Emsisoft Malware-Info

Name: Adware.Win32.Yuanquana

Risklevel: Low Risk

Description:

This application contains Adware.Win32.BaiduBar.

Removal instructions for Adware Yuanquana:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware Yuanquana.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Screenshots:

YuanquanaYuanquanaYuanquanaYuanquanaYuanquanaYuanquana

Used folders:

  • C:\Program Files\baidu\bar\
  • C:\Program Files\baidu\bar\BDBar_tmp\
  • C:\Program Files\baidu\bar\icon\
  • C:\Program Files\baidu\bar\img\
  • C:\Program Files\?????????????\
  • C:\Program Files\?????????????\Uninstall\
  • C:\WINDOWS\
  • C:\WINDOWS\system32\
  • C:\WINDOWS\system32\drivers\etc\
  • C:\WINDOWS\?????????????\
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\_ir_sf7_temp_0\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\?????????????\

Used files:

  • C:\Program Files\baidu\bar\BaiduBar.cab
    [619201 Bytes] CAB File
  • C:\Program Files\baidu\bar\baidubar.dat
    [27326 Bytes] DAT File
  • C:\Program Files\baidu\bar\BaiduBar.dll
    [1228923 Bytes] DLL File
  • C:\Program Files\baidu\bar\baidubar_versionex.txt
    [819 Bytes] TXT File
  • C:\Program Files\baidu\bar\bang.ini
    [41418 Bytes] INI File
  • C:\Program Files\baidu\bar\loadmovie.swf
    [1689 Bytes] SWF File
  • C:\Program Files\baidu\bar\BDBar_tmp\BaiduBar.dll
    [1228923 Bytes] DLL File
  • C:\Program Files\baidu\bar\icon\adicon0.ico
    [2550 Bytes] ICO File
  • C:\Program Files\baidu\bar\img\imglist.bmp
    [8244 Bytes] BMP File
  • C:\Program Files\baidu\bar\img\logo.bmp
    [2616 Bytes] BMP File
  • C:\Program Files\?????????????\applist.cfg
    [169 Bytes] CFG File
  • C:\Program Files\?????????????\BandRule.cfg
    [14 Bytes] CFG File
  • C:\Program Files\?????????????\bandsched.dll
    [61440 Bytes] DLL File
  • C:\Program Files\?????????????\ReadMe.txt
    [737 Bytes] TXT File
  • C:\Program Files\?????????????\reset_log.txt
    [0 Bytes] TXT File
  • C:\Program Files\?????????????\ScreenCapture.dll
    [133753 Bytes] DLL File
  • C:\Program Files\?????????????\?????????????.exe
    [1527808 Bytes] EXE File
  • C:\Program Files\?????????????\?????????????.ini
    [11 Bytes] INI File
  • C:\Program Files\?????????????\Uninstall\IRIMG1.JPG
    [2355 Bytes] JPG File
  • C:\Program Files\?????????????\Uninstall\IRIMG2.JPG
    [8760 Bytes] JPG File
  • C:\Program Files\?????????????\Uninstall\uninstall.dat
    [60384 Bytes] DAT File
  • C:\Program Files\?????????????\Uninstall\uninstall.xml
    [6425 Bytes] XML File
  • C:\WINDOWS\????????????? Setup Log.txt
    [7774 Bytes] TXT File
  • C:\WINDOWS\system32\iexp_log.txt
    [374 Bytes] TXT File
  • C:\WINDOWS\system32\drivers\etc\hosts
    [734 Bytes] File
  • C:\WINDOWS\?????????????\uninstall.exe
    [451072 Bytes] EXE File
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\???µ???.url
    [92 Bytes] URL File
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\???????.url
    [92 Bytes] URL File
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\????????.url
    [92 Bytes] URL File
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\??????.url
    [89 Bytes] URL File
  • C:\Documents and Settings\All Users\Start Menu\Programs\?????????\?????t.url
    [88 Bytes] URL File
  • C:\Documents and Settings\[USER]\Cookies\index.dat
    [32768 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Cookies\virus demo@baidu[2].txt
    [173 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Cookies\virus demo@utk.baidu[1].txt
    [89 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\?????????????1.21.lnk
    [1646 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\_ir_sf7_temp_0\irsetup.exe
    [451072 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\_ir_sf7_temp_0\yuanquana.exe
    [474612 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    [81920 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\fh[1].js
    [2094 Bytes] JS File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\sobar_top_moreerror[1].htm
    [1194 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\BaiduBar[1].cab
    [143360 Bytes] CAB File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\ff[1].js
    [1398 Bytes] JS File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\logo-yy[1].gif
    [1618 Bytes] GIF File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\objlist[1].dat
    [119 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\getip[1].xml
    [66 Bytes] XML File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\moreerror[1].htm
    [11514 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\sobar_dns[1].css
    [1292 Bytes] CSS File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\sobar_top_total[1].htm
    [41418 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\ecom[1].htm
    [22 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\KillHB[1].dat
    [602 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\sobar_iframe_moreerror[1].htm
    [588 Bytes] HTM File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\?????????????\ReadMe.lnk
    [1602 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\?????????????\?????????????1.21.lnk
    [1658 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\?????????????\??? ?????????????.lnk
    [1711 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware Yuanquana Search at Google for Adware Yuanquana
Search at Bing for Adware Yuanquana Search at Bing for Adware Yuanquana
Search at Yahoo for Adware Yuanquana Search at Yahoo for Adware Yuanquana

How can I protect myself from Adware Yuanquana?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software