WINCHATS.EXE – Backdoor Farfli

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINCHATS.EXE – Backdoor Farfli removal

FileMD5Virus Alias
WINCHATS.EXE 1c5818dde6f0ca10854fa3882d8ef3d3 Backdoor Farfli
WINCHATS.EXE 1c5818dde6f0ca10854fa3882d8ef3d3 Trojan Downloader
WINCHATS.EXE 1c5818dde6f0ca10854fa3882d8ef3d3 Trojan CI
WINCHATS.EXE 1c5818dde6f0ca10854fa3882d8ef3d3 Trojan Graftor

WINCHATS.EXE size: 98304 bytes
WINCHATS.EXE hash: 1C5818DDE6F0CA10854FA3882D8EF3D3

Created files:

%SysDir%\winchats.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SaveTPath: %WinDir%\System32\winchats.exeD3.EXE?-?x?????????????82??????????1?(.?????????x??-??1?D? |~?,&? |.x??~ |@2??? |85? |x?|?? |?? |???e |? |???a} |? |~?x?x?x??~ |

Detected by UnHackMe:

WINCHATS.EXE
Default location: %SYSDIR%\WINCHATS.EXE

Dropper information:
MD5: 1c5818dde6f0ca10854fa3882d8ef3d3
File size: 98304 bytes

Leave a Reply