wssetup.exe

as of yesterday everytime i start up my win7 i get a window asking me to run "wssetup by Perlon network LTD"

have so far hit cancel and not allowed the process, god knows where it came from. Done the usual searches which some sites say its "incredimail" notoriously difficult to remove, some say its as safe as houses and some say its a threat tho dont elaborate.
Have run antimalwarebytes and superantispyware and they find nothing. Have run msconfig and under Boot tab and startup tab there is no sign of it, so you can see my problem.
guessing someone will know about this and provide a solution.
grateful for any reply

maka

You can use MS Autoruns (free) to try and find where this program is attempting to run from on startup.
Autoruns lists much more info and startup locations than msconfig.
Autoruns for Windows

many thanks to david for the very helpful ms autoruns link this has worked very well and shows me an awful lot of what i did not know.
sadly it doesnt find this wssetup prog which i am still unsure about as this program does not try to run on startup but waits until my pc has fully booted and ready to roll, then it appears hence it cannot be found in start up searches etc.
my only cure seems to be a full uninstall format and reinstall of win7 after my drive is clean.
just wish i knew what the program was or how it got on my pc and more importantly how to stop it.

thanks again

maka

I've experienced the same since Monday, when I visited a site which was hacked. (as the site owner told me today). Everytime I boot the computer it asks to allow to install, and I cant get rid of it...

makapa said:

many thanks to david for the very helpful ms autoruns link this has worked very well and shows me an awful lot of what i did not know.
sadly it doesnt find this wssetup prog which i am still unsure about as this program does not try to run on startup but waits until my pc has fully booted and ready to roll, then it appears hence it cannot be found in start up searches etc.
my only cure seems to be a full uninstall format and reinstall of win7 after my drive is clean.
just wish i knew what the program was or how it got on my pc and more importantly how to stop it.

thanks again

maka

Take a look at your Services (you can type service in the Start search box for this)
Sort by Startup Type, and look at those with "Automatic (Delayed Start)"
See if you can find anything suspicious that is not an MS service.
Maybe you will find something for Incredimail, etc.

See if you can find the wssetup file and upload it to VirusTotal for scanning.
https://www.virustotal.com/en/

This relatively new thread has over 1900 views.
To me that seems unusually high!
Seems like a LOT of people are searching for wssetup, and reading this...

Hi,
I've experienced the same problem as the OP and have downloaded autoruns. I have found SweetIM and Sweetpacks Communicator listed there. How do I go about removing it? Will an uninstall via the control panel be adequate?

I've found the solution (at least on my computer).
typed MSCONFIG in run box at the startup menu, than under the Automatic Startup page checked out the 'Sweet Packs Update Manager' and now my computer starts normally. So I think this program was the agressiive try from Sweet Pack to be installed on my PC. Good luck!

Trexmark said:

I've found the solution (at least on my computer).
typed MSCONFIG in run box at the startup menu, than under the Automatic Startup page checked out the 'Sweet Packs Update Manager' and now my computer starts normally. So I think this program was the agressiive try from Sweet Pack to be installed on my PC. Good luck!

Thanks, I've just done this and it appears to have solved the problem (for now at least) :).