home

yet_another_cleaner_gam.exe

YAC Security Protection

Elex do Brasil Participações Ltda

The application yet_another_cleaner_gam.exe by Elex do Brasil Participaçõesa has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.yac.mx and multiple other hosts.
Publisher:
Elex do Brasil Participações Ltda  (signed and verified)

Product:
YAC Security Protection

Description:
Setup

Version:
1.0.19.13243

MD5:
791331cdc7e2fd1b075e2f56ff3ae3bf

SHA-1:
3e9886fabbe6cbad0e164d86969002f8a81572d0

SHA-256:
51af389703ac798410c4be7f64a67c28099732accb95af4e136a9c367b1cd0f6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/14/2024 5:51:01 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Installer.X
14.7.16.11

File size:
756.9 KB (775,112 bytes)

Product version:
1.0.19.13243

Copyright:
Copyright (c) 2011-2014 Elex do Brasil Participações Ltda

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\yet_another_cleaner_gam.exe

Digital Signature
Signed by:
Elex do Brasil Participações Ltda

Authority:
VeriSign, Inc.

Valid from:
6/22/2014 9:00:00 PM

Valid to:
6/20/2015 8:59:59 PM

Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=São Paulo, S=São Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5C6950D0A05A1CD63164D1E1EB1FFB8A

File PE Metadata
Compilation timestamp:
7/15/2014 4:52:53 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:hty6AxOVYlgqHF6YLjB8n2f+e8uQFRAP9Es5UJF1SI2vxD:iqqlJjV+eWFRi5I1svxD

Entry address:
0xFB25

Entry point:
E8, 80, 50, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 94, 77, 42, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, A8, 60, 42, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, 94, 77, 42, 00, 00, 0F, 83, A7, 01, 00, 00, F7...
 
[+]

Code size:
112.5 KB (115,200 bytes)

The file yet_another_cleaner_gam.exe has been seen being distributed by the following 50 URLs.

http://www.yac.mx/download/.../down.php?pt=dnt

http://www.yac.mx/download/.../down.php?pt=brod

http://dl_151.yac.mx/download/.../yet_another_cleaner_broe.exe

http://ads.adsrvmedia.com/event/click/0/l_sDMiMqBc_IU3ZmUizv4Uac7JB-QrqyTL0Mhpt348TDBNmA7xa_iY10nhiJTajuCEZ53J2MS6iiWM7u_yKYeaP6TeaDQ9cgnNf5UnpuEcBIH2nlhMz1hnx37ziG8KzuWkeZwEI4CuxQWdbXy_TpLpJMs6wFPgXRe-ZGdD88mj_Q0vWDT6UHjbKCX_6yc-YcZoDGm58xw0mWpARzBgx3tPHWkSHQunVTSx2tN3iiMwlnb8hBQBYZ9xD_fcleMqVb_386h5A8sMroylNnCOTKMmYqtWMNmvv0ABr83Qz-uBeACkKQMM4M0WvIlw_ML8W9UTlfCpPyvUBUvTyyiyEN5FXCxYl3yRtxuYcSIO-fKTB-6OCI2VeIKi41faf7PO4NPBS-5cN8qqUbRkH66KK-1fAplVyZY-c5Dk11wZYh8XQudnRERfvH0m0TNA/.../

http://adm.soft365.com/ads/adsavess?sid=yac&ptid=mmacn&subid=kOFQGNE5X-ufTjk2QL1oZLU-_g4Q6vfr9BSB-1JumX3dEagi8WF9BNB51aZDkWhrVViNjaEz6W89e0XjotgDqFxlOxb4ZCVDICOlsYovuj02Qcg9B3fzObGF5jc3sjLDucsimoYMjQ1vVr0hAcSClz69sSUKZqJGuXZxg1U80inRiXa0eh4RTjdbtK26MaG8KS8TcRa9QizhTlU4psChZKL9Jdb3LRl5713PIBlQxXi3XPEFrVCPwT0apGhM66ODlRQ20dZ3nd62vaHt1bk-JCPtyGAIITTeKv5ZMQ-NmyEoifBzjMyaFU0nkGYgt5-Ldr-97j5IzWl3mDiD8jO_zl1IhR46WlB7L9Z8xTxATzKuJ_LN6_QM6BhStKtH8z61sh4ll3DDLNCksatNCdjRzp95mTxIKFS-BUEz9EglPvaa_d08U_Hg5QN-gppr5g&lplink=http://www.yac.mx/download/.../down.php?pt=mmacn

