[lameXpert]

Nekem egy ilyen is van benne. Sokszor jól jöhet.

Idézet

File: \version.exe

Product Name......... Version Check
Product Version...... 1.1a
Company Name......... Hahn Technology, Inc.
Original File Name... VersChk.EXE
Legal Copyright...... Copyright © Hahn Technology, Inc. 1998-99
File Description..... Version Check Executable
File Version......... 1.1.0.1
Internal Name........ VersChk.EXE
Product Build........ 1.1.0.1
File Build........... 1.1.0.1
Designed for......... Windows 32 API
File Type............ Application

[lameXpert]

Idézet: calibra - Dátum: 2004. szept. 24., péntek - 1:03

Én balf*sz:


Aztán találtam egy angol lapot, ahol meg lehet nézni, hogy melyik exe vajon mire való

[caratyuska]

újra bizonyítást nyert hogy szem elõtt kell lennie, hogy látszódjék, ezért kiemelem

[lameXpert]

VÍRUS!!!

Idézet

The worm creates the folder <system>\kazaabackupfiles and copies itself there using several different filenames, including:

Battlefield_1942.Keygen.FDX.ShareReactor.exe
C&C.Generals-keygen.exe
cs-keygen.exe
dev-nfs.exe
eatop605kg.exe
Freelancer Keygen.exe
hv-Max5-kg.exe
Opera601key.exe
PowerDVD XP v4.0 Keygen.exe
QuickTime 6 Pro keygen.exe
Sonic Foundry ACID Pro 4.0 Keygen(1).exe
VMware 320 keygen (1).exe
Windows XP Professional Keygen by CaFo.exe

VÍRUS!!!

[Niceday]

asferror.dll

Internal Name:      ASFErr.Dll
Company Name:      Microsoft Corporation
Original File Name: ASFErr.Dll
File Version:            10.00.00.3646 built by: DNSRV(bld4act)
Product Name:      Microsoft&reg; Windows Media Services
Product Version:      10.00.00.3646
File Description:    ASF Error Definitions

[Niceday]

A kiemelt témák is el tudnak süllyedni?  :confused:

... ja már nem az...

Szerkesztette: Niceday 2004. 10. 24. 20:52 -kor

[lameXpert]

filename kavsvc.exe 
fullname Kaspersky Labs Anti-Virus Service 
type service 
manufacturer and other relevant information  Kaspersky Labs

Search for kavsvc.exe at google.com
Search for kavsvc.exe at groups.google.com (very helpful!)
Search for kavsvc.exe at vivisimo.com (with document clustering!)
Security Task Manager even shows browser helper objects...

[lameXpert]

Glossary of IT Terms with Links

[lameXpert]

[lameXpert]

Idézet

Cdilla - C-Dilla, What is it?

C-Dilla, Cdilla and cdac11ba.exe

Process File: (cdilla) cdac11ba or cdac11ba.exe

Process Name: cdac11ba

Description: Associated with MacroVision’s SafeCast copy protection software which enables other software manufacturers to protect their products from illegal copying.

Company: MacroVision

System Process: No

Security Risk ( Virus/Adware/Spyware ): No

Common Errors: N/A

CDilla - Detailed information
C-Dilla [ cdac11ba.exe ] was the name of a company that was acquired by Macrovision in 1999. Some Macrovision SafeCast technology is derived from earlier C-Dilla products, and some of the files and folders used by SafeCast-licensed applications today still have "C-Dilla" in their names.

For example, TurboTax has been known to install and use C-Dilla. What disturbs users is that Macrovision / C-Dilla License Management System can be installed without clear notification and remains after you uninstall the main application. To uninstall this software, you have to go through the uninstall procedures like you would for any software, and select this product.

cdac11ba.exe - spy ware?
Is it spyware?  Spyware, also called adware, is commonly defined as any software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes. Spyware applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet. Once installed, the spyware monitors user activity on the Internet and transmits that information in the background to someone else.  Because the Cdilla does not gather Internet connection information, the program is not considered spyware.

[lameXpert]

Win98+WinMe alaprendszer


C:\Windows :
INETMIB1.DLL
MSOWS409.DLL
NDDEAPI.DLL
NDDENB.DLL
TWAIN.DLL
TWAIN_32.DLL
WINSOCK.DLL
ACCSTAT.EXE
ARP.EXE
ASD.EXE
CALC.EXE
CHARMAP.EXE
CLEANMGR.EXE
CLIPBRD.EXE
CONTROL.EXE
CVTAPLOG.EXE
DEFRAG.EXE
DIALER.EXE
DRWATSON.EXE
EMM386.EXE
FONTVIEW.EXE
FREECELL.EXE
FTP.EXE
GRPCONV.EXE
IPCONFIG.EXE
KODAKIMG.EXE
KODAKPRV.EXE
MM2ENT.EXE
MPLAYER.EXE
MSHEARTS.EXE
NETSTAT.EXE
NOTEPAD.EXE
PACKAGER.EXE
PING.EXE
PROGMAN.EXE
RG2CATDB.EXE
ROUTE.EXE
RSRCMTR.EXE
RUNDLL.EXE
RUNDLL32.EXE
SCANDSKW.EXE
SMARTDRV.EXE
SNDREC32.EXE
SNDVOL32.EXE
SOL.EXE
SYSMON.EXE
TASKMAN.EXE
TASKMON.EXE
TELNET.EXE
TRACERT.EXE
TUNEUP.EXE
TWUNK_16.EXE
TWUNK_32.EXE
WINFILE.EXE
WINHELP.EXE
WINHLP32.EXE
WINIPCFG.EXE
WINMINE.EXE
WINVER.EXE

C:\Windows\Command :
EDIT.COM
CVT.EXE
MSCDEX.EXE
SCANDISK.EXE
EDIT.HLP

C:\Windows\System :
VGAFULL.3GR
IMAADP32.ACM
LHACM.ACM
MSADP32.ACM
MSG711.ACM
MSGSM32.ACM
TSSOFT32.ACM
ACELPDEC.AX
CLRAMD.AX
L3CODECX.AX
VOXMSDEC.AX
VOXMVDEC.AX
VVAUDFLT.AX
VVVIDFLT.AX
UNICODE.BIN
DAJAVA.CAB
ACCESS.CPL
APPWIZ.CPL
DESK.CPL
MAIN.CPL
MODEM.CPL
NETCPL.CPL
PASSWORD.CPL
POWERCFG.CPL
SYSDM.CPL
TELEPHON.CPL
THEMES.CPL
TIMEDATE.CPL
ADVAPI32.DLL
CABINET.DLL
CARDS.DLL
CCFG95.DLL
CDM.DLL
CHOOSUSR.DLL
CLRVIDDC.DLL
CLUSALGO.DLL
COMCAT.DLL
COMMCTRL.DLL
COMMDLG.DLL
COMPOBJ.DLL
COOL.DLL
CRTDLL.DLL
DCIMAN.DLL
DCIMAN32.DLL
DDAO35.DLL
DDEML.DLL
DECVW_32.DLL
DHCPCSVC.DLL
DIBENG.DLL
DIGSIG.DLL
DINDI.DLL
DISPDIB.DLL
DLCAPI.DLL
DLCNDI.DLL
DMCOLOR.DLL
DOCPROP.DLL
DSKAPI16.DLL
DSKAPI32.DLL
DSKMAINT.DLL
FONTEXT.DLL
FRAMEBUF.DLL
FTSRCH.DLL
GDI32.DLL
GLU32.DLL
HID.DLL
HIDCI.DLL
ICCVID.DLL
ICM32.DLL
ICMP.DLL
ICMUI.DLL
ICMUPG.DLL
ICONLIB.DLL
IENPSTUB.DLL
ILS.DLL
IMAGEHLP.DLL
IMGCMN.DLL
IMGSHL.DLL
IMM32.DLL
INDICDLL.DLL
IPCFGDLL.DLL
IPROP.DLL
ISDNUI.DLL
JPEG1X32.DLL
JPEG2X32.DLL
LINKINFO.DLL
LMRTREND.DLL
LZ32.DLL
LZEXPAND.DLL
MAG_HOOK.DLL
MAINCP16.DLL
MAPI32.DLL
MAPISTUB.DLL
MBSLGN32.DLL
MCIOLE.DLL
MF3216.DLL
MFC30.DLL
MFC40.DLL
MFC42.DLL
MFCANS32.DLL
MFCD30.DLL
MFCN30.DLL
MFCO30.DLL
MFCUIA32.DLL
MFCUIW32.DLL
MMCI.DLL
MMSYSTEM.DLL
MODEMUI.DLL
MORICONS.DLL
MPR.DLL
MPRSERV.DLL
MSAB32.DLL
MSACM.DLL
MSACM32.DLL
MSAFD.DLL
MSASN1.DLL
MSCMS.DLL
MSIMG32.DLL
MSJET35.DLL
MSLOCUSR.DLL
MSMIXMGR.DLL
MSNP32.DLL
MSNSSPC.DLL
MSPRINT.DLL
MSPRINT2.DLL
MSPWL32.DLL
MSREPL35.DLL
MSRLE32.DLL
MSSHRUI.DLL
MSVCIRT.DLL
MSVCP50.DLL
MSVCRT20.DLL
MSVCRT40.DLL
MSVFW32.DLL
MSVIDC32.DLL
MSVIDEO.DLL
MSWSOCK.DLL
MSWSOSP.DLL
NETBIOS.DLL
OIADM400.DLL
OICOM400.DLL
OIDIS400.DLL
OIFIL400.DLL
OIGFS400.DLL
OIPRT400.DLL
OISLB400.DLL
OISSQ400.DLL
OITWA400.DLL
OIUI400.DLL
OLE2.DLL
OLE2CONV.DLL
OLE2DISP.DLL
OLE2NLS.DLL
OLE32.DLL
OLECLI.DLL
OLECLI32.DLL
OLECNV32.DLL
OLEDLG.DLL
OLESVR.DLL
OLESVR32.DLL
OLETHK32.DLL
OPENGL32.DLL
PANMAP.DLL
PPPNDI.DLL
QCUT.DLL
QOSNAME.DLL
RICHED.DLL
RNAPH.DLL
RNASERV.DLL
RNASETUP.DLL
RNASMM.DLL
RNATHUNK.DLL
RNR20.DLL
ROUTETAB.DLL
RPCLTC3.DLL
RPCLTC6.DLL
RPCLTS3.DLL
RPCLTS6.DLL
RPCRT4.DLL
RSRC16.DLL
RSRC32.DLL
SHELL.DLL
SMMSCRPT.DLL
SMMSETUP.DLL
SNMPAPI.DLL
SPOOLSS.DLL
STEM0409.DLL
STORAGE.DLL
SYSCLASS.DLL
SYSDETMG.DLL
SYSTHUNK.DLL
TAPI.DLL
TAPI32.DLL
TAPIUI.DLL
TOOLHELP.DLL
TSD32.DLL
TSP3216S.DLL
TYPELIB.DLL
UMDM16.DLL
UMDM32.DLL
UMDMXFRM.DLL
UNIDRV.DLL
USBUI.DLL
VDMDBG.DLL
VDODEC32.DLL
VER.DLL
VERSION.DLL
VLB32.DLL
VMODCTL.DLL
WHLP16T.DLL
WHLP32T.DLL
WILDLB32.DLL
WIN32S16.DLL
WIN87EM.DLL
WINMM.DLL
WINNET16.DLL
WL32DLL.DLL
WLDAP32.DLL
WOW32.DLL
WS2_32.DLL
WS2HELP.DLL
WS2THK.DLL
WSCTHUNK.DLL
WSOCK32.DLL
XFILEXR.DLL
COMM.DRV
FRAMEBUF.DRV
KEYBOARD.DRV
MCIAVI.DRV
MCICDA.DRV
MCIPIONR.DRV
MCISEQ.DRV
MCIVISCA.DRV
MCIWAVE.DRV
MIDIMAP.DRV
MMSOUND.DRV
MOUSE.DRV
MSACM.DRV
MSH263.DRV
SUPERVGA.DRV
SYSTEM.DRV
VDOWAVE.DRV
VGA.DRV
WINSPL16.DRV
WINSPOOL.DRV
ACTMOVIE.EXE
DLLHOST.EXE
FIXMAPI.EXE
FONTREG.EXE
GDI.EXE
ICWSCRPT.EXE
LMSCRIPT.EXE
LOCPROXY.EXE
LOCPRXY2.EXE
MAGNIFY.EXE
MKCOMPAT.EXE
MPREXE.EXE
MSCONFIG.EXE
REDIR32.EXE
REGSVR32.EXE
RNAAPP.EXE
SPOOL32.EXE
SYSAGENT.EXE
TAPI16.EXE
TAPIINI.EXE
TAPISRV.EXE
TAPIUPR.EXE
TCMSETUP.EXE
TLOCMGR.EXE
TRCDLC.EXE
WALIGN.EXE
WSASRV.EXE
UNIDRV.HLP
CONLOCK.MOD
REDIRECT.MOD
UNICODE.NLS
AMOVIE.OCX
BR549.OCX
EYEDOG.OCX
IMGADMIN.OCX
IMGEDIT.OCX
IMGSCAN.OCX
IMGTHUMB.OCX
NDISWMI.SYS
NETPPTP.SYS
STDOLE.TLB
STDOLE32.TLB
MMTASK.TSK
REMOTESP.TSP
TSP3216L.TSP
UNIMDM.TSP
THREED.VBX
MVOICED.VWP
AFVXD.VXD
FIOLOG.VXD
LOGGER.VXD
MSGAME.VXD
MSSP.VXD
PPPMAC.VXD
SPAP.VXD
SPLITTER.VXD
UNIMODEM.VXD
VGATEWAY.VXD
WSHTCP.VXD
WSOCK.VXD
WSOCK2.VXD

C:\Windows\System\Vmm32 :
VCACHE.VXD

C:\Windows\System\Iosubsys :
NTMAPHLP.PDR

C:\Windows\System\Shellext :
CABVIEW.DLL
INETFIND.DLL

C:\Windows\Help :
AMOVIE.CHM
CALC.CHM
FREECELL.CHM
MPLAYER.CHM
MSHEARTS.CHM
NOTEPAD.CHM
PINBALL.CHM
SOL.CHM
TELNET.CHM
WINFILE.CHM
WINMINE.CHM
AMOVIE.HLP
CALC.HLP
FREECELL.HLP
IMGHELP.HLP
IMGOCXD.HLP
MPLAYER.HLP
MSHEARTS.HLP
NOTEPAD.HLP
PINBALL.HLP
SOL.HLP
TELNET.HLP
WINFILE.HLP
WINHLP32.HLP

C:\Windows\Sysbckup :
COMMCTRL.DLL
COMMDLG.DLL
COMPOBJ.DLL
DCIMAN.DLL
DCIMAN32.DLL
DDEML.DLL
DISPDIB.DLL
LZEXPAND.DLL
MCIOLE.DLL
MSACM.DLL
MSMIXMGR.DLL
MSVCRT20.DLL
MSVIDEO.DLL
OLE2.DLL
OLE2CONV.DLL
OLE2DISP.DLL
OLE2NLS.DLL
OLECLI.DLL
OLESVR.DLL
SHELL.DLL
STORAGE.DLL
TOOLHELP.DLL
TYPELIB.DLL
UNIDRV.DLL
VER.DLL
WIN32S16.DLL
MCIAVI.DRV
MIDIMAP.DRV
MSACM.DRV
WINHELP.EXE
STDOLE.TLB

C:\Windows\System32\Drivers :
1394BUS.SYS
DBCLASS.SYS
DBFILTER.SYS
DRMK.SYS
HIDCLASS.SYS
HIDPARSE.SYS
HIDVKD.SYS
KMIXER.SYS
MSPQM.SYS
NTMAP.SYS
OHCI1394.SYS
OPENHCI.SYS
PORTCLS.SYS
REDBOOK.SYS
RT.SYS
SBEMUL.SYS
SBP2PORT.SYS
SBP2SCAN.SYS
SWMIDI.SYS
TDI.SYS
UHCD.SYS
UPDATE.SYS
USBAUDIO.SYS
USBAUTH.SYS
USBCCGP.SYS
USBD.SYS
USBHUB.SYS
WDMFS.SYS
WMIDRV.SYS
WMILIB.SYS

C:\Windows\Msapps\Grphflt :
MSJPEG32.DLL
JPEGIM32.FLT

C:\Windows\Fonts :
8514FIX.FON
8514OEM.FON
8514SYS.FON
COURE.FON
COURF.FON
DOSAPP.FON
MODERN.FON
SERIFE.FON
SERIFF.FON
SMALLE.FON
SMALLF.FON
SSERIFE.FON
SSERIFF.FON
SYMBOLE.FON
SYMBOLF.FON
VGAFIX.FON
VGAOEM.FON
VGASYS.FON
ABALC.TTF
ANTQUAB.TTF
ANTQUABI.TTF
ANTQUAI.TTF
ARIAL.TTF
ARIALBD.TTF
ARIALBI.TTF
ARIALI.TTF
ARIBLK.TTF
BKANT.TTF
CALIST.TTF
COMIC.TTF
COMICBD.TTF
COPRGTB.TTF
COPRGTL.TTF
COUR.TTF
COURBD.TTF
COURBI.TTF
COURI.TTF
GOTHIC.TTF
GOTHICB.TTF
GOTHICBI.TTF
GOTHICI.TTF
IMPACT.TTF
LHANDW.TTF
LSANSI.TTF
LSANSUNI.TTF
LUCON.TTF
MARLETT.TTF
MATISSE_.TTF
NWGTHC.TTF
NWGTHCB.TTF
NWGTHCI.TTF
SYMBOL.TTF
TAHOMA.TTF
TAHOMABD.TTF
TEMPSITC.TTF
TIMES.TTF
TIMESBD.TTF
TIMESBI.TTF
TIMESI.TTF
TREBUC.TTF
TREBUCBD.TTF
TREBUCBI.TTF
TREBUCIT.TTF
VERDANA.TTF
VERDANAB.TTF
VERDANAI.TTF
VERDANAZ.TTF
WEBDINGS.TTF
WESTM.TTF
WINGDING.TTF

C:\Program Files\Accessories :
MSPCX32.DLL
WORDPAD.EXE

C:\Program Files\Common Files\Microsoft Shared\Grphflt :
JPEGIM32.FLT

C:\Program Files\Common Files\Microsoft Shared\Msinfo :
MSIAV.OCX
MSICDROM.OCX
MSIOLERG.OCX
MSIPRINT.OCX
MSISYS.OCX
MSUPDATE.OCX
TXTVIEW.OCX

C:\Program Files\Common Files\Microsoft Shared\Textconv :
MSWRD632.WPC
MSWRD832.CNV
WRITE32.WPC

C:\Program Files\Common Files\System\Ole Db :
MSDATL2.DLL

[lameXpert]

NT Service

Idézet

PrismXL - Lanovation  L  PRISMXL.SYS  The PrismXL service lets the Client deploy Tasks on a target computer regardless of the current user’s permissions. 
System Commander MBR check  ?  WINMBR.EXE
Acronis Scheduler2 Service  L  schedul2.exe  http://www.acronis.c...ucts/trueimage/ 
Adapter Switching  L  RoamSvc.exe  Intel Adapter Switching 
Administración de aplicaciones  L  services.exe  Spanish Windows 2000 applications managing 
Administrador de cuentas de seguridad  L  lsass.exe  Spanish Windows 2000 security accounts manager 
Administrador de discos  L  services.exe  Spanish Windows 2000 disks manager 
Administrador de utilidades  L  UtilMan.exe  Spanish Windows 2000 utility manager 
Adobe LM Service  L  Adobelmsvc.exe  Required for PhotoshopCS 
AdobeVersionCue  L  VersionCue.exe  Adobe related 
Agente de directivas IPSEC  X  lsass.exe  Spanish Windows 2000 IPSEC policy agent
Alerter  L  svchost.exe  Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. 
Almacenamiento protegido  L  services.exe  Spanish Windows 2000 protected storage 
Aluria Spyware Eliminator Service  O  ASEServ.exe  Aluria Spyware Eliminator 
AntiVir Service  L  AVGUARD.EXE  AntiVir antivirus 
AntiVir Update  L  AVWUPSRV.EXE  AntiVir Antivirus 
ANTS Profiler service  L  RedGate.Profiler.Service.exe  Related to Red Gate Software Ltd 
AOL Connectivity Service  L  AOLAcsd.exe  America Online 
AOL Spyware Protection Service  L  aolserv.exe  Related to AOL 
AOL TopSpeed Monitor  L  aoltsmon.exe  AOL Topspeed 
APC UPS Service  L  mainserv.exe  Related to American Power Conversion Corporation 
Application Layer Gateway Service  L  alg.exe  Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall 
ASF Agent  L  ASFAgent.exe  Intel Alert Standard Format Console - asfagent.exe is a part of a systems management suite bundled with other applications, mainly Dell's OpenManage. 
Atheros Configuration Service  L  acs.exe  related to Atheros Wireless LAN 
Ati HotKey Poller  L  Ati2evxx.exe  ATI Video Card Control Panel 
ATI Smart  L  ati2sgag.exe  ATI Video Card Control Panel 
AutoComplete Service  L  autocomp.exe  Tracks Eraser Pro 
Autodesk Licensing Service  L  AdskScSrv.exe  Related to Autodesk, Inc. 
Avast32 Start as Service  ?  avserver.exe  seems to belong to Avast anti-virus software 
AVG6 Service  L  avgserv.exe  AVG 6 Anti virus 
AVG7 Alert Manager Server  L  avgamsvr.exe  Related to AVG Anti-Virus. 
AVG7 Update Service  L  avgupsvc.exe  Related to AVG Anti-Virus. 
AVP Control Centre Service  L  avpcc.exe  Kaspersky AntiVirus 
AVSync Manager  L  Avsynmgr.exe  From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application 
AvUpdSvc  L  avupdsvc.exe  Part of Avast! anti-virus software 
BigPond Broadband Cable Login  L  bpcService.exe  BIGPOND BROADBAND CABLE http://research.pestpatrol.com/Analyses/20...1-27_073309.asp 
BitDefender Communicator  L  xcommsvr.exe  Related to bitdefender Antivirus 
BitDefender Scan Server  L  bdss.exe  Related to Bitdefender antivirus 
BitDefender Virus Shield  L  vsserv.exe  Related to bitdefender (Virusshield) 
BlackICE  L  blackd.exe  Black Ice firewall 
Bluetooth Service  L  btwdins.exe  Bluetooth Service 
BrSplService  L  brsvc01a.exe  related to Brother Industries Ltd 
C-DillaCdaC11BA  O  CDAC11BA.EXE  copy protection software 
CA License Client  L  lic98rmt.exe  Computer Associates 
CA License Server  L  lic98rmtd.exe  Computer associates 
CachemanXP  L  CachemanXP.exe  CachemanXP Memory Manager 
CeEPwrSvc  L  CeEPwrSvc.exe  Related to TOSHIBA and COMPAL ELECTRONIC INC. 
Cisco Systems, Inc. VPN Service  L  cvpnd.exe  part of Cisco VPN 
Cliente de seguimiento de vinculos distribuidos  L  services.exe  Spanish Windows 2000 distributed links tracking client 
Cliente DHCP  L  services.exe  Spanish Windows 2000 DHCP client 
Cliente DNS  L  services.exe  Spanish Windows 2000 DNS client 
Config Loader  X  scvhost.exe  several Agobot variants
Content Monitoring Tool  L  msCMTSrvc.exe  Compaq CMTS 
Creative Service for CDROM Access  L  CTsvcCDA.exe  Creative Service for CDROM Access 
Crypkey License  L  crypserv.exe  CrypKey Software Licensing System from Cobalt Systems 
DDE de red  L  netdde.exe  Spanish Windows 2000 network DDE 
Deepsight Extractor  L  ExtractorService.exe  Symantec Security Analyser 
DeepSight Extractor Service for NPF03  L  ExtractorServiceNPF03.exe  Symantec Security Analyser 
DeepSight Extractor Service for NPF04  L  ExtractorServiceNPF04.exe  Symantec Security Analyser 
DefWatch  L  defwatch.exe  Symantec Antivirus related 
DF5Serv  L  DF5Serv.exe  By Faronics Corporation 
DiamondCS Process Guard Service v3.000  L  dcsuserprot.exe  process guard 
Diskeeper  L  DkService.exe  Executove Software Diskeeper 
distributed.net client  X  iosdt.exe  You have a Trojan virus on your PC – IOSDT.EXE is its main file. You most probably tried to download illegal copies of Microsoft software, and got infected by this trojan virus as a result (it gives access to your PC from the Internet).
DSDM de DDE de red  L  netdde.exe  Spanish Windows 2000 network DDE DSDM 
EPSON Printer Status Agent2  L  SAgent2.exe  detects and configures an Epson Printer Port where applicable 
eScan Monitor Service  L  avpm.exe  eScan Antivirus 
eScan Server-Updater  L  TRAYSSER.EXE  eScan antivirus 
Escritorio remoto compartido de NetMeeting  L  mnmsrvc.exe  Spanish Windows 2000 Netmeeting remote desktop sharing service 
