Unknown Service - VIVWFLIOSARZP.EXE

S

Scott-az

Hi, I'm not sure where to post this question, so I started it here. Windows
XP sp3, under SERVICES, I found a new unidentified service named:
VIVWFIOSAZP.EXE.

The only thing I can see is that this exe file is in a temp directory:
C:\DOCUME~1\Britt\LOCALS~1\Temp\VIVWFLIOSARZP.exe

I have no idea what this service is or where it came from.

Anybody have any suggestions?
Thanks
Britt
 
S

SC Tom

Scott-az said:
Hi, I'm not sure where to post this question, so I started it here.
Windows
XP sp3, under SERVICES, I found a new unidentified service named:
VIVWFIOSAZP.EXE.

The only thing I can see is that this exe file is in a temp directory:
C:\DOCUME~1\Britt\LOCALS~1\Temp\VIVWFLIOSARZP.exe

I have no idea what this service is or where it came from.

Anybody have any suggestions?
Thanks
Britt

Looks like it may be malware of some sort. Are you able to stop the service,
and then disable it? Have you scanned your PC lately? I can suggest
MalwareBytes http://www.malwarebytes.org/mbam.php and
SuperAntiSpyware http://www.superantispyware.com/download.html .
 
D

David H. Lipman

From: "Scott-az" <[email protected]>

| Hi, I'm not sure where to post this question, so I started it here. Windows
| XP sp3, under SERVICES, I found a new unidentified service named:
| VIVWFIOSAZP.EXE.

| The only thing I can see is that this exe file is in a temp directory:
| C:\DOCUME~1\Britt\LOCALS~1\Temp\VIVWFLIOSARZP.exe

| I have no idea what this service is or where it came from.

| Anybody have any suggestions?
| Thanks
| Britt

I agree w/Tom. -- Malware.

NO service shpu;ld be running from a TEMP folder!

Stop the service and scan the system with MBAM.

Download, install, update and then execute, Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
 
L

LD55ZRA

Anything in temp folder can be deleted and so I don't expect any
..exe files to reside there. I suggest either delete it completely
or if you are one of those nervous types hanging around here,
rename it to:

"VIVWFIOSAZP.old"

Then you can reboot your system and you won't get any "services"
installed by that name. Trojons and key generators generally use
this particular temp folder to store vital info because it is
always there whatever the user's credentials. I should know it
better because ........ <you can guess it>

hth


Scott-az said:
Hi, I'm not sure where to post this question, so I started it here. Windows
XP sp3, under SERVICES, I found a new unidentified service named:
VIVWFIOSAZP.EXE.

The only thing I can see is that this exe file is in a temp directory:
C:\DOCUME~1\Britt\LOCALS~1\Temp\VIVWFLIOSARZP.exe

I have no idea what this service is or where it came from.

Anybody have any suggestions?
Thanks
Britt

--
THE INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY
KIND. LD55ZRA DISCLAIMS ALL WARRANTIES, EITHER EXPRESSED OR
IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL LD55ZRA
OR ITS ASSOCIATES BE LIABLE FOR ANY DAMAGES WHATSOEVER
INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF
BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF LD55ZRA OR ITS
ASSOCIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR
LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright LD55ZRA 2010.
 
P

Peter Foldes

LD55ZRA

If only you knew what you are talking about. Malware can reside anywhere including
the Temp folder. See David Lipmans excellent advice to the OP
 
L

LD55ZRA

Peter said:
If only you knew what you are talking about. Malware can reside
anywhere including the Temp folder. See David Lipmans excellent advice
to the OP

Go and fcuk your sister and then sell her off to gangs competing with
you in escort agencies and prostitutions.

ps1: Peter Foldes <[email protected]> is a convicted paedo using
his sister to work for him as prostitute.

ps2: Jeff Strickland <[email protected]> has forced his mum to
prostitute herself by working for Peter Foldes so that he (Jeff)
can finance his drug habits!



--
THE INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY
KIND. LD55ZRA DISCLAIMS ALL WARRANTIES, EITHER EXPRESSED OR
IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL LD55ZRA
OR ITS ASSOCIATES BE LIABLE FOR ANY DAMAGES WHATSOEVER
INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF
BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF LD55ZRA OR ITS
ASSOCIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR
LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright LD55ZRA 2010.
 
K

Ken Blake, MVP

Hi, I'm not sure where to post this question, so I started it here. Windows
XP sp3, under SERVICES, I found a new unidentified service named:
VIVWFIOSAZP.EXE.

The only thing I can see is that this exe file is in a temp directory:
C:\DOCUME~1\Britt\LOCALS~1\Temp\VIVWFLIOSARZP.exe

I have no idea what this service is or where it came from.

Anybody have any suggestions?
Thanks



A name like this, which can't be found in a search, is almost always a
malware infection.
 
P

Peter Foldes

LOL. Entertaining answer. Have some more in your childish repertoire. Let it rip
 
U

Unknown

You'll have to excuse him. He's one of those individuals who couldn't go
water skiing
because he couldn't find a lake with a slope.
 
S

Scott-az

Thanks for the help. I did run MalawareBytes'Anti-Malware, MS Malicious Tool
Remover and RootKitRevealer. All came back negative. I made a manual System
Restore point and deleted the service.
Thanks
 
D

David H. Lipman

From: "Scott-az" <[email protected]>

| Thanks for the help. I did run MalawareBytes'Anti-Malware, MS Malicious Tool
| Remover and RootKitRevealer. All came back negative. I made a manual System
| Restore point and deleted the service.
| Thanks


Deleting the service is insufficient !



Please submit a sample of VIVWFLIOSARZP.EXE to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition Virus
Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.
 
S

Scott-az

Sorry, didn't know I was supposed to submit this to a website. I never did
find an exe in the temp directory. Only had a service named vivwfliosarzp
that pointed to an exe in a temp directory. When I did a file search,
nothing was found.
 
D

David H. Lipman

From: "Scott-az" <[email protected]>

| Sorry, didn't know I was supposed to submit this to a website. I never did
| find an exe in the temp directory. Only had a service named vivwfliosarzp
| that pointed to an exe in a temp directory. When I did a file search,
| nothing was found.

Because it may have the Hidden and System attributes and cause it to be staelthy from
normal views.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top