WinSpywareProtect

Description: Rogue Security Program
Risk Level: High
Date of First Occurence: Wednesday, April 30, 2008
Software Developer: (unknown)
Brief Info: Rogue/Suspect Anti-Spyware Product "Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
Removal: This threat can be removed using "Spyware Terminator"

SCAN & REMOVE NOW »

Geographical Distribution of Threat "WinSpywareProtect"

Threat Info

View All

Detected Items

  1. Detected Files: %TEMP%\_addon.exe MD5: 4F070BA9EBAE49FB36D9F3A9D2A49E53 Size:323396 MD5: 2A0B817743249E150639E07184A5537B Size:181371 MD5: 378CDCF65791552B4FA8C1DD0E7D8213 Size:163927 MD5: 8CD56F02C48905478C61898639732185 Size:323444 MD5: 147B0E2D561DF0AD62EA196F04198EC2 Size:323383 MD5: 2AF04F7A616855D0AD51E818FCF6C20F Size:323391 MD5: F9AC08775DF9C61DC4E6F9F97E748700 Size:34556 MD5: FBAAB655D51B39E482F94A5CB266B89E Size:323379 MD5: 9AFA596B2A23A356BDFC03AEFB8A88C1 Size:181487 MD5: D96EC6706847E4121FD8C8C9A664F693 Size:323392 MD5: EDFE2D4A7AA0DA622CBFE415ADB970E9 Size:181429 MD5: 04A7B976F57294DEF6B0C32BAF55179C Size:181361 and more.... %PROGRAMFILES%\AbsoluteTransfer\Uninstall.exe MD5: E458F3047CD13590B92F957D0DEF3770 Size:62910 %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll MD5: 837D30F26831CD7DD979E400F5B6CFB2 Size:247296 MD5: 46D07927760AC6FD80B3DF339184FCBC Size:247296 MD5: 6C202AE4ED11CC5A85A21703A6140875 Size:247296 %ALLUSERS_APPDATA%\Adsl Software Limited\WinSpywareProtect\WinSpywareProtect.exe MD5: 6515831D07BE3F8F13767B3CADEC9697 Size:1224704 MD5: 123D2E5B21577B72281E6EC8F045990C Size:1174528 MD5: 13B2F45EA3826D31E577149437BD22E9 Size:1224192 MD5: A6A110485C3C7E87028FD3507F7E5B06 Size:1174528 MD5: 5EA1B20F7D7650BF184878E67A6C6798 Size:1175040 MD5: 3CD6D7B2C0EFFA72E9478DD5518A0EAC Size:1172480 MD5: 530077CEA17CC2DC2B5AF3FF8BC13BF6 Size:1225728 MD5: 88E862EDC343C9E8B1B0935CBB54F346 Size:1222656 MD5: 9250741378679922EF1835C8BAED40C5 Size:1224192 MD5: 70B6E54D12E787DF683BC16EED48417E Size:1222656 MD5: D270E0E3300AD6D34268F9C862AE07CD Size:1225216 MD5: 947E391F6BA04F05956C1ED18E38474B Size:1174528 and more.... %PROGRAMFILES%\WinSpywareProtect\unins000.exe MD5: B59EB95A1CF8E51CE56C540CA9BBBBDA Size:682330 %PROGRAMFILES%\WinSpywareProtect\WSPLauncher.exe MD5: AFE47FC7F995E61576B1AC3D409D2F98 Size:282624 MD5: DB1F88B0DE7B03C29015B10ECD1056B7 Size:281088 %ALLUSERS_APPDATA%\ADSL SOFTWARE LIMITED\WINSPYWAREPROTECT\WINSPYWAREPROTECT.EXE MD5: 1DB5034ABE12A0874D5D3152D94E3F3D Size:1161216 MD5: 859A3480DCBF6534E703D727B37DE476 Size:1161216 MD5: 869E46C2FD12FC7B7BC85628F1172BA2 Size:1160704 MD5: 1003FC77BE47CD58879AF74AA8D204F2 Size:1160192 MD5: 23EB98A3D113294F7A79075CD352B2AE Size:1160704 %TEMP%\_addon.exe MD5: 18008D90ECBD7CFBA330A7ACB6F48F28 Size:163647 MD5: 5DAAB5ADD21269A4E1A470F1CDCAC559 Size:181512 MD5: 77C00426C092CA72C21D44DE03A3CF2F Size:323395 MD5: 436612AD3D54D69A85C56EF20CF7012C Size:323393 MD5: 7AD4B312C4F4E1F7E7251655B784CFD6 Size:323397 MD5: AAECF6DFB68035034A5898B0563FB25B Size:324184 MD5: 1978757C7904B64166DF4FCCC4759B9A Size:163997 MD5: 418A711641A83B6C810690B34D6B6531 Size:190289 MD5: E5CC566A2E847F2B902B123E1786933B Size:323384 MD5: 2476B7D6D0E8EFC51BA39AAC7BDB18B6 Size:323388 MD5: 