Estación de trabajo  L  services.exe  Spanish Windows 2000 "workstation" 
Event Log Watch  L  LogWatNT.exe  Computer Associates 
Examinador de equipos  L  services.exe  Spanish Windows 2000 computers browser 
Exten. controlador Instrumental de admon. de Windows  L  services.exe  Spanish Windows 2000 windows management instrumentation drive extension 
FW Configuration Interpreter  L  UmxCfg.exe  Tiny Firewall 
FW Event Manager  L  UmxAgent.exe  Tiny Firewall 
FW Live Update  L  umxlu.exe  Tiny Firewall 
FW Policy Manager  L  UmxPol.exe  Tiny Firewall 
FW User to IP Address Translation  L  umxuta.exe  Tiny Firewall 
FwSRService  L  fwsrservice.exe  CheckPoint SecuRemote 
GBPoll  L  GBPoll.exe  Seems to be Roxio GoBack related 
GEARSecurity  L  GEARSEC.EXE  Related to GEAR software. 
GhostStartService  L  GHOSTS~2.EXE  Related to Norton. GHOSTSTARTSERVICE is the background support task/service for Ghost for Windows. 
Giga Pocket Hardware Detector  L  shwserv.exe  Sony computers 
Groove Installer Service  O  GrooveInstallerService.exe  ???
Horario de Windows  L  services.exe  Spanish Windows 2000 "windows time" 
HP Configuration Interface Service  L  HPConfig.exe  HPConfig Module 
HP RF Device Service  L  HpRfDev.exe  support for HP managing wireless devices 
hpdj  ?  hpdj.exe  Maybe HP related? Sits in TEMP folder. 
IAA Event Monitor  L  iaantmon.exe  Intel related 
IBM KCU Service  L  TpKmpSVC.exe  related to IBM ThinkPad 
IBM PM Service  L  ibmpmsvc.exe  Power management driver for IBM laptops 
IBM PM Service -  L  ibmpmsvc.exe  This complimentary, automated service from IBM turns data from your mission critical servers into detailed reports that show where resources are-and helps evaluate where they should be. 
IBM PSA Access Driver Control  L  PsaSrv.exe  related to Professional Services Automation (PSA) from SharpOWL 
IBM Rapid Restore Ultra Service  L  rrpcsb.exe  related to Xpoint Technologies 
IMAPI CD-Burning COM Service  L  ImapiRox.exe  IMAPI CD-Burning COM Service 
InCD File System  L  InCDsrv.exe  InCD Packet Writer related. 
InCD Helper  L  InCDsrv.exe  InCD Packet Writer service from Nero Burning ROM (Ahead Software) 
Inicio de sesión en red  L  lsass.exe  Spanish Windows 2000 net logon 
Instrumental de administración de Windows  L  WinMgmt.exe  Spanish Windows 2000 windows management instrumentation 
Intel File Transfer  L  xfr.exe  Related to Intel Corp. 
Intel NCS NetService  L  NetSvc.exe  Intel NCS NetService 
Intel® NMS  L  NMSSvc.exe  NIC Management Service - diagnostics program for Intel Pro family network cards 
Interbase Guardian  L  ibguard.exe  Interbase database server related 
InterBase InterClient Server  L  interserver.exe  Interbase database server related 
InterBase Server  L  ibserver.exe  Interbase database server 
Iomega Activity Disk2  L  ActivityDisk.exe  ActivityDisk Iomega Corporation SmartSoft ActivityDisk 
Iomega App Services  L  AppServices.exe  Iomega related 
IomegaAccess  L  IOMEGAACCESS.EXE  related to Iomega Backup 
iPod Service  L  iPodService.exe  Related to Apple iPod. 
ISEXEng  X  angelex.exe  Bargain Buddy variant
ISSvc  L  ISSVC.exe  Related to Norton Internet Security 
KAV Monitor Service  L  avpm.exe  Kaspersky AntiVirus 
kavsvc  L  kavsvc.exe  Kaspersky AntiVirus 
Kerio Personal Firewall  L  persfw.exe  Kerio Firewall 
Kodak Camera Connection Software  L  KodakCCS.exe  Kodak Software to connect digital cameras 
LexBce Server  L  LEXBCES.EXE  Lexmark Printer Service 
Logical Disk Manager Administrative Service  L  dmadmin.exe  Veritas logical disk manager 
Logical Disk Manager Administrative Service  L  dmadmin.exe  VERITAS Software Corp. 
Macromedia Licensing Service  L  Macromedia Licensing.exe  Related to Macromedia products: Flash, Dreamweaver, etc. 
Mailgate Mail/Proxy Service  L  mgatesvc.exe  Mailgate Internet Connectivity Server 
mapi Helper  L  ImapiHelper.exe  ISO recorder 
McAfee Firewall  L  CPD.EXE  Related to Network Associates 
McAfee Framework  L  FrameworkService.exe  McAfee/CA related 
McAfee SecurityCenter Update Manager  L  mcupdmgr.exe  McAfee Antivirus updater 
McAfee.com McShield  L  mcshield.exe  Related to McAfee 
McAfee.com Personal Firewall Service  L  MPFSERVICE.exe  Related to McAfee.com Personal Firewall 
McAfee.com VirusScan Online Realtime Engine  L  mcvsrte.exe  McAfee AntiVirus 
McShield  L  Mcshield.exe  this process is associated with McAfee's Internet Security suite. More specifically, it is essential to the Antivirus software and should not be removed 
MDaemon - Alt-N Technologies, Ltd.  L  MDAEMON.EXE  Related to MDaemon,a Windows-based email server. 
Microsoft NetWork FireWall Services  X  NetServices.exe  http://www.sophos.co...2lovgateaa.html 
Microsoftkeysd  X  systemwin32.exe
MrPostman  L  Wrapper.exe  Related to MrPostman: POP email access. 
MySql  L  mysqld-nt.exe  belongs to MySQL Daemon. It is a service that handles the access to MySQL databases 
NAV Alert  L  alertsvc.exe  Related to Symemtecn/Norton products 
netbios helper service  X  altsvc.exe  adserver adtech.de redirects 
NetDDEipx  X  *****.exe (* = random character)  Trojan.Netdepix
Netropa NHK Server  L  nhksrv.exe  Netropa Hotkey Server task seen only on DELL and Compaq PCs running Windows NT4/2000/XP 
Netscape Update Service  L  ncupdatesvc.exe  Netscape Communications Corporation updater 
Network Associates Task Manager  L  VsTskMgr.exe  VirusScan Task Manager 
Network Security Service  X  *****.exe (random filename)  CoolWebSearch res:// variant 
NMap  L  nmapserv.exe  NMapWin Port Scanner utility service. 
NNSvc  L  nnsvc.exe  NetNanny Internet Filter 
NOD32 Kernel Service  L  nod32krn.exe  NOD32 Antivirus 
Norton AntiVirus Auto Protect Service  L  navapsvc.exe  Related to Norton/Symantec AntiVirus. 
Norton AntiVirus Client  L  rtvscan.exe  Norton Anti-virus related 
Norton AntiVirus Firewall Monitor Service  L  NPFMntor.exe  Norton Internet Worm Protection 
