Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for InstaQuick

- - - - -
Started by Metallica , Mar 22 2021 06:09 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 22 March 2021 - 06:09 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is InstaQuick?

The Malwarebytes research team has determined that InstaQuick is adware. These adware applications display advertisements not originating from the sites you are browsing.

How do I know if my computer is affected by InstaQuick?

You may see these warnings during install:

warning0.png

warning1.png

warning2.png

and this entry in your list of installed Programs and Features:

warning4.png

How did InstaQuick get on my computer?

Adware applications use different methods for distributing themselves. This particular one was downloaded from their website.

website.png

How do I remove InstaQuick?

Our program Malwarebytes can detect and remove this adware program.
  • Please download Malwarebytes for Windows to your desktop.
  • Double-click MBSetup.exe and follow the prompts to install the program.
  • When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
  • Click on the Get started button.
  • Click Scan to start a Threat Scan.
  • When the scan is finished click Quarantine to remove the found threats.
  • Reboot the system if prompted to complete the removal process.
Is there anything else I need to do to get rid of InstaQuick?
  • No, Malwarebytes removes InstaQuick completely.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this adware.

As you can see below the full version of Malwarebytes would have protected you against the InstaQuick adware. It would have blocked the installer before it became too late.

protection2.png


and we would have blocked access to their domain.

protection1.png


Technical details for experts

Possible signs in FRST logs:
(InstaQuick -> InstaQuick) [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\InstaQuick.exe <6>
HKLM-x32\...\Run: [InstaQuick] => C:\Users\{username}\AppData\Roaming\InstaQuick\InstaQuick.exe [5304992 2021-02-04] (InstaQuick -> InstaQuick) [File not signed]
C:\Users\{username}\AppData\Local\InstaQuick
C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InstaQuick
C:\Users\{username}\AppData\Roaming\InstaQuick
(InstaQuick) C:\Users\{username}\Desktop\InstaQuick.17.2102.1acwk.exe

