Title: WinHound
Type: Trojans

Remove WinHound. Removal instructions


 
Severity scale:WinHound severity is 69  (69 / 100)
 
WinHound is a trojan, which silently installs itself to vulnerable computers by exploiting certain system or web browser security flaws. It can also be dropped by some parasites. Once executed, WinHound installs several other dangerous threats, changes the Internet Explorer default home page and the desktop wallpaper. The new wallpaper warns the user that the system is infected with spyware and asks to download and install WinHound, which is a corrupt illegally distributed anti-spyware program. The modified start page may redirect the user to insecure advertising web sites. The trojan can use a rootkit to cloak its files, running processes and other related objects. WinHound automatically runs on every Windows startup.

Related files: html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe, bhoimpl.dll, birdihuy.dll, cwrapper.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, wl.dll, mtc.ini

WinHound properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic WinHound removal:

SpyHunter is recommended remover to uninstall WinHound. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove WinHound using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
STOPzilla
We are testing STOPzilla's efficiency at removing WinHound (2010-07-08 10:44:58)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing WinHound (2010-07-08 10:44:58)
Spyware Doctor
We are testing Spyware Doctor's efficiency at removing WinHound (2010-07-08 10:44:58)
XoftSpySE Anti Spyware

WinHound manual removal:

Kill processes:
html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FHPage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\intell32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\links
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinHound
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\{F33812FB-F35C-4674-90F6-FD757C419C51}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\links
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WinHound
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[local address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{784aa380-13f2-422e-8540-f2280f1dd4f1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9EAC0102-5E61-2312-BC2D-4D54434D5443}
HKEY_CLASSES_ROOT\Tubby.ToolBandObj.1
HKEY_CURRENT_USER\Software\MTC MTC
HKEY_LOCAL_MACHINE\SOFTWARE\WinHound.com
Delete files:
html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe, bhoimpl.dll, birdihuy.dll, cwrapper.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, wl.dll, mtc.ini
Delete directories:
C:\Program Files\WinHound
Misc:
WinHound doesn't create all listed objects, but installs only some of them. Its typical installation depends on several factors and often varies.

[local address] is a path to the shdochp.dll file. It is usually C:\Windows\System32.
[site address] is an adress of an insecure web site. Sometimes it is a page on the makemesearch.com domain.

Exact file location:
winhound.exe, cwrapper.dll, wl.dll - C:\Program Files\WinHound
html.exe - C:\Windows\Downloaded Program Files or C:\Winnt\Downloaded Program Files
intell32.exe, ll.exe, shdochp.exe, sywsvcs.exe, bhoimpl.dll, birdihuy.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, mtc.ini - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
Information added: 2005-12-08 16:51:22
Information updated: 2010-07-08 08:07:43

Additional resources related to WinHound:

Attention: If you know or you have a website or page about WinHound removal, feel free to add a link to this list: add url

more resources
0
0
Guest
all entries deleted except for the reg entry "HKEY_LOCAL_MACHINESOFTWAREWinHound.com"
0
0
Guest
good info - thanks!
0
0
Guest
thx!
0
0
Guest
this winhound thing doesnt let me download files...so i cant download the links you gave me to download
0
0
Guest
Internet Explorer ropens some times--but not others. Can not install ActiveX. Many unusual Icons on my screen--system very slow---systems are disabled by this virus---the same systems that are required to load the solution!!
0
0
Guest
same problem!
all entries deleted except for the reg entry "HKEY_LOCAL_MACHINESOFTWAREWinHound.com"
cant you give a hint how to delete this entry?
0
0
Guest
same problem, the winhound thing doesnt let me download files, wont let me install winxp so I can format my windows XP, and its just cant install ActiveX and it made my system very slow...
0
0
Guest
all entries deleted except for the reg entry "HKEY_LOCAL_MACHINE\SOFTWARE\WinHound.com"
cant you give a hint how to delete this entry?
0
0
Guest
WinHound did not help my Internet Explorer at all. It still does not open.
0
0
Guest
I just performed a xp syystem recovery. Everything seems to be fine, no remainders found.
0
0
Guest
ANyone have any idea how to get Winhound out of the msconfig startup tab?? Everything else is gone.
0
0
Guest
all entries deleted except for registry.how do i remove this?

Post Comment:

Attention: Use this form only if you have additional information about WinHound parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Related news:
Similar parasites:
Related articles:
Related discussions:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove WinHound using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other