Title: Dref

Type: Worms

Remove Dref. Removal instructions

Also known as: w32.Nuwar, Win32.Zhelatin

Severity scale:

(53 / 100)

Dref worm spreads through email messages with infected attachments. It tends to deactivate anti-virus applications. Dref collects every email addresses found on the compromised computer and use them to send infected letters. Dref uses its own email messaging engine to send malicious messages and fabricates senderâ€™s e-mail address. This worm may also install other malware.
The newest version of Dref worm sends email messages that pretend to be newsletters from reputable news websites.

Related files: System\wincom32.ini System\wincom32.sys, wincom32.sys, wincom32.ini

Dref properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Dref removal:

remover for Dref

SpyHunter is recommended remover to uninstall Dref. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Dref using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Dref (2007-04-23 06:26:57)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Dref (2007-04-23 06:26:57)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Dref (2007-04-23 06:26:57)

XoftSpySE Anti Spyware

download | review

Dref manual removal:

FORUM:
Discuss Dref in
spyware removal forum

Kill processes:
kernels32.exe

HELP:
how to kill malicious processes

Delete files:
System\\wincom32.ini System\\wincom32.sys kernels32.exe

HELP:
how to remove harmful files

Misc:
Malicious email sent by Dref worm has a subject chosen from the list below:

Urgent News!
Attn
News!
Incredible news!
Read and resend asap!
A Kiss So Gentle
A Rose
A Precious Gift
A Rose for My Love
A Token of My Love
A Toast My Love
A Dream is a Wish
A Is For Attitude
Come Relax with Me
Come Dance with Me
Destiny
Dream of You
Eternal Love
Eternity of Your Love
Falling In Love with You
For You....My Love
Heavenly Love
Hugging My Pillow
I am Complete
I Dream of you
I Love You Because
I Love Thee
I Love You with All I Am
I Love You Soo Much
I Would Dream
Kisses Through E-mail
If Loving You
In Your Arms
Inside My Heart
Last Night
ll Be Your Bride
Love Remains
Love Is...
m With You
Magic Power Of Love
Memories of You
Miracle of Love
My Love
Our Journey
Our Love Nest
Our Love Will Last
Our Love is Free
Our Love is Strong
Pages from My Heart
Path We Share
re in my Soul
re In My Thoughts
re my Dream
re the One
Sending You All My Love
Sending You My Love
Sent with Love
Special Romance
Surrounded by Love
The Dance of Love
The Mood for Love
The Miracle of Love
The Moon & Stars
The Time for Love
When You Fall in Love
Why I Love You
When Love Comes Knocking
Wrapped in Your Arms
Words in my Heart
You... In My Dreams
Your Love Has Opened
Your Friend and Lover

Malicious attachment sent by Dref worm is named after one of the following titles:

CNN latest news.exe
read me.exe
cnn.exe
news reader.exe
CNN news reader.exe
With Love.exe
flash postcard.exe
Flash Postcard.exe
Love Postcard.exe
Love Card.exe
Greeting Card.exe
greeting card.exe
greeting postcard.exe
Greeting Postcard.exe
My Love.exe
Postcard.exe
postcard.exe

Avoid opening email with characteristics mentioned above!

Information added: 2007-04-13 02:36:09
Information updated: 2007-04-23 03:49:42

Additional resources related to Dref:

Attention: If you know or you have a website or page about Dref removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Dref parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Related discussions:

cannot get rid of nasty

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.