Solved! Use TKXNKC.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TKXNKC.EXE – Backdoor Nitol removal

FileMD5Virus Alias
TKXNKC.EXE 620133fd0672a56224055e1e32bd466e Backdoor Nitol
TKXNKC.EXE 620133fd0672a56224055e1e32bd466e Trojan SuspiciousFile
TKXNKC.EXE 620133fd0672a56224055e1e32bd466e Trojan Artemis
TKXNKC.EXE 620133fd0672a56224055e1e32bd466e Trojan Agent
TKXNKC.EXE 620133fd0672a56224055e1e32bd466e Backdoor Farfli

TKXNKC.EXE size: 21504 bytes
TKXNKC.EXE hash: 620133FD0672A56224055E1E32BD466E

Created files:

%SysDir%\hra33.dll
%WinDir%\tkxnkc.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\asdy\Type: 10010000
HKLM\System\CurrentControlSet\Services\asdy\Start: 02000000
HKLM\System\CurrentControlSet\Services\asdy\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\asdy\DisplayName: Ghijasf
HKLM\System\CurrentControlSet\Services\asdy\ImagePath: %WinDir%\tkxnkc.exe
HKLM\System\CurrentControlSet\Services\asdy\Description: asf

Detected by UnHackMe:

TKXNKC.EXE
Default location: %WinDir%\TKXNKC.EXE

Dropper information:
MD5: 620133fd0672a56224055e1e32bd466e
File size: 21504 bytes

Leave a Reply