How to remove ngp8l.exe

ngp8l.exe

Files size 116,090 bytes

MD5: 5720F1D9A3ECB4A962D9E30E4C195CDE

SHA-1: BDE4A51717CBAA44579966613349162D7D612846

===============================================

Files created

C:\Documents and Settings\[UserName]\Local Settings\Temp\herss.exe

C:\Documents and Settings\[UserName]\Local Settings\Temp\cvasds0.dll(0-9)

X:\i9bwjpqc.exe

X:\ngp8l.exe

X:\vb0hsoay.exe

X:\eexyv.exe

X:\autorun.inf

(X:\ = C:\ - Z:\)

Registry Modifications

Key Added

HKLM\SOFTWARE\Classes\CLSID\MADOWN

Values Added

HKLM\SOFTWARE\Classes\CLSID\MADOWN\urlinfo = "dsdcdsr.a"

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\

cdoosoft = "%Temp%\herss.exe"

Values modified

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\Hidden: 0x00000002

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\ShowSuperHidden: 0x00000000

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDriveTypeAutoRun: 0x00000091

Remote Host

218.59.144.140 port 80

218.59.144.136 port 80

URL to be download/data identified

http://www.googlem7k.com/1mg/am1.rar

http://www.googlem7k.com/1mg/am.rar

http://www.googlei9p.com/1mg/am1.rar

http://www.googlem7k.com/1mg/am.rar

=======================================================

วิธีกำจัด/แก้ virus : ngp8l.exe ,i9bwjpqc.exe , vb0hsoay.exe , eexyv.exe

=======================================================

Download Fix Tool : PeeTechFix-Win32/PSW.OnlineGame 2.0.5