Backdoor IRCBot – msconfig.exe – f3e972e2a040740f905a640d0eb9d132

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor IRCBot
Also known as: Worm Autorun, Trojan Agent
SHA256: 9661b7fb16062151874348c3b57ff1366e41e58b8672bdb392af84d75a6592b3
SHA1: 32c8d45434ac5ec0c1fd256288114106cbc1cb5f
MD5: f3e972e2a040740f905a640d0eb9d132
File size: 30208 bytes

Created files:

%AppData%\msconfig.exe – Backdoor IRCBot

Backdoor IRCBot created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate: %AppData%\msconfig.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate: %AppData%\msconfig.exe

Leave a Reply