Norton Ghost  L  PQV2iSvc.exe  symantec Norton Ghost Image related 
Norton Internet Security Proxy Service  L  SymProxySvc.exe  Related to Symantec Corporation 
Norton Internet Security Service  L  NISSERV.EXE  Related Symantec Corporation 
Norton Personal Firewall Proxy Service  L  SymProxySvc.exe  Related to Norton Firewall Proxy service 
Norton Personal Firewall Service  L  NISSERV.EXE  Related to Norton Personal Firewall service 
Norton Program Scheduler  L  npssvc.exe  Related to Norton Scheculer 
Norton Unerase Protection  L  NPROTECT.EXE  Norton Protected Recycle Bin 
Novell Application Launcher  L  NALNTSRV.EXE  Novell NAL NT service 
Novell Workstation Manager  L  wm.exe  Novell Workstation Manager 
Nt System Kernel  X  ntsyskrnl.exe  related to WORM_AGOBOT.IK 
NVIDIA Display Driver Service  L  nvsvc32.exe  NVidia 
NVIDIA Driver Helper Service  L  nvsvc32.exe  Related to NVIDIA drivers. 
O&O Defrag  L  oodag.exe  www.oo-software.com 
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe  ?  dcfssvc.exe  Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can\'t load pictures from your camera/dock - Kodak\'s dock is an example 
O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe  ?  mgabg.exe  Matrox BIOS Guard. What does it do and is it required? 
O23 - Service: Sygate Personal Firewall Pro - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe  L  C:\Program Files\Sygate\SPF\smc.exe  Sygate Personal Firewall Pro 
O23 - Service: WebSeach Toolbar support NT service  X  TBPSSvc.exe  Huntbar adware 
Outpost Firewall Services  L  outpost.exe  Agnitum Outpost firewall service 
PACSPTISVR  L  PACSPT~1.EXE, PACSPTISVR.exe  Sony computers 
Panda anti-virus service  L  pavsrv51.exe  Panda Anti-virus Service 
Panda Firewall  L  PavFires.exe  Panda Firewall Service 
Panda Firewall Service  L  PavFires.exe  Related to Panda Firewall 
Panda Function Service  L  PavFnSvr.exe  RElated to Panda Antovirus software 
Panda IManager Service  L  PsImSvc.exe  Related to Panda Titanium Antivirus 
Panda Pavkre  L  Pavkre.exe  Related to Panda Titanium Antivirus 
Panda PavProt  L  PavProt.exe  Related to Panda Titanium Antivirus 
Panda Process Protection Service  L  pavprsrv.exe  Related to Panda Software 
pcAnywhere Host Service  L  awhost32.exe  Part of Symantec's pcAnywhere remote PC management software. 
PDEngine  L  PDEngine.exe  Raxco PerfectDisk 
PDScheduler  L  PDSched.exe  Raxco PerfectDisk 
PictureTaker - LANovation  L  PCTKRNT.SYS  LANovation's PictureTaker Enterprise Edition 3.1 lets administrators create software update packages and deploy them to network PCs through a third-party network management suite 
Plug and Play  L  services.exe  Spanish Windows 2000 Plug and Play 
Pml Driver  L  HPHipm09.exe  Related to HP printers 
Pml Driver HPH11  L  HPHipm11.exe  HP PML Driver for HP’s Photosmart printers. 
Pml Driver HPZ12  L  HPZipm12.exe  Related to HP printers. 
PrismXL  L  PRISMXL.SYS  Lanovation Prism Deploy package http://www.lanovation.com/ 
Programador de tareas  L  MSTask.exe  Spanish Windows 2000 task scheduler 
Proveedor de asistencia de seguridad LM de Windows NT  L  lsass.exe  Spanish Windows 2000 NT LM security support provider 
ptssvc - KODAK  L  ptssvc.exe  installed alongside the drivers for Kodak's range of digital cameras 
QCONSVC  ?  QCONSVC.exe  Maybe IBM ThinkPad related? 
RadClock  L  RadClock.exe  ATI/Radeon Video Card Setting Tweaking Utility 
RadioSvr  L  RadioSvr.exe  HP support for managing wireless devices 
RapApp  L  rapapp.exe  Black Ice Firewall related 
Registro de sucesos  L  services.exe  Spanish Windows 2000 event logger 
Registros y alertas de rendimiento  L  smlogsvc.exe  Spanish Windows 2000 performance logs and alerts 
RegSrvc  L  RegSrvc.exe  Intel PROset 
Remote Administrator Service  L  r_server.exe  part of a remote administrator application that allows a user to work on one or more remote computers.. Famatech 
Remote Packet Capture Protocol v.0 (experimental)  L  rpcapd.exe  Related to Winpcap (Windows Packet Capture Library) 
Remote Procedure Call (RPC) Helper  X  *****.exe (random filename)  CoolWebSearch malware 
RoamMgr  L  RoamMgr.exe  Intel PROset 
SAVRoam  L  SavRoam.exe  Related to Norton/Symantec AntiVirus 
SAVScan  L  SAVScan.exe  Related to Norton/Symantec AntiVirus. 
ScriptBlocking Service  L  SBServ.exe  Related to Norton/Symantec AntiVirus. 
ScsiAccess  L  ScsiAccess.EXE  Alcohol Software's CD/DVD writing application 
Security Agent  X  scagent.exe
Service: Norton Internet Security Accounts Manager  L  NISUM.EXE  Related to Norton Internet Security 
Service: Panda Preventium+ Service  L  prevsrv.exe  Related to Panda Titanium Antivirus 
service:network dde connections  X  service.exe  adtech.de redirections 
Servicio de alerta  L  services.exe  Spanish Windows 2000 alert service. 
Servicio de ayuda TCP/IP NetBIOS  L  services.exe  Spanish Windows 2000 Help service TPC/IP NetBIOS 
Servicio de fax  L  faxsvc.exe  Spanish Windows 2000 fax service 
Servicio del administrador de discos lógicos  L  dmadmin.exe  Spanish Windows 2000 logical disk manager administrative service 
Servicio RunAs  L  services.exe  Spanish Windows 2000 RunAs service 
Servidor  L  services.exe  Spanish Windows 2000 "server" 
Shiva VPN Client  L  icsrv.exe  Related to Eicon Networks Corporation 
Sistema de ayuda de tarjeta inteligente  L  SCardSvr.exe  Spanish Windows 2000 smart card helper 
SmartLinkService  L  slserv.exe  slserv.exe is installed alongside Smartlink communication products and offers additional support to the modem service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems. 
Softex OmniPass Service  L  Omniserv.exe  Related to Softex OmniPass security solution which handles passwords on your computer. 
SonicWall VPN Client Service  L  RampartSvc.exe  SonicWall client for VPN access. 
Sony SPTI Service  L  Sptisrv.exe  Sony computers 
