Solved! Use DGPD.SYS (Backdoor Koutodoor) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

DGPD.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Backdoor Koutodoor
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Trojan Generic
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Trojan Eldorado
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Trojan Siggen
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Trojan Agent
DGPD.SYS 55944baf4788f96accc6ead7cd1f3fa9 Trojan Crypt

DGPD.SYS size: 38496 bytes
DGPD.SYS hash: 55944BAF4788F96ACCC6EAD7CD1F3FA9

Created files:

%SysDir%\drivers\dgpd.sys
%SysDir%\tbbss.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\dgpd\Type: 01000000
HKLM\System\CurrentControlSet\Services\dgpd\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\dgpd\DisplayName: dgpd
HKLM\System\CurrentControlSet\Services\dgpd\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0064006700700064002E007300790073000000

Detected by UnHackMe:

DGPD.SYS
Default location: %SYSDIR%\DRIVERS\DGPD.SYS

Dropper information:
MD5: 2d675daeef5cd6cd8f5d3b19e7b9fb85
File size: 122944 bytes

Leave a Reply