InstaQuick - Instagram for Desktop (HKLM-x32\...\InstaQuick) (Version: 17.2102.1acwk - InstaQuick)
() [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\swiftshader\libegl.dll
() [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\swiftshader\libglesv2.dll
(InstaQuick -> Microsoft Corporation) [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\D3DCompiler_47.dll
(InstaQuick -> The NW.js Community) [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\node.dll
(InstaQuick -> The NW.js Community) [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\nw.dll
(InstaQuick -> The NW.js Community) [File not signed] C:\Users\{username}\AppData\Roaming\InstaQuick\nw_elf.dll
Significant changes made by the installer:
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data
       Adds the file CrashpadMetrics-active.pma"="3/22/2021 8:40 AM, 1048576 bytes, A
       Adds the file First Run"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Local State"="3/22/2021 8:41 AM, 3427 bytes, A
       Adds the file lockfile"="3/22/2021 8:40 AM, 0 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\BrowserMetrics
       Adds the file BrowserMetrics-605849D8-1384.pma"="3/22/2021 8:40 AM, 4194304 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Crashpad
       Adds the file metadata"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file settings.dat"="3/22/2021 8:40 AM, 40 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Crashpad\reports
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Cookies"="3/22/2021 8:41 AM, 20480 bytes, A
       Adds the file Cookies-journal"="3/22/2021 8:41 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file Favicons"="3/22/2021 8:40 AM, 20480 bytes, A
       Adds the file Favicons-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Google Profile.ico"="3/22/2021 8:40 AM, 151668 bytes, A
       Adds the file History"="3/22/2021 8:40 AM, 118784 bytes, A
       Adds the file History-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Login Data"="3/22/2021 8:40 AM, 18432 bytes, A
       Adds the file Login Data-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000002"="3/22/2021 8:40 AM, 50 bytes, A
       Adds the file Network Action Predictor"="3/22/2021 8:40 AM, 36864 bytes, A
       Adds the file Network Action Predictor-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Network Persistent State"="3/22/2021 8:41 AM, 499 bytes, A
       Adds the file page_load_capping_opt_out.db"="3/22/2021 8:40 AM, 16384 bytes, A
       Adds the file page_load_capping_opt_out.db-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Preferences"="3/22/2021 8:41 AM, 2430 bytes, A
       Adds the file previews_opt_out.db"="3/22/2021 8:40 AM, 16384 bytes, A
       Adds the file previews_opt_out.db-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file QuotaManager"="3/22/2021 8:41 AM, 53248 bytes, A
       Adds the file QuotaManager-journal"="3/22/2021 8:41 AM, 0 bytes, A
       Adds the file README"="3/22/2021 8:40 AM, 162 bytes, A
       Adds the file Secure Preferences"="3/22/2021 8:40 AM, 4724 bytes, A
       Adds the file Top Sites"="3/22/2021 8:40 AM, 20480 bytes, A
       Adds the file Top Sites-journal"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file TransportSecurity"="3/22/2021 8:41 AM, 1592 bytes, A
       Adds the file Visited Links"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file Web Data"="3/22/2021 8:40 AM, 65536 bytes, A
       Adds the file Web Data-journal"="3/22/2021 8:40 AM, 0 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\blob_storage
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Cache
       Adds the file data_0"="3/22/2021 8:40 AM, 45056 bytes, A
       Adds the file data_1"="3/22/2021 8:40 AM, 270336 bytes, A
       Adds the file data_2"="3/22/2021 8:40 AM, 1056768 bytes, A
       Adds the file data_3"="3/22/2021 8:40 AM, 4202496 bytes, A
       Adds the file f_000001"="3/22/2021 8:40 AM, 33478 bytes, A
       Adds the file f_000011"="3/22/2021 8:40 AM, 259232 bytes, A
       Adds the file index"="3/22/2021 8:40 AM, 262512 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\data_reduction_proxy_leveldb
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000002"="3/22/2021 8:40 AM, 50 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\databases
       Adds the file Databases.db"="3/22/2021 8:40 AM, 28672 bytes, A
       Adds the file Databases.db-journal"="3/22/2021 8:40 AM, 0 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\databases\chrome-extension_mhbghaopeodicgkmjaffmkmdfddmncnh_0
       Adds the file 1"="3/22/2021 8:40 AM, 16384 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Extension Rules
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Extension State
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\GPUCache
       Adds the file data_0"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file data_1"="3/22/2021 8:40 AM, 270336 bytes, A
       Adds the file data_2"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file data_3"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file index"="3/22/2021 8:40 AM, 262512 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\IndexedDB\https_www.instagram.com_0.indexeddb.leveldb
       Adds the file 000003.log"="3/22/2021 8:40 AM, 318 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 23 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Local Storage\leveldb
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Session Storage
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Site Characteristics Database
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Sync Data\LevelDB
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Thumbnails
       Adds the file 000003.log"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file CURRENT"="3/22/2021 8:40 AM, 16 bytes, A
       Adds the file LOCK"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file LOG"="3/22/2021 8:40 AM, 0 bytes, A
       Adds the file MANIFEST-000001"="3/22/2021 8:40 AM, 41 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Default\Web Applications\_nwjs_mhbghaopeodicgkmjaffmkmdfddmncnh
       Adds the file InstaQuick.ico"="3/22/2021 8:40 AM, 172894 bytes, A
       Adds the file InstaQuick.ico.md5"="3/22/2021 8:40 AM, 16 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\ShaderCache\GPUCache
       Adds the file data_0"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file data_1"="3/22/2021 8:40 AM, 270336 bytes, A
       Adds the file data_2"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file data_3"="3/22/2021 8:40 AM, 8192 bytes, A
       Adds the file index"="3/22/2021 8:40 AM, 262512 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\InstaQuick\User Data\Stability
       Adds the file 4996-1616398806548303.pma"="3/22/2021 8:40 AM, 1048576 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\InstaQuick
       Adds the file d3dcompiler_47.dll"="2/4/2021 11:49 AM, 3710752 bytes, A
       Adds the file ffmpeg.dll"="2/4/2021 11:50 AM, 1488160 bytes, A
       Adds the file icudtl.dat"="1/19/2021 11:29 AM, 10245952 bytes, A
       Adds the file InstaQuick.exe"="2/4/2021 11:49 AM, 5304992 bytes, A
       Adds the file libEGL.dll"="2/4/2021 11:50 AM, 96544 bytes, A
       Adds the file libGLESv2.dll"="2/4/2021 11:50 AM, 4434720 bytes, A
       Adds the file natives_blob.bin"="1/19/2021 11:29 AM, 92247 bytes, A
       Adds the file node.dll"="2/4/2021 11:50 AM, 12371744 bytes, A
       Adds the file notification_helper.exe"="2/4/2021 11:49 AM, 493344 bytes, A
       Adds the file nw.dll"="2/4/2021 11:50 AM, 94750496 bytes, A
       Adds the file nw_100_percent.pak"="1/19/2021 11:29 AM, 1021430 bytes, A
       Adds the file nw_200_percent.pak"="1/19/2021 11:29 AM, 1341563 bytes, A
       Adds the file nw_elf.dll"="2/4/2021 11:50 AM, 493856 bytes, A
       Adds the file resources.pak"="1/19/2021 11:29 AM, 5550400 bytes, A
       Adds the file snapshot_blob.bin"="1/19/2021 11:29 AM, 1283220 bytes, A
       Adds the file storage.json"="3/22/2021 8:39 AM, 80 bytes, A
       Adds the file Uninstall.exe"="3/22/2021 8:39 AM, 472524 bytes, A
       Adds the file v8_context_snapshot.bin"="1/19/2021 11:29 AM, 1607648 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\InstaQuick\locales
    Adds the folder C:\Users\{username}\AppData\Roaming\InstaQuick\swiftshader
       Adds the file libEGL.dll"="1/19/2021 11:29 AM, 122368 bytes, A
       Adds the file libGLESv2.dll"="1/19/2021 11:29 AM, 2256896 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InstaQuick
       Adds the file InstaQuick.lnk"="3/22/2021 8:39 AM, 1873 bytes, A
       Adds the file Uninstall.lnk"="3/22/2021 8:39 AM, 1866 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
       "InstaQuick"="REG_SZ", "C:\Users\{username}\AppData\Roaming\InstaQuick\InstaQuick.exe --su"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstaQuick]
       "DisplayIcon"="REG_SZ", ""C:\Users\{username}\AppData\Roaming\InstaQuick\Uninstall.exe""
       "DisplayName"="REG_SZ", "InstaQuick - Instagram for Desktop"
       "DisplayVersion"="REG_SZ", "17.2102.1acwk"
       "EstimatedSize"="REG_DWORD", 179797
       "Publisher"="REG_SZ", "InstaQuick"
       "UninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Roaming\InstaQuick\Uninstall.exe""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\InstaQuick]
       "uid"="REG_SZ", "BD2E4143-63F5-4568-BE87-73C4F20BC096"
    [HKEY_CURRENT_USER\Software\nwjs]
       "FirstNotDefault"="REG_QWORD, .../
       "metricsid"="REG_SZ", "b94fb534-649f-41ab-b791-f6472c7aac8a"
       "metricsid_enableddate"="REG_SZ", "1616398809"
       "metricsid_installdate"="REG_SZ", "1616398808"
    [HKEY_CURRENT_USER\Software\nwjs\BLBeacon]
       "failed_count"="REG_DWORD", 0
       "state"="REG_DWORD", 1
       "version"="REG_SZ", "71.0.3578.98"
    [HKEY_CURRENT_USER\Software\nwjs\PreferenceMACs\Default]
       "browser.show_home_button"="REG_SZ", "D4AE6B748030C65B37203BF504F4BAB6B7189D30A8068E933D27D272B9825121"
       "default_search_provider_data.template_url_data"="REG_SZ", "577902E48778C2084EA38A666D6F118AC7A10E564E6D2C614157FE4553B1CDF1"
       "google.services.account_id"="REG_SZ", "6FD09700B4A149D948B55F3C0AB72673D5C367B9E751454C6202DC1D3DFA6802"
       "google.services.last_account_id"="REG_SZ", "6AF24852E27EDB5DFA7E36D3AC87D5EBDB6B1A2ACB4AF4E651C22798B2394A67"
       "google.services.last_username"="REG_SZ", "BF235C9F83153EC2D71D60021ED0AA56728D62A5264E811DCEBFF589EA33BE81"
       "google.services.username"="REG_SZ", "A70B5C736433139A005D3E49D73AB8574672434936A4FA21F55757B0E4882F3C"
       "homepage"="REG_SZ", "6BEC350ECF8125372A826D71D2DB258A636A08AF0C652D9E774072EFB372A346"
       "homepage_is_newtabpage"="REG_SZ", "71E415DF84698054516E68295FA7E443543243920785F715BF71F2641FD03239"
       "media.storage_id_salt"="REG_SZ", "7CB55C624C43F9AF857E83B87E0E531816C28E8B247C5FBF4E6515960AD67692"
       "pinned_tabs"="REG_SZ", "988BA7AF49CBEED46002524FB1DC5972CCCEE6DF03B77A755B3E322D74E33697"
       "prefs.preference_reset_time"="REG_SZ", "3BB6D1CF1E2266580804D7B343EB3D436157898CC157308C74F704B5D85BFEB3"
       "safebrowsing.incidents_sent"="REG_SZ", "749D4F2A5067553DBA6E47E7C37A086D83F1623F54420951FD2646E8E8E27C80"
       "search_provider_overrides"="REG_SZ", "D868509C983E4D4868450576F8A3D3E7E05C68568CF8D7DF91589972AEF37E93"
       "session.restore_on_startup"="REG_SZ", "43A753CE09B9BF0DC9660872B81B90FD2A0D9B708609FE84D2B964F6828053EA"
       "session.startup_urls"="REG_SZ", "5622145A2429114A31AC87D39A6757FFC8802A76D4158BC08DC268C76568D401"
       "settings_reset_prompt.last_triggered_for_default_search"="REG_SZ", "1B7549747E6FD7C37E6D498A93AB6980CF3A2002D339CFD5D09C6997B37FA7E3"
       "settings_reset_prompt.last_triggered_for_homepage"="REG_SZ", "3937DC165E7432A408A1AEAC832766F0C8D5A7C7ADB070399FE60CB887003332"
       "settings_reset_prompt.last_triggered_for_startup_urls"="REG_SZ", "9CA5289F21296A288C9A358716171FDF673C04D4A30D443BB97A408B83B08135"
       "settings_reset_prompt.prompt_wave"="REG_SZ", "8E49A1A3D2AA3456F777518FDCC2BA30722E089ECFD7B7265C2EE8BB90D3EF15"
       "software_reporter.prompt_seed"="REG_SZ", "CC15095EDB89D7530910B1296F1D27AF2AC038D4F6B627A0668381488E697535"
       "software_reporter.prompt_version"="REG_SZ", "04FFA133961EA613587BC3C40EBACF2A6F42BCECBCEAE1CE4312993E3A3E752E"
    [HKEY_CURRENT_USER\Software\nwjs\StabilityMetrics]
       "user_experience_metrics.stability.exited_cleanly"="REG_DWORD", 0
Malwarebytes log:
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 3/22/21
Scan Time: 12:22 PM
Log File: db431486-8b00-11eb-a0fa-080027235d76.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1217
Update Package Version: 1.0.38517
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}-PC\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 233833
Threats Detected: 19
Threats Quarantined: 18
Time Elapsed: 3 min, 54 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 8
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\D3DCOMPILER_47.DLL, Quarantined, 3596, 923360, , , , , 6F2978198B7CC08E34769B2660B2C6DF, 3C511D1ED4C5F5D710BE5CACCD7BF596F97F848EBC53F490223A60ECD5542B74
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\SWIFTSHADER\LIBGLESV2.DLL, Quarantined, 3596, 923360, , , , , DC0A1C2539D26524AADF8AA8937CEF0B, 6C3F9D4062A383983716C6956DEE35C6832E6C7D5DE82D60220D3BF6BEB74A56
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\SWIFTSHADER\LIBEGL.DLL, Quarantined, 3596, 923360, , , , , 1C85AE3C2CD01A0FA35306E4A79AB09D, E73AEE1DF92CC5ED40F38097310F98C58C41E729C05FE554877B42B620C7D658
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, , , , , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, , , , , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, , , , , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, , , , , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, , , , , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F

