Trojan/Win32.QQRob

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Trojan/Win32.QQRob also known as Dropped:Trojan.Generic.2145769, Dropped:Trojan.Generic.2145769 (B), W32/QQrob.A.gen!Eldorado.

Malware Analysis of Trojan/Win32.QQRob – RPDFCS.EXE

Created files:

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
C:\Documents and Settings\LocalService\Favorites\Desktop.ini
%SysDir%\RpdfcS.exe
%SysDir%\RpfdcS.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\RpcffdS\ImagePath: “%SysDir%\RpdfcS.exe”
HKLM\System\CurrentControlSet\Services\RpcffdS\DisplayName: “Remote Procedure”

Detected by UnHackMe:

RPDFCS.EXE
Default location: %SYSDIR%\RPDFCS.EXE

Dropper hash(md5): c6a989c4f53bd87da2b9ec1433ccb6a0

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera