Startup Entries

File Name: logman.exe /waitservice

Description:
Added by the External: HORST.Q TROJAN! Note - this is not the legitimate External: logman.exe which is always located in %System%. This one is located in either %Windir%, %Windir%\System, %Temp%, %AppData%, %AppData%\Microsoft or %System%\drivers

(0) | (0) | (0)

File Name: LogMeInSystray.exe

Description:
External: RemotelyAnywhere is a remote administration and remote control solution for Windows. It allows access to the host computer via the network (the LAN, an intranet or the Internet) - and on the client side all you need is a web browser, a terminal emulator or a WAP-enabled phone

(0) | (0) | (0)

File Name: ragui.exe

Description:
External: LogMeIn remote access and management software which allows you to connect to a computer or device at any time, from anywhere there is an Internet connection and configure, monitor, diagnose and support multiple remote computers

(0) | (0) | (0)

File Name: [path to trojan]

Description:
Added by the External: DLOADER-RH TROJAN!

(0) | (0) | (0)

File Name: SCTUINotify.exe

Description:
Part of External: Windows SteadyState, which is designed to make life easier for people who set up and maintain shared computers - enabling the system administrator to prevent users from making changes to the system configuration, windows desktop, restricting program access, etc. It's intended for shared user environments such as internet cafés, libraries and schools but can be used in any environment. This entry displays the timeout messages on the restricted computer/account - which warns users how long they have until automatic log-off when they log-in and when there are only 2 minutes left

(0) | (0) | (0)

File Name: LogonLoader.exe

Description:
External: Logon Loader - customize boot & login screens

(0) | (0) | (0)

File Name: LogonLoader.exe

Description:
External: Logon Loader - customize boot & login screens

(0) | (0) | (0)

File Name: CSRSS.EXE

Description:
Added by the External: BRONTOK-BH WORM! Note - this is not the legitimate External: csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS

(0) | (0) | (0)

File Name: logon.exe

Description:
Added by the External: ZINS.A TROJAN!

(0) | (0) | (0)

File Name: imoet.exe

Description:
Added by the External: RAHIWI.A WORM!

(0) | (0) | (0)