Latest updates for the Windows start-up programs database

31st August, 2017

New items - 242

• Safe-Ads - U - [path to safeads.exe]
• CertificatesCheck - X - [random].exe
• A.M.K.B_Pk.exe - X - A.M.K.B_Pk.exe
• ALCKRESI.exe - U - ALCKRESI.exe
• anjwsoinhj.exe - X - anjwsoinhj.exe
• Intel AppUp(R) center Systray - U - AppUp.exe
• Intel AppUp(SM) center Systray - U - AppUp.exe
• Assus XDesktop Load.exe - X - Assus XDesktop Load.exe
• AudioCache.vbe - X - AudioCache.vbe
• autorun.exe - X - autorun.exe
• autos.exe - X - autos.exe
• avg.exe - X - avg.exe
• bf.exe - X - bf.exe
• DrvInst - U - bpd.exe
• bzts.exe - X - bzts.exe
• YMHLR - X - c_0374.exe
• CAPOSD - U - CAPOSD.exe
• CheckRun22find_uninstaller - U - CheckRun22find.exe
• Chrome.exe - X - Chrome.exe
• CloudNet - X - cloudnet.exe
• cmzo.exe - X - cmzo.exe
• Main Intel CPU Controller - X - cpuhost.exe
• CTFM0N.exe - X - CTFM0N.exe
• ctfmonx.exe - X - ctfmonx.exe
• Live! Central 2 - N - CTLVCentral2.exe
• Live! Central 3 - N - CTLVCentral3.exe
• czlq.exe - X - czlq.exe
• deploy.exe - X - deploy.exe
• dfjje.exe - X - dfjje.exe
• dfqupd32.exe - X - dfqupd32.exe
• Adobe - X - Dllhost.exe
• Adobe Update - X - Dllhost.exe
• Java Update - X - Dllhost.exe
• Windows Update - X - Dllhost.exe
• dmaupd32.exe - X - dmaupd32.exe
• dniw.exe - X - dniw.exe
• MediaFaceOnlinePluginsService - N - dolcore.exe
• DriverReviver - U - DriverReviver.exe
• DropboxW - X - DropboxW.exe
• Energy Manager - U - Energy Manager.exe
• ewe.exe - X - ewe.exe
• WindowsLibrary - X - ExecuteLibrary.exe
• exitnode - U - exitnode.vbs
• LenovoOptMouseUpdate - U - extapsup.exe
• Fastboot - U - FBConsole.exe
• xVVABMx - X - File Name.exe
• filename.vbe - X - filename.vbe
• filename.vbs - X - filename.vbs
• [random] - X - FileserverName.exe
• OV3_Monitor - N - FirstStart.exe
• FLxHCIm - Y - FLxHCIm.exe
• FLxHCIm64 - Y - FLxHCIm.exe
• fmnupd32.exe - X - fmnupd32.exe
• fqrl.exe - X - fqrl.exe
• Framewindows - X - framework.exe
• gabr.exe - X - gabr.exe
• gbplugin.exe - X - gbplugin.exe
• GbpSvm.exe - X - GbpSvm.exe
• Chrome Updater - X - Google Chrome Updater.exe
• GoogleCrashHandlerws.vbs - U - GoogleCrashHandlerws.vbs
• Grabber.vbe - X - Grabber.vbe
• Hayalan.exe - X - Hayalan.exe
• Windows Defender - X - Host.exe
• DRM Service - X - hostdl.exe
• Daemon for Mouse Suite - U - ICO.exe
• icwsetup.exe - X - icwsetup.exe
• iediagnostics - X - iediagntool.exe
• ifmq.exe - X - ifmq.exe
• ihaupd32.exe - X - ihaupd32.exe
• ikowin32.exe - X - ikowin32.exe
• imad.exe - X - imad.exe
• imgburn.vbe - X - imgburn.vbe
• imiupd32.exe - X - imiupd32.exe
• Microsoft Corporation - X - Ind.lnk
• Microsoft Framework - X - Ind.lnk
• inetsrv - X - inetsrv.exe
• infos.exe - X - infos.exe
• installed.vbe - X - installed.vbe
• IntellingentTouchpad - U - IntelligentTouchpad.exe
• Intel AppUp(R) center - U - ismagent.exe
• Intel AppUp(SM) center - U - ismagent.exe
• Lenovo App Shop - U - ismagent.exe
• Java7.exe - X - Java7.exe
• Gbp Service - X - javawins.exe
• gebariastoTnT - X - javawins.exe
• javawins.exe - X - javawins.exe
• nod32kab - X - javawisx.exe
• JQSD - X - jqsd.exe
• jqsd.exe - X - jqsd.exe
• mstcs - X - just.exe
• k2.exe - X - k2.exe
• KB4182843.exe - X - KB4182843.exe
• kss.exe - X - kss.exe
• lan.exe - X - lan.exe
• lans.exe - X - lans.exe
• legupd32.exe - X - legupd32.exe
• Lenovo Recommends - U - Lenovo Recommends.exe
• Lenovo Transition - Y - Lenovo Transition.exe
• LenovoPortal - ? - lenovo.portal.start.exe
• Lenovo Registration - N - LenovoReg.exe
• LVT - U - LJYZ.exe
• LMCSSTART1 - U - lmcfrundll.exe libmcsrdllb.dll,InitSubsystemProcesses
• LMCSSTART3 - U - lmcfrundll.exe libmcsrdllb.dll,SetupCamplusDrop
• LMCSSTART2 - U - lmcfrundll.exe libstartstub2.dll,ProxyStart
• ksmks - X - lsacs.exe
• lssas.exe - X - lssas.exe
• AutoStartSmartVoice - U - LsvTrayLoad.exe
• LuckyTab - U - LuckyTab.exe
• lwbk.exe - X - lwbk.exe
• Macromedia Doctor Load.exe - X - Macromedia Doctor Load.exe
• Windows Security Server - X - mcrserver.exe
• me.exe - X - me.exe
• messenger.exe - X - messenger.exe
• mgjwin32.exe - X - mgjwin32.exe
• mhbupd32.exe - X - mhbupd32.exe
• Microsoft Office.pif - X - Microsoft Office.pif
• LnvMobHotspotClient - U - MobileHotspotclient.exe
• MobileXpressTray.exe - X - MobileXpressTray.exe
• monech32.exe - X - monech32.exe
• monfnh32.exe - X - monfnh32.exe
• monmvr32.exe - X - monmvr32.exe
• monnwb32.exe - X - monnwb32.exe
• monxga32.exe - X - monxga32.exe
