Wowexec - is this a virus

ejohn

May 27 2005, 10:09 AM

i have this program which loads a long time after my system has booted. it eats up a lot of resources and closes all kinds of windows applications. ctrl+alt+del dosent work once it starts, i had to use other process managers to find what all programs where running. on searching for i get an impresion that this is valid windows file whereas there seems to be some mutant versions also. i tried deleting the files but astonishingly they reappear right in front of our eyes. within seconds another copy of the deleted files appear! :-| i have f - secure antivirus which dosen't pick it up. has anybody here experienced the same problems? any solutions.

ejohn

May 27 2005, 10:14 AM

the program i am refering to is wowexec.exe sorry i didnt mention it specifically in the above post though it is there in the header.

hulunes

May 27 2005, 10:21 AM

umm,does msconfig work normally now?if works,you should check out the virus(maybe some program you haven't seen before and end with .exe) at the option setup.write down its name then boot your pc from safe mode.type regedt32 in run window to open register editor tool and hit the key F3 ,then will pop a find window.type the name to find it in register and delete all of them.look out,you must find all the virus by find window.it is good and avilable way to delete virus completely.

clagnol

May 27 2005, 11:22 AM

This is a description of wowexec.exe.

According to the site, it handles 16-bit processes. I'm not too knowledgeable on the subject, but it seems to me that you must be using some old 16-bit programs which keep calling up this program. Are you using any 16-bit programs?

ejohn

May 27 2005, 01:36 PM

i am not using any 16bit applications. msconfig is also missing. after some time on the net i get lass application error and soon afterwards a system message saying the computer will restart in 60 seconds. thanks for your replies guys. but i think the easiest way out is to format the computer. do you guys have any better ideas??

hulunes

May 27 2005, 01:54 PM

it is really not serious to format your disk ,guy.you should deal with from the safe mode.from the msconfig of safe mode you must see the virus wowexec.exe and delete it by regedit.do you master this way?if in safe mode,the pc is still obliged to restart after 60s,you should type shutdown.exe -a.then your pc will not down,you can delete the virus from regedit later.

odomike

May 27 2005, 01:56 PM

Wow.......thanks hulunes for that info. You know, this kinda thing has happened to my comp before and I thought that it has contacted a virus. After running my antivirus (I am using AVG Pro) a number of times and the thing asnt able to detect the problem, I has to copy all my important files and folders to another partition inmy harddrive and then format the the C:\ drive.

It can be quite frustrating and irritating when something like this happens to you.

hulunes

May 27 2005, 01:57 PM

ohhh,wait...i just type too fast.shutdown.exe -a should be typed in run windows when the box saying pc will be down after 60.good luck have a try...

ejohn

May 27 2005, 03:30 PM

i deleted all refrences to wowexec.exe from the registry. but apparently (from info i got when i searched from google) it manifests itself in lot of filenames, most of which i have deleted. what i want to know is how can tinkering in the registry bring back all the lost windows files. is there anyway i can restore them without reinstalling?

hulunes

May 27 2005, 03:50 PM

umm,just depend on what kind of system files you lost.if very important which lead to not setup normally.you must reinstall or recovery your os.on the other hand,if the file which broken by virus is common file,you could ignore it.usually before windows NT series,we could copy the file from the compressed backup CD or system CD.but in windows xp time,it is hard to copy like that,because there exit too many format of compress file like zip,cab.for that,the relative grammar to come out to copy them.the most trouble is that you should find the file you lost from 7,000 compressed files.too trouble...

Latest Entries

Guest

Jun 22 2005, 08:48 AM

sysinternals.com bro. download program called

tcpview

excellet for process ids and connection monitoring. small and simple. You can control and close connection you dont want as well.

Regs
only1

Takeshi

Jun 3 2005, 09:54 AM

Once you reformat, remember to run Windows Update straight away. Some viruses stick in your boot sector and copy themselves even after you format.

Windows Update usually neutralises such virii.

Dispite some bad things people say about it, it may be a good idea to get SP2 aswell. SP2 fixes a lot of security holes, and you can bet on Microsoft to halt any further updates on older versions of Windows XP.

MarCrush

Jun 3 2005, 02:41 AM

I'm really unsure if wowexec is a virus or not because I think my VirusScan has said it was a virus before (I think). I see this also in the processes list as a sub process in some setups with Microsoft programs so I truly do not know if it is a virus or not (or trojan or worm).

clagnol

May 30 2005, 10:36 AM

I use Sygate Firewall. It pops up a window whenever something unapproved is trying to access the internet. The personal version is free.

ejohn

May 29 2005, 06:05 AM

i already have f-secure installed which apparently is very good. what i want to know is, is there any small utility software which shows me which all programs on my computer are accessing the internet. this way i can know if any trojan like activity is going on.

ADD REPLY / Got an Opinion!	a humble request :-)	RAPID SEARCH!	Free Hosting	[X]
Express your Opinions, Thoughts or Contribute more info. to help others. Ask your Doubts & Queries to get answers, So that "Together We can help others!"	Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.		500MB Space No Ads, CPanel, FTP, PHP, MySQL, EMails - 100% FREE