SAVER1.DLL – Backdoor PcClien

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SAVER1.DLL – Backdoor PcClien removal

FileMD5Virus Alias
SAVER1.DLL 83992d8a83c44d659b9c09306b4ed844 Backdoor PcClien

SAVER1.DLL size: 34304 bytes

Created files:

%SysDir%\Dexter Screen Saver dir\expire.scf
%SysDir%\Dexter Screen Saver dir\prevmon.scf
%SysDir%\Dexter Screen Saver dir\saver1.dll
%SysDir%\Dexter Screen Saver dir\saver2.dll
%SysDir%\Dexter Screen Saver dir\setwnd.scf
%SysDir%\Dexter Screen Saver.scr
%SysDir%\Macromed\Flash\flash.ocx
%TEMP%\STF1\Dexter Screen Saver.ssd
%TEMP%\STF1\impborl.dll
%TEMP%\STF1\install_flash_player_active_x.exe

Autostart registry keys:

HKCU\Control Panel\Desktop\SCRNSAVE.EXE: %WinDir%\System32\DEXTER~1.SCR

Detected by UnHackMe:

SAVER1.DLL
Default location: %SYSDIR%\DEXTER SCREEN SAVER DIR\SAVER1.DLL

Leave a Reply