Winkevn.exe

[ironforge]

My wife's laptop is running real slow..
went to the task manager and two processes were eating up a majority of the CPU cycles..

winlogin.exe

and

winkevn.exe


winlogin shouldn't be doing much after you login, right??
and i have never seen winkevn so am not sure what that is even all about...

anyone have a clue?? thanks..

[DVNT1]

I've never seen winkevn either (speaking of W2K anyway).

What's your OS?

[samwichse]

http://www.google.com/search?q=winke...oq=winkevn.exe

No where on google.com ???

You got me.

[ironforge]

Windows 2000 professional edition..
on a laptop..

I logged in safe mode as administrator.. and disabled the winkevn.exe service (which surprisingly was about the only service in the administrative tools with NO DESCRIPTION)

also in safe mode it seemed to be much more responsive.. (probably because the system wasn't near full cpu util)

anyway hopefully it runs better after disabling it.. if it does.. first thing i'm gonna do is delete that sucker off the hard disk and delete any relevant registry entries..

[ironforge]

any idea why winlogin.exe would suck up 80% cpu util?

[awwall]

Sounds like a result of the KLEZ worm. Seems KLEZ creates file, such as, WINK????.exe. See Symantec link below for details.

http://securityresponse.symantec.com...klez.e@mm.html

<aw>

Awwall is right

here is from symantec front page

Are you experiencing these symptoms with your computer?


When you start Norton AntiVirus, the program window briefly appears and then disappears.
You cannot run, install, or update Symantec products.
You received email notifying you that you are infected with the W32.Klez Virus.
You are seeing "out of memory" error messages.
Your computer stops responding during virus scans.
Your Internet connection is much slower than usual.
Your firewall software detects that "Wink???.exe" is accessing the Internet.
You see low disk space error messages.

removal tool


and update your anti virus!


JaYsin