I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
PLZDAWF.SYS – Trojan Agent removal
| File | MD5 | Virus Alias |
|---|---|---|
| PLZDAWF.SYS | 589312a3b46721c5a751e4d5222a89be | Trojan Agent |
| PLZDAWF.SYS | 589312a3b46721c5a751e4d5222a89be | Trojan Banker |
PLZDAWF.SYS size: 61440 bytes
PLZDAWF.SYS hash: 589312A3B46721C5A751E4D5222A89BE
Created files:
C:\cleanup.exe
%SysDir%\drivers\plzdawf.sys
C:\zip.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\Cleanup: C:\cleanup.exe
HKLM\System\CurrentControlSet\Services\ipik\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0070006C007A0064006100770066002E007300790073000000
HKLM\System\CurrentControlSet\Services\ipik\Type: 01000000
HKLM\System\CurrentControlSet\Services\ipik\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ipik\cniefz: \??\C:\jyqro.txt
HKLM\System\CurrentControlSet\Services\ipik\qgnrape: %WinDir%
HKLM\System\CurrentControlSet\Services\ipik\cdzsliu: ABB00000
HKLM\System\CurrentControlSet\Services\ipik\Group: wtsuuj
Detected by UnHackMe:
PLZDAWF.SYS
Default location: %SYSDIR%\DRIVERS\PLZDAWF.SYS
Dropper information:
MD5: e3e011a2d400707ea02b3aff22cbe198
File size: 1025024 bytes