Sony TV Tuner Controller  L  halsv.exe  Sony computers 
Sony TV Tuner Controller  L  halsv.exe  Sony computers 
Sony TV Tuner Manager  L  RM_SV.exe  Sony computers 
Sophos Anti-Virus  L  SWEEPSRV.SYS  By Sophos Plc 
Sophos Anti-Virus Network  L  SWNETSUP.EXE  By Sophos Plc 
Sophos Anti-Virus Update  L  SWUPDATE.EXE  By Sophos Plc 
SoundMAX Agent Service  L  SMAgent.exe  SoundMAX Sound Device 
Spectrum24 Event Monitor  L  S24EvMon.exe  Intel Corporation 
Speed Disk service  L  nopdb.exe  Norton Speed Disk 
SSO Plus  L  pgpwdmon.exe  http://www.passgo.co...sso/index.shtml 
STOPzilla Local Service  L  szntsvc.exe  Stopzilla Popup Blocker 
StyleXPService  L  StyleXPService.exe  Related to StyleXP, a skinning program for Windows XP 
Sygate Personal Firewall  L  smc.exe  Related to Sygate Firewall. 
Symantec AntiVirus  L  Rtvscan.exe  Related to Symantec AntiVirus 
Symantec AntiVirus Client  L  Rtvscan.exe  Symantec Internet Security Suite 
Symantec AntiVirus Definition Watcher  L  DefWatch.exe  Related to Symantec AntiVirus Software. 
Symantec Core LC  L  symlcsvc.exe  Related to Norton/Symantec Anti-Virus. 
Symantec Event Manager  L  ccEvtMgr.exe  Related to Norton/Symantec AntiVirus 
Symantec Network Drivers Service  L  SNDSrvc.exe  Symantec related 
Symantec Network Drivers Service  L  SNDSrvc.exe  Symantecd related 
Symantec Network Proxy  L  ccProxy.exe  Symantec Network Proxy 
Symantec Password Validation  L  ccPwdSvc.exe  Related to Norton/Symantec AntiVirus. 
Symantec Password Validation Service  L  ccPwdSvc.exe  Part of Norton 2003/4 (AntiVirus, Personal Firewall, Internet Security). 
Symantec Proxy Service  L  ccPxySvc.exe  Related to Norton proxy service 
Symantec Settings Manager  L  ccSetMgr.exe  Related to Norton/Symantec AntiVirus. 
Symantec SPBBCSvc  L  SPBBCSvc.exe  Symantec Internet Security Service 
SymWMI Service  L  SymWSC.exe  Related to Norton/Symantec AntiVirus. 
TabletService  L  Tablet.exe  Related to Wacom Technology, Corp. 
Tardis time service  L  tardisnt.exe  TardisNT time sync service. 
Tarjeta inteligente  L  SCardSvr.exe  Spanish Windows 2000 smartcard 
TCP/IP Print Server  L  tcpsvcs.exe  tcpsvcs.exe is a part of Microsoft Windows networking components. This essential system process is initiated when the computer uses special TCP/IP networking services such as DHCP, Simple TCP and print services. 
Telnet  L  tlntsvr.exe  Spanish Windows 2000 telnet 
Trend Micro Central Control Component  L  PcCtlCom.exe  Related to Trend Micro Incorporated. 
Trend Micro Personal Firewall  L  TmPfw.exe  Related to Trend Micro Inc. 
Trend Micro Proxy Service  L  tmproxy.exe  Related to Trend Micro Inc. 
Trend Micro Real-time Service  L  Tmntsrv.exe  Related to Trend Micro Incorporated. 
TrueVector Internet Monitor  L  vsmon.exe  Zone Alarm Firewall 
TuneUp WinStyler Theme Service  L  WinStylerThemeSvc.exe  Part of TuneUp Utilities 
Ulead Burning Helper  L  ULCDRSvr.exe  Ulead DVD Burning Service 
USB Device  X  win32usb.exe  http://www.sophos.co...32forbotbq.html
VAIO Entertainment Aggregation and Control Service  L  VzRs.exe  Sony VAIO computers 
VAIO Entertainment File Import Service  L  VzFw.exe  Sony VAIO computers 
VAIO Entertainment TV Device Arbitration Service  L  VzHardwareResourceManager.exe  Sony VAIO computers 
VAIO Entertainment UPnP Client Adapter  L  VCSW.exe  Sony VAIO computers 
VAIO Media Gateway Server  L  VmGateway.exe  Sony VAIO computers 
VAIO Media Integrated Server  L  VMISrv.exe  Sony VAIO computers 
VAIO Media Integrated Server (HTTP)  L  SV_Httpd.exe  Sony VAIO computers 
VAIO Media Integrated Server (UPnP)  L  UPnPFramework.exe  Sony VAIO computers 
VAIO Media Music Server  L  SSSvr.exe  Related to Sony Corporation 
VAIO Media Music Server (HTTP)  L  sv_httpd.exe  Related to Sony Corporation 
VAIO Media Music Server (UPnP)  L  UPnPFramework.exe  Related to Sony Corporations. 
VAIO Media Photo Server  L  PhotoAppSrv.exe  Related to Sony Corporation. 
VAIO Media Photo Server (HTTP)  L  SV_Httpd.exe  Related to Sony Corporations. 
VAIO Media Photo Server (UPnP)  L  UPnPFramework.exe  Related to Sony Corporation. 
VAIO Media Video Server  L  GPVSvr.exe  Sony VAIO computers 
VAIO Media Video Server (HTTP)  L  SV_Httpd.exe  Sony VAIO computers 
VAIO Media Video Server (UPnP)  L  UPnPFramework.exe  Sony VAIO computers 
Virtual CD v4 Security service (SDK - Version)  L  vcssecs.exe  Virtual CD SDK Security Service. Essential for the proper running of Virtual CD. 
VMware Authorization Service  L  vmware-authd.exe  Related to VMware, Inc. 
VMware DHCP Service  L  vmnetdhcp.exe  Related to VMware, Inc. 
VMware NAT Service  L  vmnat.exe  Related to VMware, Inc. 
VMware Registration Service  L  vmserverdWin32.exe  Related to VMware, Inc. 
VNC Server  L  WinVNC.exe  TightVNC Remote Control utility. 
VNC Server Version 4 - RealVNC Ltd.  L  WinVNC4.exe  The RealVNC 4 server for VNC usage over a LAN/WAN. 
W2K PCtel speaker phone  L  pctspk.exe  Related to PCtel services 
WAN Miniport (ATW) Service  L  wanmpsvc.exe  America Online 
WebDrive Service  ?  wdservice.exe  Unknown 
Win32 SSL Driver  X  winssv.exe  W32/Forbot-BH 
Win32 USB2 Driver  X  svchosting.exe  W32/Forbot.J or SDBOT.HU 
WinTools for IE service  X  WToolsS.exe  Related to Adware.Huntbar. Advertising program
WLTRYSVC  L  bcmwltry.exe  Related to wireless networking in Dell computers 
Workstation NetLogon Service  X  *****.exe (random filename)  CoolWebSearch malware 
WUSB54Gv2SVC  L  WLService.exe  Related to Linksys Wireless-G USB Wireless Network Monitor 
X10 Device Network Service  L  x10nets.exe  X10 video streaming devices. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems 
YPCService  L  YPCSER~1.EXE  Related to Yahoo 
ZESOFT  X  zeta.exe  Seems to be a BargainBuddy/BullsEye variant. Also appears often with VX2...
ZipToA  L  ZipToA.exe  related to Iomega Backup

