netwatch.exe - Dangerous


Manual removal instructions:

Antivirus Report of netwatch.exe:
netwatch.exe Malware
netwatch.exeHigh Risk
Also known as I-Worm.WatchNet is the latest version of a potent Internet worm that spreads via the Internet in mail attachment named sent via email.
Infected email messages have the following characteristics:
Sender address: james@recipient domain
Subject: Re[2]: our private photos
Body Text: Hello Dear!, Finally i've found possibility to right u, my lovely girl :)
All our photos which i've made at the beach (even when u're without ur bh:))
photos are great! This evening i'll come and we'll make the best SEX :)
Right now enjoy the photos. Kiss, James.
Attachement: (actual name is "photos.jpg.exe")

To mail out infected messages (of itself), it uses its own SMTP engine.
To detect email addresses to target, the worm searches for address strings in files located in the Shell Folders and Program Files directories.
Watches for activity from the e-gold payment system ( application.
If this application is detected, Mimail.c records some specific data from it in the file c:\tmpe.tmp.
This file is sent out to four email addresses belonging to the worm's author.
Also executes a DDoS attack against the web sitew and by sending to them an endless cycle of packets of random sizes.

Automatic removal: Use RegRun Startup Optimizer to remove it.

Remove netwatch.exe now!

Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.


You can read UnHackMe testimonials here.