62CED755E902392C99C01A8B23F470EE Size:338 MD5: E35C8568F34E9D8CD2DF020A86C47DD2 Size:323393 and more.... %TEMP%\temp.dll MD5: B93A1BCE34F9ACA04D6FFAB7248FF196 Size:247296 MD5: A2360DDDE058B7F5CEC5ABE475E5444B Size:247296 MD5: 215F6E7D702C91E0ED9F30AF0754FD12 Size:247296 MD5: 437FEF98EB71B112146E2C6675D16A2E Size:247296 MD5: C170903B1D049E80775C449A13E1C874 Size:247296 MD5: 29842E02BBDEA24963A5FBC6022890BA Size:247296 MD5: 88178B01A2A760CE19072C953F79822B Size:247296 MD5: C09ACDE6AEF6AD8A6441640A9E5A0C6C Size:247296 MD5: EFA01491D5C07B844EFFAA54C58A267C Size:247296 MD5: 1F879F64A5BDB98310E374AC00D3D65C Size:247296 MD5: 3A99FDA586A9014DC471396902CC9085 Size:247296 MD5: 7A7A2D5ACABC69AEB7215E02F11A4877 Size:247296 and more.... %TEMP%\_addon.exe MD5: D3BABF8BF881782DA8D26A6B6DA0F8DA Size:323400 MD5: 6D28A12A2331B052FC6A11E1534F83D9 Size:163680 MD5: C8AE3B786114401B6791F9D4FEF03660 Size:179 MD5: 14B6911F7E02E391008633B8FB46C810 Size:323400 MD5: 087CA34E1285C129885EF61EF3DAE993 Size:323392 MD5: 8764169AD14629C47FA74A7E1C3C0326 Size:323392 MD5: 40927DF286EFD0A31D3B3300675CF5C5 Size:67952 MD5: CBCF0B6297838782D94004516D55ABB5 Size:163782 MD5: 5163F090BEE552115F7368F67089169A Size:323392 MD5: 02510704CA4663CFD6B4171F56D07CFB Size:57113 MD5: 6A0094DA03A2416CDF15B1F36E7D9C61 Size:190281 MD5: 84A3930E21E6F6DE7328522EAE8B2E5A Size:190262 and more.... %TEMP%\_addon.exe MD5: CCEAA975CA9910A57A0CCF701F61CFEC Size:163669 MD5: BCE2EB9E2E18657256DB578772C2DE61 Size:190205 MD5: A1D05C3D541F2E32BBE683E8D2B77839 Size:190416 MD5: 66D0E9791E930545FDDD4541989889CC Size:190489 MD5: D09561AF01C4F1A39CEBBD2BF78F1317 Size:190371 MD5: AF028D82E6B9B73CF2B62455D6564FD5 Size:190364 MD5: AE4BFFBC7A4F7F2DE7A96F8EDA5A9315 Size:190341 MD5: FEADABB04E08019B4FED1DD73B049483 Size:190287 MD5: EFC3856E59B78425ADD869E36CEC6438 Size:190146 MD5: 833322D6207D7E5081DC67F5D951C3AB Size:190315 MD5: AAA7F05A7399410AF884123360696ECB Size:181375 MD5: CF6727601E81A85E8F4721269153BB9B Size:163928 and more.... %ALLUSERS_APPDATA%\Adsl Software Limited\WinSpywareProtect\WinSpywareProtect.exe MD5: 346DA0CCC6B08C002101705E4E1F7726 Size:1224704 MD5: CFCCE432CD92C51B3D13D4984A1EFE95 Size:1338880 MD5: 2CAAA5DF164E18F562FDBA41E4D29EDF Size:1159680 MD5: 375063AC9006CF25670524CA89377BCC Size:1222144 MD5: EC111864414C40E6B09A44DA78E83C65 Size:1162752 MD5: 4DE0F99EDB7C2B4FB341A2F5B8D39806 Size:1224192 MD5: 7E49A3F1B231E91CE829F26FF2C3E4A6 Size:1666560 MD5: 300F812554F42F69E2F25F7AB20EEDC9 Size:1175040 MD5: 3531ED71D2B58CB0FD9EDC893969EEF9 Size:1353692 MD5: 70B6E54D12E787DF683BC16EED48417E MD5: CB323F130036B3C4748D3821381D00F0 Size:1176064 %TEMP%\_addon.exe MD5: F9365CE383B23CF2D39C165EC6C6EB02 Size:190527 MD5: F973BBDC61B20E04E4535B981DA44F70 Size:34268 MD5: 3F513402B02B3F6932EA4290FE7B2F43 Size:190126 MD5: 88762AFD16D7A65408068699AD11FA1A Size:112029 MD5: B1B18082D40061762919A74FB471CD7E Size:190583 MD5: 2260B66587DC727793C18C824C72F9C4 Size:190432 MD5: 8077F4DFC6EE0D90FA771F298057AD88 Size:163730 MD5: C633C94B69C714C3430768422BA877A1 Size:190159 MD5: 030413E5103CD2034781C72CAA24540C Size:190413 MD5: 87F1370719D35B3B2985CB1FB067165C Size:181368 MD5: 67ECCEA0D882C8B3432C71E876232851 Size:181462 MD5: 6D996808686B636874C2FF378B059F0C