Remove Malware and Viruses: ZQuest Trojan

ZQuest Trojan

ZQuest malware description and removal detail
Categories:Trojan,Adware
Also known as:
[Kaspersky]Trojan-Downloader.Win32.Small.ctb,Trojan.Win32.BHO.ab,AdWare.Win32.TTC.a; [McAfee]Generic.dx; [F-Prot]W32/Trojan.AEMD; [Other]Adware.ZQuest,W32/BHO.PO,TROJ_BHO.FD,Trojan.Win32.BHO.ab,Win32/Zquest.G,Trojan.Dropper
Visible Symptoms:
Files in system folders:[%INTERNET_CACHE%]\Content.IE5\43WDGVE3\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\4PY3CHMF\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\8XMRW96J\TTC-4444[1].exe [%INTERNET_CACHE%]\content.ie5\GFES34KZ\vsl02[1].ini [%INTERNET_CACHE%]\Content.IE5\MRMHS18Z\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\SDQZGTYN\TTC-4444[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\TTC-4444[1].exe [%PROFILE_TEMP%]\CEMG555077.exe [%PROGRAM_FILES%]\ComPlus Applications\honewafep4444.dll [%PROGRAM_FILES%]\ComPlus Applications\honewafep83122.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys4444.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys555077.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys83122.dll [%PROGRAM_FILES%]\CONEXANT\niqysew.dll [%PROGRAM_FILES%]\Internet Explorer\merote4444.dll [%PROGRAM_FILES%]\Internet Explorer\merote555077.dll [%PROGRAM_FILES%]\Internet Explorer\merote83122.dll [%PROGRAM_FILES%]\Internet Explorer\tevoh4444.dll [%PROGRAM_FILES%]\Internet Explorer\tevoh83122.dll [%PROGRAM_FILES%]\Internet Explorer\texobajiq4444.dll [%PROGRAM_FILES%]\iPod\safehutag4444.dll [%PROGRAM_FILES%]\iPod\safehutag83122.dll [%PROGRAM_FILES%]\Messenger\rtemem.html [%PROGRAM_FILES%]\Movie Maker\hokemoqy4444.dll [%PROGRAM_FILES%]\Movie Maker\hokemoqy83122.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mevo4444.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mevo83122.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mewof4444.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mewof83122.dll [%PROGRAM_FILES%]\MSN\holemupy83122.dll [%PROGRAM_FILES%]\MSN\meqoca4444.dll [%PROGRAM_FILES%]\MSN\meqoca83122.dll [%PROGRAM_FILES%]\MSN\qubo4444.dll [%PROGRAM_FILES%]\MSN\qubo83122.dll [%PROGRAM_FILES%]\MSN\tehonev4444.dll [%PROGRAM_FILES%]\MSN\tehonev83122.dll [%PROGRAM_FILES%]\NetMeeting\meno4444.dll [%PROGRAM_FILES%]\NetMeeting\meno83122.dll [%PROGRAM_FILES%]\NetMeeting\qurocupaz4444.dll [%PROGRAM_FILES%]\NetMeeting\tevoh4444.dll [%PROGRAM_FILES%]\OfficeUpdate11\hoke4444.dll [%PROGRAM_FILES%]\Online Services\hokemoqy4444.dll [%PROGRAM_FILES%]\Online Services\hokemoqy83122.dll [%PROGRAM_FILES%]\Online Services\hoseduga4444.dll [%PROGRAM_FILES%]\Online Services\hoseduga83122.dll [%PROGRAM_FILES%]\Online Services\nizycij4444.dll [%PROGRAM_FILES%]\Online Services\nizycij555077.dll [%PROGRAM_FILES%]\Online Services\nizycij83122.dll [%PROGRAM_FILES%]\Outlook Express\mepow4444.dll [%PROGRAM_FILES%]\Outlook Express\mepow83122.dll [%PROGRAM_FILES%]\Outlook Express\qurocupaz4444.dll [%PROGRAM_FILES%]\Outlook Express\qurocupaz83122.dll [%PROGRAM_FILES%]\TTC.dll [%PROGRAM_FILES%]\Windows Media Player\mesofigy4444.dll [%PROGRAM_FILES%]\Windows Media Player\mesofigy83122.dll [%PROGRAM_FILES%]\Windows NT\hokeno4444.dll [%PROGRAM_FILES%]\Windows NT\hokeno83122.dll [%PROGRAM_FILES%]\Windows NT\hokepot83122.dll [%PROGRAM_FILES%]\Windows NT\hoxeni [%PROGRAM_FILES%]\Windows NT\menoru83122.dll [%PROGRAM_FILES%]\Windows NT\mexoca4444.dll [%PROGRAM_FILES%]\Windows NT\mexoca83122.dll [%PROGRAM_FILES%]\Windows NT\nipyra4444.dll [%PROGRAM_FILES%]\Windows NT\nipyra83122.dll [%PROGRAM_FILES%]\WindowsUpdate\hokemoqy4444.dll [%PROGRAM_FILES%]\WindowsUpdate\mesofigy4444.dll [%PROGRAM_FILES_COMMON%]\holen4444.dll [%PROGRAM_FILES_COMMON%]\holen555077.dll [%PROGRAM_FILES_COMMON%]\holen83122.dll [%PROGRAM_FILES_COMMON%]\hote4444.dll [%PROGRAM_FILES_COMMON%]\hote83122.dll [%PROGRAM_FILES_COMMON%]\metoc24418.dll [%PROGRAM_FILES_COMMON%]\metoc83122.dll [%PROGRAM_FILES_COMMON%]\sabe4444.dll [%PROGRAM_FILES_COMMON%]\sabe83122.dll [%SYSTEM%]\0ce8rglo.dll [%SYSTEM%]\DH9013.exe [%SYSTEM%]\e1\caws83122.exe [%SYSTEM%]\e2\caws83122.exe [%SYSTEM%]\g2\caws83122.exe [%SYSTEM%]\h2\jumper83122.exe [%SYSTEM%]\hdrv2\jumper83122.exe [%SYSTEM%]\i2\mper83122.exe [%SYSTEM%]\k1\jumper83122.exe [%SYSTEM%]\m2\caws83122.exe [%SYSTEM%]\uie1\aded83122.exe [%SYSTEM%]\uu2\mper83122.exe [%SYSTEM%]\v2\swdrv83122.exe [%SYSTEM%]\VSL03.exe [%SYSTEM%]\VSL05.exe [%WINDOWS%]\83122.exe [%WINDOWS%]\KVTE66.exe [%WINDOWS%]\RDFX4.exe [%WINDOWS%]\TEMP\CEMG555077.exe [%WINDOWS%]\TTC-4444.exe [%WINDOWS%]\VTTC.exe [%WINDOWS%]\wallp2.exe [%PROGRAM_FILES%]\Internet Explorer\quzotufi [%PROGRAM_FILES%]\Internet Explorer\quzotufi.dll [%PROGRAM_FILES%]\Internet Explorer\tedaxejy [%PROGRAM_FILES%]\Internet Explorer\tedaxejy.dll [%PROGRAM_FILES%]\Messenger\sahohi.html [%PROGRAM_FILES%]\MSN Gaming Zone\qufefati.html [%PROGRAM_FILES%]\Windows NT\qurofu.dll [%WINDOWS%]\qwr67.exe [%WINDOWS%]\vcttc012.exe [%INTERNET_CACHE%]\Content.IE5\43WDGVE3\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\4PY3CHMF\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\8XMRW96J\TTC-4444[1].exe [%INTERNET_CACHE%]\content.ie5\GFES34KZ\vsl02[1].ini [%INTERNET_CACHE%]\Content.IE5\MRMHS18Z\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\SDQZGTYN\TTC-4444[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\TTC-4444[1].exe [%PROFILE_TEMP%]\CEMG555077.exe [%PROGRAM_FILES%]\ComPlus Applications\honewafep4444.dll [%PROGRAM_FILES%]\ComPlus Applications\honewafep83122.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys4444.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys555077.dll [%PROGRAM_FILES%]\ComPlus Applications\qubomys83122.dll [%PROGRAM_FILES%]\CONEXANT\niqysew.dll [%PROGRAM_FILES%]\Internet Explorer\merote4444.dll [%PROGRAM_FILES%]\Internet Explorer\merote555077.dll [%PROGRAM_FILES%]\Internet Explorer\merote83122.dll [%PROGRAM_FILES%]\Internet Explorer\tevoh4444.dll [%PROGRAM_FILES%]\Internet Explorer\tevoh83122.dll [%PROGRAM_FILES%]\Internet Explorer\texobajiq4444.dll [%PROGRAM_FILES%]\iPod\safehutag4444.dll [%PROGRAM_FILES%]\iPod\safehutag83122.dll [%PROGRAM_FILES%]\Messenger\rtemem.html [%PROGRAM_FILES%]\Movie Maker\hokemoqy4444.dll [%PROGRAM_FILES%]\Movie Maker\hokemoqy83122.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mevo4444.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mevo83122.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mewof4444.dll [%PROGRAM_FILES%]\MSN Gaming Zone\mewof83122.dll [%PROGRAM_FILES%]\MSN\holemupy83122.dll [%PROGRAM_FILES%]\MSN\meqoca4444.dll [%PROGRAM_FILES%]\MSN\meqoca83122.dll [%PROGRAM_FILES%]\MSN\qubo4444.dll [%PROGRAM_FILES%]\MSN\qubo83122.dll [%PROGRAM_FILES%]\MSN\tehonev4444.dll [%PROGRAM_FILES%]\MSN\tehonev83122.dll [%PROGRAM_FILES%]\NetMeeting\meno4444.dll [%PROGRAM_FILES%]\NetMeeting\meno83122.dll [%PROGRAM_FILES%]\NetMeeting\qurocupaz4444.dll [%PROGRAM_FILES%]\NetMeeting\tevoh4444.dll [%PROGRAM_FILES%]\OfficeUpdate11\hoke4444.dll [%PROGRAM_FILES%]\Online Services\hokemoqy4444.dll [%PROGRAM_FILES%]\Online Services\hokemoqy83122.dll [%PROGRAM_FILES%]\Online Services\hoseduga4444.dll [%PROGRAM_FILES%]\Online Services\hoseduga83122.dll [%PROGRAM_FILES%]\Online Services\nizycij4444.dll [%PROGRAM_FILES%]\Online Services\nizycij555077.dll [%PROGRAM_FILES%]\Online Services\nizycij83122.dll [%PROGRAM_FILES%]\Outlook Express\mepow4444.dll [%PROGRAM_FILES%]\Outlook Express\mepow83122.dll [%PROGRAM_FILES%]\Outlook Express\qurocupaz4444.dll [%PROGRAM_FILES%]\Outlook Express\qurocupaz83122.dll [%PROGRAM_FILES%]\TTC.dll [%PROGRAM_FILES%]\Windows Media Player\mesofigy4444.dll [%PROGRAM_FILES%]\Windows Media Player\mesofigy83122.dll [%PROGRAM_FILES%]\Windows NT\hokeno4444.dll [%PROGRAM_FILES%]\Windows NT\hokeno83122.dll [%PROGRAM_FILES%]\Windows NT\hokepot83122.dll [%PROGRAM_FILES%]\Windows NT\hoxeni [%PROGRAM_FILES%]\Windows NT\menoru83122.dll [%PROGRAM_FILES%]\Windows NT\mexoca4444.dll [%PROGRAM_FILES%]\Windows NT\mexoca83122.dll [%PROGRAM_FILES%]\Windows NT\nipyra4444.dll [%PROGRAM_FILES%]\Windows NT\nipyra83122.dll [%PROGRAM_FILES%]\WindowsUpdate\hokemoqy4444.dll [%PROGRAM_FILES%]\WindowsUpdate\mesofigy4444.dll [%PROGRAM_FILES_COMMON%]\holen4444.dll [%PROGRAM_FILES_COMMON%]\holen555077.dll [%PROGRAM_FILES_COMMON%]\holen83122.dll [%PROGRAM_FILES_COMMON%]\hote4444.dll [%PROGRAM_FILES_COMMON%]\hote83122.dll [%PROGRAM_FILES_COMMON%]\metoc24418.dll [%PROGRAM_FILES_COMMON%]\metoc83122.dll [%PROGRAM_FILES_COMMON%]\sabe4444.dll [%PROGRAM_FILES_COMMON%]\sabe83122.dll [%SYSTEM%]\0ce8rglo.dll [%SYSTEM%]\DH9013.exe [%SYSTEM%]\e1\caws83122.exe [%SYSTEM%]\e2\caws83122.exe [%SYSTEM%]\g2\caws83122.exe [%SYSTEM%]\h2\jumper83122.exe [%SYSTEM%]\hdrv2\jumper83122.exe [%SYSTEM%]\i2\mper83122.exe [%SYSTEM%]\k1\jumper83122.exe [%SYSTEM%]\m2\caws83122.exe [%SYSTEM%]\uie1\aded83122.exe [%SYSTEM%]\uu2\mper83122.exe [%SYSTEM%]\v2\swdrv83122.exe [%SYSTEM%]\VSL03.exe [%SYSTEM%]\VSL05.exe [%WINDOWS%]\83122.exe [%WINDOWS%]\KVTE66.exe [%WINDOWS%]\RDFX4.exe [%WINDOWS%]\TEMP\CEMG555077.exe [%WINDOWS%]\TTC-4444.exe [%WINDOWS%]\VTTC.exe [%WINDOWS%]\wallp2.exe [%PROGRAM_FILES%]\Internet Explorer\quzotufi [%PROGRAM_FILES%]\Internet Explorer\quzotufi.dll [%PROGRAM_FILES%]\Internet Explorer\tedaxejy [%PROGRAM_FILES%]\Internet Explorer\tedaxejy.dll [%PROGRAM_FILES%]\Messenger\sahohi.html [%PROGRAM_FILES%]\MSN Gaming Zone\qufefati.html [%PROGRAM_FILES%]\Windows NT\qurofu.dll [%WINDOWS%]\qwr67.exe [%WINDOWS%]\vcttc012.exe