http://www.yac.mx/download/.../down.php?pt=dnp

http://nym1.ib.adnxs.com/click?vPX3-g_elz-Fzk0QWs-TP-F6FK5H4eY_hc5NEFrPkz-79ff6D96XP4i3paa6Xzt-Afk1GE-ANkydxsVTAAAAAHqJLwCtBwAAdgIAAAIAAABxbPoAY6oGAAAAAQBVU0QAVVNEANgCWgCmjAAAEqkAAgUAAQIAAJIA2SrbIQAAAAA./cnd=!XQexRQjzmvQBEPHY6QcY49QaIAA./referrer=http://www.speedanalysis.net/?cid=4425&ax=1&clickid=0070178227674011918&ext_inv_code=104082&dfpid=101104082&oid=7691/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=nym1CIHy18HxiaCbTBACGIjvlrWq99edfiILNzIuNTAuODYuNDkoATCdjZeeBQ..&lplink=http://www.yac.mx/download/config/down.php?pt=broe

http://lax1.ib.adnxs.com/click?bnfLjXOyuT9ud8uNc7K5P8P1KFyPwsU_bnfLjXOyuT9ud8uNc7K5P-3kYWmnE_RnOgWQmc90zX-2ls5TAAAAANubJAB2AgAAdgIAAAIAAACQKQABFbAFAAAAAQBVU0QAVVNEACADuAFsvgAAbsUAAgQAAQIAAI4AxyrFJgAAAAA./cnd=!wAVgNQiC64YCEJDTgAgYleAWIAQ./referrer=http://ib.adnxs.com/tt?id=2399195/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=lax1CLqKwMz5md3mfxACGO3Jh8v29IT6ZyIOMTg5LjI0OC4yMDQuNjYoATC2rbqeBQ..&lplink=http://www.yac.mx/download/config/down.php?pt=broe

http://ads.adsrvmedia.com/event/click/0/k260tcvJl8PiED5Un1i93ZJYcSMsk6Wm_OZdllcFNTJV-pl4HNAZ3nIMCqF48qbKjoZqKArb96LaGnFy-X8VpBufeFUcyyqXsNlXxEiHBNAmSCKMOD8MMi2NEoolCMvSL6QTMOflaxYWcYT2U5uNe5I8IZTqepe9-YwY6QfvBJk47KYTJsCcLWZfIsu6Bofo4xrjdS2RhWEWaSwTNHJr0bzX58iI-6Na4-QS9bG2l1nT5LtGxm9GvdaseFnjaXyl8fkod2_KhM5HB4gTieJGZKvCn9GELC-Ieohs6_BJnxTSudg_mp9cdHfB9tY2OU-XwzyyR_wIol5Fj35JbrTw7EaVIKfPDd8bDHaxnwYNfo_0nnwoTD5W5D4XgKLRLSeklZ58XmT8Um8ZuD7NNPsdn0qre3shBN2RQ22gs1LE06UB4raeuaEw/.../

http://nym1.ib.adnxs.com/click?wvd-i8QNvT_C936LxA29P-58PzVeutE_wvd-i8QNvT_C936LxA29P2Pdg8WAKN0E787DRbAYRVVNA8dTAAAAAN3REQB2AgAAdgIAAAIAAADIBvkACxsDAAAAAQBVU0QAVVNEACADuAGP1wAAyOMAAgQAAQIAAIQA2SrgFQAAAAA./cnd=!YQbJPgjwmvQBEMiN5AcYi7YMIAQ./referrer=http://ads.qadserve.com/t?id=a6e2c721-e653-4c40-9b6f-3b9a2dc8e6c5&size=800x440&iframe=true/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=nym1CO-dj66ElsaiVRACGOO6j6yMkMruBCIPMTkwLjEzNS4yMDYuMTUyKAEwzYacngU.&lplink=http://www.yac.mx/download/config/down.php?pt=broe

http://ads.adsrvmedia.com/event/click/0/ygILK9KgULZdruJF_AZ5LoGVhBA-53w42dIo3G6uC13VZRx-EmP9vfapRivVEPbBADaG9MKE8-LEU_IPfVFvqqV4AVh-BVwk8svJC3xRwUHRrU_8Q8Bz5KStiqf9MgnuPOYIdacKdKBMfGSLiaRZz7D06sEYvM_03a0tk28MINQHIYiXDGZcIcbQNxXLMyTOW1BDLLbGMe48ELdw_be8A89neDMWhn6TVT2I940cSpgE56wUyT9AcG_GzrLg0JBW2CY4D301InqkI5WBwFos7Z8bZZnsuMwCXJCqqFk37bJ_vj-tX2Wo8PfUOGUyA0EVbCWwP0fRjDEyu1lVjEfOworPD7nBsTWRDnv4FTj2aSUeCK3W6P0maOv0GyHL-tXn9mwLbAfCuytbQD_y6nRI80IUsq04eBhsRigFdex8jrjULA/.../

http://ams1.ib.adnxs.com/click?1hiH3CbhkD-ymQQJySmKP4ts5_up8bI_spkECckpij_WGIfcJuGQP6OC0YzWxv0kImkKJXGX_1c8FstTAAAAADEsJwCZBwAAdgIAAAIAAAA96eYAF9cFAAAAAQBVU0QAVVNEANgCWgDRmQAAJLgAAgUAAQIAAI4AKCim9wAAAAA./cnd=!LgbpOwi_m_QBEL3SmwcYl64XIAE./referrer=http://www.youtube.com/watch?v=A656QSqM6k4/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CKLSqaiS7uX_VxACGKOFxubo2vH-JCIMMzcuMzEuMjUuMjA1KAEwvKysngU.&lplink=http://www.yac.mx/download/config/down.php?pt=broe

http://dl_149.yac.mx/download/.../yet_another_cleaner_rkl.exe

http://www.yac.mx/download/.../down.php?pt=smt

http://adm.soft365.com/ads/adsavess?sid=yac&ptid=mmacn&subid=grRM3qWH0N5VnsJo6dtES4UNUZo4hSnnJyq0X7STRN01s1whoIAFa4-Gg05O7snL81TGMkJ6dLcmhHFESrkOcSVvUObcL4wC_A9azXgG_nU7CdsMJXUHUW-1uw7i86kUjNCFihTqayt8HVysAWEiZK5YigIQhfZvvyVHnEFECW7SyEp0n2yXRprTcK0C3N5As3m2OSWbhaUrhNvBA0mBiA7VtOlUqQHksrwngI7rgUEFGd2VHcaaVICux_vg_Al47FqFG_6ZlGWVTKp6bvADSoEmSloZFxaduNqvf18jKyLehbA7Q4runUMysTpH8_VzftugLsFNfSmow6l2_YRXUTQmB4EiWO5wZj4uFZmyHg1EQuWvtXKdtcATxiHVy3HpJ4Hk0ywlAcaXvOPBRQC3I-xT0-MRQsasb5lEoyTmVOH4YtKpAKDAztPKAPa1LmE&lplink=http://www.yac.mx/download/.../down.php?pt=mmacn

