KWI57.SYS – Trojan Wigon

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

KWI57.SYS – Trojan Wigon removal

FileMD5Virus Alias
KWI57.SYS dded4f29b2e7b341abc0a1625326a1dc Trojan Wigon
KWI57.SYS dded4f29b2e7b341abc0a1625326a1dc Trojan Agent

KWI57.SYS size: 30208 bytes
KWI57.SYS hash: DDED4F29B2E7B341ABC0A1625326A1DC

Created files:

%WinDir%\System32\drivers\Kwi57.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Kwi57\Type: 01000000
HKLM\System\CurrentControlSet\Services\Kwi57\ImagePath: System32\Drivers\Kwi57.sys
HKLM\System\CurrentControlSet\Services\Kwi57\Group: SCSI Class

Detected by UnHackMe:

KWI57.SYS
Default location: %SYSDIR%\DRIVERS\KWI57.SYS

Dropper information:
MD5: 15d7ddfb1006cc955bd3dfb04a57a806
File size: 76288 bytes

Leave a Reply