Home 악성코드 해결
✔ 뷰어로 보기
2021.01.22 10:45

PUP. Guffins, PriceLess

ezclean
조회 수 52 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부
?

단축키

Prev이전 문서

Next다음 문서

가 크게 작게 위로 아래로 댓글로 가기 인쇄 첨부

PUP. Guffins

 


*file
C:\Program Files\Guffins\bar\1.bin\chrome\u4ffxtbr.jar
C:\Program Files\Guffins\bar\1.bin\assists\ie_default_search_provider\CONFIG.XML
C:\Program Files\Guffins\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
C:\Program Files\Guffins\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
C:\Program Files\Guffins\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
C:\Program Files\Guffins\bar\1.bin\VERIFY.DLL
C:\Program Files\Guffins\bar\1.bin\UNIFIEDLOGGING.DLL
C:\Program Files\Guffins\bar\1.bin\u4srchmr.dll
C:\Program Files\Guffins\bar\1.bin\u4skplay.exe
C:\Program Files\Guffins\bar\1.bin\u4regiet.dll
C:\Program Files\Guffins\bar\1.bin\u4reghk.dll
C:\Program Files\Guffins\bar\1.bin\u4regfft.dll
C:\Program Files\Guffins\bar\1.bin\u4Plugin.dll
C:\Program Files\Guffins\bar\1.bin\u4ieovr.dll
C:\Program Files\Guffins\bar\1.bin\u4idle.dll
C:\Program Files\Guffins\bar\1.bin\u4hkstub.dll
C:\Program Files\Guffins\bar\1.bin\u4dlghk64.dll
C:\Program Files\Guffins\bar\1.bin\u4brstub64.dll
C:\Program Files\Guffins\bar\1.bin\u4brmon64.exe
C:\Program Files\Guffins\bar\1.bin\u4barsvc.exe
C:\Program Files\Guffins\bar\1.bin\u4auxstb64.dll
C:\Program Files\Guffins\bar\1.bin\u4auxstb.dll
C:\Program Files\Guffins\bar\1.bin\TPIMANAGERCONSOLE.EXE
C:\Program Files\Guffins\bar\1.bin\T8TICKER.DLL
C:\Program Files\Guffins\bar\1.bin\T8EXTPEX.DLL
C:\Program Files\Guffins\bar\1.bin\T8EXTEX.DLL
C:\Program Files\Guffins\bar\1.bin\T8EPMSUP.DLL
C:\Program Files\Guffins\bar\1.bin\NPu4Stub.dll
C:\Program Files\Guffins\bar\1.bin\LOGO.BMP
C:\Program Files\Guffins\bar\1.bin\installKeys.js
C:\Program Files\Guffins\bar\1.bin\INSTALL.RDF
C:\Program Files\Guffins\bar\1.bin\Hpg64.dll
C:\Program Files\Guffins\bar\1.bin\FF-NativeMessagingDispatcher.dll
C:\Program Files\Guffins\bar\1.bin\EXEMANAGER.DLL
C:\Program Files\Guffins\bar\1.bin\DPNMNGR.DLL
C:\Program Files\Guffins\bar\1.bin\CrExtPu4.exe
C:\Program Files\Guffins\bar\1.bin\CREXT.DLL
C:\Program Files\Guffins\bar\1.bin\CHROME.MANIFEST
C:\Program Files\Guffins\bar\1.bin\BOOTSTRAP.JS
C:\Program Files\Guffins\bar\1.bin\ASSISTMONITOR64.DLL
C:\Program Files\Guffins\bar\1.bin\ASSISTMONITOR.DLL
C:\Program Files\Guffins\bar\1.bin\AppIntegratorStub64.dll
C:\Program Files\Guffins\bar\1.bin\AppIntegrator64.exe

