Remove QYPLAYER.EXE malware
QYPLAYER.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of QYPLAYER.EXE:
qyplayer.exe
Full path on a computer: %PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE
Autostart registry keys:
HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\QyPlayer.exe: 0x00002AF8
HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING\QyPlayer.exe: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{A430AB39-545C-4726-8439-F2CE9A11942F}: "V2.10|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|APP=%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE|NAME=???PPS?? ?????|DESC=%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE|"
HKCU\Software\Microsoft\Direct3D\MostRecentApplication\Name: "QyPlayer.exe"
Related Files:
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYMISC.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYMISC64.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLUGIN.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLUGIN64.DLL
The file QYPLAYER.EXE is malware related.
You must delete the file QYPLAYER.EXE immediately!
QYPLAYER.EXE is related to: Adware ( 004f25f51 ), QYPLAYER.EXE.
Virustotal = 2/57
MD5 = 53263CA53A6F434ED315167CC6D445B9
File Size: 862608
File information:
OriginalFilename: QyPlayer.exe
FileDescription: ???PPS?? ?????
InternalName: QyPlayer.exe
CompanyName: ???
LegalCopyright: Copyright (C) 2016 ??? All Rights Reserved
QYPLAYER.EXE | Malware |
QYPLAYER.EXE | Dangerous |
QYPLAYER.EXE | High Risk |
Autostart registry keys:
HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\QyPlayer.exe: 0x00002AF8
HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING\QyPlayer.exe: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\{A430AB39-545C-4726-8439-F2CE9A11942F}: "V2.10|ACTION=ALLOW|ACTIVE=TRUE|DIR=IN|APP=%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE|NAME=???PPS?? ?????|DESC=%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE|"
HKCU\Software\Microsoft\Direct3D\MostRecentApplication\Name: "QyPlayer.exe"
Related Files:
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYMISC.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYMISC64.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLAYER.EXE
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLUGIN.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.4.28.3179\QYPLUGIN64.DLL
The file QYPLAYER.EXE is malware related.
You must delete the file QYPLAYER.EXE immediately!
- Uninstall QYPLAYER.EXE using Windows uninstallation applet (use Add/Remove Programs or Uninstall Program or Apps & features).
- Open Task Manager and terminate "QYPLAYER.EXE" processes.
- Use Windows search to find and remove "QYPLAYER.EXE" files and folders.
- Run services.msc and disable a "QYPLAYER.EXE" Windows service.
- Execute taskschd.msc to get rid of "QYPLAYER.EXE" scheduled tasks.
- Open regedit.exe and delete QYPLAYER.EXE registry keys and values.
- Inspect the properties of your desktop and Start menu shortcuts for QYPLAYER.EXE presence and "http://" links.
- Open your browser and disable QYPLAYER.EXE plugins. Disable all unknown plugins. Reset the browser settings.
- Clean your Recycle bin and temporary files.
- Restart your computer and check results.
QYPLAYER.EXE is related to: Adware ( 004f25f51 ), QYPLAYER.EXE.
Virustotal = 2/57
MD5 = 53263CA53A6F434ED315167CC6D445B9
File Size: 862608
File information:
OriginalFilename: QyPlayer.exe
FileDescription: ???PPS?? ?????
InternalName: QyPlayer.exe
CompanyName: ???
LegalCopyright: Copyright (C) 2016 ??? All Rights Reserved
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.