windowz.exe - Dangerous

windowz.exe

Manual removal instructions:

Antivirus Report of windowz.exe:
windowz.exe Malware
windowz.exeDangerous
windowz.exeHigh Risk
windowz.exe
W32.Randex.AEV is a network-aware worm that tries to connect to a predetermined IRC server.
If this worm is successful, it will wait for instructions from the attacker.

Copies itself as %System%\Windowz.exe.
Generates a random IP address.
The worm then attempts to log in to the remote computer as Administrator.

Adds the value: "Microsoft Windows GUI"="Windowz.exe"
to the registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Connects to an IRC server and waits for commands from a remote attacker.
The attacker can:
- Perform Distributed Denial of Service (DDOS) attacks.
- Scan for computers to infect.
- Retrieve system information from the infected computer, such as CPU speed, available memory, and Windows version.
- Download and execute files from the Internet.
- Perform IRC functions, such as removing other users from the IRC channel.

Use RegRun Startup Optimizer to remove it from startup.

Remove windowz.exe now!

Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.

Testimonials

You can read UnHackMe testimonials here.