Remove Nopride. Description and removal instructions

 
Title: Nopride

Type: Backdoors
Severity scale:Nopride severity is 61  (61 / 100)
 
Nopride is a backdoor that provides the attacker with unauthorized remote access to the compromised computer. The intruder can access user sensitive information and gain partial control over the infected system. The backdoor itself changes the Internet Explorer default home page, disables the Registry Editor and hides default system controls. It also disables the desktop and modifies important system settings. Nopride can terminate some active antiviruses. It secretly runs on every Windows startup.


Related files: adobegammalog.exe, dfinstall.exe, ego.exe, services.exe, system32.exe, [X]log.exe, [X].exe

Nopride properties:
• Allows remote user connection
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Nopride removal:

remover for Nopride

Nopride manual removal:

Kill processes:
adobegammalog.exe, dfinstall.exe, ego.exe, services.exe, system32.exe, [X]log.exe, [X].exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\EGO31/08/2053
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispAppearancePage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCpl=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispSettingsPage=1
Delete files:
adobegammalog.exe, dfinstall.exe, ego.exe, services.exe, system32.exe, [X]log.exe, [X].exe
Misc:
[X] is current user's logon name.

Exact file location:
services.exe, system32.exe - C:\WINDOWS or C:\WINNT
[X]log.exe - C:\Documents and Settings\[Current User]\Desktop
[X].exe - C:\Documents and Settings\[Current User]\My Documents
dfinstall.exe - C:\Documents and Settings\[Current User]\Favorites
adobegammalog.exe - C:\Documents and Settings\[Current User]\Start Menu\Programs\Startup

Other programs to remove Nopride:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 26/10/06
Information updated: 26/10/06

Additional resources related to Nopride:

Attention: If you know or you have a website or page about Nopride removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Nopride parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: