|
| If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|||||||
|
|
Thread Tools | Display Modes |
|
#1
April 23rd 05, 11:04 AM
|
|||
|
|||
"wintis32.exe", what is it?
Zone Alarm continually tells me "wintis32.exe" is trying to access the
internet, I always deny it access. Searching PC for this file, it is hidden and located in: C:\Documents and Settings\Kenny Cargill\Local Settings\Temp. I have deleted it from there but it comes back after a restart! Have run AdAware, SpyBot, CounterSpy, AVG free and online virus scans. The IP address it points to is: 195.92.195.94  NS, I have tried "Whois" on that but don't really understandit and came up with nothing. Googling it only came up with this: http://www.google.co.uk/search?q=wintis32.exe&hl=en which appear to be forum posts in Spanish and I can't understand them. Have also searched MS site, nothing there. I am very suspicious of this, would like to know what it is and how to stop it coming back after deletion. Using XP Pro with SP2. Any help appreciated. -- Kenny Cargill 
|
| Ads |
|
#2
April 23rd 05, 11:32 AM
|
|||
|
|||
|
Hi Kenny,
If it looks like a duck, and acts like a duck...... Yes, it's a nasty. Clear the temp folder completely, and also the Temporary Internet Files. Then restart the system in Safe mode, follow the steps outlined he http://rickrogers.org/fixes.htm#trojan -- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Zone Alarm continually tells me "wintis32.exe" is trying to access the internet, I always deny it access. Searching PC for this file, it is hidden and located in: C:\Documents and Settings\Kenny Cargill\Local Settings\Temp. I have deleted it from there but it comes back after a restart! Have run AdAware, SpyBot, CounterSpy, AVG free and online virus scans. The IP address it points to is: 195.92.195.94 NS, I have tried "Whois" on that but don't reallyunderstand it and came up with nothing. Googling it only came up with this: http://www.google.co.uk/search?q=wintis32.exe&hl=en which appear to be forum posts in Spanish and I can't understand them. Have also searched MS site, nothing there. I am very suspicious of this, would like to know what it is and how to stop it coming back after deletion. Using XP Pro with SP2. Any help appreciated. -- Kenny Cargill
|
|
#3
April 23rd 05, 02:14 PM
|
|||
|
|||
|
Thanks for the reply, have followed your advice and it appears to be gone.
-- Kenny Cargill "Rick "Nutcase" Rogers" wrote in message .. . Hi Kenny, If it looks like a duck, and acts like a duck...... Yes, it's a nasty. Clear the temp folder completely, and also the Temporary Internet Files. Then restart the system in Safe mode, follow the steps outlined he http://rickrogers.org/fixes.htm#trojan -- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Zone Alarm continually tells me "wintis32.exe" is trying to access the internet, I always deny it access. Searching PC for this file, it is hidden and located in: C:\Documents and Settings\Kenny Cargill\Local Settings\Temp. I have deleted it from there but it comes back after a restart! Have run AdAware, SpyBot, CounterSpy, AVG free and online virus scans. The IP address it points to is: 195.92.195.94 NS, I have tried "Whois" on that but don't reallyunderstand it and came up with nothing. Googling it only came up with this: http://www.google.co.uk/search?q=wintis32.exe&hl=en which appear to be forum posts in Spanish and I can't understand them. Have also searched MS site, nothing there. I am very suspicious of this, would like to know what it is and how to stop it coming back after deletion. Using XP Pro with SP2. Any help appreciated. -- Kenny Cargill
|
|
#4
April 24th 05, 01:29 AM
|
|||
|
|||
|
-- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Thanks for the reply, have followed your advice and it appears to be gone. -- Kenny Cargill "Rick "Nutcase" Rogers" wrote in message .. . Hi Kenny, If it looks like a duck, and acts like a duck...... Yes, it's a nasty. Clear the temp folder completely, and also the Temporary Internet Files. Then restart the system in Safe mode, follow the steps outlined he http://rickrogers.org/fixes.htm#trojan -- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Zone Alarm continually tells me "wintis32.exe" is trying to access the internet, I always deny it access. Searching PC for this file, it is hidden and located in: C:\Documents and Settings\Kenny Cargill\Local Settings\Temp. I have deleted it from there but it comes back after a restart! Have run AdAware, SpyBot, CounterSpy, AVG free and online virus scans. The IP address it points to is: 195.92.195.94 NS, I have tried "Whois" on that but don't reallyunderstand it and came up with nothing. Googling it only came up with this: http://www.google.co.uk/search?q=wintis32.exe&hl=en which appear to be forum posts in Spanish and I can't understand them. Have also searched MS site, nothing there. I am very suspicious of this, would like to know what it is and how to stop it coming back after deletion. Using XP Pro with SP2. Any help appreciated. -- Kenny Cargill
|
|
#5
April 24th 05, 01:29 AM
|
|||
|
|||
|
No problem Kenny, glad to hear it helped.
-- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Thanks for the reply, have followed your advice and it appears to be gone. -- Kenny Cargill "Rick "Nutcase" Rogers" wrote in message .. . Hi Kenny, If it looks like a duck, and acts like a duck...... Yes, it's a nasty. Clear the temp folder completely, and also the Temporary Internet Files. Then restart the system in Safe mode, follow the steps outlined he http://rickrogers.org/fixes.htm#trojan -- Best of Luck, Rick Rogers, aka "Nutcase" - Microsoft MVP http://mvp.support.microsoft.com/ Associate Expert - WindowsXP Expert Zone www.microsoft.com/windowsxp/expertzone Windows help - www.rickrogers.org "Kenny" wrote in message ... Zone Alarm continually tells me "wintis32.exe" is trying to access the internet, I always deny it access. Searching PC for this file, it is hidden and located in: C:\Documents and Settings\Kenny Cargill\Local Settings\Temp. I have deleted it from there but it comes back after a restart! Have run AdAware, SpyBot, CounterSpy, AVG free and online virus scans. The IP address it points to is: 195.92.195.94 NS, I have tried "Whois" on that but don't reallyunderstand it and came up with nothing. Googling it only came up with this: http://www.google.co.uk/search?q=wintis32.exe&hl=en which appear to be forum posts in Spanish and I can't understand them. Have also searched MS site, nothing there. I am very suspicious of this, would like to know what it is and how to stop it coming back after deletion. Using XP Pro with SP2. Any help appreciated. -- Kenny Cargill
|
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
