Home / Spyware Encyclopedia / RiskTool.HideWindows << Back

Recommendation to Automatically remove RiskTool.HideWindows


Our products can remove RiskTool.HideWindows and thousands of other Virus and Spyware automatically and instantly.

RiskTool.HideWindows Details


  • Category RiskTool
  • Discovered 4/15/2010 5:05:31 PM
  • Modified 9/2/2024 11:33:47 AM
  • Threat Level High
  • Category Description
    This is an application that is not necessarily harmful if properly installed by the user or administrator of the PC, but which could be harmful or disruptive to the user, PC, or network if deployed by unauthorized parties for potentially malicious purposes

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
7E6BB941.EXE 3846144Xvision2.02605b1f7787bb1f860af539a6566978b7 
4faf1e1e.exe 687429welcome1.1.1.22e6da971957f081e2ef4d134bb5e9600 
8c581ad4.exe 1462669tobias schiek0.0.0.0d36613614fd748d6345a2b772715cbe6 
b18a4328.exe 18794765oleg n. scherbakov1.2.0.552  
af289ce2.exe 707778my came1.1.1.20048ece3ec8a74a392ac77b8956c7148 
devcheck.exe 24064GrT1.44dafd26a375df593a8d341ff5ec0c4cf9 
ekrnscan.dll 156928eset3.0.710.0a95d2b2f32be260aa800cca57d8d2da4 
ekrnsmon.dll 185600eset3.0.710.0a351f9446605151cec2bcf4e14cef9fa 
ekrnepfwlang.dll 19200eset3.0.710.0a23aa9d62a080f02c7eea9c28e870ca6 
ekrn.exe 468224eset3.0.710.09ea99e600fb4884468066449c4558497 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"regedit"\"%das.au.ls%\temp\gsf4\zlip.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Sexya2"\"%WIN.SYS32%\SSSSSSSSSSSSS\Sexya2.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WinReg"\"%PF%\cute\svchost.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WinXPService"\"%ROOT%\winnt\system32\Lavan\system32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"od-padr87"\"%PF%\Webdialer\792be032.exe -m"
..\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webdialer_od-padr87\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Run\\"MSN"\"%DAS.AU%\UPDATE\MSN.EXE -D -E CMD.EXE 190.18.44.235 80"
..\System\CurrentControlSet\Services\SYNTPS\(Default)
..\Software\adrian lopez\(Default)
..\Software\webdialer\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.