Application.WinexeSvc.1 removal guide

The Application.WinexeSvc.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.WinexeSvc.1 virus can do?

Authenticode signature is invalid

How to determine Application.WinexeSvc.1?


File Info:
name: DA902B35AEEA74CE9B39.mlw
path: /opt/CAPEv2/storage/binaries/422f4dacd3131dc1c8be2f892f2b0f4c5173504c3c92e05843f65cbe3c37da29
crc32: 26F03B4B
md5: da902b35aeea74ce9b39c2676f66de89
sha1: 6446d2b2f912708323f4d2c128309a7fba33de78
sha256: 422f4dacd3131dc1c8be2f892f2b0f4c5173504c3c92e05843f65cbe3c37da29
sha512: 5633b8152cd72c56e34253b603aed6d16076274feee55d1bc5e9380d6991190031570ed5d3c5c705a35e37aef4c43109e1e4128e15669fe3ebfc3d55bc60c41f
ssdeep: 384:kclc3j3z/TeIBi6xMkqsJ1eXiBB+4BP9H76pOJjrR7osmp+urF8U8AXK:3lchJMkleXRE66XRk6lXA
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AB92D9DAFB4F74F2FE150A7048AAF2BF4A7B42108964CDA5CB60DA50EC538364D1D789
sha3_384: b838d46b54885318690bca2a74113ddc40acc51dd9f582d95cb6870eb4978f3c1140511cde2f05d35c2e2301aad8b6b6
ep_bytes: 83ec0cc7057060400000000000e86e23
timestamp: 2013-11-28 13:15:48

Version Info:
0: [No Data]

Application.WinexeSvc.1 also known as:

Lionic	Riskware.Win32.WinExec.1!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Application.WinexeSvc.1
FireEye	Gen:Application.WinexeSvc.1
Cylance	Unsafe
VIPRE	Gen:Application.WinexeSvc.1
Sangfor	PUP.Win32.Presenoker.Vxli
K7AntiVirus	Unwanted-Program ( 004f96a61 )
K7GW	Unwanted-Program ( 004f96a61 )
CrowdStrike	win/grayware_confidence_100% (W)
ESET-NOD32	a variant of Win32/Winexe.A potentially unsafe
Paloalto	generic.ml
Kaspersky	not-a-virus:RiskTool.Win32.WinExec.a
BitDefender	Gen:Application.WinexeSvc.1
NANO-Antivirus	Riskware.Win32.WinExec.dxakcj
Rising	PUA.Presenoker!8.F608 (CLOUD)
Ad-Aware	Gen:Application.WinexeSvc.1
Emsisoft	Gen:Application.WinexeSvc.1 (B)
Zillya	Trojan.Winexe.Win32.6
McAfee-GW-Edition	BehavesLike.Win32.BadFile.lm
Sophos	WinExeSvc (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Application.WinexeSvc.1
Jiangmin	RiskTool.WinExec.a
Webroot	W32.Riskware.Winexesvc
MAX	malware (ai score=83)
ZoneAlarm	not-a-virus:RiskTool.Win32.WinExec.a
Microsoft	PUA:Win32/Presenoker
Google	Detected
McAfee	Artemis!DA902B35AEEA
VBA32	BScope.Trojan.Occamy
Yandex	Riskware.WinExec!5QaXZwHmetc
Ikarus	Trojan.Winexe
MaxSecure	Trojan.Malware.74825550.susgen

How to remove Application.WinexeSvc.1?

Application.WinexeSvc.1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X