NTHID.SYS – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NTHID.SYS – Trojan Agent removal

FileMD5Virus Alias
NTHID.SYS 4a15af4ff018f73e7b734589cd50ea89 Trojan Agent
NTHID.SYS 4a15af4ff018f73e7b734589cd50ea89 Trojan Generic
NTHID.SYS 4a15af4ff018f73e7b734589cd50ea89 Trojan Downloader
NTHID.SYS 4a15af4ff018f73e7b734589cd50ea89 Worm Autorun
NTHID.SYS 4a15af4ff018f73e7b734589cd50ea89 Trojan Small

NTHID.SYS size: 5008 bytes
NTHID.SYS hash: 4A15AF4FF018F73E7B734589CD50EA89

Created files:

%TEMP%\Expor.exe
%TEMP%\NtHid.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\bits\Start: 02000000
HKLM\System\CurrentControlSet\Services\NtHid\Type: 01000000
HKLM\System\CurrentControlSet\Services\NtHid\Start: 03000000
HKLM\System\CurrentControlSet\Services\NtHid\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\NtHid\DisplayName: NtHid
HKLM\System\CurrentControlSet\Services\NtHid\ImagePath: %TEMP%\NtHid.sys

Detected by UnHackMe:

NTHID.SYS
Default location: %TEMP%\NTHID.SYS

Dropper information:
MD5: d71dd57926ba566da1373952d8bbfbf5
File size: 3046400 bytes

Leave a Reply