• MozillaFirefoxy - X - MozillaFirefoxy.exe
• mr.scr - X - mr.scr
• MS Office 2003.exe - X - MS Office 2003.exe
• MSDN - X - MSDN.exe
• msdoc.exe - X - msdoc.exe
• MessengerPlusForSkypeService - N - MsgPlusForSkypeService.exe
• msnmsgrs - X - msgsdb.exe
• msn.exe - X - msn.exe
• MSNMSGRS - X - msnmsgrs.exe
• msnmsrgr.exe - X - msnmsrgr.exe
• mstcpmvd.exe - X - mstcpmvd.exe
• mstcs - X - mstcs.exe
• LenovoNal - ? - NalService.exe
• necsys32.exe - X - necsys32.exe
• netcfg.exe - X - netcfg.exe
• NuclearDOS.exe - X - NuclearDOS.exe
• Tx - X - Nvidia.exe
• OA012Mon - ? - OA012Mon.exe
• OEM13Mon.exe - N - OEM13Mon.exe
• OneKeyReminder - N - OneKey Reminder.exe
• OneLinkManager - U - onelinkpromgn.exe
• OV3_Monitor - N - OV3Monitor.exe
• package.exe - X - package.exe
• PasswordManager - U - password_manager.exe
• PCPTMReminder - U - pcoptimizer.exe
• PowerDVD12 - N - PDVDLaunchPolicy.exe
• Lenovo Motion - U - PG_Tray.exe
• PG - U - PG_Tray.exe
• PhoneCompanion - N - Phone Companion.exe
• pi.exe - X - pi.exe
• Plus Internet - ? - PlusInternetChecker.exe
• AARC - X - poony.exe
• poony.exe - X - poony.exe
• Lenovo EE Boot Optimizer - U - PopWnd.exe
• PowerDVD16Agent - N - PowerDVD16Agent.exe
• PowerDVD17Agent - N - PowerDVD17Agent.exe
• setosimage - ? - PowerRecover.exe
• RotateImage - ? - RCIMGDIR.exe
• ReadyComm - U - ReadyComm.exe
• ReadyComm5 - U - ReadyComm.exe
• WinResSync - U - regsvr32.exe /s [path] {GUID}.rs
• Uzmmmedia - X - regsvr32.exe [path] rqhsebbx.dll
• MedionReminder - ? - Reminder.exe
• Rocket Live! Central 2 - N - RFLVCentral2.exe
• rncsys32.exe - X - rncsys32.exe
• rqjupd32.exe - X - rqjupd32.exe
• New.net Startup - X - rundll32 [path] NewDotNet.dll,ClientStartup
• Taskhost - X - rundll32.exe [path] [32 hex characters].dll
• Lenovo Dynamic Brightness System - U - runldbs.exe
• Lenovo Eye Distance System - U - RunLEDS.exe
• safeDrv - X - SafeDrv.exe
• Intel AppUp(SM) center - U - serviceManager.lnk
• ServiceAdministrator - X - SERVICES.EXE
• wxpdrv - X - services32.exe
• SetDefaultSCR - U - SetDefaultSCR.exe
• Skd8821 - U - Skd8821.exe
• Lenovo Silver Silk Wireless Keyboard - U - skd8861.exe
• SolitaryMountain - X - solitarymountain.exe
• SynLenovoHelper - U - SynLenovoHelper.exe
• [random] - X - sysgop.exe
• SYSMONReminder - U - sysmon.exe
• Java update - X - System.exe
• Scanner - X - systemas.exe
• systemup - X - systemup.exe
• TapiUnattend - X - TapiUnattend.exe
• Host Process for Windows Tasks - X - taskhostw.exe
• w32timesync - X - timesync.exe
• TinyTake by MangoApps - N - TinyTake by MangoApps.exe
• MSNMSGRS - X - Tool.exe
• Intelligent Touchpad - U - TouchZone.exe
• LENOVO.TPKNRRES - N - TpKnrres.exe
• Tpscrex - X - Tpscrex.exe
• AutoStartTransition - Y - Transition.exe
• MicrosoftSystemCare - X - upd.exe
• Update - X - upd.exe
• RegVia - X - updaters.exe
• ViaReg - X - UPDaters.exe
• Userinit - X - userinit.exe,Microsoft.ApplicationId.Framework.exe
• UserLogon.vbs - X - UserLogon.vbs
• Microsoft Service - X - UserManager.exe
• Lenovo Utility - U - utility.exe
• v0610mon.exe - ? - v0610mon.exe
• V0640Mon.exe - ? - V0640Mon.exe
• V0650Mon.exe - ? - V0650Mon.exe
• V0680Mon.exe - ? - V0680Mon.exe
• V0690Mon.exe - ? - V0690Mon.exe
• V0700Mon.exe - ? - V0700Mon.exe
• V0710Mon.exe - ? - V0710Mon.exe
• V0720Mon.exe - ? - V0720Mon.exe
• V0740Mon.exe - ? - V0740Mon.exe
• V0750Mon.exe - ? - V0750Mon.exe
• V0760Mon.exe - ? - V0760Mon.exe
• Vatico.vbs - X - Vatico.vbs
• JavaSE Version Manager. Oracle (C) 2017. - X - w32host.exe
• Wapp.exe - X - Wapp.exe
• Windows Update Service - X - WIN_32_UPDATE.exe
• win32.vbe - X - win32.vbe
• MSNMSGR - X - Winact.exe
• Optimus prime - X - winas2.exe
• WinAutomation Agent - U - WinAutomation.DIAgent.exe
• Tregain - X - WinDecode.exe
• Window Hide Tool - U - Window Hide Tool.exe
• Windows defender.vbe - X - Windows defender.vbe
• Windows UpdateSP9.exe - X - Windows UpdateSP9.exe
• StarNow - X - windows.exe
• windows.vbe - X - windows.vbe
• Windows32.exe - X - Windows32.exe
• Microsoft Gate - X - WindowsTask.lnk
• Windowsupdat.exe - X - Windowsupdat.exe
• WindowsUtility.exe.vbs - X - WindowsUtility.exe.vbs
• winfn.exe - X - winfn.exe
• winlogonws.vbs - X - winlogonws.vbs
• msBBC - X - winrfyl_.scr
• Java Update Scheduler - X - wscript.exe [path] javasch.js
• GoogleCrashHandlerws - U - WScript.exe [path] start.vbs
• winlogonws - X - WScript.exe [path] start.vbs
• yogaserver - Y - yogaserver.exe
• zip32.exe - X - zip32.exe
• zqosys32.exe - X - zqosys32.exe

