Latest updates for the Windows start-up programs database

29th July, 2016

New items - 181

• [6 characters] - X - !satana!.txt
• [name].exe - X - [name].exe
• mssadv.exe - X - [path to file]
• TheLeGend - X - [path to skynet.exe]
• msupdate32 - X - [path to trojan]
• HKCU - X - 1000.exe
• HKLM - X - 1000.exe
• AccountHacker.exe - X - AccountHacker.exe.exe
• MPC AdCleaner - U - AdCleaner.exe
• load - X - appzzh.exe
• bohemia.exe - X - bohemia.exe
• Shell - X - bsoderror.exe
• ClientStartup - X - Client.exe
• IComplemento - X - Complement.exe
• Cpl32ver - X - Cpl32ver.exe
• HKCU - X - csrrs.exe
• HKLM - X - csrrs.exe
• ctfmoon.exe - X - ctfmoon.exe
• ctfxmon.exe - X - ctfxmon.exe
• Microsoft Defender Anti-Virus - X - defenderdriver.dll
• Draughts - U - Draughts.exe
• Wizzwifihotspot - U - EasyHotspot.exe
• EnvoEml - X - EnvoEml.exe
• Shell - X - error.exe,explorer.exe,iexplore.exe
• load - X - esentutl.exe (%AppData%\Microsoft)
• load - X - esentutl.exe (%System%\drivers)
• load - X - esentutl.exe (%UserTemp%)
• load - X - esentutl.exe (%Windir%\System)
• run - X - esentutl.exe
• example - X - example.exe
• NetZero_uoltray - N - exec.exe
• Policies - X - explore.exe
• Explorer - X - explorer.exe
• HKCU - X - explorer.exe
• HKLM - X - explorer.exe
• Policies - X - explorer.exe
• Shell - X - explorer.exe,MSupdate.exe
• Audio HD Driver - X - FazilUpdate.exe
• Abobex - X - file.exe
• Update - X - filename.exe (%AppData%\Microsoft\Windows\Start Menu\Programs (8/7/Vista) or %UserProfile%\Start Menu\Programs (XP))
• Update - X - filename.exe (%Templates%)
• Microsoft - X - framework setup.exe
• Application - X - GIDEON.exe
• autoupdate - X - gpedit.exe
• gupdate - U - gupdate.exe
• Ultra Hal Startup - N - HalAsst.exe
• Hide IP - U - hideippla.exe
• Hide IP Platinum - U - hideippla.exe
• Hide your IP when surfing - U - hideippla.exe
• Hide IP - U - hideipsp.exe
• Hide IP Speed - U - hideipsp.exe
• Hide your IP address and protect your privacy - U - hideipsp.exe
• Sound - X - Host.exe
• startup - X - Host.exe
• hupbXGtblaxktVF - X - hupbXGtblaxktVF.exe
• IDSCPRODUCT - U - idscservice.exe
• IdiomaX Office - N - IdxOffice.exe
• IgfxGray - X - IgfxGray.exe
• Imgburn - X - ImgBurn.exe
• IntelCoreD.exe - X - IntelCoreD.exe
• iolo AntiVirus® - Y - ioloAV.exe
• iolo Personal Firewall® - Y - ioloFW.exe
• ioloGovernor - Y - ioloGovernor.exe
• iolo Startup - U - ioloLManager.exe
• iolo System component - U - ioloLManager.exe
• Sun Java Updater v5.1 - X - javarun.exe
• Sun Java Updater v7.7 - X - javawm.exe
• HKCU - X - julio.exe
• HKCU - X - junio.exe
• spc_w - N - juspc.exe
• IComplemento - X - Live.exe
• ioloLiveBoost - Y - LiveBoost.exe
• LeagueofLegendsCache - X - LolCache.exe
• load - X - LolCache.exe
• Cryptographic Services Server - X - lsm_update.exe
• Policies - X - microfry.exe
• Microsoft Excel - U - Microsoft Excel.exe
• My Movie Desktop - U - mmd.exe
• systemfileupdater - X - msdcsc.exe
• msnsc - X - msnsc.exe
• msnsky.exe - X - msnsky.exe
• MsnSys.exe - X - MsnSys.exe (%AppData%)
• MsnSys.exe - X - MsnSys.exe (%CommonAppData%)
• TaskMan - X - MSupdate.exe (%AppData%\Update)
• Taskman - X - MSupdate.exe (%AppData%\WindowsUpdate)
• Windows Update Manager - X - msupdate.exe
• Startup RegKey Name - X - MyFile.exe
• nEScUi.exe - X - nEScUi.exe
• Secured Net - U - netsafe.exe
• ctmon2 - X - new.exe
• msnmsr - X - new.exe
• Sidebr - X - new.exe
• Policies - X - notepad.exe
• notepad - X - notepad.exe.exe
