Title: WI345d

Type: Malware

Remove WI345d. Removal instructions

Also known as: Windows Security Suite

Severity scale:

(45 / 100)

WI345d is just another fake threat generated by rogue anti-spyware program called Windows Security Suite. Usually, this fake threat is displayed in fake security alerts. Here's one of those alerts:

"Windows Security Alert To help protect your computer, Windows Firewall has blocked some features of this progrma. Do you want to keep blocking this program? Name: WI345d; Publisher: Unknown… Windows Firewall has blocked this program from accepting connections from the Internet or a network. If you recognize the program or trust the publisher, you can unblock it. When should I unblock a program?"

No matter what you click in this fake alert, you will be taken to the homepage or pay page of Windows Security Suite. Most importantly, don't purchase this program. Please use the removal guide below to remove Windows Security Suite and its related malware form your computer.

Related files: search.xml, tempdoc.dll, std.exe, snl2w.exe, sm.dll, runddl.dll, PE.tmp, PE.dll, kernel32.dll, grid.sys, grid.dll, energy.dll, dudl.sys, DBOLE.drv, CLSV.exe, ANTIGEN.drv, Instructions.ini, cookies.sqlite, Windows Security Suite.lnk, winss.cfg, vd952342.bd, working.log, WINSS.ico, WI345d.exe, sqlite3.dll, mozcrt19.dll, 26.mof

WI345d properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

WI345d snapshot:

Automatic WI345d removal:

remover for WI345d

SpyHunter is recommended remover to uninstall WI345d. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove WI345d using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing WI345d (2011-07-17 18:44:19)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing WI345d (2011-07-17 18:44:19)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing WI345d (2011-07-17 18:44:19)

XoftSpySE Anti Spyware

download | review

WI345d manual removal:

FORUM:
Discuss WI345d in
spyware removal forum

Kill processes:
WI345d.exe CLSV.exe snl2w.exe std.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "698909210803"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Security Suite"

HELP:
how to remove registry entries

Unregister DLLs:
mozcrt19.dll sqlite3.dll energy.dll grid.dll kernel32.dll PE.dll runddl.dll SM.dll tempdoc.dll

HELP:
how to unregister malicious DLLs

Delete files:
26.mof mozcrt19.dll sqlite3.dll WI345d.exe WINSS.ico working.log vd952342.bd winss.cfg Windows Security Suite.lnk cookies.sqlite Instructions.ini ANTIGEN.drv CLSV.exe DBOLE.drv dudl.sys energy.dll grid.dll grid.sys kernel32.dll PE.dll PE.tmp runddl.dll SM.dll snl2w.exe std.exe tempdoc.dll search.xml

HELP:
how to remove harmful files

Information added: 2009-07-09 06:39:13
Information updated: 2011-07-17 16:07:04

Additional resources related to WI345d:

Attention: If you know or you have a website or page about WI345d removal, feel free to add a link to this list: add url

more resources

Guest

thanks for the tip removed today

Reply »

2011 07 17

Guest

thanks for the tp removed today

Reply »

2011 07 17

Post Comment:

Attention: Use this form only if you have additional information about WI345d parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.