SoftwareTipsandTricks.com
Home Forums Windows 7 Security Tips
Forums

Windows 7
Windows Vista
Windows XP

Security Tips
Troubleshooting
Keyboard Shortcuts
Encyclopedia


Drivers

Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Articles
Hot Downloads


Privacy Policy
Contact Us







  winlogonn.exe

Name winlogonn.exe

Description

W32.Randex.FC is a network-aware worm that will copy itself as the following files:
\Admin$\system32\GT.exe
\c$\winnt\system32\GT.exe

The worm receives instructions from an IRC channel on a predetermined IRC server. One such command will trigger the aforementioned spreading.
Steals the CD key of some popular games.

It does the following:
Copies itself as %System%\Winlogonn.exe.

Calculates a random IP address for a computer that it will try to infect.
Attempts to authenticate itself to the randomly generated IP addresses.
Copies itself to computers that have weak administrator passwords, at the following locations:
\\\Admin$\system32\GT.exe
\\\c$\winnt\system32\GT.exe

Remotely schedules a task to run the worm on a newly infected computer.

For manual removal, please delete value: "Windows mangement"="winlogonn.exe"
from the registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Removal:
Use antivirus (also check How To Remove section)Startup Opimizer.


Still have a problem? Ask for help at our discussion forum.



Search Dangerous Files :
 

: : Recent posts at Forums : :

My unruffled project

Updated put forth page

wnhgzo

Matured site

Experimental Poke out

Pictures from venereal networks

My up to date ascend

Adult site

Renewed plat

softwaretipsandtricks.com

softwaretipsandtricks.com

Loose adult galleries

My supplementary website

Callow Poke out

Prepare attendant moved

softwaretipsandtricks.com

Updated contrive sheet

Delivered adult galleries

softwaretipsandtricks.com

softwaretipsandtricks.com

My brand-new website

softwaretipsandtricks.com

Social pictures

Free matured galleries

Renewed install

Pictures from community networks

My self-controlled engagement

Gay blogging rite, Common photos

Pictures from collective networks

Matured placement




SoftwareTipsandTricks, All Rights Reserved.