wkssvc.exe

[Guest]

I constantly get this pop up to send or don't send an error report. I don't
know what it is, should I delete it in Explorer. Should I reinstall? It is
driving us nuts

 

[Wesley Vogel]

You have malware.

wkssvc.exe is part of Exploit.Win32.Tazy
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453082722

[[Upon execution, this worm drops a copy of itself in the Windows System
folder as the file WKSSVC.EXE and NTSUBSYS.EXE. It also drops RDRIV.SYS,
which is detected by Trend Micro as TROJ_ROOTKIT.E, in the same folder.]]
TREND MICRO - Security Information: WORM_SDBOT.BGE
http://yu.trendmicro-europe.com/ent...p?LYstr=VMAINDATA&vNav=3&VName=WORM_SDBOT.BGE



--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In