• load - X - nt32.exe
• Microsoft COM+ System Application - X - ntservices.exe
• load - X - ozname.exe
• WV3E3W0UXE4W1H6JOEOJOSEIHJTGBG - X - pkgfurotmvn.exe
• RealDownload - N - REALDOWNLOAD.EXE
• Reminder-hpcXXXXX - N - remind32.exe (%ProgramFiles%\HP DeskJet [model] Series\ereg)
• Reminder-hpcXXXXX - N - Remind32.exe (%ProgramFiles%\HP PhotoSmart\C[model] Camera\Registration)
• Reminder-hpcXXXXX - N - Remind32.exe (%ProgramFiles%\HP PhotoSmart\Digital Camera\REGISTER)
• Reminder-iqiXXXXX - N - REMIND32.EXE
• reminder-ScanSoft Produkt Registrierung - N - REMIND32.EXE
• Reminder - N - Reminder.exe (%ProgramFiles%\TOSHIBA\Reminder)
• Reminder - N - Reminder.exe (%ProgramFiles%\TTG\Reminder )
• amputate - U - rickshaws.exe
• RoboForm - N - RoboFormWatcher.exe
• run - X - rundll.exe
• SystemVolume - X - rundll.exe
• CPM[random] - X - rundll32.exe [path] gimujewa.dll,a
• WinHacker 95 - N - rundll32.exe [path] wh95.dll,HackMe
• safe_urls[3 digits] - U - s[3 digits].exe
• Microsoft Services - X - scrss.exe
• scvhchost232 - X - scvhchost432.exe
• scvhchost992 - X - scvhchost932.exe
• Search Keeper - U - SearchKeeper.exe
• Security Solution - X - Security Solution.exe
• Plugin - X - Server.exe
• HTML - X - Services.exe
• Serv-U® File Server Tray Application - U - Serv-U-Tray.exe
• iolo System Mechanic Utility Bar - U - SMUtilityBar.exe
• Softlayer - X - Softlayer.exe
• Startup - X - Startup.exe
• Steam - X - Steam.exe
• SigmatelSysTrayApp - N - sttray64.exe
• HTML - X - Susoft.exe (%UserProfile%\Escritorio)
• HTML - X - Susoft.exe (%Windir%\ProFile)
• WinSix - X - SVCHOSI.EXE
• load - X - svchost.exe
• Microsoft - X - svchost.exe
• Policies - X - svchost.exe
• Processus hôte pour les services Windows - X - svchost.exe
• Sidebar(32.3uu) - X - svchost.exe
• Sidebar(32.4) - X - svchost.exe
• windef - X - svchost.exe
• test - X - svchosts.exe
• HKCU - X - svchot.exe
• HKLM - X - svchot.exe
• HKCU - X - svshr.exe
• HKLM - X - svshr.exe
• System Mechanic Cache Cleanup - U - SysMech4.exe
• System Mechanic - N - SystemMechanic.exe
• tassk - X - tassk.exe
• tasskhost.exe - X - tasskhost.exe
• Temp - X - Temp.exe
• UnfriendWatch - U - UnfriendWatch.exe
• WinUpdt - X - update.exe
• Userinit - X - userinit.exe,Steam.exe
• Vistadrv - X - vsdrv.exe (%ProgramFiles%\VistaDrives)
• VistaDRV - X - vsdrv.exe (%ProgramFiles%\VistaDrv)
• Vistadrv - X - vsdrv.exe (%System%\Vistadrive)
• WarReg_PopUp - N - WarReg_PopUp.exe
• ScreenArt - N - willowrd.exe
• WinDef - X - WinDef.exe
• windef - X - WinDefender.exe
• windoctorx.exe - X - windoctorx.exe
• Microsoft - X - Window Update.exe
• Policies - X - Window Update.exe
• WindowHost - U - WindowHost.exe
• HKCU - X - Windows.exe
• HKLM - X - Windows.exe
• Policies - X - Windows.exe
• Shell - X - WindowsActivation.exe
• LicenceError - X - WindowsActivationCenter.exe
• Shell - X - WindowsActivationCenter.exe
• WinHost32 - X - WinHost32.exe
• winlogon.vbs - X - winlogon.vbs
• MicrosoftWBEMCIMObjectManager - N - WINMGMT.EXE
• Winpopup LAN Messenger - N - WinPopup.exe
• winroute - ? - winroute.exe
• Windows (Default) - X - winsvhost.scr
• Microsoft Corp Update - X - winsvrn32.exe
• HKCU - X - world.exe (%Windir%\Hewlett)
• HKCU - X - world.exe (%Windir%\microsoft)
• HKLM - X - world.exe (%Windir%\Hewlett)
• HKLM - X - world.exe (%Windir%\microsoft)
• untd_recovery - ? - x1exec.exe
• load - X - xslhtv.exe
• run - X - xslhtv.exe
• xVWrsqSWuxYVn - X - xVWrsqSWuxYVn.exe

Changed items - 218

• spoolsvr ([path to SPOOLSVR.EXE]) - Command and description changed
• NI.UGA6PS_0001_N108M1708 ([path to trojan]) - Description changed
• VidSvr ([path to vidsvr.exe]) - Command changed
• Cryptographic Service ([random].exe) - Command and description changed
• Windowz ([worm filename].vbs) - Command and description changed
• ravshell (1explore.exe) - Description changed
• WindowsK (a1.exe) - Description changed
• applica (applica.exe) - Description changed
• Update (ASPackage.exe) - Description changed
• Shell (black.exe (%ProgramFiles%\Sweep Clean PC Pro, HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell - illegal)) - Command and description changed
• Shell (black.exe (%ProgramFiles%\Sweep Clean PC Pro, HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell - legal)) - Description changed
• spc_w (blspc.exe) - Description changed
• run (cmmpu.exe) - Name and description changed
• System132 (Csrtss.exe) - Description changed
• ctflog manager (ctflog.exe) - Description changed
• ctfmoon.exe (ctfmoon.exe) - Description changed
• SysteZ (d1.exe) - Description changed
• dnam (d140113.a.Stub.EXE) - Description changed
• ioloDelayModule (delay.exe) - Hyperlink and description changed
• DirectX Plugin (directx32.exe) - Description changed
• DnsBlock (DnsBlockTray.exe) - Description changed
• TK8 EasyNote (EasyNote.exe) - Description changed
• LicenceError (error.exe (%ProgramFiles%\[ComputerName])) - Description changed
• Shell (error.exe (%ProgramFiles%\Pro PC Clean)) - Description changed
• LicenceError (error.exe (%ProgramFiles%\WindowsLicenseUpdate)) - Description changed
• Shell (error.exe (%ProgramFiles%\WindowsLicenseUpdate)) - Description changed
• The Assistant (eSched.exe) - Hyperlink and description changed
• BlueLight_uoltray (exec.exe) - Status (N) and description changed
• Juno_uoltray (exec.exe) - Description changed
• uoltray (exec.exe) - Description changed
• ravshell (expl0rer.exe) - Description changed
• explore manager (explore.exe) - Description changed
• [random] (explore3.exe) - Description changed
• SyZ (f1.exe) - Description changed
• AnimeUnzipped EPM Support (f6medint.exe) - Description changed
• WinFax PRO Message Manager (FAXMNG32.EXE) - Name and description changed
• findfast (findfast.exe) - Description changed
• run (fmedia.exe) - Name and description changed
• Fdaemon security (fsecur.exe) - Description changed
• MyTelevisionHQ EPM Support (ftmedint.exe) - Description changed
• GenieoSystemTray (gentray.exe) - Description changed
• GenieoUpdaterService (genupdater.exe) - Description changed
• gjmt (gjmt.exe) - Description changed
• Ultra Hal Assistant [version] Startup (HalAsst.exe) - Name changed
• spc_w (hcm.exe) - Description changed
• ControlPanel (host32.exe internat.dll,LoadKeyboardProfile) - Description changed
• TGPro Office (IdxOffice.exe) - Description changed
• iolo AntiVirus (ioloAV.exe) - Description changed
• iolo Personal Firewall (ioloFW.exe) - Description changed
• Sun Java Updater v4 (javacpl.exe) - Description changed
• SunJava Updater v7 (javale.exe) - Description changed
• Sun Java Updater v7.4 (javawx.exe) - Description changed
• MSAdmin (jdbgmrg.exe) - Description changed
• jpupd (jpupd.exe) - Description changed