In order to ensure that the ZQuest is launched automatically each time the system is booted, the ZQuest adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run [%INTERNET_CACHE%]\Content.IE5\43WDGVE3\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\4PY3CHMF\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\8XMRW96J\TTC-4444[1].exe [%INTERNET_CACHE%]\Content.IE5\MRMHS18Z\acdt-pid67N[1].exe [%INTERNET_CACHE%]\Content.IE5\SDQZGTYN\TTC-4444[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\83122[1].exe [%INTERNET_CACHE%]\Content.IE5\SPAFK567\TTC-4444[1].exe [%PROFILE_TEMP%]\CEMG555077.exe [%SYSTEM%]\DH9013.exe [%SYSTEM%]\e1\caws83122.exe [%SYSTEM%]\e2\caws83122.exe [%SYSTEM%]\g2\caws83122.exe [%SYSTEM%]\h2\jumper83122.exe [%SYSTEM%]\hdrv2\jumper83122.exe [%SYSTEM%]\i2\mper83122.exe [%SYSTEM%]\k1\jumper83122.exe [%SYSTEM%]\m2\caws83122.exe [%SYSTEM%]\uie1\aded83122.exe [%SYSTEM%]\uu2\mper83122.exe [%SYSTEM%]\v2\swdrv83122.exe [%SYSTEM%]\VSL03.exe [%SYSTEM%]\VSL05.exe [%WINDOWS%]\83122.exe [%WINDOWS%]\KVTE66.exe [%WINDOWS%]\RDFX4.exe [%WINDOWS%]\TEMP\CEMG555077.exe [%WINDOWS%]\TTC-4444.exe [%WINDOWS%]\VTTC.exe [%WINDOWS%]\wallp2.exe [%WINDOWS%]\qwr67.exe [%WINDOWS%]\vcttc012.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

