IXNVU.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

IXNVU.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
IXNVU.SYS 96f4927c839e9c821bafd803a929e0a1 Backdoor Koutodoor
IXNVU.SYS 96f4927c839e9c821bafd803a929e0a1 Trojan Generic
IXNVU.SYS 96f4927c839e9c821bafd803a929e0a1 Trojan MLW
IXNVU.SYS 96f4927c839e9c821bafd803a929e0a1 Trojan Eldorado
IXNVU.SYS 96f4927c839e9c821bafd803a929e0a1 Trojan Agent

IXNVU.SYS size: 41728 bytes
IXNVU.SYS hash: 96F4927C839E9C821BAFD803A929E0A1

Created files:

%SysDir%\drivers\ixnvu.sys
%SysDir%\zwegfza.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ixnvu\Type: 01000000
HKLM\System\CurrentControlSet\Services\ixnvu\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ixnvu\DisplayName: ixnvu
HKLM\System\CurrentControlSet\Services\ixnvu\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C00690078006E00760075002E007300790073000000

Detected by UnHackMe:

IXNVU.SYS
Default location: %SYSDIR%\DRIVERS\IXNVU.SYS

Dropper information:
MD5: 1bad12cfb524d16281af7091cf10cc8c
File size: 147712 bytes

Leave a Reply