I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
3BA5E2.SYS – Trojan Qhost removal
| File | MD5 | Virus Alias |
|---|---|---|
| 3BA5E2.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Qhost |
| 3BA5E2.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Generic |
| 3BA5E2.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Eldorado |
| 3BA5E2.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Downloader |
| 3BA5E2.SYS | 0c5ffe9d6aa399fbe82cd7b1775e23d7 | Trojan Agent |
3BA5E2.SYS size: 55552 bytes
3BA5E2.SYS hash: 0C5FFE9D6AA399FBE82CD7B1775E23D7
Created files:
%SysDir%\drivers\3ba5e2.sys
%Temp%\Uttig\xiype.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\3ba5e2\Type: 01000000
HKLM\System\CurrentControlSet\Services\3ba5e2\Start: 01000000
HKLM\System\CurrentControlSet\Services\3ba5e2\DisplayName: xiype.exe
HKLM\System\CurrentControlSet\Services\3ba5e2\ImagePath: %WinDir%\System32\drivers\3ba5e2.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Xiype: “%Temp%\Uttig\xiype.exe”
Detected by UnHackMe:
3BA5E2.SYS
Default location: %SYSDIR%\DRIVERS\3BA5E2.SYS
Dropper information:
MD5: 4f4fc5229f0720f3da8c1300caf2376c
File size: 500224 bytes