*reg_key
HKCU\Software\AppDataLow\Software\Guffins
HKCU\Software\Guffins
HKCU\Software\Classes\CLSID\{c3d3840c-12ea-4461-a61d-190555fecc82}
HKLM\SOFTWARE\Classes\CLSID\{006bff73-d6b8-4cc0-a982-1e041d625b08}
HKLM\SOFTWARE\Classes\CLSID\{1b3f043d-1afc-4bc1-8c5e-6dc54ead3ae1}
HKLM\SOFTWARE\Classes\CLSID\{1D69E858-32D5-4888-A395-579C8124112B}
HKLM\SOFTWARE\Classes\CLSID\{1f28c606-9536-4078-b89f-143b5c01571c}
HKLM\SOFTWARE\Classes\CLSID\{442d3d85-b938-4ff8-9c15-027405dea3ec}
HKLM\SOFTWARE\Classes\CLSID\{47b3f06e-cec0-4670-ae2f-033f46ea5177}
HKLM\SOFTWARE\Classes\CLSID\{49a32f81-0ba1-4b43-856c-9a61425e5bf1}
HKLM\SOFTWARE\Classes\CLSID\{54d836b9-1df3-4f0c-b502-e9e9d27b7f9a}
HKLM\SOFTWARE\Classes\CLSID\{71a84035-08ad-4964-b6e9-9ffc06390057}
HKLM\SOFTWARE\Classes\CLSID\{8013018c-73f4-4642-b2d1-9d83c2aafbc2}
HKLM\SOFTWARE\Classes\CLSID\{956e5a3f-b1c2-4e81-9f30-84349ce7baf0}
HKLM\SOFTWARE\Classes\CLSID\{9a04e19d-aaf5-4d2b-87c6-2f01b7e205b4}
HKLM\SOFTWARE\Classes\CLSID\{a6405ec8-0e8a-49af-978e-f7fac946950b}
HKLM\SOFTWARE\Classes\CLSID\{ae71ca5e-f67d-4507-8ee3-2c64c79131fe}
HKLM\SOFTWARE\Classes\CLSID\{de2fdf7c-2637-4ba3-b427-3fce2d331db5}
HKLM\SOFTWARE\Classes\CLSID\{f8e548a0-ad49-456c-a72c-977d06415c68}
HKLM\SOFTWARE\Classes\CLSID\{f8f03266-dec7-4f5c-a6d3-d88533ee9070}
HKLM\SOFTWARE\Classes\TypeLib\{0B070B7B-5574-4735-B4AA-0543DF03FDFA}
HKLM\SOFTWARE\Classes\TypeLib\{10281CC0-D529-4C37-86F9-13A91366200E}
HKLM\SOFTWARE\Classes\TypeLib\{18E5FE5F-481D-4991-B833-CA21803D5E7D}
HKLM\SOFTWARE\Classes\TypeLib\{1D00DBBA-73F1-4784-88D3-2EEC61B2E99B}
HKLM\SOFTWARE\Classes\TypeLib\{71A63FCB-02F9-4632-B7CE-2D136BF2EAC8}
HKLM\SOFTWARE\Classes\TypeLib\{7832DE29-0904-406C-AD68-E0D5C3C3A4EA}
HKLM\SOFTWARE\Classes\TypeLib\{7C75F6AB-5FB4-4AB2-AC5C-8A9AE211553E}
HKLM\SOFTWARE\Classes\TypeLib\{8EF6E3A3-2C8D-4CD3-8FA3-8E901D8EFA90}
HKLM\SOFTWARE\Classes\TypeLib\{A7AE7537-9C87-4F9C-A494-84FA5AD092F0}
HKLM\SOFTWARE\Classes\TypeLib\{AC480FBE-24AB-4372-9A32-02AB0BAE8B6B}
HKLM\SOFTWARE\Classes\TypeLib\{F379BD31-1B3D-41F7-9349-35004298B4C6}
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.FeedManager
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.FeedManager.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.HTMLMenu
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.HTMLMenu.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.HTMLPanel
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.HTMLPanel.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.MultipleButton
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.MultipleButton.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.PseudoTransparentPlugin
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.PseudoTransparentPlugin.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.Radio
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.Radio.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.RadioSettings
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.RadioSettings.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.ScriptButton
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.ScriptButton.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.SettingsPlugin
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.SettingsPlugin.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.ThirdPartyInstaller
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.ThirdPartyInstaller.1
HKLM\SOFTWARE\SOFTWARE\Classes\Guffins.ToolbarProtector
HKLM\SOFTWARE\SOFTWARE\Classes\guffins.ToolbarProtector.1
HKLM\SOFTWARE\SOFTWARE\Guffins
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d2aa885-2c50-4758-a262-17254662a5d5}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49a32f81-0ba1-4b43-856c-9a61425e5bf1}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a8aa6e6-54c5-4a40-89f3-62acd51a2069}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59567752-5ff2-4df5-aada-e9c6f114c00a}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c277597d-c02b-4c09-9778-671530d2700f}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ff777bf5-d424-4519-a61e-2b5bb204894d}
HKLM\SOFTWARE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Guffinsbar Uninstall Firefox
HKLM\SOFTWARE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Guffinsbar Uninstall Internet Explorer
HKLM\SOFTWARE\SOFTWARE\MozillaPlugins\@Guffins.com/Plugin
HKLM\SOFTWARE\SYSTEM\CurrentControlSet\Services\GuffinsService

*reg_val
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | Guffins EPM Support

 


