Trojan Agent – csboyDVD.dll – 60ce95d66dc5a323a994c67e74737119

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Agent
Also known as: Trojan Swisyn, Trojan Downloader.Generic
SHA256: 2266e6513536cae3e5ae9e23dccef1bac8c5bf0a9eff75ebacf91d42df0cfbda
SHA1: e065ba78a1fc007440675db17fabc44c35b130b8
MD5: 60ce95d66dc5a323a994c67e74737119
File size: 311296 bytes

Created files:

%Program Files Common%\Services\csboyDVD.dll – Trojan Agent
%Program Files Common%\Services\csboyDvd.ocx – Trojan Agent
%Program Files Common%\Services\csboyTj.ocx – Trojan Agent
%Program Files Common%\Services\csboyTT.dll – Trojan Agent
%Program Files Common%\Tencent\services.exe – Trojan Agent
%Program Files Common%\Tencent\tuziboyAuTo.dll – Trojan Agent
%Program Files Common%\Tencent\tuziboyAuTo.ocx – Trojan Agent
%Program Files Common%\Tencent\tuziboyDw.ocx – Trojan Agent
%Temp%\qvod.exe_9903B248AEE904AA3F0A852E910629F6D8046A51.exe – Trojan Agent

Trojan Agent created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ttplay: %Program Files Common%\Tencent\services.exe
HKLM\System\CurrentControlSet\Services\diskmanager\Type: 10000000
HKLM\System\CurrentControlSet\Services\diskmanager\Start: 02000000
HKLM\System\CurrentControlSet\Services\diskmanager\DisplayName: windows Disk Manager
HKLM\System\CurrentControlSet\Services\diskmanager\ImagePath: %Program Files Common%\Tencent\tuziboyAuTo.dll

Leave a Reply