I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
FINDPICTURE5_03.DLL – Trojan SuspiciousFile removal
| File | MD5 | Virus Alias |
|---|---|---|
| FINDPICTURE5_03.DLL | 6ee7eddc96cc9e1da63b133d9495f617 | Trojan SuspiciousFile |
| FINDPICTURE5_03.DLL | 6ee7eddc96cc9e1da63b133d9495f617 | Trojan Agent |
FINDPICTURE5_03.DLL size: 61440 bytes
FINDPICTURE5_03.DLL hash: 6EE7EDDC96CC9E1DA63B133D9495F617
Created files:
%Program Files%\%Program Files%\laass.exe
%AppData%\qmacro\qdisp.dll
%TEMP%\cfgdll.dll
%TEMP%\plugin\BKGND.DLL
%TEMP%\plugin\COLOR.DLL
%TEMP%\plugin\FILE.DLL
%TEMP%\plugin\FINDPICTURE5_03.DLL
%TEMP%\plugin\MEDIA.DLL
%TEMP%\plugin\MEMORY.DLL
%TEMP%\plugin\PIC.DLL
%TEMP%\plugin\REGDLL.DLL
%TEMP%\plugin\SR.DLL
%TEMP%\plugin\SRG.DLL
%TEMP%\plugin\SYS.DLL
%TEMP%\plugin\WINDOW.DLL
%TEMP%\plugin\WINDOWEX5_01.DLL
%TEMP%\???????(??).exe
Autostart registry keys:
HKLM\Software\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9} : Microsoft Windows Script 5.8
HKLM\Software\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}\IsInstalled: 01000000
HKLM\Software\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}\Version: 5,8,6001,18702
HKLM\Software\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}\Locale: EN
HKLM\Software\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}\ComponentID: MSVBScript
HKLM\System\CurrentControlSet\Services\Winsock\ConnectGroup: 1??17
HKLM\System\CurrentControlSet\Services\Winsock\MyVerSion: 2011
Detected by UnHackMe:
FINDPICTURE5_03.DLL
Default location: %TEMP%\PLUGIN\FINDPICTURE5_03.DLL
Dropper information:
MD5: 38bcbc0c4fd8ed816a91589861824cd8
File size: 2158074 bytes