• linkyuu (linkuyy.exe) - Description changed
• run (lxdboxcp.exe) - Name and description changed
• maintenance software (maintenance software) - Description changed
• Microsoft excel (Microsoft excel.exe) - Description changed
• rmmon (mprmmon.exe) - Description changed
• Microsoft Windows Visual V2.0 (msiutil.exe) - Description changed
• Windows MSN (MSN.msn) - Description changed
• msoupdater (msoupdater.exe) - Description changed
• Windows Update Manager (MSupdate.exe) - Description changed
• cuszkrea (mwvlfqxx.exe) - Description changed
• MyAppsCloud (MyAppsCloud.exe) - Description changed
• MyPC Backup (MyPC Backup.exe) - Description changed
• myradioplayer Tray (myradioplayerTray.exe) - Description changed
• nvcoi (nvcoi.exe) - Description changed
• spc_w (nzspc.exe) - Description changed
• Obrona Block Ads (ObronaBlockAds.exe) - Description changed
• ObronaVPN (ObronaVPN.exe) - Description changed
• Off (off.bat) - Description changed
• OfferBoulevard (OfferBoulevardW.exe) - Description changed
• Olacarita (olacarita.exe) - Description changed
• Optimizer Pro (OptProLauncher.exe) - Description changed
• OneSafe PC Cleaner (OSPCSchedule.exe) - Description changed
• ospd_us_# (ospd_us_#.exe) - Description changed
• PCAcceleratePro (PCAcceleratePro.exe) - Description changed
• RDReminder (PCPerformer.exe) - Description changed
• playnowradio (playnowradio.exe) - Description changed
• run (PNPCHK.EXE) - Description changed
• System Mechanic Popup Blocker (PopupBlocker.exe) - Hyperlink and description changed
• System Mechanic Popup Stopper (Popupstopper.exe) - Hyperlink and description changed
• run (Qtstub.exe) - Description changed
• MsgCenterExe (RealOneMessageCenter.exe) - Description changed
• RealDownload (RealPlay.exe) - Description changed
• RDReminder (RegCleanPro.exe) - Description changed
• SAClient (RegCon.exe) - Description changed
• Reminder-cpqXXXXX (remind32.exe) - Description changed
• Reminder-hpcXXXXX (remind32.exe) - Description changed
• reminder-ScanSoft Product Registration (REMIND32.EXE) - Description changed
• Reminder (reminder.exe (%ProgramFiles%\Microsoft Money\System)) - Description changed
• Reminder (Reminder.exe (%ProgramFiles%\SecureExpertCleaner)) - Description changed
• RexSyMon (rexsymon.exe) - Description changed
• RoboFormWatcher (RoboFormWatcher.exe) - Description changed
• RoboForm (RoboTaskBarIcon.exe) - Description changed
• RtlMon.exe (RtlMon.exe) - Description changed
• runAP.exe (runAP.exe) - Name changed
• RFX_auto_upgrade (rundll32.exe [path] npvpg005.dll,auto_upg_check) - Command and description changed
• WinHacker (rundll32.exe [path] wh95.dll,HackMe) - Description changed
• rundll32 (rundll64.exe) - Description changed
• RxMon (rxmon9x.exe) - Hyperlink and description changed
• WindowsD (s1.exe) - Description changed
• SAgent2ExePath (SAgent2.exe) - Status (U) and description changed
• TwkSCardSrv (SCardS32.Exe) - Description changed
• Scheduled Maintenance (Scheduled_Maintenance.exe) - Hyperlink and description changed
• AVSchedScan (SCHSC9X.EXE) - Description changed
• ScreenPrint32 (ScreenPrint32.exe) - Hyperlink and description changed
• scrss (scrss.exe) - Description changed
• SDetect.exe (SDetect.exe) - Name and hyperlink changed
