Solved! Use DEKSB.DLL (Backdoor Koutodoor) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

DEKSB.DLL – Backdoor Koutodoor removal

File MD5 Virus Alias
DEKSB.DLL 8ab5a3ec8491cade699fdd4a381b2dc8 Backdoor Koutodoor
DEKSB.DLL 8ab5a3ec8491cade699fdd4a381b2dc8 Trojan Generic
DEKSB.DLL 8ab5a3ec8491cade699fdd4a381b2dc8 Trojan Eldorado
DEKSB.DLL 8ab5a3ec8491cade699fdd4a381b2dc8 Trojan Adload
DEKSB.DLL 8ab5a3ec8491cade699fdd4a381b2dc8 Trojan Crypt

DEKSB.DLL size: 73728 bytes
DEKSB.DLL hash: 8AB5A3EC8491CADE699FDD4A381B2DC8

Created files:

%SysDir%\deksb.dll
%SysDir%\drivers\slj.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\slj\Type: 01000000
HKLM\System\CurrentControlSet\Services\slj\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\slj\DisplayName: slj
HKLM\System\CurrentControlSet\Services\slj\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0073006C006A002E007300790073000000

Detected by UnHackMe:

DEKSB.DLL
Default location: %SYSDIR%\DEKSB.DLL

Dropper information:
MD5: c5d811706076e3c7f26bcff8cc533fad
File size: 172288 bytes

Leave a Reply