What does ntnut.exe run and why would it keep popping up saying it needs to be reinstalled?
Page 1 of 1
ntnut.exe ???
#2
Posted 12 April 2005 - 09:29 PM
This exe file is associated with a trojan. I suggest you post a complete HiJackThis! log to the correct forum and have one of the BC volunteer experts look at it. Here are the instructions:
http://www.bleepingcomputer.com/forums/How...s_Log-t956.html
Regards,
John
http://www.bleepingcomputer.com/forums/How...s_Log-t956.html
Regards,
John
Whereof one cannot speak, thereof one should be silent.
#3
Posted 12 April 2005 - 09:34 PM
Google will give you a lot of hits on ntnut.exe. According to this site "it's a memory-resident Trojan that adds several adult-related sites to the
favorites folder of the Web browser. It also adds a folder called
ADULT STORE, which contains its dropped sites or URLs, to the
favorites folder.
In addition, it changes the home page of the Web browser into a
particular site. It also deletes specific files, such as NOTEPAD.COM
and SYSTIME.EXE, if they exist on a system.
An indication that the machine has been affected by this Trojan is the
presence of the following files in the Windows system folder:
NTNUT.EXE – an exact copy of itself
SHDOCPE.DLL - contains the .HTML file, which is the assigned home page
of the browser
It runs on Windows 95, 98, ME, NT, 2000, and XP."
Unless someone else posts otherwise, I suggest you post a Hijack This log in the BC Hijack This Forum where the experts can help you remove the problem. A BC Tutorial on posting Hijack This logs can be found here.
Good luck.
favorites folder of the Web browser. It also adds a folder called
ADULT STORE, which contains its dropped sites or URLs, to the
favorites folder.
In addition, it changes the home page of the Web browser into a
particular site. It also deletes specific files, such as NOTEPAD.COM
and SYSTIME.EXE, if they exist on a system.
An indication that the machine has been affected by this Trojan is the
presence of the following files in the Windows system folder:
NTNUT.EXE – an exact copy of itself
SHDOCPE.DLL - contains the .HTML file, which is the assigned home page
of the browser
It runs on Windows 95, 98, ME, NT, 2000, and XP."
Unless someone else posts otherwise, I suggest you post a Hijack This log in the BC Hijack This Forum where the experts can help you remove the problem. A BC Tutorial on posting Hijack This logs can be found here.
Good luck.
"Love to eat them mousies, mousies what I like to eat; bite they little heads off, nibble on they tiny feet". B. Kliban
Share this topic:
Page 1 of 1

Help

Back to top