Changed items - 109

• Diagnostic Manager ([path to trojan]) - Description changed
• load ([random].exe.lnk) - Command and description changed
• Flash Media (^^^^^.exe) - Description changed
• Flash Media (^^^^^^.exe) - Description changed
• Microsoft Service Access Manager (Access.exe) - Description changed
• Access Connections (ACTray.exe) - Description changed
• ACTray (ACTray.exe) - Description changed
• ThinkVantage Access Connections (ACTray.exe) - Description changed
• ACWLIcon (ACWLIcon.exe) - Description changed
• ThinkVantage Access Connections (ACWLIcon.exe) - Description changed
• Intel AppUp(SM) center_Nagware (AppUp.lnk) - Hyperlink and description changed
• Boot Server (bootserver.exe) - Description changed
• Boxore (boxore.exe) - Status (X) and description changed
• CHK Disker (chkdsker.exe) - Description changed
• Clip Servicer (clipsrvc.exe) - Description changed
• Clip Srv (clipsv.exe) - Description changed
• Client Security Solution (cssauth.exe) - Description changed
• cssauth (cssauth.exe) - Description changed
• cssauthe (cssauthe.exe) - Description changed
• Device Security (dvcsecure.exe) - Description changed
• Device Security Manager (dvcsecure.exe) - Description changed
• Energy Management (Energy Management.exe) - Description changed
• EnergyCut (EnergyCut.exe) - Description changed
• Microsoft Service Execution Manager (execute.exe) - Description changed
• OM_Monitor (FirstStart.exe) - Description changed
• OM2_Monitor (FirstStart.exe) - Description changed
• Font Viewer (fontviewer.exe) - Description changed
• OpenTrafficB (ibox64.exe) - Description changed
• iExplore Ini (ie4uini.exe) - Description changed
• Intel AppUp(SM) center (ismagent.lnk) - Hyperlink and description changed
• JVM0.exe (JVM0.exe) - Description changed
• l1rezerv.exe (l1rezerv.exe) - Description changed
• Lenovo Dynamic Brightness System (Lenovo Dynamic Brightness System.exe) - Description changed
• Lenovo Eye Distance System (Lenovo Eye Distance System.exe) - Description changed
• LenovoFSC (LenovoFSC.exe) - Description changed
• XP Loader (loaderxp.exe) - Description changed
• System Monitoring (lsass.exe) - Description changed
• MCPLaunch (MCPLaunch.exe) - Description changed
• Message Center Plus (MCPLaunch.exe) - Description changed
• OM2_Monitor (MMonitor.exe) - Description changed
• OM_Monitor (Monitor.exe) - Description changed
• MQT Svc (mqtsvc.exe) - Description changed
• Microsoft Anti Virus Controller (msavc.exe) - Description changed
• MSN Message Service (msnmsg.exe) - Description changed
• MSDN (nese.exe) - Description changed
• OEM02Mon.exe (OEM02Mon.exe) - Status (N) and description changed
• OEM03Mon.exe (OEM03Mon.exe) - Status (N) and description changed
• OEM04Mon.exe (OEM04Mon.exe) - Status (N) and description changed
• OEM05Mon.exe (OEM05Mon.exe) - Status (N) and description changed
• OEM07Mon.exe (OEM07Mon.exe) - Status (N) and description changed
• OEM08Mon.exe (OEM08Mon.exe) - Status (N) and description changed
• sasserfix (package.exe) - Description changed
• PCKeeper Antivirus (PCKAV.exe) - Description changed
• PCKeeper2 (PCKeeper.exe) - Description changed
• PCKeeperLive (PCKeeper.exe) - Description changed
• CyberLink PowerCinema (PCMAgent.exe) - Hyperlink and description changed
• PCMAgent (PCMAgent.exe) - Hyperlink and description changed
• PDVDLaunchPolicy Application (PDVDLaunchPolicy.exe) - Description changed
• PowerDVD10 (PDVDLaunchPolicy.exe) - Description changed
• QCTray (QCTray.exe) - Description changed
• QCWLICON (QCWLICON.EXE) - Description changed
• Registry Reviver (RegistryReviver.exe) - Description changed
• Registry Server (regserv.exe) - Description changed
• Windows Primary Login (regsrv32.exe) - Description changed
• msnmsgr (rr.exe) - Description changed
• NvCpl (rundl32.exe) - Description changed
• New.net Startup (rundll32 [path] NEWDOT~1.DLL,ClientStartup) - Description changed
• New.net Startup (rundll32 [path] NEWDOT~1.DLL,NewDotNetStartup) - Description changed
• New.net Startup (rundll32 [path] NEWDOT~2.DLL,ClientStartup) - Description changed
• New.net Startup (rundll32 [path] NEWDOT~2.DLL,NewDotNetStartup) - Description changed
• dabrun (rundll32.exe [path] dabapi.dll,Rundll32) - Command and description changed
• Remote Access Tool (rwosvc.exe) - Description changed
• safe_urls[3 or 4 digits] (s[3 or 4 digits].exe) - Command and description changed
• Security Master AV (SM[random characters].exe) - Description changed
• Microsoft MSUPDATE (SpoolSvc.exe) - Hyperlink and description changed
• spoolsvc (spoolsvc.exe) - Hyperlink and description changed
• Windows Security Survy (svchosl.exe) - Description changed
• MSNMSGRS (swe.bat) - Description changed
• MSNMSGRS (swiss.bat) - Description changed
• System Init (systeminit.exe) - Description changed
• XP System (systemxp.exe) - Description changed
• Windows Service Controller Agent (taksmgr.exe) - Description changed
• Tpscrex (Tpscrex.exe) - Description changed
• n/a TpShocks (TpShocks.exe) - Description changed
• ThinkVantage Active Protection System (TpShocks.exe) - Description changed
• TpShocks (TpShocks.exe) - Description changed
• TSMAgent (TSMAgent.exe) - Status (N), hyperlink and description changed
• tvncontrol (tvnserver.exe) - Description changed
• UpdReg (Updreg.exe) - Description changed
• EnergyUtility (utility.exe) - Description changed
• Windows Account Alternation (wauclt.exe) - Description changed
• Wifi Setup (wifisetup.exe) - Description changed
• winxplmad (win992.exe.exe) - Description changed
• Winamp Media Player (winamp.exe) - Description changed
• Win Config (winconfig.exe) - Description changed
• Windows Driver (windrive.exe) - Description changed
• Windows Messanger Control Center (winlogin.exe) - Description changed
• Windows Messanger Control Center (winlogon.exe) - Description changed
• Windows SYN Control Center (winmnon32.exe) - Description changed
• Windows Registry Control (winreg.exe) - Description changed
• Windows Instruction Services (winstruct32.exe) - Description changed
• Windows UDP Control Manager (winudpmgr.exe) - Description changed
• UltraVNC Server (winvnc.exe) - Description changed
• WinVNC (WinVNC.exe) - Description changed
• Windows WKS Services (wkssvr1.exe) - Description changed
• WinManage (wmanage.exe) - Description changed
• Windows Media Server! (wmserver.exe) - Description changed
• Windows Networking Monitorin (xmdmx.exe) - Description changed
• Hide (zCash.exe) - Description changed

Corrections - 1

• winhelp.exe (winhelp.exe (%AppData%\UVJlWVxU)) - Description changed

Hyperlinks changed - 1

• egui (egui.exe)

