Troj/Bckdr-QES is a Trojan for the Windows platform.
Troj/Bckdr-QES includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Bckdr-QES is installed the following files are created:
<System>\mslfmpk.dll - Detected as Troj/Bckdr-QES.
<System>\dload.ini - Can be deleted.
<System>\setmsx.dat - Can be deleted.
The following registry entry is created to run code exported by
(66220950-9370-7155-8256-014011770067) on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
UrlMon
(66220950-9370-7155-8256-014011770067)
The file mslfmpk.dll is registered as a COM object, creating registry entries under:
HKCR\CLSID\66220950-9370-7155-8256-014011770067