DEVIL.EXE – Backdoor Bifrose

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

DEVIL.EXE – Backdoor Bifrose removal

FileMD5Virus Alias
DEVIL.EXE d3b0be1e2280340dabe1bf508f709f23 Backdoor Bifrose
DEVIL.EXE d3b0be1e2280340dabe1bf508f709f23 Trojan Midgare
DEVIL.EXE d3b0be1e2280340dabe1bf508f709f23 Trojan Agent
DEVIL.EXE d3b0be1e2280340dabe1bf508f709f23 Trojan Small
DEVIL.EXE d3b0be1e2280340dabe1bf508f709f23 Trojan Refroso

DEVIL.EXE size: 10136243 bytes
DEVIL.EXE hash: D3B0BE1E2280340DABE1BF508F709F23

Created files:

%TEMP%\Fptzqekqioqq4p1x
%TEMP%\Howbtwoivcim4h7y
%TEMP%\IXP000.TMP\devil.exe
%TEMP%\IXP000.TMP\u95.exe
%TEMP%\Rqbmnxijpbjl5v5e

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

DEVIL.EXE
Default location: %TEMP%\IXP000.TMP\DEVIL.EXE

Dropper information:
MD5: 28e4d7bf89221f059050a75077eb9508
File size: 585728 bytes

Leave a Reply