L = többé-kevésbé tudható, micsoda
O = erõsen kérdéses

X = jól nézd meg!

[lameXpert]

TASK LIST PROGRAMS — V

[Petzi]

hi
nem tom hova kéne írnom.
a következõ a problémám
mikor betölt a windows az alábbi felirat jelenik meg hogy modul32.exe hibát észlel és leáll
vagy valami ilyesmi.
Ha tud valaki valamit kérem írjon.

[KovacsUr]

Idézet: Petzi - Dátum: 2004. dec. 29., szerda - 16:41

Ha tud valaki valamit kérem írjon.

Ez egy trójai, menj neki egy szimpatikus vírusírtóval.

[lameXpert]

Note: Any malware can be named anything - so you should check where the files of the running processes are located on your disk. If a "non-Microsoft" .exe file is located in the C:\Windows or C:\Windows\System32 folder, then there is a high risk for a virus, spyware, trojan or worm infection!

[lameXpert]

Idézet: caratyuska - Dátum: 2004. szept. 24., péntek - 6:44

újra bizonyítást nyert hogy szem elõtt kell lennie, hogy látszódjék, ezért kiemelem

[lameXpert]

Idézet

a system scan során egy érdekes dolgot talált:
a c:\windows\system32\tcposmod.exe fájlban Backdoor.DSSdoor.b bacdoort talált.
Viszont azt írta, hogy nincs jogosultságom törölni (pedig rendszergazda user vagyok és úgy futtattam, XP az oprendszer).

Idézet

Can you see if this key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "DSS"
is present in your registry?
After disabling it from starting up there, you should have no problem removing tcposmod.exe
From what I could find about this BackDoor I gather it deletes netstat.exe and adds c:\WINDOWS\readme-net.doc and the file you found.
Mostly used to gather online passwords like Hotmail etc.
To find out if any and which passwords were stolen, the first thing to do is find out if it was ever active. You can do that by checking if the changes I mentioned were indeed made.

[lameXpert]

Windows AdTools. TRÓJAI!

Idézet

2004.12.30  15:37                4ÿ720 ide21201.vxd

Windows AdTools. TRÓJAI!

[Niceday]

Up...