Trojan Graftor – svchost.exe – e7bf439bbcda4976ee41b666096d1dad

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Graftor
Also known as: Trojan Crypt, Trojan Agent
SHA256: ce8fa7947340ba3aae007bef4aae3c71d6ab1d86378a3101d1b2e4e19c2156c5
SHA1: 39804e32796f3ebdada64712bbcaa69d0855f1e7
MD5: e7bf439bbcda4976ee41b666096d1dad
File size: 202056 bytes

Created files:

%WinDir%\temp\svchost.exe – Trojan Graftor
%Temp%\~0.bat – Trojan Graftor

Trojan Graftor created autostart registry keys:

HKLM\System\CurrentControlSet\Services\Windows Update Services..\Type: 10000000
HKLM\System\CurrentControlSet\Services\Windows Update Services..\Start: 02000000
HKLM\System\CurrentControlSet\Services\Windows Update Services..\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Windows Update Services..\DisplayName: Microsoft Windows Update Services..
HKLM\System\CurrentControlSet\Services\Windows Update Services..\ImagePath: %WinDir%\temp\svchost.exe

Leave a Reply