 |
ASDAPI.EXE Added by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll More Information
|
 |
avp.exe Added by the RBOT-GCV WORM! Not to be confused with AOL's Active Virus Shield (by Kaspersky) More Information
|
 |
Cfgwiz32.exe Added by a variant of the HACKTACK TROJAN! Not to be confused with the legitimate MS "ISDN Configuration Wizard" (Cfgwiz32.exe) More Information
|
 |
csrss.exe Unidentified malware. Note - this file is placed in a C:\Windows\System\Level4 folder, and should NOT be confused with the legitimate csrss.exe process which is always located in the Winnt\System32 or Windows\System32 folder and should NOT figure in Msconfig/Startup! More Information
|
 |
ctfmon.exe Added by the RAIDYS TROJAN! Note - this should not be confused with the valid Office XP file, see here More Information
|
|
dvt.exe Installation could be a crack/hack to NOD32 here. Seen and removed in many logs. Investigate it further and if this file is present C:\d_v_t.reg then it should be fixed. Not to be confused with the DICOM entry here. Both files are located in the Windows/Windir directory More Information
|
 |
itunes.exe Added by the OSCABOT-L WORM! Note - this file will be placed in the Windows\System32 or Winnt\System32 folder, and should not be confused with the (legitimate) Apple iTunes process, always located in the Program Files\iTunes folder More Information
|
 |
java.exe Added by the MYDOOM.M or MYDOOM.N or other variants of the MYDOOM WORMS! Note - not to be confused with the valid Windows "java.exe" which resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K) or C:\Windows\System32 (WinXP) as this resides in C:\Windows or C:\Winnt More Information
|
 |
kazaalite.exe Kazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms More Information
|
 |
mcupdate.exe Added by the RBOT.XT WORM! Note - this file is located in the Windows\System32 or Winnt\System32 folder, and should not be confused with the McAfee antivirus executable as described here More Information
|
 |
MSGSRV32.EXE Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System More Information
|
 |
msgsvr32.exe Added by the DEADHAT.B WORM! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:\Windows\System) on a Win9x/Me machine More Information
|
 |
msmsgs.exe Added by the ZLOB-I and ZLOB-H TROJANS! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application! More Information
|
 |
msnmsgs.exe Added by the RBOT-KL WORM! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application! More Information
|
 |
msnmsgs.exe Added by the LOONY-P TROJAN! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application! More Information
|
 |
msnmsgs.exe Added by the BANKER-HK TROJAN! Note - not to be confused with msmsgs.exe, the well known MSN Instant Messaging application! More Information
|
 |
NOTEPAD.exe Added as the result of the RUSTY VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor! This malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot. Name field may be empty More Information
|
 |
nslookup.exe PurityScan/Clickspring adware. Not to be confused with the legitimate nslookup.exe which is found in the System32 folder More Information
|
 |
nsrvnt.exe Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe More Information
|
 |
osa9.exe Added by the CLICKER-EC TROJAN! Note - this trojan is located in the Windows or Winnt folder and should not be confused with the Microsoft office program, located in Program Files\Microsoft Office\... More Information
|
 |
RavMon.exe Added by the BDOOR-DIJ TROJAN! Note - this file is located in the %WinDir% directory, and must NOT be confused with the legitimate RAV antivirus file of the same name! More Information
|
 |
rundl.exe Added by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll More Information
|
 |
rundll32 [path] sbuddy.dll SurfBuddy adware - not to be confused with the legitimate SurfBuddy application by SurfApps! More Information
|
 |
rundll32.exe Added by the VB-ZD TROJAN! Note - this file is located in the C:\Windows\help folder, and is not to be confused with the legitimate rundll32.exe file! More Information
|
 |
rundll32.exe Added by the LINEAGE-JH TROJAN! Note - this file is found in the C:\Windows\System folder, and is not to be confused with the legitimate rundll32.exe file, always located in the Windows folder on Win98/ME systems, and in the Winnt\System32 or Windows\System32 folder in WinXP/NT/2K! More Information
|
|