I am struggling with a nasty malware since last week…The malware activated and create .exe files to C:\USERS/PUBLIC folder and its all sub-folders. Hangs mouse or stuck mouse pointer… I have tested with Avira, MBAM and other tools – they detect it and delete it but again it come back within 24 hours!

What is Win32.Brontok.NB (B)?

Win32.Brontok.NB (B) is recognized as a malware that sneaks into your computer via infected software, spam emails, intrusive links, suspicious websites, and peer to peer share files. Once inside, it can damage the compromised computers in various aspects.

  • It can delete important system files;
  • It can falsify Windows registry entries;
  • It can infect other programs installed on computer;
  • It can trigger more computer threats;
  • It can record your keystrokes and collect your important data;
  • It can destroy your defense system and weaken your firewall;
  • It can change your browser settings…

Same to other malware, Win32.Brontok.NB (B) can hide itself on Task Manager pretending to be a regular program so that you have no idea about its existence. It will automatically change its file name or make itself invisible. Ranked as high risk, Win32.Brontok.NB (B) should be removed from your PC as soon as possible. Please read the guide below to remove it.

How to Remove Win32.Brontok.NB (B)?

If you find your computer acting strangely like what is mentioned above, you should find out and remove the malware in your computer. If you cannot get rid of this malware manually, you can try using SpyHunter – an adaptive malware protection and removal tool.

click here download now

Method 1: Manually Remove Win32.Brontok.NB (B) by yourself

Step 1: Reboot your computer in Safe Mode with Networking. Restart your computer and press F8 key before Windows launches. When the “Advanced Boot Options” appears on the screen, highlight “Safe Mode with Networking” by moving the up and down arrow keys, and then press Enter to proceed.

Safe Mode with Networking

Step 2: Open Task Manager by right clicking on the taskbar and selecting the “Start Task Manager” option. Then go to “Processes” and terminate the processes of Win32.Brontok.NB (B).

Windows-Task-Manager10

[random name].exe of Win32.Brontok.NB (B)

Step 3: Go to the Start menu,try to find Folder Options in Control Panel, select the View tab, and then tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then click OK.

folder-option

folder-options

Step 4. Delete associated files from your PC completely as follows:

%AppData%\<random>.exe
%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>

Step 5. Search for all related registry entries infected by this dangerous virus and wipe them out:

1) Go to Run by pressing Win and R altogether, type regedit in the Run box, and hit Enter.

2) Go to registry editor and delete the program below.

registry-editor5

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation"=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger"="svchost.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe

Step 5. Restore system errors/files and optimize with RegCure Pro.(Highly Recommended)

RegCure Pro can correct the registry errors that lead to poor PC performance. You can download and install RegCure Pro to have a quick and thorough scan for your PC. You are welcomed to follow the guide below.

1. Click the icon to download RegCure Pro.

Download-RegCure-Pro

2. Click “Yes” to run the profile.

RegCure-Pro-Installer

3. After installation, you can scan your computer for errors by making a system scan.

RegCure-Pro-Scan

4. After scanning, choose the items you want to clean and fix.

Threats-Fix

Method 2: Automatic Removal of Win32.Brontok.NB (B) with SpyHunter

SpyHunter is an adaptive real-time spyware detection and removal tool for your PC. It has the ability to detect and remove rootkits, which are used to stealth install rogue anti-spyware programs and other trojans. You can remove Win32.Brontok.NB (B) with this powerful tool. Please read the instruction below.

(Please be at ease for SpyHunter, since it will never bundle with any programs and it can get along with existing security programs without any conflicts.)

Step 1. Click the download button below.

Download-SpyHunter

Step 2. After finishing downloading, click Run to install SpyHunter step by step.

Run-SpyHunter

Step 3. After finishing installing, SpyHunter will scan and diagnose your entire system automatically.

Step 4. As the scanning is complete, all detected threats will be listed out. Then, you can click on “Fix Threats” to remove all of the threats found in your system.

Threats-Fix

Warm Reminder: Win32.Brontok.NB (B) is a dangerous trojan horse that should be removed from your PC as soon as possible. You should remove it from your PC without any delay. If you still struggle for this trojan, please feel free to Download and Install Powerful Security Tool Here >>

Scan and Optimize Your Computer with RegCure Pro>>

facebooktwittergoogle_plusredditpinterestlinkedinmail

Leave a Reply

Your email address will not be published. Required fields are marked *

Post Navigation