Created by anti-spyware software WinDetect:

• Version: 2.10.0

Possible suspicious files:

• %user_profile%\appdata\roaming\kqagaq.scr

%user_profile%\appdata\roaming\kqagaq.scr

• The file does not contain company name.
• File checksum is 41B220079BDA2BF2871F7C2255E80339.
• Windows Explorer starts it automatically.
• Registered as Kqagaq.
• The file may be invisible in Windows Explorer.
• Detected as W32/Bublik.ITT!tr by Fortinet AntiVirus.
• Detected as BackDoor.IRC.NgrBot.42 by DrWeb AntiVirus.
more info ...