What is Winser.exe

I have a running process called winser.exe I have tried to find more informatio on the process but my searches do not provide information on it. When I do a search I get this Polish and Russian website. unfortunately I do not get any information on this process. I have used TDS trojan remover and Panda Virus remover they do not state that the process is virus or a trojan. I also ran lavasoft spyware remover it does state it is spyware. I have gone to paks portal and answers that work website and they do not list it. can someone please tell me what this process is

Thank you very much

 

this is what Symantec has to say about it....


http://securityresponse.symantec.com/avcenter/venc/data/backdoor.evilbot.c.html

 

Thanks for all the help but still

Hello everybody. I have followed all your advise and have followed the links posted here. I am confused though.

I am getting responses that lead towards winserv.exe

My process does not display the v at the end of winser. I have downloaded all the virus definitions and I also have donwloaded the lastest trojan definitions from TDS trojan remover. I have scanned my computer with four different programs still they do not detect winser.exe
what ever this program is or does still a mystery to me. It is a process that runs under the system and not the user. I found the file under windows/system32/winser.exe
I use windows xp pro.
I will run a online virus scan soon after this posting

Thank you again

 

just to make sure

xflat I did what you suggested just to make sure. Maybe the trojan might have changed name. I went to the registry and the winserv.exe is not there. I dont think we are talking about the same process. I have the best trojan remover in the market. I am not making this claim when I downloaded TDS trojan remover it had been compared to many programs that do the same thing. TDS was way ahead of anybody else including the cleaner. TDS does not detect this program to be a trojan neither does panda which by the way is updated as of today.
I have also gone to my other computer and the same process is running. I am going to check several other computers to see if the process is also present there.

The process is not called winserv.exe but winser.exe

Thank you very much for your help.

 

Running

I am running internet explorer 6 with all the possible updates you can get from microsoft. including sp1

 

I have logged on to some sites in Europe but I dont recall downloading anything that might be suspicious or not trusted.
I would like to know how to remove it from my computer. Or even better what the heck is the purpose of it.


Thanks.

 

thank you

xflat thank you very much. I will follow up on your suggestion.
Here is what I have found out so far.
I suspect that this winser.exe was downloaded as a package with another program. This winser.exe is found in folder wndows/system32/winser.exe I went into that folder and changed the name of the file to winser.old thus disabling it.
at first it gave no indication of creating any problems. I even manage to kill the process (something I was not able to do prior the renaming of winser.exe to winser.old When I rebooted the computer thats when all hell broke loose. about 24 dlls could not start properly including (sdaemon,ese. and winwd.exe)
this latter two being processes that I know have to do with this program called pc security from tropical software. Amazingly enough this program stopped working without winser.exe being available. I will uninstall this software and see what happens. I will keep you posted.

thanks again xflat

 

Just as I figured

I uninstalled pc security and presto all the processes mentioned above were gone. Here's the problem though. I was not able to log on to the internet without it. My modem connected which tells me I connected to my isp but internet explorer was not able to load the page. which tells me that xflat is right that darm thing is causing problems with internet explorer . Here is another twist to this program. it is also blocking opera 7 from loading the pages. I installed the program again and both browsers are working again. This is definately going to suck today.

 

Thank you

xflat I appreciate what you are trying to do. I really do. I also found out another thing about this process it somehow makes the whole connection to the internet not work. I mean I cannot ping from the commmand prompt or telnet to the routers at school. My connection icon states that I am connected to the internet at 49.2 kbps but nothing can go through this connection. When I installed the program again I was back up and running. I have emailed tropical software I will post what they said.

Thank you again xflat for all your help and suggestions

 

FInally

Just in case somebody else has the same problem. I found the cure.

I uninstalled the pc security program and sure enough my connection stopped working again. so I ran this program found at the following link this programs claims to fix the winsock connections. Sure enough this program found a dll that was blocking my connection the dll is called netlock.dll this one here was the whole cause of my problems after this dll was removed my connection was established.

this program also claims to fix the winsock after some programs or plug in has been deleted and you have lost your connection

http://www.cexx.org/lspfix.htm

Now that dreaded process winser.exe sdameon, and winwd.exe are no longer on my system

 

Re: Consider the Firestorm started...

Hi,

If running Windows 98, you can use IEradicator: http://www.litePC.com/ - it works really well!

As a result of using that, I bought 98Lite, and I consider it to be one of the best Windows 98 utilties ever made. My web browsing PC runs Windows 98SE, and after buying 98Lite I wiped the 98SE partition, copied the 98SE cabs into a subdirectory, installed it clean, patched it, installed current drivers, etc.

Once I had everything the way I wanted it, I ran 98Lite, told it to reconfigure Windows with its "98Micro" option, which rips out all traces of IE, Outlook Express, etc. - basically all MS Internet-related software and the links between it and the OS that slow things down.

Then I installed Opera and Eudora, and it's been humming along happily (and quickly!) ever since. The speed difference was amazing, and it has kept me from having to replace my old K6-2. All I use it for is Web access, email and occasional word processing (using OpenOffice), so having state of the art hardware isn't necessary.

I have had only a few sites that I couldn't access because they were heavily IE-centric... I just sent a polite email message to the webmaster email address indicating the problem and telling them since I didn't use IE and had no plans on doing so, I'd gone elsewhere .

They just released a new version for Windows 2000 and XP called 2000-XPlite: http://www.litepc.com/xplite.html

I'm going to buy that, too, and do the same thing for my Windows 2000 PC

Regards,

dj