Mapserver.exe

  • Thread starter Thread starter Jerry Wong
  • Start date Start date
J

Jerry Wong

I am using winxp sp2. Concerning the file mapserver.exe, is it a mandatory
file in XP? What is the usage for this file?
 
Jerry Wong said:
I am using winxp sp2. Concerning the file mapserver.exe, is it a mandatory
file in XP? What is the usage for this file?

You can determine the source of almost any file simply by
examining its properties. The Version page (if one exists) is
quite often revealing when the file is legitimate (illigitimate
files don't normally include version data).

But if you're still none the wiser, simply Google for the file.

In this case, mapserver.exe is probably part of the Tompai-B
trojan and will be running from startup:
http://www.sophos.com/virusinfo/analyses/trojtompaib.html
 
did you google it? i did, all i could find is that its something to do with
trojans. might want to look into that
 
Jerry said:
I am using winxp sp2. Concerning the file mapserver.exe, is it a
mandatory
file in XP? What is the usage for this file?
Whenever you have a question like that, the quickest and easiest way to
get an answer is to plug the filename into Google, like so:

http://www.google.com/search?hl=en&q=mapserver.exe&btnG=Google+Search

By doing this, you will discover that this file is associated with the
Tompai-B worm. Since you apparently don't have a current version (not
earlier than 2005) antivirus installed, using updated definitions
and/or have let your subscription lapse, start cleaning up by first
doing the preliminary work outlined here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then scan in Safe Mode with either Sysclean or David Lipman's Multi-AV:

http://www.elephantboycomputers.com/page2.html#TrendMicros_Sysclean
http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download

After your initial scan with one of these tools, get and install a
full-featured av, update it, and do a thorough scan in Safe Mode.
Finish up by running the scans for non-viral malware outlined in the
"Removing Malware" url above.

Malke
 
Back
Top