What is WinAnonymous?

Type: Spyware
Category: Rogue Programs
Discovered: 27 February 2008
Removal tools: Malwarebytes' Anti-Malware, Spyware Doctor

1. Introduction

It is rogue PC security software closely related to PCPrivacyTool fake anti-spyware application. WinAnonymous is installed without user knowledge and agreement and starts computer scan automatically. After the scan, assumed threat report is generated and user is asked to send a payment so that threat removal and protection functions would be enabled. Actually, stay away from transferring the payment because WinAnonymous is only a fraud and should not be trusted.

2. WinAnonymous removal tools:

Malwarebytes' Anti-Malware (for the installation guide click here)
Spyware Doctor (for the installation guide click here)

3. Screenshot:

4. WinAnonymous files:

GDC.exe, mc.exe, UGDCcw.exe

5. Hijackthis entries:

O4 Entries: O4 - HKLM\..\Run: [WinAnonymous] C:\Program Files\WinAnonymous\GDC.exe O4 - HKLM\..\Run: [ugdccw] "C:\PROGRA~1\WINANO~1\UGDCcw.exe" -start O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAnonymous\mc.exe" dm=http://winanonymous.com ad=http://winanonymous.com sd=http://ilp.winanonymous.com