There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
antivirus audio avg avg 8 backup bios boot browser bsod computer cpu crash css desktop driver dvd email error excel explorer firefox firefox 3 freeze game graphics hard drive hardware help please hijackthis hjt hjt log install internet internet explorer itunes javascript lan laptop malware missing monitor msn network networking openoffice outlook outlook 2003 outlook express php popups problem router screen seo slow sound sp3 spyware trojan usb video virtumonde virus vista vundo windows windows vista windows xp wireless word
Malware Removal & HijackThis Logs
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Security & Malware Removal > Malware Removal & HijackThis Logs >
[Resolved] Infected winserv.exe file


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
tlh99's Avatar
Member with 88 posts.
 
Join Date: Dec 1999
Location: Zelienople,Pa,US
07-Jun-2002, 06:49 PM #1
Unhappy Infected winserv.exe file
I am using windows 98 and ran a virus scan that indicates that my C/windows/winserv.exe is infected with Troj/W32/Imiserv.B.
They indiciated that they renamed file, but .sir after it, and I ran the scan again and it still states it was infected and "not modifyable". I use AVG virus software that has been very good in detecting infected incoming email messages but it never detected this one. I run my virus scans almost daily and also run virus scan from House Calls periodically as double insurance and neither one detects this. This was detected by scan from Panda and indicates it has been infected since November 2001. What is this exe file used for and what will happen if I just delete it from my hard drive? I do not feel secure enough to go into registry and make any changes. Thank You. tlh99
mtbird's Avatar
Distinguished Member with 3,738 posts.
 
Join Date: Dec 2001
07-Jun-2002, 07:23 PM #2
Hi tlh99.....
Follow the instructions in this link and you should be fine........

http://www.computing.net/security/ww...forum/385.html

Post back with any questions.

Debe
Rollin' Rog's Avatar
Computer Specs
Moderator with 42,470 posts.
 
Join Date: Dec 2000
Location: North of Hollywoodland
Experience: I know when to fold em'
07-Jun-2002, 08:33 PM #3
It's not a windows file, not does it belong to any "legitimate" program. It IS the trojan. So what will happen after you delete it is you should get an entirely clean scan.
tlh99's Avatar
Member with 88 posts.
 
Join Date: Dec 1999
Location: Zelienople,Pa,US
08-Jun-2002, 09:53 PM #4
Thank both of you for your reply. I now have a clean scan and hope it stays that way. tlh99
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 06:04 AM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.