Jump to content

Removal instructions for Dr. Wolf Internet Security

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Dr. Wolf Internet Security?

The Malwarebytes research team has determined that Dr. Wolf Internet Security is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with Dr. Wolf Internet Security?

This is how the main screen of the system optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see these warnings during install:

warning1.png

warning2.png

and these screens during "operations":

warning5.png

warning6.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your list of Scheduled Tasks:

warning3.png

How did Dr. Wolf Internet Security get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website:

website.png

How do I remove Dr. Wolf Internet Security?

Our program Malwarebytes can detect and remove this potentially unwanted application.

  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of Dr. Wolf Internet Security?

  • No, Malwarebytes removes Dr. Wolf Internet Security completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the Dr. Wolf Internet Security installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


Technical details for experts

You may see these entries in FRST logs:

  

(DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.) C:\Program Files (x86)\Dr. Wolf Internet Security\Dr.WolfInternetSecurity.exe
(DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.) C:\Program Files (x86)\Dr. Wolf Internet Security\ServiceInstaller.exe
(DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.) C:\Program Files (x86)\Dr. Wolf Internet Security\UpdaterSvc.exe
HKCU\...\Run: [Dr.WolfInternetSecurity] => C:\Program Files (x86)\Dr. Wolf Internet Security\Dr.WolfInternetSecurity.exe [4291616 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {24E07CC9-21D9-4BC7-A4F9-6FB543E894CB} - System32\Tasks\Dr.WolfInternetSecurity_Master => C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe [47136 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {8445A92B-94E5-428D-8290-760ACB2C8925} - System32\Tasks\SplashPopup_Dr.WolfInternetSecurity => C:\Program Files (x86)\Dr. Wolf Internet Security\Toaster.exe [538144 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {8A2BC969-CEFA-43EA-B5BC-988353EBF5BE} - System32\Tasks\Dr.WolfInternetSecurityScan1 => C:\Program Files (x86)\Dr. Wolf Internet Security\Dr.WolfInternetSecurity.exe [4291616 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {EBFA7C22-990F-47B7-A3E8-E7E92C23CD87} - System32\Tasks\Dr.WolfInternetSecurity-User_Account_Control => C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe [47136 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {EFE70A42-961D-4CC2-8431-7B56E7622D43} - System32\Tasks\Dr.WolfInternetSecurityRunService => C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe [47136 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
Task: {FAB9FE01-5540-4792-A12A-6D93E887AF06} - System32\Tasks\Dr.WolfInternetSecurityStopService => C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe [47136 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
R2 AvSrv Dr. Wolf Internet Security; C:\Program Files (x86)\Dr. Wolf Internet Security\ServiceInstaller.exe [36384 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
R2 AvUpdSrv Dr. Wolf Internet Security; C:\Program Files (x86)\Dr. Wolf Internet Security\UpdaterSvc.exe [36384 2019-02-14] (DIGITAL NOMAD LTD. -> DIGITAL NOMAD LTD.)
C:\av_temp
C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security
C:\Windows\System32\Tasks\SplashPopup_Dr.WolfInternetSecurity
C:\Windows\System32\Tasks\Dr.WolfInternetSecurityScan1
C:\Windows\System32\Tasks\Dr.WolfInternetSecurity-User_Account_Control
C:\Windows\System32\Tasks\Dr.WolfInternetSecurityStopService
C:\Windows\System32\Tasks\Dr.WolfInternetSecurityRunService
C:\Windows\System32\Tasks\Dr.WolfInternetSecurity_Master
C:\Users\Public\Desktop\Dr.Wolf Internet Security.lnk
C:\Users\{username}\AppData\Roaming\AvSetup
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr. Wolf Internet Security
C:\ProgramData\DIGITAL NOMAD LTD
C:\Program Files (x86)\Dr. Wolf Internet Security
C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security
(DIGITAL NOMAD LTD.) C:\Users\{username}\Desktop\Dr.WolfInternetSecuritySetup.exe

Dr. Wolf Internet Security (HKLM-x32\...\{748ED1F6-3C8D-4FF3-9069-03A62B4BF3F8}) (Version: 4.1.9 - DIGITAL NOMAD LTD)

Malwarebytes log:
  