• SDPhotoBar.exe (SDPhotoBar.exe) - Hyperlink and description changed
• Security Solution 2011 (Security Solution.exe) - Hyperlink and description changed
• Security Solution 2011 Security (securitymanager.exe) - Hyperlink and description changed
• Xpsystem (SERVICES.EXE) - Description changed
• Serv-U (serv-u32.exe) - Hyperlink and description changed
• ServUTrayIcon (ServUTray.exe) - Status (U) and description changed
• Serv-U® File Server (Serv-U-Tray.exe) - Description changed
• Serv-U-Tray (Serv-U-Tray.exe) - Description changed
• ServUTrayIcon (Serv-U-Tray.exe) - Description changed
• SetDefPrt (SetDefPrt.exe) - Description changed
• SetiQueue (setiqueue.exe) - Description changed
• SigmaTel Audio (setup.exe) - Description changed
• ShopSafe (ShopSafe.exe) - Description changed
• Simcast (SimcastAlerts.exe) - Description changed
• Streamload Downloader (SlDB.exe) - Description changed
• slimp3 (SliMP3 Server.exe) - Description changed
• SmartBarXP (SmartBarXP.exe) - Description changed
• sMaRTcaPs (SmartCaps.exe) - Command, hyperlink and description changed
• Internet Directory (smiptray.exe) - Name and description changed
• SMSI Loader (SMLoader.exe) - Description changed
• SMSystemAnalyzer (SMSystemAnalyzer.exe) - Status (Y), hyperlink and description changed
• iolo Utility Bar (SMUtilityBar.exe) - Hyperlink and description changed
• Snsicon (Snsicon.exe) - Description changed
• Ci Servs (Sontiwin.exe) - Description changed
• SpeedItupFree (speeditupfree.exe) - Description changed
• LaserJet (spoolvs.exe) - Description changed
• Titan FTP Server Tray App (srxTray.exe) - Name and description changed
• Smart Label RFViewer (SSLFVIEW.EXE) - Description changed
• Smart Label O Server (ssloserv.exe) - Description changed
• SigmaTel StacMon (stacmon.exe) - Description changed
• stacmon (stacmon.exe) - Description changed
• StacSysTray (StacSysTray.exe) - Description changed
• System Mechanic Startup Guard (StartupGuard.exe) - Hyperlink and description changed
• StatusView (StatusView.exe) - Hyperlink and description changed
• Streamload Uploader (StreamMgr.exe) - Description changed
• SigmatelSysTrayApp (stsystra.exe) - Description changed
• SigmatelSysTrayApp (sttray.exe) - Description changed
• fzg (svhost32.exe) - Description changed
• Shockwave Init (SWINIT.EXE) - Description changed
• SwTray (SWTRAY.EXE) - Description changed
• SideWinderTrayV4 (SWTrayV4.exe) - Description changed
• SWTrayV4 (SWTrayV4.exe) - Description changed
• System Mechanic Professional Update [Incinerator.dll] (SysMech4.exe /REREG: [path] Incinerator.dll) - Hyperlink and description changed
• SystemGuardAlerter (SystemGuardAlerter.exe) - Status (Y), hyperlink and description changed
• Tablet (Tablet.exe) - Description changed
• Tahni Deskmate (Tahni.exe) - Description changed
• Iolo Task Agent (Task_Agent.exe) - Hyperlink and description changed
• taskmgr.exe (taskmgr.exe) - Description changed
• TURBONOTE (tbnote.exe) - Description changed
• TB-Tray (tbtray.exe) - Name and description changed
• TimeUp (Timeup.exe) - Description changed
• Tips (tips.exe) - Command changed
• TizzleTalk (TizzleTalk.exe) - Description changed
• tkonnect (TKONNECT.EXE) - Hyperlink and description changed
• IZSoftTrayHelper (tray_helper.exe) - Name, hyperlink and description changed
