BMOR.DLL – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

BMOR.DLL – Backdoor Koutodoor removal

File MD5 Virus Alias
BMOR.DLL 0ce1d8c3ea99fd48dc6b7f7823ed8371 Backdoor Koutodoor
BMOR.DLL 0ce1d8c3ea99fd48dc6b7f7823ed8371 Trojan Generic
BMOR.DLL 0ce1d8c3ea99fd48dc6b7f7823ed8371 Trojan Eldorado
BMOR.DLL 0ce1d8c3ea99fd48dc6b7f7823ed8371 Trojan Adload
BMOR.DLL 0ce1d8c3ea99fd48dc6b7f7823ed8371 Trojan StartPage

BMOR.DLL size: 61440 bytes
BMOR.DLL hash: 0CE1D8C3EA99FD48DC6B7F7823ED8371

Created files:

%SysDir%\bmor.dll
%SysDir%\drivers\qwpukg.sys
%TEMP%\ibijmg.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\qwpukg\Type: 01000000
HKLM\System\CurrentControlSet\Services\qwpukg\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\qwpukg\DisplayName: qwpukg
HKLM\System\CurrentControlSet\Services\qwpukg\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0071007700700075006B0067002E007300790073000000

Detected by UnHackMe:

BMOR.DLL
Default location: %SYSDIR%\BMOR.DLL

Dropper information:
MD5: 2ff7d3292889296080c1a76fdd6f8976
File size: 249992 bytes

Leave a Reply