nsnjair.exe

In article <fkm54p$kdg$1@blackhelicopter.databasix.com>, pcbutts1
@leythosthestalker.com says...
> Download my diagnostic tool and send me or post a copy of the log file it
> will create.

Before following a links to that site you might want to read about it on
GOOGLE or in my sig below.


--

Leythos - spam999free.RemoveThis@rrohio.com (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.

jaywalker <muhammad.ali RemoveThis @gmail.com> wrote in news:e247a2ca-03d3-4997-bc85-
592e6e144477 RemoveThis @f52g2000hsa.googlegroups.com:

> Hi,
>
> One of my Windows XP machines has recently been affected by
> nsnjair.exe. I have found almost no discussion of this malware on any
> group/ webpage. The program is visible in the task list, alongwith
> another exe named boxovqw.exe. The computer behaves strangely, e.g.,
> it closes down command prompt as soon as I open it. I have tried
> formatting the partition and reinstalling Windows but it didn't help.
> I didn't format the non-OS partitions---not sure if that has to do
> with the reactivation of the malware.
>
> How can I remove the thing without resorting to a full format? Any
> help/ hints will be highly appreciated. Please not that both symantec
> and mcafee have nothing to say about this malware.
>
> /jaywalker
>

If your willing to send a sample in for analysis, I may be able to help you
with the problem your having. Instructions for doing so can be found on my
website in the url in my signature.


--
Dustin Cook, Author of BugHunter - MalWare Removal Tool - v2.2e
Email.: bughunter.dustin RemoveThis @gmail.com
Web...: http://bughunter.it-mate.co.uk
Pad...: http://bughunter.it-mate.co.uk/pad.xml
PGP...: http://bughunter.it-mate.co.uk/bughunter.dustin.txt

Leythos - spam999f....TakeThisOut@rrohio.com (remove 999 to email me)

> look at some of the FILTH he's created and put on his website:

Thanks Leythos.

Sorry Dustin, I have already cleaned my system by booting through The
Ultimate Boot CD (http://www.ultimatebootcd.com/) and by manually
deleting the files. I also noticed that there is a third executable
with the name of nlprssy.exe, along with an autorun.inf in all
partitions, including my portable hard drive. However, the thing
didn't affect my other PC, perhaps, because I have autorun disabled on
that system.

/jaywalker
blog: http://thejaywalker.net

In article <bdf479f3-5ffc-4bdb-bceb-
a5aac0cb83da RemoveThis @y5g2000hsf.googlegroups.com>, muhammad.ali RemoveThis @gmail.com
says...
> Leythos - spam999f... RemoveThis @rrohio.com (remove 999 to email me)
>
> > look at some of the FILTH he's created and put on his website:
>
> Thanks Leythos.

I would strongly suggest that you download Multi-AV from the Swiss site
that is hosting David's tool and update it, then run it in safe mode.

--

Leythos - spam999free RemoveThis @rrohio.com (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS 1.COM
that create filth and put it on the web for any kid to see: Just take a
look at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive/index.php/t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.