Remove Nugache. Description and removal instructions

Title: Nugache
Type: Worms	Severity scale: (59 / 100)

Nugache is a rapidly spreading Internet worm that propagates by e-mail, via instant messages, through unprotected network shares, and by exploiting known Windows vulnerabilities.

Once executed, the parasite secretly installs itself to the system and runs a spreading routine. It distributes itself through e-mail messages with infected files attached, attempts to exploit remote vulnerable computers, and uses AOL Instant Messenger or Windows Messenger to send malicious messages to user contacts.

Then the worm runs a payload. It opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can perform denial of service (DoS) attacks, run a hidden web server and access a predefined FTP server.

Nugache secretly runs on every Windows startup.

FORUM:
Discuss Nugache in
spyware removal forum

Nugache properties:
• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Nugache removal:

remover for Nugache

Nugache manual removal:

Kill processes:
mstc.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Domain Controller
HKEY_CURRENT_USER\Software\GNU

HELP:
how to remove registry entries

Delete files:
mstc.exe, fntcache.bin

HELP:
how to remove harmful files

Misc:
Nugache uses TCP port 8.

Exact file location:
mstc.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
fntcache.bin - C:\Documents and Settings\[Current User]\Application Data

Other programs to remove Nugache:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 01/05/06
Information updated: 01/05/06

Additional resources related to Nugache:

Attention: If you know or you have a website or page about Nugache removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Nugache parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.