winsvc.exe

[Menno Hershberger]

Is there such a valid file in XP Home? I just got (almost) done
cleaning up a XP Home computer with various viruses in it, including
W32.Blaster.(E&C).worm, W32.HLLW.Gaobot.(gen,AO,JB), Trojan Horses, and
Trojan Dropper. Norton can't get rid of winsvc.exe and said it was still
infected. I went in Safe Mode and renamed it, and removed two references
to it from the registry. Everything seems to be running just fine without
without it.
I have XP Pro myself and don't have such a file. Just want to be sure
before I delete it altogether.
I found a couple of references in Google associating it with klez, but
Norton didn't find any instances of klez.

 

[Rick \Nutcase\ Rogers]

Hi,

Winsvc.exe is from the sdbot bug, it's not a Windows file. See:
http://www.sophos.com/virusinfo/analyses/w32sdboto.html

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Menno Hershberger]

Hi,

Winsvc.exe is from the sdbot bug, it's not a Windows file. See:
http://www.sophos.com/virusinfo/analyses/w32sdboto.html

Thanks... I deleted it and all is well.