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/16/19
Scan Time: 11:00 AM
Log File: 039af0be-77b9-11e9-af05-00ffdcc6fdfc.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.586
Update Package Version: 1.0.10622
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 236503
Threats Detected: 181
Threats Quarantined: 181
Time Elapsed: 9 min, 7 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 3
PUP.Optional.DrWolf, C:\PROGRAM FILES (X86)\DR. WOLF INTERNET SECURITY\DR.WOLFINTERNETSECURITY.EXE, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ServiceInstaller.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\UpdaterSvc.exe, Quarantined, [761], [684172],1.0.10622

Module: 10
PUP.Optional.DrWolf, C:\PROGRAM FILES (X86)\DR. WOLF INTERNET SECURITY\DR.WOLFINTERNETSECURITY.EXE, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\avlib.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libavunrar.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libavunrar_iface.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libeay32.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\msvcp120.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\msvcr120.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ServiceInstaller.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ssleay32.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\UpdaterSvc.exe, Quarantined, [761], [684172],1.0.10622

Registry Key: 23
PUP.Optional.DrWolf, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{748ED1F6-3C8D-4FF3-9069-03A62B4BF3F8}, Quarantined, [761], [684179],1.0.10622
PUP.Optional.DrWolf, HKCU\SOFTWARE\DIGITAL NOMAD LTD\Dr. Wolf Internet Security, Quarantined, [761], [684181],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dr.WolfInternetSecurityScan1, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8A2BC969-CEFA-43EA-B5BC-988353EBF5BE}, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{8A2BC969-CEFA-43EA-B5BC-988353EBF5BE}, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\WOW6432NODE\DIGITAL NOMAD LTD\Dr. Wolf Internet Security, Quarantined, [761], [684178],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dr.WolfInternetSecurity-User_Account_Control, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{EBFA7C22-990F-47B7-A3E8-E7E92C23CD87}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{EBFA7C22-990F-47B7-A3E8-E7E92C23CD87}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dr.WolfInternetSecurity_Master, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{24E07CC9-21D9-4BC7-A4F9-6FB543E894CB}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{24E07CC9-21D9-4BC7-A4F9-6FB543E894CB}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dr.WolfInternetSecurityRunService, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{EFE70A42-961D-4CC2-8431-7B56E7622D43}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{EFE70A42-961D-4CC2-8431-7B56E7622D43}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dr.WolfInternetSecurityStopService, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{FAB9FE01-5540-4792-A12A-6D93E887AF06}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{FAB9FE01-5540-4792-A12A-6D93E887AF06}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AvSrv Dr. Wolf Internet Security, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SplashPopup_Dr.WolfInternetSecurity, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8445A92B-94E5-428D-8290-760ACB2C8925}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{8445A92B-94E5-428D-8290-760ACB2C8925}, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AvUpdSrv Dr. Wolf Internet Security, Quarantined, [761], [684172],1.0.10622

Registry Value: 2
PUP.Optional.DrWolf, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{748ED1F6-3C8D-4FF3-9069-03A62B4BF3F8}|DISPLAYNAME, Quarantined, [761], [684179],1.0.10622
PUP.Optional.DrWolf, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DR.WOLFINTERNETSECURITY, Quarantined, [761], [684184],1.0.10622

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 26
PUP.Optional.DrWolf, C:\AV_TEMP\DR.WOLFINTERNETSECURITY, Quarantined, [761], [684171],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Cyrl-RS, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Latn-RS, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\terms, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\da, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\de, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\es, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\fr, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ja, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\nl, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\pt, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ru, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\PROGRAM FILES (X86)\DR. WOLF INTERNET SECURITY, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\PROGRAMDATA\DIGITAL NOMAD LTD\DR. WOLF INTERNET SECURITY, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\DR. WOLF INTERNET SECURITY, Quarantined, [761], [684174],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\prerequisites, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security\DIGITAL NOMAD LTD\Dr. Wolf Internet Security 4.1.9, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security\DIGITAL NOMAD LTD\Dr. Wolf Internet Security, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security\DIGITAL NOMAD LTD, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\USERS\{username}\APPDATA\ROAMING\AvInstall Dr. Wolf Internet Security, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\metadata, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\History\metadata, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\History, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\USERS\{username}\APPDATA\ROAMING\Dr. Wolf Internet Security, Quarantined, [761], [684177],1.0.10622

