wkssvc.exe



Cathy Compass
07-10-2005, 01:25 AM
I constantly get this pop up to send or don't send an error report. I don't
know what it is, should I delete it in Explorer. Should I reinstall? It is
driving us nuts

Wesley Vogel
07-10-2005, 01:25 AM
You have malware.

wkssvc.exe is part of Exploit.Win32.Tazy
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453082722

[[Upon execution, this worm drops a copy of itself in the Windows System
folder as the file WKSSVC.EXE and NTSUBSYS.EXE. It also drops RDRIV.SYS,
which is detected by Trend Micro as TROJ_ROOTKIT.E, in the same folder.]]
TREND MICRO - Security Information: WORM_SDBOT.BGE
http://yu.trendmicro-europe.com/enterprise/vinfo/encyclopedia.php?LYstr=VMAINDATA&vNav=3&VName=WORM_SDBOT.BGE



--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:77C6CED5-72EE-4ADC-B974-3110DDFB4E5A@microsoft.com,
Cathy Compass <Cathy Compass@discussions.microsoft.com> hunted and pecked:
> I constantly get this pop up to send or don't send an error report. I
> don't know what it is, should I delete it in Explorer. Should I
> reinstall? It is driving us nuts

Treeman
07-10-2005, 01:25 AM
Cathy,
If you Google this 'wkssvc.exe' (http://www.google.com/) you'll find
the results lead to many sites that let you post HiJack This logfiles,
for Trojan & Malware removal.
Look around here for your wkssvc.exe problem, and ask for help. 'Geeks
To Go' (http://www.geekstogo.com/)
Best,
Treeman


--
Treeman


------------------------------------------------------------------------
Treeman's Profile: http://www.msusenet.com/member.php?userid=1260
View this thread: http://www.msusenet.com/t-1870535349


wkssvc.exe