WHITESMOKE_TOOLS.EXE - Dangerous
WHITESMOKE_TOOLS.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
WHITESMOKE_TOOLS.EXE is known as: packed with WiseSFXDropper [Kaspersky Lab].
MD5 of WHITESMOKE_TOOLS.EXE = F2613D7218F8E023AF39F4CCDC1864F2
WHITESMOKE_TOOLS.EXE size is 2487632 bytes.
Full path on a computer: %TEMP%\WHITESMOKE_TOOLS.EXE
Related Files:
%COMMONDESKTOPDIR%\BUY WHITESMOKE.LNK
%COMMONPROGRAMS%\STARTUP\WHITESMOKE 2011.LNK
%COMMONPROGRAMS%\WHITESMOKE\LAUNCH WHITESMOKE.LNK
%COMMONPROGRAMS%\WHITESMOKE\UNINSTALL.LNK
%COMMONPROGRAMS%\WHITESMOKE\WHITESMOKE REGISTRATION.LNK
%DESKTOPDIR%\WHITESMOKE 2011 (CONTINUE INSTALLATION).LNK
%TEMP%\GLB10.TMP
%TEMP%\GLB9.TMP
%TEMP%\GLCA.TMP
%TEMP%\GLFE.TMP
%TEMP%\GLFF.TMP
%PROGRAMFILES%\WHITESMOKE_TOOLS\TBWHIT.DLL
%TEMP%\GLFF.TMP.CONDUITENGINESETUP.EXE
%TEMP%\GLGD.TMP
%TEMP%\GLMB.TMP
%TEMP%\WHITESMOKE\CHECKLOCKEDWSFILES.EXE
%PROGRAMFILES%\WHITESMOKE\MICROSOFT.VC80.CRT.MANIFEST
%TEMP%\WHITESMOKE\MSVCM80.DLL
%PROGRAMFILES%\WHITESMOKE\MSVCP80.DLL
%PROGRAMFILES%\WHITESMOKE\MSVCR80.DLL
%TEMP%\WHITESMOKE_TOOLS.EXE
%PROGRAMS%\STARTUP\LAUNCH WHITESMOKE.LNK
%PROGRAMFILES%\CONDUITENGINE\APPCONTEXTMENU.XML
%PROGRAMFILES%\WHITESMOKE_TOOLS\WHITESMOKE_TOOLSTOOLBARHELPER.EXE
%PROGRAMFILES%\CONDUITENGINE\CONDUITENGINEUNINSTALL.EXE
%PROGRAMFILES%\CONDUITENGINE\ENGINECONTEXTMENU.XML
%PROGRAMFILES%\CONDUITENGINE\ENGINESETTINGS.JSON
%PROGRAMFILES%\CONDUITENGINE\INSTALL.LOG
%PROGRAMFILES%\CONDUITENGINE\TOOLBAR.CFG
%PROGRAMFILES%\WHITESMOKE\BUY.ICO
%PROGRAMFILES%\WHITESMOKE\COMVISTAELEVATOR.DLL
%PROGRAMFILES%\WHITESMOKE\FLOATBUTTONWHITEAPPS.TXT
%PROGRAMFILES%\WHITESMOKE\FUNCSERVER_WDC_X64.EXE
%PROGRAMFILES%\WHITESMOKE\HOOKDLLOE.DLL
%PROGRAMFILES%\WHITESMOKE\HOOKDLLOE64.DLL