Remove YAKDO.EXE malware
YAKDO.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of YAKDO.EXE:
yakdo.exe
Full path on a computer: %COMMON APPDATA%\YAKDO\YAKDO.EXE
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yakdo.exe
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yakdo.exe\GlobalFlag: 0x00000200
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe\IgnoreSelfExits: 0x00000001
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\YAKDO.EXE\MONITORPROCESS: "%COMMON APPDATA%\WINDOWS MONITOR\MONITOR.EXE %I DEVICEID=1BED8369-5481-99B3-CBE2-0AEF52719B95 CHANNELID=888 DISTRIBUTER=APSFREC PROCESSNAME=YAKDO.EXE STATSADDRESS=HTTP://STATS.IJNEWHB.COM/STATISTICSSERVICE.SVC/V1/JSON/LOGEVENT"
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe\ReportingMode: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\YAKDO\IMAGEPATH: "%COMMON APPDATA%\\YAKDO\\YAKDO.EXE -F "%COMMON APPDATA%\\YAKDO\\YAKDO.DAT" -L -A"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\WINDOWS ERROR REPORTING\DEBUG\STORELOCATION: "%COMMON APPDATA%\MICROSOFT\WINDOWS\WER\REPORTQUEUE\APPCRASH_YAKDO.EXE_50C5228B0D7FE16AB75CF531D1C18D4D7B1DB1_DA46C6B1_11B7101B"
Related Files:
%COMMON APPDATA%\YAKDO\YAKDO.D.DAT
%COMMON APPDATA%\YAKDO\YAKDO.DAT
%COMMON APPDATA%\YAKDO\YAKDO.EXE
%COMMON APPDATA%\YAKDOS\FF.HP
%COMMON APPDATA%\YAKDOS\FF.NT
The file YAKDO.EXE is malware related.
You must delete the file YAKDO.EXE immediately!
Delete the file YAKDO.EXE without delay!
Kill the process YAKDO.EXE and remove YAKDO.EXE from the Windows startup.
YAKDO.EXE is related to: Gen:Variant.Zusy.187178 (B), YAKDO.EXE.
Virustotal = 17/55
MD5 = E71A250C9934C7D99EECEE58CB7ECD7F
File Size: 692736
| YAKDO.EXE | Malware |
| YAKDO.EXE | Dangerous |
| YAKDO.EXE | High Risk |
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yakdo.exe
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yakdo.exe\GlobalFlag: 0x00000200
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe\IgnoreSelfExits: 0x00000001
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\YAKDO.EXE\MONITORPROCESS: "%COMMON APPDATA%\WINDOWS MONITOR\MONITOR.EXE %I DEVICEID=1BED8369-5481-99B3-CBE2-0AEF52719B95 CHANNELID=888 DISTRIBUTER=APSFREC PROCESSNAME=YAKDO.EXE STATSADDRESS=HTTP://STATS.IJNEWHB.COM/STATISTICSSERVICE.SVC/V1/JSON/LOGEVENT"
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\yakdo.exe\ReportingMode: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\YAKDO\IMAGEPATH: "%COMMON APPDATA%\\YAKDO\\YAKDO.EXE -F "%COMMON APPDATA%\\YAKDO\\YAKDO.DAT" -L -A"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\WINDOWS ERROR REPORTING\DEBUG\STORELOCATION: "%COMMON APPDATA%\MICROSOFT\WINDOWS\WER\REPORTQUEUE\APPCRASH_YAKDO.EXE_50C5228B0D7FE16AB75CF531D1C18D4D7B1DB1_DA46C6B1_11B7101B"
Related Files:
%COMMON APPDATA%\YAKDO\YAKDO.D.DAT
%COMMON APPDATA%\YAKDO\YAKDO.DAT
%COMMON APPDATA%\YAKDO\YAKDO.EXE
%COMMON APPDATA%\YAKDOS\FF.HP
%COMMON APPDATA%\YAKDOS\FF.NT
The file YAKDO.EXE is malware related.
You must delete the file YAKDO.EXE immediately!
Delete the file YAKDO.EXE without delay!
Kill the process YAKDO.EXE and remove YAKDO.EXE from the Windows startup.
YAKDO.EXE is related to: Gen:Variant.Zusy.187178 (B), YAKDO.EXE.
Virustotal = 17/55
MD5 = E71A250C9934C7D99EECEE58CB7ECD7F
File Size: 692736
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.