DXNVIDIADRV.COM – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

DXNVIDIADRV.COM – Trojan CoinMiner removal

FileMD5Virus Alias
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan CoinMiner
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan Bitcoin
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan Generic
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan CI
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan Agent
DXNVIDIADRV.COM cbb082a4ab17e02cb2cd44357a1e5661 Trojan Crypt

DXNVIDIADRV.COM size: 935754 bytes
DXNVIDIADRV.COM hash: CBB082A4AB17E02CB2CD44357A1E5661

Created files:

C:\NVIDIA\code.exe
C:\NVIDIA\nvvsvc.exe
C:\NVIDIA\w32\dx9.dll
C:\NVIDIA\w32\dxnVidiaDrv.com
C:\NVIDIA\w32\nvidia.dll
C:\NVIDIA\w32\pwDrv.dll
C:\NVIDIA\w64\dx9.dll
C:\NVIDIA\w64\dxnVidiaDrv.com
C:\NVIDIA\w64\nvidia.dll
C:\NVIDIA\w64\pwDrv.dll
%WinDir%\configi.cnfg
%WinDir%\confo.confg

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\run\NVIDIA Driver: C:\NVIDIA\nvvsvc.exe

Detected by UnHackMe:

DXNVIDIADRV.COM
Default location: C:\NVIDIA\W64\DXNVIDIADRV.COM

Dropper information:
MD5: 2986fa9431a465fee9512f75fb568c53
File size: 1503348 bytes

Leave a Reply