Pacman's Portal Start-up Programs Database

Message Board

Latest updates for the Windows start-up programs database

30th April, 2012

New items - 95

Ekeniyoha - X - [filename]
REERGRUNRNT - X - [malware name]
Advanced Antispyware Solution - X - [random].exe
AIMWDInstallFilename - N - AIMWDI~1.EXE
A_M_P_NET - X - AntiMalware_Pro.exe
Power Gear - U - BatteryLife.exe
explores - X - BootEx.exe
BearShare Lite - N - BSHARELITE.EXE
CpRmtKey - ? - CpRmtKey.EXE
Auto updat - X - crsrs.exe
Microsoft Connection Manager - X - dllmanger.exe
don't see - U - don't see.exe
DVDXGhost - U - DVDXGhost.EXE
Microsoft Update - X - esplorer.exe
Speedsearch.Com - X - etsetr.exe
WSA System Service - X - expiorer.exe
WSA32 System Service - X - expiorer.exe
WSA System Service - X - explore.exe
WSA32 System Service - X - explore.exe
WSA System Service - X - explorer32.exe
WSA32 System Service - X - explorer32.exe
Form Pilot Home virtual printer agent - U - fphoagent.exe
Form Pilot Office virtual printer agent - U - fpoagent.exe
Form Pilot Office (demo) printing agent - U - fpoagenttsd.exe
Form Pilot Pro Trial virtual printer agent - U - fppagentd.exe
Form Pilot Pro virtual printer agent - U - fppragent.exe
GvC - X - GVC.exe
ATKHOTKEY - U - hcontrol.exe
ichckupd - X - ichckupd.exe
iexplorers loader - X - iexplorers.exe
Inprivacy - X - Inprivacy.exe
Type Pilot - U - Launcher.exe
WindowsUpdatelsass - X - lsass.exe
Windows Registry Scan - X - lsass34.exe
m4n70s Personal Firewall - X - m4n70s.exe
NetHelp - U - matcli.exe
application - X - microsoft.exe
ml34 - X - mlm4.exe
Ms Java Update For Windows NT/XP - X - msejavaupdt32.exe
SheduIer - X - msexploren.exe
MsgTranAgt - ? - MsgTranAgt.exe
mslanhelper - X - msmsgri32.exe
Msnsched - X - msnsched.exe
Microsoft Services - X - mssrev.exe
MS Task Manager 32 - X - mstskmgr.exe
NAVSCAN64.EXE /s - X - NAVSCAN64.exe
OdTray.exe - U - OdTray.exe
CyberArmorHelper - Y - pcshelp.exe
PDF Filler Pilot printing agent - U - pfpagent.exe
PDF Filler Pilot (demo) printing agent - U - pfpagentd.exe
PDFFillerPilotAgentD - U - PfpprxyTSD.exe
PDF Maker Pilot printing agent - U - pmpagent.exe
PDF Maker Pilot (demo) printing agent - U - pmpagentd.exe
lgbrz32 - X - PopStop32.exe
PrivacyCut - X - PrivacyCut.exe
privacyg - X - privacyg_up.exe
Inspector - X - Protector-fbfv.exe
Inspector - X - Protector-kcdt.exe
Inspector - X - Protector-ogpl.exe
Inspector - X - Protector-pnnn.exe
Inspector - X - Protector-tdxa.exe
Inspector - X - Protector-tpnv.exe
Inspector - X - Protector-yrox.exe
VIA RAID TOOL - U - raid_tool.exe
ActiveXUpdate - X - smvss.exe
OfficeGuardUI - X - smvss.exe
SoundControl - X - smvss.exe
SP1 Critical Update - X - sp1update.exe
SP1-Update - X - sp1update.exe
Windows Updated - X - spoolsac.exe
Windows Registry Server - X - spoolsvc.exe
network - X - str.exe
MSSVC - X - SVCHOST.EXE
reseurce - X - svchost.exe
WindowsUpdatesvchost - X - svchost.exe
Shellapi32 - X - svcnet.exe
MicrosoftOEM - X - svcss.exe
SoundControl - X - svcss.exe
IEXPLORE Loader - X - sysdll32.exe
Windows Configuration GUI - X - systemconfig32.exe
Microsoft Windows Task Manager - X - taskmanagr.exe
TrueAssistant - N - TrueAssistant.exe
Type Pilot - U - TypePlt.exe
UltraMon - U - UltraMon.exe
blah service - X - win32exec.exe
blah service - X - win32exec.exe
Sygate Personal Firewall - X - Win32l.exe
Microsoft Update Machine - X - wininimil.exe
MS-patch33 - X - winsecurity.exe
WindowsUpdatewinsvcc - X - winsvcc.exe
SysMonitor - X - WinSystem.exe
Linksys WMB54G Utility - U - WMB54G.exe
wnplayer - X - wnplayer.exe
Remote Procedure Call - X - wuarpc.exe
wvsvc - X - wvsvc.exe

