Nitol

Nitol Description

Type: Trojan

Nitol is a malware infection that is installed in brand-new laptop and desktop computers being sold in China. Nitol is embedded in bogus versions of Microsoft's Windows XP or Windows 7 OS. Nitol is generated to spy on the PC users and perform denial-of-service attacks. Nitol quickly circulates via removable drives and is found on computers in China, Australia, Germany, Russia and the United States. Nitol is controlled through the 3322.org domain which has been connected with malicious activities.

Technical Information

File System Details

Nitol creates the following file(s):
# File Name MD5 Detection Count
1 lgfxcu.exe a7027359c127c41f595e192d5bc6f93c 29
2 LPK.dll 1005f5b7d887c69dad445ef8bfe2ba6e 17
3 server.EXE fa83218ca7e58eadde29e52cce1981a8 10
4 igdbZWS.exe 355b78b054d18792f0f39345e5dca25d 9
5 nb.exe a9c935ff66adf8ae61fbac6eda9dc652 3
6 XLARAp.dll 2dc44a37b451a41562932bac95bad639 1
7 I001.exe 5990ff99244da1b3be2d566456ed9187 1
8 file.exe ddf0134ee920b0b9930f7d7aa2d1e038 0
More files

Registry Details

Nitol creates the following registry entry or registry entries:
Directory
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup├┐
Regexp file mask
%APPDATA%\Realtek Audio System Emulator.exe
%WINDIR%\Declient.exe

Related Posts

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.