NT6TO4.DLL – Trojan Magania

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NT6TO4.DLL – Trojan Magania removal

File MD5 Virus Alias
NT6TO4.DLL 747559e69711b15cdfcf4a20de361636 Trojan Magania
NT6TO4.DLL 747559e69711b15cdfcf4a20de361636 Trojan Eldorado
NT6TO4.DLL 747559e69711b15cdfcf4a20de361636 Trojan Siggen
NT6TO4.DLL 747559e69711b15cdfcf4a20de361636 Trojan Agent

NT6TO4.DLL size: 151552 bytes
NT6TO4.DLL hash: 747559E69711B15CDFCF4A20DE361636

Created files:

%SysDir%\nt6to4.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\6to4\Type: 20010000
HKLM\System\CurrentControlSet\Services\6to4\Start: 02000000
HKLM\System\CurrentControlSet\Services\6to4\DisplayName: doqmtjp?
HKLM\System\CurrentControlSet\Services\6to4\ImagePath: %SystemRoot%\System32\svchost.exe -k netsvcs
HKLM\System\CurrentControlSet\Services\6to4\Description: ??????????????????????????????
HKLM\System\CurrentControlSet\Services\6to4\Module: 286A480C3570C36C140D1771CCD6E84E.EXE
HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceDll: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C006E007400360074006F0034002E0064006C006C000000
HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceMain: FreeTest

Detected by UnHackMe:

NT6TO4.DLL
Default location: %SYSDIR%\NT6TO4.DLL

Dropper information:
MD5: 286a480c3570c36c140d1771ccd6e84e
File size: 180224 bytes

Leave a Reply