File: 117
PUP.Optional.DrWolf, C:\PROGRAM FILES (X86)\DR. WOLF INTERNET SECURITY\DR.WOLFINTERNETSECURITY.EXE, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\Dr.WolfInternetSecurityScan1, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\Dr.Wolf Internet Security.lnk, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\USERS\PUBLIC\Desktop\Dr.Wolf Internet Security.lnk, Quarantined, [761], [684184],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\da\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\da\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\da\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\de\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\de\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\de\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\es\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\es\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\es\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\fr\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\fr\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\fr\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ja\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ja\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ja\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\nl\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\nl\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\nl\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\pt\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\pt\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\pt\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ru\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ru\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ru\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Cyrl-RS\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Cyrl-RS\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Cyrl-RS\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Latn-RS\Dr.WolfInternetSecurity.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Latn-RS\SecDel.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\sr-Latn-RS\Toaster.resources.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\terms\terms.docx, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Newtonsoft.Json.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\avlib.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\AvServiceEngine.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Bo.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ComponentFactory.Krypton.Toolkit.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Dr.WolfInternetSecurity.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Helper.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ICSharpCode.SharpZipLib.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\InstCtrl.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\LabelSetup.ini, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libavunrar.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libavunrar_iface.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\libeay32.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Microsoft.Win32.TaskScheduler.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\msvcp120.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\msvcr120.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Push.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Push.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\README.txt, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Runner.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\SecDel.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\SecDel.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\SecDelShell32.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\SecDelShell64.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\SecurityProductInformation.ini, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ServiceInstaller.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Setup.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\ssleay32.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\TaskTool.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\TaskTool.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Toaster.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Toaster.exe.config, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\Updater.dll, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\updater.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\updater.ini, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\Program Files (x86)\Dr. Wolf Internet Security\UpdaterSvc.exe, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\Dr.WolfInternetSecurity-User_Account_Control, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\Dr.WolfInternetSecurity_Master, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\Dr.WolfInternetSecurityRunService, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\Dr.WolfInternetSecurityStopService, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\WINDOWS\SYSTEM32\TASKS\SplashPopup_Dr.WolfInternetSecurity, Quarantined, [761], [684172],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\1.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\2.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\3.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\4.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\5.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\6.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\59679-61329-327-38\8.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\1.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\2.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\3.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\4.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\5.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\6.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\DIGITAL NOMAD LTD\Dr. Wolf Internet Security\8.adb, Quarantined, [761], [684173],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr. Wolf Internet Security\Dr.Wolf Internet Security.lnk, Quarantined, [761], [684174],1.0.10622
PUP.Optional.DrWolf, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr. Wolf Internet Security\Uninstall Dr. Wolf Internet Security.lnk, Quarantined, [761], [684174],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\AvInstall Dr. Wolf Internet Security\DIGITAL NOMAD LTD\Dr. Wolf Internet Security 4.1.9\installlog.txt, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\History\metadata\hist.metadata, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\History\{da4b3907-1a75-4c9b-a6d0-b37f8041b0a7}, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\metadata\items.bin, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\198d4b56-8055-4977-86d5-14d369b6a228, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\21903085-bc76-4cdb-a907-089fb860ff9e, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\9589e256-4cd8-4607-902c-2fbd65bfb5a8, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\Quarantine\ad13879e-1958-48b2-b127-4e6bd9b51a86, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\avproxylog.txt, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\avservicelog.txt, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\avstate.bin, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\AvSvc.settings, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\cleaning.list, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\cnfg, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\lang, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\oconfig, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\restore_status.bin, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\scanstats.bin, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\updater.log, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\UpdateService.log, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\usagelog.log, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\wndstate, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\Users\{username}\AppData\Roaming\Dr. Wolf Internet Security\wndstate.tmp, Quarantined, [761], [684177],1.0.10622
PUP.Optional.DrWolf, C:\USERS\{username}\DESKTOP\DR.WOLFINTERNETSECURITYSETUP.EXE, Quarantined, [761], [684185],1.0.10622

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention

Save yourself the hassle and get protected. 

Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.