SVHOST.EXE – Backdoor Nitol

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SVHOST.EXE – Backdoor Nitol removal

FileMD5Virus Alias
SVHOST.EXE 4dcf09b42cb7690657cc59936f39a39b Backdoor Nitol

SVHOST.EXE size: 47616 bytes
SVHOST.EXE hash: 4DCF09B42CB7690657CC59936F39A39B

Created files:

%SysDir%\svhost.exe
%Temp%\51a8\rel.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Plase Input Srvice Nmlp\Type: 10010000
HKLM\System\CurrentControlSet\Services\Plase Input Srvice Nmlp\Start: 02000000
HKLM\System\CurrentControlSet\Services\Plase Input Srvice Nmlp\DisplayName: lease Input Service Disptwu Transaction Coordinator Service
HKLM\System\CurrentControlSet\Services\Plase Input Srvice Nmlp\ImagePath: %WinDir%\System32//svhost.exe

Detected by UnHackMe:

SVHOST.EXE
Default location: %SYSDIR%\SVHOST.EXE

Dropper information:
MD5: e4c6a700086e8e31b35b6ee82e75fa2c
File size: 28672 bytes

Leave a Reply