KGootkit(malware hosted in Latvia Users)

Some features:
Start/Install windows service: This executable starts a windows service. Services have the highest level of privilege in Windows, and are thus useful for a number of malicious purposes.
Load driver: This executable loads a driver into the windows kernel. Device drivers are used by advanced malware (rootkits) to operate stealthily and escape detection.
Capability to send out email message(s) with the built-in SMTP client engine.

Web Panel:
http://46.252.128.14/index.php

exe file:
http://43148ac9.goneviral.com

infos about hosting:
http://whois.domaintools.com/46.252.128.14

Categories: Uncategorized