Solved Apps32: what is this program?

March 2, 2016 at 07:28:00
Specs: Windows 10, 5500U/8GB
I had some virus issues today. They seem solved now. I removed a program that I was concerned about. During this process, I noticed another program called Apps32 (see image below). I tried uninstalling it, but upon selecting Uninstall, nothing happens for this program. Does anyone know what this program is?

[IMG]http://i65.tinypic.com/2vdm9w5.gif[/IMG]

message edited by Marty9


See More: Apps32: what is this program?

Report •

✔ Best Answer
March 2, 2016 at 12:19:03
My advice is to use CCleaner as given and let that do it, as it is the safest option.

However if you want to remove those two entries manually then Export them first against the unlikely possibility that you might want them back. To do this properly we need the full path (it should appear in the status bar at the bottom of the screen if you have that invoked). Otherwise traces might be left behind.

Always pop back and let us know the outcome - thanks



#1
March 2, 2016 at 08:28:59
Viruses are often tricky to fully remove. These widely used freebies often find and fix a lot. Run them in the order given:

AdwCleaner:
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run the program. Use the "Scan" button, followed by the "Cleaning" button.

Junkware Removal Tool (JRT)
http://www.bleepingcomputer.com/dow...
(blue Download button near top - not anything else on the page).
Download and "Save" the file somewhere. Go to the saved file then double click it to run JRT. It might appear to have stopped at times or flash the screen but sit tight until it has finished.

MalwareBytes:
https://www.malwarebytes.org/
Download the free version.
Install and Run the program but before doing its Scan go to "Settings > Detection and Protection" and put a checkmark in "Scan for rootkits". Quarantine anything it finds.

Please copy/paste the logs on here. Even if the symptoms go away it does not necessarily mean your computer is clean.

Just for future reference if you put the link on here including the http bit but nothing else it will become active.

Always pop back and let us know the outcome - thanks


Report •

#2
March 2, 2016 at 08:52:12
All virus scanners return no problems. When clicking the program to uninstall it, a window appears for only a fraction of a second, too short to read what it says. So I made a video of it, so that I could stop the video at that specific moment.

It turns out it is associated with c:\windows\system32\sdbinst.exe. I double clicked it a second time, and then (again only for a fraction of a second) it said: "Couldn't open SDB 'C:\WINDOWS\AppPatch\Custom\{8a4d5a43-...etc...}.sdb' "

My guess is that during removing viruses this sdb file has been removed by the virus scanners. Apps32 (as seen in Programs in the Control panel) uses sdbinst.exe to open this sdb file but since the sdb file doesn't exist anymore, we have the situation as presented here.

Any idea what to do with 'Apps32'? Or whether/how to uninstall this program?

message edited by Marty9


Report •

#3
March 2, 2016 at 09:43:22
If the utils Derek suggests don't resolve the problem - and I suspect this is a virus/malware issue - the download and burn to a DVD the ISO for Kaspersky Rescue Disk.

Boot with that. It will load itself into RAM only; then it will go online to update itself. After-which it will scan the entire hard drive and remove anything it finds that" didn't orta be" there.

It's free, Linux based, and will not install to the hard drive; unless you tell; it to - which don't.

http://support.kaspersky.co.uk/viru...

http://support.kaspersky.co.uk/4162

http://tinyurl.com/373ojxb

There are more than a few pests which cannot be removed whilst the OS is booted up. One has to boot up with a suitable DVD and then scan etc... as above.


Report •

Related Solutions

#4
March 2, 2016 at 09:49:07
"All virus scanners return no problems".
Does that include the ones given in my #1? They are particularly good and it would be useful to know if they also show nothing.

You could search the file system (see file properties) and the registry for Apps32 and maybe get a clue that way.

Unfortunately searching the internet for file names these days just throws up a lot of scam artists who say that everything is a virus and requires their magic program to fix it.

If you can provide the rest of that number 8a4d5a43-...etc it might help.

Always pop back and let us know the outcome - thanks


Report •

#5
March 2, 2016 at 10:16:47
Many pests secrete/hide themselves within the windows system files once it's booted up; and thus a scanner running under such a situation will very likely not find the pest(s). Hence the Linux disk approach - Kaspersky being only one of at least three that scan the whole hard drive - from outside any OS installed on that hard drive; and not infrequently find and deal with them.

As Derek comments:

Unfortunately searching the internet for file names these days just throws up a lot of scam artists who say that everything is a virus and requires their magic program to fix it.

If you can provide the rest of that number 8a4d5a43-...etc it might help.

there a many scam artists out there in web-landwho will say almost any file is a pest; and then offer "magic fix" solutions - which seldom are what they claim; and seldom required (and usually cost £££/$$$ etc...)

If the utils Derek has suggested don't resolve it, then try the Kaspersky approach (I'd be inclined to do it anyway...). And if that doesn't resolve it post back as there may be other possible approaches/solutions too.


Report •

#6
March 2, 2016 at 11:42:10
Thanks, I've used Avira, AdwCleaner and MalwareBytes (so only haven't used JRT). All produced no errors. I've now also used the Kaspersky approach, which also didn't report any problems.

The full number is: {8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Googling it, confirms it is associated with a virus. But as mentioned this has been cleaned; the sdb file no longer exists and the virus has been removed. However the program (which I think is basically a shortcut using sdbinst.exe to open the sdb file) is still listed under Programs in the Control Panel. I don't think it can do any harm since the sdb file no longer exists, but it would be cleaner if I could remove it from the Programs list.

I've also used CCleaner to check for registry errors, but no problems associated to the problem presented here, were found.


P.S. For those reading this topic later, to implement the Kaspersky approach with a USB the following might help:
- Instructions: http://support.kaspersky.co.uk/8092
- I had problems booting from a USB and it turned out, I needed to Disable Safe boot and change Boot Mode to CSM/Legacy BIOS Mode. See http://www.tomsguide.com/answers/id...

message edited by Marty9


Report •

#7
March 2, 2016 at 12:03:35
Using regedit I searched the registry for 'Apps32' and found the result presented here:
[IMG]http://i65.tinypic.com/2j2ytfc.gif[/IMG]

What should I do with this to get rid of Apps32?


Report •

#8
March 2, 2016 at 12:05:55
It seems that there are at least remnants of the virus left behind otherwise you would not get a popup which referred to that number. Did you look in 'C:\WINDOWS\AppPatch\Custom\ to see if that sdb file was there?

I don't usually advise folk to use registry cleaners but if you install CCleaner you could run the registry cleaning part and look only for items that fit this apps32, the long number etc. You can right click the results, deselect all, then go only for the registry entries you know are bad ones. That is often the way to remove stuff from Progs and Features - I've done it many times.

There is a helper on here called Johnw (from Australia) who might step in later and offer to fully clean the computer.

Did you find any app32 files and are there any other symptoms apart from this apps32 entry?

Always pop back and let us know the outcome - thanks


Report •

#9
March 2, 2016 at 12:08:43
Just seen your #7 - will be back in a jiffy.

You don't need to post that IMG stuff (it prevents us from just clicking the URL to go there). Just post the full url includingt the http part.

Always pop back and let us know the outcome - thanks


Report •

#10
March 2, 2016 at 12:19:03
✔ Best Answer
My advice is to use CCleaner as given and let that do it, as it is the safest option.

However if you want to remove those two entries manually then Export them first against the unlikely possibility that you might want them back. To do this properly we need the full path (it should appear in the status bar at the bottom of the screen if you have that invoked). Otherwise traces might be left behind.

Always pop back and let us know the outcome - thanks


Report •

#11
March 2, 2016 at 13:31:24
The sdb file isn't there anymore, that was removed earlier today when removing the virus. CCleaner doesn't find any registry problems associated to the problem presented here. In regedit I have now removed the registry key that I showed in my previous post. After removing the key in regedit, Apps32 is no longer listed under Programs in the Control Panel. Thanks for all the help!

Report •

#12
March 2, 2016 at 13:35:05
Well done and thanks for the feedback.

Always pop back and let us know the outcome - thanks


Report •

#13
March 2, 2016 at 17:24:47
BTW, don't put anything before or after your links.

[IMG]http://i65.tinypic.com/2j2ytfc.gif[/IMG] should be http://i65.tinypic.com/2j2ytfc.gif


Report •

Ask Question