PUP.YAC (Yet Another Cleaner)

By CagedTech in Potentially Unwanted Programs

Threat Scorecard

Ranking:	1,524
Threat Level:	10 % (Normal)
Infected Computers:	218,633

First Seen:	December 27, 2013
Last Seen:	May 1, 2024
OS(es) Affected:	Windows

Table of Contents

File System Details

PUP.YAC (Yet Another Cleaner) may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	aerdl.dll	0750556e1471fc9d823c30bc99b77a38	3,054
Name: aerdl.dll MD5: 0750556e1471fc9d823c30bc99b77a38 Size: 835.84 KB (835848 bytes) Detections: 3,054 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\ScanGuard\SAVAPI\aerdl.dll Group: Malware file Last Updated: May 1, 2024
2.	aedroid.dll	b2987d8a627afce56302498d912161f7	1,460
Name: aedroid.dll MD5: b2987d8a627afce56302498d912161f7 Size: 2.8 MB (2801640 bytes) Detections: 1,460 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\ScanGuard\SAVAPI\aedroid.dll Group: Malware file Last Updated: February 23, 2024
3.	aeheur.dll	edf1ff20c2277e9af3778757c987d14c	1,153
Name: aeheur.dll MD5: edf1ff20c2277e9af3778757c987d14c Size: 11.67 MB (11670584 bytes) Detections: 1,153 Type: Dynamic link library Group: Malware file Last Updated: January 25, 2024
4.	aescript.dll	9a639617aeeb415832e659714053fcab	1,075
Name: aescript.dll MD5: 9a639617aeeb415832e659714053fcab Size: 960.53 KB (960536 bytes) Detections: 1,075 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Glarysoft\Malware Hunter\Avira\aescript.dll Group: Malware file Last Updated: January 25, 2024
5.	aeoffice.dll	223b886130b8e2e03a3702dc92efe5a4	1,059
Name: aeoffice.dll MD5: 223b886130b8e2e03a3702dc92efe5a4 Size: 657.14 KB (657144 bytes) Detections: 1,059 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Glarysoft\Malware Hunter\Avira\aeoffice.dll Group: Malware file Last Updated: January 25, 2024
6.	aeexp.dll	16652e6d9b7d961e9f1ca93c94fcecb0	889
Name: aeexp.dll MD5: 16652e6d9b7d961e9f1ca93c94fcecb0 Size: 382.84 KB (382848 bytes) Detections: 889 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Glarysoft\Malware Hunter\Avira\aeexp.dll Group: Malware file Last Updated: January 25, 2024
7.	bas.dat	46721a65cc7400788bf58072f5ff70a6	792
Name: bas.dat MD5: 46721a65cc7400788bf58072f5ff70a6 Size: 87.04 KB (87040 bytes) Detections: 792 Type: Data file Group: Malware file Last Updated: March 5, 2024
8.	adb.dat	d08eb2854b761c9ec1e36d590790f776	736
Name: adb.dat MD5: d08eb2854b761c9ec1e36d590790f776 Size: 3.3 MB (3307995 bytes) Detections: 736 Type: Data file Group: Malware file Last Updated: March 5, 2024
9.	rms.dat	649172d71d4aca8496fba5e53fe940bc	731
Name: rms.dat MD5: 649172d71d4aca8496fba5e53fe940bc Size: 73.72 KB (73728 bytes) Detections: 731 Type: Data file Group: Malware file Last Updated: March 5, 2024
10.	nlu.dat	b6b096e15554281027b0ffe59e94a0b9	644
Name: nlu.dat MD5: b6b096e15554281027b0ffe59e94a0b9 Size: 28.67 KB (28672 bytes) Detections: 644 Type: Data file Group: Malware file Last Updated: March 22, 2024
11.	mic.dat	bf771c93b7f109934054742a262573e5	642
Name: mic.dat MD5: bf771c93b7f109934054742a262573e5 Size: 582.65 KB (582656 bytes) Detections: 642 Type: Data file Group: Malware file Last Updated: March 5, 2024
12.	stu.dat	3c13507f1e9bf138714daa4e04d98cfd	564
Name: stu.dat MD5: 3c13507f1e9bf138714daa4e04d98cfd Size: 394.24 KB (394240 bytes) Detections: 564 Type: Data file Group: Malware file Last Updated: February 2, 2024
13.	uis.dat	0744e7ed95e05352e420f290614ddf3d	563
Name: uis.dat MD5: 0744e7ed95e05352e420f290614ddf3d Size: 34.81 KB (34816 bytes) Detections: 563 Type: Data file Group: Malware file Last Updated: February 2, 2024
14.	aescn.dll	7a09731d5c7c6c6c97cb01ced6544e2b	522
Name: aescn.dll MD5: 7a09731d5c7c6c6c97cb01ced6544e2b Size: 158.41 KB (158416 bytes) Detections: 522 Type: Dynamic link library Path: %SYSTEMDRIVE%\RECOVERED DATA\Program Files (x86)\Avira\Antivirus\FAILSAFE\aescn.dll Group: Malware file Last Updated: April 6, 2024
15.	bwd.dat	21c4dd4e2c6f525aff8cb2f14deed567	218
Name: bwd.dat MD5: 21c4dd4e2c6f525aff8cb2f14deed567 Size: 12.28 KB (12288 bytes) Detections: 218 Type: Data file Group: Malware file Last Updated: March 5, 2024
16.	aeheur.dll	76b976f396c89864b9882716fc7bcca4	154
Name: aeheur.dll MD5: 76b976f396c89864b9882716fc7bcca4 Size: 11.62 MB (11620712 bytes) Detections: 154 Type: Dynamic link library Group: Malware file Last Updated: January 8, 2024
17.	aeheur.dll	8b6d7491e84612e8d41960c7d947c559	125
Name: aeheur.dll MD5: 8b6d7491e84612e8d41960c7d947c559 Size: 11.56 MB (11562528 bytes) Detections: 125 Type: Dynamic link library Group: Malware file Last Updated: April 6, 2024
18.	aeoffice.dll	4d3ddfdb2cc71137a953f4600acbdfa2	76
Name: aeoffice.dll MD5: 4d3ddfdb2cc71137a953f4600acbdfa2 Size: 636.36 KB (636368 bytes) Detections: 76 Type: Dynamic link library Path: C:\ProgramData\Avira\Antivirus\TEMP\UPDATE\ave2_sigver\8.3.48.80\win32\int\aeoffice.dll Group: Malware file Last Updated: July 30, 2023
19.	aescript.dll	7c7e2283049f3f69925fef29d3f5927b	76
Name: aescript.dll MD5: 7c7e2283049f3f69925fef29d3f5927b Size: 943.91 KB (943912 bytes) Detections: 76 Type: Dynamic link library Path: C:\ProgramData\Avira\Antivirus\TEMP\UPDATE\ave2_sigver\8.3.48.80\win32\int\aescript.dll Group: Malware file Last Updated: July 30, 2023
20.	aescript.dll	6bcaf7c0efa7e81ad45b1b5cdaa8badc	67
Name: aescript.dll MD5: 6bcaf7c0efa7e81ad45b1b5cdaa8badc Size: 948.06 KB (948064 bytes) Detections: 67 Type: Dynamic link library Path: C:\rei\AV\aescript.dll Group: Malware file Last Updated: December 9, 2023
21.	aeoffice.dll	e1425ddb4f01ba16112e2dbbcad0a0b5	62
