Sunday, February 1, 2009

WinSession.Logger Spyware

Removing WinSession.Logger
Categories: Spyware
Spyware is computer software that is installed surreptitiously on a personal computer
to intercept or take partial control over the user's interaction
with the computer, without the user's informed consent.

While the term spyware suggests software that secretly monitors the user's behavior,
the functions of spyware extend well beyond simple monitoring.

Spyware programs can collect various types of personal information,
such as Internet surfing habit, sites that have been visited,
but can also interfere with user control of the computer in other ways,
such as installing additional software, redirecting Web browser activity,
accessing websites blindly that will cause more harmful viruses,
or diverting advertising revenue to a third party.

Spyware can even change computer settings, resulting in slow connection speeds,
different home pages, and loss of Internet or other programs.
In an attempt to increase the understanding of spyware, a more formal classification
of its included software types is captured under the term privacy-invasive software.

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe

How to detect WinSession.Logger:

Files:
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe
[%DESKTOP%]\ws logger.lnk
[%SYSTEM%]\9500\svchost.exe
[%SYSTEM%]\bootldr.exe
[%SYSTEM%]\conwxrl.bin
[%SYSTEM%]\delservicew.exe
[%SYSTEM%]\digiwin.dll
[%SYSTEM%]\exwin32m.exe
[%SYSTEM%]\nxkernel32.dll
[%SYSTEM%]\Old_date32.dll
[%SYSTEM%]\svclsv.exe
[%SYSTEM%]\unicode_digi.dll
[%SYSTEM%]\xwboot.exe

Folders:
[%PROGRAMS%]\WinSession Logger
[%PROGRAM_FILES%]\wlogs
[%PROGRAM_FILES%]\wslogger

Registry Keys:
HKEY_LOCAL_MACHINE\software\mcap4_software
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ebt9l2db0-b607-11d2-9cbd-0000f87a369e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winsession logger_is1
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\subsystem64r

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\msc_software

Removing WinSession.Logger:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Lameness Trojan Cleaner
Bancos.GYR Trojan Removal
SillyDl.DME Trojan Symptoms

No comments: