How to remove the windll virus
Most antivirus programs identify windll.exe as malware, for instance Microsoft identifies it as VirTool:Win32/VBInject.AQ or VirTool:Win32/DelfInject.gen!N, and Kaspersky identifies it as Backdoor.Win32.IRCBot.igt or Trojan-PSW.Win32.LdPinch.fbq.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.
Windll.exe file information
Description: The file windll.exe is located in the folder C:\Windows\System32.
Known file sizes on Windows 7/XP are 1,284,608 bytes (40% of all occurrences), 53,557 bytes or 652,288 bytes.
There is no information about the author of the file. Windll.exe is not a Windows core file. The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices). The program is not visible. The file is located in the Windows folder, but it is not a Windows core file. windll.exe is able to record inputs, monitor applications, connect to Internet and hide itself. Therefore the technical security rating is 79% dangerous, however also read the users reviews.
Recommended: Identify windll.exe related errors
If windll.exe is located in the folder C:\Windows, the security rating is 72% dangerous. The file size is 114,848 bytes (40% of all occurrences), 36,864 bytes, 98,356 bytes or 20,174 bytes. There is no description of the program. The process starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices). Windll.exe is not a Windows core file. File windll.exe is an unknown file in the Windows folder. The program is not visible. The process listens for or sends data on open ports to a LAN or the Internet. windll.exe is able to record inputs and monitor applications.
If windll.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 74% dangerous. The file size is 8,308 bytes. The file is a file without information about the developer of this file. The program is not visible. The file is not a Windows system file. Program listens for or sends data on open ports to a LAN or the Internet.
External information from Paul Collins:
There are different files with the same name:
- "erthgdr" definitely not required. Added by the BEAGLE.AO or BEAGLE.AQ WORMS!
- "KavRuns" definitely not required. Added by the TRYNOMA TROJAN!
- "Microsoft Dll Management" definitely not required.
- "Windll.exe" definitely not required. Added by the STEALER TROJAN!
- "Winlme" definitely not required. Added by the GOP.F WORM!
Important: Some malware camouflages itself as windll.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the windll.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Matt (further information)
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.
Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.
SpeedUpMyPC scans, cleans, repairs and optimizes your computer.
fah.exe engine.exe scamgrd.dll windll.exe versioncuecs3tray.exe uiusys.sys adblock.exe inoshell.dll tmr004.dll xpre.exe azesearch4.ocx [all]