Solved! Use CJLMB.DLL (Backdoor Koutodoor) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CJLMB.DLL – Backdoor Koutodoor removal

File MD5 Virus Alias
CJLMB.DLL ecd732c727a89f55e3d9087403d996c4 Backdoor Koutodoor
CJLMB.DLL ecd732c727a89f55e3d9087403d996c4 Trojan Generic
CJLMB.DLL ecd732c727a89f55e3d9087403d996c4 Trojan Eldorado
CJLMB.DLL ecd732c727a89f55e3d9087403d996c4 Trojan Adload
CJLMB.DLL ecd732c727a89f55e3d9087403d996c4 Trojan StartPage

CJLMB.DLL size: 61440 bytes
CJLMB.DLL hash: ECD732C727A89F55E3D9087403D996C4

Created files:

%SysDir%\cjlmb.dll
%SysDir%\drivers\ylncxp.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ylncxp\Type: 01000000
HKLM\System\CurrentControlSet\Services\ylncxp\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ylncxp\DisplayName: ylncxp
HKLM\System\CurrentControlSet\Services\ylncxp\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0079006C006E006300780070002E007300790073000000

Detected by UnHackMe:

CJLMB.DLL
Default location: %SYSDIR%\CJLMB.DLL

Dropper information:
MD5: d788f556760b36012f024d8fca29f447
File size: 147712 bytes

Leave a Reply