Backdoor Nitol – gei33.dll – f00ea826e7427b6a0b80a9486810c1fe

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Nitol
Also known as: Trojan DNAScan, Trojan Downloader.Generic
SHA256: d5e076ed59a66095f71ef8b8ed08d0573ca6fd94d8f6b86aaff3a1749ef23dc2
SHA1: d94684705918f1ec994f78272ad19907986ff7dd
MD5: f00ea826e7427b6a0b80a9486810c1fe
File size: 121856 bytes

Created files:

%SysDir%\gei33.dll – Backdoor Nitol
%SysDir%\zyhpyk.exe – Backdoor Nitol

Backdoor Nitol created autostart registry keys:

HKLM\System\CurrentControlSet\Services\eqtgjoparm\Type: 10000000
HKLM\System\CurrentControlSet\Services\eqtgjoparm\Start: 02000000
HKLM\System\CurrentControlSet\Services\eqtgjoparm\DisplayName: owzdqyoxytjbbhawdydc
HKLM\System\CurrentControlSet\Services\eqtgjoparm\ImagePath: %WinDir%\System32\zyhpyk.exe
HKLM\System\CurrentControlSet\Services\eqtgjoparm\Description: prjbxphoohpkwqyuhrqzhnbnfuvqnq

Leave a Reply