Categories: Trojan

Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS (file analysis)

The Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS file is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS virus can do?

  • Freezing computer.
  • New home page in browsers.
  • Ads and pop-ups on desktop and browser.
  • Very slow loading speed of webpages.
  • Computer work slower then usual.

How to determine Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS?


General:

Operating System: Windows 7 / 8 / 8.1 / 10 Virus Name: Win.Trojan.DarkKomet-1

File Info:

Name: dalno.exe

Size: 258048

Type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

MD5: 771d4ee9942585c70d733f1b3a756725

SHA1: 43be1ceca6e8a966f22f909ecede8a17de24a7aa

SH256: e891ac1ac38f68825ac43899d513dae488064b8f9ae5bba38f1e9ee597418a52

Version Info:

[No Data]

Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS also known as:

ALYac Backdoor.DarkKomet.gen
APEX Malicious
Acronis suspicious
Ad-Aware Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS
AegisLab Trojan.Win32.DarkKomet.mzOX
AhnLab-V3 Win-Trojan/FCN.140610
Alibaba Backdoor:Win32/DarkKomet.8728aced
Arcabit Trojan.RegistryDisabler.pmKfaWdzuRpS
Avira BDS/Backdoor.Gen
Baidu Win32.Backdoor.Agent.l
BitDefender Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS
BitDefenderTheta AI:Packer.DBA462701C
Bkav W32.BitwanD.Trojan
CAT-QuickHeal Backdoor.Fynloski.A9
CMC Backdoor.Win32.DarkKomet!O
ClamAV Win.Trojan.DarkKomet-1
Comodo TrojWare.Win32.Fynloski.B@57zt85
CrowdStrike win/malicious_confidence_100% (W)
Cybereason malicious.994258
Cylance Unsafe
Cyren W32/Fynloski.FWDO-2352
DrWeb BackDoor.Tordev.9
ESET-NOD32 a variant of Win32/Fynloski.AN
Emsisoft Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS (B)
FireEye Generic.mg.771d4ee9942585c7
Fortinet W32/Generic.AC.DB56!tr
GData Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS
Ikarus Backdoor.Win32.DarkKomet
Invincea heuristic
Jiangmin Trojan/Genome.bomw
K7AntiVirus Trojan ( 004bc4d11 )
K7GW Trojan ( 004bc4d11 )
MAX malware (ai score=100)
Malwarebytes Backdoor.Packed.DK
McAfee-GW-Edition BehavesLike.Win32.Backdoor.dc
MicroWorld-eScan Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS
NANO-Antivirus Trojan.Win32.Tordev.dgnepn
Paloalto generic.ml
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM11.1.287D.Malware.Gen
Rising Backdoor.Pontoeb!1.6637 (CLASSIC)
SUPERAntiSpyware Trojan.Agent/Gen-Delf
SentinelOne DFI – Malicious PE
Sophos Troj/Fynlosk-AK
Symantec Backdoor.Breut!gm
TACHYON Backdoor/W32.DP-DarkKomet.674304.B
Tencent Backdoor.Win32.DarkKomet.zem
TotalDefense Win32/Fynloski.A!generic
TrendMicro BKDR_FYNLOS.SMM
TrendMicro-HouseCall BKDR_FYNLOS.SMM
VBA32 Backdoor.Tordev
VIPRE Backdoor.Win32.Fynloski.A (v)
ViRobot Trojan.Win32.Z.Fynloski.258048.DGU
Yandex Trojan.Comet.Gen.LO
Zillya Trojan.Fynloski.Win32.742
ZoneAlarm Backdoor.Win32.DarkKomet.gwbu
Zoner Trojan.Win32.29578
eGambit RAT.DarkComet

How to remove Gen:Trojan.RegistryDisabler.pmKfaWdzuRpS?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 weeks ago