http://www.castlecops.com/StartupList.html CastleCops - Paul Collins StartupList en-us Paul Laudanski (mailto:paul@computercops.biz) Copyright © 2002-2005 CastleCops® 2008-08-21T02:09:00-05:00 daily 24 2003-01-01T12:00-05:00 Windows UDP Control Center X winudpmsgr.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17492.html http://www.castlecops.com/startuplist-17492.html WinDLL (asdfsa.exe) X asdfsa.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17491.html http://www.castlecops.com/startuplist-17491.html SVGA Adapter X svghost.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17490.html http://www.castlecops.com/startuplist-17490.html Security System X securesys.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17489.html http://www.castlecops.com/startuplist-17489.html MSN Security Agent X msnsecure.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17488.html http://www.castlecops.com/startuplist-17488.html Msn Message Acount Helper 7.7 X msnmessage7.7.exe Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17487.html http://www.castlecops.com/startuplist-17487.html MbarInstall X mirar_distro_876260.exe Identified as a variant of the Adware.Mirar, http://www.bleepingcomputer.com/startups/MbarInstall-23651.html malware. [red]Note:[/red] located in \%WINDIR%\ [red]Note:[/red] Use SDFix under supervision. [red]Note: [/red] Filename and location of the file could different. http://www.castlecops.com/startuplist-17486.html http://www.castlecops.com/startuplist-17486.html SpywareSweeper X SpywareSweeper.exe Added by the SpywareSweeper, http://www.bleepingcomputer.com/startups/SpywareSweeper.exe-19618.html security risk. SpywareSweeper is a misleading application that may give exaggerated reports about potential risks on the computer. [red]Note:[/red] Located in \%Program Files%\SpywareSweeper\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17485.html http://www.castlecops.com/startuplist-17485.html LCASS X lcass.exe Added by the W32/SillyFDC-W, http://www.sophos.com/security/analyses/viruses-and-spyware/w32sillyfdcw.html Worm for the Windows platform that spreads via removeable shared drives. [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision. http://www.castlecops.com/startuplist-17484.html http://www.castlecops.com/startuplist-17484.html ctfnnon X ctfmon.exe Identified as a variant of the Backdoor.Win32.Turkojan.ake, http://www.bleepingcomputer.com/startups/ctfmon.exe-23650.html malware. [red]Note:[/red] located in \%WINDIR%\ [red]Note:[/red] Use SDFix under supervision. [red]Please note[/red] that C:\Windows\System32\ctfmon.exe is legitimate and should not be deleted. http://www.castlecops.com/startuplist-17483.html http://www.castlecops.com/startuplist-17483.html