45FD53.SYS – Trojan Qhost

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

45FD53.SYS – Trojan Qhost removal

FileMD5Virus Alias
45FD53.SYS 0c5ffe9d6aa399fbe82cd7b1775e23d7 Trojan Qhost
45FD53.SYS 0c5ffe9d6aa399fbe82cd7b1775e23d7 Trojan Generic
45FD53.SYS 0c5ffe9d6aa399fbe82cd7b1775e23d7 Trojan Eldorado
45FD53.SYS 0c5ffe9d6aa399fbe82cd7b1775e23d7 Trojan Downloader
45FD53.SYS 0c5ffe9d6aa399fbe82cd7b1775e23d7 Trojan Agent

45FD53.SYS size: 55552 bytes
45FD53.SYS hash: 0C5FFE9D6AA399FBE82CD7B1775E23D7

Created files:

%SysDir%\drivers\45fd53.sys
%Temp%\Ople\fixaj.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\45fd53\Type: 01000000
HKLM\System\CurrentControlSet\Services\45fd53\Start: 01000000
HKLM\System\CurrentControlSet\Services\45fd53\DisplayName: fixaj.exe
HKLM\System\CurrentControlSet\Services\45fd53\ImagePath: %WinDir%\System32\drivers\45fd53.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Fixaj: “%Temp%\Ople\fixaj.exe”

Detected by UnHackMe:

45FD53.SYS
Default location: %SYSDIR%\DRIVERS\45FD53.SYS

Dropper information:
MD5: a1032b661f137d7debcda9284c5a2b36
File size: 433664 bytes

Leave a Reply