Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

WinHound is a anti-spyware/antivirus program that issues fake alerts on your computer in order to trick you into buying its full version. Once you’re infected with WinHound you may receive virus alerts in your task bar stating that you are infected with spyware and to download its spyware remover. WinHound will also hijack your desktop to show the following fake message: “Warning Spyware Detected on Your System: Install an antivirus or spyware software to clean your computer.”

Automated Detection for WinHound

WinHound Manual Removal Instructions

Stop WinHound system processes:

ll.exe
links.exe
intell32.exe
html.exe
uninstall.exe
sywsvcs.exe
shdochp.exe
winhoundinstaller.exe
uninstall.exewinhound.exe
sywsvcs.exe
shdochp.exe
winhoundinstaller.exe
winhound.exe

Unregister WinHound DLLs:

bhoimpl.dll
msvcr71.dll
rc.dll
wl.dll
zlbw.dll
st3.dll
shdochp.dll
oleext.dll
mtc.dll
cwrapper.dll
birdihuy.dll

Remove WinHound files:

register winhound spyware remover.lnk
start winhound spyware remover.lnk
WinHound
ll.exe
links.exe
intell32.exe
html.exe
winhound.exe.local
registerwinhoundspyware
remover.lnk
startwinhoundspyware
uninstall.lnk
winhoundspywareremover.lnk
mtc.ini
bhoimpl.dll
msvcr71.dll
rc.dll
wl.dll
zlbw.dll
st3.dll
shdochp.dll
oleext.dll
mtc.dll
cwrapper.dll
birdihuy.dll
uninstall.exe
sywsvcs.exe
shdochp.exe
winhoundinstaller.exe
ll.exewinhound.exe
links.exe
intell32.exe
html.exe
winhound.exe.local
register winhound spyware
remover.lnk
start winhound spyware
uninstall.lnk
winhound spyware remover.lnk
mtc.ini

Remove WinHound registry values:

HKEY_LOCAL_MACHINESOFTWAREWinHound.com
HKEY_CURRENT_USERSoftwareMTCMTC
HKEY_CLASSES_ROOTTubby.ToolBandObj.1
9EAC0102-5E61-2312-BC2D-4D54434D5443
784aa380-13f2-422e-8540-f2280f1dd4f1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainStartPage=[siteaddress]
HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[localaddress]
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSharedToolsMSConfigstartupregWinHound
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSharedToolsMSConfigstartupreglinks
F33812FB-F35C-4674-90F6-FD757C419C51
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWinHound
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunlinks
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunintell32.exe
HKEY_LOCAL_MACHINE SOFTWAREWinHound.comHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunFHPage
HKEY_CURRENT_USER SoftwareMTC MTC
HKEY_CLASSES_ROOTTubby.ToolBandObj.1
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{9EAC0102-5E61-2312-BC2D-4D54434D5443}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionExplorerBrowser Helper Objects{784aa380-13f2-422e-8540-f2280f1dd4f1}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftInternet ExplorerMainStart Page=[site address]
HKEY_CURRENT_USER SoftwareMicrosoftInternet ExplorerMainStart Page=[local address]
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftShared ToolsMSConfigstartupregWinHound
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftShared ToolsMSConfigstartupreglinks
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionShellServiceObjectDelayLoad{F33812FB-F35C-4674-90F6-FD757C419C51}
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunWinHound
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunlinks
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunintell32.exe
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindows CurrentVersionRunFHPage

Important Disclaimer

WinHound is related to:

  » PSGuard

This entry was posted on Monday, June 19th, 2006 at 6:05 pm and is filed under Rogue Anti-Spyware Program, Trojans. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.