Trojan.Kazy.DC185C

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Trojan.Kazy.DC185C also known as Gen:Variant.Kazy.792668 (B), RDN/Generic.dx, Gen:Variant.Kazy.792668.

Malware Analysis of Trojan.Kazy.DC185C – CHALICOTHERE.DLL

Created files:

%APPDATA%\INSTALL\.IDENTIFIER
%APPDATA%\INSTALL\NOTEPAD.EXE
%TEMP%\CHALICOTHERE.DLL
%TEMP%\CURVEFITTING.VBP
%TEMP%\LADYSSMOCKNIGHTGOWN

Autostart registry keys:

HKLM\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{IGXB136N-WP56-42I3-3EN8-85A00571YU01}\STUBPATH: “”%APPDATA%\INSTALL\NOTEPAD.EXE””
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NOTEPAD: “%APPDATA%\INSTALL\NOTEPAD.EXE”

Detected by UnHackMe:

CHALICOTHERE.DLL
DEFAULT LOCATION: %TEMP%\CHALICOTHERE.DLL

Dropper hash(md5): 00047c766543b812746af1fae72c4778

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera