Re: WINSSV.EXE

• Previous message: Robin Sayer: "WINSSV.EXE"
• In reply to: Robin Sayer: "WINSSV.EXE"
• Next in thread: Bryan Simmonds: "Re: WINSSV.EXE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 11 Oct 2004 09:09:45 -0700

Robin Sayer wrote:

> We've seen this in a few places, and watched it eat CPU resources.
> Is this a virus? Trend and our trojan programs don't seem to mind it,
> but it doesn't seem to be part of the standard OS build.

Google Is Your Friend:

http://forums.spywareinfo.com/lofiversion/index.php/t28670.html

Another link suggests this may be related to the sdbot worm. Make sure
your Trend virus definitions are updated. Remove other spyware:

with Spybot Search & Destroy from www.safer-networking.org and Ad-aware
from www.lavasoftusa.com. Be sure to update these programs before
running them. These programs are free, so run them both since they
complement each other. It is best to run antivirus and spyware removal
tools in Safe Mode. You may also want to run CWShredder and HijackThis
from http://aumha.org/freeware.htm. Although CWShredder is no longer
being updated, it will still clean older variants of the CoolWebSearch
malware. A combination of HijackThis and About:Buster
(http://www.majorgeeks.com) works well in removing homepage hijackers.
Please read the instructions carefully. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options). Also,
make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update. Make sure
you are running a firewall.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

• Previous message: Robin Sayer: "WINSSV.EXE"
• In reply to: Robin Sayer: "WINSSV.EXE"
• Next in thread: Bryan Simmonds: "Re: WINSSV.EXE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]