Changed items - 106

Spool ([path to backdoor]) - Command and description changed
mssvc ([path to trojan]) - Description changed
Network Host Controller ([path to trojan]) - Description changed
rngmf ([path to trojan]) - Description changed
schost ([path to trojan]) - Description changed
Services ([path to trojan]) - Description changed
SNInstall ([various filenames]) - Description changed
_mzu_stonedrv2 (_mzu_stonedrv2.exe) - Description changed
Windows Anti-Virus Built 32 (AntiVirus32.exe) - Description changed
AOL TopSpeedMonitor (aoltsmon.exe) - Hyperlink and description changed
Power_Gear (BatteryLife.exe) - Description changed
catsrv (catsrv.exe) - Hyperlink and description changed
BJCFD (CFD.exe) - Command and description changed
CFD (CFD.exe) - Description changed
cFosSpeed (cFosSpeed.exe) - Hyperlink and description changed
CmFlywaveName (CmFlywav.exe) - Description changed
Configuration Utility (CONFIG.EXE) - Description changed
Microsoft Data Machine (csdata32.exe) - Description changed
Microsoft CSRSS32 Protocol (csrss32.exe) - Description changed
DefendAPc (DefendAPc.exe) - Hyperlink changed
REGRUN (dialer.exe) - Description changed
igamatu (ekor.exe) - Description changed
Windows MS Update 32 (fhm.exe) - Description changed
Windows Frame Works (frmwrks32.exe) - Description changed
Wireless-G Notebook Adapter (Gcc.exe) - Description changed
General Antivirus (GenAvir.exe) - Hyperlink changed
Ghost Antivirus (GhostAV.exe) - Hyperlink changed
GreatDefender (GreatDefender.exe) - Hyperlink changed
GreatDefender.exe (GreatDefender.exe) - Hyperlink changed
Hostren.exe (Hostren.exe) - Description changed
Microsoft AntiSpyware (KT06.pif) - Description changed
lasse (lasse.exe) - Description changed
Traceless (launch.exe) - Description changed
LELA (Linksys EasyLink Advisor.exe) - Description changed
EasyLinkAdvisor (LinksysAgent.exe) - Description changed
Linksys Wireless Manager (LinksysWirelessManager.exe) - Description changed
Live PC Care (LP[random].exe) - Command and hyperlink changed
Micrsoft CFG 32 (lrbzus32.exe) - Description changed
Sysqq (LSESS.exe) - Description changed
lup (lup.exe) - Description changed
RegRun (mActiveX.exe) - Description changed
Malware Defense (mdefense.exe) - Hyperlink changed
melg34 (mdmd.exe) - Description changed
staeck12 (mfcee.exe) - Description changed
staeck122 (mfceee.exe) - Description changed
Microsoft Services (module.exe) - Description changed
blahh service (msengine.exe) - Description changed
ScheduIr (msexploren.exe) - Description changed
SvcH0st (Msexploren.exe) - Description changed
Ms Java for Windows 98, NT, XP & ME (msjavaxps.exe) - Description changed
System Initialization (msmsgri32.exe) - Description changed
ctfmon.exe (msupdate32.exe) - Description changed
System Initialization (payload.dat) - Description changed
PRISMSTA (PRISMSTA.EXE) - Status (U) and description changed
PRISMSTA.EXE (PRISMSTA.EXE) - Description changed
PSDiagnosticM (PSDiagnosticM.exe) - Description changed
PersonalSec (psecurity.exe) - Hyperlink changed
PersonSecurity (psecurity.exe) - Hyperlink changed
PersSecurity (psecurity.exe) - Hyperlink changed
Psecurity (psecurity.exe) - Hyperlink changed
Pwrsave (Pwrsave.exe) - Description changed
sctrlmgr (sescmgr.exe) - Description changed
Sexy_Blondes (Sexy_Blondes.exe) - Description changed
Nero (shch.exe) - Description changed
Quicktime (shch.exe) - Description changed
ScheduIr (shch.exe) - Description changed
SunKistEM (shwiconem.exe) - Description changed
devenv (smvss.exe) - Description changed
REGRUN (sory.exe) - Description changed
sixer566 (sscc.exe) - Description changed
WinSecured32 (ssmr.exe) - Description changed
ScheduIr (svchst.exe) - Description changed
SheduIer (svchst.exe) - Description changed
OfficeGuardUI (svcss.exe) - Description changed
Microsoft Windows Update (swwhost.exe) - Description changed
SysProtector (SysProtector.exe) - Hyperlink changed
Gainward (TBPanel.exe) - Description changed
TBPanel (TBPanel.exe) - Description changed
msresearch (tool3.exe) - Description changed
ToshibaServiceStation (ToshibaServiceStation.exe) - Description changed
TosWaitSrv (TosWaitSrv.exe) - Description changed
Total PC Defender 2010 (Total PC Defender 2010.exe) - Hyperlink changed
Total PC Defender (Total PC Defender.exe) - Hyperlink changed
TPSmain (TPSMain.exe) - Description changed
ToshibaServiceStation (TSS.exe) - Description changed
updwebmin (updwebmin.exe) - Description changed
Vdoctor (vdoctorp.exe) - Command and hyperlink changed
WGV (WGV.exe) - Description changed
Additional Guard (WI[random characters].exe) - Hyperlink changed
MsnExplorer (winagent.exe) - Description changed
ScheduIr (winagent.exe) - Description changed
REGRUN (winfix22490.exe) - Description changed
secure socket layer (wins32a.exe) - Description changed
Win Security 360 (WinSecurity360.exe) - Hyperlink changed
Win32 USB Driver (winxpinit.exe) - Description changed
Wireless PCI Card Configuration Utility (WMP11Cfg.exe) - Description changed
WMP54Gv4 (WMP54Gv4.exe) - Description changed
Workflo (workflow.exe) - Description changed
Instant Wireless Configuration Utility (WPC11Cfg.exe) - Description changed
Wireless-G Notebook Adapter Utility (WPC54CFG.EXE) - Description changed
Microsoft Update (wuamk0032.exe) - Description changed
Microsoft Windows Securety (wurguar.exe) - Description changed
WUSB11B.exe (WUSB11B.exe) - Status (U) and description changed
Instant Wireless Configuration Utility (WUSB11cfg.exe) - Description changed
YhooUpdates (ymsmsgs.exe) - Description changed
YhooUapdates (ymssmsgs.exe) - Description changed

Corrections - 47

Verizon Online Account Setup (Accstp4.0.exe) - Description changed
CyberScrub AutoUpdate (CAVSch.exe) - Description changed
HomeNet Manager (ezi_hnm2.exe) - Hyperlink changed
Qnext (qnext.exe) - Hyperlink changed
ChansonsMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
ConnectAndDownload (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
ContentDownload (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
CoolDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
CoolMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
DescargaBromas (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
DesktopUpdate (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
DownloadLegalMusic (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
DownloadMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
DownloadsAndMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
EntraOcio (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
FastDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
FreeMP3download (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
GetitAll (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
GetMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
GetTheMusic (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
GreatDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
LosMejoresMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
LotsOfGames (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
LotsOfJokes (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MainDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MoreContent (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3Collection (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3download (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3files (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3freeDownload (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3freeDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3nice (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3Themes (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
MP3ToTheMax (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
NewDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
NewMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
NiceDownloads (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
NiceMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
NumberOneMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
ScreenSaverPlus (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
SearchMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
TakeMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
TheBestMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
ThemeMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
UtilitiesAndSoftware (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
YourMP3 (rundll32.exe MSA64CHK.dll,DllMostrar) - Description changed
Verizon Online (Verizon Online.exe) - Description changed

Hyperlinks changed - 37

Aceu ([random filename])
Noha (aasd.exe)
Osus (acao.exe)
Aaou (amee.exe)
Surs (awab.exe)
FUKLBAR (bar.exe)
wow (bar.exe)
Rase (boln.exe)
Ltho (dees.exe)
MS DLL Library Manager (dllsys64.exe)
Teth (drle.exe)
Asia (easm.exe)
Notn (Eber.exe)
Aida (eetu.exe)
Google Earth Viewer (GOOGLEMAPS.EXE)
Ahst (iebs.exe)
Ncua (ihoo.exe)
Iinl (iptl.exe)
suck (l0ad.exe)
Microsoft Update 32 (MSupdate32.exe)
NDrv (NDrv.exe)
Riau (nmrc.exe)
Tdrb (ompa.exe)
Uate (oocs.exe)
Ncao (osoa.exe)
PPClean RunOnce insertion (ppclean.exe)
Usrr (rncr.exe)
Usrr (rpen.exe)
Osus (rrup.exe)
Soar (Rwon.exe)
SESync (SED.exe)
Awoa (smmo.exe)
Taba (stte.exe)
Pruo (taee.exe)
Ewth (tasn.exe)
File System Service (wmiprvsc.exe)
Windows Update Process (wmiprvsc.exe)

CA hyperlinks changed - 41

CompanionWizard (compwiz.exe)
[various names] (control64.exe)
Coreguard Antivirus 2009 (Coreguard 2009.exe)
