BackDoor-FBWR!15C88AF7DEDB

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

BackDoor-FBWR!15C88AF7DEDB also known as Spyware ( 004458f01 ), Trojan.Win32.Staser.aqj, Trojan/W32.Staser.38400.B.

Malware Analysis of BackDoor-FBWR!15C88AF7DEDB – DAODOM.EXE

Created files:

%Common Appdata%\systemskey.ini
C:\Documents and Settings\LocalService\Application Data\ffifssssfdfsf4f.ini
%WinDir%\Installer\1a3a1.msi
%WinDir%\daodom.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\daodom\ImagePath: “%WinDir%\daodom.exe”
HKLM\System\CurrentControlSet\Services\daodom\DisplayName: “daodom2”

Detected by UnHackMe:

DAODOM.EXE
Default location: %WinDir%\DAODOM.EXE

Dropper hash(md5): 15c88af7dedbccc6ebd522028d43db2d

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

4
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera