dagger666
2007-09-28, 18:58
Startup list in Spybot, HK_LM:RUN (current System) VAULE: is blank.
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: system32.exe
Description
Added by the _AGOBOT-KU_ WORM! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: pathex.exe
Description
Added by the _MKMOOSE-A_ WORM! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: svchost.exe
Description
Added by the _DELF-UX_ TROJAN! Note - this is not the legitimate _svchost.exe_ process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder. Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: MSPF.EXE
Description
Added by a variant of the _SDBOT_ WORM! This file is located in the Winnt or Windows folder. Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.exe
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.dll
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.js
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: system32.exe
Description
Added by the _AGOBOT-KU_ WORM! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: pathex.exe
Description
Added by the _MKMOOSE-A_ WORM! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: svchost.exe
Description
Added by the _DELF-UX_ TROJAN! Note - this is not the legitimate _svchost.exe_ process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder. Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: MSPF.EXE
Description
Added by a variant of the _SDBOT_ WORM! This file is located in the Winnt or Windows folder. Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.exe
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.dll
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________
Current filename:
Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: dllvirtual.js
Description
Added by the _DADOBRA-IW_ TROJAN! Note - has a blank entry under the Startup Item/Name field
Source: Paul Collins Startup list
____________________