• RealJukeboxSystray (tsystray.exe) - Description changed
• Remote Controller (TVRMVCR.EXE) - Description changed
• RadPlayer Tray (TyV1.exe) - Description changed
• UninstallAbility (uability.exe) - Description changed
• updatev01 (updatev01.exe) - Description changed
• upospd_us_#.exe (upospd_us_#.exe) - Description changed
• USBTA (usbtapnp.exe) - Description changed
• UStorag (ustorage.exe) - Description changed
• Ustorage (Ustorage.exe) - Status (U) and description changed
• UtilityPro (UtilityPro.exe) - Description changed
• visionGS (visiongs.exe) - Description changed
• SonicA3DControl (vrtxctrl.exe) - Name, hyperlink and description changed
• Vistadrv (vsdrv.exe) - Status (X) and description changed
• snp2std (vsnp2std.exe) - Hyperlink and description changed
• snp2uvc (vsnp2uvc.exe) - Status (N), hyperlink and description changed
• snpstd (vsnpstd.exe) - Status (N), hyperlink and description changed
• SNPSTD2 (vsnpstd2.exe) - Status (N), hyperlink and description changed
• snpstd3 (vsnpstd3.exe) - Status (N), hyperlink and description changed
• vsnpstd3 (vsnpstd3.exe) - Status (N), hyperlink and description changed
• vspdfprsrv.exe (vspdfprsrv.exe) - Hyperlink and description changed
• VoyetraTray (vtray.exe) - Hyperlink and description changed
• SFP (vzSFPWin.EXE) - Hyperlink and description changed
• w98Eject (w98Eject.exe) - Description changed
• WebArmyKnife (WAK.exe) - Description changed
• Wanadoo Messenger.exe (Wanadoo Messenger.exe) - Description changed
• war-ftpd (war-ftpd.exe) - Name and description changed
• WarReg_PopUp (WarReg_PopUp.exe) - Hyperlink and description changed
• Washerie.exe (washerie.exe) - Hyperlink and description changed
• Watch (WATCH.exe (%ProgramFiles%\[folder]\[folder] & %ProgramFiles%\[folder]\[folder] & %Windir%\TWAIN_32\[folder])) - Status (N) changed
• Watch (watch.exe (%ProgramFiles%\Minitel)) - Description changed
• Tiny Watcher Logon Time (Watcher.exe) - Description changed
• WinDVRCtrl (WDVRCtrl.exe) - Command and description changed
• WebLink (WebLink.exe) - Description changed
• Controller (WFXCTL32.EXE) - Description changed
• WinFax PRO Controller (WFXCTL32.EXE) - Description changed
• Willow Road Screen Saver (WillowRd.exe) - Name and command changed
• WINCOOL.EXE (WINCOOL.EXE) - Name, hyperlink and description changed
• windef (windef.exe) - Description changed
• WinMX (WinMX.exe) - Hyperlink and description changed
• WinMySQLadmin (winmysqladmin.exe) - Hyperlink and description changed
• Fomine WinPopup (winpopup.exe) - Name and description changed
• WinRoute (winroute.exe) - Status (Y) and description changed
• WM VCR (WMVCR.exe) - Hyperlink and description changed
• WebPosition Gold Scheduler 2 (wpsched20.exe) - Name, command and description changed
• WrCtrl (WrCtrl.exe) - Description changed
• CTFMON (wscript.exe /E:vbs [path] regedit.sys) - Description changed
• CTFMON (wscript.exe /E:vbs [path] winjpg.jpg) - Description changed
• run (wswpd.exe) - Description changed
• WeatherWatcher (ww.exe) - Hyperlink and description changed
• WeatherWatcherLive (ww.exe) - Description changed
• Wildwire Monitor (WWMon.exe) - Description changed
• Wintime.Wtxpload (Wxpload.exe Wintime) - Name changed
• Update (YSPackage.exe) - Description changed

