FNEDWS.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

FNEDWS.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
FNEDWS.SYS c61d069a5b79f26711d884ddb92b76a9 Backdoor Koutodoor
FNEDWS.SYS c61d069a5b79f26711d884ddb92b76a9 Trojan Generic
FNEDWS.SYS c61d069a5b79f26711d884ddb92b76a9 Trojan Eldorado
FNEDWS.SYS c61d069a5b79f26711d884ddb92b76a9 Trojan Agent

FNEDWS.SYS size: 38496 bytes
FNEDWS.SYS hash: C61D069A5B79F26711D884DDB92B76A9

Created files:

%SysDir%\drivers\fnedws.sys
%SysDir%\lrtjsdh.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\fnedws\Type: 01000000
HKLM\System\CurrentControlSet\Services\fnedws\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\fnedws\DisplayName: fnedws
HKLM\System\CurrentControlSet\Services\fnedws\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0066006E0065006400770073002E007300790073000000

Detected by UnHackMe:

FNEDWS.SYS
Default location: %SYSDIR%\DRIVERS\FNEDWS.SYS

Dropper information:
MD5: 285d22d37ae584b4f4a7355b3275ca91
File size: 87808 bytes

Leave a Reply