winebay.exe - Dangerous
winebay.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Winebay.exe is W32.Debanpass.
W32.Debanpass is a worm that copies itself to all drives. It steals confidential information and account details when users connect to a bank Web site.
Related files:
%System%\crase.exe
%System%\winebay.exe
%System%\url.tmp
%System%\dde.st
C:\tmpsss.log
C:\xxjsnxx.tmp
%DriveLetter%\autorun.inf
Kill the process winebay.exe and remove winebay.exe from Windows startup.