 
Detecting ZQuest:
  Files:  
[%INTERNET_CACHE%]\Content.IE5\43WDGVE3\acdt-pid67N[1].exe
[%INTERNET_CACHE%]\Content.IE5\4PY3CHMF\83122[1].exe
[%INTERNET_CACHE%]\Content.IE5\8XMRW96J\TTC-4444[1].exe
[%INTERNET_CACHE%]\content.ie5\GFES34KZ\vsl02[1].ini
[%INTERNET_CACHE%]\Content.IE5\MRMHS18Z\acdt-pid67N[1].exe
[%INTERNET_CACHE%]\Content.IE5\SDQZGTYN\TTC-4444[1].exe
[%INTERNET_CACHE%]\Content.IE5\SPAFK567\83122[1].exe
[%INTERNET_CACHE%]\Content.IE5\SPAFK567\TTC-4444[1].exe
[%PROFILE_TEMP%]\CEMG555077.exe
[%PROGRAM_FILES%]\ComPlus Applications\honewafep4444.dll
[%PROGRAM_FILES%]\ComPlus Applications\honewafep83122.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys4444.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys555077.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys83122.dll
[%PROGRAM_FILES%]\CONEXANT\niqysew.dll
[%PROGRAM_FILES%]\Internet Explorer\merote4444.dll
[%PROGRAM_FILES%]\Internet Explorer\merote555077.dll
[%PROGRAM_FILES%]\Internet Explorer\merote83122.dll
[%PROGRAM_FILES%]\Internet Explorer\tevoh4444.dll
[%PROGRAM_FILES%]\Internet Explorer\tevoh83122.dll
[%PROGRAM_FILES%]\Internet Explorer\texobajiq4444.dll
[%PROGRAM_FILES%]\iPod\safehutag4444.dll
[%PROGRAM_FILES%]\iPod\safehutag83122.dll
[%PROGRAM_FILES%]\Messenger\rtemem.html
[%PROGRAM_FILES%]\Movie Maker\hokemoqy4444.dll
[%PROGRAM_FILES%]\Movie Maker\hokemoqy83122.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mevo4444.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mevo83122.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mewof4444.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mewof83122.dll
[%PROGRAM_FILES%]\MSN\holemupy83122.dll
[%PROGRAM_FILES%]\MSN\meqoca4444.dll
[%PROGRAM_FILES%]\MSN\meqoca83122.dll
[%PROGRAM_FILES%]\MSN\qubo4444.dll
[%PROGRAM_FILES%]\MSN\qubo83122.dll
[%PROGRAM_FILES%]\MSN\tehonev4444.dll
[%PROGRAM_FILES%]\MSN\tehonev83122.dll
[%PROGRAM_FILES%]\NetMeeting\meno4444.dll
[%PROGRAM_FILES%]\NetMeeting\meno83122.dll
[%PROGRAM_FILES%]\NetMeeting\qurocupaz4444.dll
[%PROGRAM_FILES%]\NetMeeting\tevoh4444.dll
[%PROGRAM_FILES%]\OfficeUpdate11\hoke4444.dll
[%PROGRAM_FILES%]\Online Services\hokemoqy4444.dll
[%PROGRAM_FILES%]\Online Services\hokemoqy83122.dll
[%PROGRAM_FILES%]\Online Services\hoseduga4444.dll
[%PROGRAM_FILES%]\Online Services\hoseduga83122.dll
[%PROGRAM_FILES%]\Online Services\nizycij4444.dll
[%PROGRAM_FILES%]\Online Services\nizycij555077.dll
[%PROGRAM_FILES%]\Online Services\nizycij83122.dll
[%PROGRAM_FILES%]\Outlook Express\mepow4444.dll
[%PROGRAM_FILES%]\Outlook Express\mepow83122.dll
[%PROGRAM_FILES%]\Outlook Express\qurocupaz4444.dll
[%PROGRAM_FILES%]\Outlook Express\qurocupaz83122.dll
[%PROGRAM_FILES%]\TTC.dll
[%PROGRAM_FILES%]\Windows Media Player\mesofigy4444.dll
[%PROGRAM_FILES%]\Windows Media Player\mesofigy83122.dll
[%PROGRAM_FILES%]\Windows NT\hokeno4444.dll
[%PROGRAM_FILES%]\Windows NT\hokeno83122.dll
[%PROGRAM_FILES%]\Windows NT\hokepot83122.dll
[%PROGRAM_FILES%]\Windows NT\hoxeni
[%PROGRAM_FILES%]\Windows NT\menoru83122.dll
[%PROGRAM_FILES%]\Windows NT\mexoca4444.dll
[%PROGRAM_FILES%]\Windows NT\mexoca83122.dll
[%PROGRAM_FILES%]\Windows NT\nipyra4444.dll
[%PROGRAM_FILES%]\Windows NT\nipyra83122.dll
[%PROGRAM_FILES%]\WindowsUpdate\hokemoqy4444.dll
[%PROGRAM_FILES%]\WindowsUpdate\mesofigy4444.dll
[%PROGRAM_FILES_COMMON%]\holen4444.dll
[%PROGRAM_FILES_COMMON%]\holen555077.dll
[%PROGRAM_FILES_COMMON%]\holen83122.dll
[%PROGRAM_FILES_COMMON%]\hote4444.dll
[%PROGRAM_FILES_COMMON%]\hote83122.dll
[%PROGRAM_FILES_COMMON%]\metoc24418.dll
[%PROGRAM_FILES_COMMON%]\metoc83122.dll
[%PROGRAM_FILES_COMMON%]\sabe4444.dll
[%PROGRAM_FILES_COMMON%]\sabe83122.dll
[%SYSTEM%]\0ce8rglo.dll
[%SYSTEM%]\DH9013.exe
[%SYSTEM%]\e1\caws83122.exe
[%SYSTEM%]\e2\caws83122.exe
