Know Your Malware: Neshuta Removal

Neshuta is a virus designed to infect executable files with .exe and .com extensions. The virus infects all such files it finds in the compromised system. It also creates their uninfected copies in C:\Windows\Temp or C:\Winnt\Temp folder. Neshuta does not carry any destructive payload. It runs every time an .exe file is executed.

Related files:

Neshuta properties:
Hides from the user
Stays resident in background
Remove Neshuta, removal instructions

Linked by shanmuga Friday, 30th December 2005 5:12AM