WD.EXE

The file %PROGRAM FILES%\WINWD\WD.EXE is identified as a virus dropper.
The dropper %PROGRAM FILES%\WINWD\WD.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file %PROGRAM FILES%\WINWD\WD.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the %PROGRAM FILES%\WINWD\WD.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the %PROGRAM FILES%\WINWD\WD.EXE process and delete the file %PROGRAM FILES%\WINWD\WD.EXE.

%PROGRAM FILES%\WINWD\WD.EXE Information and Removal:
WD.EXE is known as: Trojan.Zbot [Symantec] PWS:Win32/Zbot.D [Microsoft] Trojan-Downloader.Win32.Small [Ikarus] Win-Trojan/Wsnpoem.399872 [AhnLab].
MD5 of WD.EXE = C706615456EAFDB77257152A67CBBCB4
WD.EXE size is 399872 bytes.
Full path on a computer: %PROGRAMFILES%\WINWD\WD.EXE
Related Files:
%DESKTOPDIR%\WINWD.LNK
%PROGRAMS%\WINWD\READ ME.LNK
%PROGRAMS%\WINWD\WINWD.LNK
%PROGRAMFILES%\WINWD\README.TXT
%PROGRAMFILES%\WINWD\WD.E-R
%PROGRAMFILES%\WINWD\WD.EXE
%PROGRAMFILES%\WINWD\WD.FNT
%PROGRAMFILES%\WINWD\WD.HLP
%PROGRAMFILES%\WINWD\WD.INI
%PROGRAMFILES%\WINWD\WD.RUS
%PROGRAMFILES%\WINWD\WHATSNEW.TXT
%SYSTEM%\SPOOL\PRINTERS\FP00000.SHD
%SYSTEM%\SPOOL\PRINTERS\FP00000.SPL
%SYSTEM%\SPOOL\PRINTERS\FP00001.SHD
%SYSTEM%\SPOOL\PRINTERS\FP00001.SPL

Leave a Reply