Backdoor Hupigon – Etool.exe – 0c03cee4db1f4cb66987eb32e470f2cb

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Hupigon
Also known as: Trojan CI, Trojan Vilsel
SHA256: 97d76164e9bbd7b9d35ef4ae059d858e9283a2fe9100bd7f10f4e18085635417
SHA1: 9c988a6a148bb61fc4919d35b2467417c33b7442
MD5: 0c03cee4db1f4cb66987eb32e470f2cb
File size: 622369 bytes

Created files:

%WinDir%\Etool.exe – Backdoor Hupigon
%WinDir%\Uer.bat – Backdoor Hupigon

Backdoor Hupigon created autostart registry keys:

HKLM\System\CurrentControlSet\Services\The Etool \Type: 10010000
HKLM\System\CurrentControlSet\Services\The Etool \Start: 02000000
HKLM\System\CurrentControlSet\Services\The Etool \DisplayName: Etool
HKLM\System\CurrentControlSet\Services\The Etool \ImagePath: %WinDir%\Etool.exe

Leave a Reply