Kern32/Wowex32

This computer that I'm working on now seems to be in fairly good shape at this point, but I can't get rid of four entries in the ZoneAlarm firewall. Three are 'Kern32' and one is 'Wowex32'. They seem somewhat randomized. I downloaded the new version of HijackThis and deleted some stuff...but that was all just an IE hijack, and had nothing to do with it...

Norton doesn't catch it. The McAfee AVERT Stinger didn't catch it...and neither do any of the spyware removal programs. I tried to follow another forum and ran a Memory Watcher uninstall program...but it didn't help. I heard that it was the Peper trojan, but the program that was recommended to kill it didn't exist on that server anymore. So, I've been around a lot of forums at this point, but I didn't find any working solutions.

I'm really sorry, if there was one on this forum and I missed it. I don't mean to waste your time, really...

Thank you for wasting a little time on me, though! ^^;;

 

Hi Marian,

Welcome to MGs Here is my standard Malware speech:

Generally, it is a good idea to start with the Cleanup Tutorial HERE:
READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

There are only a few of us Volunteers who regularly offer advice in this forum. Running through the above Tutorial will remove a lot of stuff that would otherwise clog a HijackThis Log and save us valuable time.

Please let us know the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF (if you have it - you didn't give OS) and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

Post back and let us know how you fared. Also, send us a HijackThis Log. Please be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!

Should you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

I’m not around this forum too often these days, but somebody will try to take a look when they get a chance.

Best luck
PP