Jump to content

Recommended Posts

  • Staff
What is 24x7 Help?

The Malwarebytes research team has determined that 24x7 Help is a Tech Support Scam. These so-called "Tech Support Scammers" try to trick you into calling their phone number for various reasons, all of which turn out to be fraudulent in the end.

How do I know if my computer is affected by 24x7 Help?

You may have seen this warning during install:

warning2.png

this entry in your list of installed software and features:

warning4.png

and these icons on your desktop, in your startmenu, your taskbar and the toolbar of practically every other appplication:

icons.png

and these screens during "operations":

warning5.png

warning6.png

How did 24x7 Help get on my computer?

Tech Support Scammers use different methods for distributing themselves. This particular one was downloaded from their site.

website.png

How do I remove 24x7 Help?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application, but due to the nature of the infection this will require a few extra steps.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of 24x7 Help?
  • No, Malwarebytes removes 24x7 Help completely.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes would have protected you against the Tech Support Scam.

 

protection1.png


and we block traffic to their domain.

Technical details for experts

You may see these entries in FRST logs:
 
 (PCRx.com, LLC) C:\Program Files (x86)\24x7Help\App24x7Svc.exe
 (Crawler, LLC) C:\Program Files (x86)\24x7Help\App24x7Help.exe
 (PCRx.com, LLC) C:\Program Files (x86)\24x7Help\App24x7Hook.exe
 (PCRx.com, LLC) C:\Program Files (x86)\24x7Help\App24x7Hook64.exe
 HKLM-x32\...\Run: [24x7HELP] => C:\Program Files (x86)\24x7Help\App24x7Help.exe [1918264 2015-06-26] (Crawler, LLC)
 R2 24x7HelpSvc; C:\Program Files (x86)\24x7Help\App24x7Svc.exe [339768 2015-06-26] (PCRx.com, LLC)
 C:\Users\{username}\AppData\Roaming\24x7 Help
 C:\Users\Public\Desktop\24x7 Help.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 Help
 C:\Program Files (x86)\24x7Help

24x7 Help (HKLM-x32\...\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1) (Version: 2.2.0.15 - Crawler Group) <==== ATTENTION
() C:\Program Files (x86)\24x7Help\24x7desk.64.dll
Alterations made by the installer:
 
