Backdoor Nitol – zupvqo.exe – ae680682f9923657721c5679e997fc7c

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor Nitol
Also known as: Trojan Agent, Trojan Scar
SHA256: 3024e95f42526f5819f915ece222c89f81a431a6c467c89c41ec6bc4bc7a9353
SHA1: f3dc3bbd6e760eb9097e07edea37faf75b50546d
MD5: ae680682f9923657721c5679e997fc7c
File size: 109604 bytes

Created files:

%SysDir%\zupvqo.exe – Backdoor Nitol

Backdoor Nitol created autostart registry keys:

HKLM\System\CurrentControlSet\Services\Nationalopi\Type: 10000000
HKLM\System\CurrentControlSet\Services\Nationalopi\Start: 02000000
HKLM\System\CurrentControlSet\Services\Nationalopi\DisplayName: Nationalnuc Instruments Domain Service
HKLM\System\CurrentControlSet\Services\Nationalopi\ImagePath: %WinDir%\System32\zupvqo.exe
HKLM\System\CurrentControlSet\Services\Nationalopi\Description: Providested a domain server for NI security.

Leave a Reply