Qhost.AK is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers.
Process Related Changes
It creates the following mutex(es):
- "MSIMGSIZECacheMutex"
- "SmartScreen_ClientId_Mutex"
- "IESQMMUTEX_0_208"
- "SmartScreen_UrsCacheMutex_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-1-5-21-239287854-1939494589-2009181562-1001"
- "ConnHashTable<3336>_HashTable_Mutex"
It creates the following process(es): - C:\Program Files\Java\jre6\bin\javaw.exe
- C:\Windows\system32\cmd.exe [ cmd.exe /C start iexplore.exe http://contadoressp.net/work2013/contador/ok/ ]
- C:\Program Files\Internet Explorer\iexplore.exe
Network Activity
We observed the following DNS query/queries: |
