I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
The file WINSGWHE.EXE is identified as a virus dropper.
The dropper WINSGWHE.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file WINSGWHE.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the WINSGWHE.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the WINSGWHE.EXE process and delete the file WINSGWHE.EXE.
WINSGWHE.EXE Information and Removal:
WINSGWHE.EXE is known as: Trojan-Dropper.Win32.Sality.es [Kaspersky Lab] BackDoor-EBJ [McAfee] Worm:Win32/Sality.AU [Microsoft] Trojan-Dropper.Win32.Sality [Ikarus] Win-Trojan/Salitylnk.84480 [AhnLab].
MD5 of WINSGWHE.EXE = 2D7E3F0738A00849C7D4ECD265F6F309
WINSGWHE.EXE size is 84480 bytes.
Full path on a computer: %TEMP%\WINSGWHE.EXE
Related Files:
%APPDATA%\CONIMA.EXE
%APPDATA%\DLVIULN5X.EXE
%APPDATA%\INLOG
%APPDATA%\INPUT.BAT
%APPDATA%\KQUP.EXE
%APPDATA%\LOCALACCOUNTAUTHORITY.BAT
%APPDATA%\LSSAS.EXE
%APPDATA%\MANAGER.EXE
%APPDATA%\MH6UV9TW.EXE
%APPDATA%\MLOG
%APPDATA%\MOUSEDRIVER.BAT
%APPDATA%\PLUG.BAT
%APPDATA%\STSVBGL6.EXE
%APPDATA%\VSTV5YS.LOG
%APPDATA%\YLOG
%TEMP%\WINSGWHE.EXE
%FONTSDIR%\SERVICES.EXE
%SYSTEM%\ACTSKIN4.OCX
%SYSTEM%\NWSAPAGENTS.DLL