hello,
i hope somebody can help me with this. i find this process running when i look in task manager and when i look it up on the internet it is reported as a virus, so i was wondering if someone could help me remove it. thank you in advance
pskelley
2007-02-23, 13:25
Welcome to the forum, since you have provided little information I can only tell you what I can see as the result of this: wintems.exe
If that is the infection you have, then you need to see this information:
http://www.processlibrary.com/directory/files/wintems/
wintems.exe is a process which is registered as the Trojan.W32.Mitglieder and Trojan.W32.BAGLE Trojans. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. It is a registered security risk
Here is the google on the item: http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLG,GGLG:2006-16,GGLG:en&q=wintems%2eexe+
Since we know that much, and I am still going by only what you said, you should also have this information.
One or more of the identified infections is a backdoor trojan.
This allows hackers to remotely control your computer, steal critical system information and Download and Execute files
I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.
Though the Trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:
(I can not attest to that fact at this point have no more information than you provided)
How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
http://www.dslreports.com/faq/10451
When Should I Format, How Should I Reinstall
http://www.dslreports.com/faq/10063
I have posted this warning to protect you, if you want me to look more at this situation you will need to follow these instructions:
"BEFORE you POST" -Preliminary Steps
http://forums.spybot.info/showthread.php?t=288
Please read and follow all instructions and post all required logs or reports, anything less will slow your process.
Use "Post Reply" to post the information in the instructions and stay in the same topic.
Please let us know what you have decided to do in your next post.
Thanks
This topic has been closed to prevent others with similar issues posting in it.
If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.