We checked up the file NBR.EXE and found it hazardous.
The file NBR.EXE must be deleted from the system immediately.
Kill the process NBR.EXE and remove NBR.EXE from the Windows startup.
Malware Analysis of NBR.EXE
Full path on a computer: %Temp%\NBR.exe
Detected by UnHackMe:
NBR.EXE
Default location: %Temp%\NBR.exe
Removal Results: Success
Number of reboot: 1
NBR.EXE is known as:
Trojan.Banker
NBR.EXE hash:
- MD5: a6b59ad072c3fc4422de04ee6f085138
How to quickly detect NBR.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\: “%Temp%\NBR.exe”
Files:- %Temp%\enviadedemail.tmp
- %Temp%\NBR.exe