nvcpl.exe - Dangerous
%windir%\fonts\nvcpl.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
%WinDir%\Fonts\nvcpl.exe is Trojan/Backdoor.
Kill the process %WinDir%\Fonts\nvcpl.exe and remove %WinDir%\Fonts\nvcpl.exe from Windows startup.
Malware: C:\sand-box\es.exe
Removed: C:\WINDOWS\system32\nologon32.exe
C:\WINDOWS\Fonts\nvcpl.exe
Classification:Antivirus Version Last Update Result
F-Secure 9.0.15370.0 2010.03.04 -
Kaspersky 7.0.0.125 2010.03.04 Trojan.Win32.Scar.bsbc
McAfee 5909 2010.03.03 -
Microsoft 1.5502 2010.03.04 TrojanDropper:Win32/Puzlpman.A
NOD32 4914 2010.03.04 Win32/TrojanDropper.Agent.OPH
Additional information
File size: 80896 bytes
MD5 : 78aed1ded4ce92eec49e776d61751391
SHA1 : 88fabbce8a9d9c21daaeccf7f1bdc2c225832e7c
SHA256: 7c2e982d8fbbcc4fff0ce5550bbe0fae3b72bd1b27c29cc6c5c538479fcdaefb
http://greatis.com/blog/how-to-remove-ma...