What is Winkgos service?

[Brian P. Anderson]

I recently came across a service on a win2k server running terminal
services (application mode) which I am unfamiliar. The service is
"winkgos", is located in C:\WINNT\System32\Winkgos.exe, and has no
dependencies. Startup type is listed as automatic, but is currently
stopped. After spending quite some time trying to find out what this
service is, I have come up with nothing. Does anyone know what this
service is and whether or not it is recomended to start?

Thanks-
Brian

 

[\Richard McCall [MSFT]\]

I haven't heard of it and it doesn't show up in any database that I have
searched. Without knowing what the service does I suggest not starting it.
If you right click the winkgos.exe and select properties see if you can find
more information here. You might get lucky and have a manufacturer showup.

 

[John John]

Sounds like Klez virus to me.

John

 

[Lanwench [MVP - Exchange]]

Nearly anything you see with "wink...." is gonna be the Klez virus, as John
John replied....

You need to be running good antivirus software on your server - particularly
as it's a TS box and has lots of little grubby hands accessing it. ;-)

 

[Brian P. Anderson]

In trying to actually find the file listed in the service, I came up
empty. Funny thing is I checked all my antivirus logs and came up
with nothing. Several other system scans came up with nothing as
well. It looks like it may very well have been virus related. I
saved the key in the registry then deleted it. Thanks all for the
help.

Best-
Brian

 

[Brian P. Anderson]

I'm running Trend Micro ServerProtect on my servers, it seems to work
well. We had a virus outbreak several months back which may have been
the cause of this. I guess I didn't spot the service at that time.

Thanks again for all the help-
Brian