WinAntiSpyware Description

WinAntiSpyware is a rogue anti-spyware application that installs to a computer system without an affected user’s knowledge. After successful installation WinAntiSpyware shows pop-up advertisements. WinAntiSpyware is able to recreate and update itself. WinAntiSpyware can slow your computer, hijack, redirect and change web browser home page and install other malicious programs. WinAntiSpyware displays false security reports on the Taskbar and tricks computer users into purchasing the licensed version of WinAntiSpyware in order to fix the imaginary security threats. WinAntiSpyware may show these alert warnings in your system tray. In extreme cases, the false infections are actually the computer trojans that promote or even directly install WinAntiSpyware. WinAntiSpyware invades your privacy and security. WinAntiSpyware is difficult to uninstall. It is highly recommended to remove WinAntiSpyware from your PC.

Type: Trojans

How Can You Detect WinAntiSpyware?

WinAntiSpyware Removal Details

WinAntiSpyware has typically the following processes in memory:

• stera.exe
• winantispyware2006freesetup.exe
• was6chk.dll
• asagents.dll
• updater.exe
• was6.exe
• winantispyware2006setup.exe
• shellext.dll
• insthelp.exe
• uwasffnt.exe
• wasffnt.exe
• uwas6chk.dll
• winantispyware2007.exe

WinAntiSpyware creates the following registry entries:

• HKEY_CLASSES_ROOT\clsid\{_clsid_washellexecutecheck} appid
• HKEY_CLASSES_ROOT\clsid\{abcd4567-76b5-4bc7-aac5-396d70925b11}
• HKEY_CLASSES_ROOT\drive\shellex\contextmenuhandlers\exploreruwas
• HKEY_CLASSES_ROOT\interface\{abcd4567-d8e8-4df1-a3ea-d0aa72f42611}
• HKEY_CLASSES_ROOT\typelib\{abcd4567-7437-43ef-ab74-4ab1d3a37411}
• HKEY_CLASSES_ROOT\uwashellext.shellhook
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winantispyware 2006 scanner_is1
• HKEY_CLASSES_ROOT\clsid\{_clsid_washellexecutecheck}
• HKEY_CLASSES_ROOT\clsid\{1236de55-eded-4675-af10-ba15eddb4d7a}
• HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\exploreruwas
• HKEY_CLASSES_ROOT\interface\{abcd4567-4d73-43e9-85e5-53a2dbd95411}
• HKEY_CLASSES_ROOT\typelib\{4567ab12-ae24-4fd6-b479-e2b464f32da6}
• HKEY_CLASSES_ROOT\uwasfsd.creationnotifier
• HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run winantispyware 2006 scanner
• HKEY_LOCAL_MACHINE\system\currentcontrolset\services\uwasfsd
• HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\exploreruwas
• HKEY_CLASSES_ROOT\clsid\{1230649b-b980-44a5-b259-9b09ebea6331}
• HKEY_CLASSES_ROOT\clsid\{f3ef3329-ccb1-433b-a3ed-6e763665d280}
• HKEY_CLASSES_ROOT\interface\{4567ab12-a884-4ca6-b739-cedb12fef096}
• HKEY_CLASSES_ROOT\typelib\{12398a44-7dfc-4c46-bd8f-41259d169a0d}
• HKEY_CLASSES_ROOT\uwas6.uwas6
• HKEY_CLASSES_ROOT\uwashellext.wascontextmenu
• HKEY_LOCAL_MACHINE\software\winantispyware 2006 scanner

Important Article Disclaimer