PUP. PriceLess

 


*file
C:\Program Files\PricceiLess\BuPLHTdkD0iL90.dll
C:\Program Files\PricceiLess\BuPLHTdkD0iL90.x64.dll
C:\Program Files\PricceiLess

*reg_key
HKLM\SOFTWARE\Classes\CLSID\{e3530a22-9bd6-4e86-a8db-abafc1571a1f}
HKLM\software\microsoft\windows\currentversion\Ext\PreApproved\{e3530a22-9bd6-4e86-a8db-abafc1571a1f}
HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{e3530a22-9bd6-4e86-a8db-abafc1571a1f}

*reg_val
HKLM\software\microsoft\windows\currentversion\Policies\Ext\CLSID | {e3530a22-9bd6-4e86-a8db-abafc1571a1f}
HKLM\SOFTWARE\Classes\.\CLSID | ##{e3530a22-9bd6-4e86-a8db-abafc1571a1f}<-
HKLM\SOFTWARE\Classes\..9\CLSID | ##{e3530a22-9bd6-4e86-a8db-abafc1571a1f}<-

11111.png

 

TAG •
Atachment
첨부 '1'
Facebook Twitter Google Pinterest
위로 아래로 댓글로 가기 인쇄 첨부
에디터 선택하기
?

  1. PUP.BabylonToolbar

    PUP.BabylonToolbar *file C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\Baby...
    Date2021.04.14 Byezclean Reply0 Views1289 file
    Read More

  2. PUP.RelevantKnowledge

    PUP.RelevantKnowledge *file C:\Windows\System32\rlls64.dll C:\Windows\SysWOW64\rlls.dll C:\Program Files\RelevantKnowledge\rlservice.exe C:\Program Files\RelevantKnowledge\rlls.dll C:\Program Files\RelevantKnowledge\rlls64.dll C:\Program Fil...
    Date2021.04.13 Byezclean Reply0 Views4088 file
    Read More

  3. PUP.Zaxar

    PUP.Zaxar *file C:\Program Files\Zaxar\sqldrivers\qsqlite4.dll C:\Program Files\Zaxar\plugins\NPSWF32.dll C:\Program Files\Zaxar\imageformats\qjpeg4.dll C:\Program Files\Zaxar\imageformats\qico4.dll C:\Program Files\Zaxar\imageformats\qgif4....
    Date2021.04.12 Byezclean Reply0 Views195 file
    Read More

  4. Adware.SearchProtect

    Adware.SearchProtect *file C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\bahvxfk C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\rfobmlpfqlovvawq C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\rpboobmlpfqlovvawq C:\Users\{USERNAME}\AppData\Local\b...
    Date2021.04.09 Byezclean Reply0 Views997 file
    Read More

  5. PUP.SweetIM

    PUP.SweetIM *file C:\Program Files\sweetimC:\Program Files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe C:\Program Files\SweetIMC:\Program Files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml C:\Program Files\SweetIMC:\Program Files\...
    Date2021.04.08 Byezclean Reply0 Views88 file
    Read More

  6. PUP.wxDfast

    PUP.wxDfast *file C:\Users\{USERNAME}\AppData\LocalLow\wxDfast\scode_docstart C:\Users\{USERNAME}\AppData\LocalLow\wxDfast\products C:\Users\{USERNAME}\AppData\LocalLow\wxDfast\jsondb.js C:\Users\{USERNAME}\AppData\LocalLow\wxDfast\content.j...
    Date2021.04.07 Byezclean Reply0 Views99 file
    Read More

  7. Adware.SecuriDex

    Adware.SecuriDex *file C:\Program Files\SecuriDex\mscorlib.dll C:\Program Files\SecuriDex\Securidex.exe C:\Program Files\SecuriDex\System.Core.dll C:\Program Files\SecuriDex\System.Data.DataSetExtensions.dll C:\Program Files\SecuriDex\System...
    Date2021.04.06 Byezclean Reply0 Views369 file
    Read More

  8. Trojan.ImageCropResize

    Trojan.ImageCropResize *file C:\Users{USERNAME}Desktop\ImageCropResize.lnk C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\ImageEd\ImageEd.exe C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\uninstaller.exe C:\Users\{USERNAME}\AppDat...
    Date2021.04.05 Byezclean Reply0 Views615 file
    Read More

  9. PUP.EasyHotspot

    PUP.EasyHotspot *file C:\Program Files\EasyHotspot\EasyHotspot.exe C:\Users\{USERNAME}\Desktop\EasyHotspot.exe C:\Users\{USERNAME}\Desktop\EasyHotspot.lnk C:\Program Files\EasyHotspot\Interop.NATUPNPLib.dll C:\Program Files\EasyHotspot\Inter...
    Date2021.04.02 Byezclean Reply0 Views750 file
    Read More

  10. PUP.Dev360 Cleaner

    PUP.Dev360 Cleaner *file C:\Program Files\Dev360 Cleaner\Animation.gif C:\Program Files\Dev360 Cleaner\AppDesc.txt C:\Program Files\Dev360 Cleaner\CookieExclusions.txt C:\Program Files\Dev360 Cleaner\D360Schedule.exe C:\Program Files\Dev360 ...
    Date2021.04.01 Byezclean Reply0 Views901 file
    Read More

  11. Adware.MovieDea

    Adware.MovieDea *file C:\Program Files\MovieDea\Compaign.dat C:\Program Files\MovieDea\Events.dat C:\Program Files\MovieDea\MovieDea.exe C:\Program Files\MovieDea\uninst.exe C:\Windows\Prefetch\ATTRIB.EXE-39EAFB02.pf C:\Windows\Prefetch\MOVI...
    Date2021.03.31 Byezclean Reply0 Views570 file
    Read More

  12. Adware.WarThunder

    Adware.WarThunder *file C:\Windows\System32\Tasks\WarThunder24 C:\Windows\System32\Tasks\WarThunder sun C:\Windows\System32\Tasks\WarThunder sat C:\Users{USERNAME}Desktop\WarThunder.lnk C:\Users\{USERNAME}\AppData\Roaming\ZU_warthunder\wt.ic...
    Date2021.03.30 Byezclean Reply0 Views220 file
    Read More

  13. Backdoor.BSQL Hacker

    Backdoor.BSQL Hacker *file c:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BSQL Hacker\Uninstall.lnk c:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BSQL Hacker\Manual.lnk c:\Users\{USERNAM...
    Date2021.03.29 Byezclean Reply0 Views223 file
    Read More

  14. Adware.ClickNetwork

    Adware.ClickNetwork *file c:\program files\clicknetwork\clicknetwork.exe c:\program files\clicknetwork\uninstall_clicknetwork.exe C:\Windows\System32\Tasks\hPop C:\Windows\System32\Tasks\Windows adversystem [clicknetwork] *reg_key HKLM\SOFTW...
    Date2021.03.26 Byezclean Reply0 Views2754 file
    Read More

  15. PUP.SpaceSondPro

    PUP.SpaceSondPro *file C:\Users\{USERNAME}\Desktop\SpaceSoundPro.lnk C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpaceSoundPro 1.0\Uninstall.lnk C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\P...
    Date2021.03.25 Byezclean Reply0 Views77 file
    Read More

  16. PUP. SoftPlanet

    PUP. SoftPlanet *file c:\Windows\System32\Tasks\SoftPlanet SOFTWARE Assistant c:\Users\Public\Desktop\SoftPlanet SOFTWARE Assistant.lnk c:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftPlanet SOFTWARE Assistant\SoftPlanet SOFTWARE As...
    Date2021.03.23 Byezclean Reply0 Views2004 file
    Read More

  17. Trojan.DVD Region+CSS Free

    Trojan.DVD Region+CSS Free *file C:\Users\{USERNAME}\Desktop\DVD Region+CSS Free.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Region+CSS Free\Uninstall DVD Region+CSS Free.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Progr...
    Date2021.03.22 Byezclean Reply0 Views275 file
    Read More

  18. Trojan.KaZaA

    Trojan.KaZaA *file C:\Windows\Installer\363d04.msi C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kazaalite\Speed Up.lnk C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kazaalite\Sig2Dat.l...
    Date2021.03.19 Byezclean Reply0 Views561 file
    Read More

  19. PUP. lyoness Cashback

    PUP. lyoness Cashback *file C:\Program Files\lyoness Cashback Bar\uninstall.exe C:\Program Files\Lyoness Cashback Bar\ScriptHost64.dll C:\Program Files\Lyoness Cashback Bar\ScriptHost.dll C:\Program Files\Lyoness Cashback Bar\options.htm C:\...
    Date2021.03.18 Byezclean Reply0 Views488 file
    Read More

  20. Trojan. remote manipulator system

    Trojan. remote manipulator system *file c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Manipulator System - Host\Остановить Host.lnk c:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Manipulator System - Host\Настройка...
    Date2021.03.17 Byezclean Reply0 Views125 file
    Read More
쓰기
Board Pagination Prev 1 2 3 4 5 ... 8 Next
/ 8

(C) EzClean

XE Login

  1. 회원가입
  2. 아이디,비밀번호 찾기
  3. 인증 메일 재발송