Trojan DNSChanger – 00aeb83eaeba8bbb4fb8d5736832b3b8

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan DNSChanger
Also known as: Trojan Agent
SHA256: b068a78c62d4d361e9e64d0f27aa9ca0bac4bfe63a863033551bab65da8f44fb
SHA1: deca7e3d1b7c03b31372292934b55be40af628fe
MD5: 00aeb83eaeba8bbb4fb8d5736832b3b8
File size: 29192 bytes

Created files:

%SysDir%\hgqhp.exe – Trojan DNSChanger

Trojan DNSChanger created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\hgqhp.exe: %WinDir%\System32\hgqhp.exe
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5CAF79F3-7B39-4653-9DDB-483419D23C12}\NameServer: 69.50.184.86,85.255.112.9
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A4AF5AD9-358D-4F1B-920C-0AF544486F26}\NameServer: 69.50.184.86,85.255.112.9

Leave a Reply