Backdoor Koutodoor – gjnuk.sys – 209996da0b26edea5f1615a22276c03a

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Backdoor Koutodoor
Also known as: Trojan Eldorado
SHA256: f099f798b2c8d50b707d1da1ef59f853e10dd88c57ab43ac575e187b70d0002d
SHA1: 74c5a0b5ff8e36ba4fa7c251b43d85cfaec44612
MD5: 209996da0b26edea5f1615a22276c03a
File size: 180480 bytes

Created files:

%SysDir%\drivers\gjnuk.sys – Backdoor Koutodoor
%SysDir%\towstp.bat – Backdoor Koutodoor
%SysDir%\uovsig.dll – Backdoor Koutodoor

Backdoor Koutodoor created autostart registry keys:

HKLM\System\CurrentControlSet\Services\gjnuk\Type: 01000000
HKLM\System\CurrentControlSet\Services\gjnuk\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\gjnuk\DisplayName: gjnuk
HKLM\System\CurrentControlSet\Services\gjnuk\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0067006A006E0075006B002E007300790073000000

Leave a Reply