Possible Virus – SERVICE.EXE

While many programs may install a file called SERVICE.EXE, the most common at the time of this writing was a trojan related to the Trino trojan. Two versions of service.exe are making the rounds and are used to launch distributed denial of service attacks. A technical description of how these files work is available at http://www.cert.org/incident_notes/IN-2000-01.html. Removal information for W32.DoS.Trinoo can be found at http://securityresponse.symantec.com/avcenter/venc/data/w32.dos.trinoo.html.

Another instance of SERVICE.EXE isntalls with the Worm_raleka.b. Clean up instructions can be found at http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_RALEKA.B&VSect;=T.

Again, there may be programs called "Service.exe" that are not a virus. To be safe, however, we'd strongly recommend running an up to date virus scanner on your system.

  • Virus
  • Remove