Solved! Use OPEKZTBZF.DLL (Trojan QQPass) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

OPEKZTBZF.DLL – Trojan QQPass removal

File MD5 Virus Alias
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan QQPass
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan Artemis
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan XPACK
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan Generic
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan OnLineGames
OPEKZTBZF.DLL e8b0e8f34b1628b296a91b233a5d2983 Trojan Agent

OPEKZTBZF.DLL size: 112128 bytes
OPEKZTBZF.DLL hash: E8B0E8F34B1628B296A91B233A5D2983

Created files:

%SysDir%\opekztbzf.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\WS2IFSL\Type: 01000000
HKLM\System\CurrentControlSet\Services\WS2IFSL\Start: 01000000
HKLM\System\CurrentControlSet\Services\WS2IFSL\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\WS2IFSL\DisplayName: Windows Socket 2.0 Non-IFS Service Provider Support Environment
HKLM\System\CurrentControlSet\Services\WS2IFSL\ImagePath: \SystemRoot\System32\drivers\ws2ifsl.sys

Detected by UnHackMe:

OPEKZTBZF.DLL
Default location: %SYSDIR%\OPEKZTBZF.DLL

Dropper information:
MD5: 5d673d1bd3fa2f14a6a39617dd7e4f83
File size: 131072 bytes

Leave a Reply