Trojan Swisyn – csboyDVD.dll – cea74dcf17580b59a3ffdfcaee030aec

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Swisyn
Also known as: Trojan Downloader.Generic, Trojan Generic
SHA256: d58bebd5c5a22730bb4a057c40f832225f35504bdea7ce857b4e1d12b9ea028b
SHA1: d43b0346143738302c8619e7786b4ee9c6d607e5
MD5: cea74dcf17580b59a3ffdfcaee030aec
File size: 300544 bytes

Created files:

%Program Files Common%\Services\csboyDVD.dll – Trojan Swisyn
%Program Files Common%\Services\csboyDvd.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTj.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTT.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8888.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8AuTo.ocx – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8Dw.ocx – Trojan Swisyn
%Program Files Common%\Tencent\svchest.exe – Trojan Swisyn
%Temp%\qvod.exe_9903B248AEE904AA3F0A852E910629F6D8046A51.exe – Trojan Swisyn

Trojan Swisyn created autostart registry keys:

HKLM\System\CurrentControlSet\Services\diskmanage\Type: 10000000
HKLM\System\CurrentControlSet\Services\diskmanage\Start: 02000000
HKLM\System\CurrentControlSet\Services\diskmanage\DisplayName: windows Disk Manager
HKLM\System\CurrentControlSet\Services\diskmanage\ImagePath: %Program Files Common%\Tencent\AMGR8888.dll

Leave a Reply