Name: aeoffice.dll MD5: e1425ddb4f01ba16112e2dbbcad0a0b5 Size: 644.68 KB (644680 bytes) Detections: 62 Type: Dynamic link library Path: C:\rei\AV\aeoffice.dll Group: Malware file Last Updated: December 9, 2023
22.	aescript.dll	c7df4253d7a5820e0df791e3bbc26564	56
Name: aescript.dll MD5: c7df4253d7a5820e0df791e3bbc26564 Size: 910.66 KB (910664 bytes) Detections: 56 Type: Dynamic link library Path: C:\ProgramData\Reimage Protector\AV\aescript.dll Group: Malware file Last Updated: November 22, 2022
23.	aeoffice.dll	fa3300cf1ea41d8f295d5d1cfed351f6	52
Name: aeoffice.dll MD5: fa3300cf1ea41d8f295d5d1cfed351f6 Size: 636.36 KB (636368 bytes) Detections: 52 Type: Dynamic link library Path: %ALLUSERSPROFILE%\Innovative Solutions\AVBase_SAVAPI4\aeoffice.dll Group: Malware file Last Updated: January 8, 2024
24.	aegen.dll	266b1c726a11c338b3d30e5759ad9cb5	46
Name: aegen.dll MD5: 266b1c726a11c338b3d30e5759ad9cb5 Size: 702.86 KB (702864 bytes) Detections: 46 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Avira\AntiVir Desktop\aegen.dll Group: Malware file Last Updated: November 3, 2023
25.	A0023360.dll	d8e6dff3afe4138bd9b040af30f85918	26
Name: A0023360.dll MD5: d8e6dff3afe4138bd9b040af30f85918 Size: 914.81 KB (914816 bytes) Detections: 26 Type: Dynamic link library Path: C:\System Volume Information\_restore{E7314C0F-7E3D-4C97-B4A4-CBBE005B05D7}\RP41\A0023360.dll Group: Malware file Last Updated: February 28, 2023
26.	aescript.dll	83477e6b6db2ee55b95392c5cafc5f4f	24
Name: aescript.dll MD5: 83477e6b6db2ee55b95392c5cafc5f4f Size: 914.81 KB (914816 bytes) Detections: 24 Type: Dynamic link library Path: %SYSTEMDRIVE%\RECOVERED DATA\Program Files (x86)\Avira\Antivirus\aescript.dll Group: Malware file Last Updated: June 14, 2022
27.	aeoffice.dll	3851287dde16dd1c612788094ad917d4	16
Name: aeoffice.dll MD5: 3851287dde16dd1c612788094ad917d4 Size: 636.36 KB (636368 bytes) Detections: 16 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Avira\AntiVir Desktop\aeoffice.dll Group: Malware file Last Updated: August 11, 2022
28.	aescript.dll	e7b644bce09e7cf797a90ef8cae4e72b	16
Name: aescript.dll MD5: e7b644bce09e7cf797a90ef8cae4e72b Size: 948.06 KB (948064 bytes) Detections: 16 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Avira\AntiVir Desktop\aescript.dll Group: Malware file Last Updated: August 11, 2022
29.	eas.dat	7c0ce536cb12533f3d54cd23f56c1dad	3
Name: eas.dat MD5: 7c0ce536cb12533f3d54cd23f56c1dad Size: 86.01 KB (86016 bytes) Detections: 3 Type: Data file Group: Malware file Last Updated: April 11, 2020
30.	yac_setup.exe	1a126b528993fd081e9a1cda4ca2a96a	1
Name: yac_setup.exe MD5: 1a126b528993fd081e9a1cda4ca2a96a Size: 26.57 MB (26573648 bytes) Detections: 1 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\desktop\utilità\yac setup funzionante Group: Malware file Last Updated: May 25, 2023

