I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
ATSVAF.EXE – Backdoor Koutodoor removal
| File | MD5 | Virus Alias |
|---|---|---|
| ATSVAF.EXE | f369000f9be694afc817aafe562f02f5 | Backdoor Koutodoor |
| ATSVAF.EXE | f369000f9be694afc817aafe562f02f5 | Trojan Generic |
| ATSVAF.EXE | f369000f9be694afc817aafe562f02f5 | Trojan Eldorado |
| ATSVAF.EXE | f369000f9be694afc817aafe562f02f5 | Trojan Agent |
ATSVAF.EXE size: 88832 bytes
ATSVAF.EXE hash: F369000F9BE694AFC817AAFE562F02F5
Created files:
%SysDir%\drivers\lucq.sys
%SysDir%\mhacd.dll
%TEMP%\atsvaf.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\lucq\Type: 01000000
HKLM\System\CurrentControlSet\Services\lucq\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\lucq\DisplayName: lucq
HKLM\System\CurrentControlSet\Services\lucq\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006C007500630071002E007300790073000000
Detected by UnHackMe:
ATSVAF.EXE
Default location: %TEMP%\ATSVAF.EXE
Dropper information:
MD5: 1d52616cb4473bd426d5efa0cdd60b4e
File size: 143424 bytes