Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Wservice.exe


  • Please log in to reply
5 replies to this topic

#1 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:32 AM

Posted 09 December 2006 - 09:33 AM

O4 - HKLM\..\Run: [UpdateService] C:\WINDOWS\System32\wservice.exe

File Name: wservice
Registry Value Name: UpdateService
Command: C:\WINDOWS\System32\wservice.exe
File Location: C:\WINDOWS\System32
Description: W32.Mixor.I@mm
Status: X
http://www.symantec.com/security_response/...-99&tabid=2
http://ca.mcafee.com/virusInfo/default.asp...;virus_k=140835


There is an entry for wservice.exe already in the BC database but not listed as dangerous

http://www.bleepingcomputer.com/startups/W...e.exe-6930.html

Edited by amateur, 09 December 2006 - 09:33 AM.


BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,593 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:32 AM

Posted 11 December 2006 - 11:59 AM

Its already in the startup database:

http://www.bleepingcomputer.com/startups/w....exe-16380.html

#3 amateur

amateur

    Malware Fighter

  • Topic Starter

  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:32 AM

Posted 11 December 2006 - 01:21 PM

Hi Grinler,


Yes, I realised later that when you go directly to the BC database, it's there. But, if you simply google wservice.exe
This is the only page that comes up. I guess it's a google thing.

#4 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:05:32 AM

Posted 11 December 2006 - 01:47 PM

KlickFYI

Edited by fozzie, 11 December 2006 - 01:48 PM.


#5 amateur

amateur

    Malware Fighter

  • Topic Starter

  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:32 AM

Posted 11 December 2006 - 02:38 PM

Fozzie, thanks for the link, but what I meant as the only page was with reference to Bleeping computers. When you go to the next page on your link you'll see the reference to BC page that I am talking about.

#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,593 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:32 AM

Posted 11 December 2006 - 04:06 PM

Yup..google only indexed that page it seems. Wish i could get both into google...but alas prob wont happen.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users