Backdoor Nitol – bqpnmm.exe – 0b75ed9bc8ca223043e55e1b5db027fb

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Nitol
Also known as: Trojan Graftor, Trojan Scar
SHA256: d4de8d7927c15108f3c9fc2107bb1de9c34e9797cee5fee400994e09e5009c22
SHA1: 4eaf69eaaa7b63fb71697776e6af675eccf99346
MD5: 0b75ed9bc8ca223043e55e1b5db027fb
File size: 40448 bytes

Created files:

%SysDir%\bqpnmm.exe – Backdoor Nitol

Backdoor Nitol created autostart registry keys:

HKLM\System\CurrentControlSet\Services\netscvre\Type: 10000000
HKLM\System\CurrentControlSet\Services\netscvre\Start: 02000000
HKLM\System\CurrentControlSet\Services\netscvre\DisplayName: NT LM Security Support Providers
HKLM\System\CurrentControlSet\Services\netscvre\ImagePath: %WinDir%\System32\bqpnmm.exe
HKLM\System\CurrentControlSet\Services\netscvre\Description: NT LM Security Support Providers

Leave a Reply