Start to remove Worm:Win32/Bagz.W@mm now!
Worm:Win32/Bagz.W@mm description and removal instruction

Worm:Win32/Bagz.W@mm

Free Worm:Win32/Bagz.W@mm Scan

Technical information
Payload
Removal instructions

Technical information

The Worm:Win32/Bagz.W@mm will install rogue security software Privacy Sentinel into the affected machines without users knowledge. The Worm:Win32/Bagz.W@mm file size is 66048 bytes.

Payload

Once launched, the Worm:Win32/Bagz.W@mm performs the following actions:

  • Download rogue security tool Privacy Sentinel from the following domains:
    http://ensighten.com/ensighten-products/privacy-sentinel
  • Modify the properties of the following files:
    %SYSTEMROOT%:\WINDOWS\winsxs\amd64_microsoft-windows-t..lishing-wmiprovider_31bf3856ad364e35_6.1.7600.16385_none_912d4a3fad3a2666\\rdpsign.exe

    (66048 bytes; detected by HitMalware as " Worm:Win32/Bagz.W@mm")
  • Removal instructions

    If your machine doesn't have antivirus/antispyware, please take the following steps to resolve the problems caused by Worm:Win32/Bagz.W@mm:

    1. Replace the infected file rdpsign.exe for free by using rdpsign.exe repair tool - DLL Suite. See how to replace rdpsign.exe by using DLL Suite.

    2. Perform a full Worm:Win32/Bagz.W@mm scan by using the latest antivirus/antispyware HitMalware.
    (Download Trial Version Now)

    MD5: 80592318059231


    How to replace rdpsign.exe by using DLL Suite

  • Download DLL Suite, install and run
  • Click "Start Scan" button to check rdpsign.exe file
  • Choose rdpsign.exe and click "More Information"
  • Download rdpsign.exe for free from the open web page
  • Save rdpsign.exe to its default folder to replace infected rdpsign.exe file.
  • Download Worm:Win32/Bagz.W@mm Removal Tool Now

    Download Worm:Win32/Bagz.W@mm Removal Tool Now