PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.


Match #1

wins.exe (wins)

Percentage of recently scanned PC's with this process running: 0.02%
Average CPU use for this program: 0%
Average RAM for this program: 6 MB


PC Pitstop Analysis

wins.exe - *CHECK THE PATH* %System%\Wins.exe is the W32/Discoball.Worm. Wins.exe in Windows 2000/2003 is the Wins Service.


Recommendation

Win Patrol

wins.exe is required by third-party software or hardware and should not disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, wins.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Windows
File name contains:\System32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called wins.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
wins.exe> 20
#MD5Size
10xd61048b7fff18d700a8420ec01b39121151312 bytes
20x9ae7ee0e267c5d59ab4763013f803efb146192 bytes
30x78d39dedbbadd84706950c549b17c7cd145168 bytes
40x8cfd1a98877269074c9fad3254038456150528 bytes
50xade03fd9c5886d57b0d9ac7c002ed72a150528 bytes
60x09abd15ace7aad840f9afe7a6846f3d1145168 bytes
70x2f26e194b1b6010f061d0e2ab78fcdd3150528 bytes
80xaa9a8c62870505fe627fffb8e9989b6e144896 bytes
90xcbda8495167f329a863446f1e50a3a59144896 bytes
100xd37bf8a0c9814c94b3e4ad85d168f915150528 bytes
110x9ec71720804b2893257d2cce8cee2506150528 bytes
120x6e0867fba9f957dc281d6abd1c3252fe145168 bytes
130x6f4dfd1ef3ef8df565b1205287db2c3b150528 bytes
140x861d0c24badacd49d58a4ce9a8cb9470151312 bytes
150xb4f543e70974921a424dc9ea8db42270150528 bytes
160x5598613885e308ff633bd39decee8aab150528 bytes
170x9186b1ffc9acbebe3ad2acd56cfe7ccc144896 bytes
180xd545bd303ba88d7e1436b57c79eaf99c145168 bytes
190xcf738167a0d95d62332351906311dfbb150528 bytes
200x3b25cd12fea3e657e869832857d94fc3150528 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. wins.exe (wins) has been seen on 0.02% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 6 MB. The average CPU load for this program was 0%.


Detailed Description and/or Removal Instructions

http://www.bleepingcomputer.com/startups/wins.exe-3317.html


Match #2

wins.exe ((read))

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

wins.exe - *CHECK THE PATH* %System%\Wins.exe is the W32/Discoball.Worm. Wins.exe in Windows 2000/2003 is the Wins Service.


Recommendation

CA AntiVirus

wins.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

wins.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, wins.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

File name contains:\System

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called wins.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
wins.exe1
#MD5Size
10x88acece62d0ddcb90b5ddabd7d57136166560 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.