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\24x7Help
       Adds the file 24x7desk.64.dll"="6/26/2015 2:18 AM, 227128 bytes, A
       Adds the file 24x7desk.dll"="6/26/2015 2:18 AM, 213304 bytes, A
       Adds the file App24x7Help.exe"="6/26/2015 2:18 AM, 1918264 bytes, A
       Adds the file App24x7Hook.dll"="6/26/2015 2:18 AM, 39224 bytes, A
       Adds the file App24x7Hook.exe"="6/26/2015 2:18 AM, 40760 bytes, A
       Adds the file App24x7Hook64.dll"="6/26/2015 2:18 AM, 44344 bytes, A
       Adds the file App24x7Hook64.exe"="6/26/2015 2:18 AM, 45880 bytes, A
       Adds the file App24x7Svc.exe"="6/26/2015 2:18 AM, 339768 bytes, A
       Adds the file unins000.dat"="2/3/2017 1:24 PM, 36475 bytes, A
       Adds the file unins000.exe"="2/3/2017 1:24 PM, 1311056 bytes, A
       Adds the file unins000.msg"="2/3/2017 1:24 PM, 10582 bytes, A
    Adds the folder C:\Program Files (x86)\24x7Help\Update
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 Help
       Adds the file 24x7 Help.lnk"="2/3/2017 1:24 PM, 1040 bytes, A
       Adds the file 24x7Help.org.url"="2/3/2017 1:24 PM, 50 bytes, A
       Adds the file Uninstall 24x7 Help.lnk"="2/3/2017 1:24 PM, 961 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\24x7 Help\skin
       Adds the file 24x7_UploaderDark01.png"="5/6/2012 2:23 AM, 46003 bytes, A
       Adds the file 24x7bubble_Left.png"="7/31/2012 5:04 PM, 4326 bytes, A
       Adds the file 24x7bubble_Right.png"="7/31/2012 5:04 PM, 4336 bytes, A
       Adds the file 24x7bubble_X00.png"="7/31/2012 5:04 PM, 1150 bytes, A
       Adds the file 24x7bubble_X01.png"="7/31/2012 5:04 PM, 1158 bytes, A
       Adds the file 24x7bubble_X02.png"="7/31/2012 5:04 PM, 1150 bytes, A
       Adds the file 24x7Dark_NoTabs_Back00.png"="6/15/2012 11:48 AM, 1124 bytes, A
       Adds the file 24x7Dark_NoTabs_PhoneIcon.png"="6/18/2012 4:07 PM, 931 bytes, A
       Adds the file 24x7Dark001_SettingsActive.png"="9/3/2012 2:43 PM, 1116 bytes, A
       Adds the file 24x7Dark001_SettingsBack.png"="9/3/2012 2:28 PM, 1115 bytes, A
       Adds the file 24x7Dark001_SettingsHover.png"="9/3/2012 2:41 PM, 1118 bytes, A
       Adds the file 24x7logoNew_dark01.png"="6/5/2012 4:03 PM, 2433 bytes, A
       Adds the file 24x7NewAppGraph_CPUblue.png"="12/3/2013 11:54 AM, 1173 bytes, A
       Adds the file 24x7NewAppGraph_CPUgreen.png"="12/3/2013 11:55 AM, 1174 bytes, A
       Adds the file 24x7NewAppGraph_CPUmonitorIcon00.png"="11/21/2013 11:38 AM, 2511 bytes, A
       Adds the file 24x7NewAppGraph_CPUmonitorIcon01.png"="11/21/2013 11:37 AM, 2791 bytes, A
       Adds the file 24x7NewAppGraph_graph.png"="11/21/2013 10:28 AM, 1683 bytes, A
       Adds the file 24x7NewAppGraph_LivechatIcon00.png"="11/21/2013 11:36 AM, 1540 bytes, A
       Adds the file 24x7NewAppGraph_LivechatIcon01.png"="11/21/2013 11:37 AM, 1580 bytes, A
       Adds the file 24x7NewAppGraph_lowerstripe.png"="11/21/2013 8:48 AM, 1260 bytes, A
       Adds the file 24x7NewAppGraph_manphoto.png"="11/21/2013 8:53 AM, 28368 bytes, A
       Adds the file 24x7NewAppGraph_SupportIcon00.png"="11/21/2013 11:35 AM, 2455 bytes, A
       Adds the file 24x7NewAppGraph_SupportIcon01.png"="11/21/2013 11:35 AM, 2624 bytes, A
       Adds the file 24x7NewAppGraph_SystemCheckIcon00.png"="11/21/2013 11:40 AM, 2235 bytes, A
       Adds the file 24x7NewAppGraph_SystemCheckIcon01.png"="11/21/2013 11:40 AM, 2345 bytes, A
       Adds the file ArrowSmall.png"="9/13/2012 3:14 PM, 1045 bytes, A
       Adds the file ArrowSmallHot.png"="9/13/2012 3:14 PM, 1017 bytes, A
       Adds the file bubble.xml"="11/27/2013 1:18 PM, 1911 bytes, A
       Adds the file Hardware_Icon.png"="4/27/2012 2:39 PM, 1185 bytes, A
       Adds the file Icon_FAQ.png"="12/2/2013 11:07 AM, 1114 bytes, A
       Adds the file Icon_FAQ_nonactive.png"="12/2/2013 11:06 AM, 1117 bytes, A
       Adds the file Icon_Settings.png"="12/2/2013 11:07 AM, 1893 bytes, A
