Backdoor.Rumsoot.A Description

Backdoor.Rumsoot.A is a Trojan virus capable of infiltrating a computer without user awareness or consent, and once active, Backdoor.Rumsoot.A downloads additional forms of malware onto the already infected machine. Backdoor.Rumsoot.A may also create backdoor ports, allowing an unauthorized user to gain remote access to the system, leading to theft of personal and financial information.

Type: Trojans

How Can You Detect Backdoor.Rumsoot.A?

Backdoor.Rumsoot.A Technical Report

As new Backdoor.Rumsoot.A details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Backdoor.Rumsoot.A files with its MD5s were created in the system:

Backdoor.Rumsoot.A has typically the following processes in memory:

• winself.exe
• gavurjjf.exe
• thnd.exe

Backdoor.Rumsoot.A creates the following registry entries:

• HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMsSecurity Updated
• HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMSSysInterv
• HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMsSecurity

Important Article Disclaimer