Backdoor.Finfish

By Domesticus in Backdoors

Threat Scorecard

Threat Level:	60 % (Medium)
Infected Computers:	9

First Seen:	July 27, 2012
Last Seen:	December 13, 2018
OS(es) Affected:	Windows

Backdoor.Finfish is a Trojan that opens a back door on the affected PC. When activated, Backdoor.Finfish may create many harmful files. Backdoor.Finfish also creates a few registry entries. Backdoor.Finfish allows attcakers to obtain remote access and control over the targeted machine. Backdoor.Finfish may then contact the specific command-and-control (C&C) servers. Backdoor.Finfish may then transfer stolen information to remote servers.

Table of Contents

SpyHunter Detects & Remove Backdoor.Finfish

File System Details

Backdoor.Finfish may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\shellex32.dll
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\shellex32.dll Type: Dynamic link library Group: Malware file
2.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\mssounddx.sys
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\mssounddx.sys Type: System file Group: Malware file
3.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\04C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\04C.dat Type: Data file Group: Malware file
4.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\05.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\05.dat Type: Data file Group: Malware file
5.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\7FC.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\7FC.dat Type: Data file Group: Malware file
6.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\10.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\10.dat Type: Data file Group: Malware file
7.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\12C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\12C.dat Type: Data file Group: Malware file
8.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\14.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\14.dat Type: Data file Group: Malware file
9.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\17C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\17C.dat Type: Data file Group: Malware file
10.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\18.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\18.dat Type: Data file Group: Malware file
11.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\21C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\21C.dat Type: Data file Group: Malware file
12.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\80C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\80C.dat Type: Data file Group: Malware file
13.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\04.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\04.dat Type: Data file Group: Malware file
14.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\02C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\02C.dat Type: Data file Group: Malware file
15.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\7F.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\7F.dat Type: Data file Group: Malware file
16.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\11C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\11C.dat Type: Data file Group: Malware file
17.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\12.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\12.dat Type: Data file Group: Malware file
18.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\16C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\16C.dat Type: Data file Group: Malware file
19.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\17.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\17.dat Type: Data file Group: Malware file
20.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\19C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\19C.dat Type: Data file Group: Malware file
21.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\21.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\21.dat Type: Data file Group: Malware file
22.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\20C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\20C.dat Type: Data file Group: Malware file
23.	%Temp%\tmp2.tmp
Name: %Temp%\tmp2.tmp Type: Temporary File Group: Malware file
24.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\02.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\02.dat Type: Data file Group: Malware file
25.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\05C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\05C.dat Type: Data file Group: Malware file
26.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\11.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\11.dat Type: Data file Group: Malware file
27.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\10C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\10C.dat Type: Data file Group: Malware file
28.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\16.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\16.dat Type: Data file Group: Malware file
29.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\14C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\14C.dat Type: Data file Group: Malware file
30.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\19.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\19.dat Type: Data file Group: Malware file
31.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\18C.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\18C.dat Type: Data file Group: Malware file
32.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\20.dat
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\20.dat Type: Data file Group: Malware file
33.	%UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\ico_ty23.ico
Name: %UserProfile%\Application Data\Microsoft\Installer\[RANDOM CLSID]\ico_ty23.ico Group: Malware file

Registry Details

Backdoor.Finfish may create the following registry entry or registry entries:

Regexp file mask

%ALLUSERSPROFILE%\HelperService\d3d9.dll

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSSOUNDDX

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mssounddx

Directories

Backdoor.Finfish may create the following directory or directories:

%ALLUSERSPROFILE%\NdisSrv

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Backdoor.Finfish

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Backdoor.Finfish

File System Details

Registry Details

Directories

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen