Solved! Use AUTOEXEC.EXE (Backdoor Farfli) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

AUTOEXEC.EXE – Backdoor Farfli removal

File MD5 Virus Alias
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Backdoor Farfli
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Trojan Generic
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Virus Part
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Trojan Graftor
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Rootkit TDSS
AUTOEXEC.EXE ba444238e753ecc6eb316c233d2b22b0 Trojan Agent

AUTOEXEC.EXE size: 98319 bytes
AUTOEXEC.EXE hash: BA444238E753ECC6EB316C233D2B22B0

Created files:

%SysDir%\Autoexec.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ConnectGroup: 6gkIBfkS+qY=
HKLM\System\CurrentControlSet\Services\DirectX jrq\Type: 10010000
HKLM\System\CurrentControlSet\Services\DirectX jrq\Start: 02000000
HKLM\System\CurrentControlSet\Services\DirectX jrq\DisplayName: DirectX Remover yta for Windows(R).
HKLM\System\CurrentControlSet\Services\DirectX jrq\ImagePath: %WinDir%\System32\Autoexec.exe

Detected by UnHackMe:

AUTOEXEC.EXE
Default location: %SYSDIR%\AUTOEXEC.EXE

Dropper information:
MD5: ba444238e753ecc6eb316c233d2b22b0
File size: 98319 bytes

Leave a Reply