Solved My sister used NTR 3.3.1, Do I need to format?

[bwarrington]

My sister used Norton Trial Reset 2011 3.3.1 to get free norton..

I have removed the .exe and uninstalled norton.

Has this invited hackers?

Does anyone know if I have to worry about logging into online banking?

Should I format the PC?

 

[Golden]

Hi,

Well you certainly require an anti-virus of sorts, especially if you are doing online banking. Don't format anything yet - lets first have a decent look at whats going on.

Follow these steps in this order:

1. Firstly, ensure that Norton is completely uninstalled. Look at option #24 here:
http://www.sevenforums.com/tutorials/78961-av-uninstallers.html

2. What anti-virus software do you currently have on your system? If none, I suggest installing free MSE, and then performing a FULL system scan.

3. Post the output from that scan so we can be sure your system is clean.

Regards,
Golden

 

[bwarrington]

Scanning with MSE now.

It looks like its going to take awhile.

I will post the results.

Thanks for the reply.

 

[Golden]

No problem - post when you are done.

Regards,
Golden

 

[bwarrington]

I was assuming you were looking for a log file or something, but cant find one for MSE.

Scan completed with no infections.

Not worried about a virus.. Worried that NTR.exe might be opening up some sort of port to allow inbound connections or something.

I had read online:

NTR2011-V3.3.1.EXE was found to have the following behavior:
Executes a Process
Registers a DLL File in your system
Creates TCP port listens and communication initiated by other hacked computers
Executed from Temporary Folders
interception the keyboard behavior
Run process and Occupy the Virtual Memory space
Create Malicious program files on your system
Enables a COM Object in your system
Attaches itself to explorer.exe

The only thing I am worried about on my PC is logging into online banking..

 

[Golden]

Hi,

Checking open ports is easy enough. Please run this application:

https://www.grc.com/x/ne.dll?bh0bkyd2

Regards,
Golden

 

[bwarrington]

Thanks bud.

How do I rep you?

 

[bwarrington]

NM gave you rep thanks

 

[bwarrington]

So for anyone else reading NTR 2011 v3.3.1 is safe according to what I have found..