Latest updates for the Windows start-up programs database

29th October, 2010

New items - 160

• Gbp Service - X - [path to trojan]
• Persistence ! System - X - [path to trojan]
• wscntfx - X - [path to trojan]
• Win32Mgr - X - [path to trojan]
• nonep - X - [path to trojan]
• navautoprotect - X - [path to trojan]
• HP Software Updater v1.4 - X - [path to worm]
• [random] - X - [random]wagnz.exe
• MS Driver Management - X - [trojan filename].exe
• Synchronization Messager - X - [trojan filename].exe
• System Directory Service - X - [trojan filename].exe
• System Service Control - X - [trojan filename].exe
• Windows Messaging System - X - [trojan filename].exe
• 0CF48.exe - X - 0CF48.exe
• adcareup - X - adcareup.exe
• AdobeARMS - X - AdobeARMS.exe
• AdsGone 2003 - U - Adsgone.exe
• AdsGone 2004 - U - Adsgone.exe
• AdsGone 2005 - U - Adsgone.exe
• AdsGone 2006 - U - Adsgone.exe
• anhxox - X - anhzxc.exe
• AntiVirus Studio 2010 - X - AntiVirus Studio 2010.exe
• ap.exe - X - ap.exe
• none - X - AUTOEXEC.BAT
• AutoVaccineMain - X - AutoVaccine.exe
• AV8 - X - av8.exe
• AVClean - X - AVClean.exe
• Advanced Virus Remover - X - AVR.exe
• Microsoft iexplorer11 - X - avstc.exe
• LAUNCHQUICK - X - bbaka14.exe
• MSCJACCELERATOR - X - bbaka14.exe
• explorer - X - bootcfgx.exe
• Driver Control Manager v3.2 - X - brdevet.exe
• Break.exe Espanha - X - Break.exe
• wupdate - X - bro_exe.exe
• novavapp - X - ccsmn.exe
• novavappr - X - ccsrr.exe
• windowspis - X - convertor.exe
• czrss - X - czrss.exe
• Daemon Tools ATAPI driver - X - daemontools.exe
• hkey - X - dll
• police - X - dll
• Driver Control Manager v5.1 - X - dvadescetr.exe
• eCService - X - eclean.exe
• exe.exe - X - exe.exe
• Recycler - X - explored.exe
• Eyes Relax - U - EyesRelax.exe
• F0E84.exe - X - F0E84.exe
• Tji771 - X - fddg.exe
• Test321 - X - fresdg.exe
• msfirewall32 - X - FWMs32.exe
• Locinx - X - gdicli.exe
• MS Unix Binary - X - hypertrm.exe
• IDBoan - X - IDBoan.exe
• Microsoft Internet Explorer - X - ie8.exe
• IExplUpd - X - IExplUpd.exe
• premium - X - igfxtrai.exe
• imscmig - X - imscmig.exe
• IMSCMig - U - IMSCMIG.EXE
• Microsoft Pinyin IME Migration - U - IMSCMIG.EXE
• Microsoft(R) Pinyin IME 2007 - U - IMSCMIG.EXE
• InfoPure - X - InfoPure.exe
• SessionInit - X - init.exe
• InstantSpywareRemoval.exe - X - InstantSpywareRemoval.exe
• ISRHelper.exe - X - ISRHelper.exe
• msjavadll - X - jnana.tsa
• Java Update Manager - X - jutched.exe
• Kavirs1 - X - Kavirs1.exe
• KB1883574.exe - X - KB1883574.exe
• Malware Destructor - X - KB1883574.exe
• PcBoanN - X - launcher.exe PcBoanNUp.exe
• 12CFG214-K641-24SF-N85P - X - ls888.exe
• WINDOWS - X - lsass1.exe
• MSConfig - X - mapwisl.exe
• MedicCopMain - X - MedicCop.exe
• mscjm.exe - X - mscjm.exe
• MScomm - X - MScomm.exe
• MsgrUpd - X - MsgrUpd.exe
• Windows System Guard - X - msnd.exe
• msnmsgrs - X - msoobe32.exe
• MegaVaccineMain - X - MVaccine.exe
• NBHGui - U - NBHGui.exe
• New2Clean - X - New2CleanLaunch.exe
• rundll32 - X - ntdevice.exe
• Nvidia Control Center - X - NvTaskbarInit.exe
• Object_Inside.exe Nacional - X - Object_Inside.exe
• PCMedic - X - PCMedic.exe
• PhotoJoy - N - PhotoJoy.exe
• plugsys - X - plugsys.exe
• 12CFG515-K641-55SF-N66P - X - pqlmq.exe
• RealVaccineMain - X - RealVaccine.exe
• Reg Tool - X - Reg Tool.exe
• RegistryClever - X - RegistryClever.exe
• TrayScan - X - RegistryCleverTray.exe
• rieysha - X - rieysha.exe
• Root System Service - X - rootsvc32.exe
• smx4pnp - X - rundll32.exe [path] smx4pnp.dll
• SafePrivate - X - SafePrivate.exe
• Bluetooth - X - sample.exe
• Scan119 - X - Scan119.exe
• SYS1 - X - scvost.com
• 12ZFG94-F641-2SF-K31P-5N1ER6H6L2 - X - service.exe
• RunServices - X - service.exe
• SmartFaceVWatcher - Y - SmartFaceVWatcher.exe
• TOSHIBA Face Recognition Watcher - Y - SmartFaceVWatcher.exe
• Smart Engine - X - SMM[random characters].exe
• Smart Security - X - SMM[random characters].exe
• SoftAuto.exe - N - SoftAuto.exe
• Service System - X - softdwind.exe
• Sound.exe Espanha - X - Sound.exe
• SPD Driver - X - spdpool.exe
• SuperVaccineMain - X - SuperVaccine.exe
• SunJavaMdb - X - svchosf.exe
• Microsoft? Operating System: - X - svchost.exe
• download - X - svcnost.exe
• SwitchBoard - ? - SwitchBoard.exe
• Microsoft Windows Update - X - symantec.exe
• Kernel - X - system.vbs
• systemks - X - systemks.exe
• IeServer - X - syswin.exe
• Teco - U - Teco.exe
• TomTomHOME.exe - N - TomTomHOMERunner.exe
• ToshibaServiceStation - N - ToshibaServiceStation.exe
• TosNC - U - TosNcCore.exe
• TOSHIBA Picture Enhancement Utility - ? - TosPEHK.exe
• TosPEHK - ? - TosPEHK.exe
• TosReelTimeMonitor - U - TosReelTimeMonitor.exe
• TosSENotify - U - TosWaitSrv.exe
• TosWaitSrv - U - TosWaitSrv.exe
• ToshibaServiceStation - N - TSS.exe
• TWebCamera - U - TWebCamera.exe
• Twitter.exe Espanha - X - Twitter.exe
• AdobeAAMUpdater-1.0 - N - UpdaterStartupUtility.exe
• rundll32 - X - userinit.exe
• VaccineDataMain - X - VaccineData.exe
• VaccineLabMain - X - VaccineLab.exe
• VaccineLabMain - X - VaccineLabPlus.exe
• VFXDSys Compatibility Synchronisation - X - vfxdsys.exe
• VirusCureMain - X - VirusCure.exe
• 12CFG214-K641-12SF-N85P - X - vsbntlo.exe
• 12CFG914-K641-26SF-N32P - X - vse432.exe
• 12CFG914-K641-26SF-N31P - X - vsexy1.exe
• 12CFG515-K641-55SF-N55P - X - vslmq.exe
• 12CFG214-K641-24SF-N85P - X - vsofat.exe
• 12CFG914-K641-26SF-N31P - X - vsse32.exe
• 13CFG914-K641-26SF-N31P - X - vsse33.exe
• WebVaccineMain - X - WebVaccine.exe
• Microsoft Outlook - X - wincsrss.exe
• Wind - X - Wind.exe
• iexplorer - X - wind.exe
• system - X - wind.exe
• Windows Messanger Controls Center - X - wind.exe
• avast - X - Wind.exe
• MicrosoftOfficeTools - X - Winece.exe
• winupd64x.exe - X - winupd64x.exe
• Windows Update - X - winvv.exe
• wltray.exe - N - wltray.exe
• System Restore - X - wscript.exe SysRes.vbs
• loopsos - X - xiaosos.exe
• USBGuard - X - Y0tninam.exe