Size:323391 and more.... %TEMP%\_addon.exe MD5: 21FA12FAFA3DEF036117A4F2870AA390 Size:152090 MD5: E746A7012F24330B0244CACBA05FA68F Size:181590 MD5: 305C1A707AE2E243F54D3D0E9CBD7E45 Size:163904 MD5: C46882F93900A802D62352763F45E091 Size:181436 MD5: DE4C5CDAADE821A25AC8E169BBBF1028 Size:163917 MD5: 2DB1BC4E67D05E34879BC9DED8D81FC7 Size:181353 MD5: 97DF33DAFEAAC9367B3F564401D90181 Size:181454 MD5: 49A1F217A6FD9DCD32EAEEC8B2AD3B52 Size:181659 MD5: 589E5C94FA521DF4CE2D1E84248DCAEB Size:163965 MD5: 4EF0D4621BBD1DEE194FB7E6DF070B36 Size:181368 MD5: 1DAE221C6C443FB5A6D7BE223C5B585B Size:163861 MD5: 01673B7E4A0FA688264BB608447910FB Size:181503 and more.... %TEMP%\_addon.exe MD5: 44E7169FC365F0AAA6DC626837B28ACC Size:181356 MD5: D32357F932B7C212711755787CCE79F1 Size:323377 MD5: C79843E82BEDE2DDF249B22E338DA9AE Size:181565 MD5: 527011D9003A1E0AA545953F53B20275 Size:163966 MD5: C6E11373B070042A590475786AD6AD13 Size:163762 MD5: 0E1D50A9D945EC44EECBCCB6CA838A5E Size:181268 MD5: E8B5772692E5405738B4A19011ABA8C3 Size:323392 MD5: F0D5905BDE224752884C336D45B4D48B Size:163915 MD5: F12DC3DB0DB446D7B9824AF19A30C5B5 Size:181513 MD5: CB2E2DCB46E4C9CC96991778B4877EFB Size:34556 MD5: 6A2C5F7BE469E4356C035C41147F4863 Size:323396 MD5: B64453311D2E8F77B02B0402AB1E570E Size:163926 and more.... %TEMP%\_addon.exe MD5: 3EFD0DC06FD0A77BC6420BCBADCD11F2 Size:163940 MD5: ABB2FECDDC470CAC584A29E4CCEACE96 Size:181374 MD5: C7F8F4473664D793B8F08EC6B9E67A34 Size:163915 MD5: 2F86F05EEFECB905D6AC767792DD4436 Size:163851 MD5: A9594DF0F89408BD783714A4D069C8D9 Size:163856 MD5: DC9EAD47007D3DC2BA893B5DF8762BDF Size:163839 MD5: 53F5F2DAE70E4A1D72B93CEC65AE0313 Size:2164 MD5: A392FFC9A12262065BA7E4299F8D2786 Size:163762 MD5: 1DD1ED3DD06CFEB1C86B13F45111B5C7 Size:163916 MD5: EC93F0669D01866CE9A18EC32AB68A96 Size:163729 MD5: FFC3A96B94D1A479FF37BACD3374E127 Size:163964 MD5: 44E0CA66FB44BF0CC73798BC58115C14 Size:163959 and more.... %TEMP%\_addon.exe MD5: D77ABAC70189672D36613D72920956AE Size:163747 MD5: 6C7653CFD4FB28C69789B7452FEA474C Size:2144 MD5: 18CCA6F058DD980336103F92444EBFC6 Size:163843 MD5: 0F9C3DA96D9A33C0F6542DDC3EA44F96 Size:163909 MD5: 64B17F4EAFA11F87E407ABCB7E5088D1 Size:163680 MD5: 383724D3EAD23463C1E20A00078F3459 Size:163943 MD5: 80630EBD4DEE1B1AA794A614CD36AE80 Size:163893 MD5: E80711A6DEB089F0BE9B1E11D58A4FF8 Size:66868 MD5: FE991F38648127B242AE7861AE9AD1CD Size:163718 MD5: FAB5238181344C1DC4E5C7E315A0B89F Size:323389 MD5: 775B23F20C4655BF0D59FA668F200464 Size:163912 MD5: 0C2EF3C71B4DB99436D60B54CF1375CC Size:163794 and more.... %TEMP%\_addon.exe MD5: 11C2EF6E17A3269F045B8A526F9E7D20 Size:163710 MD5: 9A298D294CA1BD4F616351191A3AB0F9 Size:163799 MD5: 2B2F8A67E35DCDB5A3AD867841FF333A Size:163749 MD5: 43DAC9CDA9619EC90A8B50532EFBA376 Size:163717 MD5: CE0517384846CF8C238851516B888178 Size:1970 MD5: 071D86EE5A9E0D0FFBB08003CBE5A73B Size:163698 MD5: 1EE0BFB2FA06D9A867E07F671C116616 Size:163832 MD5: 63D5D4C4680B7849AB52276396642322 Size:163706 MD5: 305B461EA9244B82AA92AA29FFBF045E Size:323389 MD5: 49EDBC3D3220685E5C0C73F79883B7D1 Size:163697 MD5: 807B34DDA99B46015A284C0DEF407890 Size:163652 MD5: 245C09FF1D357011120E1B6928D3D8F0 Size:163713 and more.... %TEMP%\_addon.exe MD5: 14B6239C0F7D7C232758C92926E0A8F3 