Remove Wowcraft. Description and removal instructions

 
Title: Wowcraft

Type: Trojans
Severity scale:Wowcraft severity is 55  (55 / 100)
 
Wowcraft is a trojan designed to steal passwords used in popular computer game "World of Warcraft" and send them to its author by e-mail. It also can record user keystrokes, download and install potentially unsafe software. The parasite infects essential system files and terminates running security programs. Once executed, Wowcraft creates several files and modifies the Windows registry, so that it runs on every sytem startup.


Wowcraft properties:
• Sends out logs by FTP or email
• Logs keystrokes
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Wowcraft removal:

remover for Wowcraft

Wowcraft manual removal:

Kill processes:
svchost32.exe, rundll32.exe, internat.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\load=C:\Program Files\[svchost32.exe or rundll32.exe or internat.exe]
Delete files:
msdll.dll, svchost32.exe, rundll32.exe, internat.exe
Misc:
Exact file location:
msdll.dll - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32
svchost32.exe, rundll32.exe, internat.exe - C:\Program Files

Other programs to remove Wowcraft:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 01/08/05
Information updated: 01/08/05

Additional resources related to Wowcraft:

Attention: If you know or you have a website or page about Wowcraft removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Wowcraft parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: