BleepingComputer.com: ntnut.exe

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

ntnut.exe ???

#1 User is offline   xxboone69xx 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 12-April 05

Posted 12 April 2005 - 09:03 PM

What does ntnut.exe run and why would it keep popping up saying it needs to be reinstalled?

#2 User is offline   jgweed 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 27,603
  • Joined: 11-April 04
  • Gender:Male
  • Location:Chicago, Il.

Posted 12 April 2005 - 09:29 PM

This exe file is associated with a trojan. I suggest you post a complete HiJackThis! log to the correct forum and have one of the BC volunteer experts look at it. Here are the instructions:


http://www.bleepingcomputer.com/forums/How...s_Log-t956.html

Regards,
John
Whereof one cannot speak, thereof one should be silent.

#3 User is offline   twinsdad 

  • Senior Member
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 411
  • Joined: 07-December 04
  • Location:Northern California

Posted 12 April 2005 - 09:34 PM

Google will give you a lot of hits on ntnut.exe. According to this site "it's a memory-resident Trojan that adds several adult-related sites to the
favorites folder of the Web browser. It also adds a folder called
ADULT STORE, which contains its dropped sites or URLs, to the
favorites folder.

In addition, it changes the home page of the Web browser into a
particular site. It also deletes specific files, such as NOTEPAD.COM
and SYSTIME.EXE, if they exist on a system.

An indication that the machine has been affected by this Trojan is the
presence of the following files in the Windows system folder:

NTNUT.EXE – an exact copy of itself
SHDOCPE.DLL - contains the .HTML file, which is the assigned home page
of the browser
It runs on Windows 95, 98, ME, NT, 2000, and XP."

Unless someone else posts otherwise, I suggest you post a Hijack This log in the BC Hijack This Forum where the experts can help you remove the problem. A BC Tutorial on posting Hijack This logs can be found here.

Good luck.
"Love to eat them mousies, mousies what I like to eat; bite they little heads off, nibble on they tiny feet". B. Kliban

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users