PASTBKKNQ.SYS – Unclassified Malware

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PASTBKKNQ.SYS – Unclassified Malware removal

PASTBKKNQ.SYS size: 3584 bytes
PASTBKKNQ.SYS hash: 974EEA16FFB1AA01C53D36B4A6D6259D

Created files:

%UserProfile%\Start Menu\Programs\Startup\svchozt.exe
%SysDir%\PastBKknq.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\baby\Type: 01000000
HKLM\System\CurrentControlSet\Services\baby\Start: 03000000
HKLM\System\CurrentControlSet\Services\baby\DisplayName: baby
HKLM\System\CurrentControlSet\Services\baby\ImagePath: %WinDir%\System32\PastBKknq.sys

Detected by UnHackMe:

PASTBKKNQ.SYS
Default location: %SYSDIR%\PASTBKKNQ.SYS

Dropper information:
MD5: 01e259ab7476f88df3de8e19f1dc45f4
File size: 1523712 bytes

Leave a Reply