NJX.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NJX.SYS – Backdoor Koutodoor removal

FileMD5Virus Alias
NJX.SYS 7cd7886314ed62889fed874b0c693d54 Backdoor Koutodoor
NJX.SYS 7cd7886314ed62889fed874b0c693d54 Trojan Generic
NJX.SYS 7cd7886314ed62889fed874b0c693d54 Trojan Eldorado
NJX.SYS 7cd7886314ed62889fed874b0c693d54 Trojan Crypt

NJX.SYS size: 41248 bytes
NJX.SYS hash: 7CD7886314ED62889FED874B0C693D54

Created files:

%SysDir%\drivers\njx.sys
%SysDir%\xxduxkj.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\njx\Type: 01000000
HKLM\System\CurrentControlSet\Services\njx\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\njx\DisplayName: njx
HKLM\System\CurrentControlSet\Services\njx\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C006E006A0078002E007300790073000000

Detected by UnHackMe:

NJX.SYS
Default location: %SYSDIR%\DRIVERS\NJX.SYS

Dropper information:
MD5: 50a51dfa56e5a64e73b5377aa6913055
File size: 164096 bytes

Leave a Reply