I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
BEDFNF.SYS – Backdoor Koutodoor removal
| File | MD5 | Virus Alias |
|---|---|---|
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Backdoor Koutodoor |
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Trojan XPACK |
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Trojan Xema |
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Trojan Eldorado |
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Trojan Downloader |
| BEDFNF.SYS | 9085de6a6e42837a22b99ac5f63daf87 | Trojan Agent |
BEDFNF.SYS size: 30144 bytes
BEDFNF.SYS hash: 9085DE6A6E42837A22B99AC5F63DAF87
Created files:
%SysDir%\drivers\bedfnf.sys
%SysDir%\OEplh.dll
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\lsly\Type: 01000000
HKLM\System\CurrentControlSet\Services\lsly\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\lsly\DisplayName: lsly
HKLM\System\CurrentControlSet\Services\lsly\ImagePath: %WinDir%\System32\drivers\bedfnf.sys
Detected by UnHackMe:
BEDFNF.SYS
Default location: %SYSDIR%\DRIVERS\BEDFNF.SYS
Dropper information:
MD5: 3a26c251a1f64d06eafbbee9885b0487
File size: 199168 bytes