Trojan Swisyn – csboyDVD.dll – b832900f8cf23b2d42a20931e6d6da36

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Swisyn
Also known as: Trojan Agent, Trojan Downloader.Generic
SHA256: 9d1b6770fb692a99a1a1693fe05c1c9ab77299743082d001a36793a09f1907ec
SHA1: dc7ed0fe0f26ad8ba4355b2eabac6b302e2ff0df
MD5: b832900f8cf23b2d42a20931e6d6da36
File size: 295936 bytes

Created files:

%Program Files Common%\Services\csboyDVD.dll – Trojan Swisyn
%Program Files Common%\Services\csboyDvd.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTj.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTT.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8888.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8AuTo.ocx – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8Dw.ocx – Trojan Swisyn
%Program Files Common%\Tencent\svchest.exe – Trojan Swisyn
%Temp%\new_kk55kk.exe_649A937EBE20B995192CA72CBFD5E23113871E61.exe – Trojan Swisyn

Trojan Swisyn created autostart registry keys:

HKLM\System\CurrentControlSet\Services\diskmanage\Type: 10000000
HKLM\System\CurrentControlSet\Services\diskmanage\Start: 02000000
HKLM\System\CurrentControlSet\Services\diskmanage\DisplayName: windows Disk Manager
HKLM\System\CurrentControlSet\Services\diskmanage\ImagePath: %Program Files Common%\Tencent\AMGR8888.dll
HKLM\System\CurrentControlSet\Services\diskmanage\SBIE_StartTicks: B1827D00

Leave a Reply