group: Malware file
Last Updated: January 13, 2017
More files
Registry Modifications
CLSID{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}Regexp file mask%PROGRAMFILES%\WinSystem\Cleaner\WinSystemCleaner.exe%PROGRAMFILES%\WinSystem\Services\WinSystemServices.exe%PROGRAMFILES%\WinSystem\Updater\WinSystemUpdater.exeHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Pirrit.PirritHelperSoftware\Microsoft\Internet Explorer\Approved Extensions\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{d40c654d-7c51-4eb3-95b2-1e23905c2a2d}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}Software\PirritSOFTWARE\Pirrit SolutionsSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{d40c654d-7c51-4eb3-95b2-1e23905c2a2d}SOFTWARE\Wow6432Node\PirritSOFTWARE\Wow6432Node\Pirrit SolutionsSYSTEM\ControlSet001\services\PirritDesktopSYSTEM\ControlSet001\services\PirritUpdaterSYSTEM\CurrentControlSet\services\PirritDesktopSYSTEM\CurrentControlSet\services\PirritUpdater
Clean also c:\windows\system32\drivers\etc\hosts file records pointing google domains to some Pirrit server.