Timeserver.exe

QlimaxUK · 3 Jul 2013 at 20:02

anyone know whats causing this? noticed it a few days ago it seems to be a windows task if I delete (just send to bin) it gives me a 'program has stopped working error on startup' so I restored it I have done a virus scan on it and found nothing and a spyware scans dosn't find anything and google dosn't give much info on the IP it uses so what is it?

QlimaxUK · 3 Jul 2013 at 20:28

Think I disabled it now, I found this in services with no description, one thing thought it points to time-svc.exe and not timeserver.exe

QlimaxUK · 2 Sep 2013 at 17:04

Got a new one... posting here to save making new thread, seems like the same kind of thing..

This time its applaunch.exe its always in SYN_SENT, if I end the task it opens back up so I can't delete it, but this files seems to be part of .NET framework folder: C:\Windows\Microsoft.NET\Framework\v2.0.50727

what should I do?

QlimaxUK · 3 Sep 2013 at 20:54

well I can't delete it under safemode, not even a DOS delete works..

Avast and Spybot S&D don't find anything, what else could I use to scan it?

QlimaxUK · 4 Sep 2013 at 21:18

GOT IT! I installed Malwarebytes and did a scan, it didn't flag the applauncher.exe but after removing all from the list the exe has closed and the IP has gone from CMD, so maybe some malware was using applauncher to create a connection?