INXUMP.EXE – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

INXUMP.EXE – Backdoor Koutodoor removal

File MD5 Virus Alias
INXUMP.EXE bc1cbd9180f9cbaf1f279ea3804bba28 Backdoor Koutodoor
INXUMP.EXE bc1cbd9180f9cbaf1f279ea3804bba28 Trojan SuspiciousFile
INXUMP.EXE bc1cbd9180f9cbaf1f279ea3804bba28 Trojan Generic
INXUMP.EXE bc1cbd9180f9cbaf1f279ea3804bba28 Trojan Eldorado
INXUMP.EXE bc1cbd9180f9cbaf1f279ea3804bba28 Trojan Agent

INXUMP.EXE size: 147712 bytes
INXUMP.EXE hash: BC1CBD9180F9CBAF1F279EA3804BBA28

Created files:

%SysDir%\drivers\ksih.sys
%SysDir%\qgoadf.dll
%TEMP%\inxump.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ksih\Type: 01000000
HKLM\System\CurrentControlSet\Services\ksih\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ksih\DisplayName: ksih
HKLM\System\CurrentControlSet\Services\ksih\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006B007300690068002E007300790073000000

Detected by UnHackMe:

INXUMP.EXE
Default location: %TEMP%\INXUMP.EXE

Dropper information:
MD5: 822c85dcadca384f313f5c14be90a535
File size: 348456 bytes

Leave a Reply