[various names] (corrida.exe)
[various names] (CToolBar.exe)
Microsoft task tray monitor (ctray.exe)
Microsoft Debug Service (dbgbgr.exe)
[various names] (DCC_send.exe)
[various names] (defect08.exe)
[various names] (dePloy.exe)
[various names] (Dest068.exe)
Microsoft Synchronization Manager (devldr32.exe)
[various names] (dialer423.exe)
[various names] (diskserv.exe)
[various names] (driver32.exe)
[various names] (driver64.exe)
[various names] (DTOURS.exe)
[various names] (ERTYDF.exe)
[various names] (ExchangeMaster.exe)
[various names] (EXE32EXE.exe)
[various names] (expoler.exe)
Service Monitor (filen.exe)
[various names] (FLKPT.exe)
[various names] (forces_elite.exe)
[various names] (ftbar.exe)
[various names] (gabber.exe)
[various names] (hyandex.exe)
[various names] (iehelper.exe)
[various names] (iesetupdll.exe)
[various names] (init32.exe)
[various names] (InpriseMon.exe)
[various names] (install2.exe)
[various names] (JAguAr.exe)
[various names] (jopplerg.exe)
[various names] (Kargo.exe)
[various names] (keybdll.exe)
Norton Personal Firewall (lah.exe)
blah service (microsoft.exe)
Windows Security Module (module.exe)
Wind Logd File (servicelogd.exe)
Windows 32 Update (Windows-Update.exe)

Sophos hyperlinks changed - 52

autorundemo ([path to trojan]) - Hyperlink changed
explorer ([path to trojan]) - Hyperlink changed
ShareSearcher ([path to trojan]) - Hyperlink changed
USBHWINFO ([path to trojan]) - Hyperlink changed
Winsock2 driver ([random filename]) - Hyperlink changed
_mzu_stonedrv7 (_mzu_stonedrv7.exe) - Hyperlink changed
asussvc (asussvc.exe) - Hyperlink changed
cls_pack.exe (cls_pack.exe) - Hyperlink changed
Windows Hijack Protection (comngr.exe) - Hyperlink changed
WindowsUpdatecrss (crss.exe) - Hyperlink changed
load (ctftpscr32.exe) - Hyperlink changed
pcc (explcrer.exe) - Hyperlink changed
explorer.exe (explorer.exe) - Hyperlink changed
Shell (Explorer.exe winupdate.exe) - Hyperlink changed
USBHWDRV (gam.exe) - Hyperlink changed
ml34 (helpermlm4.exe) - Command and hyperlink changed
ieupdate (ieupdates.exe) - Hyperlink and description changed
WindowsUpdatelsasss (lsasss.exe) - Hyperlink changed
MP Tclockvv (mptclock.exe) - Hyperlink changed
Microsoft Digital Clock (msclock.exe) - Hyperlink changed
USBHWDRV (msdc.exe) - Hyperlink changed
MsnExplorer (Msexploren.exe) - Hyperlink changed
WinAmpAgent (Msexploren.exe) - Hyperlink and description changed
WINTASK (msvhost.exe) - Hyperlink changed
Nex (nex.exe) - Hyperlink changed
ControlPanel (popcorn320.exe rundll.dll,LoadMouseProfile) - Hyperlink changed
RKrx (rundll32.exe) - Hyperlink and description changed
RKrx (rundll32.exe) - Hyperlink and description changed
rundll32 (rundll32.exe) - Hyperlink and description changed
Clean up (service.exe cleanup.bat) - Command and hyperlink changed
Windows smss service (service.exe smss.exe) - Command and hyperlink changed
Systems (sescmgr.exe) - Hyperlink changed
MsnExplorer (shch.exe) - Hyperlink changed
SheduIer (shch.exe) - Hyperlink changed
SvcH0st (shch.exe) - Hyperlink changed
WinAmpAgent (shch.exe) - Hyperlink and description changed
soundtasks (soundtasks.exe) - Hyperlink changed
USBHWDRV (sst4.exe) - Hyperlink changed
svchast (svchast.exe) - Hyperlink changed
startkey (svchost.exe) - Hyperlink changed
WindowsUpdatesvchostss (svchostss.exe) - Hyperlink changed
MsnExplorer (svchst.exe) - Hyperlink changed
SvcH0st (svchst.exe) - Hyperlink changed
WinAmpAgent (svchst.exe) - Hyperlink and description changed
ActiveXUpdate (svcss.exe) - Hyperlink changed
explorer (system.exe) - Hyperlink changed
SheduIer (winagent.exe) - Hyperlink changed
SvcH0st (winagent.exe) - Hyperlink changed
WinAmpAgent (winagent.exe) - Hyperlink and description changed
Win Defender (WinDefender.exe) - Hyperlink changed
WindowsUpdatewinsec (winsec.exe) - Hyperlink changed
SystemSecurity (zprot32.exe) - Hyperlink changed

