A Service That Is Running

[Mike Dillard]

Hello,
I am the Network Administrator for my company. Recently
while stripping some trojan files off our server, I found
the "spoolas.exe" service running. This service is making
outgoing connections on ports
Local:1584, 1580, 1616, 1630, 1631
Remote: 80, 1580
This connection is going out to several differant IP
Adrresses. Any help would be much appreciated.

 

[George Hester]

Can't you just stop the service and then rename or remove the file? Try it in Safe Mode.