       Adds the file Icon_Settings_nonactive.png"="12/2/2013 11:07 AM, 1820 bytes, A
       Adds the file MainImg_SettingsDark01.png"="5/2/2012 1:55 PM, 18693 bytes, A
       Adds the file Navigation_HomeIcon00_Dark01.png"="5/2/2012 2:36 PM, 1215 bytes, A
       Adds the file Navigation_HomeIcon01_Dark01.png"="5/2/2012 2:37 PM, 1215 bytes, A
       Adds the file Navigation_SettingsIcon00_Dark01.png"="5/2/2012 2:34 PM, 1237 bytes, A
       Adds the file Navigation_SettingsIcon01_Dark01.png"="5/2/2012 2:35 PM, 1237 bytes, A
       Adds the file OK_IconGreen01.png"="4/27/2012 3:46 PM, 1370 bytes, A
       Adds the file PeriodicSystemCheckBubble.png"="12/18/2012 1:07 PM, 2240 bytes, A
       Adds the file Phones_Icon.png"="4/27/2012 2:40 PM, 1219 bytes, A
       Adds the file Security_Icon.png"="4/27/2012 2:39 PM, 1559 bytes, A
       Adds the file skin.xml"="1/14/2014 9:41 AM, 41662 bytes, A
       Adds the file Software_Icon.png"="4/27/2012 2:41 PM, 1773 bytes, A
       Adds the file SupportCheck01_arrow00.png"="4/27/2012 4:00 PM, 1280 bytes, A
       Adds the file SupportCheck01_arrow01.png"="4/27/2012 4:00 PM, 1232 bytes, A
       Adds the file Warning_Icon01.png"="4/27/2012 3:33 PM, 1205 bytes, A
       Adds the file Warning_IconOrange01.png"="4/27/2012 3:34 PM, 1205 bytes, A
       Adds the file Warning_IconRed01.png"="4/27/2012 3:44 PM, 1211 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file 24x7 Help.lnk"="2/3/2017 1:24 PM, 1022 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}]
       "(Default)"="REG_SZ", "24x7 Help"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\24x7Help\24x7desk.64.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\24x7HELP]
       "(Default)"="REG_SZ", ""
       "INSTALL_DATE"="REG_SZ", "42769.5590338657"
       "LAST_HIT"="REG_SZ", "42769.559807419"
       "LAST_SENDDATA"="REG_SZ", "42769.5596121065"
       "LAST_UPDATE"="REG_SZ", "42769.5590338657"
       "PHONE_NUMBER"="REG_SZ", "1-855-760-2497"
       "TABS"="REG_SZ", ""
       "UID"="REG_SZ", "576396702981981540"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
       "24x7HELP"="REG_SZ", ""C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\24x7Help\App24x7Help.exe"
       "DisplayName"="REG_SZ", "24x7 Help"
       "DisplayVersion"="REG_SZ", "2.2.0.15"
       "EstimatedSize"="REG_DWORD", 4076
       "HelpLink"="REG_SZ", "http://www.24x7Help.org/"
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\24x7Help"
       "Inno Setup: Deselected Tasks"="REG_SZ", ""
       "Inno Setup: Icon Group"="REG_SZ", "24x7 Help"
       "Inno Setup: Language"="REG_SZ", "en"
       "Inno Setup: Selected Tasks"="REG_SZ", "desktopicon"
       "Inno Setup: Setup Version"="REG_SZ", "5.3.8 (a)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20170203"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\24x7Help\"
       "MajorVersion"="REG_DWORD", 2
       "MinorVersion"="REG_DWORD", 2
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Crawler Group"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\24x7Help\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\24x7Help\unins000.exe""
       "URLInfoAbout"="REG_SZ", "http://www.24x7Help.org/"
       "URLUpdateInfo"="REG_SZ", "http://www.24x7Help.org/"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\24x7HelpSvc]
       "DisplayName"="REG_SZ", "24x7HelpService"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\24x7Help\App24x7Svc.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
       "WOW64"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\24x7HELP]
       "(Default)"="REG_SZ", ""
       "LANG_ID"="REG_SZ", "en"
       "LAST_PERIODIC_SYSTEMCHECK"="REG_SZ", "42769.5590248264"
       "REPRESENTATIVE_ICON"="REG_SZ", "7"
       "TECHSUPPORT_TEXT"="REG_SZ", "Click here for instant access to technical support from the 24x7 Help"
Malwarebytes scan log:
 
