View MDO database (PP)

Showing entries 2826 to 2850 of 3051.

Go directly to page: 1 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 123

(U) C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Maintains links between NTFS files within a computer or across computers in a network.
http://localsystemnetworkrestricted.svchost-exe.net/distributed-link-tracking-client
Windows ALL; discovered by Nasdaq

(L) C:\Windows\System32\svchost.exe -k LPDService
The TCP/IP Print Server service (LPDSVC), also known as the Line Printer Daemon (LPD) service,
http://technet.microsoft.com/en-us/library/cc734754%28WS.10%29.aspx
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\System32\svchost.exe -k netsvcs
netsvcs - see link below for type of services.
http://www.blackviper.com/w/index.php?title=Special%3ASearch&search=netsvcs&button=
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\svchost.exe -k NetworkService
NetworkService - see link below to find out the type of services
http://www.blackviper.com/w/index.php?title=Special%3ASearch&search=NetworkService&button=
Windows ALL; discovered by nasdaq

(U) C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
DDS reported item.
http://networkservicenetworkrestricted.svchost-exe.net/
Windows ALL; discovered by nasdaq

(X) C:\Windows\sYSteM32\SvchOst.eXE -k okogrp
TrojanProxy:Win32/Koobface.gen!G
http://www.threatexpert.com/report.aspx?md5=b5088e8851c01b1dcb38878fe6b03e54
Windows ALL; discovered by nasdaq

(Q) C:\Windows\system32\svchost.exe -k regsvc
Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.
Fix / Info: Read the link.
http://www.blackviper.com/wiki/Remote_Registry
Windows ALL; discovered by nasdaq

(U) C:\Windows\system32\svchost.exe -k rpcss
DDS reported item.
http://rpcss.svchost-exe.net/
Windows ALL; discovered by nasdaq

(L) C:\Windows\system32\svchost.exe -k SDRSVC
Microsoft® Windows Backup Service
http://sdrsvc.svchost-exe.net/microsoft%C2%AE-windows-backup-service
Windows ALL; discovered by nasdaq

(U) C:\Windows\System32\svchost.exe -k secsvcs
DDS reported item.
http://secsvcs.svchost-exe.net/
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\System32\svchost.exe -k smphost
Microsoft Storage Spaces SMP
http://servicedefaults.com/8/smphost/
Windows ALL; discovered by Nasdaq

(L) C:\Windows\System32\svchost.exe -k swprv
Microsoft® Volume Shadow Copy Service software provide
http://swprv.svchost-exe.net/
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\System32\svchost.exe -k TapiSrv
Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.
http://www.blackviper.com/wiki/TapiSrv
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
Microsoft service.
http://windowsvc.com/bbs/board.php?bo_table=windowsvc&wr_id=83548
Windows ALL; discovered by Nasdaq

(L) C:\WINDOWS\System32\svchost.exe -k utcsvc
Microsoft service
http://windowexeallkiller.com/q.php?q=diagtrack-c-windows-system32-svchost-exe-k-utcsvc-diagtrack-dll
Windows ALL; discovered by Nasdaq

(L) C:\windows\system32\svchost.exe -k WbioSvcGroup
Windows Error Reporting Service
http://www.blackviper.com/wiki/Windows_Error_Reporting_Service
Windows ALL; discovered by nasdaq

(L) C:\Windows\System32\svchost.exe -k wdisvc
Diagnostic Policy Service
http://wiki.blackviper.com/wiki/Diagnostic_Service_Host
Windows ALL; discovered by nasdaq

(U) C:\Windows\System32\svchost.exe -k WerSvcGroup
DDS reported item.
http://wersvcgroup.svchost-exe.net/
Windows ALL; discovered by nasdaq

(L) C:\Windows\system32\svchost.exe -k WindowsMobile
Related to Windows Mobile Device Center (WMDC) for Windows
http://www.greatis.com/appdata/a/_/_sysdir__svchost.exe%20-k%20windowsmobile.htm
Windows ALL; discovered by nasdaq

(L) C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
Operating System file - reported by DDS
Windows ALL; discovered by nasdaq

(L) C:\windows\System32\svchost.exe -k yksvcs
Marvell, a pioneer in PC connectivity technologies,
http://www.marvell.com/products/pc_connectivity/
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\system32\svchost\svchost.exe
Unknown trojan. The correct version is located in the Operating system \system32\ subfolder.
Fix / Info: Delete file.
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\system32\sysmonnt.exe
Spyware.SearchPounder sends keywords typed into HTML forms and popular Internet search engines to a remote server.
Fix / Info: HJT and Virus/trojan removal programs.
http://securityresponse.symantec.com/avcenter/venc/data/spyware.searchpounder.html
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\System32\systems.txt
Added by a variant of the SmitFraud infection.
Fix / Info: Delete file - Remove Smitfraud infection.
http://spywareinfoforum.com/index.php?act=ST&f=6&t=72875
Windows ALL; discovered by nasdaq

(X) C:\WINDOWS\system32\sywsvcs.exe
Related to Troj/Orse-L Trojan
Fix / Info: HijackThis - Trojan/Virus removal tools
http://www.sophos.com/virusinfo/analyses/trojorsel.html
Windows ALL; discovered by nasdaq

This is a list of items that is designed to help with the analysis of HijackThis, DDS, OTL and FRST logs.
It is by no means exhaustive (in fact it is being added to all the time), and is intended to complement other legitimate online lists.