NICOSO.EXE – Backdoor IRCBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NICOSO.EXE – Backdoor IRCBot removal

FileMD5Virus Alias
NICOSO.EXE 04726e5b41ec51f9c90560b184053bde Backdoor IRCBot
NICOSO.EXE 04726e5b41ec51f9c90560b184053bde Trojan SuspiciousFile
NICOSO.EXE 04726e5b41ec51f9c90560b184053bde Trojan Artemis
NICOSO.EXE 04726e5b41ec51f9c90560b184053bde Worm AMN
NICOSO.EXE 04726e5b41ec51f9c90560b184053bde Trojan Agent

NICOSO.EXE size: 109222 bytes
NICOSO.EXE hash: 04726E5B41EC51F9C90560B184053BDE

Created files:

%SysDir%\nicoso.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\REMOVE ME: nicoso.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\REMOVE ME: nicoso.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\REMOVE ME: nicoso.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\REMOVE ME: nicoso.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\REMOVE ME: nicoso.exe

Detected by UnHackMe:

NICOSO.EXE
Default location: %SYSDIR%\NICOSO.EXE

Dropper information:
MD5: 04726e5b41ec51f9c90560b184053bde
File size: 109222 bytes

Leave a Reply