Emsisoft Malware-Info
Name: Adware.Win32.Yiqilai
Risklevel: Low Risk
Description:
Yiqilai make modification to the victim machine, like install a BHO, modify registry, create new services, and makes a lot of Favorites shorcut.
Removal instructions for Adware Yiqilai:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Yiqilai.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Installation: Installed through EXE
Used folders:
- C:\Program Files\Winamp\Plugins\
- C:\Program Files\Yiqilai\
- C:\Program Files\Yiqilai\foobar\
- C:\Program Files\Yiqilai\iTunes\
- C:\Program Files\Yiqilai\lib\
- C:\Program Files\Yiqilai\realplayer\
- C:\Program Files\Yiqilai\Temp\
- C:\Program Files\Yiqilai\tools\
- C:\Program Files\Yiqilai\winamp\
- C:\Program Files\Yiqilai\wmp\
- C:\WINDOWS\system32\
- C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\
- C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\wmp\
- C:\Documents and Settings\All Users\Application Data\Microsoft\Outlook Express\
- C:\Documents and Settings\All Users\Start Menu\Programs\h????????????\
- C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
- C:\Documents and Settings\[USER]\Favorites\
- C:\Documents and Settings\[USER]\Favorites\??????????\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\
Used files:
- C:\Program Files\Winamp\Plugins\gen_yqllyrics.dll
[53248 Bytes] DLL File - C:\Program Files\Winamp\Plugins\vis_yqllyrics.dll
[72192 Bytes] DLL File - C:\Program Files\Yiqilai\Uninstall.exe
[48672 Bytes] EXE File - C:\Program Files\Yiqilai\foobar\foo_ui_columns.dll
[592384 Bytes] DLL File - C:\Program Files\Yiqilai\foobar\foo_ui_yqllyrics.dll
[142336 Bytes] DLL File - C:\Program Files\Yiqilai\iTunes\iTunesYQLyrics.dll
[114688 Bytes] DLL File - C:\Program Files\Yiqilai\lib\YQL_Lyrics_Common.dll
[517120 Bytes] DLL File - C:\Program Files\Yiqilai\realplayer\RealYQLyrics.rpv
[65536 Bytes] RPV File - C:\Program Files\Yiqilai\Temp\foo_ui_columns.dll
[592384 Bytes] DLL File - C:\Program Files\Yiqilai\Temp\foo_ui_yqllyrics.dll
[142336 Bytes] DLL File - C:\Program Files\Yiqilai\Temp\gen_yqllyrics.dll
[53248 Bytes] DLL File - C:\Program Files\Yiqilai\Temp\iTunesYQLyrics.dll
[114688 Bytes] DLL File - C:\Program Files\Yiqilai\Temp\RealYQLyrics.rpv
[65536 Bytes] RPV File - C:\Program Files\Yiqilai\Temp\vis_yqllyrics.dll
[72192 Bytes] DLL File - C:\Program Files\Yiqilai\tools\GetMusic.exe
[368640 Bytes] EXE File - C:\Program Files\Yiqilai\tools\music.dll
[60688 Bytes] DLL File - C:\Program Files\Yiqilai\tools\YiqilaiLyrics.exe
[228352 Bytes] EXE File - C:\Program Files\Yiqilai\winamp\gen_yqllyrics.dll
[53248 Bytes] DLL File - C:\Program Files\Yiqilai\winamp\vis_yqllyrics.dll
[72192 Bytes] DLL File - C:\Program Files\Yiqilai\wmp\YiqilaiLyrics.dll
[139776 Bytes] DLL File - C:\WINDOWS\system32\winldr.atd
[204800 Bytes] ATD File - C:\WINDOWS\system32\YQL_Lyrics_Common.dll
[517120 Bytes] DLL File - C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\YiqilaiLyrics_2001.exe
[798275 Bytes] EXE File - C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\wmp\mtlrd.sys
[231044 Bytes] SYS File - C:\Documents and Settings\All Users\Application Data\Microsoft\Outlook Express\2371.exe
[143073 Bytes] EXE File - C:\Documents and Settings\All Users\Start Menu\Programs\h????????????\???h????????????.lnk
[1427 Bytes] LNK File - C:\Documents and Settings\All Users\Start Menu\Programs\h????????????\h??????????????.lnk
[1495 Bytes] LNK File - C:\Documents and Settings\All Users\Start Menu\Programs\h????????????\h???????????????.url
[57 Bytes] URL File - C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[883 Bytes] LNK File - C:\Documents and Settings\[USER]\Favorites\zhaoda123???????.url
[51 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\???????.url
[241 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\???????????.url
[120 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????.url
[64 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\????'??.url
[81 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\?????.url
[71 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\h????????????.url
[48 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\???????.url
[63 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\???????II.url
[58 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\?????????.url
[182 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\????????.url
[63 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\???Online.url
[60 Bytes] URL File - C:\Documents and Settings\[USER]\Favorites\??????????\??????.url
[63 Bytes] URL File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\_inimac
[17 Bytes] File
Additional information might be found here:
Search
at Google for
Adware Yiqilai
Search at Bing for
Adware Yiqilai
Search
at Yahoo for
Adware Yiqilai
How can I protect myself from Adware Yiqilai?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here


















