Home 악성코드 해결
✔ 뷰어로 보기
2020.12.24 13:44

PUP.YoutubeMusic, DealPly

ezclean
조회 수 98 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부

PUP.YoutubeMusic


*file
C\Users\{USERNAME}\Desktop\Youtube Music Downlo{USERNAME}er.lnk
C\Users\{USERNAME}\AppData\Local\Temp\is-AP0D1.tmp\Youtube_Music_Downlo{USERNAME}er_Setup.exe
C\ProgramData\Microsoft\Windows\Start Menu\Programs\youtube music downlo{USERNAME}er\Youtube Music Downlo{USERNAME}er.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downlo{USERNAME}er\Youtube Music Downlo{USERNAME}er on the Web.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downlo{USERNAME}er\Uninstall Youtube Music Downlo{USERNAME}er.lnk

*reg_key
HKCU\Software\YoutubeMusicDownlo{USERNAME}er.us
HKCU\YoutubeMusicDownlo{USERNAME}er.us
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00AA23A3-F4F7-4805-AA6B-4C2A74F3AB2B}_is1

 

PUP.DealPly

*file
C\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
C\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
C\Program Files\dealply\dealply.crx
C\Program Files\dealply\dealply.xpi
C\Program Files\dealply\dealplyie.dll
C\Program Files\dealply\dealplyie64.dll
C\Program Files\dealply\dealplyupdate.exe
C\Program Files\dealply\dealplyupdaterun.exe
C\Program Files\dealply\dealplyupdatever.exe
C\Program Files\dealply\icon.ico
C\Program Files\dealply\uninst.exe
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\dealply.url
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\dealply help.url
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\uninstall dealply.lnk
C\Program Files\dealplylive\update\1.3.23.0\psuser.dll
C\Program Files\dealplylive\update\1.3.23.0\psmachine.dll
C\Program Files\dealplylive\update\1.3.23.0\npgoogleupdate3.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_zh-tw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_zh-cn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_vi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ur.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_uk.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_tr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_th.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_te.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ta.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sv.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sk.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ru.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ro.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pt-pt.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pt-br.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_no.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_nl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ms.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_mr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ml.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_lv.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_lt.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ko.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_kn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ja.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_iw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_it.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_is.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_id.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hu.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_gu.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fil.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fa.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_et.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_es.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_es-419.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_en.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_en-gb.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_el.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_de.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_da.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_cs.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ca.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_bn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_bg.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ar.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_am.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdate.dll
C\Program Files\dealplylive\update\1.3.23.0\dealplyliveondemand.exe
C\Program Files\dealplylive\update\1.3.23.0\dealplylivebroker.exe
C\Program Files\dealplylive\update\dealplylive.exe

*reg_key
HKLM\SOFTWARE\Classes\AppID\{80fabb17-63AF-4655-9F07-B6509EE37AF2}
HKLM\SOFTWARE\Classes\Installer\Features\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Classes\Installer\Products\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{092A642B-141A-4422-9A56-FFC008181735}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9850733-08C1-4CB6-AF33-14C7F0757B90}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyLiveUpdateTaskMachineUA
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
HKLM\SOFTWARE\Google\Chrome\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Compatibility{USERNAME}apter\Signatures | DealPlyLiveUpdateTaskMachineUA.job
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Compatibility{USERNAME}apter\Signatures | DealPlyLiveUpdateTaskMachineUA.job.fp
HKLM\SOFTWARE\Classes\Installer\Upgr{USERNAME}eCodes\DBFF5159BA0409649B38F48A1EE47E5F | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9507B717889AF294FAB1CD7FB08E90BA | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Upgr{USERNAME}eCodes\DBFF5159BA0409649B38F48A1EE47E5F | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
 

11111.png

 

TAG •
Atachment
첨부 '1'
Facebook Twitter Google Pinterest
위로 아래로 댓글로 가기 인쇄 첨부
에디터 선택하기
?
  1. 24Dec
    by ezclean
    2020/12/24 by ezclean
    Views 98 

    PUP.YoutubeMusic, DealPly

  2. 07Apr
    by ezclean
    2021/04/07 by ezclean
    Views 99 

    PUP.wxDfast

  3. 07Dec
    by ezclean
    2020/12/07 by ezclean
    Views 109 

    Adware.AnySend, Linkury

  4. 18Nov
    by ezclean
    2020/11/18 by ezclean
    Views 110 

    Adware.Savepathdeals

  5. 20Nov
    by ezclean
    2020/11/20 by ezclean
    Views 112 

    PUP.ScrollUp, YesSearches

  6. 23Dec
    by ezclean
    2020/12/23 by ezclean
    Views 112 

    Trojan.HaoTuKanKan, HPMonkey

  7. 22Dec
    by ezclean
    2020/12/22 by ezclean
    Views 120 

    PUP.ChromeEX, Homply

  8. 17Mar
    by ezclean
    2021/03/17 by ezclean
    Views 125 

    Trojan. remote manipulator system

  9. 29Jan
    by ezclean
    2021/01/29 by ezclean
    Views 130 

    PUP.TorrentSearch, RegEasy

  10. 26Nov
    by ezclean
    2020/11/26 by ezclean
    Views 132 

    PUP.PCGold, TelamonCleaner

  11. 05Mar
    by ezclean
    2021/03/05 by ezclean
    Views 146 

    PUP.SecurePCCleaner

  12. 10Mar
    by ezclean
    2021/03/10 by ezclean
    Views 147 

    Adware.SogouDownLoad

  13. 21Aug
    by ezclean
    2018/08/21 by ezclean
    Views 172  Replies 1

    http://safebrowsing.biz 시작페이지 고정 해결 방법

  14. 19Feb
    by ezclean
    2021/02/19 by ezclean
    Views 175 

    Trojan.Cain

  15. 12Apr
    by ezclean
    2021/04/12 by ezclean
    Views 195 

    PUP.Zaxar

  16. 28Dec
    by ezclean
    2020/12/28 by ezclean
    Views 215 

    PUP.GrassValley, Heinote

  17. 30Mar
    by ezclean
    2021/03/30 by ezclean
    Views 220 

    Adware.WarThunder

  18. 18Feb
    by ezclean
    2021/02/18 by ezclean
    Views 227 

    Trojan.ShopForRewards

  19. 29Mar
    by ezclean
    2021/03/29 by ezclean
    Views 228 

    Backdoor.BSQL Hacker

  20. 03Sep
    by ezclean
    2018/09/03 by ezclean
    Views 258 

    INIWeblink 인터넷 광고 삭제 방법

쓰기
Board Pagination Prev 1 2 3 4 5 ... 8 Next
/ 8

(C) EzClean

XE Login

  1. 회원가입
  2. 아이디,비밀번호 찾기
  3. 인증 메일 재발송