The file QMDISPATCH.DLL is identified as a virus dropper.
The dropper QMDISPATCH.DLL is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file QMDISPATCH.DLL loads into the computer memory and tries to connect to the dangerous web site.
Usually the QMDISPATCH.DLL dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the QMDISPATCH.DLL process and delete the file QMDISPATCH.DLL.
Malware Analysis of QMDISPATCH.DLL
Full path on a computer: %SysDir%\QMDispatch.dll
Detected by UnHackMe:
QMDISPATCH.DLL
Default location: %SysDir%\QMDispatch.dll
Removal Results: Success
Number of reboot: 1
QMDISPATCH.DLL is known as:
Trojan.BHO
QMDISPATCH.DLL hash:
- MD5: 8e6e1a1d29ddc38e120afc606ce1d845
The file tries to download information from some web sites.
How to quickly detect QMDISPATCH.DLL presence?
Registry:
- HKLM\Software\Classes\CLSID\{C07DB6A3-34FC-4084-BE2E-76BB9203B049}\InprocServer32\: “%SysDir%\QMDISP~1.DLL”
- HKLM\Software\Classes\CLSID\{EF94624F-EAAE-47CA-BE5B-86FDBF0B2BBA}\InprocServer32\: “%SysDir%\QMDISP~1.DLL”
Files:
- %Temp%\MBX@540@8C3478.###
- %Temp%\~DFE9D2.tmp
- %SysDir%\helper.dll
- %SysDir%\QMDispatch.dll
- %SysDir%\WinIo.dll
- %WinDir%\regadit.ini