More files

Registry Details

PUP.YAC (Yet Another Cleaner) may create the following registry entry or registry entries:

CLSID

{0EB9B9FE-3CEF-43E1-882A-853FC80021CE}

{5411D116-5A37-47D4-B154-5F7FCD9062F0}

File name without path

YAC.lnk

Regexp file mask

%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Depth clean up junk files.lnk

%WINDIR%\System32\drivers\iSafeKrnlBoot.sys

%WINDIR%\System32\drivers\iSafeNetFilter.sys

%WinDir%\System32\log\iSafeKrnlCall.log

HKEY..\..\..\..{RegistryKeys}

*\shellex\ContextMenuHandlers\iSafeRKScan

CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan

CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\iSafeRKScan

Directory\shellex\ContextMenuHandlers\iSafeRKScan

Folder\ShellEx\ContextMenuHandlers\iSafeRKScan

lnkfile\shellex\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Classes\*\shellex\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan

SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\iSafeRKScan

SOFTWARE\Elex-tech

SOFTWARE\iSafe

SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{0EB9B9FE-3CEF-43E1-882A-853FC80021CE}

SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{5411D116-5A37-47D4-B154-5F7FCD9062F0}

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe

SOFTWARE\Wow6432Node\Elex-tech

SOFTWARE\Wow6432Node\iSafe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe

SYSTEM\ControlSet001\Control\iSafeKrnlBoot

SYSTEM\ControlSet001\Enum\Root\LEGACY_ISAFEKRNL

SYSTEM\ControlSet001\Enum\Root\LEGACY_ISAFEKRNLKIT

SYSTEM\ControlSet001\Enum\Root\LEGACY_ISAFEKRNLR3

SYSTEM\ControlSet001\Enum\Root\LEGACY_ISAFENETFILTER

SYSTEM\ControlSet001\services\iSafeKrnl

SYSTEM\ControlSet001\services\iSafeKrnlBoot

SYSTEM\ControlSet001\services\iSafeKrnlKit

SYSTEM\ControlSet001\services\iSafeKrnlR3

SYSTEM\ControlSet001\services\iSafeNetFilter

SYSTEM\ControlSet001\services\iSafeService

SYSTEM\ControlSet002\Control\iSafeKrnlBoot

SYSTEM\ControlSet002\Enum\Root\LEGACY_ISAFEKRNL

SYSTEM\ControlSet002\Enum\Root\LEGACY_ISAFEKRNLKIT

SYSTEM\ControlSet002\Enum\Root\LEGACY_ISAFEKRNLR3

SYSTEM\ControlSet002\Enum\Root\LEGACY_ISAFENETFILTER

SYSTEM\ControlSet002\services\iSafeKrnl

SYSTEM\ControlSet002\services\iSafeKrnlBoot

SYSTEM\ControlSet002\services\iSafeKrnlKit

SYSTEM\ControlSet002\services\iSafeKrnlR3

SYSTEM\ControlSet002\services\iSafeNetFilter

SYSTEM\ControlSet002\services\iSafeService

SYSTEM\CurrentControlSet\Control\iSafeKrnlBoot

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISAFEKRNL

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISAFEKRNLKIT

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISAFEKRNLR3

SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISAFENETFILTER

SYSTEM\CurrentControlSet\services\iSafeKrnl

SYSTEM\CurrentControlSet\services\iSafeKrnlBoot

SYSTEM\CurrentControlSet\services\iSafeKrnlKit

SYSTEM\CurrentControlSet\services\iSafeKrnlR3

SYSTEM\CurrentControlSet\services\iSafeNetFilter

SYSTEM\CurrentControlSet\services\iSafeService

Directories

PUP.YAC (Yet Another Cleaner) may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\YAC

%APPDATA%\Elex-tech

%AppData%\eCyber

%AppData%\iSafe

%PROGRAMFILES%\Elex-tech

%PROGRAMFILES%\iSafe

%PROGRAMFILES(x86)%\Elex-tech

%PROGRAMFILES(x86)%\iSafe

%TEMP%\iSafeRightKeyScan

Promote SpyHunter via ShareASale & Get a 55% Payout

Search

Change Region

PUP.YAC (Yet Another Cleaner)

Threat Scorecard

EnigmaSoft Threat Scorecard

File System Details

Registry Details

Directories

Submit Comment

Trending

1xlite-230379.top

Webvalid.co.in

Nosa.co.in

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?