Trend Micro descriptions updated - 80

• drin ([filename].exe) - Command and description changed
• Bwddwss ([path to trojan]) - Description changed
• Comcast Network ([path to trojan]) - Command and description changed
• f94mggfhfghodftdf ([path to trojan]) - Description changed
• MSDNMess ([path to trojan]) - Description changed
• mswspl ([path to trojan]) - Command and description changed
• VidiaDrivers ([path to trojan]) - Description changed
• Winamp ([path to winamp.exe]) - Command and description changed
• TaskReg ([path to worm]) - Command and description changed
• nssysconf ([random].exe) - Command and description changed
• Task Loader ({rdprM@Y_VO^) - Description changed
• MSN Messenger BETA 7 (bbsdf.exe) - Description changed
• ccUpdate (ccUpdate.exe) - Description changed
• Norton Updater (ccUpdate.exe) - Description changed
• Duwee wong Cerbon (Cirebons.exe) - Description changed
• IPv6 Helper Driver (csass.exe) - Description changed
• ctfmon.exe (ctfmon.exe eminem.exe) - Description changed
• DirectX (directx32.exe) - Description changed
• NvCplScan (dllmanager.exe) - Description changed
• RegScan (DLLSRV32.EXE) - Description changed
• DLLService32 (dllsvc32.exe) - Description changed
• fddddHOME (dxxatp.exe) - Description changed
• wzxzxds (fdfddad.exe) - Description changed
• What Frenz (FriendEQUALsuX.exe) - Description changed
• Windows Frame Works (frmwrks32.exe) - Description changed
• Gmsvc32 (gmsvc32.exe) - Description changed
• Hot Inside (Hottest Story Ever.exe) - Description changed
• Secure System (integitor.exe) - Description changed
• RPCall_WIN2K (Kurawas.exe) - Description changed
• Microsoft Lmhosting Service (lmhosts.exe) - Description changed
• lph[random] (lph[random].exe) - Description changed
• LSA Shell (Export Version) (LSASS.exe) - Description changed
• WPAConfiguration (lsasss.exe) - Description changed
• lssas (lssas.exe) - Description changed
• MSConfig (lssas.exe) - Description changed
• SystemDrive (maxpaynow1.exe) - Description changed
• run (mexica.exe) - Description changed
• SchedulingAgant (MMTASK.EXE) - Description changed
• System Monitoring (Mooks.EXE) - Description changed
• MS LARISSA (MS_LARISSA.exe) - Description changed
• msdev (msconfig.exe) - Description changed
• Mshosts (Mshosts.exe) - Description changed
• msliveupdate (msliveupdate.exe) - Description changed
• Video Process (MSlti64.exe) - Description changed
• Microsoft Oftice (msmsgs.exe) - Description changed
• Windows Live Messenger (msnsmsgr.exe) - Description changed
• Windows Registry Checker (MsPMDPSv.exe) - Description changed
• Net Functions Library (Netlib.exe) - Description changed
• Windows System Service Configuration Loader (norton.exe) - Description changed
• Network Security (NSecurity.exe) - Description changed
• NT Services (ntsvc.exe) - Description changed
• Nt System Kernel (ntsyskrnl.exe) - Description changed
• System File Drivers (nvsysvc32.exe) - Description changed
• System handler (Pandawas.exe) - Description changed
• runner1 (retadpu[random digits].exe) - Description changed
• WSAConfiguration (rpcxmn32.exe) - Description changed
• Captcha7 (rundll captcha.dll) - Description changed
• smx4pnp (rundll32.exe [path] smx4pnp.dll) - Description changed
• MSN Home (sdwd.exe) - Description changed
• serviceconnect (serviceconnect.exe) - Description changed
• SoundMan (soundman.exe) - Description changed
• ServRun (srss32.exe) - Description changed
• Config Loader (svchost2.exe) - Description changed
• Microsoft Telecoms Center (telcoms.exe) - Description changed
• live update monitor (umxlu32.exe) - Description changed
• ffeqOME (vcvsav.exe) - Description changed
• NVIDIA Video drivers (video_32D.exe) - Description changed
• Windows Application Layer (walg32.exe) - Description changed
• woopie (winamp.exe) - Description changed
• Win l5oahder (winampa.exe) - Description changed
• NvCplScan (winasp.exe) - Description changed
• Windows Boot Log (WinBoot.exe) - Description changed
• Microsoft Problem Doctor (windr128.exe) - Description changed
• WinAuth (winlogon.exe) - Description changed
• Windows Logon Servicer (winlogon.exe) - Description changed
• WSAConfiguration (winmon32.exe) - Description changed
• Windows Proxy Server (WinProx32.exe) - Description changed
• WxcConfiguration (wmon16.exe) - Description changed
• Windows Video Acquisition (WVA) (wvsvc.exe) - Description changed
• CirebonPunya (XXrocks.exe) - Description changed

