What is WinAnonymous?

Type: Spyware | Category: Rogue Programs | Discovered: 27 February 2008

It is rogue PC security software closely related to PCPrivacyTool fake anti-spyware application. WinAnonymous is installed without user knowledge and agreement and starts computer scan automatically. After the scan, assumed threat report is generated and user is asked to send a payment so that threat removal and protection functions would be enabled. Actually, stay away from transferring the payment because WinAnonymous is only a fraud and should not be trusted.

WinAnonymous removal tool:

Spyware Doctor (see here for the installation guide)

Screenshot:

WinAnonymous Entries:

The following files are created:
GDC.exe, mc.exe, UGDCcw.exe

Hijackthis Entries:

O4 Entries:
O4 - HKLM\..\Run: [WinAnonymous] C:\Program Files\WinAnonymous\GDC.exe
O4 - HKLM\..\Run: [ugdccw] "C:\PROGRA~1\WINANO~1\UGDCcw.exe" -start
O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAnonymous\mc.exe" dm=http://winanonymous.com ad=http://winanonymous.com sd=http://ilp.winanonymous.com