WNDEX6.DLL – Trojan WS.Reputation

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WNDEX6.DLL – Trojan WS.Reputation removal

FileMD5Virus Alias
WNDEX6.DLL 92e73b7bd3b67db7e01c2da52a6e1e3e Trojan WS.Reputation
WNDEX6.DLL 92e73b7bd3b67db7e01c2da52a6e1e3e Trojan Agent

WNDEX6.DLL size: 81920 bytes
WNDEX6.DLL hash: 92E73B7BD3B67DB7E01C2DA52A6E1E3E

Created files:

%AppData%\mymacro\qdisp.dll
%TEMP%\cfgdll.dll
%TEMP%\plugin\BGKMS4_02.DLL
%TEMP%\plugin\BKGND.DLL
%TEMP%\plugin\DBSOFT.DLL
%TEMP%\plugin\FILE.DLL
%TEMP%\plugin\MEDIA.DLL
%TEMP%\plugin\MEMORY.DLL
%TEMP%\plugin\MSG.DLL
%TEMP%\plugin\REGDLL.DLL
%TEMP%\plugin\SYS.DLL
%TEMP%\plugin\WINDOW.DLL
%TEMP%\plugin\WNDEX6.DLL
%TEMP%\~GM20C.exe

Autostart registry keys:

HKLM\Software\Classes\CLSID\{241D7F03-9232-4024-8373-149860BE27C0}\InProcServer32 : %WinDir%\System32\config\SYSTEM~1\APPLIC~1\mymacro\qdisp.dll
HKLM\Software\Classes\CLSID\{C07DB6A3-34FC-4084-BE2E-76BB9203B049}\InProcServer32 : %WinDir%\System32\config\SYSTEM~1\APPLIC~1\mymacro\qdisp.dll
HKLM\Software\Classes\CLSID\{EBEB87A6-E151-4054-AB45-A6E094C5334B}\InProcServer32 : %WinDir%\System32\config\SYSTEM~1\APPLIC~1\mymacro\qdisp.dll

Detected by UnHackMe:

WNDEX6.DLL
Default location: %TEMP%\PLUGIN\WNDEX6.DLL

Dropper information:
MD5: ea971bcc8dfa7b223712db2c2afd3bfd
File size: 9383307 bytes

Leave a Reply