Trojan Refroso – 0c0c0c0c.dll – df46a1050ae703464c404530325edcf0

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Refroso
Also known as: Trojan CI, Trojan Agent
SHA256: a23f93032bd11f7ef6ea7a4d37577a68a3c105cc728ce832f04ffe48fe835ca7
SHA1: a3df3ab7d07ba25f9472407826ebb9f6907241b8
MD5: df46a1050ae703464c404530325edcf0
File size: 155742 bytes

Created files:

%SysDir%\0c0c0c0c.dll – Trojan Refroso
%Temp%\tmp.exe – Trojan Refroso
%Personal%\Resimlerim\Profiles\chrome.exe – Trojan Refroso

Trojan Refroso created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%Personal%\Resimlerim\Profiles\chrome.exe
HKLM\System\CurrentControlSet\Services\wscsvc\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\GoogleUpdate: %Personal%\Resimlerim\Profiles\chrome.exe

Leave a Reply