WinReanimator

WinReanimator Description

ScreenshotWinReanimator is the latest rogue anti-spyware application that may be brought into your computer system by a Trojan, infiltrating your machine via security system cracks, or may be downloaded directly from www.WinReanimator.com. After WinReanimator is executed, it will bombard your desktop with Windows-like threat notifications, such as the following:

"Windows has detected spyware infection!
It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you
Click here to protect your computer from spyware!"

This message is bogus and cannot be trusted. WinReanimator should be removed immediately to prevent further damage to your system.

ScreenshotScreenshot

Aliases


Trojan.DL.Agent.FMAMTrojan.Win32.Downloader.9728.EKTROJ_RENOS.AHR [TrendMicro]Trojan/Downloader.genPacker.Win32.UnkPacker.aAdware/XPSecurityCenter [Panda]Trojan-Downloader/W32.Agent.9728.COTrojan.Dldr.FraudLoa.NK [McAfee-GW-Edition]Trojan-Downloader.Win32.Agent.adpk [Kaspersky]Trojan-Downloader.Win32.Agent [K7AntiVirus]Trojan-Dropper.Agent [Ikarus]Trojan:W32/Renos.DK [F-Secure]Win32/Eldycow.FG [eTrust-Vet]TrojWare.Win32.TrojanDownloader.Agent.~FZ [Comodo]SHeur.CDZO [AVG]
More aliases (203)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to WinReanimator may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

WinReanimator.dll File name: WinReanimator.dll
Size: 544.76 KB (544768 bytes)
MD5: fc27e823266ee18e8035742abf2f9f92
Detection count: 95
File type: Dynamic link library
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009
buritos.exe File name: buritos.exe
Size: 9.21 KB (9216 bytes)
MD5: 5ba90413577dcd989e65d63880ccfc6a
Detection count: 90
File type: Executable File
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009
WinReanimator.exe File name: WinReanimator.exe
Size: 595.6 KB (595600 bytes)
MD5: 355881c0325f27a8fb569f54e087f370
Detection count: 51
File type: Executable File
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009
4scan[1].exe File name: 4scan[1].exe
Size: 42.49 KB (42496 bytes)
MD5: 22fc2dfe1d04498b4758b598aafed25a
Detection count: 30
File type: Executable File
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009
qajamowel.dll File name: qajamowel.dll
Size: 10.42 KB (10422 bytes)
MD5: ebc6d71b8367d35ff8b4394ad62bb218
Detection count: 23
File type: Dynamic link library
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009
cru629.dat File name: cru629.dat
Size: 6.14 KB (6144 bytes)
MD5: 209e4034e37991495580cf4f2bdfa5f8
Detection count: 7
File type: Data file
Mime Type: application/vnd.fdsn.seed
Group: Malware file
Last Updated: December 11, 2009
braviax.exe File name: braviax.exe
Size: 9.21 KB (9216 bytes)
MD5: 1cbba5ecbb1c0fa4cc8166ce44e344a0
Detection count: 2
File type: Executable File
Mime Type: application/octet-stream
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications


The following newly produced Registry Values are:

File name without pathbraviax.exebraviax.exeburitos.execru629.datkarina.datwinivstr.exewinivstr.exewinivstr.exewinivstr.exeWinReanimator.dllWinReanimator.exeWinReanimator.exeWinReanimator.exeWinReanimator.lnkDirectory%ProgramFiles%\WinReanimatorRun keysburitosWinReanimator

Additional Information

The following cookies were detected:
winreanimator
Posted: April 20, 2008
Threat Metric
Threat Level: 10/10
Infected PCs 54

2 Comments

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.