Worm Pushbot – csdrive32.exe – d4b1e5fd934f86d675d5d0483cc8e792

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Worm Pushbot
Also known as: Trojan Jorik, Backdoor IRCBot
SHA256: 8aea05ae128c8b361b57db64135df71530d17c38ebfed4221a94434925241970
SHA1: 9c4baf618a96867584aba4fedaa21c55cfed1eaa
MD5: d4b1e5fd934f86d675d5d0483cc8e792
File size: 46080 bytes

Created files:

%WinDir%\csdrive32.exe – Worm Pushbot

Worm Pushbot created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup: %WinDir%\csdrive32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup: %WinDir%\csdrive32.exe

Leave a Reply