Trojan Refroso – sound.exe – 0a5826ff8b9b6ff55b448af06d457864

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Refroso
Also known as: Trojan Generic, Trojan Agent
SHA256: 9a45f10bf106f774e89c58426064960613bfe66554250502dd2d9944c9949e8c
SHA1: 0ddb203571b5d6115b0b898f855c571539386101
MD5: 0a5826ff8b9b6ff55b448af06d457864
File size: 772713 bytes

Created files:

%SysDir%\Drivers\sound.exe – Trojan Refroso

Trojan Refroso created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{QI824M67-KOCK-06K2-KVQO-75BN117IGRC6}\StubPath: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0044007200690076006500720073005C0073006F0075006E0064002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0044007200690076006500720073005C0073006F0075006E0064002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\HKLM: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0044007200690076006500720073005C0073006F0075006E0064002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0044007200690076006500720073005C0073006F0075006E0064002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HKCU: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0044007200690076006500720073005C0073006F0075006E0064002E006500780065000000

Leave a Reply