Search For Processes
What is winable.exe? TROJ_AGENT.AAWZ
| Vendor: |
| Product: |
| Vendor Website: |
| Last Seen by PC Pitstop: No Data |
PC Pitstop has analyzed this process and determined that there is a high likelihood that it is bad.
PC Pitstop has analyzed this process and determined that the safety of this process is questionable.
PC Pitstop has analyzed this process and determined that there is a high likelihood that it is good.This process is a Microsoft or Windows process, but many viruses use this file name to escape notice.PC Pitstop Analysis
Purpose: winable.exe - According to TrendMicro:
"Description:
A Trojan horse program is a malware that is not capable of automatically spreading to other systems. Trojans are usually downloaded from the Internet and installed by unsuspecting users.
Trojans typically carry payloads or other malicious actions that can range from the mildly annoying to the irreparably destructive. They may also modify system settings to automatically start. Restoring affected systems may require procedures other than scanning with an antivirus program."
"Description created: Sep. 27, 2007 12:57:16 AM GMT -0800"
"Details:
Arrival Details
This Trojan is downloaded from remote site(s) by other malware.
It can also be dropped by other malware or downloaded unknowingly by a user when visiting malicious Web site(s).
Installation
This Trojan drops the following copies of itself:
%Program Files%\TEMPORARY\WININSTALL.EXE
%Program Files%\WinAble\winable.exe
(Note: %Program Files% is the default Program Files folder, usually C:\Program Files.)
Autostart Techniques
This Trojan creates the following registry entryies to enable its automatic execution at every system startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinAble = "%Program Files%\WinAble\winable.exe"
Download Routine
This Trojan accesses the following Web site(s) to download files:
http://{BLOCKED}22.mcboo.com/ack.php?uid=9813B1C2-0960-1033-0421-0421040056&version=16&actionname=_regcheck&action=CheckBundle%2E122&success=true&debug=ok&nocache=1739
http://{BLOCKED}g56.starsdoor.com/aiw2.php
Analysis By: Joselito Dela Cruz
Revision History:
First pattern file version: 4.737.00
First pattern file release date: Sep 24, 2007"
winable.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.
PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.
Check your PC for the bad versions of this file - with this
Free Security Scan.
winable.exe Technical Information
Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: null%
Average RAM for this program: null MB
MD5 Hash Analysis
| Program Name | MD5 Count |
| winable.exe |
Try a free diagnostic now
PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.
› Driver Scan› Total PC Care
› Privacy Scan
› Disk Scan
› Internet Speed Tests
› Get More Tips
› Important Note
A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory.
If you are unable to identify a file, ask about it in our forums after running our full tests.