winsms.dll - Dangerous
%windir%\winsms.dll
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
winsms.dll opens a back door on TCP port 9125.
winsms.dll spreads via open network shares.
winsms.dll tries to terminate antiviral programs installed on a user computer.
Related files:
%System%\winldra.exe
%Windir%\dvpd.dll
%Windir%\netdx.dat
%Windir%\prntsvra.dll
%Windir%\TEMP\fa4537ef.tmp
%Windir%\winsms.dll
Adds the value:
"load32" = "%System%\winldra.exe"
to the Windows startup registry keys.
Removal:
Remove winsms.dll from Windows startup.