Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


xpssl.exe worm file

  • Please log in to reply
2 replies to this topic

#1 larryhultberg


  • Members
  • 1 posts
  • Local time:01:36 PM

Posted 17 May 2005 - 08:16 PM

any experience or help with the xpssl.exe worm that comes through the IM programs ?
My Trend micro was unsuccessful in quanrantine and now it's loose

BC AdBot (Login to Remove)


#2 gunner


  • Members
  • 337 posts
  • Location:Pensacola, Florida
  • Local time:02:36 PM

Posted 20 May 2005 - 06:25 PM

Name: IECheck
Filename: xpssl.exe
Description: Added by the W32/Tirbot-E worm. This infection sits on an IRC channel and typically can harvest information from the system registry, perform denial of service (DDoS) attacks, serve as a proxy server, upload/download and execute files, report file system information, detect security software or list processes upon command.
File Location: %System%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
Note: %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other Malware
Spike's advice: Backup your data routinely.

#3 Enthusiast


  • Members
  • 5,898 posts
  • Location:Florida, USA
  • Local time:01:36 PM

Posted 21 May 2005 - 08:21 AM

If you haven't already done so, download, update and run the Microsoft Anti-malware beta:

Microsoft Antimalware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx

I also recommend the following web based scanners:
Web based online Antivirus and anti-malware scans:

Panda Activescan (IE only)

Trend Micro antivirus and malware scan:

Etrust Anti-virus web scanner

Kaspersky Anti-Virus Web Scanner

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users