Home Malware Programs Backdoors Bafruz.B

Bafruz.B

Posted: July 29, 2011

Threat Metric

Threat Level: 6/10
Infected PCs: 1,091
First Seen: July 29, 2011
Last Seen: March 29, 2020
OS(es) Affected: Windows

Aliases

Generic Backdoor [Panda]BackDoor.Generic14.TIG [AVG]W32/AntiAV.OAK!tr [Fortinet]Trojan/Win32.Patched [AhnLab-V3]Trojan.MulDrop2.49102 [DrWeb]Trojan.Win32.AntiAV.oak [Kaspersky]Artemis!F8BC8EA7B65C [McAfee]Trojan.AntiAV.oak [CAT-QuickHeal]Generic25.BIDG [AVG]Trojan.MulDrop2.61002 [DrWeb]Mal/EncPk-AAI [Sophos]Trojan.Win32.AntiAV.odj [Kaspersky]Win32.TRCrypt.Ulpm [eSafe]Artemis!2794E080E8A8 [McAfee]Backdoor.Bafruz.b [CAT-QuickHeal]
More aliases (285)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\update.tray-7-0\svchost.exe File name: svchost.exe
Size: 1.21 MB (1213440 bytes)
MD5: b8f3e2aee9e0d7bca1691165b5a2eba1
Detection count: 576
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\update.tray-7-0
Group: Malware file
Last Updated: August 26, 2011
%WINDIR%\update.tray-7-0\svchost.exe File name: svchost.exe
Size: 1.2 MB (1208832 bytes)
MD5: aa5d76d5ec44ce0b3f8e8ba8d187bc8e
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\update.tray-7-0
Group: Malware file
Last Updated: August 22, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.18 MB (1185280 bytes)
MD5: 7a3bc4d258cbe30dfb0649ee863fae25
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: July 29, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.19 MB (1198080 bytes)
MD5: 1502c61d2d762708c0b47606708adbd7
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: October 28, 2011
%ALLUSERSPROFILE%\AUDIOKSE32.dll File name: AUDIOKSE32.dll
Size: 263.68 KB (263680 bytes)
MD5: 70ee7e9ae0bdddc83c789e12ff1e83ab
Detection count: 32
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: August 1, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.2 MB (1200640 bytes)
MD5: 38acffb9479dbfe7869fa46b9f8c40a8
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: August 1, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.2 MB (1206272 bytes)
MD5: 3a054634a734166e911a707cd507f3d1
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: November 8, 2011
%APPDATA%\Microsoft\Windows\oulwsvm.exe File name: oulwsvm.exe
Size: 259.16 KB (259168 bytes)
MD5: 0f93740e5f0ab467c2a444865130b541
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows
Group: Malware file
Last Updated: August 5, 2011
%WINDIR%\WinUpdaterstd\svchost.exe File name: svchost.exe
Size: 91.13 KB (91136 bytes)
MD5: ed3ffd761169ccccbca0d33e53ca6b02
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\WinUpdaterstd
Group: Malware file
Last Updated: August 1, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.18 MB (1185792 bytes)
MD5: f8bc8ea7b65c439e43ed68241a4651ea
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: February 12, 2013
%SystemDrive%\recycle.bin\B62B273A53F.exe File name: B62B273A53F.exe
Size: 401.4 KB (401408 bytes)
MD5: 10b6b3d1ce41f41700563ac74f881855
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\recycle.bin
Group: Malware file
Last Updated: August 1, 2011
%WINDIR%\system32\msafd32.dll File name: msafd32.dll
Size: 248.32 KB (248320 bytes)
MD5: d75358497451baa29ebdefd701c2b120
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: August 1, 2011
%APPDATA%\Microsoft\Windows\oulwsvm.exe File name: oulwsvm.exe
Size: 241.66 KB (241664 bytes)
MD5: c9d7dbe88b7899650e05614dedd5aa0d
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows
Group: Malware file
Last Updated: August 1, 2011
%USERPROFILE%\djljlq.exe File name: djljlq.exe
Size: 33.79 KB (33792 bytes)
MD5: a20c637e1b077d1065c346e4b91200e3
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: August 1, 2011
%WINDIR%\services32.exe File name: services32.exe
Size: 1.16 MB (1167872 bytes)
MD5: b20004c36b85012b2d3d34a88cf0e531
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: October 23, 2012
Loading...