Results 1 to 6 of 6

Thread: WINSRVC.EXE ???

  1. #1
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    Escondido, California, USA
    Posts
    1,458
    Thanks
    0
    Thanked 1 Time in 1 Post

    WINSRVC.EXE ???

    My firewall program recently reported that the program WINSRVC.EXE (residing in Common Files) was trying to contact adsvc1.web-nex.com.

    I subsequently found out that this is the result of getting infected with W32.Friendgreet.worm. Having suffered a recent hospital stay I thought I was getting an egreeting card from a friend.

    Just thought I would alert everyone.

  2. #2
    5 Star Lounger
    Join Date
    May 2002
    Location
    43.8N 81.0W, Ontario
    Posts
    815
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: WINSRVC.EXE ???

    Hi Chuck

    Thanks for the "heads up".

    Your post is the probable explanation for an email I received yesterday at my office. It was supposedly an e-greeting from someone whose name I recognized. The only problem was that the person was an employee of a customer who I very seldom had contact with and who had absolutely no reason to be sending me a "email greeting card". I deleted the email without opening it.....hopefully I wasn't too late to prevent the infection.

    <img src=/S/ranton.gif border=0 alt=ranton width=66 height=37>
    I really wish people wouldn't send email cards, jokes etc. using those Send to a Friend buttons on websites. It seems to me that more often than not, they provide spammers with valid email addresses to hit on......May they be forced to live forever in Owen Sound or be buried under Christian Island......don't follow that....OK, find a map of Southern Ontario, Canada.....Find Owen Sound and Christian Island (East of Owen Sound)....Turn map so WEST is at the TOP....Look at the larger view and use a smidge of imagination....You'll get it !! <img src=/S/evilgrin.gif border=0 alt=evilgrin width=15 height=15>
    <img src=/S/rantoff.gif border=0 alt=rantoff width=66 height=37>

    Also, for the Powers That Be, wouldn't this thread be the type of subject for a Security Forum that was suggested awhile back.

    Have a Great day!!!
    Ken
    <IMG SRC=http://www.wopr.com/w3tuserpics/KenK_sig.gif>

  3. #3
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    Escondido, California, USA
    Posts
    1,458
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: WINSRVC.EXE ???

    Glad to hear that you didn't get infected. I had used the Norton Live Update yesterday and ran a scan, but it didn't detect anything. However, Norton only updates the Live Update file every week or two (the next update is set for 11/14). So I downloaded their Intelligent Updater (which requires you to manually install), and it has the most recent virus definitions (I believe it was dated today or yesterday). After installing that update Norton AV picked up the virus. Cleaning the virus out was a real mess involving deleting various files and quite a number of register edits. This was a real nasty one and I'm kicking myself all over the place for falling for it! <img src=/S/stupidme.gif border=0 alt=stupidme width=30 height=30>

  4. #4
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: WINSRVC.EXE ???

    Chuck:
    Norton updates every week, usually by late Tuesday night (at least on California time). However, they often update definitions more frequently--sometimes a couple days in a row. If you browse a lot & download stuff, you should set the scheduler for daily. (I update once a week, but I'm real careful & don't use Outlook for email.)

  5. #5
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: WINSRVC.EXE ???

    I have seen as many as 4 in one day from Nortons, when some of the NEW nasties start running lose <img src=/S/evilgrin.gif border=0 alt=evilgrin width=15 height=15>

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  6. #6
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: WINSRVC.EXE ???

    Thanks, Dave. Come to think of it, I've gotten new definitions just a few hours apart...probably when I'm bored & looking for something to do. <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •