![]() ![]() Interesting, I had the same for mine except the ping wasn't encrypted- only base64 encoded. HKU\*\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WaveBrowserĬ:\WINDOWS\SYSTEM32\TASKS\Wavesor Software_*\WaveBrowser-StartAtLogin HKU\*\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\wavebrowser.exe ![]() HKU\*\SOFTWARE\CLIENTS\STARTMENUINTERNET\WaveBrowser.* HKU\*\WavesorSWUpdater.Update3WebUser.1.0 HKU\*\WavesorSWUpdater.Update3COMClassUser.1.0 HKU\*\WavesorSWUpdater.Update3COMClassUser HKU\*\WavesorSWUpdater.PolicyStatusUser.1.0 HKU\*\WavesorSWUpdater.OnDemandCOMClassUser.1.0 HKU\*\WavesorSWUpdater.OnDemandCOMClassUser HKU\*\WavesorSWUpdater.CredentialDialogUser.1.0 HKU\*\WavesorSWUpdater.CredentialDialogUser HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Wavesor Software_*\WaveBrowser-StartAtLogin Apologies for the jacked up regex:Īlso seeing /swupdater.*\.updatestar\.com/ ![]() It also creates scheduled tasks, autostart reg entries, new CLSID's under the user's SID, lnk files, and different permutations of wavebrowser.exe. Test before adding anything across your env.ĭefinitely blocking domains/killing processes. Live chat available 6-6PT M-F via the Support Portalĭon't trust my regex.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |