Solved! Use WATSVC.EXE (PUP/Mobogenie) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WATSVC.EXE – PUP/Mobogenie removal

WATSVC.EXE size: 107160 bytes
WATSVC.EXE hash: 0F128B84A9E1D88A688E2794DDA45ECD

Created files:

%Program Files%\Blazers\blazers.exe
%Program Files%\Blazers\csc.axs
%Program Files%\Blazers\SQLite3Secure.dll
%Program Files%\Blazers\VMProtectSDK32.dll
%Program Files%\Blazers\wac.exe
%Program Files%\Blazers\Watsvc.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Watsvc\Type: 10000000
HKLM\System\CurrentControlSet\Services\Watsvc\Start: 02000000
HKLM\System\CurrentControlSet\Services\Watsvc\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Watsvc\DisplayName: Watsvc
HKLM\System\CurrentControlSet\Services\Watsvc\ImagePath: “%Program Files%\Blazers\Watsvc.exe”

Detected by UnHackMe:

WATSVC.EXE
Default location: %PROGRAM FILES%\BLAZERS\WATSVC.EXE

Dropper information:
MD5: 06deab6ccebe336cca79bad72a3e8c2d
File size: 2096344 bytes

Leave a Reply