OPUEDQ.SYS – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

OPUEDQ.SYS – Trojan Agent removal

FileMD5Virus Alias
OPUEDQ.SYS 589312a3b46721c5a751e4d5222a89be Trojan Agent
OPUEDQ.SYS 589312a3b46721c5a751e4d5222a89be Trojan Banker

OPUEDQ.SYS size: 61440 bytes
OPUEDQ.SYS hash: 589312A3B46721C5A751E4D5222A89BE

Created files:

C:\cleanup.exe
%SysDir%\drivers\opuedq.sys
C:\zip.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\Cleanup: C:\cleanup.exe
HKLM\System\CurrentControlSet\Services\osjxynht\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006F00700075006500640071002E007300790073000000
HKLM\System\CurrentControlSet\Services\osjxynht\Type: 01000000
HKLM\System\CurrentControlSet\Services\osjxynht\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\osjxynht\yapdvci: \??\%WinDir%\System32\uowhrvtx.txt
HKLM\System\CurrentControlSet\Services\osjxynht\uarrpjux: %WinDir%
HKLM\System\CurrentControlSet\Services\osjxynht\meuju: 5CFF0000
HKLM\System\CurrentControlSet\Services\osjxynht\Group: jtbmhs

Detected by UnHackMe:

OPUEDQ.SYS
Default location: %SYSDIR%\DRIVERS\OPUEDQ.SYS

Dropper information:
MD5: cd4c476f88176b958a10b218f01616a0
File size: 1025024 bytes

Leave a Reply