TASKHOST.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TASKHOST.EXE – Trojan Downloader removal

FileMD5Virus Alias
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan Downloader
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan SuspiciousFile
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan Generic
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan DNAScan
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan Siggen
TASKHOST.EXE e38e157bf381da7b7dbc5fac23b1dd92 Trojan Agent

TASKHOST.EXE size: 106496 bytes
TASKHOST.EXE hash: E38E157BF381DA7B7DBC5FAC23B1DD92

Created files:

%Program Files%\QQNews\QQNews.exe
%WinDir%\conime\iexplorer.exe
%WinDir%\conime\SSDT01.sys
%WinDir%\Cursors\taskhost.exe
%WinDir%\iklahbgj.exe
%WinDir%\kahiekjd.exe
%WinDir%\nabloskf.exe
%WinDir%\NBBBBBB.exe
%WinDir%\nlvabhdfj.exe
%WinDir%\pkablfn.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\S\Type: 01000000
HKLM\System\CurrentControlSet\Services\S\Start: 03000000
HKLM\System\CurrentControlSet\Services\S\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\S\DisplayName: S
HKLM\System\CurrentControlSet\Services\S\ImagePath: %WinDir%\conime\SSDT01.sys
HKLM\System\CurrentControlSet\Services\Schedulo\Type: 10010000
HKLM\System\CurrentControlSet\Services\Schedulo\Start: 02000000
HKLM\System\CurrentControlSet\Services\Schedulo\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Schedulo\DisplayName: Schedulo
HKLM\System\CurrentControlSet\Services\Schedulo\ImagePath: C:\Windows\Cursors\taskhost.exe Star
HKLM\System\CurrentControlSet\Services\Schedulo\ObjectName: LocalSystem
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\QQNews: “%Program Files%\QQNews\QQNews.exe” /r -Software\Microsoft\Wind

Detected by UnHackMe:

TASKHOST.EXE
Default location: %WinDir%\CURSORS\TASKHOST.EXE

Dropper information:
MD5: 0bc5efed3004d1d5e1fc01aeee32a0d1
File size: 1862493 bytes

Leave a Reply