View Full Version : winserv.exe
andersson1974
03-26-2002, 11:42 AM
I recently entered a website and Norton Antivirus detected a trojan on my computer. I ran a full system scan but nothing was detected.
After that incident, everytime WinXP starts, the dial-up connection window pops up, saying that a "program requested a connection to 64.58.76.288". And I get an error message about some file called "winserv.exe". What's wrong?
Try running The Cleaner from www.moosoft.com
This is a dedicated Trojan scanner. We could help you a LOT better if you would post the name of the Trojan that Norton detected.
Kento
03-27-2002, 08:09 PM
It's probably sub7 and a trace of that ip address said it didn't exist. Yes run a scan with the cleaner and see if it detects and removes it. Let us know.
Search your system for winserv.exe. It may be a hidden file so go into folder options and enable 'show all files' first.
andersson1974
03-28-2002, 01:29 AM
wow i got Aristoles, Blackstone and SubSeven..
damn this program is good
andersson1974
03-28-2002, 09:34 AM
oh yeah.. I made a typo in my first post.
the ip is "64.58.76.228", which, I've checked, is yahoo.com
what program would request information from yahoo? the only program I remember installing just before I got this problem is netscape 6
Yes, it's an excellent program! Now you can consider sending him $29.95 to register it - and keep it updated, and it will monitor for trojan activity in the background without eating much resources. I've known the developer for several years now and he did an excellent job with this one.
andersson1974
03-30-2002, 04:02 AM
I definitely will!
But I still get this connection thing popping up whenever I sign in to Windows. How can I determine what program is requesting information from yahoo.com?
You have Yahoo Messenger installed?
vBulletin® v3.7.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.