2016.05.27 18:32

[PUP] lyoness Cashback

조회 수 543 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 댓글로 가기 인쇄

PUP. lyoness Cashback

 

* registry path

 

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2893608250-2205728168-3091723128-1001\Software\Lyoness Cashback Bar
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{494176DC-591B-4B54-A2CF-0FA9F26E4A98}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C7DC0FB-D1FD-4AED-9988-789DCD38AD11}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{572CFDFC-3AEF-4615-8990-76349F3D4C75}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{85A0F2AE-E5D7-43A1-AB78-B18437CC31DB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98FB56A6-D5C9-439E-8804-F0C021524262} 
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.BackgroundHostObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.BackgroundHostObject.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.Navbar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.Navbar.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.ScriptHostObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.ScriptHostObject.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.Tool
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Lyoness Cashback Bar.Tool.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\axLyon.AdBlockChecker
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\axLyon.AdBlockChecker.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0A564723-2031-43DD-A5DD-9DF1DF799C62}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{3D67B801-F25F-4DF5-9226-82D4EA132422}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C6EACD57-2E5F-4349-A931-2E379EBA0565}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE830FE7-CC8C-45C3-A708-602A46CBD6A8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EA0EEFCA-CA16-4A73-8F18-C06575A3F58F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{98FB56A6-D5C9-439E-8804-F0C021524262}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA5FDCE2-BB3E-48a2-9B26-7FD7E9242C8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lyoness Cashback Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions | {2A87E8F3-74F4-4832-BB0D-2DDC1E25A889}

 

* files path

 

C^Program Files^lyoness Cashback Bar\uninstall.exe
C^Program Files^Lyoness Cashback Bar\ScriptHost64.dll
C^Program Files^Lyoness Cashback Bar\ScriptHost.dll
C^Program Files^Lyoness Cashback Bar\options.htm
C^Program Files^Lyoness Cashback Bar\nplion.dll
C^Program Files^Lyoness Cashback Bar\ButtonSite64.dll
C^Program Files^Lyoness Cashback Bar\ButtonSite.dll
C^Program Files^Lyoness Cashback Bar\BackgroundHost64.exe
C^Program Files^Lyoness Cashback Bar\BackgroundHost.exe
C^Program Files^Lyoness Cashback Bar\axLyonx64.dll
C^Program Files^Lyoness Cashback Bar\axlyon.dll
C^Program Files^Lyoness Cashback Bar\AddonsFramework.Typelib64.dll
C^Program Files^Lyoness Cashback Bar\AddonsFramework.Typelib.dll