Purpose: winable.exe - According to TrendMicro:

"Description:

A Trojan horse program is a malware that is not capable of automatically spreading to other systems. Trojans are usually downloaded from the Internet and installed by unsuspecting users.

Trojans typically carry payloads or other malicious actions that can range from the mildly annoying to the irreparably destructive. They may also modify system settings to automatically start. Restoring affected systems may require procedures other than scanning with an antivirus program."

"Description created: Sep. 27, 2007 12:57:16 AM GMT -0800"

"Details:

Arrival Details

This Trojan is downloaded from remote site(s) by other malware.

It can also be dropped by other malware or downloaded unknowingly by a user when visiting malicious Web site(s).

Installation

This Trojan drops the following copies of itself:

%Program Files%\TEMPORARY\WININSTALL.EXE
%Program Files%\WinAble\winable.exe
(Note: %Program Files% is the default Program Files folder, usually C:\Program Files.)

Autostart Techniques

This Trojan creates the following registry entryies to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinAble = "%Program Files%\WinAble\winable.exe"

Download Routine

This Trojan accesses the following Web site(s) to download files:

http://{BLOCKED}22.mcboo.com/ack.php?uid=9813B1C2-0960-1033-0421-0421040056&version=16&actionname=_regcheck&action=CheckBundle%2E122&success=true&debug=ok&nocache=1739
http://{BLOCKED}g56.starsdoor.com/aiw2.php

Analysis By: Joselito Dela Cruz

Revision History:
First pattern file version: 4.737.00
First pattern file release date: Sep 24, 2007"

winable.exe is malware. If this process is running on your machine, we strongly advise that you remove it. Depending on the type of malware it may be doing harm to your computer and your information.

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: null%
Average RAM for this program: null MB