About Trojan NetBUIE
NetBuie is a Trojan horse that comes disguised
as an XBox emulator. Its only purpose is to
produce periodic hits on a specific Internet Web
page. (At the time that this write-up was
published, the Web site had been removed.)
The XBox emulator in question is a fake
emulator program produced by Linar
Software/Studios.
When NetBuie runs, it does the following:
It copies the following files to your system:
- \%Desktop%\Xbox_emulator.0.34.exe. This is
the fake XBox program.
- C:\Windows\System\Archive.exe. This also
contains a fake XBox program.
NOTE: The two copies of the fake XBox
program are not malicious, and, as such, are
not detected by Norton AntiVirus.
- C:\Windows\System\NetBUIE.exe
- C:\Windows\System\RegUpdate.exe
- C:\Windows\System\Sucess.exe
NetBuie also adds the value
NetBUIE dll loopback - Inserted by Dr.
Watson C:\windows\system\NetBUIE.exe
to these registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Run
so that the Trojan runs when you start Windows.
Also known as: TrojanClicker.NetBuie.a,
Trojan/Win32.Elitec
Trojan NetBUIE Removal
Automatic Removal: Using BPS
Adware & Spyware Remover
to detect and remove Trojan.NetBUIE AUTOMATICALLY!
Manual Removal:
- Delete the files:
- \%Desktop%\Xbox_emulator.0.34.exe
- C:\Windows\System\Archive.exe
- Delete the value
NetBUIE dll loopback - Inserted by Dr.
Watson
from the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Run
Detection and Removal Instructions for Trojans
| 
