Solved My sister used NTR 3.3.1, Do I need to format?

bwarrington

New member
Local time
6:43 PM
Messages
21
My sister used Norton Trial Reset 2011 3.3.1 to get free norton..

I have removed the .exe and uninstalled norton.

Has this invited hackers?

Does anyone know if I have to worry about logging into online banking?

Should I format the PC?
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium
Hi,

Well you certainly require an anti-virus of sorts, especially if you are doing online banking. Don't format anything yet - lets first have a decent look at whats going on.

Follow these steps in this order:

1. Firstly, ensure that Norton is completely uninstalled. Look at option #24 here:
http://www.sevenforums.com/tutorials/78961-av-uninstallers.html

2. What anti-virus software do you currently have on your system? If none, I suggest installing free MSE, and then performing a FULL system scan.

3. Post the output from that scan so we can be sure your system is clean.

Regards,
Golden
 
Last edited:

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
Scanning with MSE now.

It looks like its going to take awhile.

I will post the results.

Thanks for the reply.
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium
No problem - post when you are done.

Regards,
Golden
 

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
I was assuming you were looking for a log file or something, but cant find one for MSE.

Scan completed with no infections.

Not worried about a virus.. Worried that NTR.exe might be opening up some sort of port to allow inbound connections or something.

I had read online:

NTR2011-V3.3.1.EXE was found to have the following behavior:
Executes a Process
Registers a DLL File in your system
Creates TCP port listens and communication initiated by other hacked computers
Executed from Temporary Folders
interception the keyboard behavior
Run process and Occupy the Virtual Memory space
Create Malicious program files on your system
Enables a COM Object in your system
Attaches itself to explorer.exe

The only thing I am worried about on my PC is logging into online banking..
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
Thanks bud.

How do I rep you?
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium
NM gave you rep thanks
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium
So for anyone else reading NTR 2011 v3.3.1 is safe according to what I have found..
 

My Computer My Computer

At a glance

Windows 7 Home Premium
OS
Windows 7 Home Premium
Back
Top