Threat Database Trojans PWS:Win32/QQpass.GG

PWS:Win32/QQpass.GG

By Sumo3000 in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 22
First Seen: September 6, 2013
Last Seen: December 30, 2022
OS(es) Affected: Windows

PWS_Win32_QQpass.GG is the detection assigned to block or remove a malicious program and Trojan designed to infiltrate and attack Windows based systems and primarily steal passwords and credentials. It's no secret most malware is designed to attack and exploit the Windows operating system, both due to known vulnerabilities and the fact it is widely used. Cybercriminals enjoy PC users' lax approach to Internet security and keeping software updated and patched, as well as naivety in clicking too fast on links and attachments, which is how most implantation are achieved and executed.

PWS_Win32_QQpass.GG may have taken on the mask or guise as something innocent and helpful, i.e. screen saver, fake Adobe Flash update, codec, etc. Once inside the infected system, script will be run to collect the targeted data, i.e. passwords, user names, credentials, etc. and connection made to a remote server only to not transmit stolen data but also advise successful infiltration, intercept new instructions, or even download more malware.

PWS_Win32_QQpass.GG is without an interface and designed to operate and attack in the background without fanfare. It is likely security and administrative measures have been tampered with, so they do not operate properly and fail to notify of the intrusion and also block sub-par removal attempts. Malware is known to negatively impact the performance of most systems and may give off signs it is in effect. However, to be certain your system is not under siege, you should run a full scan using a trusted and stealth anti-malware solution.

File System Details

PWS:Win32/QQpass.GG may create the following file(s):
# File Name Detections
1. C:\Documents and Settings\\local settings\temp\10c8718f.bat
2. C:\Documents and Settings\\local settings\temp\_ir_sf_temp_0\lua5.1.dll
3. C:\Documents and Settings\\local settings\temp\dnfbox89.exe
4. C:\Documents and Settings\\local settings\temp\exp_t2316.exe
5. C:\Documents and Settings\\local settings\temp\z1.exe
6. C:\Documents and Settings\\local settings\temp\nmue34d72378.exe
7. C:\Documents and Settings\\local settings\temp\_ir_sf_temp_0\irsetup.exe
8. C:\Documents and Settings\\local settings\temp\_ir_sf_temp_0\irimg2.jpg
9. C:\Documents and Settings\\local settings\temp\_ir_sf_temp_0\irsetup.dat
10. [system folder]\gggame.db
11. C:\Documents and Settings\\local settings\temp\_ir_sf_temp_0\irimg1.jpg

URLs

PWS:Win32/QQpass.GG may call the following URLs:

183.60.203.62
ws617d3.CHEKFILES.COM

Trending

Most Viewed

Loading...