Title: Winvestigator

Type: Keyloggers

Remove Winvestigator. Removal instructions

Severity scale:

(68 / 100)

Winvestigator is a commercial key logging tool that tracks user activity, records keystrokes, regularly takes screenshots and logs web sites visited. Gathered data can be sent to a configurable e-mail address. Winvestigator must be manually installed. It automatically runs on every Windows startup.

This keylogger violates privacy and security of those who has it on board; however, it can be used for legitimate reasons such as tracking children online habits. Unfortunately, it can also be employed by malicious attackers to steal bank accounts details, logins and passwords, personal data and other sensitive information.

Related files: loaddll.exe, winvestigator.exe, wv.exe, loaddll.dll, spoder.dll, sysninit.dll, syswvh.dll, syswvmail.dll, syswvnt.dll, syswvwin.dll, wvres.dll, wvh.dll

Winvestigator properties:
• Takes and sends out screenshots of user activity
• Sends out logs by FTP or email
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic Winvestigator removal:

remover for Winvestigator

SpyHunter is recommended remover to uninstall Winvestigator. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Winvestigator using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Winvestigator (2008-11-14 05:21:41)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Winvestigator (2008-11-14 05:21:41)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Winvestigator (2008-11-14 05:21:41)

XoftSpySE Anti Spyware

download | review

Winvestigator manual removal:

FORUM:
Discuss Winvestigator in
spyware removal forum

Kill processes:
loaddll.exe, winvestigator.exe, wv.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\.send
HKEY_CLASSES_ROOT\wvfile
HKEY_CURRENT_USER\Software\Tropsoft
HKEY_LOCAL_MACHINE\SOFTWARE\Tropsoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\wvsys
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Winvestigator
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\loaddll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\wv.exe

HELP:
how to remove registry entries

Unregister DLLs:
loaddll.dll spoder.dll sysninit.dll syswvh.dll syswvmail.dll syswvnt.dll syswvwin.dll wvres.dll wvh.dll

HELP:
how to unregister malicious DLLs

Delete files:
loaddll.exe, winvestigator.exe, wv.exe, loaddll.dll, spoder.dll, sysninit.dll, syswvh.dll, syswvmail.dll, syswvnt.dll, syswvwin.dll, wvres.dll, wvh.dll

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\wv
Misc:
Exact file location:
wv.exe, wvh.dll, wvres.dll - C:\Program Files\wv
loaddll.exe, loaddll.dll, spooder.dll, sysninit.dll, syswvh.dll, syswvmail.dll, syswvnt.dll, syswvwin.dll - C:\Windows or C:\Winnt

Information added: 2004-03-19 10:00:00
Information updated: 2008-11-14 02:44:26

Additional resources related to Winvestigator:

Attention: If you know or you have a website or page about Winvestigator removal, feel free to add a link to this list: add url

more resources

Good Boy

Used to be Keyboard Monitor 3.0

Reply »

2004 03 02

prp

not found any of the above but still have winvestigator on my system

Reply »

2005 02 24

Robo

I found none of the above files. Still Winvestigator is back after reboot.

Reply »

2008 11 13

Post Comment:

Attention: Use this form only if you have additional information about Winvestigator parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Related discussions:

keystroke loggers found, freaked me out

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.