Trojan.Nssearch
Trojan.Nssearch is a harmful Trojan horse that will gather network information from an infected computer. Collected data and files will be uploaded to a predefined web site using File Transfer Protocol (FTP). Trojan.Nssearch also adds an entry to Windows registry so that it will run automatically when the system is started.
Alias: Trojan.Netview
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Windows Vista
Technical Details and Additional Information:
Malicious Files Added by Trojan.Nssearch
C:\wsusupd.exe
C:\nv
%System%\SFList.txt
Associated Windows Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”ShareSearcher” = “C:\wsusupd.exe”
Trojan.Nssearch – Removal
Removing Trojan.Nssearch Manually:
1. If using Windows ME or XP, System Restore must be disabled to prevent the threat from restoring itself. [Windows XP System Restore]
2. Update the virus definitions.
3. Reboot Windows in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry. [how to edit registry]
6. Exit registry editor and restart Windows.
Anti-virus Tools
Online Virus Scanner:
Online virus scanner can provide scan and clean functions just like any anti-virus software without the need to install additional AV product. Perform a thorough scan with free Online Virus Scanner that can be found on websites of legitimate security software provider.
Scan with Norton Power Eraser:
Norton Power Eraser is a virus removal tool created by Norton Antivirus to remove unfamiliar threats without using the traditional AV signatures. Download the tool and start scanning with Norton Power Eraser.