Associated Malware Groups
The filename is associated with the malware groups:
- Fraudulent Security Program
- Malicious Software
File Behavior
SSQPP.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Registers a Dynamic Link Libray (DLL) File
- The Process is polymorphic and can change its structure
SSQPP.DLL has been the subject of the following behavior:
- Enabled as an In Process Object/Server - Common with DLL Injections
- Registered as a Dynamic Link Library File
- Deleted as a process from disk
- Added as a Winlogon Notification DLL to automatically load on system start up
- Registered as a Dynamic Link Libray (DLL) File
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Created as a process on disk
- Executed as a Process
Country Of Origin
The filename SSQPP.DLL was first seen on Jun 20 2007 in the following geographical regions of the Webroot community:
- Belgium on Jun 20 2007
- Russian Federation on Jul 13 2007
- Italy on Jul 14 2007
- Europe on Jul 14 2007
- Netherlands on Oct 1 2007
- Spain on Oct 1 2007
- Germany on Oct 10 2007
File Name Aliases
SSQPP.DLL can also use the following file names:
- JKHFF.DLL
- VTUTQ.DLL
- SSQRO.DLL
- DDABC.DLL
- JKKLK.DLL
- MLJJH.DLL
- PMKHF.DLL
- PMKHG.DLL
Filesizes
The following file size has been seen:
- 266,336 bytes
- 283,232 bytes
- 263,220 bytes
- 282,208 bytes
- 290,320 bytes
- 278,624 bytes
File Type
The filename SSQPP.DLL refers to many versions of a dynamic link library.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.