Sogou

Detected Items

1. Detected Files: %TEMP%\services.exe MD5: 5BB45C4FEF42BBF681575CD4AB183680 Size:1293824 MD5: F62C899906425DBC253DEAC0B0FA66D5 Size:90112 MD5: FF4943E3B3596E12F4C735FC8B71A831 Size:90112 MD5: 6199772371E1D9AA71C9F2B811BD89AC Size:1332736 MD5: 538EB5A886F83CBC2F8C52BDBD1ADE77 Size:110592 MD5: B0FE74719B1B647E2056641931907F4A Size:8192 MD5: AF47B14EE31BF6739D11BB1D60B09025 Size:184320 MD5: 907F748EEE26F2EDED26A9FBA6FBCF4B Size:1903616 MD5: 06F058EE1C88409F29882B6F6A791C7C Size:37888 MD5: 1F2E2798F95710D07C7ABE1A5B3FB9F7 Size:51712 MD5: 0BA9D90B62684E7B9E101A5180CECF05 Size:251868 MD5: 9CBD65A0B07F48B31F97AA71CBF0C080 Size:37888 and more.... %TEMP%\services.exe MD5: 0539DA89D67A8E32893D67FB87B2F21B Size:76800 MD5: BC1CF579D9505B77A02FA9E2B2607ACB Size:38656 MD5: 5BC629E4E907F98B46759567DFB8FDA2 Size:37888 MD5: CC1255CBAF561067CE5820C99F6778EA Size:66560 MD5: 81213144D3F1795359DDD791B257FDC0 Size:1904640 MD5: DBA39E78D54196454BE5E43443082E33 Size:37888 MD5: 9891422BB728E4DE752B61BE34FAC9AB Size:58368 MD5: DB0FF6BC083B0F2D700493BAFD36B329 Size:1332736 MD5: 3538FFDF13441A4AB76292D2F2660513 Size:37888 MD5: 5ED1356AE4C8790E81E1BA8424DA2F47 Size:1720064 MD5: C00EE2C97AE08D4BEADD666582703AA4 Size:37888 MD5: 5EAE08C107FCC3E764C07FED30F4F27B Size:1331712 and more.... %COMMONFILES%\CPUSH\cpush0.dll MD5: D6AD049FDDFC8C7839EEBD17F2FAEE47 Size:196608 MD5: BA4C95E8AB173CEE301E04346309A733 Size:196608 MD5: 44E1718FE43DEDB3523120E04A8A292D Size:196608 MD5: 049D082E33235BF9ACD5537FFE2792F2 Size:196608 MD5: 0E66A90603B5D8B6A134AE2B4ABC231E Size:196608 MD5: DC545FF73DAB3ECC3B527E8E0476FB33 Size:192512 MD5: 2AD18BFCFF733FA6D11011BE92E48614 Size:192512 MD5: 928ABDC8986F08148D4F319396E499B5 Size:192512 MD5: 39C062DFEA02DC0E78B091A2083B92EF Size:192512 MD5: A26813A7A57B43AF9A0D9FF62ADFA50D Size:192512 MD5: D90AE048AA4B7746BE8F38ABC9E09F90 Size:188416 MD5: 2DDEFAC81AF1815AD9E4408F6838088A Size:180224 and more.... %COMMONFILES%\CPUSH\cpush1.dll MD5: D71D26438032266DD1B57DEDE195AD80 Size:196608 MD5: 70CBCA58729AB95231E5BC3F149DCCFA Size:196608 MD5: C147036CCAD4B7581EA3C37B4B938AF9 Size:192512 MD5: 9D60F0ED6082C169BB3E29A00F7C9766 Size:192512 MD5: FB0F8F2B2D8820875CFBCF4B5317A59E Size:184320 MD5: 9D35B039DB7983F1FD293ECA243CAA8E Size:176128 %TEMP%\services.exe MD5: 899652E870BE9239C606F5256BE572C9 Size:4128 MD5: 6FA5E533E45E29F19AB2B028C51046EC Size:37888 MD5: E1A39654C29C6CFC5EE3560006AD2BA5 Size:72192 MD5: 62C4EEA2D319BBB12B90A94403A88832 Size:37888 MD5: 2744CD8A2E552502B304977159A15F23 Size:136192 MD5: 41BD24848925015ABAD0035E333E5133 Size:74240 MD5: 2223C243B067A2F03E66531AF5038D3B