Wowexec.exe is it a virus???

Viruses and worms
1

i have a strange sort of process running which i can see on Windows Task manager… it is slightly different than the rest and i suspect its a virus which has not been detected… how do i tackle it?
P.S i cannot set its affinity or even adjust its priority

2

It could be a legit process as a search on the file name returns many hits, this is just the first, http://www.liutilities.com/products/wintaskspro/processlibrary/wowexec/.

wowexec.exe - wowexec process information Process name: Microsoft Windows on Windows 16bit Execution Process wowexec.exe is a part the operating system, and supports the use of 16-bit processes within Windows NT, 2000, XP and later version of Windows.This program is important for the stable and secure running of your computer and should not be terminated.

You could upload wowexec.exe to VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page.

3

http://www.virustotal.com/analisis/b0d2dfa23ebd9e09cdd9f12fdd826ac1
this is the result. Its quite positive ;D ;D ;D ;D ;D ;D ;D ;D ;D

4

Yes positive in the fact it appears to be clean.

Here though when we talk of positive in relation to suspect files it is normally a positive detection ;D

What is your OS ?
The reason I ask is that this doesn’t run in winXP by default, certainly no on my system, so I just wonder why it needs to run, as it would be strange for 16bit applications to be running and require this functionality.

5

Pranay, have you been using a 16 bit application on your computer?

Maybe an older game or some other old program?

6

Hi CharleyO,

Good question, yes, point for you, because here is the general information on wowexec.exe or wowexec

Tags: wowexec, Windows On Windows Execution

wowexec stands for Windows On Windows Execution
wowexec.exe takes care that 16-bits-programs will smoothly run on a 32-bits OS.
So opening up of a 16-bits program, will at the same time open up wowexec automattically.
Whenever you have shut down that program, wowexec will go on running for some time.

Not until you have shut-down such a 16-bits program (using wowexec), you can now safely shut-down wowexec as well.
You better advised not to, because there might be another program to use it, and then you will have trouble with that other program.
Extra information on wowexec.exe or wowexec: is wowexec.exe a virus or spyware (malware) and where does it reside on my PC?

* Uses Internet: No
* Virus: No
* Spyware: No
* Normally situated inside: C:\WINDOWS\System32

That’s all folks,

polonus

7

i have a modification of Xp ie Windows Xp black and i dont usually run 16 bit applications ::slight_smile:

8

Since your file tested as clean, see the information at the links below :

http://www.what-is-exe.com/filenames/wowexec-exe.html

http://en.kioskea.net/contents/processus/wowexec-exe.php3

http://www.justtext.com/processes-tasks/wowexec-exe.html

http://searchtasks.answersthatwork.com/tasklist.php?File=WOWExec

If your file had tested as infected, it may have been malware :

http://www.prevx.com/filenames/1110644822292710964-301163821/WOWEXEC2EEXE.html

http://www.filename.info/f/wowexec.exe.html

By the way, one of the links above mentions that some applications have both 16 bit and 32 bit code. Perhaps that is what triggered the start of WOW on your computer.