Solved! Use NOSKRNL.SYS (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NOSKRNL.SYS – Trojan Agent removal

File MD5 Virus Alias
NOSKRNL.SYS e97e3f71e916680acf7d37c993448083 Trojan Agent
NOSKRNL.SYS e97e3f71e916680acf7d37c993448083 Trojan Generic
NOSKRNL.SYS e97e3f71e916680acf7d37c993448083 Trojan Downloader

NOSKRNL.SYS size: 7712 bytes
NOSKRNL.SYS hash: E97E3F71E916680ACF7D37C993448083

Created files:

%WinDir%\noskrnl.exe
%SysDir%\noskrnl.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\noskrnl\ImagePath: \??\%WinDir%\System32\noskrnl.sys
HKLM\System\CurrentControlSet\Services\noskrnl\Type: 01000000
HKLM\System\CurrentControlSet\Services\SharedAccess\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\noskrnl: %WinDir%\noskrnl.exe

Detected by UnHackMe:

NOSKRNL.SYS
Default location: %SYSDIR%\NOSKRNL.SYS

Dropper information:
MD5: 54e13cd5146ed78bd8e704abe5492870
File size: 111791 bytes

Leave a Reply