Size:2818048 MD5: 210B045A0061880AB94F72ECD20CA89C Size:110592 MD5: CE976D90203A90C91F131EEB5C1A187B Size:134144 MD5: AE495961356F14818F466CF719AB724B Size:50688 MD5: C371C41497404A3EEFBAA20A0639C216 Size:1030472 MD5: 427FF0316D5C96F59D81AE641668BE30 Size:37888 and more.... %TEMP%\services.exe MD5: 5DA51036FEFDF4C7F7DB390A094DE4E6 Size:110592 MD5: FA67760CAC50B5E8AC2A71DF5FC63518 Size:76800 MD5: 427EF4B9F566CEFD2F466B242640D0F2 Size:131584 MD5: 0648499D59F03EFB27A63A0734C796A9 Size:37888 MD5: 62865D2C6692BDDBD30BD5051300C9D2 Size:818670 MD5: A953E160CB16562AFA24E61759863B9A Size:37888 MD5: E2A1A659573F1ECB18803BA8D30FD3FB Size:110592 MD5: 576664575D77F6DD087C3046015E3016 Size:155648 MD5: 7B35F1C5B2D332EB8AF2EC8D573A0B63 Size:6377472 MD5: 9D8017FF5B89730D0F55A9384B5E19C6 Size:37888 MD5: 0E3EBCCD80449D4E93B8F58C9C7DBAC2 Size:81920 MD5: 678C3BDCFE0C3A9B00D4AF029700583C Size:37888 and more.... %TEMP%\services.exe MD5: 428847D1C51B29FB4C0770FA9438EEBB Size:37888 MD5: 9AC96A173237512CC54942DBFE3A6D45 Size:37888 MD5: 8E5254CFE37F1FB2A1DFA56D95EFFF3E Size:181951 MD5: 73DBBD295FA0871106E313CA18C2FB78 Size:36890 MD5: 82860F74C50BCCC56DC0DE77BBE292E4 Size:66560 MD5: B89E553BC9E0EC153824EC2836ED7DB8 Size:54272 MD5: 7DBFB08DBDD86FCFE5841866E4948493 Size:66560 MD5: 76D8A7CCCF5BFE11AAB56B2F70FC4DCB Size:99328 MD5: 7D6961F5279F0F6E985B02C3C4EFA09C Size:95232 MD5: CD0DD7AAC49FDBCDBEBDE16D4EAE12D6 Size:54272 MD5: 7AD8BE129E1181D30749EDAE8A134FA0 Size:39168 MD5: 99105FBA20AA6DA01CEC33188C8BFC16 Size:49664 and more.... %COMMONFILES%\CPUSH\Uninst.exe MD5: 96AD3998A15A0189E02572BFFECCAA0D Size:110879 %SYSDIR%\aelupsvc32.dll MD5: 81DF8D3B2E4F9E5BFE3174694CD25E77 Size:167936 %COMMONFILES%\CPUSH\cpush.dll MD5: 2DFB592A614CE84A0B3A9C267CB9E5A1 Size:176128 MD5: 8ABEC8030B5EFD121B826B3226353EEA Size:176128 MD5: 9D448F959B29FD2621F71F261D6663D8 Size:180224 MD5: 63550DE3EB8B4A45F35804B83C9EE34A Size:192512 MD5: 1E53896C7C4CDA4F4B4125A8546D1B65 Size:192512 MD5: 92A6E8D2B15692C0AAB928500F58C9E8 Size:188416 MD5: 012913263E6816FD2EA3C27616A504D0 Size:180224 MD5: D2DECD3CB929F9BE910444D0A619116F Size:180224 MD5: AC6871B1BA7311E863C4950699233BDC Size:180224 MD5: 1C7F4E005D6CA4245E077840CEC75EB0 Size:176128 MD5: CB2E56B84DE227C1FA20FE5B693216B8 Size:172032 MD5: EF1727D21D589060FDC1C9D4F0A78289 Size:180224 and more.... %TEMP%\services.exe MD5: 5776F0C3C9619A26DB6F7F4192E02819 Size:46056 MD5: A557E095809B9B11AAF5F5803C3EE4D9 Size:244184 MD5: 4714B17D2657C7BCAD78A986DE9D3577 Size:847532 MD5: 5EE4F86FE3E813477500DC4051CB8BD1 Size:74240 MD5: 4BCF5A9AE7DE640DD414D4D1CEB1BBF2 Size:37888 MD5: 