Size:323396 MD5: 42AFE093DA0F990F64048B32B8DC2147 Size:323396 MD5: 65E0152CB6C1CEAF02168449B3938BE7 Size:323391 MD5: 727D7C92BFEB832C130A57D49F8EBEDA Size:33932 MD5: 779CE97EBCCEEA1C5A262AED3776F559 Size:323391 MD5: 1CED6E452F5BDF76974AA104D1388232 Size:58188 MD5: 1835B79B290899D84F8538434D6435F6 Size:258 MD5: 469B4367C9DE8061F5B3E44603CF0BD3 Size:104828 MD5: 0D8B810FC6081274D9723C4BC816DF15 Size:2765 MD5: 7286152292FCC124532C85465A2BE7BB Size:150716 MD5: 51BF22E0F94AF076BA986122D8182C53 Size:110172 MD5: 8AA5C3CB0D6E0AAD8232A03ADBDA9015 Size:137718 and more.... %TEMP%\temp.dll MD5: AB80B7ABD81A603D58565B5FC79119C6 Size:247296 MD5: ABC8E8D9A0F18D69E17C4307312E1C46 Size:247296 MD5: EC3A7DE7729917657F3D4CC2F1EA60BC Size:247296 MD5: 75FE0CCB129A01858A8FF6A7036FB0D1 Size:247296 MD5: 53E57BEA2578F81E197A5F5387C9AE1A Size:247296 MD5: A751538F5BA267A846EEB55A47007939 Size:247296 MD5: DD39F713F452B1999E6AF620F74B44D2 Size:247296 %TEMP%\_addon.exe MD5: 12C33C3F712ED8418816A1047483360D Size:323391 MD5: FF8D3EC10E03D2D1D6E34CFC7050E39A Size:323390 MD5: 7277807807BD4FE9956903A3BF2D0BF8 Size:323391 MD5: 1EEC90FE1FF42B922B8F844B14BCB1FA Size:323391 MD5: D55684612E3DFB2B82D0AEF6E9F7B975 Size:323400
  2. Detected Files with variable Filenames: MD5: 46273FE2557D7CFD7745BA7CBE6CAFBB Size: 247296 %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll MD5: 00A4DCB1BC8FD85B1B31B530AA9C6B24 Size: 247296 %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll MD5: C5534F82E82E24F2D14E8173DDB4A923 Size: 247296 %PROGRAMFILES%\CableRouting\CableRouting.dll %TEMP%\temp.dll MD5: AAECF6DFB68035034A5898B0563FB25B Size: 324184 %TEMP%\_addon.exe %SystemDiskRoot%\Documents and Settings\wadih\Local Settings\Temp\_addon.exe %SystemDiskRoot%\My Backup -- 08-07-06 1142AM\Documents and Settings\Owner.YOUR-06A3B8E925\Local Settings\Temporary Internet Files\Content.IE5\DZJIJF42\setup[1].exe %SystemDiskRoot%\My Backup -- 08-07-06 1142AM\Documents and Settings\Owner.YOUR-06A3B8E925\Local Settings\Temp\_addon.exe MD5: 215F6E7D702C91E0ED9F30AF0754FD12 Size: 247296 %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll MD5: C8AE3B786114401B6791F9D4FEF03660 Size: 179 %TEMP%\_addon.exe %ALLUSERS_APPDATA%\Adsl Software Limited\WinSpywareProtect\WinSpywareProtect.exe MD5: 50C6A72AC26E529EE358CBAC1DD78F89 Size: 63555 %SystemDiskRoot%\RECYCLER\S-1-5-21-2911240418-3797675333-3803052634-1007\Dc1043\Uninstall.exe %PROGRAMFILES%\ColorUtility\Uninstall.exe %PROGRAMFILES%\AbsoluteTransfer\Uninstall.exe i:\Program Files\Uninstall.exe %SystemDiskRoot%\System Volume Information\_restore{4E0CDC0E-6918-468C-8F02-20EFA7F3FEBD}\RP156\A0143478.exe %SystemDiskRoot%\System Volume Information\_restore{D6EAE65B-DB8C-4CD8-9DC8-84EC967ECC50}\RP122\A0152671.exe %SystemDiskRoot%\My Backup -- 08-07-06 1142AM\Program Files\Uninstall.exe %SystemDiskRoot%\My Backup -- 08-07-06 1142AM\Program Files\CenterLock\Uninstall.exe %PROGRAMFILES%\BurstWriting\Uninstall.exe %PROGRAMFILES%\LogicFunctions\Uninstall.exe MD5: 29842E02BBDEA24963A5FBC6022890BA Size: 247296 %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll MD5: 3A99FDA586A9014DC471396902CC9085 Size: 247296 %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll

