Trojan Generic.KD – Jqsx.exe – 31101855780f6a6eb64c848f860f540b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Generic.KD
Also known as: Trojan Refroso, Trojan Generic
SHA256: 0062f88be716d94eee46acf859de4975fbf7922a93ad17f620cf62d30790d190
SHA1: 2f67c34cfa190a0d21f4d2b5098912be7bc2ba1c
MD5: 31101855780f6a6eb64c848f860f540b
File size: 325192 bytes

Created files:

%AppData%\Java suns\Jqsx.exe – Trojan Generic.KD

Trojan Generic.KD created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{6665855C-7F74-613M-P4E2-2KKQY0VBT4KP}\StubPath: 43003A005C0044006F00630075006D0065006E0074007300200061006E0064002000530065007400740069006E00670073005C0055005300450052005C004100700070006C00690063006100740069006F006E00200044006100740061005C004A006100760061002000730075006E0073005C004A007100730078002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Java suns: 43003A005C0044006F00630075006D0065006E0074007300200061006E0064002000530065007400740069006E00670073005C0055005300450052005C004100700070006C00690063006100740069006F006E00200044006100740061005C004A006100760061002000730075006E0073005C004A007100730078002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Java suns: 43003A005C0044006F00630075006D0065006E0074007300200061006E0064002000530065007400740069006E00670073005C0055005300450052005C004100700070006C00690063006100740069006F006E00200044006100740061005C004A006100760061002000730075006E0073005C004A007100730078002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Java suns: 43003A005C0044006F00630075006D0065006E0074007300200061006E0064002000530065007400740069006E00670073005C0055005300450052005C004100700070006C00690063006100740069006F006E00200044006100740061005C004A006100760061002000730075006E0073005C004A007100730078002E006500780065000000

Leave a Reply