BUVAEU.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

BUVAEU.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
BUVAEU.SYS 950f9231363c88a2864009a0e96253a5 Backdoor Koutodoor
BUVAEU.SYS 950f9231363c88a2864009a0e96253a5 Trojan Generic
BUVAEU.SYS 950f9231363c88a2864009a0e96253a5 Trojan MLW
BUVAEU.SYS 950f9231363c88a2864009a0e96253a5 Trojan Eldorado
BUVAEU.SYS 950f9231363c88a2864009a0e96253a5 Trojan Agent

BUVAEU.SYS size: 40448 bytes
BUVAEU.SYS hash: 950F9231363C88A2864009A0E96253A5

Created files:

%SysDir%\drivers\buvaeu.sys
%SysDir%\ewiky.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\buvaeu\Type: 01000000
HKLM\System\CurrentControlSet\Services\buvaeu\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\buvaeu\DisplayName: buvaeu
HKLM\System\CurrentControlSet\Services\buvaeu\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006200750076006100650075002E007300790073000000

Detected by UnHackMe:

BUVAEU.SYS
Default location: %SYSDIR%\DRIVERS\BUVAEU.SYS

Dropper information:
MD5: 2dc34188760347e15848ae1677c88f38
File size: 89856 bytes

Leave a Reply