I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Backdoor Poison
SHA256: d598078ac8f09412800e5ca43569e614e28bb7ee7999bc1ad9debcbf8e43dfab
SHA1: 6c7627c9398a90f82639be35b1b753fe0f49cf48
MD5: 0efc7512e4c0972bd038ea8588d54eda
File size: 1173414 bytes
Created files:
%WinDir%\services.exe – Backdoor Poison
%WinDir%\system\sservice.exe – Backdoor Poison
%SysDir%\fservice.exe – Backdoor Poison
%SysDir%\lncom.exe – Backdoor Poison
%SysDir%\lncom.exe.bat – Backdoor Poison
%SysDir%\TMPS~1.EXE.bat – Backdoor Poison
%SysDir%\winkey.dll – Backdoor Poison
Backdoor Poison created autostart registry keys:
HKLM\Software\Microsoft\Active Setup\Installed Components\{5Y99AE78-58TT-11dW-BE53-Y67078979Y}\StubPath: %WinDir%\System\sservice.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\DirectX For Microsoft? Windows: %WinDir%\System32\fservice.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe %WinDir%\System32\fservice.exe