NMIOPL.EXE – Trojan Crypt

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NMIOPL.EXE – Trojan Crypt removal

FileMD5Virus Alias
NMIOPL.EXE 2298c0ee8bb9be7ac482e0af0e8fc244 Trojan Crypt

NMIOPL.EXE size: 233472 bytes
NMIOPL.EXE hash: 2298C0EE8BB9BE7AC482E0AF0E8FC244

Created files:

%SysDir%\ersmgr.exe
%SysDir%\lsasup.exe
%SysDir%\nmiopl.exe
%SysDir%\samcfg.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Control\keyboard layouts\00040408 : h7w3WfJZsSqtV4cwcGN78D54uEYlNyxNBdWnU_tZctS_ZGwC73NgGt8I8gmOaf37rBB0t5z86JZOT0M1WoQEYunDGhPhjPO!sSwCOs47!pF0QeOQKxBhS011o6Y0X_8o

Detected by UnHackMe:

NMIOPL.EXE
Default location: %SYSDIR%\NMIOPL.EXE

Dropper information:
MD5: 0f178aa20e2b8bd26cdfd1169be8aeaa
File size: 315392 bytes

Leave a Reply