|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 nabv32.exe - Dangerous
It generates the email message with following characteristics: Subject: Speed up your connection! Message: Speed up your connection up to 2 times faster! windows xp/2000/9x Attachment: t_dsl.exe Size of attachment: 31244 The worm attempts to delete a lot of files and registry values. It creates the %System%\GotITFolder folder, and then makes many copies of itself in that folder as randomly chosen file names. Creates the file, Scri1.ini, in the mIRC folder. This is used to distribute the worm as icq2004.exe. Sends email to all the addresses in the Microsoft Outlook Address Book. Tries to download some executable files from a Web site. Automatic removal: Use RegRun Startup Optimizer. To disable it, please navigate to the keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices and delete the value "anbv32"="%system%\nabv32.exe" Removal: nabv32.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
