I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
195C7F.SYS – Trojan Qhost removal
| File | MD5 | Virus Alias |
|---|---|---|
| 195C7F.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Qhost |
| 195C7F.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Generic |
| 195C7F.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Eldorado |
| 195C7F.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Downloader |
| 195C7F.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Agent |
195C7F.SYS size: 55552 bytes
195C7F.SYS hash: 0C5FFE9D6AA399FBE82CD7B1775E23D7
Created files:
%SysDir%\drivers\195c7f.sys
%Temp%\Xueheh\haire.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\195c7f\Type: 01000000
HKLM\System\CurrentControlSet\Services\195c7f\Start: 01000000
HKLM\System\CurrentControlSet\Services\195c7f\DisplayName: haire.exe
HKLM\System\CurrentControlSet\Services\195c7f\ImagePath: %WinDir%\System32\drivers\195c7f.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Haire: “%Temp%\Xueheh\haire.exe”
Detected by UnHackMe:
195C7F.SYS
Default location: %SYSDIR%\DRIVERS\195C7F.SYS
Dropper information:
MD5: 5ad5f31b4efb7d13ceb8776ee63f0607
File size: 434688 bytes