msn.exe - Dangerous
%windir%\msn.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
When Backdoor.Ducy is run, it creates the file, %Windir%\Msn.exe.
Then adds the value: "control"="%Windir%\msn.exe "
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Also, it opens a backdoor on the infected system, allowing an attacker to connect to the system using MSN Messenger.
Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
and delete the following value: "Control"="%Windir%\msn.exe"
Or use RegRun Startup Optimizer to automatically remove this troajn.