Trend Micro hyperlinks changed - 46

Microsoft Word (BootSector.exe) - Hyperlink and description changed
Configuration Loader (ccSort.exe) - Hyperlink changed
cmrss (cmrss.exe) - Hyperlink changed
Win32 Network Driver (crss.exe) - Hyperlink and description changed
IPv6 Helper Driver (csass.exe) - Hyperlink changed
Microsoft Client/Server Runtime Server Subsystem (csrssa.exe) - Name, hyperlink and description changed
ctfmon.exe (ctfmon.exe eminem.exe) - Hyperlink changed
WSAConfiguration (drrss.exe) - Hyperlink and description changed
BSserver (FileKan.exe) - Hyperlink changed
Service Cleaner (filen.exe) - Hyperlink changed
What Frenz (FriendEQUALsuX.exe) - Hyperlink changed
Bharatayuda (GNB.exe) - Hyperlink changed
Hot Inside (Hottest Story Ever.exe) - Hyperlink changed
Microsoft Dev (iexplorer32.exe) - Hyperlink and description changed
Windows Update (inetinf.exe) - Hyperlink and description changed
RPCall_WIN2K (Kurawas.exe) - Hyperlink changed
COM+ System Applications (lsas.exe) - Hyperlink changed
lsass service (lsass2.exe) - Hyperlink and description changed
lsass 32-biT (lsass32.exe) - Hyperlink changed
Generic Host Service (lshost.exe) - Hyperlink changed
Dcom System Patch (Microsoft.exe) - Hyperlink changed
Microsoft Executing (microsoft.exe) - Hyperlink changed
windows update (Microsoft.exe) - Hyperlink changed
System Monitoring (Mooks.EXE) - Hyperlink changed
MP Tcloaxs (mptcloaxs.exe) - Hyperlink changed
MP Tclockvv (mptclockvv.exe) - Hyperlink changed
Microsoft Update (msupdate32.exe) - Hyperlink changed
Network Security (NSecurity.exe) - Hyperlink changed
Messenger (ntsubsys.exe) - Hyperlink changed
System handler (Pandawas.exe) - Hyperlink changed
Realplayer.exe (Realplayer.exe) - Hyperlink changed
Windows SYSTEM32 (Realplayer.exe) - Hyperlink changed
rundll32 (rundll64.exe) - Hyperlink changed
Starter (scvhosting.exe) - Hyperlink changed
SDKCprords (SDKc55rezzz.exe) - Hyperlink changed
ASocksrv (SocksA.exe) - Hyperlink changed
Microsoft Update Clinic (svsipconfig.exe) - Hyperlink changed
Microsoft Update (svzhost.exe) - Hyperlink changed
MS SyS Restore (sysrestore.exe) - Hyperlink changed
Microsoft Updating Client (websvc.exe) - Hyperlink changed
WinConfig9324 (wincfgkop9.exe) - Hyperlink changed
Microsoft media services (winmplayer.exe) - Hyperlink changed
Windows SSL File (winssv.exe) - Hyperlink changed
Microsoft Updater (winsys32.exe) - Hyperlink changed
Microsoft 16Bit Update (wuapdate16.exe) - Hyperlink changed
CirebonPunya (XXrocks.exe) - Hyperlink changed

