Backdoor Zegost – Sogou.exe – f37cc647730264da23171290374bdcd2

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Zegost
Also known as: Trojan Graftor, Trojan Swisyn
SHA256: 9b3c86905f920245368d259e6898ce0bc6f2828595f3cb84149f71b12bce3e4a
SHA1: 6eadb36d1b9375b3301a011c9c40772014282b31
MD5: f37cc647730264da23171290374bdcd2
File size: 96952 bytes

Created files:

%Program Files Common%\Sogou.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\hao567: C:\progra~1\Common Files\Sogou.exe
HKLM\System\CurrentControlSet\Services\BITS\InitTime: 20120919
HKLM\System\CurrentControlSet\Services\BITS\Version: ???
HKLM\System\CurrentControlSet\Services\BITS\Group: ??????

Leave a Reply