Trojan Graftor – zaberg.exe – c14c75705b2e61e4e329014fd86e3629

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Graftor
Also known as: Backdoor IRCBot, Trojan Jorik
SHA256: 95fac00992ad137e7724c35b6fc1093daa28211316efcacb221ae5be11902c2a
SHA1: 1ce3a604524b361e5a366b96ad8e7ccbfff862bd
MD5: c14c75705b2e61e4e329014fd86e3629
File size: 19456 bytes

Created files:

C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe – Trojan Graftor

Trojan Graftor created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\zaber0: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe

Leave a Reply