Nitol

By ESGI Advisor in Malware

Threat Scorecard

Ranking: 9,802
Threat Level: 80 % (High)
Infected Computers: 4,878
First Seen: April 17, 2012
Last Seen: September 11, 2023
OS(es) Affected: Windows

Nitol is a malware infection that is installed in brand-new laptop and desktop computers being sold in China. Nitol is embedded in bogus versions of Microsoft's Windows XP or Windows 7 OS. Nitol is generated to spy on the PC users and perform denial-of-service attacks. Nitol quickly circulates via removable drives and is found on computers in China, Australia, Germany, Russia and the United States. Nitol is controlled through the 3322.org domain which has been connected with malicious activities.

SpyHunter Detects & Remove Nitol

File System Details

Nitol may create the following file(s):
# File Name MD5 Detections
1. lgfxcu.exe a7027359c127c41f595e192d5bc6f93c 29
2. LPK.dll 1005f5b7d887c69dad445ef8bfe2ba6e 17
3. server.EXE fa83218ca7e58eadde29e52cce1981a8 10
4. igdbZWS.exe 355b78b054d18792f0f39345e5dca25d 9
5. lpk.dll b5a201ed9cfdb614c0fc2e746f1ce5b5 7
6. LPK.dll 41faa40906c4c7b189dfcf861594cd53 5
7. xx25.exe 28fa5862ecbc2dce373b579e0f263393 4
8. nb.exe a9c935ff66adf8ae61fbac6eda9dc652 3
9. XLARAp.dll 2dc44a37b451a41562932bac95bad639 1
10. I001.exe 5990ff99244da1b3be2d566456ed9187 1
11. file.exe ddf0134ee920b0b9930f7d7aa2d1e038 0

Registry Details

Nitol may create the following registry entry or registry entries:
Regexp file mask
%APPDATA%\Realtek Audio System Emulator.exe
%WINDIR%\Declient.exe

Directories

Nitol may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startupÿ

Related Posts

Trending

Most Viewed

Loading...