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/3/17
Scan Time: 1:35 PM
Logfile: mbam24x7Help.txt
Administrator: Yes

-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.50
Update Package Version: 1.0.1171
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 358651
Time Elapsed: 2 min, 11 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 4
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HELP.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7SVC.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.EXE, Quarantined, [12657], [175288],1.0.1171

Module: 11
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\24X7DESK.64.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HELP.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.DLL, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7SVC.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.EXE, Quarantined, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.EXE, Quarantined, [12657], [175288],1.0.1171

Registry Key: 6
PUP.Optional.24x7, HKLM\SOFTWARE\CLASSES\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, HKLM\SOFTWARE\CLASSES\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}\InprocServer32, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\24x7HelpSvc, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, HKLM\SOFTWARE\WOW6432NODE\24x7HELP, Delete-on-Reboot, [12657], [228527],1.0.1171
PUP.Optional.24x7, HKCU\SOFTWARE\24x7HELP, Delete-on-Reboot, [12657], [228528],1.0.1171

Registry Value: 1
PUP.Optional.24x7, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|24x7HELP, Delete-on-Reboot, [12657], [175288],1.0.1171

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 5
PUP.Optional.24x7, C:\Program Files (x86)\24x7Help\Update, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24x7Help, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\USERS\{username}\APPDATA\ROAMING\24X7 HELP, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\24X7 HELP, Delete-on-Reboot, [12657], [228525],1.0.1171

File: 65
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.DLL, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\24X7DESK.64.DLL, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HELP.EXE, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.DLL, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7SVC.EXE, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK64.EXE, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\PROGRAM FILES (X86)\24X7HELP\APP24X7HOOK.EXE, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\Program Files (x86)\24x7Help\24x7desk.dll, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\Program Files (x86)\24x7Help\unins000.dat, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\Program Files (x86)\24x7Help\unins000.exe, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\Program Files (x86)\24x7Help\unins000.msg, Delete-on-Reboot, [12657], [175288],1.0.1171
PUP.Optional.24x7, C:\USERS\{username}\APPDATA\ROAMING\24X7 HELP\SKIN\BUBBLE.XML, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Icon_FAQ.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7bubble_Left.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7bubble_Right.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7bubble_X00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7bubble_X01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7bubble_X02.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsActive.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsBack.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7Dark001_SettingsHover.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_Back00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7Dark_NoTabs_PhoneIcon.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7logoNew_dark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUblue.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUgreen.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_CPUmonitorIcon01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_graph.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_LivechatIcon01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_lowerstripe.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_manphoto.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SupportIcon01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7NewAppGraph_SystemCheckIcon01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\24x7_UploaderDark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\ArrowSmall.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\ArrowSmallHot.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Hardware_Icon.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Icon_FAQ_nonactive.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Icon_Settings.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Icon_Settings_nonactive.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\MainImg_SettingsDark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon00_Dark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Navigation_HomeIcon01_Dark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon00_Dark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Navigation_SettingsIcon01_Dark01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\OK_IconGreen01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\PeriodicSystemCheckBubble.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Phones_Icon.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Security_Icon.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\skin.xml, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Software_Icon.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow00.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\SupportCheck01_arrow01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Warning_Icon01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Warning_IconOrange01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\Users\{username}\AppData\Roaming\24x7 Help\skin\Warning_IconRed01.png, Delete-on-Reboot, [12657], [233700],1.0.1171
PUP.Optional.24x7, C:\USERS\PUBLIC\DESKTOP\24X7 HELP.LNK, Delete-on-Reboot, [12657], [228529],1.0.1171
PUP.Optional.24x7Help, C:\USERS\{username}\DESKTOP\24X7HELP.EXE, Delete-on-Reboot, [1218], [306994],1.0.1171
PUP.Optional.24x7, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\24X7 HELP\24X7 HELP.LNK, Delete-on-Reboot, [12657], [228525],1.0.1171
PUP.Optional.24x7, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 Help\24x7Help.org.url, Delete-on-Reboot, [12657], [228525],1.0.1171
PUP.Optional.24x7, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 Help\Uninstall 24x7 Help.lnk, Delete-on-Reboot, [12657], [228525],1.0.1171

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.