Know Your Malware: ColdFusion.b Removal

ColdFusion.b is a backdoor designed to record all user keystrokes and send gathered data to a predefined e-mail address. The parasite can also be remotely controlled. It provides the attacker with unauthorized access to the compromised computer. The intruder can control the system and steal more user sensitive information. ColdFusion.b automatically runs on every Windows startup.

Related files: nwisse.exe, emgfx.exe,, winspols.scr, ~dp1.dll

ColdFusion.b properties:
Allows remote user connection
Sends out logs by FTP or email
Logs keystrokes
Connects itself to the internet
Hides from the user
Stays resident in background
Remove ColdFusion.b, removal instructions

Linked by shanmuga Friday, 13th January 2006 6:03AM