|
Title: WinWhatWhere
Type: Keyloggers
Remove WinWhatWhere. Removal instructions
Severity scale:
 (68 / 100)
WinWhatWhere properties: • Takes and sends out screenshots of user activity • Sends out logs by FTP or email • Logs keystrokes • Hides from the user • Stays resident in background Automatic WinWhatWhere removal: 
We are testing STOPzilla's efficiency at removing WinWhatWhere
(2005-09-17 05:41:52)
We are testing Malwarebytes Anti Malware's efficiency at removing WinWhatWhere
(2005-09-17 05:41:52)
We are testing Spyware Doctor's efficiency at removing WinWhatWhere
(2005-09-17 05:41:52)
WinWhatWhere manual removal:Kill processes:express.exe, il40.exe, msdfcng.exe, msegcng.exe, updsem.exe, winsutl.exe, xpress.exe Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinWhatWhere HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\msdfcng.exe Delete files: express.exe, il40.exe, msdfcng.exe, msegcng.exe, updsem.exe, winsutl.exe, xpress.exe, _isreg32.dll, winsdoc8.sys, winsdoc16.sys, winsdoc32.sys Misc: WinWhatWhere files can be found in C:\Windows\System\OLBE, C:\Windows\System32\OLBE or C:\Winnt\System32\OLBE directory. 
Information added: 2004-03-19 10:00:00
Information updated: 2005-09-17 03:04:37 Additional resources related to WinWhatWhere:Attention: If you know or you have a website or page about WinWhatWhere removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
Puts files all over the place. Uses the registry as a garbage dump.
Installs a whole lot of VB runtime modules and components to the victim machine.
Post Comment: