5/5 - (1 votes)

Skillbrains LightShot, Potentially Superfluous Software.

Some legitimate programs like Skillbrains LightShot can be classified as superfluous, they are not necessarily necessary for the functioning of the system and sometimes even unwanted.

Specifically, the Skillbrains LightShot program allows you to select and take a screenshot of any area on your desktop
It can display ads in the form of coupons and banner ads in the form of popups. These announcements are usually signed with the words “Powered by”, “Brought to you by” or even “Ads by”, followed by the adware name.

Some security solutions, such as Malwarebytes Antimalwares, classify this software as Potentially Unwanted Optional Software (PUP/LPI).

This program is classified as Potentially Unnecessary Software (LPS). It installs as a program and/or as a browser extension. It can start automatically from the Registry via a "Run" key, a service or a scheduled task. It may launch when you start your browser after changing its settings. Sometimes the launch is done silently, that is to say it works in the background. The virus analysis of this software does not show any malware detection.

These are mostly legitimate programs that may not be necessary for your system to function properly. The multiplication of programs launched at system startup can cause delays in the execution of ordinary system tasks but also when browsing the Internet. Note that some programs come from downloads with repackaging, a technique which consists of offering other software during installation. These additional programs are obviously superfluous, they can even be installed without your knowledge. It is recommended to read the EULA before installing packaged software. Before clicking, check the relevance of the pre-checked boxes offered to you.

This program is classified in the category of advertising software (Adware), from the English "ADS" short for the English Advertissement (Promotional poster). Adware usually installs as a program or browser extension and is loaded every time the system starts. They can launch services, start scheduled tasks, and create shortcuts on your Desktop. All these operations are done with or without your consent according to the terms of its user contract. Once installed, adware can modify certain settings of your browsers such as search pages, the start page or even your "404" error page. Adware can collect your browsing habits and communicate them to a server using the tracking method because it is most often a marketing solution aimed at retaining customers.

Potentially unwanted software (LPI) or Potentialy Unwanted Programs (PUP) are the cause of many infections. The most common example is adware. InstallCore, Crossrider, Graftor ou Boxore which pollute the Registry and your data storage units. They are usually installed without your knowledge by downloading freeware. Indeed some sites use the repackaging method, an operation which consists of redoing the software installation module by adding download options. These options allow you to add other software such as browser toolbars, adware, potentially unwanted software, intrusive advertising software, or even browser hijackers.

Spyware (spyware) and adware (adwares) unwanted files, just like malware, can use the writing flaws of legitimate software or those of operating systems. It is therefore essential to have official software and that it has automatic updating. Likewise, your Windows operating system must be programmed in automatic update mode and activated, so that you can have the latest updates for critical security vulnerabilities.

TECHNICAL ELEMENTS

Features

– Starts a process at system launch (RP),
- Created multiple application shortcuts, Desktop, QuickLaunch, Taskbar, Programs (O4GS),
- It is installed in the Registry Base in order to be launched each time the system starts (O4),
- It starts a scheduled task automatically (O38),
- It installs as a program (O42)
– Created multiple “Software” registry keys,
- Adds additional folders (O43),
- Registration in the Windows prefetcher folder (O45)
– Adds multiple user files (O61),

Preview in reports

Recorded on 30/04/2014
[MD5.0B42873501A576FF6CDE35EA69EE930A] – (.Skillbrains – Lightshot.) — C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe [477184] [PID.17440]
[MD5.E57E2B81EF0463738007CF89664F78CD] – (.Skillbrains – Lightshot.) — C:\Program Files\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
O4 – HKCU\..\Run: [LightShot] C:\Users\Coolman\AppData\Local\Skillbrains\lightshot\Lightshot.exe
O4 – HKLM\..\Wow6432Node\Run: [Lightshot] . (.Copyright 2009 – Starter Module.) — C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 – HKLM\..\Run: [Lightshot] . (.Copyright 2009 – Starter Module.) — C:\Program Files\Skillbrains\lightshot\Lightshot.exe
O4 – HKLM\..\Wow6432Node\Run: [Lightshot] . (.Copyright 2009 – Starter Module.) — C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 – HKUS\S-1-5-21-986656416-3229447851-101255189-1001\..\Run: [LightShot] C:\Users\Coolman\AppData\Local\Skillbrains\lightshot\Lightshot.exe
O4 – GS\TaskBar [Administrator]: Lightshot.lnk. (.Copyright 2009 – Starter Module.) C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 – GS\TaskBar [NaheI G]: Lightshot.lnk. (.Copyright 2009 – Starter Module.) C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O42 – Software: Lightshot-5.3.0.0 – (.Skillbrains.) [HKLM][64Bits] — {30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
O42 – Software: Lightshot-5.2.1.1 – (.Skillbrains.) [HKLM] — {30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
HKLM\SOFTWARE\Wow6432Node\Skillbrains
HKCU\SOFTWARE\SkillBrains
HKLM\SOFTWARE\Skillbrains
O43 – CFD: 27/10/2015 – [] D — C:\Program Files (x86)\Skillbrains
HKLM\SOFTWARE\Wow6432Node\Skillbrains
HKCU\SOFTWARE\SkillBrains
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1
O43 – CFD: 2015/07/07 11:08:10 – [] D — C:\Program Files\Skillbrains
O43 – CFD: 2015/09/16 14:21:29 – [] D — C:\Program Files (x86)\Skillbrains
O61 – LFC: 2015/07/07 11:07:08 A . (.Skillbrains.) — C:\Users\Coolman\Desktop\setup-lightshot.exe
C:\Program Files\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
C:\Program Files\Skillbrains\lightshot\Lightshot.exe
C:\Program Files\Skillbrains

Recorded on 27/05/2016
[MD5.70D6EA378844CC762C57FA4B8AC63764] [APT] [update-S-1-5-21-1953482718-3056900500-735679278-1001] (.Copyright 2009.) — C:\Program Files (x86)\Skillbrains\Updater\Update r.exe [105728] (.Activate.)
[MD5.70D6EA378844CC762C57FA4B8AC63764] [APT] [update-sys] (.Copyright 2009.) — C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [105728] (.Activate.)
O39 – APT: update-S-1-5-21-1953482718-3056900500-735679278-1001 – (.Copyright 2009.) — C:\WINDOWS\Tasks\update-S-1-5-21-1953482718-3056900500- 735679278-1001.job [404]
O39 – APT: update-sys – (.Copyright 2009.) — C:\WINDOWS\Tasks\update-sys.job [404]
O39 – APT: update-S-1-5-21-1953482718-3056900500-735679278-1001 – (.Copyright 2009.) — C:\WINDOWS\System32\Tasks\update-S-1-5-21-1953482718- 3056900500-735679278-1001 [2838]
O39 – APT: update-sys – (.Copyright 2009.) — C:\WINDOWS\System32\Tasks\update-sys [2670]