Latest updates for the Windows start-up programs database

29th October, 2009

New items - 207

• jmudkve.dll - X - rundll32.exe jmudkve.dll,mzrwkwf
• Windows SysNotify - X - mssecc.exe
• sys32_nov - X - sys32_nov.exe
• UltimateServices - X - ultsvcs.exe
• raidhost - X - raidhost.exe
• mserv - X - seres.exe
• svchost - X - svcst.exe
• Windows Rundll Center - X - msnsmgr.exe
• rnwabmig - X - rnwabmig.exe
• Configuration Loader - X - FILENAME.EXE
• Windows SystemDll - X - SYSTEMDLL.EXE
• SunJavaUpdateSched132 - X - jschd.exe
• Microsoft Driver Setup - X - w7services.exe
• Windows Upgrate Utility - X - winulty.exe
• WMI Service Client - X - wmispv.exe
• Sysanalysing - X - myrvc.exe
• Intel Physical Routine 1.2A - X - stnetlib.exe
• mset - X - svchost.exe
• CommonService - X - winup.exe
• NordBull - X - msa.exe
• afmsmsgs - X - afmsmsgs.exe
• f2install.exe - X - f2install.exe
• Windows Rundll Center - X - msmsgrs.exe
• AutoProtect - X - AutoProtect.vbs
• msclean - X - msvchost.exe
• Microsoft Update - X - wuamgrd16.exe
• Bittorrent - X - bittorrent.exe
• Ass and titties - X - CMD32.EXE
• tsx - X - regedlt.exe
• FU - X - FUvirus.exe
• Wind River Systems - X - vxworks.exe
• QnX - X - qnx.exe
• SunJava Updater v7 - X - javale.exe
• Sun Java Updater v7.4 - X - javawx.exe
• WinMenssage - X - winmaxy.exe
• WineWork - X - WineWork.exe
• win_[4 random char][4 random num] - X - [4 random char][4 random num].exe
• [3 random char]srv32 - X - [3 random char]srv.exe
• StartUpDate - X - [path to trojan]
• ShutdownWithoutLjiasvt.exe - X - [path to trojan]
• waults - X - waults.exe
• netview - X - netview.exe
• StartKey - X - msnmsie.exe
• Network Services - X - netsvacs.exe
• System Service Manager - X - norton.exe
• Windows Security Manager - X - svhost.exe
• MlCROSOFT FEnR - X - MlCROSOFT.EXE
• Configuration Loader - X - explore.exe
• Windows Management Instrumentations - X - winmg.exe
• Windows Update - X - explored.exe
• Andware Defence - X - Zsoft32.exe
• Video Process - X - ntsystm.exe
• filename process - X - Rundil16.exe
• huigezi - X - SP00LSV.EXE
• Generic Host Process for Win32 Service - X - rpchost.exe
• Microsoft - X - winnn.exe
• Postpatch - X - nvdes.exe
• Postdavatch - X - nvdas.exe
• msmsgss - X - [path to trojan]
• fsdsft - X - [path to backdoor]
• LetsRock - X - [path to trojan]
• Microsoft Windows Update - X - servcs.exe
• kgjdi27 - X - kgjdie27.exe
• Svost Loader - X - svost.exe
• WSock32 Protocol - X - wsock32p.exe
