libmySQL50.dll – Trojan QQPass

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

libmySQL50.dll – Trojan QQPass removal

FileVirus Alias
libmySQL50.dll Trojan QQPass
libmySQL50.dll Trojan Bancos
libmySQL50.dll Trojan ADH
libmySQL50.dll Trojan Banload
libmySQL50.dll Trojan Agent
libmySQL50.dll Trojan Delf

Created files:

C:\Gbs_W0.exe – Trojan QQPass
C:\Gbs_W0.pic – Trojan QQPass
C:\libmySQL50.dll – Trojan QQPass
C:\__tmp_rar_sfx_access_check_1204461 – Trojan QQPass

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RUN\Gbs_W0: C:\Gbs_W0.exe

Detected by UnHackMe:

libmySQL50.dll
Default location: C:\libmySQL50.dll

Dropper information:
SHA256: 0d0bea3ecb90060c6a4f563677f10f688099a22aeec002ab14c1b34d6441dac1
SHA1: 271d782fc93d016b74ad68581ceff2d75ffc317d
MD5: 757fa70e72ded37c0ef7b3f97fa3c37f
File size: 1615871 bytes

Leave a Reply