Symantec descriptions updated - 142

• AddClass ([Installation_Path]) - Description changed
• GDAX ([path to backdoor]) - Description changed
• MSSGisg ([path to backdoor]) - Description changed
• mdetect ([path to trojan]) - Description changed
• msmsgss ([path to trojan]) - Description changed
• ValidData ([path to trojan]) - Description changed
• WinLsass ([path to trojan]) - Description changed
• x3yy ([path to trojan]) - Description changed
• ICQ Center ([path to worm]) - Description changed
• kern64dll ([random filename]) - Description changed
• avserve3.exe (avserve3.exe) - Description changed
• SystemTra (CDPlay.EXE) - Description changed
• Messenger6 (command.pif) - Description changed
• comxt (comxt.exe) - Description changed
• load (dapdll.exe) - Name and description changed
• run (dec25.exe) - Name and description changed
• Windows DLL Loader (defragfat32z.exe) - Description changed
• Distributed File System (Dfsvc.exe) - Description changed
• Windows [random character] (diskcheck.exe) - Name and description changed
• DKTime (dktime.exe) - Description changed
• wersds (doriot.exe) - Description changed
• drvddll.exe (drvddll.exe) - Description changed
• Sync Server (drwatsoon.exe) - Description changed
• sstata (dwdas.exe) - Description changed
• dasxdads (fsdqd.exe) - Description changed
• reg_key (FUKULAMER.exe) - Description changed
• fGQEGqHOME (gwwgtp.exe) - Description changed
• load (hint.exe) - Name and description changed
• HIV (HIV.exe) - Description changed
• Win USB 2.0 USB Driver (HPPrint.exe) - Description changed
• Soft Profile Inc (hxdef.exe...) - Description changed
• iestart (iexp1orer.exe) - Description changed
• Microsoft Inc. (iexplorer.exe...) - Description changed
• Inet DataBase (Inetdbs.exe) - Description changed
• IPConfig (ipconfigs.exe) - Description changed
• Randex virus built for IRBMe (irbme.exe) - Description changed
• Microzoft_Ofiz (KdzEregli.exe) - Description changed
• reg_key (loader_name.exe) - Description changed
• Lpr (Lpr123.exe) - Description changed
• Lpr123 (Lpr123.exe) - Description changed
• MS Config v13 (lrbz32.exe) - Description changed
• lsass (lsasrv.exe) - Description changed
• .mscdr (lsvchost.exe) - Description changed
• WindowsKeyUpdate (master.exe) - Description changed
• realone_nt2003 (moniker.exe) - Description changed
• run (mouse_configurator.win) - Name and description changed
• Testing 123 (msdata.dat) - Description changed
• MSDosdrv (msdosdrv.exe) - Description changed
• control (msn.exe) - Description changed
• Spore (MsNews.vbs) - Description changed
• MSNGrabber (MSNgrabber.exe) - Description changed
• msnload32.exe (msnload32.exe) - Description changed
• WinUpdate Loader (msnnm.exe) - Description changed
• MSWinSrv (MSWinSrv.exe) - Description changed
• Srv RPCrom (NClienti386.exe) - Description changed
• load32 (netda.exe) - Description changed
• Network Services (netsvacs.exe) - Description changed
• Wxp4 (Norton Update.exe) - Description changed
• System Service Manager (norton.exe) - Description changed
• NortonAV (norton_antivirus.exe) - Description changed
• Windows NT 32 (ntlogin32.exe) - Description changed
• NvCpl (NvCpl.EXE) - Description changed
• Installed shell32.dll (Office.exe...) - Description changed
• otcx (otcxxh.exe) - Description changed
• AV Client (patch31345.exe) - Description changed
• AV Industry (patch31345.exe) - Description changed
• pilif (pilif.exe) - Description changed
• Poet (Poet.exe) - Description changed
• RamBooster2 (rb.exe) - Description changed
• Rcf Driver (rcf.exe) - Description changed
• real scheduler.hta (real scheduler.hta) - Command and description changed
