How to remove winserv.exe

winserv.exe

The module winserv.exe has been detected as Trojan.Sabsik

winserv.exe
Product Name:

System

Company Name:

tox

MD5: 58d727e1cc2aca5137e4496a34b697cd
Size: 10 MB
First Published: 2025-10-05 23:01:19 (6 months ago)
Latest Published: 2025-10-05 23:01:21 (6 months ago)
Status: Trojan.Sabsik (on last analysis)
Analysis Date: 2025-10-05 23:01:21 (6 months ago)
%commonappdata%
%commonappdata%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0077b96c

PE Sections:

Name Size of data MD5
.tls 10560512 4e218ae9a13d5afad79ca6df1e51a902
.rsrc 92160 64ab199fce033650bbe20cf75c3e3597
.idata 22528 46c8ceb8f393fdd5b905455c1e58401f

More information:

Download GridinSoft Anti-Malware - Removal tool for winserv.exe