Home Forums Windows 7 Security Tips

Windows 7
Windows Vista
Windows XP

Security Tips
Keyboard Shortcuts


Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Hot Downloads

Privacy Policy
Contact Us


Name %system%\windll.exe

Description is a worm that spreads as an email attachment and via file sharing networks.
Copies itself into the Windows system directory with the name windll.exe and registers the following system registry auto run key:
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "erthgdr"="%system%\windll.exe" creates two additional files in the Windows system folder: windll.exeopen; windll.exeopenopen
The worm uses a built-in SMTP server to mail copies of itself to all email addresses founded on the infected computer. opens port 80 on the local HTTP server allowing the controller to download and execute files on the infected machine.
The worm component of is scheduled to stop functioning and slef-destruct after August 10, 2004.
However, the downloader module will remain available for possible use for an unspecified period of time.

Remove it from startup by antivirus (also check How To Remove section)Startup Optimizer.

Still have a problem? Ask for help at our discussion forum.

Search Dangerous Files :

: : Recent posts at Forums : :

Fatal error: Incompatible file format: The encoded file has format major ID 1, whereas the Loader expects 7 in /home/software/public_html/forum/includes/functions_vbseo.php on line 0