Threat Database Backdoors Backdoor:Win32/Farfli.AV

Backdoor:Win32/Farfli.AV

By Sumo3000 in Backdoors

Threat Scorecard

Threat Level: 60 % (Medium)
Infected Computers: 843
First Seen: June 25, 2013
Last Seen: August 28, 2022
OS(es) Affected: Windows

Backdoor:Win32/Farfli.AV is a backdoor Trojan that enables a remote cybercriminal to obtain access and control to the corrupted PC. Backdoor:Win32/Farfli.AV can log keystrokes and steal an affected PC user's personal information. Backdoor:Win32/Farfli.AV can drop other malware infections on the infected computer system. Backdoor:Win32/Farfli.AV may steal the target PC user's personal information by recording his/her usernames and passwords. While being installed, Backdoor:Win32/Farfli.AV makes system modifications by adding malevolent files. Backdoor:Win32/Farfli.AV adds itself to the start menu to ensure it is executed automatically every time you start Windows. Backdoor:Win32/Farfli.AV creates a copy of itself as a malevolent file. Backdoor:Win32/Farfli.AV strives to connect to a distant server to receive commands. Backdoor:Win32/Farfli.AV alters system settings and runs or blocks programs.

SpyHunter Detects & Remove Backdoor:Win32/Farfli.AV

File System Details

Backdoor:Win32/Farfli.AV may create the following file(s):
# File Name MD5 Detections
1. updata.exe 281e5275e39b6aa7997bd017f9ba8794 125
2. svchsot.exe e79a87fba2dd859b02d9294495b92f13 31
3. Backdoor.A_variant.exe f26a2bcc152d2ba697ad4508ea00959e 2
4. file.exe 109dd29814db94db205eddccc1e17c58 1
5. [start menu]\Programs\Startup\killmdx
More files

Registry Details

Backdoor:Win32/Farfli.AV may create the following registry entry or registry entries:
Regexp file mask
%HOMEDRIVE%\updata.exe
%PROGRAMFILES%\Internet Explorer\test.exe
%WINDIR%\dsawe.EXE
%WINDIR%\terms.exe.exe

Directories

Backdoor:Win32/Farfli.AV may create the following directory or directories:

%PROGRAMFILES%\Microsoft Ogmgka
%PROGRAMFILES%\mysqldata
%PROGRAMFILES(x86)%\Microsoft Ogmgka
%PROGRAMFILES(x86)%\mysqldata

Trending

Most Viewed

Loading...