Trojan.Madi

By Sumo3000 in Trojans

Trojan.Madi is a Trojan that opens a back door on the infected computer, downloads and installs infected files, and steals confidential information from the affected PC users. When activated, Trojan.Madi copies itself by creating several potentially infected files. Trojan.Madi also creates many hardcoded file names. Trojan.Madi modifies the certain Registry entry so that it can load automatically every time Windows is started. Trojan.Madi can contact the certain command and control (C&C) server. Trojan.Madi can capture screenshots, log keystrokes and download its updates.

Table of Contents

SpyHunter Detects & Remove Trojan.Madi

File System Details

Trojan.Madi may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%UserProfile%\PrintHood\SHK.dll
Name: %UserProfile%\PrintHood\SHK.dll Type: Dynamic link library Group: Malware file
2.	%UserProfile%\PrintHood\SIK.dll
Name: %UserProfile%\PrintHood\SIK.dll Type: Dynamic link library Group: Malware file
3.	%UserProfile%\PrintHood\[TEN RANDOM CHARACTERS].dll
Name: %UserProfile%\PrintHood\[TEN RANDOM CHARACTERS].dll Type: Dynamic link library Group: Malware file
4.	%UserProfile%\PrintHood\Roze.dll
Name: %UserProfile%\PrintHood\Roze.dll Type: Dynamic link library Group: Malware file
5.	%UserProfile%\PrintHood\FIE.dll
Name: %UserProfile%\PrintHood\FIE.dll Type: Dynamic link library Group: Malware file
6.	%UserProfile%\Templates\nam.dll
Name: %UserProfile%\Templates\nam.dll Type: Dynamic link library Group: Malware file
7.	%UserProfile%\PrintHood\pangtip.bat
Name: %UserProfile%\PrintHood\pangtip.bat Type: Batch file Group: Malware file
8.	%UserProfile%\PrintHood\BIE.dll
Name: %UserProfile%\PrintHood\BIE.dll Type: Dynamic link library Group: Malware file
9.	%UserProfile%\PrintHood\xdat.dll
Name: %UserProfile%\PrintHood\xdat.dll Type: Dynamic link library Group: Malware file
10.	%UserProfile%\PrintHood\mahdi.txt
Name: %UserProfile%\PrintHood\mahdi.txt Group: Malware file
11.	%UserProfile%\PrintHood\[TEN RANDOM CHARACTERS].PRI
Name: %UserProfile%\PrintHood\[TEN RANDOM CHARACTERS].PRI Group: Malware file
12.	%UserProfile%\PrintHood\UpdateOffice.exe (Trojan.Dropper)
Name: %UserProfile%\PrintHood\UpdateOffice.exe (Trojan.Dropper) Group: Malware file
13.	%UserProfile%\My Documents\[ORIGINAL FILE NAME].exe.JPG
Name: %UserProfile%\My Documents\[ORIGINAL FILE NAME].exe.JPG Group: Malware file
14.	%UserProfile%\UpBackup\UpdateOffice.exe (Trojan.Dropper)
Name: %UserProfile%\UpBackup\UpdateOffice.exe (Trojan.Dropper) Group: Malware file
15.	file.exe	3fc8788fd0652e4f930d530262c3d3f3	0
Name: file.exe MD5: 3fc8788fd0652e4f930d530262c3d3f3 Size: 282.62 KB (282624 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: July 19, 2012
16.	UpdateOffice.exe	461ba43daa62b96b313ff897aa983454	0
Name: UpdateOffice.exe MD5: 461ba43daa62b96b313ff897aa983454 Size: 279.04 KB (279040 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: July 19, 2012
17.	UpdateOffice.exe	18002ca6b19c3c841597e611cc9c02d9	0
Name: UpdateOffice.exe MD5: 18002ca6b19c3c841597e611cc9c02d9 Size: 279.04 KB (279040 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: July 19, 2012
18.	UpdateOffice.exe	67c6fabbb0534090a079ddd487d2ab4b	0
Name: UpdateOffice.exe MD5: 67c6fabbb0534090a079ddd487d2ab4b Size: 282.11 KB (282112 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: July 19, 2012

Registry Details

Trojan.Madi may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\"Startup" = "%UserProfile%\UpBackup"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Madi

SpyHunter Detects & Remove Trojan.Madi

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen