Author Topic: New process unsecapp.exe  (Read 68522 times)

0 Members and 1 Guest are viewing this topic.

Offline noonanaaron

  • Newbie
  • *
  • Posts: 1
Re: New process unsecapp.exe
« Reply #45 on: May 20, 2015, 02:42:23 PM »
I picked up unsecapp.exe from the pirate.bay when they insisted I install VLC media player. I thought it was from the Pornhub (sillyme). Then omnisearch or somesuch occured to hijack my browser search engine. I got rid of omnisearch by removing the erroneous appendage to the application run line in the browsers executable properties. Of course if you remove unsecapp in task manager it turns in wermgr.exe. They both hijack inheritable permissions so that you cannot delete them. I figure that both unsecapp and wermgr are trojan horse style worm viruses applying a damaging remote connection type rootkit to your computer that is aimed at spying on your bank details etc etc etc. Probably my fault for going to the pirate bay and the pornhub but essentially they should be marked as viruses and targeted for removal somehow. Best to add them to the virus database.....

Offline iroc9555

  • CCS, Vzla.
  • Avast √úberevangelist
  • Starting Graphoman
  • *****
  • Posts: 7464
  • No soporte por PM.
Re: New process unsecapp.exe
« Reply #46 on: May 20, 2015, 03:45:59 PM »
Hi noonanaaron. Welcome to Avast forum.

Unsecapp.exe is not a trojan or hijacker. It is a valid Microsoft file.
https://forum.avast.com/index.php?topic=150673.msg1096068#msg1096068

Unsecapp.exe is needed by Avast Browser Clean up Tool. If you do not want it in your system, you must uninstall BCT: https://forum.avast.com/index.php?topic=150673.msg1098606#msg1098606

Wermgr.exe is also a valid Microsoft file if located in Windows\System32 folder. It is also known as Windows Problem Reporting.

According to WinPatrol:

Quote
When an application crashes, it still executes an unhandled exception handler, but that handler sends a message to the WER service (wersvc.dll) and the service launches the WER Fault Reporting process (Werfault.exe) to display the error reporting dialog.

What you say here:

... Of course if you remove unsecapp in task manager it turns in wermgr.exe...

It is only wermgr.exe reporting that unsecapp.exe crashed or it is no longer running.

Now, if you really want to make sure those files are clean you can send them to VirusTotal to be analyzed by 40 or more different antivirus products and scan engines.



Hernan.
Dim 9200. C2D E6600; 2.40GHz. 4GB DDR2RAM. XP Pro_86. Spk3. IE8 & FF41. Avast FREE 2015. CIS 5.12(FW/D+). MBAM Premium. MCShield. WinPatrol +. SpywareBlasterOpenDNS. uBlock. WOT. Sandboxie