Remove WI345d. Description and removal instructions

Title: WI345d	Also known as: Windows Security Suite
Type: Malware	Severity scale: (45 / 100)

WI345d is just another fake threat generated by rogue anti-spyware program called Windows Security Suite. Usually, this fake threat is displayed in fake security alerts. Here's one of those alerts:

"Windows Security Alert To help protect your computer, Windows Firewall has blocked some features of this progrma. Do you want to keep blocking this program? Name: WI345d; Publisher: Unknown… Windows Firewall has blocked this program from accepting connections from the Internet or a network. If you recognize the program or trust the publisher, you can unblock it. When should I unblock a program?"

No matter what you click in this fake alert, you will be taken to the homepage or pay page of Windows Security Suite. Most importantly, don't purchase this program. Please use the removal guide below to remove Windows Security Suite and its related malware form your computer.

FORUM:
Discuss WI345d in
spyware removal forum

Related files: search.xml, tempdoc.dll, std.exe, snl2w.exe, sm.dll, runddl.dll, PE.tmp, PE.dll, kernel32.dll, grid.sys, grid.dll, energy.dll, dudl.sys, DBOLE.drv, CLSV.exe, ANTIGEN.drv, Instructions.ini, cookies.sqlite, Windows Security Suite.lnk, winss.cfg, vd952342.bd, working.log, WINSS.ico, WI345d.exe, sqlite3.dll, mozcrt19.dll, 26.mof

WI345d properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

WI345d snapshot:

Automatic WI345d removal:

remover for WI345d

WI345d manual removal:

Kill processes:
WI345d.exe CLSV.exe snl2w.exe std.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "698909210803"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Security Suite"

HELP:
how to remove registry entries

Unregister DLLs:
mozcrt19.dll sqlite3.dll energy.dll grid.dll kernel32.dll PE.dll runddl.dll SM.dll tempdoc.dll

HELP:
how to unregister malicious DLLs

Delete files:
26.mof mozcrt19.dll sqlite3.dll WI345d.exe WINSS.ico working.log vd952342.bd winss.cfg Windows Security Suite.lnk cookies.sqlite Instructions.ini ANTIGEN.drv CLSV.exe DBOLE.drv dudl.sys energy.dll grid.dll grid.sys kernel32.dll PE.dll PE.tmp runddl.dll SM.dll snl2w.exe std.exe tempdoc.dll search.xml

HELP:
how to remove harmful files

Other programs to remove WI345d:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 09/07/09
Information updated: 09/07/09

Additional resources related to WI345d:

Attention: If you know or you have a website or page about WI345d removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about WI345d parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.