riched32.dll - Dangerous
%programfiles%\winspy demo\riched32.dll
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
WinSpy is a misleading application that may give exaggerated reports about potential risks on the computer.
Related files:
%Windir%\Installer\[RANDOM NAME].msi
%UserProfile%\Application Data\AntiSpywareDAT\BlockedCookies.dat
%UserProfile%\Application Data\AntiSpywareDAT\date.dat
%UserProfile%\Application Data\AntiSpywareDAT\DirectoryDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\ENoSignature.dat
%UserProfile%\Application Data\AntiSpywareDAT\ExeDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\FileDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\RegistryDefinition.dat
%UserProfile%\Application Data\AntiSpywareDAT\Safety.dat
%UserProfile%\Desktop\WinSpy Demo.lnk
%UserProfile%\Start Menu\Programs\WinSpy Software\WinSpy Demo\Readme-Help.lnk
%UserProfile%\Start Menu\Programs\WinSpy Software\WinSpy Demo\WinSpy Demo.lnk
%UserProfile%\Start Menu\Programs\WinSpy Software\WinSpy Demo\WinSpy.com.url
%ProgramFiles%\WinSpy Demo\WinSpyDemo.exe
%ProgramFiles%\WinSpy Demo\help.chm
%ProgramFiles%\WinSpy Demo\Localization.xml
%ProgramFiles%\WinSpy Demo\riched32.dll
%ProgramFiles%\WinSpy Demo\WinSpy.com.url
Kill the file %ProgramFiles%\WinSpy Demo\riched32.dll and remove %ProgramFiles%\WinSpy Demo\riched32.dll from Windows startup.