Are These Valid Win2k Files?

THESE FILES HAVE REQUESTED ACCESS THROUGH MY ZONE ALARM FIREWALL AND I JUST WONDERED IF THEY REQUIRED ACCESS:

C:\WINNT\system32\SERVICES.EXE

C:\WINNT\system32\Winkvo.exe

ARE THEY LEGITIMATE WINDOWS FILES?

 

Hi first file services.exe is ok .Do not know anything about the second No hits for it on google. You could right click on this file and check its properties. See if you can see what program it is associated with. Until you know use caution run an AV and check for Mal-ware( use ada-ware)

 

Not good. Probably a Klez infection. From TrendMicro

 

PHANN

i see a vo. wink on this site .... but i have No Idea what the page is about!

as someone already stated, Winkvo.exe just is not turning up any hits on search engines, besides what i found above



mark

 

Newt is correct, you have a virus PHANN. It's the KLEZ, as indicated and I found out long ago that Google will find hits for it but you must enter WINK VIRUS for the parameter. Go figure.

Try one of the free on-line scans:

HOUSECALL http://housecall.antivirus.com/ (free scan)

SYMANTEC http://security2.norton.com/ssc/home.asp?langid=ie&venid=sym&plfid=23&pkj=QRPSFCSGFZVDTPSOERZ (free scan)

GRISOFT http://www.grisoft.com/html/us_index.htm (free AV software and updates)

TROJANS:

TAUSCAN http://www.agnitum.com/download/ (free trial)

PANDA http://www.pandasoftware.com/ (free scan)

VIRUS REMOVAL TOOLS: http://securityresponse.symantec.com/avcenter/tools.list.html (free downloads for specific needs)

 

thanks

Thank you all for your help. Since I wasn't able to find anything on Google either, I turned to this forum. So much knowledge! I think you are right about the virus. I will take care of it!

Thanks again,
Pat

 

In general and as noted on the TrendMicro link, ANY file named Wink*.exe, where the * is anything at all, is probably Klez. So, Winkvo.exe is probably Klez.