WINSEARCHCHSINST.EXE – Trojan Qhost

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINSEARCHCHSINST.EXE – Trojan Qhost removal

FileMD5Virus Alias
WINSEARCHCHSINST.EXE d202490983cb600d658f343ddaa52db8 Trojan Qhost
WINSEARCHCHSINST.EXE d202490983cb600d658f343ddaa52db8 Trojan Eldorado
WINSEARCHCHSINST.EXE d202490983cb600d658f343ddaa52db8 Trojan Agent

WINSEARCHCHSINST.EXE size: 857318 bytes
WINSEARCHCHSINST.EXE hash: D202490983CB600D658F343DDAA52DB8

Created files:

%Program Files%\Winsearchchs\Uninstall.exe
%Program Files%\Winsearchchs\winsearchchs.dll
%Program Files%\Winsearchchs\winsearchchsdl.exe
%SysDir%\INETKO.DLL
%SysDir%\winsearchchsinst.exe

Autostart registry keys:

HKLM\Software\Classes\CLSID\{1DC85CB9-4722-40E7-B1E6-3AA83295B975}\InprocServer32 : %Program Files%\Winsearchchs\winsearchchs.dll

Detected by UnHackMe:

WINSEARCHCHSINST.EXE
Default location: %SYSDIR%\WINSEARCHCHSINST.EXE

Dropper information:
MD5: fad99f72a18dadf09f96190d9fc66313
File size: 901000 bytes

Leave a Reply