Backdoor Nitol – oauswu.exe – 487e41bcba94fd77538150845c455290

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Nitol
Also known as: Trojan Generic, Trojan ADH
SHA256: 8725a08ba3bc668f4e392d77f2ef0af157f0908fa1163821c2fe386a88660999
SHA1: 863c205043f5c18a01b2c649e28f6364ae9174c2
MD5: 487e41bcba94fd77538150845c455290
File size: 15895 bytes

Created files:

%SysDir%\oauswu.exe – Backdoor Nitol

Backdoor Nitol created autostart registry keys:

HKLM\System\CurrentControlSet\Services\netscivre\Type: 10000000
HKLM\System\CurrentControlSet\Services\netscivre\Start: 02000000
HKLM\System\CurrentControlSet\Services\netscivre\DisplayName: NTS LM Security Support Providers
HKLM\System\CurrentControlSet\Services\netscivre\ImagePath: %WinDir%\System32\oauswu.exe
HKLM\System\CurrentControlSet\Services\netscivre\Description: NTS LM Security Support Providers

Leave a Reply