Know Your Malware: WinHound Removal

WinHound is a trojan, which silently installs itself to vulnerable computers by exploiting certain system or web browser security flaws. It can also be dropped by some parasites. Once executed, WinHound installs several other dangerous threats, changes the Internet Explorer default home page and the desktop wallpaper. The new wallpaper warns the user that the system is infected with spyware and asks to download and install WinHound, which is a corrupt illegally distributed anti-spyware program. The modified start page may redirect the user to insecure advertising web sites. The trojan can use a rootkit to cloak its files, running processes and other related objects. WinHound automatically runs on every Windows startup.

Related files: html.exe, intell32.exe, links.exe, ll.exe, shdochp.exe, sywsvcs.exe, winhound.exe, bhoimpl.dll, birdihuy.dll, cwrapper.dll, mtc.dll, oleext.dll, shdochp.dll, st3.dll, zlbw.dll, wl.dll, mtc.ini

WinHound properties:
Changes browser settings
Shows commercial adverts
Connects itself to the internet
Hides from the user
Stays resident in background Remove WinHound, removal instructions

Linked by shanmuga Friday, 9th December 2005 12:00AM