MSNAT51DF.EXE – Worm Autoit

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

MSNAT51DF.EXE – Worm Autoit removal

FileMD5Virus Alias
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Worm Autoit
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Trojan Generic
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Trojan Chifrax
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Trojan CI
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Trojan Siggen
MSNAT51DF.EXE 516a3fb25b2e084c1943e4c3636f35c3 Trojan Agent

MSNAT51DF.EXE size: 804629 bytes
MSNAT51DF.EXE hash: 516A3FB25B2E084C1943E4C3636F35C3

Created files:

%SysDir%\msnat51df.exe
%TEMP%\bayhoud

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\MSUNatService\Type: 10000000
HKLM\System\CurrentControlSet\Services\MSUNatService\Start: 02000000
HKLM\System\CurrentControlSet\Services\MSUNatService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\MSUNatService\DisplayName: MS UNat Service
HKLM\System\CurrentControlSet\Services\MSUNatService\ImagePath: %WinDir%\System32\msnat51df.exe

Detected by UnHackMe:

MSNAT51DF.EXE
Default location: %SYSDIR%\MSNAT51DF.EXE

Dropper information:
MD5: 516a3fb25b2e084c1943e4c3636f35c3
File size: 804629 bytes

Leave a Reply