winprotect.exe - Dangerous
winprotect.exe
Manual removal instructions:
Antivirus Report of winprotect.exe:
winprotect.exe
Mass mailing worm.Mugly.
It uses own SMTP engine to send e-mails.
After infecting it copies its body to %System%\xxz.tmp.
Created files:
# %System%\attached.zip
# %System%\ANSMTP.DLL (an SMTP engine)
# %System%\bszip.dll
# %System%\uglym.jpg
# %System%\winprotect.exe (a W32.Spybot.Worm variant)
# %System%\SVKP.sys
# \bt32.exe
Displays the file %System%\uglym.jpg in the browser.
Registers SMTP engine.
Adds to Windows startup.
Remove it from startup using RegRun Startup Optimizer.
Variants:
lexplore.exe
vb6.exe
| winprotect.exe | Malware |
| winprotect.exe | Dangerous |
| winprotect.exe | High Risk |
It uses own SMTP engine to send e-mails.
After infecting it copies its body to %System%\xxz.tmp.
Created files:
# %System%\attached.zip
# %System%\ANSMTP.DLL (an SMTP engine)
# %System%\bszip.dll
# %System%\uglym.jpg
# %System%\winprotect.exe (a W32.Spybot.Worm variant)
# %System%\SVKP.sys
# \bt32.exe
Displays the file %System%\uglym.jpg in the browser.
Registers SMTP engine.
Adds to Windows startup.
Remove it from startup using RegRun Startup Optimizer.
Variants:
lexplore.exe
vb6.exe
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.