Solved! Use CHROMEXT64.DLL (Trojan SuspiciousFile) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

CHROMEXT64.DLL – Trojan SuspiciousFile removal

FileMD5Virus Alias
CHROMEXT64.DLL f1fa665a5447528e00fc0c9835991140 Trojan SuspiciousFile

CHROMEXT64.DLL size: 308224 bytes
CHROMEXT64.DLL hash: F1FA665A5447528E00FC0C9835991140

Created files:

%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\chromext64.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrsetup.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\hlpr64.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\res.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\uckpdfcS.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\Xmnjnyfx.dll
%AppData%\Microsoft\CryptnetUrlCache\Content\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\Content\74FBF93595CFC8459196065CE54AD928
%AppData%\Microsoft\CryptnetUrlCache\MetaData\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928

Detected by UnHackMe:

CHROMEXT64.DLL
Default location: %PROGRAM FILES%\PAY-BY-ADS\YAHOO! SEARCH\1.3.26.12\CHROMEXT64.DLL

Dropper information:
MD5: eee9ea850aa8dce4b76c8b94352aa000
File size: 1203968 bytes

Leave a Reply