Trojan.Siggen29.34511

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\taphss] 'ImagePath' = 'system32\DRIVERS\taphss.sys'

Creates the following services

'taphss' system32\DRIVERS\taphss.sys
'tunnel' system32\DRIVERS\tunnel.sys

Modifies file system

Creates the following files

%TEMP%\nsa958b.tmp\userinfo.dll
%ProgramFiles(x86)%\hotspot shield\htdocs\first_prompt.html
%ProgramFiles(x86)%\hotspot shield\htdocs\green_btn_point.png
%ProgramFiles(x86)%\hotspot shield\htdocs\green_btn_point_big.png
%ProgramFiles(x86)%\hotspot shield\htdocs\green_shield_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\green_shield_tool.png
%ProgramFiles(x86)%\hotspot shield\htdocs\error.html
%ProgramFiles(x86)%\hotspot shield\htdocs\faq.html
%ProgramFiles(x86)%\hotspot shield\htdocs\green_tape_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\lang.js
%ProgramFiles(x86)%\hotspot shield\htdocs\logo.png
%ProgramFiles(x86)%\hotspot shield\htdocs\logo2.png
%ProgramFiles(x86)%\hotspot shield\htdocs\mail.html
%ProgramFiles(x86)%\hotspot shield\htdocs\main_bg.png
%ProgramFiles(x86)%\hotspot shield\htdocs\greenico.png
%ProgramFiles(x86)%\hotspot shield\htdocs\hover.html
%ProgramFiles(x86)%\hotspot shield\htdocs\elite_text.png
%ProgramFiles(x86)%\hotspot shield\htdocs\elite_sign.png
%ProgramFiles(x86)%\hotspot shield\htdocs\elite_box.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting16.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting20.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting20.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting24.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting24.png
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting16.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected12.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected16.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected16.png
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected20.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected20.png
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected24.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected24.png
%ProgramFiles(x86)%\hotspot shield\htdocs\disconnected12.png
%ProgramFiles(x86)%\hotspot shield\htdocs\menu.html
%ProgramFiles(x86)%\hotspot shield\htdocs\oac.html
%ALLUSERSPROFILE%\hotspot shield\config\firstrun_update
%ProgramFiles(x86)%\hotspot shield\htdocs\preuninstall.html
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-ara.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-bur.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-chi.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-eng.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-fre.dll
%ProgramFiles(x86)%\hotspot shield\htdocs\yelred_shield_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\yelred_tape_new.png
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-ger.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-rus.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-spa.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-tur.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-vie.dll
%TEMP%\nsa958b.tmp\accesscontrol.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-jpn.dll
%ProgramFiles(x86)%\hotspot shield\bin\lang\gui-per.dll
%ProgramFiles(x86)%\hotspot shield\htdocs\yellow_tape_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\yellow_shield_tool.png
%ProgramFiles(x86)%\hotspot shield\htdocs\yellow_shield_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\prompt.html
%ProgramFiles(x86)%\hotspot shield\htdocs\radio_off.png
%ProgramFiles(x86)%\hotspot shield\htdocs\radio_on.png
%ProgramFiles(x86)%\hotspot shield\htdocs\red_btn_point.png
%ProgramFiles(x86)%\hotspot shield\htdocs\red_shield_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\red_shield_tool.png
%ProgramFiles(x86)%\hotspot shield\htdocs\progress.gif
%ProgramFiles(x86)%\hotspot shield\htdocs\red_tape_new.png
%ProgramFiles(x86)%\hotspot shield\htdocs\settings_tape.png
%ProgramFiles(x86)%\hotspot shield\htdocs\t.png
