NFO_READER.EXE - Dangerous
NFO_READER.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
NFO_READER.EXE is known as: Trojan Horse [Symantec] Boaxxe.dr [McAfee] Trojan-Spy.Win32.Banker.JU [Ikarus] packed with UPX [Kaspersky Lab].
MD5 of NFO_READER.EXE = 9E6D3199125A18CC79EEFEAC1B1B1695
NFO_READER.EXE size is 35328 bytes.
Full path on a computer: %TEMP%\NFO_READER.EXE
Related Files:
%TEMP%\AT4RE.NFO
%TEMP%\AT4RE_FASTSCANNER.EXE
%TEMP%\PLUGINS\DEBUGGER.DLL
%TEMP%\PLUGINS\DUMPER.DLL
%TEMP%\NFO_READER.EXE
%TEMP%\PLUGINS\ADD SIG PLUGIN.DLL
%TEMP%\PLUGINS\AT4RE PE EDITOR.DLL
%TEMP%\PLUGINS\GENOEP.DLL
%TEMP%\PLUGINS\KANAL.DLL
%TEMP%\PLUGINS\OVERLAYTOOL_README.TXT
%TEMP%\PLUGINS\REBUILDPE.DLL
%TEMP%\PLUGINS\SIGNSIMITATORPLUGIN.DLL
%TEMP%\PLUGINS\SIGNSIMITATORPLUGIN_README.TXT
%TEMP%\PLUGINS\STRINGVIEWER.DLL
%TEMP%\PLUGINS\VERA.DLL
%TEMP%\PLUGINS\ZDRX.DLL
%TEMP%\README.TXT
%TEMP%\RTL70.BPL
%TEMP%\SIGNATURE.USE