I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
WOWSUB.SYS – Trojan Agent removal
| File | MD5 | Virus Alias |
|---|---|---|
| WOWSUB.SYS | 7294dbbc4c74d0ed0c8e300cc27aa7d4 | Trojan Agent |
| WOWSUB.SYS | 7294dbbc4c74d0ed0c8e300cc27aa7d4 | Trojan Generic |
| WOWSUB.SYS | 7294dbbc4c74d0ed0c8e300cc27aa7d4 | Trojan Downloader |
WOWSUB.SYS size: 5120 bytes
WOWSUB.SYS hash: 7294DBBC4C74D0ED0C8E300CC27AA7D4
Created files:
C:\DelInfo.bin
C:\killok\KillOK.exe
%TEMP%\ReInstall.exe
%TEMP%\wowsub.sys
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\bits\Start: 02000000
HKLM\System\CurrentControlSet\Services\wowsub\Type: 01000000
HKLM\System\CurrentControlSet\Services\wowsub\Start: 03000000
HKLM\System\CurrentControlSet\Services\wowsub\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\wowsub\DisplayName: wowsub
HKLM\System\CurrentControlSet\Services\wowsub\ImagePath: %TEMP%\wowsub.sys
Detected by UnHackMe:
WOWSUB.SYS
Default location: %TEMP%\WOWSUB.SYS
Dropper information:
MD5: 9f6c54b68defa212fa3e1abeece4250d
File size: 1011712 bytes