WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WIRELESS NETWORK SETUP WIZARD.EXE – Backdoor IRCBot removal

FileMD5Virus Alias
WIRELESS NETWORK SETUP WIZARD.EXE df0c77a3aece565f049201a0a67e801b Backdoor IRCBot
WIRELESS NETWORK SETUP WIZARD.EXE df0c77a3aece565f049201a0a67e801b Backdoor Maximus
WIRELESS NETWORK SETUP WIZARD.EXE df0c77a3aece565f049201a0a67e801b Trojan Delphi
WIRELESS NETWORK SETUP WIZARD.EXE df0c77a3aece565f049201a0a67e801b Trojan Delf

WIRELESS NETWORK SETUP WIZARD.EXE size: 727919 bytes
WIRELESS NETWORK SETUP WIZARD.EXE hash: DF0C77A3AECE565F049201A0A67E801B

Created files:

%SysDir%\sIRC4.exe
%SysDir%\xdccPrograms\Network Setup Wizard.exe
%SysDir%\xdccPrograms\Opera_1161_int_Setup.exe
%SysDir%\xdccPrograms\Wireless Network Setup Wizard.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe sIRC4.exe

Detected by UnHackMe:

WIRELESS NETWORK SETUP WIZARD.EXE
Default location: %SYSDIR%\XDCCPROGRAMS\WIRELESS NETWORK SETUP WIZARD.EXE

Dropper information:
MD5: 0879c8f5d695b2162d78da5cd6da3f7b
File size: 717491 bytes

Leave a Reply