How to Remove the Wingn.Exe Virus

This article describes the wingn.exe virus and will guide you through the steps to manually remove the wingn.exe virus.

The wingn.exe virus is known to edit the registry and create randomly named files. These executable files are what you can see when you look at your task manager. They range from 000.exe to 999.exe.

The wingn.exe spreads by creating a hidden system folder named nadfolder in a removable drive. This nadfolder contains the executable. A non-hidden autorun.inf file is also created. This autorun.inf cannot be deleted without first removing the virus.

The wingn.exe virus hides in your main hard drive, in the partition where your operating system is. It hides in the recycler folder in the root directory of your main partition. The recycler folder cannot also be erased if the virus is still running.

Wingn.exe is observed to execute after explorer.exe initializes.

To remove the wingn.exe virus, you must do the following:

First, restart your computer and enter safe mode. So this by holding F5 after your computer's POST or Power-On Self Test. That is right before the Windows logo shows up.

After entering your desktop, run the command prompt. To run the command prompt, click START, then RUN, then type cmd, and then ENTER. If run is missing from the start menu then open the task manager by pressing CTRL+ALT+DEL. Click the applications tab, then click NEW TASK, then type cmd, and then type ENTER.

Once you are in the command prompt type the following:

C:

Cd ..

Cd ..

Rmdir recycler /s /q

This removes the recycler folder and the virus.

Next clean your registry. Type regedit in run. Find the string that matches wingn.exe. do this by pressing CTRL+F then type wingn.exe then ENTER. Delete the string. Don't close regedit yet.

Next run msconfig. To do this, type msconfig in run then enter. Go to the start-up tab then look for three digit named entries. Uncheck them then click apply. After that find the names you found in msconfig in the registry. Use the find command, CTRL+F, input the name in the field, but before you enter check the match string check box. If the values contain entries for a file in the documents and settings folder, delete it.

That's it! You have manually removed it! Your computer is now clean of the wingn.exe virus!