WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot removal

FileMD5Virus Alias
WIRELESS NETWORK SETUP WIZARD.EXE 0645089d1b897e8235993f8ec265dbd7 Backdoor IRCBot
WIRELESS NETWORK SETUP WIZARD.EXE 0645089d1b897e8235993f8ec265dbd7 Backdoor Maximus
WIRELESS NETWORK SETUP WIZARD.EXE 0645089d1b897e8235993f8ec265dbd7 Trojan Delphi
WIRELESS NETWORK SETUP WIZARD.EXE 0645089d1b897e8235993f8ec265dbd7 Trojan Delf

WIRELESS NETWORK SETUP WIZARD.EXE size: 1389405 bytes
WIRELESS NETWORK SETUP WIZARD.EXE hash: 0645089D1B897E8235993F8EC265DBD7

Created files:

%SysDir%\sIRC4.exe
%SysDir%\xdccPrograms\Network Setup Wizard.exe
%SysDir%\xdccPrograms\Opera_1161_int_Setup.exe
%SysDir%\xdccPrograms\Wireless Network Setup Wizard.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe sIRC4.exe

Detected by UnHackMe:

WIRELESS NETWORK SETUP WIZARD.EXE
Default location: %SYSDIR%\XDCCPROGRAMS\WIRELESS NETWORK SETUP WIZARD.EXE

Dropper information:
MD5: 0645089d1b897e8235993f8ec265dbd7
File size: 1389405 bytes

Leave a Reply