Is the file DWWM.EXE located on your computer? Then your computer is infected.
We do suggest you should remove DWWM.EXE from your computer as soon as possible.
DWWM.EXE is Trojan/Backdoor.
Kill the process DWWM.EXE and remove DWWM.EXE from the Windows startup.
Malware Analysis of DWWM.EXE
Full path on a computer: %SysDir%\dwwm.exe
Detected by UnHackMe:
DWWM.EXE
Default location: %SysDir%\dwwm.exe
Removal Results: Success
Number of reboot: 1
DWWM.EXE is known as:
Trojan.P2PWorm, VBTroj.UHES, TR.Spy.28672.2802, Trojan.VB.RHG, Win32.VB.RHG, Trojan.Spy, W32.VB.RHG.tr, VB2.ACKV, Win32.Trojan.8cf
DWWM.EXE hash:
- MD5: 4f98a71dad9e99dad18fd0011de27314
How to quickly detect DWWM.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKLM\System\CurrentControlSet\Services\Apointer\ImagePath: “%SysDir%\Epoint.exe”
- HKLM\System\CurrentControlSet\Services\Apointer\DisplayName: “point Seguraridad Service”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\cespa: “%SysDir%\dwwm.exe”
Files:- %Temp%\a229815238c968455cbb405386a44965.pdf
- %SysDir%\Apoint.exe
- %SysDir%\dwwm.exe
- %SysDir%\Epoint.exe