ctin10.exe - Useless
Manual removal instructions:
Is a Trojan horse that imitates the online interfaces of certain Brazilian banks to try to steal account information.
It is a minor variant of PWSteal.Bancos.D.
Also known as PWSteal.Bancos, PWSteal.Bancos.B, PWSteal.Bancos.C, PWSteal.Bancos.D
Copies itself as itself to the %System%\Ctin10.exe.
Adds the value:
to the registry keys:
so that the Trojan runs when you start Windows.
If the file C:\BancoBrasil\officeIE\officeIE.CAB exists, the Trojan will move it to C:\officeIE.CAB.
Monitors the active Internet Explorer windows, waiting for you to open a Web page that matches the characteristics of certain banking sites.
When such a site is opened, the Trojan displays one of several login screens, which are selected according to the URL.
The information entered on these screens may then be emailed to another computer.
Navigate to the keys:
and delete the value:
by NightWatcherctin10.exe Dangerous Rating: 5 out of 5
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial of UnHackMe.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.