Solved! Use LTUNLU.SYS (Backdoor Koutodoor) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

LTUNLU.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
LTUNLU.SYS e3097a0454eec84a687dcb2c403f5859 Backdoor Koutodoor
LTUNLU.SYS e3097a0454eec84a687dcb2c403f5859 Trojan Generic
LTUNLU.SYS e3097a0454eec84a687dcb2c403f5859 Trojan Eldorado
LTUNLU.SYS e3097a0454eec84a687dcb2c403f5859 Trojan Agent
LTUNLU.SYS e3097a0454eec84a687dcb2c403f5859 Trojan Crypt

LTUNLU.SYS size: 41920 bytes
LTUNLU.SYS hash: E3097A0454EEC84A687DCB2C403F5859

Created files:

%SysDir%\drivers\ltunlu.sys
%SysDir%\lclbkk.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ltunlu\Type: 01000000
HKLM\System\CurrentControlSet\Services\ltunlu\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ltunlu\DisplayName: ltunlu
HKLM\System\CurrentControlSet\Services\ltunlu\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006C00740075006E006C0075002E007300790073000000

Detected by UnHackMe:

LTUNLU.SYS
Default location: %SYSDIR%\DRIVERS\LTUNLU.SYS

Dropper information:
MD5: 5fd7fd0709f68b7f594fab54add4c980
File size: 151808 bytes

Leave a Reply