Multiple Programs – WECSVC.DLL

Wecsvc.dll is the Windows Vista Event Collector. Winrm.dll is the Windows Vista Remote Management service. These are required for event subscriptions, a new feature in Windows Vista. An Event Viewer allows a single computer to receive forwarded events matching a specific filter from multiple computers, like a log consolidation service. Using event subscriptions requires configuration on both ends, and you need to enable the Windows Remote Management (WinRM) and the Windows Event Collector (Wecsvc) services. You'll find more information at http://msdn2.microsoft.com/en-us/library/aa385776.aspx.

We also found instances of wecsvc.dll that were infected with Adware.Look2Me. This adware program can modify your registry, hijack web searches, update its own code and can generate popup ads. Additional background information on Adware.Look2Me can be found at http://sarc.com/avcenter/venc/data/adware.look2me.html. Additional information on Adware.Softomate can be found at http://vil.nai.com/vil/content/v_131114.htm.

If you have this instance of the file, we'd recommend removal using WinPatrol. First, kill it under Active Tasks then remove it from your IE Helpers. If running WinPatrol 8.x or later, right click the file then select "Delete file on Reboot". Finally, reboot your system.

Safe

Microsoft