Re: Winkui,exe spiking CPU every 2 seconds - Urgent

From: Dan L (gunshyguy@hotmail.com)
Date: 10/01/02


From: "Dan L" <gunshyguy@hotmail.com>
Date: Tue, 1 Oct 2002 11:27:44 -0700


http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.too
l.html

Brian Flanagan wrote:
> I have a process called Winkui.exe that is running on a 2k Pro box
> that I maintain. The user somehow got this exe running and it is
> spiking the CPU every 2-3 seconds constantly. I searched the server
> for a file w/ that name with no luck. I could not stop the process by
> killing it via taskman processes. I had to download Sysinternals
> Process watcher (or something similear) which enabled me to kill the
> app. I have no idea where this came from or what it was trying to
> do... I searched google and MSDN for anything regarding "Winkui.exe"
> with no results found. The registry did find some hits for it but I
> couldnt gain any detaails other than it was called Legacy_Winkui.
>
>
> Does anyone have any ideas what this was and how to get it off the
> system? Once I killed it, it has not returned however I can not reboot
> the server now, so aftrer a reboot it may return.
>
>
> Thanks for any help you can provide.
>
>
> Brian Flanagan



Relevant Pages

  • Re: Winkui,exe spiking CPU every 2 seconds - Urgent
    ... > I have a process called Winkui.exe that is running on a 2k Pro box ... I searched google and MSDN for anything regarding "Winkui.exe" ... it has not returned however I can not reboot ... > the server now, so aftrer a reboot it may return. ...
    (microsoft.public.win2000.security)
  • Winkui,exe spiking CPU every 2 seconds - Urgent
    ... The user somehow got this exe running and it is ... I searched google and MSDN for anything regarding "Winkui.exe" ... it has not returned however I can not reboot ... the server now, so aftrer a reboot it may return. ...
    (microsoft.public.win2000.security)

Quantcast