[%SYSTEM%]\g2\caws83122.exe
[%SYSTEM%]\h2\jumper83122.exe
[%SYSTEM%]\hdrv2\jumper83122.exe
[%SYSTEM%]\i2\mper83122.exe
[%SYSTEM%]\k1\jumper83122.exe
[%SYSTEM%]\m2\caws83122.exe
[%SYSTEM%]\uie1\aded83122.exe
[%SYSTEM%]\uu2\mper83122.exe
[%SYSTEM%]\v2\swdrv83122.exe
[%SYSTEM%]\VSL03.exe
[%SYSTEM%]\VSL05.exe
[%WINDOWS%]\83122.exe
[%WINDOWS%]\KVTE66.exe
[%WINDOWS%]\RDFX4.exe
[%WINDOWS%]\TEMP\CEMG555077.exe
[%WINDOWS%]\TTC-4444.exe
[%WINDOWS%]\VTTC.exe
[%WINDOWS%]\wallp2.exe
[%PROGRAM_FILES%]\Internet Explorer\quzotufi
[%PROGRAM_FILES%]\Internet Explorer\quzotufi.dll
[%PROGRAM_FILES%]\Internet Explorer\tedaxejy
[%PROGRAM_FILES%]\Internet Explorer\tedaxejy.dll
[%PROGRAM_FILES%]\Messenger\sahohi.html
[%PROGRAM_FILES%]\MSN Gaming Zone\qufefati.html
[%PROGRAM_FILES%]\Windows NT\qurofu.dll
[%WINDOWS%]\qwr67.exe
[%WINDOWS%]\vcttc012.exe
[%INTERNET_CACHE%]\Content.IE5\43WDGVE3\acdt-pid67N[1].exe
[%INTERNET_CACHE%]\Content.IE5\4PY3CHMF\83122[1].exe
[%INTERNET_CACHE%]\Content.IE5\8XMRW96J\TTC-4444[1].exe
[%INTERNET_CACHE%]\content.ie5\GFES34KZ\vsl02[1].ini
[%INTERNET_CACHE%]\Content.IE5\MRMHS18Z\acdt-pid67N[1].exe
[%INTERNET_CACHE%]\Content.IE5\SDQZGTYN\TTC-4444[1].exe
[%INTERNET_CACHE%]\Content.IE5\SPAFK567\83122[1].exe
[%INTERNET_CACHE%]\Content.IE5\SPAFK567\TTC-4444[1].exe
[%PROFILE_TEMP%]\CEMG555077.exe
[%PROGRAM_FILES%]\ComPlus Applications\honewafep4444.dll
[%PROGRAM_FILES%]\ComPlus Applications\honewafep83122.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys4444.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys555077.dll
[%PROGRAM_FILES%]\ComPlus Applications\qubomys83122.dll
[%PROGRAM_FILES%]\CONEXANT\niqysew.dll
[%PROGRAM_FILES%]\Internet Explorer\merote4444.dll
[%PROGRAM_FILES%]\Internet Explorer\merote555077.dll
[%PROGRAM_FILES%]\Internet Explorer\merote83122.dll
[%PROGRAM_FILES%]\Internet Explorer\tevoh4444.dll
[%PROGRAM_FILES%]\Internet Explorer\tevoh83122.dll
[%PROGRAM_FILES%]\Internet Explorer\texobajiq4444.dll
[%PROGRAM_FILES%]\iPod\safehutag4444.dll
[%PROGRAM_FILES%]\iPod\safehutag83122.dll
[%PROGRAM_FILES%]\Messenger\rtemem.html
[%PROGRAM_FILES%]\Movie Maker\hokemoqy4444.dll
[%PROGRAM_FILES%]\Movie Maker\hokemoqy83122.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mevo4444.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mevo83122.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mewof4444.dll
[%PROGRAM_FILES%]\MSN Gaming Zone\mewof83122.dll
[%PROGRAM_FILES%]\MSN\holemupy83122.dll
[%PROGRAM_FILES%]\MSN\meqoca4444.dll
[%PROGRAM_FILES%]\MSN\meqoca83122.dll
[%PROGRAM_FILES%]\MSN\qubo4444.dll
[%PROGRAM_FILES%]\MSN\qubo83122.dll
[%PROGRAM_FILES%]\MSN\tehonev4444.dll
[%PROGRAM_FILES%]\MSN\tehonev83122.dll
[%PROGRAM_FILES%]\NetMeeting\meno4444.dll
[%PROGRAM_FILES%]\NetMeeting\meno83122.dll
[%PROGRAM_FILES%]\NetMeeting\qurocupaz4444.dll
[%PROGRAM_FILES%]\NetMeeting\tevoh4444.dll
[%PROGRAM_FILES%]\OfficeUpdate11\hoke4444.dll
[%PROGRAM_FILES%]\Online Services\hokemoqy4444.dll
[%PROGRAM_FILES%]\Online Services\hokemoqy83122.dll
[%PROGRAM_FILES%]\Online Services\hoseduga4444.dll
[%PROGRAM_FILES%]\Online Services\hoseduga83122.dll
[%PROGRAM_FILES%]\Online Services\nizycij4444.dll
[%PROGRAM_FILES%]\Online Services\nizycij555077.dll
[%PROGRAM_FILES%]\Online Services\nizycij83122.dll
[%PROGRAM_FILES%]\Outlook Express\mepow4444.dll
[%PROGRAM_FILES%]\Outlook Express\mepow83122.dll
[%PROGRAM_FILES%]\Outlook Express\qurocupaz4444.dll
[%PROGRAM_FILES%]\Outlook Express\qurocupaz83122.dll
[%PROGRAM_FILES%]\TTC.dll
[%PROGRAM_FILES%]\Windows Media Player\mesofigy4444.dll
[%PROGRAM_FILES%]\Windows Media Player\mesofigy83122.dll
[%PROGRAM_FILES%]\Windows NT\hokeno4444.dll
[%PROGRAM_FILES%]\Windows NT\hokeno83122.dll
[%PROGRAM_FILES%]\Windows NT\hokepot83122.dll
[%PROGRAM_FILES%]\Windows NT\hoxeni