%ProgramFiles(x86)%\hotspot shield\htdocs\tooltip.html
%ProgramFiles(x86)%\hotspot shield\htdocs\tooltip_bg.png
%ProgramFiles(x86)%\hotspot shield\htdocs\up_hss_logo.png
%ProgramFiles(x86)%\hotspot shield\htdocs\updatestatus.html
%ProgramFiles(x86)%\hotspot shield\htdocs\redico.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting12.png
%ProgramFiles(x86)%\hotspot shield\htdocs\message.html
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting12.bmp
%ProgramFiles(x86)%\hotspot shield\driver\taphss.sys
%ProgramFiles(x86)%\hotspot shield\bin\openvpn.exe
%TEMP%\nsa958b.tmp\1\wddll.dll
%TEMP%\nsa958b.tmp\system.dll
%ProgramFiles(x86)%\hotspot shield\hsswd\default\default.cfg
%ProgramFiles(x86)%\hotspot shield\bin\af_proxy_cmd.exe
%TEMP%\nsa958b.tmp\nsprocess.dll
%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe
%ProgramFiles(x86)%\hotspot shield\bin\af_proxy.dll
%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe
%TEMP%\nsa958b.tmp\1\openvpntray.exe
%TEMP%\nsa958b.tmp\1\curl.exe
%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe
%ProgramFiles(x86)%\hotspot shield\driver\oemwin2k.inf
%ProgramFiles(x86)%\hotspot shield\bin\zlib1.dll
%ProgramFiles(x86)%\hotspot shield\bin\vistahlp.dll
%ProgramFiles(x86)%\hotspot shield\bin\wddll.dll
%TEMP%\nsa958b.tmp\af.cer
%TEMP%\nsa958b.tmp\zlib1.dll
%TEMP%\hssinstaller.exe
%TEMP%\nsa958b.tmp\execdos.dll
%TEMP%\hssinst64.dll
%TEMP%\hssinstaller64.exe
%TEMP%\hssinstaller.txt
%TEMP%\nsa958b.tmp\updatestatus.exe
%TEMP%\nsa958b.tmp\nsisos.dll
%TEMP%\nsa958b.tmp\updatestatus.html
%TEMP%\nsa958b.tmp\progress.gif
%TEMP%\nsa958b.tmp\main_bg.png
%TEMP%\nsa958b.tmp\settings_tape.png
%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe
%TEMP%\nsa958b.tmp\af_proxy_cmd.exe
%TEMP%\nsa958b.tmp\af_proxy.dll
%TEMP%\nsa958b.tmp\logo2.png
%ProgramFiles(x86)%\hotspot shield\driver\taphss.cat
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf0e3.tmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connected24.png
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf24b.tmp
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_share.png
%ProgramFiles(x86)%\hotspot shield\htdocs\chbox_off.png
%ProgramFiles(x86)%\hotspot shield\htdocs\chbox_on.png
%ProgramFiles(x86)%\hotspot shield\htdocs\common.css
%ProgramFiles(x86)%\hotspot shield\htdocs\common.js
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_red_bg.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_settings.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connected.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connected16.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connected16.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connected20.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connected20.png
%ProgramFiles(x86)%\hotspot shield\htdocs\connected24.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connected12.bmp
%ProgramFiles(x86)%\hotspot shield\htdocs\connected12.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_info.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_help.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_green_big_bg.png
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
%WINDIR%\temp\udd531e.tmp
%ProgramFiles(x86)%\hotspot shield\bin\libeay32.dll
%ProgramFiles(x86)%\hotspot shield\bin\libssl32.dll
%ProgramFiles(x86)%\hotspot shield\bin\libcurl.dll
%ProgramFiles(x86)%\hotspot shield\bin\libidn-11.dll
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf317.tmp
%ProgramFiles(x86)%\hotspot shield\bin\libpkcs11-helper-1.dll
%ProgramFiles(x86)%\hotspot shield\bin\hssfixme.exe
%ProgramFiles(x86)%\hotspot shield\bin\curl-ca-bundle.crt
%ProgramFiles(x86)%\hotspot shield\htdocs\blank.html
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_blue_bg.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_close.png
%ProgramFiles(x86)%\hotspot shield\htdocs\btn_green_bg.png
%ProgramFiles(x86)%\hotspot shield\bin\fbw.exe
%ProgramFiles(x86)%\hotspot shield\htdocs\connecting.png
%ALLUSERSPROFILE%\hotspot shield\config\startup.cfg

Sets the 'hidden' attribute to the following files

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat

Deletes the following files

%TEMP%\hssinstaller.exe
%TEMP%\nsa958b.tmp\updatestatus.html
%TEMP%\nsa958b.tmp\updatestatus.exe
%TEMP%\nsa958b.tmp\system.dll
%TEMP%\nsa958b.tmp\settings_tape.png
%TEMP%\nsa958b.tmp\progress.gif
%TEMP%\nsa958b.tmp\nsprocess.dll
%TEMP%\nsa958b.tmp\nsisos.dll
%TEMP%\nsa958b.tmp\main_bg.png
%TEMP%\nsa958b.tmp\logo2.png
%TEMP%\nsa958b.tmp\execdos.dll
%TEMP%\nsa958b.tmp\af_proxy_cmd.exe
%TEMP%\nsa958b.tmp\af_proxy.dll
%TEMP%\nsa958b.tmp\af.cer
%TEMP%\nsa958b.tmp\accesscontrol.dll
%TEMP%\nsa958b.tmp\1\wddll.dll
%TEMP%\nsa958b.tmp\1\openvpntray.exe
%TEMP%\nsa958b.tmp\1\curl.exe
%WINDIR%\temp\udd531e.tmp
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\taphss.sys
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\taphss.cat
%TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\oemwin2k.inf
%TEMP%\hssinst.dll
%TEMP%\hssinstaller64.exe
%TEMP%\nsa958b.tmp\userinfo.dll
%TEMP%\nsa958b.tmp\zlib1.dll

Moves the following files

from %TEMP%\hssinst64.dll to %TEMP%\hssinst.dll
from %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf0e3.tmp to %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\taphss.sys
from %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf24b.tmp to %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\oemwin2k.inf
from %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\setf317.tmp to %TEMP%\{29b26985-b880-7e86-8c90-e212e1b2f44d}\taphss.cat

Modifies the following files

Substitutes the following files

%TEMP%\hssinstaller.exe

Network activity

Connects to

'localhost':49184
'hs##d.com':80

TCP

Other

'localhost':49184

UDP

DNS ASK hs##d.com

Miscellaneous

Creates and executes the following

'%TEMP%\hssinstaller.exe' -iswow64
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hssie_config" "config" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hss_ff_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hss_wd_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/update_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/client_tag" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/page_not_found" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/privacy_alert" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/search_default" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/search_home" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/tray_port" "897" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hssie_dir" "%ProgramFiles(x86)%\Hotspot Shield\HssIE" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hsswd_flags" "0" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/install_path" "HSS-2.62-update.exe" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/install_min" "0" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -i
'%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe' -install
'%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe' -start
'%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe'
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -installhssie "%ProgramFiles(x86)%\Hotspot Shield\HssIE" "%TEMP%\nsa958B.tmp\HssIE.dll" "%TEMP%\nsa958B.tmp\HssIE_64.dll" -product hss
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -P -H hash -T it -o 60 -u "http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_installed"
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -H hash -T it -o 60 -u http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_installed
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/proxy_flags" "0" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/non_admin" "0" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/fbw_port" "896" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/http_port" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/local_addr" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -r HssTrayService -exec "%TEMP%\nsa958B.tmp\updatestatus.exe" -updatestatus
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -P -H hash -T it -o 60 -u "http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_initiated"
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -H hash -T it -o 60 -u http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_initiated
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -encrypt "C:\Hotspot Shield\hssstate.xml" "%ALLUSERSPROFILE%\Hotspot Shield\config\hssstate.cfg" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' remove tap0901
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' hwids taphss
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' install "%ProgramFiles(x86)%\Hotspot Shield\driver\OemWin2k.inf" taphss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -getcfg "startup.cfg" "/config/install_path" "%TEMP%\af_tmp_file" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/home_path" "%ProgramFiles(x86)%\Hotspot Shield" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/installer" "" "config" -product hss
'%TEMP%\hssinstaller64.exe' -installdriver -c ndis6
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/config_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/verify_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/config_ext" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/exe_path" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/proxy_path" "%ProgramFiles(x86)%\Hotspot Shield\bin\af_proxy_cmd.exe" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/priority" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_path" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_append" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/dport_start" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/dport_end" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/htdocs_dir" "" "config" -product hss
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -r HssTrayService
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe'

