hazikubu.dll
hazikubu.dll sample submitted on 2010-02-26 and identified as a threat.
Alias:
Threat File:hazikubu.dll
Submit time:2010-02-26
Excute time:8 min 42 sec
Level of Spread:3
Level of Threat:6
type:Rootkit.Win32.Agent
Filesize:68K Bytes
Files type
hazikubu.dll is a A dynamic-link library,which acts as a shared library of functions.
MD5:pdcOOJ5m7QFJsEnaQKC876rMu82kS17H
SHA1..:843wwrR7CxgK0fv2ylkFES8u1GO6bMDiG6L2f0aD
Path:
D:\Winnt\System32\\hazikubu.dll
D:\Documents and Settings\[UserName]\Local Settings\Temp\\hazikubu.dll
Report Countries:
United Kindom
Iceland
Antivirus Program Report:
F-Prot6 :Backdoor.Win32.Agent.nxm
Process Explorer showed the command line for the rundll32.exe as:
C:\WINDOWS\system32\rundll32.exe “C:\WINDOWS\system32\hazikubu.dll”,d
I have a hazikubu entry in the registry as follows:
HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603\
000 (Name), REG_SZ (Type), hazikubu*.*(Data)
Need help? Post you problem on Free Malware Remove Help forum
hazikubu.dll Summary
1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte hazikubu.dll virus files and kill hazikubu.dll file task process(if have);4.Delete/Modify any values added to the registry by hazikubu.dll ;5.delete IE temp files,restart the computer and run a whole scan with NOD32. hazikubu.dll virus files as following: