TNT2USER.EXE is Trojan Barys

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

We checked some samples of TNT2USER.EXE and detected the file TNT2USER.EXE as threat.
Remove the TNT2USER.EXE file from your computer right now.
Removal tool:

Malware Analysis of TNT2USER.EXE
Full path on a computer: %Local Appdata%\TNT2\\TNT2User.exe

Detected by UnHackMe:

Default location: %Local Appdata%\TNT2\\TNT2User.exe

Removal Results: Success
Number of reboot: 1

TNT2USER.EXE is known as:


Will you remove it?
0 0

Download Removal Tool for Free

People say

Visitor post


  • MD5: c89c47f425982d3d5100857af83939c1
How to quickly detect TNT2USER.EXE presence?

  • HKLM\Software\Classes\xmlfile\shell\Open\command\: “”%Program Files%\Internet Explorer\IEXPLORE.EXE” -nohome”
  • HKLM\Software\Classes\xslfile\shell\Open\command\: “”%Program Files%\Internet Explorer\IEXPLORE.EXE” -nohome”
  • %Local Appdata%\TNT2
  • %Local Appdata%\TNT2\
  • %Local Appdata%\TNT2\\Autorun.inf
  • %Local Appdata%\TNT2\\crx.tar
  • %Local Appdata%\TNT2\\ffassist.1.dll
  • %Local Appdata%\TNT2\\hmac.1.dll
  • %Local Appdata%\TNT2\\ie8starter.exe
  • %Local Appdata%\TNT2\\iehpr.1.dll
  • %Local Appdata%\TNT2\\iestage2.1.dll
  • %Local Appdata%\TNT2\\IEToolbar.dll
  • %Local Appdata%\TNT2\\IEToolbar64.dll
  • %Local Appdata%\TNT2\\INSTALL.TNT
  • %Local Appdata%\TNT2\\log.dll
  • %Local Appdata%\TNT2\\npTNT2.dll
  • %Local Appdata%\TNT2\\npTNT2Ghost.dll
  • %Local Appdata%\TNT2\\OldStyleSB.1.dll
  • %Local Appdata%\TNT2\\PARTNER.TNT
  • %Local Appdata%\TNT2\\passport.dll
  • %Local Appdata%\TNT2\\passport64.dll
  • %Local Appdata%\TNT2\\pinnedSearch.htm
  • %Local Appdata%\TNT2\\pinnedSearch_FindWide.htm
  • %Local Appdata%\TNT2\\progress.1.dll
  • %Local Appdata%\TNT2\\regsvr.1.dll
  • %Local Appdata%\TNT2\\RemoteSkin.wms
  • %Local Appdata%\TNT2\\sqlite.1.dll
  • %Local Appdata%\TNT2\\tnt2chrome.dll
  • %Local Appdata%\TNT2\\TNT2User.exe
  • %Local Appdata%\TNT2\\TNT2UserPS.dll
  • %Local Appdata%\TNT2\\TNT2UserPS64.dll
  • %Local Appdata%\TNT2\\TntMagicDel.dll
  • %Local Appdata%\TNT2\\UnInjLib.dll
  • %Local Appdata%\TNT2\\UnInjLib64.dll
  • %Local Appdata%\TNT2\\UNINSTALL.TNT
  • %Local Appdata%\TNT2\\UninstallDlg.1.dll
  • %Local Appdata%\TNT2\\untar.1.dll
  • %Local Appdata%\TNT2\\UPDATE.TNT
  • %Local Appdata%\TNT2\\xpi.tar
  • %Local Appdata%\TNT2\\zipunzip.1.dll

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

STEP 1: Download UnHackMe for free

UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

Free Download

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

STEP 2: Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software. Verified Publisher Greatis Software

Once UnHackMe has installed the first Scan will start automatically

Review the detected threats

STEP 3: Carefully review the detected threats!

Click Remove button or False Positive.


7 votes, average: 5.00 out of 57 votes, average: 5.00 out of 57 votes, average: 5.00 out of 57 votes, average: 5.00 out of 57 votes, average: 5.00 out of 5 (7 votes, average: 5.00 out of 5)
You need to be a registered member to rate this.