Registry Key: 2
PUP.Optional.InstaQuick, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\InstaQuick, Quarantined, 3596, 923363, 1.0.38517, , ame, , , 
PUP.Optional.InstaQuick, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InstaQuick, Quarantined, 3596, 923362, 1.0.38517, , ame, , , 

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\LOCAL\INSTAQUICK, Removal Failed, 3596, 923359, 1.0.38517, , ame, , , 
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK, Quarantined, 3596, 923360, 1.0.38517, , ame, , , 
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\INSTAQUICK, Quarantined, 3596, 923361, 1.0.38517, , ame, , , 

File: 6
PUP.Optional.InstaQuick, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InstaQuick\InstaQuick.lnk, Quarantined, 3596, 923361, , , , , F45D8F715F6A1157FD446B77D6CDDFE5, A0AAEBC3557D85EA3C6061A367111531FE7B07E7838A384C356CB2CDF809C5E6
PUP.Optional.InstaQuick, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InstaQuick\Uninstall.lnk, Quarantined, 3596, 923361, , , , , 567EE12CA4B7BA400771D090903FF71D, E5CD824956130AC3CD32FFA717B39B8664CBDEF09171F0E7A08D80D13232AD90
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\D3DCOMPILER_47.DLL, Quarantined, 3596, 923360, 1.0.38517, , ame, , 6F2978198B7CC08E34769B2660B2C6DF, 3C511D1ED4C5F5D710BE5CACCD7BF596F97F848EBC53F490223A60ECD5542B74
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\SWIFTSHADER\LIBGLESV2.DLL, Quarantined, 3596, 923360, 1.0.38517, , ame, , DC0A1C2539D26524AADF8AA8937CEF0B, 6C3F9D4062A383983716C6956DEE35C6832E6C7D5DE82D60220D3BF6BEB74A56
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\SWIFTSHADER\LIBEGL.DLL, Quarantined, 3596, 923360, 1.0.38517, , ame, , 1C85AE3C2CD01A0FA35306E4A79AB09D, E73AEE1DF92CC5ED40F38097310F98C58C41E729C05FE554877B42B620C7D658
PUP.Optional.InstaQuick, C:\USERS\{username}\APPDATA\ROAMING\INSTAQUICK\NW_ELF.DLL, Quarantined, 3596, 923360, 1.0.38517, , ame, , B179DD1DB5D623A4B44CB29A733C5BAC, A4F4B8F64DC649AE49C1771AA8357A1D139D082F1C39063ECBE2A3010E504E3F

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.