Solved! Use VWLBTUDRBHWL.EXE (Backdoor SubSeven) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

VWLBTUDRBHWL.EXE – Backdoor SubSeven removal

File MD5 Virus Alias
VWLBTUDRBHWL.EXE bdac8e1e972b6b896da4997aa43ec1c9 Backdoor SubSeven
VWLBTUDRBHWL.EXE bdac8e1e972b6b896da4997aa43ec1c9 Trojan Eldorado
VWLBTUDRBHWL.EXE bdac8e1e972b6b896da4997aa43ec1c9 Backdoor RBot
VWLBTUDRBHWL.EXE bdac8e1e972b6b896da4997aa43ec1c9 Trojan Delf
VWLBTUDRBHWL.EXE bdac8e1e972b6b896da4997aa43ec1c9 Backdoor IRCBot

VWLBTUDRBHWL.EXE size: 990627 bytes
VWLBTUDRBHWL.EXE hash: BDAC8E1E972B6B896DA4997AA43EC1C9

Created files:

%WinDir%\vwlbtudrbhwl.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinLoader: vwlbtudrbhwl.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\WinLoader: vwlbtudrbhwl.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices : vwlbtudrbhwl.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe vwlbtudrbhwl.exe

Detected by UnHackMe:

VWLBTUDRBHWL.EXE
Default location: %WinDir%\VWLBTUDRBHWL.EXE

Dropper information:
MD5: bdac8e1e972b6b896da4997aa43ec1c9
File size: 990627 bytes

Leave a Reply