Start to remove PWS:Win32/Capwin.B now!
PWS:Win32/Capwin.B description and removal instruction

PWS:Win32/Capwin.B

Free PWS:Win32/Capwin.B Scan

Technical information
Payload
Removal instructions

Technical information

The PWS:Win32/Capwin.B will install rogue security software AV Security 2012 into the affected computers without users knowledge. The PWS:Win32/Capwin.B file size is 16384 bytes.

Payload

Once launched, the PWS:Win32/Capwin.B performs the following actions:

  • Download rogue security tool AV Security 2012 from the following domains:
    http://download.cnet.com/
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\winsxs\amd64_microsoft-windows-i..xing-service-server_31bf3856ad364e35_6.1.7600.16385_none_0b84d1bc51e87c4f\\CIDAEMON.EXE

    (16384 bytes; detected by HitMalware as " PWS:Win32/Capwin.B")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by PWS:Win32/Capwin.B:

    1. Replace the infected file CIDAEMON.EXE for free by using CIDAEMON.EXE repair tool - DLL Suite. See how to replace CIDAEMON.EXE by using DLL Suite.

    2. Perform a full PWS:Win32/Capwin.B scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 80924908092490


    How to replace CIDAEMON.EXE by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check CIDAEMON.EXE file
  • Choose CIDAEMON.EXE and click "More Information"
  • Download CIDAEMON.EXE for free from the open web page
  • Save CIDAEMON.EXE to its default folder to replace infected CIDAEMON.EXE file.
  • Download PWS:Win32/Capwin.B Removal Tool Now

    Download PWS:Win32/Capwin.B Removal Tool Now