Solved! Use SERVERGOOD.DLL (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SERVERGOOD.DLL – Backdoor Nitol removal

File MD5 Virus Alias
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Backdoor Nitol
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Trojan SuspiciousFile
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Trojan Generic
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Trojan Eldorado
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Trojan Downloader
SERVERGOOD.DLL 54bf1c1db17fdc19b7faad9fe6290efd Trojan DNAScan

SERVERGOOD.DLL size: 143497 bytes
SERVERGOOD.DLL hash: 54BF1C1DB17FDC19B7FAAD9FE6290EFD

Created files:

%WinDir%\SErverGood.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\SErverGood\Type: 20000000
HKLM\System\CurrentControlSet\Services\SErverGood\Start: 02000000
HKLM\System\CurrentControlSet\Services\SErverGood\DisplayName: SErverGood
HKLM\System\CurrentControlSet\Services\SErverGood\ImagePath: %SystemRoot%\System32\svchost.exe -k SErverGood
HKLM\System\CurrentControlSet\Services\SErverGood\Parameters\ServiceDll: 43003A005C00570049004E0044004F00570053005C0053004500720076006500720047006F006F0064002E0064006C006C000000

Detected by UnHackMe:

SERVERGOOD.DLL
Default location: %WinDir%\SERVERGOOD.DLL

Dropper information:
MD5: cca52f569d08fdc9c74a060a1b167685
File size: 143497 bytes

Leave a Reply