WeekApp

Posted: June 23, 2014

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	485

First Seen:	June 23, 2014
Last Seen:	September 16, 2022
OS(es) Affected:	Windows

WeekApp is adware that uses the InstalleRex-WebPick utility to distribute itself; this installer may distribute similar software automatically. Although it's not a threat, WeekApp's website has been classified as threatening by a small number of PC security companies, and malware researchers always suggest removing unneeded adware to limit your browser's security weak points. Due to randomly-named files and other characteristics of its components that obfuscate the normal deletion process, removing WeekApp and the browser advertisements that come with WeekApp may mandate using resilient anti-adware utilities.

The Problems with Discovering a New Application a Week

WeekApp is one of various advertising add-ons in distribution by third parties hoping to profit by reaping minor commissions off of each installation. Vaudix, ApptoU and the ironically-named AddBlocknWatch are examples of similar adware installed by InstalleRex-WebPick. Like these other adware products, WeekApp attaches itself to your Web browser – specifically, as a BHO for Internet Explorer – so that WeekApp can load additional advertising content. WeekApp's advertisements are limited to promotional content for other applications, and its marketing lead malware researchers to estimate that WeekApp currently is targeted to smartphone users preferentially. Of course, Internet Explorer also is a default component of the Windows OS, and WeekApp also is compatible with most Windows PCs.

Since most forms of InstalleRex-WebPick adware use installation processes that skirt around the need for permission, WeekApp may appear on your web browser without your having downloaded it deliberately. Malware experts haven't seen WeekApp's advertisements used to distribute unsafe content intentionally, but its applications lack filtering for their relative safety, and similar adware programs may be exploited as delivery vehicles for toxic content. Contrary to its claims, there are no advantages to having WeekApp, or any other adware on your Web browser.

Getting Rid of the Root of All Browser Applications

Adding new add-ons to your browser without much caution is a quick recipe for exposing your system to security problems that, frequently, may cause browser performance issues or even allow for the installation of threatening software. WeekApp, as a ready source of 'recommended' applications without any consideration for the safety of your PC, would be a security hazard even if it had your approval for its installation (such as through the weekapp.net site or similar methods). Because of its use of a well-identified installer utility, WeekApp installers usually should be detectable by proper anti-adware tools prior to its installation, assuming you scan unusual files before you open them.

However, in circumstances where WeekApp has modified your browser before you could catch WeekApp at its entrance, malware researchers recommend general anti-adware scanning solutions to remove all of WeekApp's browser changes and files. Its components especially are known for their abuse of semi-random names that can make it difficult to pinpoint all of them only by sight, and WeekApp also is known for making Registry changes that can be challenging for casual PC users to remove safely.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%PROGRAMFILES(x86)%\saurf aand kkeeap\WTBt2sKMhF.x64.dll

File name: WTBt2sKMhF.x64.dll
Size: 407.55 KB (407552 bytes)
MD5: 410bb7e2c88f92de31b83a173e173e2d
Detection count: 173
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\saurf aand kkeeap\WTBt2sKMhF.x64.dll
Group: Malware file
Last Updated: May 14, 2023

%ALLUSERSPROFILE%\Application Data\WEekapp\6.dll

File name: 6.dll
Size: 381.8 KB (381803 bytes)
MD5: c24afbc25f77c3441e57142764e31716
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\WEekapp
Group: Malware file
Last Updated: June 26, 2014

%ALLUSERSPROFILE%\Application Data\WEekapp\7qkp.dll

File name: 7qkp.dll
Size: 381.97 KB (381975 bytes)
MD5: dbea4644a109f777e11b9b626426e10c
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\WEekapp
Group: Malware file
Last Updated: June 26, 2014

%ALLUSERSPROFILE%\Application Data\WeekaPp\F.dll

File name: F.dll
Size: 302.02 KB (302022 bytes)
MD5: d11ad608959022f833a1f2be02836e8d
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\WeekaPp
Group: Malware file
Last Updated: June 26, 2014

%ALLUSERSPROFILE%\Application Data\WeekApp\9sFOcZ0L.dll

File name: 9sFOcZ0L.dll
Size: 292.72 KB (292724 bytes)
MD5: 44ce459521725b8a5c28f3d3a84b6e20
Detection count: 0
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\WeekApp
Group: Malware file
Last Updated: June 26, 2014

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\WeekApp.WeekAppSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{BCDA7EA1-AEAE-DFB3-B4D7-9D77BCECA9A9}

Additional Information

The following directories were created:

%ALLUSERSPROFILE%\Application Data\WeekApp%ALLUSERSPROFILE%\WeekApp%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\jbbpinplalnhbjenghnlpmdmmldmfgmn%PROGRAMFILES%\WeekApp%PROGRAMFILES(x86)%\WeekApp%USERPROFILE%\AppData\LocalLow\{BCDA7EA1-AEAE-DFB3-B4D7-9D77BCECA9A9}