Detecting items list:

  1. Files by Name %PROGRAMFILES%\WinSpywareProtect\WSPLauncher.exe %ALLUSERS_APPDATA%\Adsl Software Limited\WinSpywareProtect\WinSpywareProtect.exe %TEMP%\Perflib_Perfdata_4ac.dat %TEMP%\_addon.exe %TEMP%\temp.dll %PROGRAMFILES%\AbsoluteTransfer\AbsoluteTransfer.dll %PROGRAMFILES%\AbsoluteTransfer\Uninstall.exe %ALLUSERS_APPDATA%\Adsl Software Limited\WinSpywareProtect\LOG\20080612100348289.log %PROGRAMFILES%\AbsoluteTransfer\uninstall.dat
  2. Files by MD5 MD5: D4AD7ACCDAE853E3D675AD4E1D8ECC7B Size: 281088 MD5: 99FD28D6F50FB4A83A1540ADB33F0FE2 Size: 1172480 MD5: AAECF6DFB68035034A5898B0563FB25B Size: 324184 MD5: C5534F82E82E24F2D14E8173DDB4A923 Size: 247296
  3. Files by Directories %PROGRAMFILES%\WinSpywareProtect
  4. Files by CLSID or Name CLSID=18CB1A7B-94CD-4582-8022-ADA16851E44B
  5. Registry Keys HKLM\\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18CB1A7B-94CD-4582-8022-ADA16851E44B} HKLM\\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7C4BCD17-BDBA-4078-9D8C-8CA8B7EABE77} HKLM\\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7C4BCD17-BDBA-4078-9D8C-8CA8B7EABE77}

« Go to Software Database