File Investigation Report
WINDOWNSWB.DLL
Malware DownloaderYour PC is infected. The file called WINDOWNSWB.DLL is considered unsafe and there may be other infections on your PC.
You should urgently check your PC and remove any malicious software including WINDOWNSWB.DLL as soon as possible. The free version of Prevx will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The filename is associated with the malware group:
- Malware Downloader
File Behavior
WINDOWNSWB.DLL has been seen to perform the following behavior:
- Found on infected systems and resists interrogation by security products
- The Process is packed and/or encrypted using a software packing process
- The Process is polymorphic and can change its structure
WINDOWNSWB.DLL has been the subject of the following behavior:
- Enabled as an In Process Object/Server - Common with DLL Injections
- Creation and Registered as a Browser Helper Object in Internet Explorer
- Registered as a Dynamic Link Library File
- Created as a process on disk
- Deleted as a process from disk
- Copied to multiple locations on the system
Country Of Origin
The filename WINDOWNSWB.DLL was first seen on May 17 2007 in the following geographical regions of the Prevx community:
- The UNITED STATES on May 17 2007
- BULGARIA on May 17 2007
- SPAIN on Nov 1 2007
- VIET NAM on Nov 1 2007
File Name Aliases
WINDOWNSWB.DLL can also use the following file names:
- SYSTEM32WB.DLL
- THUCSONWB.DLL
- VERWB.DLL
- SVHOSTWB.DLL
- BAVERWB.DLL
- FLIPATWB.DLL
- PREVXWB.DLL
- FERWB.DLL
- CUASOTINHOC.VNWB.DLL
- SVCHOSSWB.DLL
- CSSWB.DLL
- AMISHWB.DLL
- GG-UNITWB.DLL
- OFFICEXPWB.DLL
- HELPWB.DLL
- MESSENGERXPWB.DLL
- CVCHOSSWB.DLL
- VIETKEYWB.DLL
- ADOBESWB.DLL
- WINDOWNSWB.DLL
- SVCHOSTWB.DLL
- TUWB.DLL
- HASTYWB.DLL
- ESEKWB.DLL
- ASZWB.DLL
- WIN2000WB.DLL
- SVHOSWB.DLL
- THANGWB.DLL
- PKWB.DLL
- BEEFWB.DLL
- WINTARTWB.DLL
- SBTYWB.DLL
- SEVERWB.DLL
- SBTY-SOQO-OASV-GFNEWB.DLL
- MSPKWB.DLL
- ZUL342WB.DLL
- LATURAWB.DLL
- IKERNELWB.DLL
- NLDNLDNLDWB.DLL
- IEXPLOREWB.DLL
- TESTWB.DLL
- WINDOWSWB.DLL
- BIN/IEXPRESSWB.DLL
- IEXPRESSWB.DLL
- SROBOTWB.DLL
- JOOPWB.DLL
- MAGGIEWB.DLL
- BEARWB.DLL
- LEWLWB.DLL
- SPYWB.DLL
- CONGIFWB.DLL
- EDCWB.DLL
- YAHOOUPDATEWB.DLL
- ZZZZZWB.DLL
- 5WB.DLL
Filesizes
The following file size has been seen:
- 40,960 bytes
- 21,504 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename WINDOWNSWB.DLL refers to many versions of a dynamic link library.