I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
128AB5.SYS – Trojan Qhost removal
| File | MD5 | Virus Alias |
|---|---|---|
| 128AB5.SYS | 8268541ef8acf1ed4fc1d308ab6d3734 | Trojan Qhost |
| 128AB5.SYS | 8268541ef8acf1ed4fc1d308ab6d3734 | Trojan Generic |
| 128AB5.SYS | 8268541ef8acf1ed4fc1d308ab6d3734 | Trojan Eldorado |
| 128AB5.SYS | 8268541ef8acf1ed4fc1d308ab6d3734 | Trojan Downloader |
128AB5.SYS size: 66688 bytes
128AB5.SYS hash: 8268541EF8ACF1ED4FC1D308AB6D3734
Created files:
%SysDir%\drivers\128ab5.sys
%Temp%\Dioxo\geaze.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\128ab5\Type: 01000000
HKLM\System\CurrentControlSet\Services\128ab5\Start: 01000000
HKLM\System\CurrentControlSet\Services\128ab5\DisplayName: geaze.exe
HKLM\System\CurrentControlSet\Services\128ab5\ImagePath: %WinDir%\System32\drivers\128ab5.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Geaze: “%Temp%\Dioxo\geaze.exe”
Detected by UnHackMe:
128AB5.SYS
Default location: %SYSDIR%\DRIVERS\128AB5.SYS
Dropper information:
MD5: 2a7042fc955b1fdeee2da166440937b0
File size: 418816 bytes