Solved! Use NMBHMA.EXE (Backdoor Nitol) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

NMBHMA.EXE – Backdoor Nitol removal

File MD5 Virus Alias
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Backdoor Nitol
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Trojan DLOADER
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Trojan Artemis
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Trojan MLW
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Trojan Eldorado
NMBHMA.EXE d7557159165000bd9134072e5114f1a7 Trojan Downloader

NMBHMA.EXE size: 109604 bytes
NMBHMA.EXE hash: D7557159165000BD9134072E5114F1A7

Created files:

%SysDir%\nmbhma.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Nationaltlw\Type: 10000000
HKLM\System\CurrentControlSet\Services\Nationaltlw\Start: 02000000
HKLM\System\CurrentControlSet\Services\Nationaltlw\DisplayName: Nationalgcp Instruments Domain Service
HKLM\System\CurrentControlSet\Services\Nationaltlw\ImagePath: %WinDir%\System32\nmbhma.exe

Detected by UnHackMe:

NMBHMA.EXE
Default location: %SYSDIR%\NMBHMA.EXE

Dropper information:
MD5: d7557159165000bd9134072e5114f1a7
File size: 109604 bytes