Rootkit.Biosavp.Gen

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Rootkit.Biosavp.Gen also known as Win32/TrojanDownloader.Perkesh.G, Trojan.Win32.Downloader.8192.NE, TROJ_PERKESH.SMF.

Malware Analysis of Rootkit.Biosavp.Gen – ~8356.EXE

Created files:

%TEMP%\~8356.EXE
%SYSDIR%\7H1GH.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\msconfig: 43 3A 5C 57 69 6E 64 6F 77 73 5C 73 79 73 74 65 6D 33 32 5C 37 68 31 47 68 2E 65 78 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VB\IMAGEPATH: “\??\%TEMP%\~8356.EX”
HKLM\System\CurrentControlSet\services\vb\DisplayName: “vb”

Detected by UnHackMe:

~8356.EXE
DEFAULT LOCATION: %TEMP%\~8356.EXE

Dropper hash(md5): 5bdfe285774032cc1b03403c2e280ca0

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera