Title: Wowcraft.c

Type: Trojans

Remove Wowcraft.c
Removal instructions

Severity scale:

(58 / 100)

Wowcraft.c is a trojan that monitors opened windows and steals user login names and passwords related to popular computer games "World of Warcraft" and "The Legend of Mir". Gathered data is transferred to a predefined remote host. Wowcraft.c can also terminate running security-related software and log user keystrokes. The trojan automatically runs on every Windows startup.

Wowcraft.c properties:
• Logs keystrokes
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Wowcraft.c removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Wowcraft.c you agree to our privacy policy and agreement of use.

remover for Wowcraft.c

SpyHunter is recommended remover to uninstall Wowcraft.c. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Wowcraft.c using SpyHunter, submit question to our support team and provide as much details as possible.

Malwarebytes Anti Malware

Download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Wowcraft.c (2006-01-25 04:49:03)

Defender Pro Ultimate Security Suite

Download | review

We are testing Defender Pro Ultimate Security Suite's efficiency at removing Wowcraft.c (2006-01-25 04:49:03)

STOPzilla

Download | review

We are testing STOPzilla's efficiency at removing Wowcraft.c (2006-01-25 04:49:03)

XoftSpySE Anti Spyware

Download | review

what to do if you failed to remove the infection?

Phone Support to remove Wowcraft.c

Wowcraft.c snapshot:

Wowcraft.c manual removal:

ASK US:
Submit question about Wowcraft.c

Kill processes:
debugprogram.exe, exert.exe, lsass.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\top=%Windows%\lsass.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command\(Default)=C:\Program Files\Internet Explorer\intexplore.com %1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)=WindowFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\(Default)=%Windir%\exert.exe "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp\Shell\Open\Command\(Default)=C:\Program Files\Internet Explorer\intexplore.com %1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\Shell\Open\Command\(Default)=C:\Program Files\Common Files\intexplore.pif %1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\htmlfile\Shell\Open\Command\(Default)=C:\Program Files\Internet Explorer\intexplore.com -nohome
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HTTP\Shell\Open\Command\(Default)=C:\Program Files\Common Files\intexplore.pif -nohome
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WindowFiles\Shell\Open\Command\(Default)=WindowFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WindowFiles\Shell\Open\Command\(Default)=%Windir%\exert.exe "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\intexplore.pif
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Check_Associations=no

HELP:
how to remove registry entries

Delete files:
debugprogram.exe, exert.exe, lsass.exe, dxdiag.com, intexplore.com, msconfig.com, regedit.com, intexplore.pif

HELP:
how to remove harmful files

Misc:
exert.exe, lsass.exe - C:\Windows or C:\Winnt
intexplore.pif - C:\Program Files\Common Files
intexplore.com - C:\Program Files\Internet Explorer
debugprogram.exe - C:\Windows\Debug or C:\Winnt\Debug
dxdiag.com, msconfig.com, regedit.com - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32

QR code for Wowcraft.c removal instructions:

QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Wowcraft.c are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Wowcraft.c right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

Information added: 2006-01-25 02:11:48
Information updated: 2006-01-25 02:11:48

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Post Comment:

Attention: Use this form only if you have additional information about Wowcraft.c parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Like us on Facebook

Latest spyware news:

Subscribe to spyware news

If you do not want to receive our spyware
newsletter please unsubscribe here
47994 Subscribers

Ask us

Encyclopedia of parasites:

WebCake 25/05/13
Driver Performer 24/05/13
Computer Crime and Intellectual Property Section virus 24/05/13
Websearch.SearchRocket.info 24/05/13
System Care Antivirus 24/05/13
DnsBasic.com 24/05/13
my.allgameshome.com 24/05/13
Swagbucks toolbar 24/05/13
České Republik Police 24/05/13
POLIZEI Cyber Crime Investigation Department virus 24/05/13

Library of files:

h@tkeysh@@k 15/05/13
unsecapp.exe 13/05/13
csrss.exe 11/04/13
consent.exe 10/04/13
ctxfihlp.exe 09/04/13
igfxpers.exe 09/04/13
igfxtray.exe 08/04/13
wuauclt.exe 08/04/13
rundll32.exe 28/02/13
win32.exe 26/02/13

Archive of files

Tags:

Your main spyware remover is:

Compare spyware removers
Compare free products

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.

Remove Wowcraft.c Removal instructions

Automatic Wowcraft.c removal:

Wowcraft.c manual removal:

QR code for Wowcraft.c removal instructions:

Additional resources: