Solved! Use NT6TO4.DLL (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NT6TO4.DLL – Trojan Magania removal

File MD5 Virus Alias
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Trojan Magania
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Trojan PcClient
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Trojan Eldorado
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Backdoor PcClien
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Trojan Siggen
NT6TO4.DLL a549617d4505999afb72093a21a6e689 Trojan Agent

NT6TO4.DLL size: 151552 bytes
NT6TO4.DLL hash: A549617D4505999AFB72093A21A6E689

Created files:

%SysDir%\nt6to4.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\6to4\Type: 20010000
HKLM\System\CurrentControlSet\Services\6to4\Start: 02000000
HKLM\System\CurrentControlSet\Services\6to4\DisplayName: mbngqiu?
HKLM\System\CurrentControlSet\Services\6to4\ImagePath: %SystemRoot%\System32\svchost.exe -k netsvcs
HKLM\System\CurrentControlSet\Services\6to4\Description: ??????????????????????????????
HKLM\System\CurrentControlSet\Services\6to4\Module: C64DD573D716C8746AACC17AEDC1F7A7.EXE
HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceDll: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C006E007400360074006F0034002E0064006C006C000000
HKLM\System\CurrentControlSet\Services\6to4\Parameters\ServiceMain: FreeTest

Detected by UnHackMe:

NT6TO4.DLL
Default location: %SYSDIR%\NT6TO4.DLL

Dropper information:
MD5: c64dd573d716c8746aacc17aedc1f7a7
File size: 180224 bytes

Leave a Reply