Jump to content
Sign in to follow this  
Darkdonut

NPX.exe and NPW.exe

Recommended Posts

Anyway.. i have discovered an infection as NPW.exe and NPX.exe.

These trojans hide in your System Folder and your Temp Internet Files. Just get rid of both.. and the EXE's.. and it leaves XD

Share this post


Link to post
Share on other sites

Anyway.. i have discovered an infection as NPW.exe and NPX.exe.

These trojans hide in your System Folder and your Temp Internet Files. Just get rid of both.. and the EXE's.. and it leaves XD

Did you scan with the latest definitions of SUPERAntiSpyware? Do you have the files still?

Share this post


Link to post
Share on other sites

I can give you the site were you can get infected.. It's a porn site to warn you.. They have you DL a video plugin and when you install NPW.exe starts itself up and saves to autoboot and System file. NPX.exe sits and copys NPW.exe to Temp Internet Files. They sent in there with Regen. If you use HIJackThis Log and disable it there.. and then delete the files in Temp.. then the infection is halted. You then can just boot in Safe Mode and Scan with any Anti-Virus to remove the rest of the Infection.

Edit: Using the Sample send in program.. I have sent the original virus to you guys for analysis. Thanks!

-Darkdonut

Share this post


Link to post
Share on other sites

I can give you the site were you can get infected.. It's a porn site to warn you.. They have you DL a video plugin and when you install NPW.exe starts itself up and saves to autoboot and System file. NPX.exe sits and copys NPW.exe to Temp Internet Files. They sent in there with Regen. If you use HIJackThis Log and disable it there.. and then delete the files in Temp.. then the infection is halted. You then can just boot in Safe Mode and Scan with any Anti-Virus to remove the rest of the Infection.

Edit: Using the Sample send in program.. I have sent the original virus to you guys for analysis. Thanks!

-Darkdonut

PM me the site please! :)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...