• MsMon32 - X - MsMon32b.exe
• Microsoft Winsock32 System - X - winsock32.exe
• Microsoft - X - symtea.exe
• Windows-Xdate - X - wuamclt32.exe
• Microsoft Helpdesk Side - X - mshelpdsk.exe
• Windows Logon Service - X - winlogoservice.exe
• svcdata.exe - X - svcdata.exe
• autorn - X - autorn.exe
• AASSKK2 - X - LSASS.EXE
• tserv - X - tserv.exe
• rsmb32 - X - rsmb32.exe
• mqadscp3 - X - mqadscp3.exe
• sserrvv - X - sserrvv.exe
• msupdtwiz - X - msupdtwiz.exe
• mswiiz32 - X - mswiiz32.exe
• mswiizz32 - X - mswiizz32.exe
• msserrv32 - X - msserrv32.exe
• cserv32 - X - cserv32.exe
• wupd32 - X - wupd.exe
• winntR1 - X - winntR1.exe
• winntR2 - X - winntR2.exe
• winnt2 - X - winnt2.exe
• winnt3 - X - winnt3.exe
• winnt4 - X - winnt4.exe
• winnt5 - X - winnt5.exe
• winnt6 - X - winnt6.exe
• Microsoft - X - MicrosoftCorporation.exe
• qktier - X - qktier.exe
• MicrosoftCorp - X - flashsplayer.exe
• MicrosoftNAPC - X - flashsplayer.exe
• MicrosoftCorp - X - javaw.exe
• MicrosoftNAPC - X - javaw.exe
• MicrosoftCorp - X - msnrmgs.exe
• MicrosoftNAPC - X - msnrmgs.exe
• MicrosoftCorp - X - regtray.exe
• MicrosoftNAPC - X - regtray.exe
• MicrosoftCorp - X - securebind.exe
• MicrosoftNAPC - X - securebind.exe
• MicrosoftCorp - X - sysdiag64.exe
• MicrosoftNAPC - X - sysdiag64.exe
• sysdiag64.exe - X - sysdiag64.exe
• MicrosoftCorp - X - traymgr.exe
• MicrosoftNAPC - X - traymgr.exe
• MicrosoftCorp - X - update.exe
• MicrosoftNAPC - X - update.exe
• MicrosoftCorp - X - wupdate.exe
• MicrosoftNAPC - X - wupdate.exe
• JavaTray - X - traymgr.exe
• Framework module library - X - infocard.exe
• Microsoft Msn Messenger - X - msmsgs.exe
• herjek - X - herjek.exe
• Captcha7 - X - rundll captcha.dll
• AdwareSpy - X - AdwareSpy4.exe
• Brave-Sentry - X - BraveSentry.exe
• AntivirusGold 5.1 - X - AntivirusGold 5.1.exe
• DrAntispy - X - DrAntispy.exe
• AntiSpyKit 5.2 - X - AntiSpyKit 5.2.exe
• AntiSpyKit 5.3 - X - AntiSpyKit 5.3.exe
• Antivirus 2009 - X - av2009.exe
• Windows Additional Guard - X - WI[random characters].exe
• Windows Guard Pro - X - WindowsGP.exe
• Ultimate System Guard - X - MainFAVProj.exe
• Antivirus Pro 2010 - X - AntivirusPro_2010.exe
• personalguard - X - personalguard.exe
• Proof Defender 2009 - X - pdfndr.exe
• Omega AntiVir - X - OM83b.exe
• Windows PC Defender - X - WP[random characters].exe
• [14 random numbers] - X - mradll.exe
• [14 random numbers] - X - rwg.exe
• HomeAV - X - homeav.exe
• smrtprt - X - smrtprt.exe
• Antivirus.exe - X - Antivirus.exe
• wscsvc32.exe - X - wscsvc32.exe
• CS - X - tsc.exe
• [32 random hex numbers] - X - tsc.exe
• TS - X - tsc.exe
• Windows Enterprise Defender - X - WindowsEDefender.exe
• PC Scout - X - pcscout.exe
• Active Security - X - asecurity.exe
• TRE AntiVirus - X - treav.exe
• SystemCop - X - SystemCop.exe
• QuickHealCleaner - X - QuickHealCleaner.exe
• SaveKeeper - X - SaveKeeper.exe
• SafetyKeeper - X - SafetyKeeper.exe
• SoftSafeness - X - SoftSafeness.exe
• TrustWarrior - X - TrustWarrior.exe
• SaveDefender - X - SaveDefender.exe
• SaveArmor - X - SaveArmor.exe
• SecurityFighter - X - SecurityFighter.exe
• SecuritySoldier - X - SecuritySoldier.exe
• SecureVeteran - X - SecureVeteran.exe
• SecureFighter - X - SecureFighter.exe
• SecureWarrior - X - SecureWarrior.exe
• TrustCop - X - TrustCop.exe
• SafeFighter - X - SafeFighter.exe
• TrustSoldier - X - TrustSoldier.exe
• TrustFighter - X - TrustFighter.exe
• SoftSoldier - X - SoftSoldier.exe
• SoftCop - X - SoftCop.exe
• AVScan - X - winav.exe
• AvScan - X - avscan.exe
• WinAntiSpyware 2006 - X - was6.exe
• WinAntiSpyware 2006 Free - X - was6.exe
• uwas6cw - X - uwas6cw.exe
• was6cw - X - was6cw.exe
• WinAntiSpyware 2007 Free - X - was7.exe
• was7cw - X - was7cw.exe
• ERS_Check - X - uwasers.exe
• uTorrent - N - uTorrent.exe
• uTorrent.exe - N - uTorrent.exe
• BitTorrent - N - bittorrent.exe
• bittorrent.exe - N - bittorrent.exe
• µTorrent - N - bittorrent.exe
• btdna - N - btdna.exe
• btdna.exe - N - btdna.exe
• DNA - N - btdna.exe
• Java(TM) Platform SE 6 - N - jusched.exe
• Java(TM) Platform SE 6 U* - N - jusched.exe
• ViStart - The Vista Start Menu - U - ViStart.exe
• VistaStartMenu - U - VistaStartMenu.exe
• Vista Start menu - U - VistaStartMenu.exe
• OpenDNS Update - U - OpenDNS Updater.exe
• desp2k - U - desp2k.exe
• Nowe Gadu-Gadu - N - gg.exe
• Duane Reade Insert Detect - ? - InsDetect.exe
• Tesco Insert Detect - ? - InsDetect.exe
• Boots Insert Detect - ? - InsDetect.exe
• Dixons Insert Detect - ? - InsDetect.exe
• readericon10 - ? - readericon10.exe
• BisonHK - ? - BisonHK.exe
• BsMnt - ? - BsMnt.exe
• SMSTray - U - SMSTray.exe
• MGSysCtrl - U - MGSysCtrl
• snp2uvc - ? - vsnp2uvc.exe
• CLMLServer for HP TouchSmart - ? - CLMLSvc.exe
• DVDAgent - ? - DVDAgent.exe
• TSMAgent - ? - TSMAgent.exe
• TVAgent - ? - TVAgent.exe
• ClauerUpdate - U - ClUpdate.exe
• ClUpdate - U - ClUpdate.exe
• PSDiagnosticM - U - PSDiagnosticM.exe
• TOSHIBA Volume Indicator - U - VolControl.exe

