Trojan Graftor – server.exe – 53e834ef7de7b893cc47f5bc5fd903cb

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Graftor
Also known as: Trojan Eldorado, Worm Autorun
SHA256: 081d4af088b17a591ed2d7df02380a57497a10a4b98e60f94a94a67fd0e5c648
SHA1: c3afab509b2fd739002825452d6fbcbc65e63cc3
MD5: 53e834ef7de7b893cc47f5bc5fd903cb
File size: 325632 bytes

Created files:

%WinDir%\install\server.exe – Trojan Graftor

Trojan Graftor created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{AM2DRVG2-7JC7-RWJQ-BS86-720EM1W244C2}\StubPath: 43003A005C00570049004E0044004F00570053005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\HKLM: 43003A005C00570049004E0044004F00570053005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HKCU: 43003A005C00570049004E0044004F00570053005C0069006E007300740061006C006C005C007300650072007600650072002E006500780065000000

Leave a Reply