Backdoor.Netbus Description

BackdoorNetbus is malware and allows hacker’s to access and control infected PC’s from a remote location. This enables the hacker to steal your files, private information and data, damage installed programs and other malicious acts. This type of “application” is sometimes referred to as a Remote Administration Tool. BackdoorNetbus is also known as NetBus.reg (McAfee), Troj/NetBus-REG (Sophos) and REG_NETBUP.A (Trend Micro). BackdoorNetbus also changes the registry so that it automatically runs every time Windows is startup.

Type: Remote Administration Tools

Aliases: NetBus.reg (McAfee),
, Troj/NetBus-REG (Sophos),
, REG_NETBUP.A (Trend Micro).

Automatic Detection of Backdoor.Netbus

Backdoor.Netbus has typically the following processes in memory:

• 3390efcf.exe
• backdoor.netbus.170.exe
• backdoor.netbus.170_(45).exe
• 310fd342.exe
• backdoor.netbus.12.exe
• backdoor.netbus.170_(343).exe
• -1482685340.exe
• -722545794.exe
• backdoor.netbus.170_(210).exe

Important Article Disclaimer