HT Logs. Tips, FAQs, Analyze.

wwwpos32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: wwwpos32
Filename: wwwpos32.exe
Command: c:\documents and settings\user\start menu\programs\startup\wwwpos32.exe
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: wwwpos32.exe

DDS Line:

StartupFolder: c:\documents and settings\user\start menu\programs\startup\wwwpos32.exe

Combofix/RSIT Line:

C:\Documents and Settings\user\Start Menu\Programs\Startup
wwwpos32.exe [2008-4-14 40448]

Description: trojan

How to remove: use HijackThis + Kaspersky virus removal tool

WinSecurity360.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: WinSecurity360
Filename: WinSecurity360.exe
Command: C:\Program Files\WinSecurity360\WinSecurity360.exe
Startup Type: StartupFolder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: Win Security 360.lnk = C:\Program Files\WinSecurity360\WinSecurity360.exe

DDS Line:

StartupFolder: Win Security 360.lnk

Combofix/RSIT Line:

C:\Documents and Settings\user\Start Menu\Programs\Startup
Win Security 360.lnk

Description: core part of Win Security 360. Win Security 360 is a rogue antispyware program.

How to remove: use these Win Security 360 removal instructions.

rarype32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: rarype32
Filename: rarype32.exe
Command: %userProfile%\start menu\programs\startup\rarype32.exe
Startup Type: O4
HijackThis Category:
HijackThis Line:

O4 – Startup: rarype32.exe

DDS Line:

StartupFolder: c:\documents and settings\user\start menu\programs\startup\rarype32.exe

Combofix/RSIT Line:

C:\Documents and Settings\user\Start Menu\Programs\Startup
rarype32.exe

Description: trojan also known as Mal/Bredo-A [Sophos]

How to remove: use HijackThis + Malwarebytes` Anti-malware + Kaspersky virus removal tool

ihaupd32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: ihaupd32
Filename: ihaupd32.exe
Command: %UserProfile%\start menu\programs\startup\ihaupd32.exe
Startup Type: StartupFolder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: ihaupd32.exe

Combofix/RSIT Line:

StartupFolder: c:\documents and settings\user\start menu\programs\startup\ihaupd32.exe

Description: trojan dropper. It installed with updxsp32.exe trojan.

How to remove: use HijackThis + Malwarebytes` Anti-malware + Kaspersky virus removal tool

updxsp32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: updxsp32
Filename: updxsp32.exe
Command: %UserProfile%\start menu\programs\startup\updxsp32.exe
Startup Type: StartupFolder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: updxsp32.exe

Combofix/RSIT Line:

StartupFolder: c:\documents and settings\user\start menu\programs\startup\updxsp32.exe

Description: Trojan.Dropper

How to remove: use HijackThis + Malwarebytes` Anti-malware + Kaspersky virus removal tool

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: siszyd32
Filename: siszyd32.exe
Command: %userProfile%\start menu\programs\startup\siszyd32.exe
Startup Type: StartUp folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: siszyd32.exe

DDS Line:

StartupFolder: c:\documents and settings\user\start menu\programs\startup\siszyd32.exe

Combofix/RSIT Line:

C:\Documents and Settings\user\Start Menu\Programs\Startup
siszyd32.exe

Description: trojan

How to remove: use HijackThis + Kaspersky virus removal tool

algqeh32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: algqeh32
Filename: algqeh32.exe
Command: %UserProfile%\Start Menu\Programs\Startup\algqeh32.exe
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: algqeh32.exe

Combofix/RSIT Line:

C:\Documents and Settings\user\Start Menu\Programs\Startup
algqeh32.exe

Description: trojan

How to remove: use HijackThis + manually remove the file.

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: scandisk
Filename: scandisk.dll
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: scandisk.dll
O4 – Startup: scandisk.lnk = ?

Combofix/RSIT Line:

C:\Documents and Settings\Chie Cheng\Start Menu\Programs\Startup
scandisk.dll
scandisk.lnk – C:\WINDOWS\system32\rundll32.exe

Description: a trojan also known as Trojan.Win32.Opachki and Trojan.Win32.Scar

How to remove: use HijackThis or use Malwarebytes` Anti-malware or use Kaspersky virus removal tool

ikowin32.exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: ikowin32
Filename: ikowin32.exe
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: ikowin32.exe

Description: a trojan that installed with a rogue antispyware program (Antivirus Pro 2010 for example)

How to remove: use HijackThis + use Malwarebytes` Anti-malware

This is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: rncsys32
Filename: rncsys32.exe
Startup Type: Startup folder
HijackThis Category: O4
HijackThis Line:

O4 – Startup: rncsys32.exe

Description: trojan [Downloader-BRM]. Read more here.

How to remove: use HijackThis