I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
We received the file AFWJRW0DX1V9SM.EXE and detected thatAFWJRW0DX1V9SM.EXE is not good.
YoutubeAdBlocker is Adware. You should remove the file AFWJRW0DX1V9SM.EXE.
Kill the process AFWJRW0DX1V9SM.EXE and remove YoutubeAdBlocker from Windows.
Malware Analysis of YoutubeAdBlocker
Full path on a computer: %Program Files%\youtubeadblocker\
Detected by UnHackMe:
AFWJRW0DX1V9SM.EXE
Default location: %Program Files%\youtubeadblocker\
Removal Results: Success
Number of reboot: 1
AFWJRW0DX1V9SM.EXE is known as:
Adware.PUP.MultiPlug
AFWJRW0DX1V9SM.EXE hash:
- MD5: 40969ddb21f87dd40726694ad2b5adba
The file tries to connect to the dangerous web site.
How to quickly detect AFWJRW0DX1V9SM.EXE presence?
Registry:
- HKLM\Software\Classes\CLSID\{5e0b823d-dd09-49de-8dc2-aa87cfb61182}\InprocServer32\: “%Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.dll”
- HKLM\Software\Classes\CLSID\{794fcf28-b7a0-4e9f-a9d0-eb5e6ec3ae3f}\InprocServer32\: “%Program Files%\PricieLeesus\kYCBNVfW5BN3ML.dll”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\DisplayName: “youtubeadblocker”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}\UninstallString: “”%Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}\DisplayName: “PricieLeesus”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}\UninstallString: “”%Program Files%\PricieLeesus\kYCBNVfW5BN3ML.exe” /s /n /i:”ExecuteCommands;UninstallCommands” “””
Folders:
- %Program Files%\PricieLeesus
- %Program Files%\youtubeadblocker
Files:
- %Program Files%\PricieLeesus\kYCBNVfW5BN3ML.dat
- %Program Files%\PricieLeesus\kYCBNVfW5BN3ML.dll
- %Program Files%\PricieLeesus\kYCBNVfW5BN3ML.exe
- %Program Files%\PricieLeesus\kYCBNVfW5BN3ML.tlb
- %Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.dat
- %Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.dll
- %Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.exe
- %Program Files%\youtubeadblocker\AfwJRW0dx1v9SM.tlb