Win32/Nuquel.E Description

Win32/Nuquel.E is a trojan involved in the propagation of the rogue anti-spyware application Spyware Protect 2009. Win32/Nuquel.E is often mentioned in fake pop-up warnings displayed by Spyware Protect 2009 in order to make people believe they are being attacked from the outside. It is worth mentioning that, along with Win32/Nuquel.E trojan, Spyware Protect 2009 often issues false security alerts stating you have the parasite called BankerFox.A. You need to remember that receiving pop-up messages about Win32/Nuquel.E and BankerFox.A trojans are reason enough for you to check your computer for infections using a trusted remover. The most likely malware you will detect is Spyware Protect 2009, which is probably hiding in the background.

Type: Trojans

Automatic Detection of Win32/Nuquel.E

Win32/Nuquel.E has typically the following processes in memory:

• %WINDOWS%\dkewiizkjdks.exe
• %WINDOWS%\iqmcnoeqz.exe
• %WINDOWS%\jiklagka.exe
• %WINDOWS%\kitiiwhaas.exe
• %WINDOWS%\krkdkdkee.exe
• %WINDOWS%\krujmmwlrra.exe
• %WINDOWS%\ooorjaas.exe
• %WINDOWS%\ronitfst.exe
• %WINDOWS%\sysguardn.exe
• %WINDOWS%\zibaglertz.exe
• %WINDOWS%\otpeppggq.exe
• %WINDOWS%\dkekkrkska.exe
• %WINDOWS%\ienotas.exe
• %WINDOWS%\jikglond.exe
• %WINDOWS%\jungertab.exe
• %WINDOWS%\klopnidret.exe
• %WINDOWS%\krtawefg.exe
• %WINDOWS%\kuruhccdsdd.exe
• %WINDOWS%\oropbbsee.exe
• %WINDOWS%\skaaanret.exe
• %WINDOWS%\tobykke.exe
• %WINDOWS%\otowjdseww.exe
• %WINDOWS%\aazalirt.exe
• %WINDOWS%\iddqdops.exe
• %WINDOWS%\irprokwks.exe
• %WINDOWS%\jrjakdsd.exe
• %WINDOWS%\kkwknrbsggeg.exe
• %WINDOWS%\krkmahejdk.exe
• %WINDOWS%\ktknamwerr.exe
• %WINDOWS%\oranerkka.exe
• %WINDOWS%\seeukluba.exe
• %WINDOWS%\tobmygers.exe
• %WINDOWS%\otnnbektre.exe
• %WINDOWS%\rkaskssd.exe

Win32/Nuquel.E creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysguardn”
• HKEY_CURRENT_USER\Software\AvScan

Important Article Disclaimer