TROJ_FRAUDPAC.QL
TROJ_FRAUDPAC.QL is a malicious Trojan program that is often dropped by other malware. Once TROJ_FRAUDPAC.QL has been executed, it will be injected into processes running in memory. TROJ_FRAUDPAC.QL will also drop copies of itself into the system and add keys as part of its installation routine. To ensure that it is executed with every system start-up, TROJ_FRAUDPAC.QL will also create a start-up registry entry. TROJ_FRAUDPAC.QL is able to connect to a remote website and download harmful files therefore it should be removed from an infected PC as soon as possible.
File System Details
TROJ_FRAUDPAC.QL may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | SVCHOST.EXE | |
| 2. | %System%\imagehlpj.exe |
Registry Details
TROJ_FRAUDPAC.QL may create the following registry entry or registry entries:
DisplayName = "Shell Hardware Detection ShellHWDetectionVMTools" ObjectName = "LocalSystem"
Services\ShellHWDetectionVMToolsType = "110" Start = "2" ErrorControl = "0" ImagePath = "%System%\imagehlpj.exe srv"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
