|
Backhack
Once executed, the server opens up a dos window giving an error message then a netbus window pops up asking you to configure the server, basically this trojan gives itself away and shutting down the server configuration box will stop it from infecting you.
Removal: This trojan doesn't infect, but you may want to remove all the files and registry entries it has made
Go to start and then to run and type regedit. When regedit opens you will need to follow the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Net Solutions
Right click on the folder that says net solutions and choose delete key.
Now find these files and delete them from your windows system directory
c:\WINDOWS\SYSTEM\Log.txt Size: 0 bytes
c:\WINDOWS\SYSTEM\mypic.exe Size: 625,152 bytes
c:\WINDOWS\SYSTEM\NBHelp.dll Size: 71,680 bytes
|
|
