How to remove the inetsrv virus

Most antivirus programs identify inetsrv.exe as malware—for example TrendMicro identifies it as WORM_SMALL.BIX or WORM_RESIK.A, and Microsoft identifies it as Worm:Win32/Small or Worm:Win32/Small!69D0.

The inetsrv.exe file is a software component of Internet Information Services by Microsoft. inetsrv.exe is an application for Internet Information Services in Windows XP. It interfaces IIS with the internet connection, allowing it to communicate with the web server. It has been released with every version of Windows except Windows XP Home. Although it is a valid file, it should be noted that many malware products disguise themselves as inetsrv.exe.

InetSrv stands for Internet Server

The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.

Click to Run a Free Virus Scan for the inetsrv.exe malware

Inetsrv.exe file information

The inetsrv.exe process does not give any clues as to the producer or the name of the associated software; instead, only the following file properties can be determined.

Description: Inetsrv.exe is not essential for Windows and will often cause problems. The inetsrv.exe file is located in the C:\Windows\System32 folder. Known file sizes on Windows 8/7/XP are 24,576 bytes (62% of all occurrences), 45,056 bytes, 24,835 bytes or 40,960 bytes. 
The program has no file description. It is not a Windows core file. The program has no visible window. The file is an unknown file in the Windows folder. The program starts when Windows starts (see Registry key: MACHINE\Run). Therefore the technical security rating is 77% dangerous, however you should also read the user reviews.

Recommended: Identify inetsrv.exe related errors

Important: You should check the inetsrv.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

inetsrv.exe froms part of DRIVEINFO.EXE virus infection
  Orza   (further information)
This executeble was slowing down my computer. It is in the trusted folder (system32) but its identified as a virus: "Worm Generic.QY". I didnt remember seeing this one before in taskmanager so i was kinda suspicious. I think, if this one is new to you to, you should check it out.
  Bruce Scott  
Its spyware
It has to do with IIS or a program that depends on it, perhaps SQL server
  Tim Evans  

Summary: Average user rating of inetsrv.exe: based on 5 votes with 4 user comments. One user thinks inetsrv.exe is essential for Windows or an installed application. One user thinks it's neither essential nor dangerous. 3 users think inetsrv.exe is dangerous and recommend removing it.

Do you have additional information? Help other users!
What do you know about inetsrv.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving inetsrv issues

A clean and tidy computer is the key requirement for avoiding problems with inetsrv. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off doing a repair of your installation, or in the case of Windows 8, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the inetsrv.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

inetsrv.exe [all]