HAQMSN~1.EXE – Unclassified Malware removal

HAQMSN~1.EXE size: 245760 bytes
HAQMSN~1.EXE hash: 2242899C6F8F60AA3F861BF8E9002043

Created files:

%TEMP%\IXP000.TMP\freez.exe
%TEMP%\IXP000.TMP\HAQMSN~1.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

HAQMSN~1.EXE
Default location: %TEMP%\IXP000.TMP\HAQMSN~1.EXE

Dropper information:
MD5: 51b22140f787d742adfcc89654136668
File size: 394240 bytes