I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
REGEDITFUWU.EXE – Trojan Agent removal
| File | MD5 | Virus Alias |
|---|---|---|
| REGEDITFUWU.EXE | 6144e1f25408d0c3a4bc708d46371950 | Trojan Agent |
| REGEDITFUWU.EXE | 6144e1f25408d0c3a4bc708d46371950 | Trojan Click |
| REGEDITFUWU.EXE | 6144e1f25408d0c3a4bc708d46371950 | Trojan Genome |
| REGEDITFUWU.EXE | 6144e1f25408d0c3a4bc708d46371950 | Trojan Small |
REGEDITFUWU.EXE size: 24576 bytes
REGEDITFUWU.EXE hash: 6144E1F25408D0C3A4BC708D46371950
Created files:
%SysDir%\drivers\disdn\CDial.dll
%SysDir%\drivers\disdn\iniuser1.exe
%SysDir%\drivers\disdn\ping.exe
%SysDir%\drivers\disdn\regeditfuwu.exe
%SysDir%\drivers\disdn\sql.exe
%SysDir%\drivers\disdn\svchost.exe
%SysDir%\drivers\disdn\tcps.exe
%SysDir%\drivers\disdn\uuid.dll
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\RunAServces\Type: 10000000
HKLM\System\CurrentControlSet\Services\RunAServces\Start: 02000000
HKLM\System\CurrentControlSet\Services\RunAServces\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\RunAServces\DisplayName: Remote Procedure Call (RPC) Service
HKLM\System\CurrentControlSet\Services\RunAServces\ImagePath: %WinDir%\System32\drivers\disdn\svchost.exe -service
Detected by UnHackMe:
REGEDITFUWU.EXE
Default location: %SYSDIR%\DRIVERS\DISDN\REGEDITFUWU.EXE
Dropper information:
MD5: 2d12c6fc593e4f2f092a0c6c1ce925ce
File size: 1039020 bytes