Trojan Nibu.E
Steals the passwords and bank account information.
Uses the file names:
%System%\netda.exe
%Startup%\netdb.exe
%System%\netdc.exe
%Startup% is a variable points to the Windows Startup folder.
Creates the following files:
%Windir%\TEMP\feff35a0.htm
%Windir%\TEMP\fe43e701.htm
%Windir%\TEMP\fa4537ef.tmp
Creates DLL for capture key pressings:
%Windir%\prntsvr.dll
Changes the hosts file to block antivirus updates.
Remove it from startup by RegRun Startup Optimizer.
Removal: netda.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?