DBB.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

DBB.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
DBB.SYS 7faaebc461d5f1ed600d33898d7c3417 Backdoor Koutodoor
DBB.SYS 7faaebc461d5f1ed600d33898d7c3417 Trojan Generic
DBB.SYS 7faaebc461d5f1ed600d33898d7c3417 Trojan Eldorado
DBB.SYS 7faaebc461d5f1ed600d33898d7c3417 Trojan Agent
DBB.SYS 7faaebc461d5f1ed600d33898d7c3417 Trojan Crypt

DBB.SYS size: 42368 bytes
DBB.SYS hash: 7FAAEBC461D5F1ED600D33898D7C3417

Created files:

%SysDir%\drivers\dbb.sys
%SysDir%\kimjf.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\dbb\Type: 01000000
HKLM\System\CurrentControlSet\Services\dbb\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\dbb\DisplayName: dbb
HKLM\System\CurrentControlSet\Services\dbb\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006400620062002E007300790073000000

Detected by UnHackMe:

DBB.SYS
Default location: %SYSDIR%\DRIVERS\DBB.SYS

Dropper information:
MD5: 181f2391638525eebc512b6cd2c25333
File size: 151808 bytes

Leave a Reply