winhlp.exe - Dangerous
%windir%\winhlp.exe
Manual removal instructions:
Antivirus Report of %windir%\winhlp.exe:
%windir%\winhlp.exe
Trojan PWSteal.Formglieder.
Adds the value:
"winhlp.exe" = "%Windir%\winhlp.exe"
to Windows startup registry keys.
Adds a unique ID for the infected machine:
"UserData\UID" = "[generated ID]"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
Steals passwords.
Sends the gathered information back to a remote Web site.
Downloads and executes remote files.
Kill it using RegRun Startup Optimizer.
%windir%\winhlp.exe | Malware |
%windir%\winhlp.exe | Dangerous |
%windir%\winhlp.exe | High Risk |
Adds the value:
"winhlp.exe" = "%Windir%\winhlp.exe"
to Windows startup registry keys.
Adds a unique ID for the infected machine:
"UserData\UID" = "[generated ID]"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
Steals passwords.
Sends the gathered information back to a remote Web site.
Downloads and executes remote files.
Kill it using RegRun Startup Optimizer.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.