Solved! Use WSAWINS.EXE (Trojan Delf) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WSAWINS.EXE – Trojan Delf removal

FileMD5Virus Alias
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Delf
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan SuspiciousFile
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Generic
WSAWINS.EXE 30e8b6f90049be8b9022c005fe89cc43 Trojan Hllw

WSAWINS.EXE size: 40960 bytes
WSAWINS.EXE hash: 30E8B6F90049BE8B9022C005FE89CC43

Created files:

%WinDir%\wsawins.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\wsawins\Type: 10010000
HKLM\System\CurrentControlSet\Services\wsawins\Start: 02000000
HKLM\System\CurrentControlSet\Services\wsawins\DisplayName: wsawins
HKLM\System\CurrentControlSet\Services\wsawins\ImagePath: %WinDir%\wsawins.exe

Detected by UnHackMe:

WSAWINS.EXE
Default location: %WinDir%\WSAWINS.EXE

Dropper information:
MD5: 30e8b6f90049be8b9022c005fe89cc43
File size: 40960 bytes

Leave a Reply