Backdoor Hupigon – AutoRun.inf – 650010202d0ef882713becd77f24f70d

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Hupigon
Also known as: Trojan Eldorado, Trojan Delf
SHA256: c7a9b91904026ca85ebd71486f432021f256c4932e82f3e42aa426f8b10793d8
SHA1: 6421d58b1666549ebdb1466d0062a42e7e6d1a02
MD5: 650010202d0ef882713becd77f24f70d
File size: 778752 bytes

Created files:

C:\AutoRun.inf – Backdoor Hupigon
%Program Files%\_Server.exe – Backdoor Hupigon
C:\Server.exe – Backdoor Hupigon
%SysDir%\ReDelBat.bat – Backdoor Hupigon
%SysDir%\Server.exe – Backdoor Hupigon

Backdoor Hupigon created autostart registry keys:

HKLM\System\CurrentControlSet\Services\Reporing Service\Type: 10010000
HKLM\System\CurrentControlSet\Services\Reporing Service\Start: 02000000
HKLM\System\CurrentControlSet\Services\Reporing Service\DisplayName: Reporing Service
HKLM\System\CurrentControlSet\Services\Reporing Service\ImagePath: %WinDir%\System32\Server.exe

Leave a Reply