Fake Antivirus SecurityTool – npf.sys – 007f5185f1058602b563abb48a13279d

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Fake Antivirus SecurityTool
Also known as: Trojan Kryptik, Fake Antivirus Winwebsec
SHA256: db9928fd1d412a71a22b41100c809fa3eff98a9991694cefd171a7bf16e576a0
SHA1: a0d0d47a19d46ce5ff78d7cf5c71500694f8f560
MD5: 007f5185f1058602b563abb48a13279d
File size: 792576 bytes

Created files:

%SysDir%\drivers\npf.sys – Fake Antivirus SecurityTool

Fake Antivirus SecurityTool created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\AmdAgent: 007F5185F1058602B563ABB48A13279D.EXE

Leave a Reply