• RealAudio.exe (RealAudio.exe) - Name and description changed
• Sysmon (rpcmon.exe) - Description changed
• Ruby13 (Ruby13.exe) - Description changed
• Taskbell.exe (Rund1.exe) - Description changed
• winupd (RUNDLL32.EXE [random value].dll,_mainRD) - Description changed
• Safe (SafeWin.exe) - Description changed
• Sagate Security Firewall (sagate.exe) - Description changed
• FireWire Driver (samx.exe) - Description changed
• Spore.b (Scmhlpr.vbs) - Description changed
• W32.Scran (Scran.exe) - Description changed
• run (sec5dec.exe) - Name and description changed
• WinLsass (servicec.exe) - Description changed
• shellsystem (shellsystem.exe) - Description changed
• skynetave.exe (skynetave.exe) - Description changed
• hErcUnes (softhost.exe) - Description changed
• huigezi (SP00LSV.EXE) - Description changed
• window2 (ssvchost.exe) - Description changed
• _svchost.con (svchost.com) - Description changed
• Bot Loader (svchostt.exe) - Description changed
• IPConfig (svcxnv32.exe) - Description changed
• key (sys_xp.exe) - Description changed
• MS Updates (syshosts.exe) - Description changed
• Syskey (sysinit.exe) - Description changed
• Windows Drive Compatibility (System32Driver32.exe) - Description changed
• systree (systree.exe) - Description changed
• key (sysxp.exe) - Description changed
• Task (tasker.exe) - Description changed
• CentralProcessor (taskimgr.exe) - Description changed
• taskmgr (taskmgr.exe) - Description changed
• Windows Time Server (TimeSRV.exe) - Description changed
• AV (UPDATE-28062004.exe[25 blank spaces].vbs) - Description changed
• Update (UPDATE-28062004.exe[25 blank spaces].vbs) - Description changed
• User Services (usersvc.exe) - Description changed
• wscript.exe (vabian.vbs) - Description changed
• Default System Research (vhchost.exe) - Description changed
• Windows Video Drivers (videons32.exe) - Description changed
• vmsnGraber (VMSNGRABER.EXE) - Description changed
• w32 (w32.exe) - Description changed
• wdwctrl (wdwctrl.exe) - Description changed
• Miosf Update (wimsqaad.exe) - Description changed
• load (win32exec.exe) - Name and description changed
• Winsock32driver (win32server.exe) - Description changed
• LogService (wincalc.exe) - Description changed
• win_upd.exe (WINdirect.exe) - Description changed
• win_upd2.exe (WINdirect.exe) - Description changed
• erthgdr (windll.exe) - Description changed
• Microsoft Kernel (Windows_kernel32.exe) - Description changed
• FTH2004 (WindowsDAT.exe) - Description changed
• Micrsoft Driver (windrive.exe) - Description changed
• WinSPF (windrv32.exe) - Description changed
• virtual (winit.exe) - Description changed
• winlibs.exe (winlibs.exe) - Description changed
• Windows Management Instrumentations (winmg.exe) - Description changed
• winpsd (winpsd.exe) - Description changed
• Windows Explorer-3212 (WINRE16.EXE) - Description changed
• WinSPF (winspf32.exe) - Description changed
• Wintime (Wintime.exe) - Description changed
• blah service (winupdate.exe) - Description changed
• winupdate.reg (winupdate.exe) - Description changed
• key (winxp.exe) - Description changed
• Win32 USB Driver (winxpinit.exe) - Description changed
• stmha (wkfxi.js) - Description changed
• MAT (WliveUPdate.exe) - Description changed
• NortonAVProtect (WliveUPdate.exe) - Description changed
• Player00997 (WliveUPdate.exe) - Description changed
• QuickTask (WliveUPdate.exe) - Description changed
• Shell2938 (WliveUPdate.exe) - Description changed
• WSAConfiguration (wmon32.exe) - Description changed
• wserver (wserver.exe) - Description changed
• YZH.SYS (YZH.exe) - Description changed
• Winsock32driver (ZoneLockup.exe) - Description changed

