Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Wscntfy.exe Win Xp Sp2


  • Please log in to reply
2 replies to this topic

#1 TranceWarp

TranceWarp

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:17 PM

Posted 26 January 2007 - 09:52 PM

Filename: wscntfy.exe
Registry Value Name: None
Command: None
File Location: %windir%/system32
Description: This is the Windows Security Center icon that appears in the system tray if you are running Windows XP SP2. %windir% pertains to the folder that you have Windows XP installed. If loaded over Windows NT / 2000 this will be drive:WINNT. If upgraded from Windows 9x*Grinler or a clean install of XP, the directory will be drive:WINDOWS. If this program is in a non-XP SP2 machine, this program is likely a trojan.
Status: Y. If there is a problem with your security measures, this program activates. If you try to end the process, it will immediately restart.

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,567 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:17 PM

Posted 27 January 2007 - 11:30 AM

Thanks Trance. Unfortunately I dont believe this program is launched by other programs and is not one that is set itself to start up automatically.

#3 TranceWarp

TranceWarp
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:17 PM

Posted 03 February 2007 - 05:51 PM

It's not actually a program that runs at startup... :thumbsup:

However, in SP2, Windows Security Center runs this program as a notification in the System Tray if there is a security risk (no antivirus, no firewall or automatic updates is not turned on). This shows up in the normal Windows processes under the "wscntfy.exe" filename and is located in the Xp's System32 folder.

I just wanted to have it in the list to clarify when the file may be a worm.

Edited by TranceWarp, 03 February 2007 - 05:56 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users