Backdoor Koutodoor – kcbf.sys – 184ef5d0b8e9443c9925a262d350dade

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Koutodoor
Also known as: Trojan Generic, Trojan Eldorado
SHA256: b7050d6f3b8d01e84a8433292af12a27a88dcf53536ccef16a4d252c9d939338
SHA1: 893e42a7a9588eccb7c2f98ef8fc74b1d09cf572
MD5: 184ef5d0b8e9443c9925a262d350dade
File size: 131328 bytes

Created files:

%SysDir%\drivers\kcbf.sys – Backdoor Koutodoor
%SysDir%\fkehn.dll – Backdoor Koutodoor
%SysDir%\ftbtpu.bat – Backdoor Koutodoor

Backdoor Koutodoor created autostart registry keys:

HKLM\System\CurrentControlSet\Services\kcbf\Type: 01000000
HKLM\System\CurrentControlSet\Services\kcbf\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\kcbf\DisplayName: kcbf
HKLM\System\CurrentControlSet\Services\kcbf\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006B006300620066002E007300790073000000

Leave a Reply