Solved! Use LCPJKQ.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

LCPJKQ.EXE – Backdoor Nitol removal

FileMD5Virus Alias
LCPJKQ.EXE 370baa7ae067387fe566fb24eaa0345e Backdoor Nitol
LCPJKQ.EXE 370baa7ae067387fe566fb24eaa0345e Virus Sality

LCPJKQ.EXE size: 86016 bytes
LCPJKQ.EXE hash: 370BAA7AE067387FE566FB24EAA0345E

Created files:

%SysDir%\lcpjkq.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\201511lum\Type: 10000000
HKLM\System\CurrentControlSet\Services\201511lum\Start: 02000000
HKLM\System\CurrentControlSet\Services\201511lum\DisplayName: Nationalctr Instruments DDOS Service
HKLM\System\CurrentControlSet\Services\201511lum\ImagePath: %WinDir%\System32\lcpjkq.exe
HKLM\System\CurrentControlSet\Services\201511lum\Description: Providespvu a domain server for DDOS RESERCH.

Detected by UnHackMe:

LCPJKQ.EXE
Default location: %SYSDIR%\LCPJKQ.EXE

Dropper information:
MD5: 370baa7ae067387fe566fb24eaa0345e
File size: 86016 bytes

Leave a Reply