Impove
boot up time

Run a free scan to diagnose your PC
Start Test!

WINCRTWAN.DLL is Trojan Sefnit

January 27, 2012 by NightWatcher
Filed under: Malware 
Install UnHackMe Install RegRun

The file WINCRTWAN.DLL is malware related.
You must delete the file WINCRTWAN.DLL immediately!
Delete the file WINCRTWAN.DLL without delay!
Kill the process WINCRTWAN.DLL and remove WINCRTWAN.DLL from the Windows startup.

Malware Analysis of WINCRTWAN.DLL
Full path on a computer: %Local Appdata%\Quickapi80\WincrtWan.dll

Detected by UnHackMe:

Item Name: WincrtWan
Author: Unknown
Related File: %LOCAL APPDATA%\QUICKAPI80\WINCRTWAN.DLL
Type: Registry Run

Removal Results: Success
Number of reboot: 1

WINCRTWAN.DLL is known as:

Trojan.Sefnit, Trojan.Siggen3

WINCRTWAN.DLL hash:

  • MD5: b25faf2b416fa4652cfb69e421f112c8
How to quickly detect WINCRTWAN.DLL presence?

Registry:
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WincrtWan: “rundll32.exe “%Local Appdata%\Quickapi80\WincrtWan.dll”,tapimapAgent rasobjOffice”
Folders:
  • %Local Appdata%\Quickapi80
Files:
  • %Local Appdata%\Quickapi80\WincrtWan.dll

Remove it now!

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!