26th February, 2004
New items
- 51
- U - bca (bca.exe)
-
X - bin32hpu (ppstub.exe)
-
? - Bridge (rundll32.exe ...Bridge.dll)
-
X - ControlPanel (rundll32 internat.dll,LoadKeyboardProfile)
-
X - defragm_check (defragment.exe)
-
U - Devices (olesvr.exe)
-
X - Dial22 or Dial33 (dlm.exe)
-
U - Dialgo SDK (PhoneAnswer.exe)
-
X - Display Drivers (cssrs.exe)
-
N - DoUWantIt (duwi.exe)
-
X - f~a (ra32.exe)
-
X - FreeMP3download (rundll32.exe MSA64CHK.DLL,DllMostrar)
-
X - Frsk (frsk.exe)
-
X - ICQ Net (winlogon.exe)
-
X - Image (rundll32 image.dll,Install)
-
X - LoadHTML (rundll32.exe mshtmpre.dll,MShtmpre)
-
U - Login (winlog.exe)
-
U - LiquidView (lviewj.exe)
-
? - msci (mcinfo.exe)
-
X - msconfig (msconfig.exe)
-
X - MSInfo (msinfo.exe)
-
X - MSprotect.exe (MSprotect.exe)
-
X - MSUpdate (wupd.exe)
-
X - NetReach (nrcheck.exe)
-
X - PCHEasySearch (STUpdate.exe)
-
X - PrinterSpool (...\RESTORE.EXE ...\SPOOL.EXE)
-
X - PSD Tools Channel (ChannelUp.exe)
-
X - qbotd (<filename>)
-
X - Quicktlme (ru.exe)
-
X - Recommended Hotfix - {0421701D-CF13-4E70-ADF0-45A953E7CB8B} (RH.DLL)
-
? - S3Mon (S3Mon.exe)
-
X - SaveDate (SaveStartDate.Exe)
-
X - Service (<trojan filename>)
-
X - Services Controller (lsassa.exe)
-
? - SmWizard (SmWizard.exe)
-
X - SSL (svchost.exe)
-
X - Symantec Configuration Loader (ccApp32.exe)
-
X - syscm (Syscm.exe)
-
X - sysmon (sysmon.exe)
-
U - System_Messages (pprsen.exe)
-
? - ttasq (ttasq.exe)
-
X - TV Media (Tvm.exe)
-
U - WashAndGo - Cleanup of old Backupfiles (checker.exe)
-
X - Windows Internet Protocol (winproc32.exe)
-
X - Windows Runtime Help (win32hlp.exe or WinRunHelp.wrh)
-
X - Windows Services Host (svchost.exe)
-
U - Window Washer (wwDisp.exe)
-
X - WinEssential (keyword.exe)
-
X - WinFX (cssrs.exe)
-
N - xswin (xswin.exe)
-
X - zzb (zzb.exe)
Changed items
- 4
- ImgIcon - status (U) corrected
- Iomega Disk Icons or Iomega Drive Icons - status (U) corrected
- Updmgr - status (X) and description changed
- ZipDisk Icons - status (U) corrected
19th February, 2004
New items
- 28
- X - (Default) (NOTEPAD.exe)
-
? - 39ELTFH25Z8SKF (Ezg1q5.exe)
-
U - Anti-Trojan-Watch (ATWatch.exe)
-
N - atitray or AtiTrayTools (atitray.exe)
-
U - AT-Watch (ATWatch.exe)
-
X - au.exe (au.exe)
-
Y - AVG7_Run (avgw.exe)
-
X - Config Loader for Microsoft Windows (mwincfg32.exe)
-
X - Crusty (dmcpl.exe)
-
U - Customizer2000 (logon.exe)
-
X - Delete Me (worm.exe)
-
U - gameutil.exe (gameutil.exe)
-
? - huhdir (huhdir.exe)
-
U - InstantDrive (InstantDrive.exe)
-
X - IP Stack (ipstack.exe)
-
U - iwctrl (iwctrl.exe)
-
X - msgsvr32 (msgsrv32.exe)
-
N - Redline Taskbar (taskbar.exe)
-
? - rundll32 (RunDLL32.exe irprops.cpl,BluetoothAuthenticationAgent)
