W32.HfsIemusi.129C

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

W32.HfsIemusi.129C also known as Trojan:Win32/Dishigy.I, Trojan.Win32.Staser.aqj, Gen:Variant.Zusy.58286.

Malware Analysis of W32.HfsIemusi.129C – DAODOM.EXE

Created files:

%Common Appdata%\systemskey.ini
C:\Documents and Settings\LocalService\Application Data\ffifssssfdfsf4f.ini
%WinDir%\Installer\1a3a1.msi
%WinDir%\daodom.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\daodom\ImagePath: “%WinDir%\daodom.exe”
HKLM\System\CurrentControlSet\Services\daodom\DisplayName: “daodom2”

Detected by UnHackMe:

DAODOM.EXE
Default location: %WinDir%\DAODOM.EXE

Dropper hash(md5): 15c88af7dedbccc6ebd522028d43db2d

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera