RAHLAKQBDL.DLL is Adware Kraddare

July 19, 2012 by NightWatcher
Filed under: Adware 
: Solved!

Fix it immediately:

We received the file RAHLAKQBDL.DLL and detected that RAHLAKQBDL.DLL is not good.
RAHLAKQBDL.DLL is Adware. You should remove the file RAHLAKQBDL.DLL.
Kill the process RAHLAKQBDL.DLL and remove RAHLAKQBDL.DLL from Windows.

Malware Analysis of RAHLAKQBDL.DLL
Full path on a computer: %Program Files%\rahlakqbdl\rahlakqbdl.dll

Detected by UnHackMe:

Item Name: rahlakqbdl
Author: Unknown
Related File: %PROGRAM FILES%\RAHLAKQBDL\RAHLAKQBDL.DLL
Type: Svchost DLLs

Item Name: azbdiwzrbw
Author: Unknown
Related File: %PROGRAM FILES%\AZBDIWZRBW\AZBDIWZRBW.DLL
Type: Svchost DLLs

Item Name: olwomgxtbd
Author: Unknown
Related File: %PROGRAM FILES%\OLWOMGXTBD\OLWOMGXTBD.DLL
Type: Svchost DLLs

Removal Results: Success
Number of reboot: 1

RAHLAKQBDL.DLL is known as:

Adware.Kraddare

RAHLAKQBDL.DLL hash:

  • MD5: c272f872edba17a70ab448577a0915dd
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect RAHLAKQBDL.DLL presence?

Registry:
  • HKLM\System\CurrentControlSet\Services\azbdiwzrbw\Parameters\ServiceDll: “%Program Files%\azbdiwzrbw\azbdiwzrbw.dll”
  • HKLM\System\CurrentControlSet\Services\azbdiwzrbw\DisplayName: “azbdiwzrbw”
  • HKLM\System\CurrentControlSet\Services\azbdiwzrbw\Description: “azbdiwzrbw”
  • HKLM\System\CurrentControlSet\Services\rahlakqbdl\Parameters\ServiceDll: “%Program Files%\rahlakqbdl\rahlakqbdl.dll”
  • HKLM\System\CurrentControlSet\Services\rahlakqbdl\DisplayName: “rahlakqbdl”
  • HKLM\System\CurrentControlSet\Services\rahlakqbdl\Description: “rahlakqbdl”
Folders:
  • %Program Files%\azbdiwzrbw
  • %Program Files%\rahlakqbdl
Files:
  • %Program Files%\azbdiwzrbw\azbdiwzrbw.dll
  • %Program Files%\rahlakqbdl\rahlakqbdl.dll


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.