Remove NetDemon. Description and removal instructions

Title: NetDemon
Type: Remote Administration Tools	Severity scale: (57 / 100)

This virus is a small Remote Administration Tool. Its functions are rather annoying than dangerous. The pest was created in July 2000. A newer version came out in September 2001. The author of this RAT is a hacker called CrAsH. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. Once inside the system, this pest opens a default TCP port 15000 and awaits commands from the intruder. The port can be changed.

From the publisher:

"Small RAT, password protected, CDROM, Restart, msg, taskbar, Filemanager."

FORUM:
Discuss NetDemon in
spyware removal forum

NetDemon properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic NetDemon removal:

remover for NetDemon

NetDemon manual removal:

Kill processes:
editserver.exe, netdemon.exe, [system root]\\system\\winmap.exe

HELP:
how to kill malicious processes

Delete files:
editserver.exe, netdemon.exe, readme.txt, [system root]\\system\\winmap.exe

HELP:
how to remove harmful files

Other programs to remove NetDemon:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 13/04/05
Information updated: 13/04/05

Additional resources related to NetDemon:

Attention: If you know or you have a website or page about NetDemon removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about NetDemon parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.