Solved! Use WSAWINS.EXE (Trojan Delf) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WSAWINS.EXE – Trojan Delf removal

File MD5 Virus Alias
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Delf
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan SuspiciousFile
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Generic
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Hllw

WSAWINS.EXE size: 40960 bytes
WSAWINS.EXE hash: 30E8B6F90049BE8B9022C005FE89CC43

Created files:

%WinDir%\wsawins.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\wsawins\Type: 10010000
HKLM\System\CurrentControlSet\Services\wsawins\Start: 02000000
HKLM\System\CurrentControlSet\Services\wsawins\DisplayName: wsawins
HKLM\System\CurrentControlSet\Services\wsawins\ImagePath: %WinDir%\wsawins.exe

Detected by UnHackMe:

WSAWINS.EXE
Default location: %WinDir%\WSAWINS.EXE

Dropper information:
MD5: 30e8b6f90049be8b9022c005fe89cc43
File size: 40960 bytes

Leave a Reply