Home
/
Spyware Encyclopedia
/ PSW.QQPass
PSW.QQPass Technical Details
Category
PSW
Discovered
12/5/2006 8:03:00 PM
Modified
8/29/2008 5:25:30 PM
Threat Level
Medium
Description
This family of Trojans steals passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information. Most common behavior: 1. Ask for password using fake window 2. Change ICQ, MSN, AOL configuration 3. Get cached Windows passwords
Summary
N/A
When the PSW is executed, it creates the following files:
Name
Version
Publisher
Signature (MD5)
File Size (in KB)
..\plugins\unixsys08.sys
bdfa90e2a19ba9bef2f36103b41bc4ef
44663
..\TEMP\1.TMP.BAT
161
..\TEMP\2.TMP.BAT
119
..\TEMP\3.TMP.BAT
119
..\TEMP\4.TMP.BAT
119
..\TEMP\5.TMP.BAT
119
..\TEMP\6.TMP.BAT
119
..\TEMP\7.TMP.BAT
119
When the PSW is executed, it creates the following Registry entries:
•
..\Software\Classes\Clsid\{21e5bb9b-86bd-43c0-a53f-b94fca0c9277}
•
..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\qqdoctor.exe
•
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21e5bb9b-86bd-43c0-a53f-b94fca0c9277}
•
..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"nicesoft"
•
..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"678"
•
..\Software\tencent
•
..\Software\Classes\Clsid\{729b6c61-bdc5-4c09-a1de-a296ba0b89ec}
•
..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\mpsvc.exe
•
..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\rva.exe
Recommendation to remove PSW.QQPass
Spyware Detector can remove PSW.QQPass, and thousands of other Spyware automatically and instantly.
Click here
to download Spyware Detector and scan for free.
Personalized e-Mail support
by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
Speed up your computer
and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with
frequent spyware definition updates
so you never have to worry about new threats and outdated software.
Surf the web with confidence
knowing your online activities aren't being tracked, and your
confidential data is secure
from prying eyes.
Search Threats
Testimonials
Read More
Information Desk
Spyware & Adware Categories we scan
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team
Submit a Threat
Home
|
About Us
|
Purchase
|
Contact Us
|
FAQ
|
Privacy Policy
Submit a Threat