http://nym1.ib.adnxs.com/click?20oaDyDjpD_bShoPIOOkP3npJjEIrLw_20oaDyDjpD_bShoPIOOkP1phv_2ATKseU3_Abjm0AjkNweJTAAAAAKGLLQB2AgAAdgIAAAIAAAAbgxMB-7oGAAAAAQBVU0QAVVNEACwB-gCYUgAA068AAgQAAQIAAJIALyQRRgAAAAA./cnd=!ZQZiOQirwqACEJuGzggY-_UaIAQ./referrer=http://peliculas2k.net/page/?v=http://peliculas2k.net/archivos/342/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=nym1CNP-gfaWh62BORACGNrC_e2PkNPVHiIMMTkwLjAuOTkuMTM3KAEwjYKLnwU.&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://ads.adsrvmedia.com/event/click/0/cTOys5Bl0Tnp_9U1rptdUT5c9NKPaQ-O8VV-xjYwu4KO1OM9AyYt0upJ5-ZIrUcYZa32plSyFS15T3AJ3FGf5N1ByDFZ8Jq4rwo0KT7tFETg7PdGXz2m38ClBz82wyNiudusLgRsmX26DcGogUhk1UFEXqSAs8MPS0ojYhMh4ocpXX-liqmzIYE6OORFpqRFdnzT3QOM7jITOWnq61sMv7sjrP2_fQCyBg7UmicrXTyAesbGnfRQU5anVNlgfTrklMaAlrpWArvgxsDnbY6rNLCKJVm_2vMaOHvEfuxRSE8V5vtgq_CVpdl8aQV--tjk3-GLn3lrFS1ESYVFzP-SI6i-WZ7nMZX8O9AB-IRRwhvvUZaImjBWIjoPOOuouMsdeLZ7phnD4YZhQOs9U7erKdu4-czLhscwULnvmx9L6-zqr80/.../

http://lax1.ib.adnxs.com/click?exSuR-F6hD9YObTIdr5_PwAAAAAAAPA_WDm0yHa-fz97FK5H4XqEP49-ZPjs0998eWrc_or7V0kahNVTAAAAAH_ZMQBXAwAAdgIAAAIAAABlbPoA2rkGAAAAAQBVU0QASU5SACwB-gB49gAA-boAAgUAAQIAAJIAGCkahgAAAAA./cnd=!YAcfRQjsmvQBEOXY6QcY2vMaIAA./referrer=http://www.youtube.com/watch?v=KFeHFOqlqJs/clickenc=http://lax1.ib.adnxs.com/click?4m31s7MMgT98PrnZsop_PwAAAAAAAPA_fD652bKKfz_ibfWzswyBP_VfajC4js11eWrc_or7V0kWhNVTAAAAAAnVMQB2AgAAEAkAAAIAAAB-jg4Bt_oGAAAAAQBVU0QAVVNEACwB-gD79gAALsUDAQUAAQIAAJIAuCiy3QAAAAA./cnd=!zQZTQAja5JkCEP6cuggYt_UbIAA./referrer=http://www.youtube.com/watch?v=KFeHFOqlqJs/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=lax1CPnU8fav8f6rSRACGI_9kcPP_fTvfCIPMjAxLjE3MC4xNjYuMTEyKAEwmojWngU.&lplink=http://www.yac.mx/download/config/down.php?pt=broe

http://ams1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAMuhRbbz_eQ_AAAAAAAAAAAAAAAAAAAAAK1b-rbNo_0TW1ww2mLa_nSsReJTAAAAAIChIAB2AgAAdgIAAAIAAAATgBMBJ0MFAAAAAQBVU0QAVVNEACADuAEgCAAAKHkAAgQAAQIAAAAAGBj5EAAAAAA./cnd=!ywUIOQj-q6ACEJOAzggYp4YVIAQ./referrer=http://ads.qadserve.com/t?id=cb259dc5-83c0-4bcd-ba12-ad991ff001e5&size=800x440&iframe=true/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CNu4wdGtzLb_dBACGK236bfb-ej-EyILOTIuMTM5LjUuMTIoATCsi4mfBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://dl_149.yac.mx/download/.../yet_another_cleaner_afd.exe

http://ams1.ib.adnxs.com/click?guN-xAXNsj-C437EBc2yP7gehetRuL4_guN-xAXNsj-C437EBc2yP7il4sLWxLMlS2cofDuS71XUeNZTAAAAANubJAB2AgAAdgIAAAIAAACQKQABFbAFAAAAAQBVU0QAVVNEACADuAFsvgAAc2cAAgQAAQIAAI4ApCrXOQAAAAA./cnd=!wAVgNQiC64YCEJDTgAgYleAWIAQ./referrer=http://ib.adnxs.com/tt?id=2399195/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CMvOoeG3x-T3VRACGLjLipfsmvHZJSIONjIuMTE3LjE0MS4yMTMoATDU8dmeBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://adm.soft365.com/ads/adsavess?sid=yac&ptid=mmacn&subid=4RmUROTHJRU8PVbtfcsYFo1oG7bKoTM8XhmDwlglvslbhSgkjFzDNEpRQc60gluHxIVSyps001PziQqeguzfvwx8_MP0qdM9ILHKFu6lEjd5fW79YHc6fzPVJ1nbu6H4Lztt5IXRRxESZBT_DCim1fWYPR0VY6NgDUN5eDgilqs8PiX3RJOVXiERV_qekA193NEIz2uTWtu1ZG-GlLAOZ03Cut-L6gJh0RjA5hksqhwrWcMpkiE1-7xDoGMPU31eQVDJ2sM9Q_yb3TKMNvyosaRPMf8UnQp4Ptb_EyifEkQQnB556Y3m9JKUMlexzerdeFesVjTCMpciFugtuMLl0S6p4Es_gIujnqXxrkXwdTvUr3tuvgRUggwQYyIrx8ov97Ddbm_dfOaFu45L24uzRfjdOW0_YhC4pEJTWYa_zKF1S6Dew4RrFEmtIasgLA&lplink=http://www.yac.mx/download/.../down.php?pt=mmacn

http://lax1.ib.adnxs.com/click?yDgIaHXLvD_IOAhodcu8P6AaL90kBsE_yDgIaHXLvD_IOAhodcu8P6pkZQsRmjxiedDkpFAa2nDqP9RTAAAAANubJAB2AgAAdgIAAAIAAACQKQABFbAFAAAAAQBVU0QAVVNEACADuAFsvgAATpEAAgQAAQIAAI4AniQkxwAAAAA./cnd=!wAVgNQiC64YCEJDTgAgYleAWIAQ./referrer=http://ib.adnxs.com/tt?id=2399195/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=lax1CPmgk6eKyobtcBACGKrJlduQwqaeYiIPMTkwLjE3OC4xNzguMTM4KAEw6v_QngU.&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://adm.soft365.com/ads/adsavess?sid=yac&ptid=mmacn&subid=CPryJJRm9ctH9Vrvz0jVX08Fs7WOdEAa4X5KIdr6_dy6fYcDrzOpA2O2EyaOI0yvS9hDZ_AXYwPL5T3tAfPWWTl1NdXHTEYkZnNIxUy252L_votlOnQAU9d47jODfZfwIRy1cd7wfDMVEACLUsNWlwktxdv16PELG56BVf2He6hfOEI3XNnVqcWrxhB2NNrO_29BvYqXeLVDPvKLFN80KnJliwKMRrKTVFpyzlh0ZL1ThWvK7MOIwJtovVp451ObHCOAI2NXxDXBG9oWwgtPv7AjTL_zTLJPvPQSO9wehSGoj7npHydOXhxiwEdiwx7jyy3c8_kWirbgkIoh1SEIp5ynqDSzehd5QEI-mbXjKjJnDY7k7X-Nrs5v7m1s_ew9zzZ3KS9hyl0XOpZ6CiPytdLyhOQj5dhdxnc68sIzoKNZxYXOvk98LigUSGFxWA&lplink=http://www.yac.mx/download/.../down.php?pt=mmacn

