yuyanzhe.exe - Dangerous
yuyanzhe.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Yuyanzhe.exe is Trojan/Backdoor.
Kill the process yuyanzhe.exe and remove yuyanzhe.exe from Windows startup.
Malware: yuyanzhe.exe
Removed: C:\Documents and Settings\All Users\Application Data\Storm\update\njtia.lib
C:\Documents and Settings\All Users\Application Data\Storm\update\rdomm.obj
C:\Program Files\NetMeeting\oncbe.lib
C:\Program Files\Google\ympmq.lib
Classification:Antivirus Version Last Update Result
F-Secure 9.0.15370.0 2010.03.09 Backdoor:W32/Zegost.A
Kaspersky 7.0.0.125 2010.03.09 -
McAfee 5915 2010.03.09 -
Microsoft 1.5502 2010.03.09 -
NOD32 4929 2010.03.09 Win32/TrojanDropper.VB.NNO
Additional information
File size: 360448 bytes
MD5 : 04fe80371e75d481479120dc771001a2
SHA1 : e7130e05169fbc5d80633320cafe24b786128a2c
SHA256: 6036df3bc1d189141f04ed1b4c96384ccd35062edef8609bab6efb57f300bfe1
http://greatis.com/blog/how-to-remove-ma...