Trojan Kazy – svchost.exe – 73f07e723c558f474d99f7725c06dd7d

Trojan Kazy
Also known as: Trojan CI, Backdoor Andromeda
SHA256: ed821d4473e65efd16335e6b2007f6daeddfe2b8f2e28a11b7655cfdb2cbf51f
SHA1: b7077b8761a7aa50d48ba37f396717bd4bf34078
MD5: 73f07e723c558f474d99f7725c06dd7d
File size: 39544 bytes

Created files:

%AllUsersProfile%\svchost.exe – Trojan Kazy

Trojan Kazy created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched: %AllUsersProfile%\svchost.exe