winappp.exe virus

[jyeh74]

I have this winappp.exe virus or maleware that loads when I try to start my computer. I used SUPERANTISpyware v.4.32.1000 and Malewarebytes Antimaleware v1.44 and Norton Internet Security 2010 to scan computer. Still there.

I googled it but it just takes me to different antispyware programs to make me purchase them. Before I reformat computer, can someone help please? Anything free works?

[hech54]

Inside SuperAntiSpyware there is a small program called BootSafe. Have BootSafe restart your computer in SAFE mode(NO internet connectivity of any kind) then run your Malware cleaning programs.....and for god's sake get rid of Norton.

[jyeh74]

ok thank you. what is wrong with norton internet security 2010? is it bad program?

[jyeh74]

but i have the free edition.....is there bootsafe in that?

[HotDamn!]

but i have the free edition.....is there bootsafe in that?

Not that I can find on mine. For now just boot into safe mode, no networking or command prompt, and do your scans there.

Norton in my opinion is blaah. I would use either Avira or Avast depending on what you do. Let me know if you need links to try one out.

Good luck.

[hech54]

I've yet to find a version of SuperAntiSpyware that didn't have BootSafe with it. It is THE EASIEST WAY for a newbie to get to Windows SAFE Mode....hands down.

[HotDamn!]

I've yet to find a version of SuperAntiSpyware that didn't have BootSafe with it. It is THE EASIEST WAY for a newbie to get to Windows SAFE Mode....hands down.

Can you post a screen shot please. I can't find it, and it may help others also.

[TBoneit]

SUPERANTISpyware v.4.32.1000 and Malewarebytes Antimalware v1.44 are both old versions. You should update them to the latest.

Good Luck

BTW you might also try Combofix from
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Keeping in mind it has a small chance of trashing your system. OTOH if you are thinking of reloading what's to lose. Backup anything you wouldn't want to lose first.

[hech54]

BootSafe

[wulf109]

I got a URL redirect virus about a year ago. It would re-direct my browser to different sites,it even re-directed my AVG program to a different URL so it couldn't update. I tried several different anti virus programs,none worked. I found a program called Extermibate It! and it removed the URL virus. It's a pay program but well worth the $30 annual cost.

[HotDamn!]

[Attachment 2327 - Click to enlarge]
BootSafe

Thank you. I never thought of looking under the start menu tab.

[jyeh74]

me neither, i was looking in the program itself. For some reason Malewarebyte's AntiMalware never catches anything. Does anyone else have comments in their experience with this program? SuperAntiSpyware catches more, but having trouble catching this winappp.exe virus.

[jyeh74]

So I tried going into safeboot and then scanning my computer with superantispyware. It caught 50 maleware and removed them, but whne I restarted my computer, this winappp.exe is still there. Tried googling but directs me to http://www.whatexe.com/winappp.exe.html

[aedipuss]

i use avast on all computers here. malwarebytes just for an occasional scan. the new version of norton internet security 2010 isn't bad, much better than previous ones.

[jyeh74]

superantispyware Version: 4.39.1002 does not have bootsafe. I am using Windows 7 Home Edition.

[hech54]

superantispyware Version: 4.39.1002 does not have bootsafe. I am using Windows 7 Home Edition.

WRONG!!!!
Bootsafe is included with all downloads.....there just isn't a Windows7 version of BootSafe yet.

[aedipuss]

i'm using win7 32bit ultimate and there is the start menu option.

[jyeh74]

i'm using win7 32bit ultimate and there is the start menu option.

[Attachment 2336 - Click to enlarge]

wow that is weird as mine is not available. I only see

SUPERAntispyware Alternate Start

SUPERAntispyware Free Edition

SUPERAntispyware Help

SUPERAntispyware Registration Activation

[isogonic]

If you havent reformatted yet:

If traditional anti-malware (like malwarebytes) are not successful in removing the browser redirections then most likely you have a rootkit on board. Rootkits require special tools. I suggest you run TDSSkiller:

TDSS Killer.zip Save it to your desktop
Extract the zip file to your desktop. double click to launch the utility

When its finished press any key to continue.
It will generate a .txt file with results in your root drive C:

[steve.hick]

winappp.exe may be a hidden monitoring software that tracks your personal information such as credit card, social security number, ID, email addresses, websites that you surfed or surfing habits, IP addresses etc.

Disable and Remove winappp.exe now to prevent:
- Further Sluggish PC Performance.
- Risk of further virus infections.
- Worms that may send out emails from your system to infect other PCs.
- Personal info being stolen and used without your knowledge to commit fraud/crimes.

Use AVG Anti Virus to remove your winappp.exe Trojan/Virus.

[jyeh74]

I tried AVG Anti Virus but it did not find it.