Remove Trojan.Neprodoor

Posted on: April 24th, 2009


Discovered: April 20, 2009
Updated:

April 20, 2009 1:02:22 AM
Type:

Trojan
Systems Affected:

Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
Recommended Action:
In order to remove Remove Trojan.Neprodoor you need to Download
the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of Trojan.Neprodoor..


No Adware Review

Technical Details:
When executed, the Trojan copies itself as the following files:

* %System%\reader_s.exe
* %UserProfile%\reader_s.exe

It then creates the following registry entries so that it runs every time Windows
starts:

* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current
Version\Run\”Reader_s” = “%System%\reader_s.exe”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\Current
Version\Run\”Reader_s” = “%UserProfile%\reader_s.exe”

The Trojan then modifies the following file:
%System%\drivers\ndis.sys

The Trojan then searches the compromised computer for information
that may be relayed to a remote attacker.

It may also download files, including updates to itself.
Action Steps:
FREE SCAN: NoAdware can remove Trojan.Neprodoor. Click the link below for your free download & scan your PC now.

MANUAL REMOVAL: Please click here for manual removal instructions.

Posted on Friday, April 24th, 2009 at 10:26 am - filed under Blog, Trojan.