http://fra1.ib.adnxs.com/click?Pwa51BFftD8_BrnUEV-0PyGwcmiR7bw_Pwa51BFftD8_BrnUEV-0P5ZMqmXoDZ4EP2S74QbsvDO9gslTAAAAAH_vLAB2AgAAdgIAAAIAAADEBvkA_eEEAAAAAQBVU0QAVVNEACwBWAJqsQAA3dkAAgQAAQIAAJAA9yawCAAAAAA./cnd=!4wYkQQjwmvQBEMSN5AcY_cMTIAQ./referrer=http://filosusainas.over-blog.es/pages/filosofia-para-ni-os-la-propuesta-de-matthew-lipman-6003974.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CL_I7Y3ugLveMxACGJaZqa2GvYPPBCILODUuNTcuNzYuMjUoATC9haaeBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://lax1.ib.adnxs.com/click?ehSuR-F6tD9YqDXNO06xPwAAAAAAAPA_WKg1zTtOsT97FK5H4Xq0P7ARkOaXCPpPlETBbc46ajfPKsxTAAAAAEOpMAA_AQAAdgIAAAIAAABlbPoA5qEGAAAAAQBVU0QAVVNEACwB-gC3xgAAAsUAAgUAAQIAAJIAvSROUwAAAAA./cnd=!3QaRPwik9IICEOXY6QcY5sMaIAA./referrer=jco.mappre.net/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=lax1CJSJhe7m2Y61NxACGLCjwLT-koL9TyINMTg5LjE2NC4yMC44MSgBMM_VsJ4F&lplink=http://www.yac.mx/download/.../down.php?pt=broe

https://adsrvmedia.adk2.net/event/click/0/NMr-iPcat-OcdeRx7L4aOW7JPBEscGoI6jzRxEdhz02sTJyl9xEffZHBiCT6f-934ikz0NW4O1UykzJlOHDvJ51r1dCR2MEOXtragLCbSuY7chcsB-itmcEZeDeyRik7x6_SIO5CSQo52_oAhOeD6fWWU__X7IeY2ftVb0krr_JzzLzPZueRwW5tM5x9oxUpk5HdkSFi7zVfscFQyCvtUD856_g7C6L71CbF8LEfEeUw_wbC1Hrvb2jiY0c74G2hcbcM23shZtU-YxZj-3DgingvERLTKi5yrpd4sSuG6Tfa_ieSLdXGnvNUup7oHBkmklEzt6kLrEVhGBKiTk6mhEQcDKziC7ZvLP1g2ARiohc6dh0uWFn_LKOAQ4D4Be2BYZCjXfhUE8JBTDcwEcOo_cGm4GeNAUk/.../

http://www.yac.mx/download/.../down.php?pt=mmab

http://fra1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAIlBYOXQIrs_AAAAAAAAAAAAAAAAAAAAALxQnbvUEYVNeNMuumS8EBXlLuNTAAAAAHWhIAB2AgAAdgIAAAIAAAAagBMBJ0MFAAAAAQBVU0QAVVNEACwB-gCkXgAAls0AAgQAAQIAAJIAHRfCBQAAAAA./cnd=!0gVOOQj-q6ACEJqAzggYp4YVIAQ./referrer=http://www.evz.ro/delta-dunarii-inchisoarea-nevinovatilor-931784.html/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=fra1CPimu9HLjK-IFRACGLyh9dzLusTCTSIMNS4xMy4yMDYuMTc0KAEw5d2MnwU.&lplink=http://www.yac.mx/download/.../down.php?pt=broe

http://apx.rdkt.avazutracking.net/.../redirect.php?apxcode=811735&id=eWGQe3jMIWuXKT9HezjMIWuXeTeRmb-0N-0N

Latest 30 of 121 download URLs

Remove yet_another_cleaner_gam.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.