Koutodoor.6 information

The Koutodoor.6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Koutodoor.6 virus can do?

• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid

How to determine Koutodoor.6?

File Info:
name: E9F15C5AF0ECA9281DEC.mlw
path: /opt/CAPEv2/storage/binaries/7697cc35325b8310f89edb036f2e6e8dc0cdf0f8fb435370b0b3ec024d0872c3
crc32: 8CC3D2D7
md5: e9f15c5af0eca9281dec063392249dae
sha1: 06cf8834b4345f57bcee82097de4cdca05d7a1bd
sha256: 7697cc35325b8310f89edb036f2e6e8dc0cdf0f8fb435370b0b3ec024d0872c3
sha512: 06f6cac77d330f79203c50be28407e21b3b7277be8bedcabd0f7a9bebad95cf7d7751b210e63b6029c70534b99e6cb00bd694358b3e4d08493a7434f61b7c024
ssdeep: 1536:qWy1QLA61sAiDb2XSRISaF1BhdOip0WkBlry/IP34:qWdAcsAif/8Rp0nu/oI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19E830108AC86A1DEF662067373FF657202E17A1A4B2D37771BD1935A04FA16FC61B2C0
sha3_384: 010962d134c73f4b40ce41c17cd5cc739875576f0135ca5e0a7b1a24b1603ec2b21b0d4ab31a3e9125be6cdcdab1b9fb
ep_bytes: 60be00c040008dbe0050ffff5783cdff
timestamp: 2010-08-26 09:22:57

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 1, 0, 0, 0
LegalCopyright: Copyright 2010
ProductVersion: 1, 0, 0, 0
Translation: 0x0804 0x04b0

Koutodoor.6 also known as:

How to remove Koutodoor.6?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.