"DLOADER-NY" trojan hyperlinks changed - 64

Run Services as Application (localsvc.exe)
Services Administrator (localsvc.exe)
Spooler SubSystem Application (localsvc.exe)
Tcp Application Manager (localsvc.exe)
Windows .Net Manager (localsvc.exe)
Windows Local Services (localsvc.exe)
Windows Service Manager (localsvc.exe)
Windows Web Services (localsvc.exe)
Run Services as Application (netsvc.exe)
Services Administrator (netsvc.exe)
Spooler SubSystem Application (netsvc.exe)
Tcp Application Manager (netsvc.exe)
Windows .Net Manager (netsvc.exe)
Windows Local Services (netsvc.exe)
Windows Service Manager (netsvc.exe)
Windows Web Services (netsvc.exe)
Run Services as Application (spoolsvc.exe)
Services Administrator (spoolsvc.exe)
Spooler SubSystem Application (spoolsvc.exe)
Tcp Application Manager (spoolsvc.exe)
Windows .Net Manager (spoolsvc.exe)
Windows Local Services (spoolsvc.exe)
Windows Service Manager (spoolsvc.exe)
Windows Web Services (spoolsvc.exe)
Run Services as Application (svcadmin.exe)
Services Administrator (svcadmin.exe)
Spooler SubSystem Application (svcadmin.exe)
Tcp Application Manager (svcadmin.exe)
Windows .Net Manager (svcadmin.exe)
Windows Local Services (svcadmin.exe)
Windows Service Manager (svcadmin.exe)
Windows Web Services (svcadmin.exe)
Run Services as Application (svcman.exe)
Services Administrator (svcman.exe)
Spooler SubSystem Application (svcman.exe)
Tcp Application Manager (svcman.exe)
Windows .Net Manager (svcman.exe)
Windows Local Services (svcman.exe)
Windows Service Manager (svcman.exe)
Windows Web Services (svcman.exe)
Run Services as Application (svcrun.exe)
Services Administrator (svcrun.exe)
Spooler SubSystem Application (svcrun.exe)
Tcp Application Manager (svcrun.exe)
Windows .Net Manager (svcrun.exe)
Windows Local Services (svcrun.exe)
Windows Service Manager (svcrun.exe)
Windows Web Services (svcrun.exe)
Run Services as Application (tcpsvc.exe)
Services Administrator (tcpsvc.exe)
Spooler SubSystem Application (tcpsvc.exe)
Tcp Application Manager (tcpsvc.exe)
Windows .Net Manager (tcpsvc.exe)
Windows Local Services (tcpsvc.exe)
Windows Service Manager (tcpsvc.exe)
Windows Web Services (tcpsvc.exe)
Run Services as Application (websvc.exe)
Services Administrator (websvc.exe)
Spooler SubSystem Application (websvc.exe)
Tcp Application Manager (websvc.exe)
Windows .Net Manager (websvc.exe)
Windows Local Services (websvc.exe)
Windows Service Manager (websvc.exe)
Windows Web Services (websvc.exe)

Removed - 14

Services - X - [path to trojan] - Covered by the METEORSHELL entry
DSAcass - X - CACASP.EXE - SDBOT.AEL duplicate
Epson Stylus C62 Series - U - E-S0BIC1.EXE - Invalid entry
USBHWINFO - X - mac.exe - Covered by the LOWZONE-I entry
MP Tclockvv - X - mptclock.exe - NACKBOT-A duplicate
MS_update_0704_KB74073.exe - X - MS_update_0704_KB74073.exe - No example found
Msn Patches - X - msndr.exe - No example found
Microsoft Update - X - msupdate32.exe - SPYBOT.LZ duplicate
WINTASK - X - msvhost.exe - MYTOB-AR duplicate
userinit - X - ntos.exe - Invalid entry
REGRUN - X - regeditt.exe - Noe example found - duplicate of LOWZONE-AH
USBHWINFO - X - sst6.exe - Covered by the LOWZONE-I entry
Recoveru system - X - svchast.exe - No example found
wupdt - X - wupdt.exe - Invalid entry

Back to Updates - 2012

Site Map

Home