Backdoor Farfli – bddeebcafe19f111d9f08d92ef11f63d

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Farfli
Also known as: Trojan Birele, Trojan Magania
SHA256: 8f8330c3f061de199b7c12d53c53a64345315d684369f6f03765c8a4c8fd6f90
SHA1: bf3736cb9b9f6c5f4829b54fb01842154c6a8581
MD5: bddeebcafe19f111d9f08d92ef11f63d
File size: 160821 bytes

Created files:

C:\Windows\LocalUser\2cafa7kill.dll – Backdoor Farfli

Backdoor Farfli created autostart registry keys:

HKLM\System\CurrentControlSet\Services\360svc\Type: 10000000
HKLM\System\CurrentControlSet\Services\360svc\Start: 02000000
HKLM\System\CurrentControlSet\Services\360svc\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\360svc\DisplayName: McAfee Network v3 myung
HKLM\System\CurrentControlSet\Services\360svc\ImagePath: %SystemRoot%\System32\svchost.exe -k netsvcs
HKLM\System\CurrentControlSet\Services\360svc\Description: Allows McAfee applications to communicate securely on the local network.
HKLM\System\CurrentControlSet\Services\360svc\InstallModule: myung(2).EXE
HKLM\System\CurrentControlSet\Services\360svc\Parameters\ServiceDll: 43003A005C00570069006E0064006F00770073005C004C006F00630061006C0055007300650072005C003200630061006600610037006B0069006C006C002E0064006C006C000000

Leave a Reply