Trojan winservices.exe

Re@per February 4, 2009 at 15:39:32
Specs: Windows XP
Hello, i have problem, i got a trojan through skype(my little dumbass sister accepted Now this file among with bunch of .exe files like 753.exe; 975.exe; etc. are appearing in my C:\Documents and Settings\*user\Local Settings\Temp folder, i tried to simply delete them, but after a while they are back, also there is this winservices.exe process in my msconfig startup list, it shows that it starts here: C:\RECYCLER\S-1-5-21-1031236874-7520227523-824570870-0016\winservices.exe, but i don't have a folder named RECYCLER(hidden folders/files ON) on local :C\, i unticked it restarted pc, but it still was ticked in msconfig.
I searched the registry for: "lady_" and found: C:\DOCUME~1\Re@per\LOCALS~1\Temp\, DELETED IT

next for: "winservices" and found:C:\RECYCLER\S-1-5-21-1031236974-7520227523-824570870-0016\winservices.exe, DELETED THAT AS WELL

After i restart pc they are back, in the registry and C:\...\Temp folder

I use ProcessGuard to block those little .exe files (753.exe; 975.exe; etc.) couse it seems if they start, they are starting to send spam emails from my pc through MS OUTLOOK(thank god i don't use it), Norton showed messages like: "your email to **@**.com has not been sent, spam detected" or something like that u get the idea.

I have tried soft like SpyHunter; Spyware Doctor; Malwarebytes' Anti-Malware, nothing worked, i'm quite desperate here :(

Please if anyone has a solution HELP!

See More: Trojan winservices.exe

Report •

February 6, 2009 at 10:44:37
I have been fighting the same problem for days. I went to the store and bought Norton 2009 and it didn't detect it for a while, I even gave them a call yesterday, a waste of time. However, in their latest update yesterday, it finally detected the trojan horse when I searched the system in safe mode. When I rebooted today it found the winservices.exe virus, it found it in the registry under:
HKEY_USERS\S-1-5-21-842925246-6888789844-839522115-004\Software\Microsoft\Windows\CurrentVersion\Run->Windows Service Help
It seems to be gone in the last few minutes.
BTW, I have no idea how I got this into my system!

Report •

February 8, 2009 at 08:23:12
Tnx 4 help, but i got so pisssed at the trojan, so i formated local C:/ and re-installed windows, lost a huge collection of movies, soft & stuff but at least now i have a clean PC :)

Report •

February 10, 2009 at 11:51:27
I had the exact same problem and tried everything. Nothing worked until today. I updated McAfee today and scanned, and it found and quarantined 2 viruses with that name and 112 trojans. I did not even have to run it in Safe Mode for it to work.

Report •

Related Solutions

February 17, 2009 at 21:22:12
I found out how it got into my system. I had already formatted my hard drive and the worm was still there. It turns out that it was brought by another worm that copies itself to external drives, such as usb sticks or external hard drives. Well, I had already checked those, and did not occur to me to check my digital camera, and there it was. That is how it infected my freshly installed windows. I think that I got it originally from my mother in law putting her usb stick on my system. So lesson learnt!

Report •

Ask Question