Re: Winshow.dll

[Robin T Cox]

"Nino" <Nino @ (chiedi_a_me) .com> wrote in
news:2UD2b.142586$cl3.4299441@news2.tin.it:

> Hi to you all,
>
> I've got some problems with this Spyware.
> Ad-ware and Spybot don't succeed to remove it.
> This spyware runs winshow.dll (located in C:\windows) and
> "winshow.cfg" (in C:\Windows).
> These files create a startup connection to htttp://00hq.com and my
> firewall show that everytime I started the IE, the IE calls that site
> ...
>
>
> I've had to remove It manually.
>
> Why both of these programs can't delete it ?
>
> Thanks ...
>
>
>

Can't or don't? It seems easy enough to remove manually:
http://www.doxdesk.com/parasite/Winshow.html

However if you think you may have a new variant, it would be a good idea to
report it (and save the file(s) for expert analysis).

[Nino]

"Robin T Cox" <robin2803@hotmail.com> ha scritto nel messaggio
news:XdG2b.3797$MS5.66472@newsfep4-glfd.server.ntli.net...

> Can't or don't? It seems easy enough to remove manually:
> http://www.doxdesk.com/parasite/Winshow.html
>
> However if you think you may have a new variant, it would be a good idea
to
> report it (and save the file(s) for expert analysis).

Infact, I've done like that.

But my question was : why both Spybot and Ad-ware didn't do their job ?
I've notice wishow by my firewall only ;((

Nino.

P.S. Anyway ... thanks Robin T Cox for your answer )