windowsserverservice.exe - Dangerous
windowsserverservice.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
WindowsServerService.exe is W32.Degnax@mm.
W32.Degnax@mm is a mass-mailing worm that gathers email addresses from the compromised computer. It also spreads via network/mapped drives.
Related files:
%Windir%\security\logs\secure.dll
%Windir%\security\logs\svchost.exe
%Windir%\b.dll
%Windir%\readme.drv
%Windir%\HRDList.xls
%System%\WindowsServerService.exe
%System%\Real.dll
%Windir%\userinit.exe
%Windir%\security\logs\d.dll
%Windir%\security\logs\Scewin.txt
%Windir%\security\logs\System32.sys
%Windir%\help002.hlp
%Windir%\Scewin.txt
%Windir%\system32.sys
%System%\autodisk.sys
%System%\c.dll
%System%\e.dll
%System%\Express.ocx
%System%\winrun.dll
%System%\X360OutlookExpress.ocx
Kill the process WindowsServerService.exe and remove WindowsServerService.exe from Windows startup.