3A4A0315DE2A0A54E8EE40D3C8402CE9 Size:37888 MD5: A63FE196E32B6D181B4533D34072EABA Size:37888 MD5: 9C3F112C14ACC2E129488B9A49E92422 Size:110592 MD5: C257F581BEBF7F29AC0734082D1D8C62 Size:212543 MD5: A6BDCFB4433276048E8A310A6D22CFE5 Size:66560 MD5: 578D238811D429AAEB86D50B70CC0F33 Size:37888 MD5: 8E0D7BC9FEF458DD1DB59C259C578245 Size:76800 and more.... %TEMP%\services.exe MD5: 077027590A48BBB724F80B699BCF09FE Size:14898 MD5: D3BF0A0862FF915530118815EFC10F54 Size:58368 MD5: 760345AF665967D9FE8B47A346342A93 Size:37888 MD5: F63D96B96F8DF14FDA5AB9C826BD3E9B Size:66560 MD5: F04C0B04D04E31052454A34079D64EEE Size:37888 MD5: 8B5BC6793FADD181E9396C3B5DA893D0 Size:116225 MD5: BDF5A5D72FA11636B7FA559693C5F03D Size:37888 MD5: B8585DDB35E479ED334343B76F13A9D6 Size:54272 MD5: A4D6B7D34B19E6ABA692FBEDA66002B5 Size:37888 MD5: F5D07E9B6B566C1957C3271B4B4DE9D1 Size:2197504 MD5: 1849FDB64BA396C1991C06B69CD413FC Size:54272 MD5: 99BFFFEFC2C3A4D590B39B5C8D2A4AED Size:58368 and more.... %TEMP%\services.exe MD5: 55A4288D556C31FCF5E20678162C30BD Size:66560 MD5: 40352EE92EECBB5A634F1429DC030451 Size:37888 MD5: F0694AF7C1B294BB53FAF6BEA7CEC335 Size:134144 MD5: A1A21DF25E81FA6860C83D986B8B7CFA Size:58368 MD5: 9F50A76C1EAEAD4A6DCBBE8FA5562C08 Size:37888 MD5: 57F9FEBFDF52B14196095E8FA6C10820 Size:74240 MD5: AF8A4DE306468820622E11802879F1D4 Size:74240 MD5: 394BE1D5B35B031A94AE51C6F05E3967 Size:108544 MD5: A51A4252F571DA2AB7CCA9D352FF45EC Size:39168 MD5: A0564331E227B87300ECA561D4460FF9 Size:37888 MD5: 2A3CBC4B9D3895BCD76220A0D6FD61A5 Size:37888 MD5: 8C1772A32758F115385FEC2F87367E1D Size:95232 and more.... %TEMP%\services.exe MD5: 94C7C3B5C7DFF3DC6B62E24934B70666 Size:58368 MD5: E53830093969D379A3D40EB6537D1FC4 Size:49152 MD5: D9E548DFBB1BC42A8DC5A607849B2015 Size:66560 MD5: 74374900A56321B3A2372596071241DE Size:66560 MD5: 5DC6EE3F170F6640956B268ED26CF703 Size:58368 MD5: B2FBB6F5FF07B3972EA516011C75AC4D Size:37888 MD5: 28934C1E59E9FFA967B8BB7BAAE5623A Size:78337 MD5: C7641C919C0CEE5434C5B42C30910933 Size:37888 MD5: B127A301D0FA21C3407FA1FD71FAA89B Size:1408512 MD5: 9EC11588C5AC1B93E3B99E4510014928 Size:44540 MD5: D0690B65457CFF20B53BFB4C6AF39DD2 Size:54272 MD5: 907E47681015FD2F7125B5544BC9CB88 Size:64156 and more.... %TEMP%\services.exe MD5: 95487878BC7E44F174C52390B1BF3175 Size:37888 MD5: C2D23B2015005F7A27CE5BCA51ABC3CD Size:155648 MD5: CCE3996D2AA2FB46EC03A02ABB0F148A Size:59904 MD5: BDF3C516DE6279E46A382EA898C18890 Size:58368 MD5: D33E1E610C2A7F5B01D813B1A28B0C1E Size:216064 MD5: 132E112D6EB58BEAA729088935F944F5 Size:38400 MD5: 0139F4DC80870CC6B272F5DD1FBC394A Size:143360 MD5: C8E262AD0843758F63AB7AA36317DF57 Size:1036256 MD5: 4A710C669371650DDAAF741D1EE52931 Size:39168 MD5: 480ABBE032306B18B513D55158A26BEA Size:74240 MD5: D89D065AD6F8D586F184BC1623A41A29 Size:37888 MD5: 5DD26E38AC62C4622F3BA7DFA9517734 Size:1155840 and more.... %TEMP%\services.exe MD5: 2122C3E684B544124251D5F30C9F8E48 Size:37888 MD5: 405A02873048A8C6B57C3422B56EC3A9 Size:46056 MD5: 6B22CEB7A2E8EC7F0960D467DEB732D5 Size:37888 MD5: 4520BE164362ACB06C0F16A7A129224B Size:176128 MD5: D1DB1860CE98F04C6E8791F5AF9494CE Size:51712 MD5: 9B5F675892A63643CA13668B6A0E3939 Size:110592 MD5: 9F7775773320FFD5350B64F3FA883AF0 Size:102400 MD5: DADD41C7C5FACFDEB5A31A8CFDA85135 Size:1710848 MD5: 278DA1031D42EDC5F1B5CEA33CD14CF3 Size:50176 MD5: 35C360E4E257A7873255EC30E64C8435 Size:1331712 MD5: E8E704A4E3FAFC1E034695129510E575 Size:50432 MD5: 777A2C2E7C9043A34C81CED2FFE3C583 Size:76800 and more.... %TEMP%\services.exe MD5: B830B138110BD91394B37FAC5695925E Size:46056 MD5: 1F51F887E1E8CA35E10116BFBB1136B2 Size:95232 MD5: E7638AF4C3BA75925D6EC5A79DC5DF24 Size:937612 MD5: 53934374071FA717BAC8DA682B0D0031 Size:1186816 MD5: 4452EC7E62583510302652AF4BAFF358 Size:1711360 MD5: 406F242BCEE411C8E728F571FEDFB954 Size:37888 MD5: B66DDE8542011B9536833F3E7BD4471F Size:37888 MD5: F9852F505E0699BB83D5C6321917040B Size:108544 MD5: DA8AB8A116C623BA154EE3729A31410E Size:160768 MD5: E3DF4A0252D287C44606EE55355E1623 Size:101376 MD5: 15157D15E999E88074DF1B3EA30CE7A0 Size:64156 MD5: 298F2EBEBE67732B25CAEC1FDC471055 Size:1331200 and more.... %TEMP%\services.exe MD5: 7BEAF8B220A54EF59002E73DA6570EF3 Size:430 MD5: 2EC31352A715EB5C770640EDA5B1856A Size:6656 MD5: 5D8A7967E8DAB3008F6E35F4AAB3205E Size:74240 MD5: 6C0007AA8B00F4FAF91982560FF90625 Size:64156 MD5: 23AD4701F8DB2704DF46EF8C7804A4E4 Size:66560 MD5: 5A3032C83D4327CF2F5E576E3A6B3E50 Size:37888 %COMMONFILES%\CPUSH\cpush.dll MD5: 29ABECC1B4A92A6A443960674608E093 Size:180224
2. Detected Files with variable Filenames: MD5: 805C90E5AF7EDDBC52D5030A1D8BD2CA Size: 33055 %COMMONFILES%\CPUSH\Uninst.exe %COMMONFILES%\CPUSH\uninst.exe.ren MD5: 2AD18BFCFF733FA6D11011BE92E48614 Size: 192512 %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush1.dll MD5: 39C062DFEA02DC0E78B091A2083B92EF Size: 192512 %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush0.dll.vir %COMMONFILES%\CPUSH\cpush1.dll %COMMONFILES%\CPUSH\cpush0.dll.ren MD5: 9D448F959B29FD2621F71F261D6663D8 Size: 180224 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush.dll.ren %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush0.dll.ren %COMMONFILES%\CPUSH\cpush1.dll MD5: 63550DE3EB8B4A45F35804B83C9EE34A Size: 192512 