Corrections - 6

• Shell (gog.exe) - Description changed
• IEPR (IEPR.exe) - Description changed
• mbot_fi_# (mbot_fi_#.exe) - Description changed
• Ninja TuneUp (Ninja TuneUp.exe) - Name and description changed
• NinjaTuneUp Alert System (NinjaTuneUp Alert System.exe) - Description changed
• upmbot_fi_#.exe (upmbot_fi_#.exe) - Description changed

Hyperlinks changed - 11

• Scotia OnLine Recovery (etdirrcv.exe) - Hyperlink and description changed
• Scotia OnLine Security v*.* Recovery (etdirrcv.exe) - Hyperlink changed
• Tesco.net (rundll32 [path] RyDial.dll,QuickStart) - Hyperlink changed
• Scanner Detector (SDetect.exe) - Hyperlink changed
• SETI@home (SETI@home.exe) - Hyperlink changed
• seticlient (SETI@home.exe) - Hyperlink changed
• pictureBUZZTray (swtray.exe) - Hyperlink changed
• TextAloud (TextAloudMP3.exe) - Hyperlink changed
• TomTomHOME.exe (TomTomHOME.exe) - Hyperlink changed
• TomTomHOME.exe (TomTomHOMERunner.exe) - Hyperlink changed
• Transcode360 (Transcode360Tray.exe) - Hyperlink changed

Total Defense descriptions updated - 11

• Saggwwgg (CVAvwwd.exe)
• UNleaded Syn Manager (Edit.exe)
• Norton Auto-Protect (ffbaqe.exe)
• Maxsized (gqasqs.exe)
• System Information Manager (Msbb.exe)
• Microsoft Buffer App (msbuffer.exe)
• egikugu (napolecy.exe)
• Esutityde (osutityde.exe)
• Microsoft Synchronization Manager 2 (svhostc.exe)
• MSDatabla (vadasq.exe)
• ipyjy (woniz.exe)

Sophos hyperlinks and descriptions changed - 92

• Micro Office ([path to trojan])
• Microsoft Internet Explorer ([path to trojan])
• NavProtect32 ([path to trojan])
• Reeg_ ([path to trojan])
• Root_Machine ([path to trojan])
• RunOnce ([path to trojan])
• svchosd ([path to trojan])
• SySPower ([path to trojan])
• winmngr.exe ([path to trojan])
• wlm ([path to trojan])
• {BB87203E-EBAD-7A2C-8F8F-FF9626E7B87B} (aconi.exe)
• anvtirs (anvtirs.exe)
• Application Explorer (appexplr.exe)
• cleansweep.exe (cleansweep.exe)
• CsimPlayer (CsimPlayer.exe)
• czrss (czrss.exe)
• Daemon Tools ATAPI driver (daemontools.exe)
• Adobes Updates (ddosw.exe)
• cnxdmqje (ehalxqqtssd.exe)
• firewal (firewal.exe)
• buohxqtfswb (gcjydr.exe)
• Locinx (gdicli.exe)
• stagio (hot.exe)
• DrvStart (HPMedia.exe)
• Navegate (iiexplorer.exe)
• crsmons (iomssls.exe)
• winzip (ir_ftp.exe)
• Sun Java Updater v5 (javajre.exe)
• king_jp (jpking.exe)
• ykemkfel (jsuyaxatssd.exe)
• Sun Java Updater v7.11 (jucshed.exe)
• Kavirs1 (Kavirs1.exe)
• suapafjj (kgejbaytssd.exe)
• Login (Login.exe)
• MsnWin (messagewin.exe)
• system (Microsoft Office.exe)
• sfwjbbjd (midiwemshdw.exe)
• MMtask Service (mmtask.exe)
• iudymosj (mrgviurtssd.exe)
• msi.exe (msi.exe)
• msnmessenger (msnmessenger.exe)
• Hservice (msservice.exe)
• mssrv32 (mssrv32.exe)
• MS Virtual CLS (msvmcls64.exe)
• Xpnet (NetXp.exe)
• Ci Servs (newbin.exe)
• NOPDBS (NOPDBS.exe)
• nvcpll (nvcpll.exe)
• Ci Servs (oldbi.exe)
• Ci Servs (oldbin.exe)
• owqwowou (ovswmcjtssd.exe)
• p (p.exe)
• plugsys (plugsys.exe)
• pool manager (popsvr.exe)
• System RAID Manager (raid64.exe)
• Regedit (regedits.exe)
• Kinofilmoff.Net (Reklamer.exe)
• crash0001 (restorecrashwin32.bat)
• Bluetooth (sample.exe)
• Spooler de Impress (services.exe)
• ttool (sr882388.exe)
• Proteção de tela (ssmaze.scr)
• winreg_32 (svchosst.exe)
• [random] (svchost.exe)
• [trojan name] (svchost.exe)
• Microsoft? Operating System: (svchost.exe)
• svchost (svchost.exe)
• Microsoft Internet Explorer (svchosts.exe)
• KernellApps (svshosti.exe)
• System Development Operations (sysdevop.exe)
• system16 (system16.exe)
• reg_run (Systen.exe)
• Ci Servs (SysTuwin.exe)
• trend (trend.exe)
• UNrcJcrVSu.exe (UNrcJcrVSu.exe)
• upd32.exe (upd32.exe)
• UpdaterUI (UpdaterUI.exe)
• winreg_32 (Vc030405.exe)
• videopci (videopci.exe)
• ComSpec (VLOBPULQ.exe)
• Microsoft Outlook (wincsrss.exe)
• winIogom (winIogom.exe)
• WindowsDriverControl (winmsnliv.exe)
• Crtlink (winpack.exe)
• Svchost (winprint.exe)
• winzip32 (winzip32.exe)
• wmplayer.exe (wmplayer.exe)
• WorkFile (WorkFile.exe)
• UserIMEsm (wualt.exe)
• wpds.exe (wwnrot.exe)
• XHFHGEBDbadw (XHFHGEBDbadw.exe)
• ylbrooht (ygtowvqtssd.exe)

Removed - 34

• Adobe Gamma Loader.com - X - Adobe Gamma Loader.com - Duplicate
• Swap Nut - N - javaw.exe - Example not found
• Vegas Palms - Launcher - N - Launcher.exe - Example not found
• Tivoli - N - LCFEP.EXE - Example not found
• ProxyGate - U - MainService.exe - Duplicate
• RealPlayer2 - N - MsgCenterExe - Example not found
• Recover - N - N/A - Example not found
• idefsvc - X - pcdefender.exe - Included in other "idefsvc" entry
• run= - N - pcfix2k.exe - Example not found
• Remote Control - N - Rc.exe - Example not found
• Reboot - N - Reboot.exe - Example not found
• RecoverFromReboot - N - RECOVE~1.EXE - Example not found
• tour - N - regedit ..tour.reg - Example not found
• Reminder-ranXXXXX - N - remind32.exe - Example not found
• RFTray - N - RFTRay.exe - Invalid entry
• Spellex Anywhere - N - sa.exe - Example not found
• SafeInstall.exe - N - SAFEIN~1.EXE - Example not found
• Compaq Computer Corp SCCenter Module - N - SCCENTER.EXE - Example not found
• Slingshot - N - SLINGS~1.EXE - Example not found
• SM1NINT - N - SM1NINT.exe - Example not found
• SMToolbar - N - SMToolbar.exe - Example not found
• Microsoft Sidewinder Game Controller Software - N - SWTRAY.EXE - Example not found
• Teach In Box - N - teachbox.exe - Example not found
• TimeOnline - N - TIMEONLINE.EXE - Example not found
• TkBell.Exe - N - tkbell.exe - Example not found
• TkBellExe - N - tkbell.exe - Example not found
• URLMAP - N - Urlmap.exe - Example not found
• VCDWATCH - ? - VCDWATCH.EXE - Invalid entry
• Vistascan - N - vistascan.exe - Example not found
• vTPass - N - vtpassld.exe - Example not found
• War FTPD Tray Icon - N - wartray.exe - Example not found
• Watchdog - N - Watchdog.exe - Example not found
• Controller - N - WFXCTL32.EXE - Invalid entry
• WinMySQLadmin Tool - N - winmysqladmin.exe - Example not found

Notes:

• All "Detected by GFI" references changed to "Detected by ThreatTrack Security"

Back to Updates - 2016

Copyright © Pacman's Portal, 2001 - 2019
Powered by Malwarebytes
All rights reserved