Solved! Use YKAMKA.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

YKAMKA.EXE – Backdoor Nitol removal

File MD5 Virus Alias
YKAMKA.EXE 8acef4f74c031559103771259994e895 Backdoor Nitol
YKAMKA.EXE 8acef4f74c031559103771259994e895 Trojan SuspiciousFile
YKAMKA.EXE 8acef4f74c031559103771259994e895 Trojan Artemis
YKAMKA.EXE 8acef4f74c031559103771259994e895 Trojan Generic
YKAMKA.EXE 8acef4f74c031559103771259994e895 Backdoor RBot
YKAMKA.EXE 8acef4f74c031559103771259994e895 Trojan Downloader

YKAMKA.EXE size: 73056 bytes
YKAMKA.EXE hash: 8ACEF4F74C031559103771259994E895

Created files:

%WinDir%\ykamka.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\Type: 10010000
HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\Start: 02000000
HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\DisplayName: Mnopqr Tuvwxyab Defghijk Mnop
HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\ImagePath: %WinDir%\ykamka.exe
HKLM\System\CurrentControlSet\Services\Mnopqr Tuvwxyab Def\Description: Mnopqrst Vwxyabcde Ghijklm Opqrstuv Xya

Detected by UnHackMe:

YKAMKA.EXE
Default location: %WinDir%\YKAMKA.EXE

Dropper information:
MD5: 8acef4f74c031559103771259994e895
File size: 73056 bytes

Leave a Reply