Backdoor Farfli – 12ed17cd89808dbc6657075a1073a71a

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Farfli
Also known as: Trojan Magania, Trojan Delf
SHA256: 6635884f6f9b1aa13b0fc3b9246b565fb0d7a12d75205e4da7173710d2796b0c
SHA1: 066591245dd90dea00cf8677a1c0e58ca6d4efc9
MD5: 12ed17cd89808dbc6657075a1073a71a
File size: 236361 bytes

Created files:

C:\Windows\LocalUser\1f5c6kill.dll – Backdoor Farfli

Backdoor Farfli created autostart registry keys:

HKLM\System\CurrentControlSet\Services\360svc\Type: 10000000
HKLM\System\CurrentControlSet\Services\360svc\Start: 02000000
HKLM\System\CurrentControlSet\Services\360svc\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\360svc\DisplayName: McAfee Network qq ahfmsek
HKLM\System\CurrentControlSet\Services\360svc\ImagePath: %SystemRoot%\System32\svchost.exe -k netsvcs
HKLM\System\CurrentControlSet\Services\360svc\Description: Allows McAfee applications to communicate securely on the local network.
HKLM\System\CurrentControlSet\Services\360svc\InstallModule: macha.EXE
HKLM\System\CurrentControlSet\Services\360svc\Parameters\ServiceDll: 43003A005C00570069006E0064006F00770073005C004C006F00630061006C0055007300650072005C00310066003500630036006B0069006C006C002E0064006C006C000000

Leave a Reply