APP.EXE – Backdoor Hupigon

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

APP.EXE – Backdoor Hupigon removal

FileMD5Virus Alias
APP.EXE 317c68622e1329fc4a2844aa066ae474 Backdoor Hupigon
APP.EXE 317c68622e1329fc4a2844aa066ae474 Trojan SuspiciousFile
APP.EXE 317c68622e1329fc4a2844aa066ae474 Trojan Artemis
APP.EXE 317c68622e1329fc4a2844aa066ae474 Trojan Generic
APP.EXE 317c68622e1329fc4a2844aa066ae474 Trojan Eldorado
APP.EXE 317c68622e1329fc4a2844aa066ae474 Trojan CI

APP.EXE size: 243200 bytes
APP.EXE hash: 317C68622E1329FC4A2844AA066AE474

Created files:

%SysDir%\app.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\[Random-Number-Here]\StubPath: %WinDir%\System32\app.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\app: %WinDir%\System32\app.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%WinDir%\System32\app.exe

Detected by UnHackMe:

APP.EXE
Default location: %SYSDIR%\APP.EXE

Dropper information:
MD5: 317c68622e1329fc4a2844aa066ae474
File size: 243200 bytes

Leave a Reply