Solved! Use DUZJUC.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

DUZJUC.EXE – Backdoor Nitol removal

FileMD5Virus Alias
DUZJUC.EXE 40dc24a43f6184a6096407ebabe0b220 Backdoor Nitol
DUZJUC.EXE 40dc24a43f6184a6096407ebabe0b220 Trojan SuspiciousFile
DUZJUC.EXE 40dc24a43f6184a6096407ebabe0b220 Trojan Generic
DUZJUC.EXE 40dc24a43f6184a6096407ebabe0b220 Trojan Graftor
DUZJUC.EXE 40dc24a43f6184a6096407ebabe0b220 Backdoor Farfli

DUZJUC.EXE size: 25088 bytes
DUZJUC.EXE hash: 40DC24A43F6184A6096407EBABE0B220

Created files:

%SysDir%\duzjuc.exe
%SysDir%\hra33.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Pqrstu Wxyabcde Ghi\Type: 10000000
HKLM\System\CurrentControlSet\Services\Pqrstu Wxyabcde Ghi\Start: 02000000
HKLM\System\CurrentControlSet\Services\Pqrstu Wxyabcde Ghi\DisplayName: Pqrstu Wxyabcde Ghijklmn Pqrs
HKLM\System\CurrentControlSet\Services\Pqrstu Wxyabcde Ghi\ImagePath: %WinDir%\System32\duzjuc.exe
HKLM\System\CurrentControlSet\Services\Pqrstu Wxyabcde Ghi\Description: Pqrstuvw Yabcdefgh Jklmnop Rstuvwxy Bcd

Detected by UnHackMe:

DUZJUC.EXE
Default location: %SYSDIR%\DUZJUC.EXE

Dropper information:
MD5: 40dc24a43f6184a6096407ebabe0b220
File size: 25088 bytes

Leave a Reply