Trojan Horse Definitions - Netbus

Remove Netbus

Created by Carl-Frederik Neikter, Netbus is one of the more famous Trojan horses identified by Webroot Spy Sweeper. What started as a prank has become a way for hackers to get into your system and wreak havoc. Among the damage it can do is:

Open and close your CD-Rom
Shutdown Windows
Send keystrokes and disable keys
Control the mouse
Swap mouse buttons
Download, upload, and delete files
Take a screendump
Change the volume setting
Make a clicking sound every time a key is pressed

These problems may seem simple, but it gets worse. The most devastating effect of Netbus is it can allow a remote user to access anything in your computer without you ever knowing. This is done through client/server technology. Once the server is installed without your knowledge (perhaps through an email with an .exe file attachment) on your computer, the client (the intruder) can take control.

Webroot’s award winning software Spy Sweeper can detect and remove Netbus as well as other unwanted adware and spyware. If you have Netbus on your computer and feel comfortable modifying your registry, you can manually remove it by following the following steps.

Manual removal of Netbus

Open up your registry editor and delete:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run key\{SysEdit}
Delete patch.exe
Reboot your computer.
Delete the following files:
- SystEdit.exe
- KeyHook.dll