The file WMPRWISE.EXE is malware related.
You must delete the file WMPRWISE.EXE immediately!
Delete the file WMPRWISE.EXE without delay!
Kill the process WMPRWISE.EXE and remove WMPRWISE.EXE from the Windows startup.
Malware Analysis of WMPRWISE.EXE
Full path on a computer: %Appdata%\WMPRWISE.EXE
Detected by UnHackMe:
Item Name: Microsoft Firewall 2.9
Author: Unknown
Related File: %APPDATA%\WMPRWISE.EXE
Type: Registry Run
Item Name: WMPRWISE.EXE
Author: Unknown
Related File: %APPDATA%\WMPRWISE.EXE
Type: Running Processes
Removal Results: Success
Number of reboot: 1
WMPRWISE.EXE is known as:
Trojan.Ransom.Blocker.bpop, Trojan.Blocker.rf11WTTiA20, Trojan.PWS.Stealer.3152, TR.Ransom.Blocker.bpap, Mal.EncPk-AKT, Trojan.Nedsym.G, Trojan.Zbot, Win32.Extats.A, W32.Extats.A, Trj.Dtcontx.F
WMPRWISE.EXE hash:
- MD5: 12c7d568ba490dc938aa03ad09516d8b
How to quickly detect WMPRWISE.EXE presence?
Registry:
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Firewall 2.9: “%Appdata%\WMPRWISE.EXE”
Files:
- %Appdata%\ntuser.dat
- %Appdata%\WMPRWISE.EXE