Changed items - 13

• SystemProcEvent ([trojan filename]) - Command and description changed
• windowsupdate (RPC[RANDOM CHARACTERS].exe) - Command changed
• SPSTEALT (SmartProtectorPro.exe) - Description changed
• Drivers for Internet Explorer (accesweb.exe) - Description changed
• WiniGuard (WiniGuard.exe) - Description changed
• WiniBlueSoft (WiniBlueSoft.exe) - Description changed
• BlockDefense (BlockDefense.exe) - Description changed
• µTorrent (uTorrent.exe) - Status (N) and description changed
• BitTorrent DNA (btdna.exe) - Description changed
• ViStart (ViStart.exe) - Status (U) and description changed
• ViGlance (ViGlance.exe) - Status (U) and description changed
• ViOrb (ViOrb.exe) - Status (U) and description changed
• Jessops Insert Detect (InsDetect.exe) - Description changed

HTML corrections - 28

• a-squared (a2guard.exe) - Description changed
• Microsoft Windows Express (windowslogonb.exe) - Description changed
• Verizon Custom Uninstall Tracking (InstallHelper.exe) - Description changed
• Microsoft Update (enule.exe) - Description changed
• Microsoft Update (explorer.exe) - Description changed
• Microsoft Update (nnwyaupdt) - Description changed
• Microsoft Update (rundll32.dll) - Description changed
• Microsoft Update 32 (rundll32.exe) - Description changed
• Microsoft Update 32 (taskMangr.exe) - Description changed
• Microsoft Update Machine (jkydxg.exe) - Description changed
• Microsoft Update Machine (opmmve.exe) - Description changed
• Microsoft Update Machine (paxrxo.exe) - Description changed
• Microsoft Update Machine (psmszw.exe) - Description changed
• Microsoft Update Machine (syadpo.exe) - Description changed
• Microsoft Update Machine (systemi.exe) - Hyperlink and description changed
• Microsoft Update Machine (ubthec.exe) - Description changed
• Microsoft Updates (service.exe) - Description changed
• Microsoft Windows Express (windowslogonb.exe) - Description changed
• Microsoft Windows SVCHOST (SVCHOST.exe) - Description changed
• Microsoft Windows System (System.exe) - Description changed
• fssui (fsui.exe) - Description changed
• fssui (fssui.exe) - Description changed
• Windows Baþlangýç Dosyasý (sistem.exe) - Name changed
• Proteção de tela (ssmaze.scr) - Name changed
• Planlægningsagent (mstask.exe) - Name changed
• GetIT (GetIT.exe) - Description changed
• NVRaidService (nvraidservice.exe) - Description changed
• NVIDIA® NVRAID (nvraidservice.exe) - Name and description changed

Other corrections - 6

• a-squared Anti-Dialer (a2adguard.exe) - Description changed
• XP SecurityCenter (XPSecurityCenter.exe) - Description changed
• Windows Audio Service (sndmic32.exe) - Name and description changed
• Windows Audio (snd.exe) - Description changed
• AccelerometerSysTrayApplet (AccelerometerSt.exe) - Description changed
• AccelerometerSt (AccelerometerSt.exe) - Description changed

Hyperlinks changed - 2

• WCPI (wintsvit.exe)
• ControlPanel (private.exe internat.dll,LoadMouseCarpetProfile)

%System%, %Windir%, %ProgramFiles%, etc - 25

• LSA Shell (Export Version) (LSASS.exe) - Hyperlink and description changed
• lsass (lsass.exe) - Description changed
• Lsass (Lsass.exe) - Description changed
• Lsass (Lsass.exe) - Description changed
• Lsass (LSASS.EXE) - Description changed
• Microsoft Lsass Manager (lsass.exe) - Description changed
• MS Security Authority Service (lsass.exe) - Description changed
• NortonAntivirus (LSASS.exe) - Description changed
• RsWin (lsass.exe) - Hyperlink and description changed
• Runner (lsass.exe [trojan filename]) - Description changed
• Runner (lsass.exe) - Description changed
• ServicesLoad (lsass.exe) - Description changed
• system (lsass.exe) - Description changed
• System Handler (LSASS.EXE) - Description changed
• System Kernel (lsass.exe) - Description changed
• System Process (lsass.exe) - Description changed
• Task (LSASS.EXE) - Description changed
• ToP (LSASS.exe) - Description changed
• Traybar (lsass.exe) - Description changed
• Update (lsass.exe) - Description changed
• Windows Recavery Adware (lsass.exe) - Description changed
• Windows_LowLevel_Security_Core (lsass.exe) - Description changed
• WinExec (Lsass.exe) - Description changed
• Winlogon (Lsass.exe) - Description changed
• ZincgrubInc (Lsass.exe) - Description changed

