Internet Information Services IIs - spyware?

[Steve789]

In this case, Visual Studio is using it as part of a developmental framework...same as Visual Studio no doubt installed the Microsoft .NET Framework package which runs its own services.

This is a common thing for it to be installed for development, and IIs or Apache shouldn't normally be run on a Client machine - they were designed for use as a server, and servers don't browse the web.

Quote from Luto:

Unfortunately IIS gets installed probably too much. It is not spyware but a service used at first by Frontpage and then later by Office.

For the typical person disable it and the indexing service and the MS office in the startup.

MSconfig and regedit are your best tools.

--cheers

 

[taigong]

Quote from Steve789:

This is a virus (most likely a self replicating worm) , that changes its identity (filename) everytime you start your computer.

Download a trial version of norton antivirus ( www.symantec.com ), update it with the latest virus definitions and then clean it off your system.

A lot of these newer worms have built in SMTP engines to start mass emailing people this virus from Your computer... you can have your ISP shut off if its not taken care of.

Steve,

Thanks for your info.

That makes a lot of sense--I definitely noticed a lot of "Delivery notification: delivery has failed" messages in my mail box, which I knew nothing about. I will definitely try symantec's solution.


Could you explain what you mean by "...have your ISP shut off if its not taken care of"? Call my cable company (I use cable modem and tell them to shut off some SMTP service on my account? Or disable some function in my Outlook options?


Thanks again.

tc

 

[taigong]

Quote from j_medved:

Taigong - those EXE's that you are finding are almost certainly spyware. Some spyware randomly name their EXEs and what you are showing definitely looks like such names. Get and run the spyware detection software:

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

SpyBot
http://www.safer-networking.org/

Thanks Jerry for your reply. I use the above 2 programs regularly. but somehow they fail to clean up that malicious process.

 

[j_medved]

1) make sure that you get updates in both of those programs since the signatures for the various spyware change regularly

2) maybe a virus, not spyware as was mentioned in another post - make sure that the virus definitions in your anti-virus software are up to date.

3) Locate the files on your hard drive, right click on them and select Properties and see if that gives a better clue as to what they are

 

[bungrider]

word. great advice.. thx for all the info.

IIs hung during uninstall. had to restore from clean HD image to get rid of the $#*!. oh well.

-b