GUFILE.COM SERVES MALWARE:
PUA/Adware according to Sophos:
*****
USER EXPERIENCE:
Found link to gufile.com on google search for winpatrol.
gufile.com offered file:
win patrol.exe
Downloaded "win patrol.exe" file and submitted to *****
***** flagged file as malware 15/55 (15 of 55 antivirus scanners).
***** "File Detail":
Authenticode signature block
Publisher: Smart Secure Software S.l.
Signature verification: Signed file, verified signature
Signers:
[+] Smart Secure Software S.l.
[+] VeriSign Class 3 Code Signing 2010 CA
[+] VeriSign
After accessing site for Avast download, installation stalled, no uninstall file in installation folder and did not display in programs list, Computer rebooted to BSOD. Presently trying to access OS to remove infection. Trying to get access to scan with diagnostic tools to see what was installed. May have to take more drastic measures.
I had two unknown programs, file_to_run.exe and file_to_run2.exe on my system. file_to_run2.exe was identified by HintmanPro 3.7.8, as running in the background, without a GUI. The file was tagged as potential file, in that it did not have a version name, author name.
Removal of the errant program process was fairly easy, once it was identified by HitmanPro, via opening up the task manager, stopping the process, and manually removing the program.
I was able to track the originator process as something from originating from anyplace-control.gufile.com
Checking the site out, it looks the site may offer legitimate utilities and applications, but tries to install a back door on your computer.
Analisamos mais de 2 milhões de sites e contamos. O WOT é uma extensão leve projetada para ajudá-lo a navegar com rapidez e segurança. Ele limpará seu navegador, o acelerará e protegerá suas informações privadas.