OSBS.DLL – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

OSBS.DLL – Backdoor Koutodoor removal

File MD5 Virus Alias
OSBS.DLL 597b859245549f9e181c74f37bdb0835 Backdoor Koutodoor
OSBS.DLL 597b859245549f9e181c74f37bdb0835 Trojan Eldorado
OSBS.DLL 597b859245549f9e181c74f37bdb0835 Trojan Agent
OSBS.DLL 597b859245549f9e181c74f37bdb0835 Trojan Crypt

OSBS.DLL size: 36864 bytes
OSBS.DLL hash: 597B859245549F9E181C74F37BDB0835

Created files:

%SysDir%\drivers\wqwih.sys
%SysDir%\OsbS.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ebltwk\Type: 01000000
HKLM\System\CurrentControlSet\Services\ebltwk\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ebltwk\DisplayName: ebltwk
HKLM\System\CurrentControlSet\Services\ebltwk\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C00770071007700690068002E007300790073000000

Detected by UnHackMe:

OSBS.DLL
Default location: %SYSDIR%\OSBS.DLL

Dropper information:
MD5: 1316a4e9fca6852fea7c40d5ee73d291
File size: 58368 bytes

Leave a Reply