Filename:
ntos.exe

Related to:
Infostealer.Banker.C
PWS-JT

File Directory:
%System%\ntos.exe
C:\WINNT\System32\ntos.exe

Startup Type:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\run “userinit”
Data: C:\WINNT\System32\ntos.exe

Removal and Protection:
Deleting the file ntos.exe will not help in removing the threat on computer. Antivirus and Anti-Spyware Software are recommended for automatic removal and protection.