Re: wintbp.exe

Yes it is known as WINTBP virus and you need to apply the latest MS patch MS05-039 and MS05-041 to protect your server against this virus. 

However you need to remove the virus from your servers if they are already infected. Here is the procedure to remove the virus.

1.	Open Task Manager and end the process(es) called “WINTBP.EXE”

2.	Open the Registry editor and delete the following key “HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN\WINTBP.exe

3.	Go to the WINDOWS\SYSTEM32 directory and delete the WINTBP.exe file.

4.	Also delete any files that begin with Axxxx.exe (the x is a number) with a current date in the system32 directory. 

5.	Run Microsoft patches for windows 2000 KB899588 and KB899591 and reboot the systems.