Rogue descriptions updated - 32

• [32 random numbers] (av2009.exe) - Description changed
• Ad-Eliminator (ad-eliminator.exe) - Hyperlink and description changed
• ADS Adware Remover (ADS Adware Remover.exe) - Description changed
• Advanced Spyware Remover Pro (Asr.exe) - Hyperlink changed
• Adware Spy (AdwareSpy.exe) - Hyperlink and description changed
• AdwareDelete (adwaredelete.exe) - Hyperlink and description changed
• AdwareKiller_schedules (schedules.exe) - Description changed
• AdwareKiller_tray (tray.exe) - Description changed
• AdwareProMFC (Ad-Ware Pro.exe) - Description changed
• AdwareRemover2007 (AdwareRemover2007.exe) - Description changed
• AntiMalwareGuard (amg.exe) - Description changed
• antispy (ANTIVIR.exe) - Description changed
• antispy (ANTIVIRUS.exe) - Description changed
• antispy (scan.exe) - Description changed
• AntiSpyKit (AntiSpyKit 5.3.exe) - Name, command and description changed
• AntivirusGold (AntivirusGold.exe) - Description changed
• AntiSpyware (AntiSpyware.exe) - Hyperlink and description changed
• AntiSpywareBot (AntiSpywareBot.exe) - Hyperlink and description changed
• Antivir64 (Antivir64.exe) - Hyperlink and description changed
• Antivirus (avm.exe) - Description changed
• Antivirus (vav.exe) - Description changed
• BraveSentry (BraveSentry.exe) - Description changed
• CodeClean (CCIntro.exe) - Description changed
• WinAntiSpyware 2005 (was5.exe) - Description changed
• WinAntiSpyware 2006 Scanner (was6.exe) - Description changed
• WinAntiSpyware 2007 (was7.exe) - Description changed
• Salestart (WAS7Mon.exe) - Description changed
• uwas7cw (uwas7cw.exe) - Description changed
• DC6_Check (uwasdc.exe) - Description changed
• WinAntispyware2008 (WinAntispyware2008.exe) - Description changed
• WinAvX (WinAvX.exe) - Description changed
• WinAvX (WinAvXX.exe) - Description changed

ThreatExpert links changed & descriptions reworded - 12

• Microsoft winsupdater (WINSUPDATER.EXE) - Description changed
• MicrosoftDriverService32 (drsys32.exe) - Hyperlink and description changed
• MicrosoftROMDriverService (cdrss.exe) - Hyperlink and description changed
• mjc (mjc.exe) - Description changed
• Modifiet Amateur HTPB (wuaclt.exe) - Description changed
• MonAppli ([random filename]) - Description changed
• Mozillacorp (system.exe) - Description changed
• MS Agent Protection (ag1.exe) - Description changed
• MS Initial (mstinitial.exe) - Description changed
• mscheck (rundll32.exe wincheck071008.dll mymain) - Hyperlink and description changed
• msdrvctrl (msdrvctrl.exe) - Description changed
• Msn Boot (msnbootcfg.exe) - Description changed

Removed - 1

• Winlogon - X - lsass.exe - Covered by ALCOP-B entry (FLOPPY-B)

New rogue section added for the WiniGuard family.

New detailed entries added - 31

• 00DSKSVR01 (desksaver.exe tray)
• 00DSKSVR00 (desksaver.exe saskda)
• 00ERSRRRNKY (eraser.exe)
• 00notify33 (NetBrowser.exe)
• Ashampoo Magical Defrag (aDefragCtrl.exe)
• Ashampoo Magical Optimizer Taskplaner (AMO_Taskplaner.exe)
• ATIModeChange (Ati2mdxx.exe)
• ATIPTA (ATIPTAXX.EXE)
• Auslogics BoostSpeed (boostspeed.exe)
• Auslogics BoostSpeed 4 (boostspeed.exe)
• AutoCAD Startup Accelerator (acstart17.exe)
• BandwidthMeterPro (BandwidthMeterPro.exe)
• BDAgent (bdagent.exe)
• BDWizReg (bdwizreg.exe)
• BitDefender Antiphishing Helper (IEShow.exe)
• BitTorrent (bittorrent.exe)
• BitTorrent DNA (btdna.exe)
• BudgetSip (BudgetSip.exe)
• DefragTaskBar (defragTaskBar.exe)
• EVGAPrecision (EVGAPrecision.exe)
• FreeCall (FreeCall.exe)
• Google Desktop Search (GoogleDesktop.exe)
• HydraVisionDesktopManager (HydraDM.exe)
• HydraVisionViewPort (HydraMD.exe)
• MagUninstall (MagicalUnInstall.exe)
• mspwr (PuXpMan2.exe)
• PwrUpSwDesk (SwitchDesk.exe)
• swg (GoogleToolbarNotifier.exe)
• UIWatcher (UIWatcher.exe)
• uTorrent (uTorrent.exe)
• WinPatrol (winpatrol.exe)

Back to Updates - 2009

Copyright © Pacman's Portal, 2001 - 2012
All rights reserved