Win32/Nuqel.E
Win32/Nuqel.E is a trojan virus that appears in fake security alerts issued by the rogue anti-spyware application Antivirus System Pro. Usually, Win32/Nuqel.E is stated as being an Internet virus capable of recording keystrokes and stealing personal information, such as passwords and financial data. This fake security alert will ask the user whether or not they wish to purchase and download Antivirus System Pro in order to combat this threat. Declining only leads to this notification continuously popping up. It is best to remove this parasite at the root.
File System Details
Win32/Nuqel.E may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\iehelper.dll | |
| 2. | %WINDOWS%\sysguard.exe |
Registry Details
Win32/Nuqel.E may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system tool"
