Tweet
The WinSnare Windows service is a potentially unwanted program, or PUP, that transmits information from your computer to a remote location. This program is actually a copy of the legitimate Snare application being used for unauthorized purposes. It should be noted that InterSect Alliance International Pty Ltd, the creator of Snare, is in no way affiliated with how adware uses their program.
Remove the WinSnare PUP (Removal Guide)
The WinSnare Windows service is a potentially unwanted program, or PUP, that transmits information from your computer to a remote location. This program is actually a copy of the legitimate Snare application being used for unauthorized purposes. It should be noted that InterSect Alliance International Pty Ltd, the creator of Snare, is in no way affiliated with how adware uses their program.
The exact purpose of the WinSnare PUP is not currently known, but based on the Snare manual, it can be configured to upload your Windows event logs, monitor performence, and even allow remote connections to your computer. While it does not appear that all of these settings are enabled, as we can see from the image above, it does communicate back with a remote site and send data.
How did the WinSnare PUP get on my computer?
It is important to note that the WinSnare PUP is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers youÂ*CustomÂ*orÂ*AdvancedÂ*installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, if the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As shown, the WinSnare PUP transmits information about your computer back to a remote location without your permission or knowledge. Therefore, it strongly suggested that it be removed from a computer. To remove this PUP and other adware that may have been installed with it, you can use the removal guide below.
Array
View Associated WinSnare PUP Files C:\Program Files (x86)\WinSnare(4.0.5)\C:\Program Files (x86)\WinSnare(4.0.5)\LICENSE.txtC:\Program Files (x86)\WinSnare(4.0.5)\openweb.batC:\Program Files (x86)\WinSnare(4.0.5)\SnareWindowsInstallSupport.dllC:\Program Files (x86)\WinSnare(4.0.5)\stopweb.batC:\Program Files (x86)\WinSnare(4.0.5)\s_32.icoC:\Program Files (x86)\WinSnare(4.0.5)\WinSnare.dllC:\Users\User\AppData\Roaming\WinSnare\C:\Users\User\AppData\Roami ng\WinSnare\WinSnare.dll
View Associated WinSnare PUP Registry Information HKCU\Software\WinSnareHKCU\Software\WinSnare\WinSnareHKLM\SYSTEM\CurrentControlSet\services\WinSnare \HKLM\SOFTWARE\Classes\Installer\Products\F6729766C9914E642A3825DF98EE6277\HKLM\SOFTWARE\InterSect AllianceHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F6729766C9914E642A3825DF98EE6277\InstallPropertiesHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\WinSnare WinSnareHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6679276F-199C-46E4-A283-52FD89EE2677}HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\WinSnare
Click here to view the article.
Remove the WinSnare PUP (Removal Guide)
- Tue, 17 Jan 2017 16:57:09 EST
- Read 326 times
The WinSnare Windows service is a potentially unwanted program, or PUP, that transmits information from your computer to a remote location. This program is actually a copy of the legitimate Snare application being used for unauthorized purposes. It should be noted that InterSect Alliance International Pty Ltd, the creator of Snare, is in no way affiliated with how adware uses their program.
The exact purpose of the WinSnare PUP is not currently known, but based on the Snare manual, it can be configured to upload your Windows event logs, monitor performence, and even allow remote connections to your computer. While it does not appear that all of these settings are enabled, as we can see from the image above, it does communicate back with a remote site and send data.
How did the WinSnare PUP get on my computer?
It is important to note that the WinSnare PUP is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers youÂ*CustomÂ*orÂ*AdvancedÂ*installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, if the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As shown, the WinSnare PUP transmits information about your computer back to a remote location without your permission or knowledge. Therefore, it strongly suggested that it be removed from a computer. To remove this PUP and other adware that may have been installed with it, you can use the removal guide below.
Array
View Associated WinSnare PUP Files C:\Program Files (x86)\WinSnare(4.0.5)\C:\Program Files (x86)\WinSnare(4.0.5)\LICENSE.txtC:\Program Files (x86)\WinSnare(4.0.5)\openweb.batC:\Program Files (x86)\WinSnare(4.0.5)\SnareWindowsInstallSupport.dllC:\Program Files (x86)\WinSnare(4.0.5)\stopweb.batC:\Program Files (x86)\WinSnare(4.0.5)\s_32.icoC:\Program Files (x86)\WinSnare(4.0.5)\WinSnare.dllC:\Users\User\AppData\Roaming\WinSnare\C:\Users\User\AppData\Roami ng\WinSnare\WinSnare.dll
View Associated WinSnare PUP Registry Information HKCU\Software\WinSnareHKCU\Software\WinSnare\WinSnareHKLM\SYSTEM\CurrentControlSet\services\WinSnare \HKLM\SOFTWARE\Classes\Installer\Products\F6729766C9914E642A3825DF98EE6277\HKLM\SOFTWARE\InterSect AllianceHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F6729766C9914E642A3825DF98EE6277\InstallPropertiesHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\WinSnare WinSnareHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6679276F-199C-46E4-A283-52FD89EE2677}HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\WinSnare
Click here to view the article.