Backdoor Koutodoor – apayfu.bat – 288efd9dca7b1b7c46efe2a089feb53b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Koutodoor
Also known as: Trojan Eldorado, Trojan Agent
SHA256: ecb7421c2b8d9d3ea0ca22cd5d8fbdac00028c4633c0cdf7e39aefba663b2bb1
SHA1: 65926db65767232e419fef9e8a7905bca56cabfa
MD5: 288efd9dca7b1b7c46efe2a089feb53b
File size: 172288 bytes

Created files:

%SysDir%\apayfu.bat – Backdoor Koutodoor
%SysDir%\drivers\uhsyhxp.sys – Backdoor Koutodoor
%SysDir%\iymeg.dll – Backdoor Koutodoor

Backdoor Koutodoor created autostart registry keys:

HKLM\System\CurrentControlSet\Services\uhsyhxp\Type: 01000000
HKLM\System\CurrentControlSet\Services\uhsyhxp\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\uhsyhxp\DisplayName: uhsyhxp
HKLM\System\CurrentControlSet\Services\uhsyhxp\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0075006800730079006800780070002E007300790073000000

Leave a Reply