winguis.dll - Dangerous

%sysdir%\winguis.dll

Free Download

Manual removal instructions:

Antivirus Report of %sysdir%\winguis.dll:
%sysdir%\winguis.dll Malware
%sysdir%\winguis.dllDangerous
%sysdir%\winguis.dllHigh Risk
%sysdir%\winguis.dll
winguis.dll is rootkit Trojan. Oscor-B.
winguis.dll is used to hide files, processes and registry.
winguis.dll is a user mode rootkit.
Rootkit contacts remote hacker server using HTTP session.
Rootkit injects itself in to all running processes.
Rootkit hooking the following Windows APIs:
Kernel32.dll FindFirstFileW
FindNextFileW
Module32NewW
Psapi.dll EnumProcessModules
GetModuleFileNameW
Advapi32.dll EnumServicesStatusA
EnumServicesStatusW
RegEnumKeyA
RegEnumKeyExA
RegEnumKeyExW
RegEnumKeyW
RegEnumValueA
RegEnumValueExA
RegEnumValueExW
RegEnumValueW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
Related files:
%SysDir%\drivers\DetPort.sys
%SysDir%\drivers\IsPubDrv.sys
%SysDir%\drivers\RvdPort.sys
%SysDir%\winguis.dll
%Temp%\20060424.bak
Added to registry:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
%SysDir%\WINGUIS.DLL

Remove winguis.dll now!

Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.

Testimonials

You can read UnHackMe testimonials here.