Win32.Neodurk

Win32.Neodurk is known as a backdoor Trojan. The program was awarded the notable distinction of being the “Greediest Trojan Targeting Plastic Cards.”  A leading malware identification company generated this analysis.  This nasty program searches for access data for three separate plastic card systems. To add insult to injury, it will provide remote access to cybercriminals.

It will enter ports 7673 and 7677 and is written in Delphi.  You will find it packed with ASPack v2.001b.  The only bright light is that it only affects Windows 95, Windows 98 and Windows Me.

AKA:
Troj/Neodurk-14
Backdoor.Neodurk.14
Neodurk.14 Backdoor
BKDR_NEODURK.14
Backdoor.Win32.Neodurk.14
Win32/Neodurk.14
Backdoor.Win32.Neodurk.16

Related Files:
E6FE6282.EXE

Category:
Backdoor Trojan

Recommended Action:
Remove at once.

Removing Win32.Neodurk is a time-consuming venture.  It involves disabling some startup functions and if done improperly, you may disable your computer.  But, if knowledgeable then proceed with removing all related files, folders, registry keys and values and processes related to the program.  For those who are looking for immediate results, you may wish to try ZookaWare PC Cleaner.

With ZookaWare PC Cleaner, after an initial scan, a click of a mouse will start the removal process and it is done within minutes.  You can rest easy knowing that the job is done for you and will be done right with ZookaWare PC Cleaner.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Finley O'Connor says:

    I was infected with Win32.Neodurk and had tried 3 different anti-virus/anti-malware scans which did not detect anything at all, so I was at the very end of my rope. I tried SpyZooka as a last ditch effort thinking it was going to be like all the others but it fixed my problem completely!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php