Welcome Guest (Log In | Create Account)
New Member? Join for free.
Pages: (4) « First ... 2 3 [4] 

Name Filename Status Description
[not used] mcafee32.exe
X
w32rbotxe drops a TROJAN, creating several files in %Program Files%, %Windir%, and %system% in addition to this file.
[not used] penis.exe
X
Added by the W32/Cissi-F WORM, the system .ini field {boot} will be modiified and remote access made available to an attacker(s) using an IRC channel(s).
[not used] vxd32v.exe
X
Added by the W32.Dumaru.Y@mm Worm! It is a mass-mailing worm with backdoor and keylogging capabilities.
[not used] svohost.exe
X
This dumaru variant attempts to terminate antivirus programs so that it remains undetected. It is a mass-mailing worm with backdoor and keylogging capabilities.
[not used] svchost.exe
X
A WORM/backdoor, W32/Kipis-J, opens notepad.exe and copies itself to the Windows folder as regedit.com and installs to it's newly created folder. A variety of anti-virus and security related processes may be terminated and backdoor opened on port TCP/9413.
[not used] inject.exe
X
Added by Troj/Small-EH it also installs RSHELL32.DLL, both are hidden in the Windows system folder. Once run, .DLL may modify a system component to penetrate a firewall and provide a new remote shell which can be exploited.
<not used> RAVMOND.exe
X
Added by a variant of the LOVGATE WORM!
[not used] a1g.exe
X
Added by the W32.Atak.B@mm mass-mailing worm that uses its own SMTP engine to send its messages to the email addresses it gathers from certain files on a compromised computer.
<not used> Spoolsv.exe
X
Added by the CIADOOR.B TROJAN!
[not used] wpshrc.exe
Y
Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
<not used> WINOSCFG.EXE
?
Could it be something to do with configuring Windows on a new PC from an OEM supplier?


Pages: (4) « First ... 2 3 [4] 

Disclaimer
It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Advertise   |   About Us   |   User Agreement   |   Privacy Policy   |   Contact Us   |   Sitemap   |   Chat   |   Tutorials   |   Uninstall List
Tech Support Forums   |   The Computer Glossary   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides   |   Downloads


Portions of this database © Paul Collins
© 2003-2013 All Rights Reserved Bleeping Computer LLC.