AWVA.DLL – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

AWVA.DLL – Backdoor Koutodoor removal

File MD5 Virus Alias
AWVA.DLL 69af69ad567d73a6c7d9f6fbce7a811e Backdoor Koutodoor
AWVA.DLL 69af69ad567d73a6c7d9f6fbce7a811e Trojan Generic
AWVA.DLL 69af69ad567d73a6c7d9f6fbce7a811e Trojan Eldorado
AWVA.DLL 69af69ad567d73a6c7d9f6fbce7a811e Rootkit TDSS
AWVA.DLL 69af69ad567d73a6c7d9f6fbce7a811e Worm Koobface

AWVA.DLL size: 53248 bytes
AWVA.DLL hash: 69AF69AD567D73A6C7D9F6FBCE7A811E

Created files:

%SysDir%\awva.dll
%SysDir%\drivers\onr.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\onr\Type: 01000000
HKLM\System\CurrentControlSet\Services\onr\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\onr\DisplayName: onr
HKLM\System\CurrentControlSet\Services\onr\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006F006E0072002E007300790073000000

Detected by UnHackMe:

AWVA.DLL
Default location: %SYSDIR%\AWVA.DLL

Dropper information:
MD5: 820a7e84e2bb3b02d5dd7128ae757739
File size: 188672 bytes

Leave a Reply