Sophos hyperlinks and descriptions changed - 135

• ff ([path to worm]) - Hyperlink and description changed
• Microsoft (C) HTML Application host ([random filename]) - Hyperlink and description changed
• Monitor Test ([random filename]) - Hyperlink and description changed
• RSPC Driver ([random filename]) - Command, hyperlink and description changed
• System CPL manager ([random filename]) - Hyperlink and description changed
• Windows Service Agccnt ([random].exe) - Hyperlink and description changed
• alcomrg.exe (alcomrg.exe) - Hyperlink and description changed
• gdagdgajs (bbsbw.exe) - Hyperlink and description changed
• Bittorrent (bittorrent.exe) - Hyperlink and description changed
• ClipSrv (clipservr.exe) - Hyperlink and description changed
• Windows System32 Driver (clsass32.exe) - Hyperlink and description changed
• Microsoft USB2 Driver (crmss.exe) - Hyperlink and description changed
• System32-Driver (csrs32.exe) - Hyperlink and description changed
• Windows Online Updater (dllman.exe) - Hyperlink and description changed
• Microsoft DLL Manager (dllmgr.exe) - Hyperlink and description changed
• Windows driver update (dmsvc32.exe) - Hyperlink and description changed
• Auto Start (dosin.exe) - Hyperlink and description changed
• DASDS VSAVdjs (dsabdw.exe) - Hyperlink and description changed
• Dynamic Dns Binary (dynitora.exe) - Hyperlink and description changed
• TmNetDriver Monitor (exbce.exe) - Hyperlink and description changed
• Microsoft Synchronization Manager (explorer.exe) - Hyperlink and description changed
• Monitor SynManager (fecwvncd.exe) - Hyperlink and description changed
• HOT FIX (filename.exe) - Hyperlink and description changed
• NotFaut (flxper.exe) - Hyperlink and description changed
• MicroSoft OneCare (FreeS3x.exe) - Hyperlink and description changed
• testest (fxxxh.exe) - Hyperlink and description changed
• gqgqqger (gqgeqegl.exe) - Hyperlink and description changed
• Loaders (HeIp.pif) - Hyperlink and description changed
• CPQHotKeys (hotkeysvc.exe) - Hyperlink and description changed
• Configuration Loaded (iexploree.exe) - Hyperlink and description changed
• Windows driver update (Ipconfig32.exe) - Hyperlink and description changed
• IRQ Assigning Agent (IRQconf.exe) - Hyperlink and description changed
• ixplores (ixplores.exe) - Hyperlink and description changed
• JuPo (jupos.exe) - Hyperlink and description changed
• LBTWiz.exe (LBTWiz.exe) - Hyperlink and description changed
• TkNetDriver Monitor (lexbce.exe) - Hyperlink and description changed
• strtas (lo71.exe) - Hyperlink and description changed
• stratas (lockx.exe) - Hyperlink and description changed
• strtas (lockx.exe) - Hyperlink and description changed
• Windows Logon (login.exe) - Hyperlink and description changed
• Default (lsassM.exe) - Hyperlink and description changed
• wmplayer (lsrvc.exe) - Hyperlink and description changed
• Machine Debug Manager (mdms.exe) - Hyperlink and description changed
• Fxoekm (miyhart.exe) - Hyperlink and description changed
• mono.exe (mono.exe) - Hyperlink and description changed
• Ms System Config (Mscfg.exe) - Hyperlink and description changed
• msclac (msclac.exe) - Hyperlink and description changed
• Microsoft Config 32bit (mscnfg32.exe) - Hyperlink and description changed
• Microsoft Configuewe (msconfiguwe.exe) - Hyperlink and description changed
• msctfg32 (msctfg32.exe) - Hyperlink and description changed
• Microsoft Diagnostic (msdiag32.exe) - Hyperlink and description changed
• MS HTML Location Class (MSHTML32.exe) - Hyperlink and description changed
• Microsoft AUT Update (MSlti32.exe) - Hyperlink and description changed
• Microsoft Messenger XP (MSMSN32.exe) - Hyperlink and description changed
• MSN Checker (msnchecker.exe) - Hyperlink and description changed
• System-Config (msngmsg.exe) - Hyperlink and description changed
• Microsoft Internet Explorer (msngrt.exe) - Hyperlink and description changed
• Current32 (msnpla.exe) - Hyperlink and description changed
• MSWindows Syspg (mspg32.exe) - Hyperlink and description changed
• Security Agent Manager (mssams.exe) - Hyperlink and description changed
• MS service (msservice.exe) - Hyperlink and description changed
• Microsft Security Monitor Process (mssmpp.exe) - Hyperlink and description changed
• Microsoft Video Capture Controls (MSsrvs32.exe) - Hyperlink and description changed
• MSTask Monitor (mstaskmon.exe) - Hyperlink and description changed
• TCPIP Protocol (mstcpip.exe) - Hyperlink and description changed
• Microsoft Viral Scanning Protection (msviral.exe) - Hyperlink and description changed
• M S DVD DirectX Dll Drivers (msxdl.exe) - Hyperlink and description changed
• Norton AutoProtect (navprot32.exe) - Hyperlink and description changed
