Solved! Use SVHOST.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVHOST.EXE – Backdoor Nitol removal

File MD5 Virus Alias
SVHOST.EXE a2e4a451345c552735cc0bcc31a70879 Backdoor Nitol
SVHOST.EXE a2e4a451345c552735cc0bcc31a70879 Trojan Artemis
SVHOST.EXE a2e4a451345c552735cc0bcc31a70879 Trojan Generic

SVHOST.EXE size: 45056 bytes
SVHOST.EXE hash: A2E4A451345C552735CC0BCC31A70879

Created files:

%SysDir%\hra33.dll
%SysDir%\svhost.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Please Input Service\Type: 10010000
HKLM\System\CurrentControlSet\Services\Please Input Service\Start: 02000000
HKLM\System\CurrentControlSet\Services\Please Input Service\DisplayName: Please Input
HKLM\System\CurrentControlSet\Services\Please Input Service\ImagePath: %WinDir%\System32//svhost.exe

Detected by UnHackMe:

SVHOST.EXE
Default location: %SYSDIR%\SVHOST.EXE

Dropper information:
MD5: a2e4a451345c552735cc0bcc31a70879
File size: 45056 bytes

Leave a Reply