PUP. lyoness Cashback

by ezclean posted Mar 18, 2021
?

단축키

Prev이전 문서

Next다음 문서

ESC닫기

크게 작게 위로 아래로 댓글로 가기 인쇄

PUP. lyoness Cashback
 

*file
C:\Program Files\lyoness Cashback Bar\uninstall.exe
C:\Program Files\Lyoness Cashback Bar\ScriptHost64.dll
C:\Program Files\Lyoness Cashback Bar\ScriptHost.dll
C:\Program Files\Lyoness Cashback Bar\options.htm
C:\Program Files\Lyoness Cashback Bar\nplion.dll
C:\Program Files\Lyoness Cashback Bar\ButtonSite64.dll
C:\Program Files\Lyoness Cashback Bar\ButtonSite.dll
C:\Program Files\Lyoness Cashback Bar\BackgroundHost64.exe
C:\Program Files\Lyoness Cashback Bar\BackgroundHost.exe
C:\Program Files\Lyoness Cashback Bar\axLyonx64.dll
C:\Program Files\Lyoness Cashback Bar\axlyon.dll
C:\Program Files\Lyoness Cashback Bar\AddonsFramework.Typelib64.dll
C:\Program Files\Lyoness Cashback Bar\AddonsFramework.Typelib.dll
 

*reg_key
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2893608250-2205728168-3091723128-1001\SOFTWARE\Lyoness Cashback Bar
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKLM\SOFTWARE\Classes\CLSID\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKLM\SOFTWARE\Classes\CLSID\{494176DC-591B-4B54-A2CF-0FA9F26E4A98}
HKLM\SOFTWARE\Classes\CLSID\{4C7DC0FB-D1FD-4AED-9988-789DCD38AD11}
HKLM\SOFTWARE\Classes\CLSID\{572CFDFC-3AEF-4615-8990-76349F3D4C75}
HKLM\SOFTWARE\Classes\CLSID\{85A0F2AE-E5D7-43A1-AB78-B18437CC31DB}
HKLM\SOFTWARE\Classes\CLSID\{98FB56A6-D5C9-439E-8804-F0C021524262}
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.BackgroundHostObject
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.BackgroundHostObject.1
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.Navbar
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.Navbar.1
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.ScriptHostObject
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.ScriptHostObject.1
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.Tool
HKLM\SOFTWARE\Classes\Lyoness Cashback Bar.Tool.1
HKLM\SOFTWARE\Classes\axLyon.AdBlockChecker
HKLM\SOFTWARE\Classes\axLyon.AdBlockChecker.1
HKLM\SOFTWARE\Classes\TypeLib\{0A564723-2031-43DD-A5DD-9DF1DF799C62}
HKLM\SOFTWARE\Classes\TypeLib\{3D67B801-F25F-4DF5-9226-82D4EA132422}
HKLM\SOFTWARE\Classes\TypeLib\{C6EACD57-2E5F-4349-A931-2E379EBA0565}
HKLM\SOFTWARE\Classes\TypeLib\{DE830FE7-CC8C-45C3-A708-602A46CBD6A8}
HKLM\SOFTWARE\Classes\TypeLib\{EA0EEFCA-CA16-4A73-8F18-C06575A3F58F}
HKLM\SOFTWARE\Classes\Interface\{98FB56A6-D5C9-439E-8804-F0C021524262}
HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA5FDCE2-BB3E-48a2-9B26-7FD7E9242C8B}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lyoness Cashback Bar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions | {2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}

 

11111.png