Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

WinSpy is a Remote Administration Tool, or RAT, that monitors files, Internet activities, network traffic, and keystrokes. If you detect ansmtp.dll on your computer, you may be infected with WinSpy spyware. WinSpy installs without your knowledge. An attacker who has access to your hard-drive, can install WinSpy in the startup folder and will run the next time you log in to your computer. The attacker will get a Web-based interface that displays reports of all your computer activities.

Automated Detection for WinSpy

WinSpy Manual Removal Instructions

Stop WinSpy system processes:

WinSpyDemo.exe
winsys.exe
winvid703.exe
wsdll.exe
uni3218.exe
csrss.ex_
smt.exe
winsyst.exe
winspy.exe
win-spy eval setup.exe
winvid703.exewinsys.exe
wsdll.exe
uni3218.exe
csrss.ex_
smt.exe
winsyst.exe
winspy.exe
win-spy eval setup.exe
winsys.exe

Unregister WinSpy DLLs:

smtt.dll
serm.dll
sere.dll
qual.dll
keyn.dll
keyf.dll
idws.dll
fso.dll
fld.dll

Remove WinSpy files:

WinSpy.com.url
WinSpy Demo.lnk
WinSpyDemo.exe
winsys.vbs
8a9d9050.tmp
winsys.exe
wssetup.reg
winspy.tlb
win-spy_userguide.doc
win-spy.wse
uninstall@winspy.lnk
unins000.dat
opthlp.txt
help.lnk
getthem.bat
folderhelp.txt
@winspy.lnk
winsys.exe1.ima
smtt.dll
serm.dll
sere.dll
qual.dll
keyn.dll
keyf.dll
idws.dll
fso.dll
fld.dll
winvid703.exe
wsdll.exe
uni3218.exe
csrss.ex_
smt.exe
winsyst.exe
winspy.exe
win-spy eval setup.exe
wssetup.regwinsys.exe
winspy.tlb
win-spy_userguide.doc
win-spy.wse
uninstall @winspy.lnk
unins000.dat
opthlp.txt
help.lnk
getthem.bat
folderhelp.txt
@winspy.lnk
winsys.exe1.ima

Remove WinSpy registry values:

Microsoft\\Installer\\Products\\E810B04815519D541975B37E0E5EE945
Microsoft\\Installer\\Features\\E810B04815519D541975B37E0E5EE945

Important Disclaimer

WinSpy is related to:

  » Super WinSpy

This entry was posted on Monday, June 26th, 2006 at 11:51 am and is filed under Remote Administration Tools. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.