[%PROGRAM_FILES%]\Windows NT\menoru83122.dll
[%PROGRAM_FILES%]\Windows NT\mexoca4444.dll
[%PROGRAM_FILES%]\Windows NT\mexoca83122.dll
[%PROGRAM_FILES%]\Windows NT\nipyra4444.dll
[%PROGRAM_FILES%]\Windows NT\nipyra83122.dll
[%PROGRAM_FILES%]\WindowsUpdate\hokemoqy4444.dll
[%PROGRAM_FILES%]\WindowsUpdate\mesofigy4444.dll
[%PROGRAM_FILES_COMMON%]\holen4444.dll
[%PROGRAM_FILES_COMMON%]\holen555077.dll
[%PROGRAM_FILES_COMMON%]\holen83122.dll
[%PROGRAM_FILES_COMMON%]\hote4444.dll
[%PROGRAM_FILES_COMMON%]\hote83122.dll
[%PROGRAM_FILES_COMMON%]\metoc24418.dll
[%PROGRAM_FILES_COMMON%]\metoc83122.dll
[%PROGRAM_FILES_COMMON%]\sabe4444.dll
[%PROGRAM_FILES_COMMON%]\sabe83122.dll
[%SYSTEM%]\0ce8rglo.dll
[%SYSTEM%]\DH9013.exe
[%SYSTEM%]\e1\caws83122.exe
[%SYSTEM%]\e2\caws83122.exe
[%SYSTEM%]\g2\caws83122.exe
[%SYSTEM%]\h2\jumper83122.exe
[%SYSTEM%]\hdrv2\jumper83122.exe
[%SYSTEM%]\i2\mper83122.exe
[%SYSTEM%]\k1\jumper83122.exe
[%SYSTEM%]\m2\caws83122.exe
[%SYSTEM%]\uie1\aded83122.exe
[%SYSTEM%]\uu2\mper83122.exe
[%SYSTEM%]\v2\swdrv83122.exe
[%SYSTEM%]\VSL03.exe
[%SYSTEM%]\VSL05.exe
[%WINDOWS%]\83122.exe
[%WINDOWS%]\KVTE66.exe
[%WINDOWS%]\RDFX4.exe
[%WINDOWS%]\TEMP\CEMG555077.exe
[%WINDOWS%]\TTC-4444.exe
[%WINDOWS%]\VTTC.exe
[%WINDOWS%]\wallp2.exe
[%PROGRAM_FILES%]\Internet Explorer\quzotufi
[%PROGRAM_FILES%]\Internet Explorer\quzotufi.dll
[%PROGRAM_FILES%]\Internet Explorer\tedaxejy
[%PROGRAM_FILES%]\Internet Explorer\tedaxejy.dll
[%PROGRAM_FILES%]\Messenger\sahohi.html
[%PROGRAM_FILES%]\MSN Gaming Zone\qufefati.html
[%PROGRAM_FILES%]\Windows NT\qurofu.dll
[%WINDOWS%]\qwr67.exe
[%WINDOWS%]\vcttc012.exe  
    Registry Keys:  
HKEY_CLASSES_ROOT\clsid\{22d82699-94cb-4cae-a1ef-bbae81cb35b5}
HKEY_CLASSES_ROOT\clsid\{527dd198-69ce-4181-e180-d722cff6afdb}
HKEY_CLASSES_ROOT\clsid\{562b10e6-d18d-4c11-849a-00a4b270800d}
HKEY_CLASSES_ROOT\clsid\{58550639-8019-4d31-969a-19d239f81e2a}
HKEY_CLASSES_ROOT\clsid\{619244ae-b6a9-4dc8-800c-a132b9e28347}
HKEY_CLASSES_ROOT\clsid\{793c1352-9291-4b06-da94-b45fce07645d}\inprocserver32
HKEY_CLASSES_ROOT\clsid\{9374a8ae-9a96-46b8-91bb-16c6d5ec5360}
HKEY_CLASSES_ROOT\clsid\{9c902576-5453-4c84-ae07-53a91272b467}
HKEY_CLASSES_ROOT\clsid\{af39041d-c020-4d75-b196-44ccce6c6011}
HKEY_CLASSES_ROOT\clsid\{dd55b751-bb09-4009-ba49-149cfdf72e03}
HKEY_CLASSES_ROOT\clsid\{e4294230-2313-4b1b-7681-2012e5ca700d}
HKEY_CLASSES_ROOT\clsid\{f61cdc11-6889-44df-e3a5-22b82c5e5522}
HKEY_CLASSES_ROOT\clsid\{f8497707-34bf-4842-8f8c-ad473cb4cdb5}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22d82699-94cb-4cae-a1ef-bbae81cb35b5}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{527dd198-69ce-4181-e180-d722cff6afdb}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{562b10e6-d18d-4c11-849a-00a4b270800d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{58550639-8019-4d31-969a-19d239f81e2a}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{619244ae-b6a9-4dc8-800c-a132b9e28347}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9374a8ae-9a96-46b8-91bb-16c6d5ec5360}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9c902576-5453-4c84-ae07-53a91272b467}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{af39041d-c020-4d75-b196-44ccce6c6011}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{dd55b751-bb09-4009-ba49-149cfdf72e03}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{e4294230-2313-4b1b-7681-2012e5ca700d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f61cdc11-6889-44df-e3a5-22b82c5e5522}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f8497707-34bf-4842-8f8c-ad473cb4cdb5}  
   Registry Values:  
HKEY_CLASSES_ROOT\clsid\{f3627f12-b4d8-4f4a-8fa0-a5baa780a975}\inprocserver32
HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0
HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1  
    
