Quote:
WinServices.worm
Overview
WinServices.worm is a mass mailing worm dropping its files in %SystemDir%. You can find more information at Symantec and TrendMicro.
Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Classification
Worm
Files
WinServices.exe, msc0nfig.jpe, netconfig{5}.xtr
Log references
Log 442
Privacy policy
No privacy policy available.
Detection
Bazooka Adware and Spyware Scanner detects WinServices.worm. Bazooka is freeware and detects spyware, adware, foistware, trojan horses, viruses, worms, etc. Read more »
Manual removal
Please follow the instructions below if you would like to remove WinServices.worm manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If WinServices.worm remains on your system after stepping through the removal instructions, please double-check by stepping through them again.
Start your computer in safe mode.
Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, delete the value called 'WinServices', if it exists.
Browse to the key:
'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, delete the value called 'WinServices', if it exists.
Exit the registry editor.
Start Windows Explorer and delete:
%SystemDir%\WinServices.exe
%SystemDir%\msc0nfig.jpe
%SystemDir%\netconfig{5}.xtr
Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Here's the link from Google: