Still trying to get wowexec.exe

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I wrote awhile back about getting ahold of wowexec.exe. I've finally decided to see if anyone could e-mail it to me. This is kinda crazy of me but I've run outta options so I'll post my e-mail and hope someone can send me a copy of the file.

(e-mail address removed)

If anyone out there can, please do a search on your computer, zip that file and ship it to me. I would appreciate is VERY much.

Thanks
 
Wowexec. is a MS file , but like so many viruses they may name the virus
similarly. Which one do you have? Jym

(This was taken off the Adaware site)
In simple English, this is a system compatibility process that provides
security to 16-bit applications ... under no circumstances should it be
removed.

There is a spoof of this process called _wowexec.exe. Ad-Aware should detect
and remove this.

Symantec notes this as W32.Petch, and it was added to their detection last
October: http://securityresponse.symantec.com/avcen.../w32.petch.html



Desertranger said:
I wrote awhile back about getting ahold of wowexec.exe. I've finally
decided to see if anyone could e-mail it to me. This is kinda crazy of me
but I've run outta options so I'll post my e-mail and hope someone can send
me a copy of the file.
(e-mail address removed)

If anyone out there can, please do a search on your computer, zip that
file and ship it to me. I would appreciate is VERY much.
 
The WOW subsystem relies/works alongside with the Virtual DOS Machine (VDM) that NT based systems (which includes Windows XP) use to execute 16-bit DOS applications. WOW as a process is entitled wowexec.exe . WOW is executed automatically by Windows when a 16-bit program is initialised and is transparent to the user in execution. There is a spoof of this process called _wowexec.exe is associated with spyware programs and viruses. Anti-virus software and firewalls do not fully protect your system against the majority of spyware and privacy threats. Spyware is commonly bundled with software downloads, attached to e-mails, or transmitted through networks so it can appear to be legitimate software, but once installed it can be nearly impossible to detect and remove without the help of a dedicated spyware removal tool such as:

Ad-Aware 6.0 (build 6.181)

SpyBot 1.3

SpyWare Blaster

HiJackThis

Please make sure that you download the updates for each of these programs to ensure complete detection of known spyware programs. Although nothing is absolute in removing spyware and keeping it off, downloading and executing the programs above can dramically decrease future infections.

Also please utilize free virus scans from the following sites:

Trend Micro

Bit Defender

Panda

McAfee

After Spyware / Adware is remove, you may get an error finding files on reboot

After you use anyone of these programs (with the exception of HiJackThis) you may receive an error of some sort after rebooting your system. This is pretty common. Many spyware programs add themselves in the Startup location and execute when Windows boots. If you recieve an error when rebooting after removing spyware, do not panic. This is more than likely a startup remnant trying to access the spyware program that is no longer on your computer. HiJackThis is a great utility to find and remove these startup remnants. However, there is a less technical way of removing these items:

(1) Click START to RUN and type: msconfig
(2) Select the STARTUP tab
(3) Uncheck the file that pertained to the startup error message you received
(4) Click APPLY and OK
(5) Reboot your system

If this fails to fix the startup error message after reboot, there are still options:

(1) Navigate to C:\Documents and Settings\All Users\Start Menu\Programs\Startup
(2) Delete the icon that pertained to the startup error message you received
(3) Navigate to C:\Documents and Settings\username\Start Menu\Programs\Startup
(4) Delete the icon that pertained to the startup error message you received
(5) Reboot your system

--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI
 
The file he is asking for may be a virus . Jym




Dan Quinton said:
Whats with the Spyware posts guys? He asked for a file....
(VDM) that NT based systems (which includes Windows XP) use to execute
16-bit DOS applications. WOW as a process is entitled wowexec.exe . WOW is
executed automatically by Windows when a 16-bit program is initialised and
is transparent to the user in execution. There is a spoof of this process
called _wowexec.exe is associated with spyware programs and viruses.
Anti-virus software and firewalls do not fully protect your system against
the majority of spyware and privacy threats. Spyware is commonly bundled
with software downloads, attached to e-mails, or transmitted through
networks so it can appear to be legitimate software, but once installed it
can be nearly impossible to detect and remove without the help of a
dedicated spyware removal tool such as:programs to ensure complete detection of known spyware programs. Although
nothing is absolute in removing spyware and keeping it off, downloading and
executing the programs above can dramically decrease future infections.HiJackThis) you may receive an error of some sort after rebooting your
system. This is pretty common. Many spyware programs add themselves in the
Startup location and execute when Windows boots. If you recieve an error
when rebooting after removing spyware, do not panic. This is more than
likely a startup remnant trying to access the spyware program that is no
longer on your computer. HiJackThis is a great utility to find and remove
these startup remnants. However, there is a less technical way of removing
these items:decided to see if anyone could e-mail it to me. This is kinda crazy of me
but I've run outta options so I'll post my e-mail and hope someone can send
me a copy of the file.
 
Back
Top