Trojan Dadobra – hanscsk.exe – 0a4939f73813d9ea253d46093bd3c8cb

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Dadobra
Also known as: Trojan Delphi, Trojan QQPass
SHA256: 72d00f8191c65615c9cffef7432bb0e74f56d6f8a08f5175b6fb4fa6881f67c2
SHA1: 8d294564b38600d1eafd71a264b1c86e64613086
MD5: 0a4939f73813d9ea253d46093bd3c8cb
File size: 51713 bytes

Created files:

%SysDir%\hanscsk.exe – Trojan Dadobra
%SysDir%\SCSK.dll – Trojan Dadobra

Trojan Dadobra created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SoundMam: %WinDir%\System32\hanscsk.exe

Leave a Reply