NPX.exe and NPW.exe

[Darkdonut]

Anyway.. i have discovered an infection as NPW.exe and NPX.exe.

These trojans hide in your System Folder and your Temp Internet Files. Just get rid of both.. and the EXE's.. and it leaves XD

[SUPERAntiSpy]

Anyway.. i have discovered an infection as NPW.exe and NPX.exe.

These trojans hide in your System Folder and your Temp Internet Files. Just get rid of both.. and the EXE's.. and it leaves XD

Did you scan with the latest definitions of SUPERAntiSpyware? Do you have the files still?

[Darkdonut]

I can give you the site were you can get infected.. It's a porn site to warn you.. They have you DL a video plugin and when you install NPW.exe starts itself up and saves to autoboot and System file. NPX.exe sits and copys NPW.exe to Temp Internet Files. They sent in there with Regen. If you use HIJackThis Log and disable it there.. and then delete the files in Temp.. then the infection is halted. You then can just boot in Safe Mode and Scan with any Anti-Virus to remove the rest of the Infection.

Edit: Using the Sample send in program.. I have sent the original virus to you guys for analysis. Thanks!

-Darkdonut

[SUPERAntiSpy]

I can give you the site were you can get infected.. It's a porn site to warn you.. They have you DL a video plugin and when you install NPW.exe starts itself up and saves to autoboot and System file. NPX.exe sits and copys NPW.exe to Temp Internet Files. They sent in there with Regen. If you use HIJackThis Log and disable it there.. and then delete the files in Temp.. then the infection is halted. You then can just boot in Safe Mode and Scan with any Anti-Virus to remove the rest of the Infection.

Edit: Using the Sample send in program.. I have sent the original virus to you guys for analysis. Thanks!

-Darkdonut

PM me the site please!