Re: Foreign language characters in some XP dialogues

Note: The wmiprvse.exe file is located in the c:\windows\System32 folder. In
other cases, wmiprvse.exe is a virus, spyware, trojan or worm! Check this
with Security Task Manager.

Added info and reading:
http://www.google.com/search?hl=en&q=wmiprvse&btnG=Google+Search


--

All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com


"T. Waters" <@$%$%#^@jdjgkl.com> wrote in message
news:OHIeRhdWFHA.1152@xxxxxxxxxxxxxxxxxxxxxxx
> As I mentioned, you are not the first person I have heard of being
> infected
> by Czech pranksters.
> Do a Google search for "wmiprvse" and you will find a lot of sites.
> This one mentions how to distinguish the genuine System File wmiprvse from
> malware imitators.
> http://www.iamnotageek.com/a/wmiprvse.exe.php
>
>
>
> katman999 wrote:
>> Torgeir,
>> Again, thanks for the rapid response.
>>
>> The PC already has SP2 applied.
>>
>> I'm beginning to believe that the PC has been infected some new
>> trojan/virus as there is a process running which I'm unable to kill
>> (wmiprvse.exe). This does not show up under Task Manager, but is
>> visible under Sysinternals 'Process Explorer' program. Although
>> logged on as administrator, it says "access denied". Sophos suggests
>> that this is a worm variant that can be fairly easily removed, but
>> none of the online scanners detect anything at all.
>>
>> Meanwhile, more and more of the XP dialogues are changing into the
>> strange foreign language, and even though I've disabled MSN
>> Messenger, if the PC is connected to the internet, it receives loads
>> of strange MSN messages with peculiar content (anything from
>> "americans are 'Sh1t'", to something about 'arabs will win' plus
>> other messages in the strange foreign language that I don't
>> understand).
>>
>> It looks as if whatever is the cause has dropped a Remote Admin Tool
>> into
>> the PC, allowing it control whenever the PC is online.
>>
>> Once again, any help you can provide would be gratefully accepted. I'm
>> usually pretty good at cleaning out PC's of malware, but this one is
>> giving me serious headaches.
>>
>> Regards,
>> Dave.
>
>
>


.

Relevant Pages

  • Re: What is the difference between a worm and a trojan ?
    ... I know the difference between a virus and a trojan. ... >> difference between a worm and a trojan? ... > host system, which will then in turn attempt to infect other systems, etc., ad ...
    (comp.security.misc)
  • Re: What is the difference between a worm and a trojan ?
    ... pmeister2@lycos.com (Peter Meister) wrote: ... I know the difference between a virus and a trojan. ... best described as a "worm". ...
    (comp.security.misc)
  • Re: Cheney vs Obama
    ... that I read in that time period. ... either you or someone else posting to this thread has a worm or ... trojan on your box." ... trojans, viruses, attachments, or scripts of any kind. ...
    (rec.music.beatles)
  • Re: Cheney vs Obama
    ... don't positively know for a fact that nobody else hasn't had the ... Just like that gasbag Dale, ... either you or someone else posting to this thread has a worm or ... trojan on your box." ...
    (rec.music.beatles)
  • Re: Ending the Worm process??
    ... CTRL-ALT-DELETE to bring up the Task Manager. ... It doesn't remove the worm. ... W32.Blaster.Worm patch is available here:- ... Internet to obtain the patch, definitions, or removal tool before the worm ...
    (microsoft.public.windowsxp.security_admin)