BackDoor.Generic10.GLW

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

BackDoor.Generic10.GLW also known as Trojan:Win32/Delf.CB, Backdoor.Win32.Vipdataend!O, HW32.CDB.70d9.

Malware Analysis of BackDoor.Generic10.GLW – RPDFCS.EXE

Created files:

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat
C:\Documents and Settings\LocalService\Favorites\Desktop.ini
%SysDir%\RpdfcS.exe
%SysDir%\RpfdcS.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\RpcffdS\ImagePath: “%SysDir%\RpdfcS.exe”
HKLM\System\CurrentControlSet\Services\RpcffdS\DisplayName: “Remote Procedure”

Detected by UnHackMe:

RPDFCS.EXE
Default location: %SYSDIR%\RPDFCS.EXE

Dropper hash(md5): c6a989c4f53bd87da2b9ec1433ccb6a0

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera