Troj/QQPass-AM

Category: Viruses and Spyware
Type: Trojan
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/QQPass-AM is a Trojan for the Windows platform with keylogging functionality.

When first run Troj/QQPass-AM copies itself to:

<Windows temp folder>\temp~2
<Windows system folder>\algesetp.exe

and creates the following files:

<Windows system folder>\temp.jpg
<Windows system folder>\windky.dll

The files temp.jpg and windky.dll are clean and can be simply deleted.

The following registry entry is created to run algesetp.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SystUphes
<Windows system folder>\algesetp.exe

Troj/QQPass-AM may attempt to terminate several processes and services related to anti-virus and security programs.