winsrv32.exe

From: herakles (herakles_at_wg.lan)
Date: 01/05/05

  • Next message: David H. Lipman: "Re: winsrv32.exe" 
    Date: Wed, 05 Jan 2005 18:03:01 +0100

    Hi there!

    I found a trojan called JSurf-A on my System and tried to ge rid of it.
    I used help from the Internet from this page:

    http://www.sophos.de/virusinfo/analyses/trojjsurfa.html

    All the help didn't work. I am not able to kill the "winsrv32.exe"
    process completely, it appears again and again after killing under
    processes in exact the same moment I kill the last instance of it.

    I deleted all the entrys in the registry depending on

    "win32.dll, winsrv32.exe, drg.exe, wins32.exe, sfbar.exe"

    and in addition I deleted all those files mentioned above in security
    mode of Windows XP SP2.

    After all, still the process "winsrv32.exe" is visible under "Processes"
    of the task manager.

    A Virusscanner (www.antivir.de) just can't even find a virus.

    Any suggestions, how to delete this Virus?

    Thanks in advance to all those, who may answer...

    Dennis

  • Next message: David H. Lipman: "Re: winsrv32.exe"

    Relevant Pages

    • Re: Reply to Rocket
      ... You can't 'think' that you got rid of 'most of them'. ... You need to kill them all and you need to kill them dead. ... comouter will not allow me to go to any anti virus sites, ... >> installing software you should contact the organization that created the ...
      (microsoft.public.windowsxp.perform_maintain)
    • Svchost....scvhost???? Help please!
      ... so I get rid of it. ... slows down a lot so I think I still have the virus. ... I made some searches on internet and this is what I have ... (but I have windows 98). ...
      (microsoft.public.security.virus)
    • Internet Explorer Virus or Pop up?
      ... Some kind of virus, I guess, has installed itself in my ... Internet Explorer 6. ... How do I get rid of this? ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: What is it ?????
      ... Run an updated virus scan. ... Look in Task Manager for something strange or that comes on when ... > horn and every time I connect to the internet it pops up ... > supposed to.It is just anoiying not being able to get rid ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Remote Procedure Call (RPC)
      ... >>Everytime I connect to the internet, ... >>shutdown and my computer must restart. ... >>This is a virus, use virus software to get rid of it and ... > svchost.exe get rid of it! ...
      (microsoft.public.windowsupdate)