I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
nso12k.sys – Trojan Agent removal
| File | Virus Alias |
|---|---|
| nso12k.sys | Trojan Agent |
| nso12k.sys | Trojan Crypt |
| nso12k.sys | Trojan Generic |
| nso12k.sys | Trojan Downloader.Generic |
Created files:
%SysDir%\cssrss.exe – Trojan Agent
%SysDir%\nso12k.sys – Trojan Agent
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WMDM PMSP Service: %WinDir%\System32\cssrss.exe
HKLM\System\CurrentControlSet\Services\Driver\ImagePath: \??\%WinDir%\System32\nso12k.sys
HKLM\System\CurrentControlSet\Services\Driver\Type: 01000000
Detected by UnHackMe:
nso12k.sys
Default location: %SysDir%\nso12k.sys
Dropper information:
SHA256: d85a0c4e250024cb673a7dc99dcaa2343d727bc156e20276ce2d782d0dbc0fd4
SHA1: bf73565303c22958248a87dd7ca40e1fea4b58d6
MD5: 8db0a8b885b98f57cc2c29cf611b8d1b
File size: 22016 bytes