REMOTEABC.EXE – Backdoor Hupigon

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

REMOTEABC.EXE – Backdoor Hupigon removal

File MD5 Virus Alias
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Backdoor Hupigon
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Trojan SuspiciousFile
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Trojan Eldorado
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Trojan Downloader
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Trojan Siggen
REMOTEABC.EXE 78af437f8af22627f35a515d066df012 Trojan Agent

REMOTEABC.EXE size: 270848 bytes
REMOTEABC.EXE hash: 78AF437F8AF22627F35A515D066DF012

Created files:

%WinDir%\RemoteAbc.exe
%SysDir%\drivers\beep.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Remote_Server_2008\Type: 10010000
HKLM\System\CurrentControlSet\Services\Remote_Server_2008\Start: 02000000
HKLM\System\CurrentControlSet\Services\Remote_Server_2008\DisplayName: Remote 2008
HKLM\System\CurrentControlSet\Services\Remote_Server_2008\ImagePath: %WinDir%\RemoteAbc.exe

Detected by UnHackMe:

REMOTEABC.EXE
Default location: %WinDir%\REMOTEABC.EXE

Dropper information:
MD5: 78af437f8af22627f35a515d066df012
File size: 270848 bytes

Leave a Reply