winsvc.exe is a mass-mailing worm W32.Mytob.KR@mm. winsvc.exe opens a back door on TCP port 43287. winsvc.exe tries to terminate antiviral programs installed on a user computer. Related files: %System%\winsvc.exe Adds the value: "WINDOWS SVC" = "winsvc.exe" to the Windows startup registry keys. More info: http://securityresponse.symantec.com/avc... Removal: Kill winsvc.exe process and remove winsvc.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.