Changed items - 9

• imekrmig (imekrmig.exe) - Description changed
• IMEKRMIG6.1 (IMEKRMIG.EXE) - Description changed
• nwiz (nwiz.exe) - Status (U) changed
• nwiz.exe (nwiz.exe) - Name and status (U) changed
• LoadWindowsFile ([filename]) - Hyperlink and description changed
• SfKg6w ([path to worm]) - Command and hyperlink changed
• KRNL (Kernl32.exe) - Hyperlink and description changed
• Sproc32 (sproc32.exe) - Hyperlink and description changed
• uvnx (uvnx.exe) - Hyperlink and description changed

Corrections - including additional spaces after the Name or Command - 11

• AWM (AWM.exe) - Status (U) changed
• WebScan (DEFSCA~1.EXE) - Description changed
• WebScan (DEFSCANGUI.EXE) - Description changed
• PLFSetI (PLFSetI.exe) - Description changed
• LXDJCATS (rundll32 [path] LXDJtime.dll, _RunDLLEntry@16) - Command changed
• Scan&Repair2006.exe (Scan&Repair2006.exe) - Description changed
• SpyFighter (SpyFighter.exe) - Command changed
• StopSignPopupBlocker (sspopupblockerctrl.exe) - Description changed
• eanth_system_patcher (sys_alert.exe) - Description changed
• VTTrayp (VTtrayp.exe) - Name and description changed
• Dell Wireless Manager UI (WLTRAY) - Command changed

Hyperlinks changed - 23

• AOLStart (AOLStart.exe) - Hyperlink changed
• avast (troyan.exe) - Hyperlink changed
• bab (svchst32.exe) - Hyperlink changed
• dgtstart (dgtstart.exe) - Hyperlink changed
• DHCP (smss.exe) - Hyperlink changed
• DHCP32 (services.exe) - Hyperlink changed
• erwghjjrjt (ucbcg.exe) - Hyperlink changed
• ICU-Sucker (Service32.exe) - Hyperlink changed
• main_module (drvmmx32.exe) - Hyperlink changed
• Microsoft Instant Messenger (msngmsngr32.exe) - Hyperlink changed
• Office (Office.exe) - Hyperlink changed
• runddlfile (runddl.exe) - Hyperlink changed
• sr64 ([path to trojan]) - Hyperlink changed
• Sunjava (javasmart.exe) - Hyperlink changed
• Sysres (Sysres.exe) - Hyperlink changed
• system (ssclie.exe) - Hyperlink changed
• SysTray (system.exe) - Hyperlink changed
• winadm (winadm.exe) - Hyperlink changed
• wind.exe (wind.exe) - Hyperlink changed
• Windows Update (SecretStub.exe) - Hyperlink changed
• winmgmt32.exe (winmgmt32.exe) - Hyperlink changed
• winupdt (RUNDLL32.EXE [random.dll]) - Hyperlink changed
• wlsass (wlsass.exe) - Hyperlink changed

Rogue descriptions updated - 1

• SecurityCenter (securitycenter.exe) - Description changed

Removed - 3

• httpd - X - deamon.exe - Duplicate
• Microsoft Windows Secure - X - windocs.exe - Duplicate
• Update Windows - X - EXPLORE.EXE - Duplicate

Back to Updates - 2010

Copyright © Pacman's Portal, 2001 - 2013
Powered by Malwarebytes
All rights reserved