OOAGOS.EXE – Backdoor Nitol

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

OOAGOS.EXE – Backdoor Nitol removal

FileMD5Virus Alias
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Backdoor Nitol
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Trojan BadReputation
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Trojan SuspiciousFile
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Trojan Artemis
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Trojan Generic
OOAGOS.EXE 01a766b9a3893ebb4fc8d81bcdf69ec9 Trojan Eldorado

OOAGOS.EXE size: 31744 bytes
OOAGOS.EXE hash: 01A766B9A3893EBB4FC8D81BCDF69EC9

Created files:

%SysDir%\ooagos.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\adfghsfgvbdytj\Type: 10000000
HKLM\System\CurrentControlSet\Services\adfghsfgvbdytj\Start: 02000000
HKLM\System\CurrentControlSet\Services\adfghsfgvbdytj\DisplayName: dfghbdgaerfadrtgf
HKLM\System\CurrentControlSet\Services\adfghsfgvbdytj\ImagePath: %WinDir%\System32\ooagos.exe

Detected by UnHackMe:

OOAGOS.EXE
Default location: %SYSDIR%\OOAGOS.EXE

Dropper information:
MD5: 01a766b9a3893ebb4fc8d81bcdf69ec9
File size: 31744 bytes

Leave a Reply