LUCQ.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

LUCQ.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
LUCQ.SYS 4f5098b3f6c00ca09f0f18eeab79fdc8 Backdoor Koutodoor
LUCQ.SYS 4f5098b3f6c00ca09f0f18eeab79fdc8 Trojan Generic
LUCQ.SYS 4f5098b3f6c00ca09f0f18eeab79fdc8 Trojan Eldorado
LUCQ.SYS 4f5098b3f6c00ca09f0f18eeab79fdc8 Trojan Agent

LUCQ.SYS size: 40480 bytes
LUCQ.SYS hash: 4F5098B3F6C00CA09F0F18EEAB79FDC8

Created files:

%SysDir%\drivers\lucq.sys
%SysDir%\mhacd.dll
%TEMP%\atsvaf.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\lucq\Type: 01000000
HKLM\System\CurrentControlSet\Services\lucq\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\lucq\DisplayName: lucq
HKLM\System\CurrentControlSet\Services\lucq\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006C007500630071002E007300790073000000

Detected by UnHackMe:

LUCQ.SYS
Default location: %SYSDIR%\DRIVERS\LUCQ.SYS

Dropper information:
MD5: 1d52616cb4473bd426d5efa0cdd60b4e
File size: 143424 bytes

Leave a Reply