Remove Ginwui. Description and removal instructions

 
Title: Ginwui

Type: Backdoors
Severity scale:Ginwui severity is 60  (60 / 100)
 
Ginwui is a backdoor that provides the attacker with unauthorized remote access to the compromised computer. The intruder can take screenshots of user activity, execute system commands and collect system information. Ginwui is able to hide its presence in the system. The backdoor runs on every Windows startup.

Ginwui is usually installed by other parasites. Some of them may arrive as infected Microsoft Word files that exploit certain Microsoft Word vulnerabilities.


Ginwui properties:
• Allows remote user connection
• Takes and sends out screenshots of user activity
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Ginwui removal:

remover for Ginwui

Ginwui manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs=%System%\winguis.dll
Delete files:
winguis.dll, detport.sys, ispubdrv.sys, rvdport.sys
Misc:
Exact file location:
winguis.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
detport.sys, ispubdrv.sys, rvdport.sys - C:\Windows\System\Drivers, C:\Windows\System32\Drivers or C:\Winnt\System32\Drivers

Other programs to remove Ginwui:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 02/06/06
Information updated: 02/06/06

Additional resources related to Ginwui:

Attention: If you know or you have a website or page about Ginwui removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Ginwui parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: