WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot removal

FileMD5Virus Alias
WIRELESS NETWORK SETUP WIZARD.EXE 15f047d46953edf66820c3a7295ed5af Backdoor IRCBot
WIRELESS NETWORK SETUP WIZARD.EXE 15f047d46953edf66820c3a7295ed5af Trojan SuspiciousFile
WIRELESS NETWORK SETUP WIZARD.EXE 15f047d46953edf66820c3a7295ed5af Backdoor Maximus
WIRELESS NETWORK SETUP WIZARD.EXE 15f047d46953edf66820c3a7295ed5af Trojan Delphi
WIRELESS NETWORK SETUP WIZARD.EXE 15f047d46953edf66820c3a7295ed5af Trojan Delf

WIRELESS NETWORK SETUP WIZARD.EXE size: 1459527 bytes
WIRELESS NETWORK SETUP WIZARD.EXE hash: 15F047D46953EDF66820C3A7295ED5AF

Created files:

%SysDir%\sIRC4.exe
%SysDir%\xdccPrograms\Network Setup Wizard.exe
%SysDir%\xdccPrograms\Opera_1161_int_Setup.exe
%SysDir%\xdccPrograms\Wireless Network Setup Wizard.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe sIRC4.exe

Detected by UnHackMe:

WIRELESS NETWORK SETUP WIZARD.EXE
Default location: %SYSDIR%\XDCCPROGRAMS\WIRELESS NETWORK SETUP WIZARD.EXE

Dropper information:
MD5: 6391f97c78d39db5dc2de954ff9e55c6
File size: 1444582 bytes

Leave a Reply