Trojan Delf – server.exe – efa8852dbaedf477037ed18e9fea8436

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Delf
Also known as: Trojan Agent, Backdoor Cybergate
SHA256: 05208d5592893d37c4a9cb58034e40dae8dc211fade7947eb43214fd0aa415ff
SHA1: fcffec292f409b53e35fcb9720dda3811244d5e3
MD5: efa8852dbaedf477037ed18e9fea8436
File size: 283648 bytes

Created files:

%SysDir%\install\server.exe – Trojan Delf

Trojan Delf created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{08B0E5JF-4FCB-11CF-AAA5-00401C6XX500}\StubPath: %WinDir%\System32\install\server.exe Restart
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000

Leave a Reply