WinReanimator is a misleading application that may give exaggerated reports of threats on the computer. The program must be manually installed. The program reports false or exaggerated system security threats on the computer. The user is then prompted to pay for a full license of the application in order to remove the errors. Installation When the program is executed, it creates the following files: * %UserProfile%Local SettingsTempBinaries1.zip * %UserProfile%Local SettingsTempBinaries2.zip * %UserProfile%Local SettingsTempBinaries3.zip * C:Documents and SettingsAll UsersStart MenuProgramsWinReanimatorUninstall.lnk * C:Documents and SettingsAll UsersStart MenuProgramsWinReanimatorWinReanimator.lnk * C:Documents and SettingsAll UsersDesktopWinReanimator.lnk * %ProgramFiles%WinReanimatordatadaily.cvd * %ProgramFiles%WinReanimatorhtmlayout.dll * %ProgramFiles%WinReanimatorinstall.exe * %ProgramFiles%WinReanimatorMicrosoft.VC80.CRTMicrosoft.VC80.CRT.manifest * %ProgramFiles%WinReanimatorMicrosoft.VC80.CRTmsvcm80.dll * %ProgramFiles%WinReanimatorMicrosoft.VC80.CRTmsvcp80.dll * %ProgramFiles%WinReanimatorMicrosoft.VC80.CRTmsvcr80.dll * %ProgramFiles%WinReanimatorpthreadVC2.dll * %ProgramFiles%WinReanimatorun.ico * %ProgramFiles%WinReanimatorunzip32.dll * %ProgramFiles%WinReanimatorWinReanimator.cfg * %ProgramFiles%WinReanimatorWinReanimator.dll * %ProgramFiles%WinReanimatorWinReanimator.exe The program may then drop the following files: * %UserProfile%Application Data[RANDOM FILE NAME]._dl * %UserProfile%Application Data[RANDOM FILE NAME].reg * %UserProfile%Local SettingsApplication Data[RANDOM FILE NAME].dat * %UserProfile%Local SettingsApplication Data[RANDOM FILE NAME].bat * C:Documents and SettingsAll UsersApplication Data[RANDOM FILE NAME ONE].bat * C:Documents and SettingsAll UsersApplication Data[RANDOM FILE NAME TWO].bat * C:Documents and SettingsAll UsersApplication Data[RANDOM FILE NAME].scr * C:Documents and SettingsAll UsersApplication Data[RANDOM FILE NAME].lib * C:Documents and SettingsAll UsersApplication Data[RANDOM FILE NAME].exe * C:Documents and SettingsAll UsersDocuments[RANDOM FILE NAME]._sy * C:Documents and SettingsAll UsersDocuments[RANDOM FILE NAME].dl * C:Documents and SettingsAll UsersDocuments[RANDOM FILE NAME ONE].ban * C:Documents and SettingsAll UsersDocuments[RANDOM FILE NAME TWO].ban * C:Documents and SettingsAll UsersDocuments[RANDOM FILE NAME].exe * %CommonProgramFiles%[RANDOM FILE NAME].dat * %CommonProgramFiles%[RANDOM FILE NAME].ban * %System%[RANDOM FILE NAME].scr * %System%[RANDOM FILE NAME].pif * %System%[RANDOM FILE NAME].ban * %System%[RANDOM FILE NAME].exe * %System%[RANDOM FILE NAME ONE].vbs * %System%[RANDOM FILE NAME TWO].vbs * %Windir%[RANDOM FILE NAME].sys * %Windir%[RANDOM FILE NAME ONE].scr * %Windir%[RANDOM FILE NAME TWO].scr * %Windir%[RANDOM FILE NAME ONE].inf * %Windir%[RANDOM FILE NAME TWO].inf * %Windir%[RANDOM FILE NAME ONE].dll * %Windir%[RANDOM FILE NAME TWO].dll * %Windir%[RANDOM FILE NAME THREE].dll * %Windir%[RANDOM FILE NAME]._sy * %Windir%[RANDOM FILE NAME ONE].pif * %Windir%[RANDOM FILE NAME TWO].pif * %Windir%[RANDOM FILE NAME].dat * %Windir%[RANDOM FILE NAME]._dl * %Windir%[RANDOM FILE NAME].vbs The program falsely detects the above files as threats present on the computer. Next, the program creates the following registry entry so that it executes whenever Windows starts: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun'WinReanimator' = 'C:Program FilesWinReanimatorWinReanimator.exe' It also creates the following registry subkey: HKEY_LOCAL_MACHINESOFTWAREWinReanimator
'An error occurred during the installation of assembly 'Microsoft.VC80.CRT,version='8.0.' 'Microsoft Visual C 2005 Service Pack 1 Redistributable Package ATL Security Update'. Download and install 7-zip. The C Run-time Library (CRT) is the part of the C Standard Library that incorporates the ISO C99 standard library. The Visual C libraries that implement the CRT support native code development, and both mixed native and managed code. All versions of the CRT support multi-threaded development.