-
N - Rundll32 cmicnfg (Rundll32 cmicnfg.cpl,CMICtrlWnd)
-
X - Service (services.exe)
-
? - SISAM10M (SISAM10M.exe)
-
N - Taskbar (taskbar.exe)
-
X - Tencent QQ (Rund1132.exe qq.dll,Rundll32)
-
X - tmax (pupdate.exe)
-
X - updater32 (winload32.exe)
-
? - voowsmcr (huhdir.exe)
-
X - winkernel32 (wWin32.com)
Changed items
- 2
- inetcntrl - status (U) and description changed
- Reboot - status (N) and description changed
12th February, 2004
New items
- 17
- X - Gremlin (intrenat.exe)
-
X - KasperskyAv (kaspersky.exe)
-
X - KernelFaultChk (sms.exe)
-
X - kfienq (masbl.bat)
-
X - load32 (1111a.exe)
-
X - Microsoft DirectX (Spoolserv.exe)
-
X - NeroCheck (regedit.exe)
-
? - PCRecSA (PCRecSA.exe)
-
X - rundl332 (math.exe ...pluged.exe)
-
X - rundll32 (csrss.exe)
-
X - system. (system..exe)
-
X - system... (system...exe)
-
N - Updmgr (updmgr.exe)
-
X - Windows DLL Loader (RUNDLL16.EXE)
-
? - xicon (xicon.exe)
-
? - Xpagent (xpagent.exe)
-
? - Xpclient (xpclient.exe)
Changed items
- 1
- RegShave - description updated
5th February, 2004
New items
- 41
- X - Dsi (dp-******.exe)
-
U - E_S23 (E_SICN03.exe)
-
X - eZulaMain (eZulaMain.exe)
-
N - Game Device (JOYUPDRV.EXE)
-
N - HP Display Settings (hpdisply.exe)
-
X - IEXPLORE (iexplore.exe)
-
X - load32 (l32x.exe)
-
X - Microsoft Movie Maker (Mmaker.exe)
-
X - MicrosoftWindows (winmgnt.exe)
-
X - MSConfig45 (MSConfig45.exe)
-
N - MSNIA (MSNIASVC.EXE)
-
X - Msstart (msstart.exe)
-
X - navman_20 (sysnav32.exe)
-
? - NDSTray (NDSTray.exe)
-
X - OLE (<filename>)
-
X - olehelp (Olehelp.exe)
-
X - Online Service (svchost.exe)
-
X - Osa32 (NTOSA32.exe)
-
N - Pcsv (pcsvc.exe)
-
? - PestPatrolCL (PestPatrolCL.exe)
-
? - PmProxy (PmProxy.exe)
-
X - RabbitWannaHome (rabbit.exe)
-
? - RenolB (ib.exe)
-
X - rundll32 (rundll32.exe)
-
U - SimpLite-MSN (SimpLite-MSN.exe)
-
N - SiSAudio (MP_S3.exe)
-
N - SMToolbar (SMToolbar.exe)
-
X - sncntr (sncntr.exe)
-
U - Spykiller (Spykiller.exe)
-
U - ssmmgr (ssmmgr.exe)
-
X - system (outlook.exe)
-
X - SystemChecker (Syschk.exe)
-
X - sysu (sysu.exe)
-
X - TaskMon (taskmon.exe)
-
U - TouchED (TouchED.exe)
-
? - Update TUT (WiseUpdt.exe)
-
U - VOBID (InstantDrive.exe)
-
X - wdwctrl (wdwctrl.exe)
-
X - Windows mangement (winlogonn.exe)
-
X - windows shellext.32 (mschost.exe)
-
Y - ZoneAlarm Plus (zaplus.exe)
NOTE: there were more than 41 new items but a cut & paste edit went AWOL
Changed items
- 4
- IEDriver - added "xplore.exe" as an alternative command
-
RAMASST - status (U) and description changed
-
shicoxp - status (N) and description changed
-
Version - identified as JRAUN adware, "manage.exe" added as an alternative command