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll MD5: 1E53896C7C4CDA4F4B4125A8546D1B65 Size: 192512 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush1.dll MD5: 92A6E8D2B15692C0AAB928500F58C9E8 Size: 188416 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll MD5: FB0F8F2B2D8820875CFBCF4B5317A59E Size: 184320 %COMMONFILES%\CPUSH\cpush1.dll %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush.dll MD5: D90AE048AA4B7746BE8F38ABC9E09F90 Size: 188416 %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush.dll.ren %COMMONFILES%\CPUSH\cpush0.dll.ren MD5: D2DECD3CB929F9BE910444D0A619116F Size: 180224 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll MD5: AC6871B1BA7311E863C4950699233BDC Size: 180224 %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll MD5: 2DDEFAC81AF1815AD9E4408F6838088A Size: 180224 %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush.dll MD5: C12F5C9CBD2D67432A96FD9CFF4D9396 Size: 180224 %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll.ren

Detecting items list:

1. Files by Name %COMMONFILES%\CPUSH\cpush.dll %COMMONFILES%\CPUSH\cpush0.dll %COMMONFILES%\CPUSH\Uninst.exe %ALLUSERS_APPDATA%\Microsoft\UserData\IEHelper_5080.dll %SYSDIR%\aelupsvc32.dll %TEMP%\__djiekfhkda %TEMP%\_checktemptest %TEMP%\_dcfcount %TEMP%\_inifid %TEMP%\_inifiletime %TEMP%\_inimac %TEMP%\_inireg %TEMP%\ad703.exe %TEMP%\services.exe %TEMP%\wenzi_s.exe %TEMP%\p_star_1.jpg
2. Files by Directories %COMMONFILES%\CPUSH
3. Files by CLSID or Name CLSID=11F09AFD-75AD-4E51-AB43-E09E9351CE16 CLSID=16B770A0-0E87-4278-B748-2460D64A8386 CLSID=34A12A06-48C0-420D-8F11-73552EE9631A CLSID=CDE9EB54-A08E-4570-B748-13F5DDB5781C
4. Registry Keys HKCR\IEHelper.MyIEHelper HKCR\IEHelper.MyIEHelper.1 HKCR\NewAdPopup.PopupBlock HKCR\NewAdPopup.PopupBlock.1 HKCR\NewAdPopup.ToolbarDetector HKCR\NewAdPopup.ToolbarDetector.1 HKCR\NewMediaPopup.DdLogic HKCR\NewMediaPopup.DdLogic.1 HKLM\SOFTWARE\cpush HKLM\SOFTWARE\LtAndCj HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11F09AFD-75AD-4E51-AB43-E09E9351CE16} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{16B770A0-0E87-4278-B748-2460D64A8386} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ContentMatch HKLM\SOFTWARE\Sohu R&D HKCU\Software\cpush HKLM\software\Classes\NewAdPopup.PopupBlock HKLM\software\Classes\NewAdPopup.PopupBlock.1 HKLM\software\Classes\NewAdPopup.ToolbarDetector HKLM\software\Classes\NewAdPopup.ToolbarDetector.1 HKLM\software\Classes\NewMediaPopup.DdLogic HKLM\software\Classes\NewMediaPopup.DdLogic.1

• O podpoře
• Nápověda
• Průvodce
• FAQ
• Řešení falešných poplachů
• Tipy

• Databáze softwaru
• O spywaru