Home 악성코드 해결
✔ 뷰어로 보기
2020.12.24 13:44

PUP.YoutubeMusic, DealPly

ezclean
조회 수 98 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부

PUP.YoutubeMusic


*file
C\Users\{USERNAME}\Desktop\Youtube Music Downlo{USERNAME}er.lnk
C\Users\{USERNAME}\AppData\Local\Temp\is-AP0D1.tmp\Youtube_Music_Downlo{USERNAME}er_Setup.exe
C\ProgramData\Microsoft\Windows\Start Menu\Programs\youtube music downlo{USERNAME}er\Youtube Music Downlo{USERNAME}er.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downlo{USERNAME}er\Youtube Music Downlo{USERNAME}er on the Web.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downlo{USERNAME}er\Uninstall Youtube Music Downlo{USERNAME}er.lnk

*reg_key
HKCU\Software\YoutubeMusicDownlo{USERNAME}er.us
HKCU\YoutubeMusicDownlo{USERNAME}er.us
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00AA23A3-F4F7-4805-AA6B-4C2A74F3AB2B}_is1

 

PUP.DealPly

*file
C\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
C\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
C\Program Files\dealply\dealply.crx
C\Program Files\dealply\dealply.xpi
C\Program Files\dealply\dealplyie.dll
C\Program Files\dealply\dealplyie64.dll
C\Program Files\dealply\dealplyupdate.exe
C\Program Files\dealply\dealplyupdaterun.exe
C\Program Files\dealply\dealplyupdatever.exe
C\Program Files\dealply\icon.ico
C\Program Files\dealply\uninst.exe
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\dealply.url
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\dealply help.url
C\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dealply\uninstall dealply.lnk
C\Program Files\dealplylive\update\1.3.23.0\psuser.dll
C\Program Files\dealplylive\update\1.3.23.0\psmachine.dll
C\Program Files\dealplylive\update\1.3.23.0\npgoogleupdate3.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_zh-tw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_zh-cn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_vi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ur.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_uk.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_tr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_th.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_te.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ta.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sv.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_sk.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ru.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ro.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pt-pt.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pt-br.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_pl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_no.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_nl.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ms.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_mr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ml.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_lv.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_lt.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ko.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_kn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ja.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_iw.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_it.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_is.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_id.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hu.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_hi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_gu.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fr.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fil.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fi.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_fa.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_et.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_es.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_es-419.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_en.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_en-gb.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_el.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_de.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_da.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_cs.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ca.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_bn.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_bg.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_ar.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdateres_am.dll
C\Program Files\dealplylive\update\1.3.23.0\goopdate.dll
C\Program Files\dealplylive\update\1.3.23.0\dealplyliveondemand.exe
C\Program Files\dealplylive\update\1.3.23.0\dealplylivebroker.exe
C\Program Files\dealplylive\update\dealplylive.exe

*reg_key
HKLM\SOFTWARE\Classes\AppID\{80fabb17-63AF-4655-9F07-B6509EE37AF2}
HKLM\SOFTWARE\Classes\Installer\Features\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Classes\Installer\Products\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{092A642B-141A-4422-9A56-FFC008181735}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9850733-08C1-4CB6-AF33-14C7F0757B90}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyLiveUpdateTaskMachineUA
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
HKLM\SOFTWARE\Google\Chrome\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Compatibility{USERNAME}apter\Signatures | DealPlyLiveUpdateTaskMachineUA.job
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Compatibility{USERNAME}apter\Signatures | DealPlyLiveUpdateTaskMachineUA.job.fp
HKLM\SOFTWARE\Classes\Installer\Upgr{USERNAME}eCodes\DBFF5159BA0409649B38F48A1EE47E5F | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9507B717889AF294FAB1CD7FB08E90BA | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Upgr{USERNAME}eCodes\DBFF5159BA0409649B38F48A1EE47E5F | 93B{USERNAME}29AC2E44034A96BCB446EB8552E
 

11111.png

 

TAG •
Atachment
첨부 '1'
Facebook Twitter Google Pinterest
위로 아래로 댓글로 가기 인쇄 첨부
에디터 선택하기
?
  1. 28Apr
    by ezclean
    2021/04/28 by ezclean
    Views 1419 

    Trojan.Clocker

  2. 19Feb
    by ezclean
    2021/02/19 by ezclean
    Views 175 

    Trojan.Cain

  3. 10Nov
    by ezclean
    2020/11/10 by ezclean
    Views 78 

    trojan.ASRF, DTeroVDTeroV

  4. 17Mar
    by ezclean
    2021/03/17 by ezclean
    Views 125 

    Trojan. remote manipulator system

  5. 26Jan
    by ezclean
    2021/01/26 by ezclean
    Views 80 

    Trojan. RegistryTool, AdwareAlert

  6. 04Dec
    by ezclean
    2020/12/04 by ezclean
    Views 285 

    Trojan. CalculatemPro, KGBKeyLogger

  7. 06Nov
    by ezclean
    2020/11/06 by ezclean
    Views 4987 

    Trj.BitcoinMiner

  8. 07Jul
    by ezclean
    2022/07/07 by ezclean
    Views 2292 

    toastform 모비온 작업 표시줄 팝업 광고 삭제 방법

  9. 24Feb
    by ezclean
    2021/02/24 by ezclean
    Views 1385 

    Spyware.TypeRecorder

  10. 30Oct
    by ezclean
    2018/10/30 by ezclean
    Views 384 

    SmartBrowser 광고창 삭제

  11. 28Sep
    by ezclean
    2018/09/28 by ezclean
    Views 412 

    SmartAddress 광고창 삭제

  12. 25Mar
    by ezclean
    2019/03/25 by ezclean
    Views 1001 

    SKY Widget 광고 삭제 방법

  13. 10Sep
    by ezclean
    2018/09/10 by ezclean
    Views 660 

    searchlike 인터넷 광고 삭제 방법

  14. 07Aug
    by ezclean
    2018/08/07 by ezclean
    Views 3455 

    Redirect NWD 64bit (x86) 광고 프로그램 삭제 방법

  15. 12Apr
    by ezclean
    2021/04/12 by ezclean
    Views 195 

    PUP.Zaxar

  16. 24Dec
    by ezclean
    2020/12/24 by ezclean
    Views 98 

    PUP.YoutubeMusic, DealPly

  17. 10Feb
    by ezclean
    2021/02/10 by ezclean
    Views 21711 

    PUP.YouTubeAdBlock, Grakat

  18. 07Apr
    by ezclean
    2021/04/07 by ezclean
    Views 99 

    PUP.wxDfast

  19. 21Apr
    by ezclean
    2021/04/21 by ezclean
    Views 507 

    PUP.WNEn Browser Enhancer

  20. 23Dec
    by ezclean
    2020/12/23 by ezclean
    Views 747 

    PUP.WinZipDiskTool

쓰기
Board Pagination Prev 1 2 3 4 5 ... 8 Next
/ 8

(C) EzClean

XE Login

  1. 회원가입
  2. 아이디,비밀번호 찾기
  3. 인증 메일 재발송