I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
CKGCKW.EXE – Backdoor Nitol removal
| File | MD5 | Virus Alias |
|---|---|---|
| CKGCKW.EXE | dd2ae092f990851bd8cdda6c63a524f9 | Backdoor Nitol |
| CKGCKW.EXE | dd2ae092f990851bd8cdda6c63a524f9 | Trojan SuspiciousFile |
| CKGCKW.EXE | dd2ae092f990851bd8cdda6c63a524f9 | Trojan Artemis |
| CKGCKW.EXE | dd2ae092f990851bd8cdda6c63a524f9 | Trojan Generic |
| CKGCKW.EXE | dd2ae092f990851bd8cdda6c63a524f9 | Backdoor Farfli |
CKGCKW.EXE size: 19968 bytes
CKGCKW.EXE hash: DD2AE092F990851BD8CDDA6C63A524F9
Created files:
%WinDir%\ckgckw.exe
%SysDir%\hra33.dll
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Type: 10010000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Start: 02000000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\DisplayName: Stuvwx Abcdefgh Jklmnopq Stuv
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\ImagePath: %WinDir%\ckgckw.exe
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Description: Stuvwxya Cdefghijk Mnopqrs Uvwxyabc Efg
Detected by UnHackMe:
CKGCKW.EXE
Default location: %WinDir%\CKGCKW.EXE
Dropper information:
MD5: dd2ae092f990851bd8cdda6c63a524f9
File size: 19968 bytes