Solved! Use UCKPDFCS.DLL (Trojan UnwantedProgram) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

UCKPDFCS.DLL – Trojan UnwantedProgram removal

File MD5 Virus Alias
UCKPDFCS.DLL d1445387980c2b3447e260613bfa8763 Trojan UnwantedProgram
UCKPDFCS.DLL d1445387980c2b3447e260613bfa8763 Trojan SuspiciousFile

UCKPDFCS.DLL size: 276992 bytes
UCKPDFCS.DLL hash: D1445387980C2B3447E260613BFA8763

Created files:

%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\chromext64.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrsetup.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\hlpr64.exe
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\res.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\uckpdfcS.dll
%Program Files%\Pay-By-Ads\Yahoo! Search\1.3.26.12\Xmnjnyfx.dll
%AppData%\Microsoft\CryptnetUrlCache\Content\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\Content\74FBF93595CFC8459196065CE54AD928
%AppData%\Microsoft\CryptnetUrlCache\MetaData\34DA60AA966CD9270C5362E6AEF824CF
%AppData%\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928

Detected by UnHackMe:

UCKPDFCS.DLL
Default location: %PROGRAM FILES%\PAY-BY-ADS\YAHOO! SEARCH\1.3.26.12\UCKPDFCS.DLL

Dropper information:
MD5: eee9ea850aa8dce4b76c8b94352aa000
File size: 1203968 bytes

Leave a Reply