Removing ZQuest:
  An up-to-date copy of ExterminateIt  should detect and prevent infection from ZQuest.
    If you do not have ExterminateIt and you are worried that you may have infected computer,   you could run trial version of ExterminateIt,  or remove ZQuest manually.
  To completely manually remove ZQuest malware from your computer,  you need to delete the Windows registry keys and registry values, the files and folders  associated with ZQuest.
   Use Task Manager to terminate the ZQuest process.
   Delete the original ZQuest file and folders.
   Delete the system registry key parameters
   Update your antivirus databases or buy antivirus software  and perform a full scan of the computer.
  
    We recommends that all Internet users    back up any important information on their computers,    enable maximum protection from network attacks and malicious code on their computers,    refrain from executing suspicious programs received from untrustworthy sources.  
      ExterminateIt effectively and automatically removes ZQuest from you computer    and is a good solution for those who are seeking easy and effective protection for their computer    from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).  
      Download ExterminateIt!    to instantly get rid of ZQuest!  
Also Be Aware of the Following Threats:
Clix0r.exe Trojan Information






 














0
comments:
      


Post a Comment







Newer Post


Older Post



Remove Malware and Viruses Home Page




Subscribe to:
Post Comments (Atom)



Subscribe To







Posts










                  Atom
                










Posts












Comments










                  Atom
                










Comments


Blog Archive






▼ 

2009
            (836)
          



► 

02
            (88)
          



► 

04
            (2)
          





► 

03
            (34)
          





► 

02
            (31)
          





► 

01
            (21)
          







▼ 

01
            (748)
          



► 

31
            (21)
          





► 

30
            (20)
          





► 

29
            (30)
          





► 

28
            (36)
          





► 

27
            (35)
          





► 

26
            (31)
          





► 

25
            (29)
          





► 

24
            (27)
          





► 

23
            (25)
          





► 

22
            (32)
          





► 

21
            (27)
          





► 

20
            (24)
          





► 

19
            (27)
          





► 

18
            (15)
          





► 

16
            (3)
          





► 

15
            (13)
          





► 

14
            (27)
          





► 

13
            (24)
          





► 

12
            (20)
          





► 

11
            (23)
          





► 

10
            (17)
          





► 

09
            (19)
          





► 

08
            (23)
          





► 

07
            (32)
          





► 

06
            (19)
          





► 

05
            (30)
          





► 

04
            (29)
          





▼ 

03
            (29)
          

Jekt Trojan
PSW.Dina Trojan
SA.MP.server.abuse.mini DoS
C4 Backdoor
Boot.IIA.Beta RAT
Zlob.Fam.HQVideoCodec Trojan
SillyDl.CJP Trojan
SdBot.vu Backdoor
Vxidl.AQU Trojan
Pigeon.AKM Trojan
PCBB Trojan
ParisHilton.ScreenSaver Spyware
Koochay Trojan
VCatch.Antivirus Adware
Wolfmp Trojan
Bancos.GDV Trojan
DesktopMedia Trojan
Pigeon.EYO Trojan
P3 Adware
ZQuest Trojan
KoreanDoumi Adware
AphexSniffer Trojan
Sadhound Trojan
AntiMIT Trojan
Pigeon.AVPQ Trojan
Lineage.AAZ Trojan
PWD Trojan
Vxidl.BBV Trojan
PSGuard Trojan






► 

02
            (31)
          





► 

01
            (30)
          









► 

2008
            (3208)
          



► 

12
            (855)
          



► 

31
            (26)
          





► 

30
            (30)
          





► 

29
            (31)
          





► 

28
            (24)
          





► 

27
            (34)
          





► 

26
            (27)
          





► 

25
            (24)
          





► 

24
            (32)
          





► 

23
            (13)
          





► 

22
            (30)
          





► 

21
            (31)
          





► 

20
            (26)
          





► 

19
            (28)
          





► 

18
            (21)
          





► 

17
            (22)
          





► 

16
            (30)
          





► 

15
            (33)
          





► 

14
            (28)
          





► 

13
            (27)
          





► 

12
            (37)
          





► 

11
            (21)
          





► 

10
            (27)
          





► 

09
            (25)
          





► 

08
            (31)
          





► 

07
            (24)
          





► 

06
            (31)
          





► 

05
            (30)
          





► 

04
            (33)
          





► 

03
            (23)
          





► 

02
            (28)
          





► 

01
            (28)
          







► 

11
            (813)
          



► 

30
            (27)
          





► 

29
            (31)
          





► 

28
            (25)
          





► 

27
            (27)
          





► 

26
            (30)
          





► 

25
            (31)
          





► 

24
            (22)
          





► 

23
            (26)
          





► 

22
            (25)
          





► 

21
            (23)
          





► 

20
            (28)
          





► 

19
            (31)
          





► 

18
            (30)
          





► 

17
            (28)
          





► 

16
            (28)
          





► 

15
            (24)
          





► 

14
            (25)
          





► 

13
            (28)
          





► 

12
            (25)
          





► 

11
            (35)
          





► 

10
            (30)
          





► 

09
            (27)
          





► 

08
            (31)
          





► 

07
            (36)
          





► 

06
            (36)
          





► 

05
            (27)
          





► 

04
            (5)
          





► 

03
            (28)
          





► 

02
            (24)
          





► 

01
            (20)
          







► 

10
            (784)
          



► 

31
            (21)
          





► 

30
            (16)
          





► 

29
            (17)
          





► 

28
            (23)
          





► 

27
            (17)
          





► 

26
            (16)
          





► 

25
            (16)
          





► 

24
            (21)
          





► 

23
            (20)
          





► 

22
            (23)
          





► 

21
            (14)
          





► 

20
            (17)
          





► 

19
            (22)
          





► 

18
            (16)
          





► 

17
            (15)
          





► 

16
            (21)
          





► 

15
            (26)
          





► 

14
            (24)
          





► 

13
            (32)
          





► 

12
            (16)
          





► 

11
            (26)
          





► 

10
            (37)
          





► 

09
            (41)
          





► 

08
            (36)
          





► 

07
            (31)
          





► 

06
            (25)
          





► 

05
            (28)
          





► 

04
            (30)
          





► 

03
            (51)
          





► 

02
            (42)
          





► 

01
            (44)
          







► 

09
            (756)
          



► 

30
            (44)
          





► 

29
            (46)
          





► 

28
            (37)
          





► 

27
            (41)
          





► 

26
            (45)
          





► 

25
            (28)
          





► 

24
            (3)
          





► 

23
            (38)
          





► 

22
            (46)
          





► 

21
            (45)
          





► 

20
            (7)
          





► 

19
            (30)
          





► 

18
            (26)
          





► 

17
            (22)
          





► 

16
            (31)
          





► 

15
            (23)
          





► 

14
            (29)
          





► 

13
            (30)
          





► 

12
            (27)
          





► 

11
            (34)
          





► 

10
            (31)
          





► 

09
            (19)
          





► 

08
            (28)
          





► 

07
            (26)
          





► 

06
            (20)


Usefull Links

Info about malware |  Computer Infections




Search Viruses














ExterminateIt, powerful anti-virus and anti-malware solution defends your PC and notebook with ease. Now you can feel the meaning of Real Personal Protection with Submit State feature fastest possible responder to Your Threats in 24 hours. Huge everyday-updated Malware Database sustains your protection. It is compatible with other security suites.

User reviews:
Having wasted better part of a day on a Vundo infection, which none of the antivirus/antispyware solutions I normally use came even close to handling (one of them actually compounded the problem due to a partial fix, causing all browsers to seemingly lose connectivity after a few seconds), Exterminate It! fixed it in a single pass and one restart.
Nothing short of perfect. A few dollars very well spent.
Does not slow your machine dow, I will use it check my system often as there seems an influx of Malware and others around at the moment. As I said it is fast and does not take up resources.

Remove Malware and Viruses

ZQuest Trojan

Detecting ZQuest:

Removing ZQuest:

0 comments:

Subscribe To

Blog Archive

Usefull Links

Search Viruses

User reviews: