FIRANHNCORPDS.SYS – Trojan Crypt

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

FIRANHNCORPDS.SYS – Trojan Crypt removal

FileMD5Virus Alias
FIRANHNCORPDS.SYS eb4c9b5e22831ab782e3062b3a783f35 Trojan Crypt
FIRANHNCORPDS.SYS eb4c9b5e22831ab782e3062b3a783f35 Trojan XPACK
FIRANHNCORPDS.SYS eb4c9b5e22831ab782e3062b3a783f35 Trojan Generic

FIRANHNCORPDS.SYS size: 13184 bytes
FIRANHNCORPDS.SYS hash: EB4C9B5E22831AB782E3062B3A783F35

Created files:

%SysDir%\drivers\firanhncorpds.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\firanhncorpds\Type: 01000000
HKLM\System\CurrentControlSet\Services\firanhncorpds\Start: 03000000
HKLM\System\CurrentControlSet\Services\firanhncorpds\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\firanhncorpds\DisplayName: firanhncorpds
HKLM\System\CurrentControlSet\Services\firanhncorpds\ImagePath: %WinDir%\System32\drivers\firanhncorpds.sys

Detected by UnHackMe:

FIRANHNCORPDS.SYS
Default location: %SYSDIR%\DRIVERS\FIRANHNCORPDS.SYS

Dropper information:
MD5: 753ec199993e20e2ccd2660c58d59e57
File size: 38912 bytes

Leave a Reply