YUBY.SYS – Backdoor Koutodoor

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

YUBY.SYS – Backdoor Koutodoor removal

File MD5 Virus Alias
YUBY.SYS e7c198988a6b5bb382f9bea976c2b8db Backdoor Koutodoor
YUBY.SYS e7c198988a6b5bb382f9bea976c2b8db Trojan Generic
YUBY.SYS e7c198988a6b5bb382f9bea976c2b8db Trojan Eldorado
YUBY.SYS e7c198988a6b5bb382f9bea976c2b8db Trojan Agent
YUBY.SYS e7c198988a6b5bb382f9bea976c2b8db Trojan Crypt

YUBY.SYS size: 41568 bytes
YUBY.SYS hash: E7C198988A6B5BB382F9BEA976C2B8DB

Created files:

%SysDir%\cai.dll
%SysDir%\drivers\yuby.sys
%Temp%\fgxhhf.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\yuby\Type: 01000000
HKLM\System\CurrentControlSet\Services\yuby\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\yuby\DisplayName: yuby
HKLM\System\CurrentControlSet\Services\yuby\ImagePath: 730079007300740065006D00330032005C0064007200690076006500720073005C0079007500620079002E007300790073000000

Detected by UnHackMe:

YUBY.SYS
Default location: %SYSDIR%\DRIVERS\YUBY.SYS

Dropper information:
MD5: 0b9a1793c5429d028b35f0730d85c69f
File size: 188480 bytes

Leave a Reply