Executes the following

'%WINDIR%\syswow64\certutil.exe' -addstore TrustedPublisher "%TEMP%\nsa958B.tmp\af.cer"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Hotspot Shield\HssIE\HssIE_64.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Hotspot Shield\HssIE\HssIE_64.dll"
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hssie_config" "config" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hss_ff_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hss_wd_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/update_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/client_tag" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/page_not_found" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/privacy_alert" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/search_default" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/search_home" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hsswd_flags" "0" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/proxy_flags" "0" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/install_path" "HSS-2.62-update.exe" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/hssie_dir" "%ProgramFiles(x86)%\Hotspot Shield\HssIE" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/install_min" "0" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -i' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe' -install' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\openvpnas.exe' -start' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -installhssie "%ProgramFiles(x86)%\Hotspot Shield\HssIE" "%TEMP%\nsa958B.tmp\HssIE.dll" "%TEMP%\nsa958B.tmp\HssIE_64.dll" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hsswd.exe' -install_nr -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hsswd.exe' -start -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\hsswpr\hssinstaller64.exe' -installdriver -i ndis6 "%ProgramFiles(x86)%\Hotspot Shield\HssWPR"' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\hsswpr\hsssrv.exe' -i -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\hsswpr\hsssrv.exe' -start -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/non_admin" "0" "config" -product hss' (with hidden window)
'%TEMP%\hssinstaller.exe' -iswow64' (with hidden window)
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -P -H hash -T it -o 60 -u "http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_installed"' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/http_port" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/fbw_port" "896" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -r HssTrayService -exec "%TEMP%\nsa958B.tmp\updatestatus.exe" -updatestatus' (with hidden window)
'%TEMP%\nsa958b.tmp\af_proxy_cmd.exe' -P -H hash -T it -o 60 -u "http://hshld.com/web-download/wr-install.php?dm_ver=0&fn=<File name>.exe&ver=2.62&ch=&state=up_initiated"' (with hidden window)
'%WINDIR%\syswow64\certutil.exe' -addstore TrustedPublisher "%TEMP%\nsa958B.tmp\af.cer"' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -encrypt "C:\Hotspot Shield\hssstate.xml" "%ALLUSERSPROFILE%\Hotspot Shield\config\hssstate.cfg" -product hss' (with hidden window)
'%TEMP%\hsspk.exe' -killpopups' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' remove tap0901' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' hwids taphss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\tapinstall.exe' install "%ProgramFiles(x86)%\Hotspot Shield\driver\OemWin2k.inf" taphss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -getcfg "startup.cfg" "/config/install_path" "%TEMP%\af_tmp_file" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/home_path" "%ProgramFiles(x86)%\Hotspot Shield" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/installer" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/config_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/htdocs_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/verify_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/config_ext" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/exe_path" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/proxy_path" "%ProgramFiles(x86)%\Hotspot Shield\bin\af_proxy_cmd.exe" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/priority" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_dir" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_path" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/log_append" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/dport_start" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/dport_end" "" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/local_addr" "" "config" -product hss' (with hidden window)
'%TEMP%\hssinstaller64.exe' -installdriver -c ndis6' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hssinstaller.exe' -addcfg "startup.cfg" "/config/tray_port" "897" "config" -product hss' (with hidden window)
'%ProgramFiles(x86)%\hotspot shield\bin\hsstrayservice.exe' -r HssTrayService' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial