aqlb.hjo

aqlb.hjo is usually located in the 'c:\WINDOWS\system32\' folder.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

aqlb.hjo does not have any version or vendor information.

Digital signatures [?]

aqlb.hjo is not signed.

What will you do with aqlb.hjo?

To help other users, please let us know what you will do with aqlb.hjo:

What did other users do?

The poll result listed below shows what other users chose to do with aqlb.hjo:

User vote results: There were 74 votes to remove and 24 votes to keep

NOTE: Please do not use this poll as the only source of input to determine what you will do with aqlb.hjo.

Hashes [?]

Property	Value
MD5	067242c2a67ffea44eb6785ff7e52e6d
SHA256	4119be85049cf5c3038d4772c412128157fceb517fe4e4d1cd5b12e2291ce051

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Free online surveys

And now some shameless self promotion ;)

Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/20008/Vista/7/8. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

Roger Karlsson writes

0 thumbs

aqlb.hjo is malware:
http://www.virustotal.com/sv/analisis/4119be85049cf5c3038d4772c412128157fceb517fe4e4d1cd5b12e2291ce051-1264726723

It appeared on my lab computer after opening an attachment named DHL_label_NR19754.zip.

Another file named incognito.exe also appeared on the system:
http://www.freefixer.com/library/file/50665/

Shortly after that the Internet Security 2010 malware was installed (is2010.exe, smss32.exe, helper32.dll, winlogon32.exe):
http://www.freefixer.com/library/file/46038/

# 30 Jan 2010, 1:44

Delbert Allen writes

3 thumbs

This is a Trojan down loader, which attacked my PC from an attachment that was accompanying an email, (a fake alert) supposedly from UPS, stating that I had an undeliverable package, due to an incorrect address. I have an account with UPS, and I thought it was legit. Following is a link bearing info on this:

http://www.threatexpert.com/report.aspx?md5=f71d48a86776f8c0da4d7a46257ff97c

Also, www.snopes.com shows copies of the wording of the fake letter

# 30 Jan 2010, 9:41

Ettienne Cronje writes

1 thumb

I opened an attachment from UPS and was attacked by this ajlb.hjo "thing". How can I remove it? I noticed that my Internet Explorer has slowed down dramatically.

# 1 Feb 2010, 16:21