We checked up the file NDDEN.EXE and found it hazardous.
The file NDDEN.EXE must be deleted from the system immediately.
Kill the process NDDEN.EXE and remove NDDEN.EXE from the Windows startup.
Malware Analysis of NDDEN.EXE
Full path on a computer: %WinDir%\NDDEN.exe
Detected by UnHackMe:
NDDEN.EXE
Default location: %WinDir%\NDDEN.exe
Removal Results: Success
Number of reboot: 1
NDDEN.EXE is known as:
Trojan.PSW.VB.dq, Password-Stealer, Trojan.PSW.VB.CCG, probably a variant of Win32.PSW.VB.JOOVFAT, W32.Pws.BR, W32.Agent.SQM, Trojan.Spy-13326, Trojan-PSW.VB.dq, Trojan.PWS.VB.DQ, TrojWare.PSW.VB.dq0, TR.PSW.VB.DQ, Troj.Nice-A, Trojan.PSW.VB.r, Trojan.Malagent, Trojan.PSWVB.23599, Win-Trojan.Nicean.23567, Trojan.PSW.VB.m, VirTool.Vbinder, W32.Nice.A.tr
NDDEN.EXE hash:
- MD5: 09856d473b6b531a89cfb596ded5547c
How to quickly detect NDDEN.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft PCHealth32: “NDDEN.exe”
Files:- %WinDir%\NDDEN.exe
- C:\a.exe