• NAVtask (NAVtask.exe) - Hyperlink and description changed
• NAV Auto Updates (navupdaters.exe) - Hyperlink and description changed
• Microsoft Network (Networksystem.exe) - Hyperlink and description changed
• Windows driver update (nmsmtp32.exe) - Hyperlink and description changed
• VxD Driver Initialization (ntsvxd.exe) - Hyperlink and description changed
• Win Patch (patch.exe) - Hyperlink and description changed
• Peer Manager (peere32.exe) - Hyperlink and description changed
• msgmsgs (peremption.exe) - Hyperlink and description changed
• Configuration L0ader (picorulez.exe) - Hyperlink and description changed
• Process Session Manager (pidserv.exe) - Hyperlink and description changed
• rant (rant.exe) - Hyperlink and description changed
• Inters Configuration Loader (RCL0ADERS.exe) - Hyperlink and description changed
• tsx (regedlt.exe) - Hyperlink and description changed
• Windows Service Agccnt (rmizjgz.exe) - Hyperlink and description changed
• msMGR (rtkmsg.exe) - Hyperlink and description changed
• Configuration Driver (scghost.exe) - Hyperlink and description changed
• Crnsavsund (scrnsund.pif) - Hyperlink and description changed
• RPCser32g (services.exe) - Hyperlink and description changed
• System33 (services33.exe) - Hyperlink and description changed
• irc session (sessionmgr.exe) - Hyperlink and description changed
• Micosoftartup (shrl.exe) - Hyperlink and description changed
• Java Express (sjehost.exe) - Hyperlink and description changed
• sload (sload32.exe) - Hyperlink and description changed
• Printer Services (spool.exe) - Hyperlink and description changed
• reggsdg (spoolsrv.exe) - Hyperlink and description changed
• SPOOL Configuration (spoolsvc.exe) - Hyperlink and description changed
• System-Config (spoolv.exe) - Hyperlink and description changed
• MSN Beta (SVCHOSTdll.exe) - Hyperlink and description changed
• Microsoft Com Port Manager (svdhost.exe) - Hyperlink and description changed
• Micosoft Startup (syscall.exe) - Hyperlink and description changed
• Windows SYStry (systry.exe) - Hyperlink and description changed
• Microsoft Word System (sysword.exe) - Hyperlink and description changed
• MicosoftStartup (syxall.exe) - Hyperlink and description changed
• Microsoft Task Messenger Config (taskmgsr.exe) - Hyperlink and description changed
• aldefr ere service (tay0x.exe) - Hyperlink and description changed
• TCPXP Update (tcpxp.exe) - Hyperlink and description changed
• MS UPDATER (update.exe) - Hyperlink and description changed
• VSP32 Controls (vsp32.exe) - Hyperlink and description changed
• Generic Host (wauclt.exe) - Hyperlink and description changed
• [key name] (WICONF.EXE) - Name, hyperlink and description changed
• Configuration32 Loader32 (winamp32.exe) - Hyperlink and description changed
• WinampPlugin (winampa.exe) - Hyperlink and description changed
• [key name] (WINBASICS32.EXE) - Name, hyperlink and description changed
• Microsoft System DLL Services Configuration (windir32.exe) - Hyperlink and description changed
• winlog (windowxs.exe) - Hyperlink and description changed
• Microsoft Command C (winhost32.exe) - Hyperlink and description changed
• System (winipck.exe) - Hyperlink and description changed
• Windows Systems16 (winjews16.exe) - Hyperlink and description changed
• Windows Login Service (winlogin.pif) - Hyperlink and description changed
• RPCserr32g (winlogon.exe) - Hyperlink and description changed
• Windows Lord Anti-Virus (winlord32.exe) - Hyperlink and description changed
• Microsoft MediaScope (winmes.exe) - Hyperlink and description changed
• ssms.exe (winn.exe) - Hyperlink and description changed
• MicroSoft Window Updater (winsupdater.exe) - Hyperlink and description changed
• winlog (winsx.exe) - Hyperlink and description changed
• Win FTP (wintftp.exe) - Hyperlink and description changed
• InternetGetConnectedState (winupdate.exe) - Hyperlink and description changed
• InternetGetConnectedStateEx (winupdate.exe) - Hyperlink and description changed
• Security Patch (WinUpdate32.exe) - Hyperlink and description changed
• *wmstu (wmstu.exe) - Hyperlink and description changed
• SYSTEM (wuamgre.exe) - Hyperlink and description changed
• *windows update (wuaruclt.exe) - Hyperlink and description changed
• SPHandler (wuauclt23.exe) - Hyperlink and description changed
• *windows update (wuruclt.exe) - Hyperlink and description changed
• fqfewn (xcze.exe) - Hyperlink and description changed
• WinOpin (xopin2.exe) - Hyperlink and description changed
• Windows-XP-Service-Pack (xpspz.exe) - Hyperlink and description changed

Removed - 1

• load - X - ServerOnyi.exe.lnk - Replaced by generic

Back to Updates - 2017

Copyright © Pacman's Portal, 2001 - 2018
Powered by Malwarebytes
All rights reserved