Winweb Security |
Fare niveau:
9
9
Type: Rogue Anti-Spyware
Fælles symptomer på infektion:
Andre mutationer kendt som:
- Forbinder til internettet uden tilladelse
- Viser kommercielle reklamer
- Normale system-programmer bryder ned øjeblikkeligt
- Langsom internetforbindelse
- System-nedbrud
- Irriterende pop-ups
- Langsom computer
Sådan renser du Winweb Security dig selv
Filer forbundet med infektion (Winweb Security):
WinwebSecurity.exe
Setup[1].exe
1818636568.exe
install[1].exe
1159449119.exe
5689887B.exe
90839366.exe
10588124.exe
90598116.exe
17304414.exe
10245464.exe
90255456.exe
12400314.exe
92410306.exe
161.exe
AV.exe
1446255078.exe
1814827421.exe
10024412.exe
1345400504.exe
1267284512.exe
1115687155.exe
1274583507.exe
48F79A08.exe
191583494.exe
536598202.exe
984349875.exe
9179499.exe
1907718204.exe
613622941.exe
1155984230.exe
718104544.exe
Setup[1].exe
1818636568.exe
install[1].exe
1159449119.exe
5689887B.exe
90839366.exe
10588124.exe
90598116.exe
17304414.exe
10245464.exe
90255456.exe
12400314.exe
92410306.exe
161.exe
AV.exe
1446255078.exe
1814827421.exe
10024412.exe
1345400504.exe
1267284512.exe
1115687155.exe
1274583507.exe
48F79A08.exe
191583494.exe
536598202.exe
984349875.exe
9179499.exe
1907718204.exe
613622941.exe
1155984230.exe
718104544.exe
Processer til at udslette (Winweb Security):
WinwebSecurity.exe
Setup[1].exe
1818636568.exe
install[1].exe
1159449119.exe
5689887B.exe
90839366.exe
10588124.exe
90598116.exe
17304414.exe
10245464.exe
90255456.exe
12400314.exe
92410306.exe
161.exe
AV.exe
1446255078.exe
1814827421.exe
10024412.exe
1345400504.exe
1267284512.exe
1115687155.exe
1274583507.exe
48F79A08.exe
191583494.exe
536598202.exe
984349875.exe
9179499.exe
1907718204.exe
613622941.exe
1155984230.exe
718104544.exe
Setup[1].exe
1818636568.exe
install[1].exe
1159449119.exe
5689887B.exe
90839366.exe
10588124.exe
90598116.exe
17304414.exe
10245464.exe
90255456.exe
12400314.exe
92410306.exe
161.exe
AV.exe
1446255078.exe
1814827421.exe
10024412.exe
1345400504.exe
1267284512.exe
1115687155.exe
1274583507.exe
48F79A08.exe
191583494.exe
536598202.exe
984349875.exe
9179499.exe
1907718204.exe
613622941.exe
1155984230.exe
718104544.exe
Fjerne registry entries (Winweb Security):
{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
Microsoft\Windows\CurrentVersion\Run\WinwebSecurity
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
Microsoft\Windows\CurrentVersion\Run\adpws
ORB.ta.1
{1B7F9329-AAF9-4E34-8ECF-C363FD3C60CF}
{21EEB010-57F3-11DD-B116-DAD055D89593}
ORB.ta
Microsoft\Windows\CurrentVersion\Run\1159449119
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90839366
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10588124
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90598116
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17304414
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 92410306
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 12400314
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90255456
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10245464
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1446255078
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1814827421
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10024412
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1345400504
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1267284512
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1115687155
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1274583507
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 359F5809-00B8-4455-A73A-9EA62A51101B
RUNNING PROGRAM\191583494.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 536598202
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 984349875
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 9179499
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1907718204
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 613622941
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1155984230
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 718104544
Microsoft\Windows\CurrentVersion\Run\WinwebSecurity
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
Microsoft\Windows\CurrentVersion\Run\adpws
ORB.ta.1
{1B7F9329-AAF9-4E34-8ECF-C363FD3C60CF}
{21EEB010-57F3-11DD-B116-DAD055D89593}
ORB.ta
Microsoft\Windows\CurrentVersion\Run\1159449119
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90839366
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10588124
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90598116
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17304414
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 92410306
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 12400314
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90255456
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10245464
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1446255078
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1814827421
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10024412
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1345400504
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1267284512
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1115687155
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1274583507
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 359F5809-00B8-4455-A73A-9EA62A51101B
RUNNING PROGRAM\191583494.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 536598202
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 984349875
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 9179499
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1907718204
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 613622941
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1155984230
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 718104544









Kommentarer
Kunne i ikke give en grundig vejledning i hvordan man fjerner Winweb Security
måske I kunne skære det lidt mere ud for den normale bruger:-)??
Er I sikker på at I ikke selv er en af del af denne slyngelagtige anti-spyware applikation?