WAB32.EXE is Trojan AddUser

June 20, 2012 by NightWatcher
Filed under: Malware 
: Solved!

You should Download Removal Tool here...

We checked some samples of WAB32.EXE and detected the file WAB32.EXE as threat.
Remove the WAB32.EXE file from your computer right now.
Removal tool: http://www.unhackme.com

Malware Analysis of WAB32.EXE
Full path on a computer: %Program Files Common%\System\wab32.exe

Detected by UnHackMe:

WAB32.EXE
Default location: %Program Files Common%\System\wab32.exe

Removal Results: Success
Number of reboot: 1

WAB32.EXE is known as:

Trojan.AddUser, Trojan.Siggen

WAB32.EXE hash:

  • MD5: d9eb5e8399a57e4f7726e776fe0fd3f8
How to quickly detect WAB32.EXE presence?

Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Client: “C:\PROGRA~1\COMMON~1\System\wab32.exe”
Folders:
  • C:\sand-box\malware_0096.vir
Files:
  • %Program Files Common%\System\wab32.exe


  • Recommended: UnHackMe anti-rootkit and anti-malware

    Premium software: RegRun Security Suite (Good choice for removal and protection)

    Written by

    Malware Hunter.

    Tags: AddUser, Trojan, WAB32.EXE

    Comments

    Tell me what you're thinking...
    and oh, if you want a pic to show with your comment, go get a gravatar!

    You must be logged in to post a comment.