Trojan.Tapaoux

By JubileeX in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	6

First Seen:	November 24, 2011
Last Seen:	August 22, 2018
OS(es) Affected:	Windows

Trojan.Tapaoux is a damaging Trojan that downloads and installs other malware infections on to the corrupted PC system. Trojan.Tapaoux tries to exploit the Adobe Reader 'CoolType.dll' TTF Font Remote Code Execution Vulnerability (BID 43057). When Trojan.Tapaoux infiltrates into the targeted computer system, it will firstly disguise itself from the detection of your anti-virus software. Before Trojan.Tapaoux is executed, it is difficult to detect it. Once Trojan.Tapaoux is executed, it adds a DLL file, an executable file and a system driver. Trojan.Tapaoux will run automatically each time you start your PC. When Trojan.Tapaoux downloads malicious files, your anti-virus software may display a fake security alert. Trojan.Tapaoux will slow down your computer and make your Internet speed unstable. Trojan.Tapaoux will also change your homepage and redirect your browser to malicious websites. Trojan.Tapaoux will also gather your personal information and forward it to remote attackers. Uninstall Trojan.Tapaoux immediately after detection.

Table of Contents

SpyHunter Detects & Remove Trojan.Tapaoux

File System Details

Trojan.Tapaoux may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	6619a4ff7f0478f8c15fc0391651a1694afe876d25ebd07e3da08167e4f0b3d3.exe	60af79fb0bd2c9f33375035609c931cb	2
Name: 6619a4ff7f0478f8c15fc0391651a1694afe876d25ebd07e3da08167e4f0b3d3.exe MD5: 60af79fb0bd2c9f33375035609c931cb Size: 370.87 KB (370872 bytes) Detections: 2 Type: Executable File Group: Malware file Last Updated: August 14, 2021
2.	file.exe	c2915bece3269b7a8dac1e2745063b49	1
Name: file.exe MD5: c2915bece3269b7a8dac1e2745063b49 Size: 43.52 KB (43523 bytes) Detections: 1 Type: Executable File Path: C:\Users\<username>\Desktop Group: Malware file Last Updated: April 4, 2018
3.	expsrv32.exe	653ffc574a13c4bc8337c688124fd0bf	1
Name: expsrv32.exe MD5: 653ffc574a13c4bc8337c688124fd0bf Size: 113.43 KB (113432 bytes) Detections: 1 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Roaming\iexp\expsrv32.exe Group: Malware file Last Updated: June 26, 2020
4.	%System%\schechk.exe
Name: %System%\schechk.exe Type: Executable File Group: Malware file
5.	%System%\sisraid3.sys
Name: %System%\sisraid3.sys Type: System file Group: Malware file
6.	%System%\securx86.sys
Name: %System%\securx86.sys Type: System file Group: Malware file
7.	%System%\hwpolicy.dll
Name: %System%\hwpolicy.dll Type: Dynamic link library Group: Malware file
8.	%System%\ql5200.sys
Name: %System%\ql5200.sys Type: System file Group: Malware file
9.	%System%\sscore1.sys
Name: %System%\sscore1.sys Type: System file Group: Malware file
10.	%System%\npidsz4.sys
Name: %System%\npidsz4.sys Type: System file Group: Malware file
11.	%System%\schechk.sys
Name: %System%\schechk.sys Type: System file Group: Malware file
12.	%System%\expsrv32.sys
Name: %System%\expsrv32.sys Type: System file Group: Malware file
13.	%System%\hwpolicy.sys
Name: %System%\hwpolicy.sys Type: System file Group: Malware file
14.	%System%\imagepk.sys
Name: %System%\imagepk.sys Type: System file Group: Malware file
15.	%System%\schechk.bin
Name: %System%\schechk.bin Type: Binary File Group: Malware file
16.	file.exe	316d41a81f9a6cbba9d0f25c59250f28	0
Name: file.exe MD5: 316d41a81f9a6cbba9d0f25c59250f28 Size: 350.5 KB (350504 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: November 28, 2011
17.	file.dll	7fc7b247c5f0b8d6766c597b9b139ac7	0
Name: file.dll MD5: 7fc7b247c5f0b8d6766c597b9b139ac7 Size: 113.06 KB (113064 bytes) Detections: 0 Type: Dynamic link library Group: Malware file Last Updated: November 28, 2011
18.	file.exe	72869fc63d0ba875dfc539d2bcd48e4d	0
Name: file.exe MD5: 72869fc63d0ba875dfc539d2bcd48e4d Size: 88.49 KB (88496 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: November 28, 2011
19.	file.dll	387128c489a66a70c7ed76b27f1dd4e2	0
Name: file.dll MD5: 387128c489a66a70c7ed76b27f1dd4e2 Size: 174.87 KB (174872 bytes) Detections: 0 Type: Dynamic link library Group: Malware file Last Updated: November 28, 2011
20.	file.exe	adab033d420206fcd2503643d443956e	0
Name: file.exe MD5: adab033d420206fcd2503643d443956e Size: 117.52 KB (117528 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: November 28, 2011
21.	vpmde.dll	566e92f79497a3c6136b815c9960b898	0
Name: vpmde.dll MD5: 566e92f79497a3c6136b815c9960b898 Size: 166.68 KB (166680 bytes) Detections: 0 Type: Dynamic link library Group: Malware file

Registry Details

Trojan.Tapaoux may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EpsonK200

URLs

Trojan.Tapaoux may call the following URLs:

ebizcentres.com/system32/list4/yahoo/banne[DELETED]

re.policy-forums.org/ol/yahoo/banne[DELETED]

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Tapaoux

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Trojan.Tapaoux

File System Details

Registry Details

URLs

Submit Comment

Related Posts

Trojan.Tapaoux.B

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen