NMBHMA.EXE – Backdoor Nitol

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NMBHMA.EXE – Backdoor Nitol removal

FileMD5Virus Alias
NMBHMA.EXE b701939b79f1be2fb45bb28c7ec2ca23 Backdoor Nitol
NMBHMA.EXE b701939b79f1be2fb45bb28c7ec2ca23 Trojan Eldorado
NMBHMA.EXE b701939b79f1be2fb45bb28c7ec2ca23 Trojan DNAScan
NMBHMA.EXE b701939b79f1be2fb45bb28c7ec2ca23 Worm AMN

NMBHMA.EXE size: 132608 bytes

Created files:

%SysDir%\gei33.dll
%SysDir%\nmbhma.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\netscver\Type: 10000000
HKLM\System\CurrentControlSet\Services\netscver\Start: 02000000
HKLM\System\CurrentControlSet\Services\netscver\DisplayName: NT LM Security Support Provider
HKLM\System\CurrentControlSet\Services\netscver\ImagePath: %WinDir%\System32\nmbhma.exe
HKLM\System\CurrentControlSet\Services\netscver\Description: NT LM Security Support Provider

Detected by UnHackMe:

NMBHMA.EXE
Default location: %SYSDIR%\NMBHMA.EXE

Leave a Reply