Startup Entries

! | ' | $ | % | ( | * | , | - | . | / | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | \ | space | ? | @ | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | ^ | _ | {
Services.dll
File Name: smss.exe
Description:
Added by the External: SOBER-L WORM! Note - this is not the legitimate External: smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\system and note the space at the beginning of the "Startup Item" field
(1) | (0) | (0)
WinCheck
File Name: services.exe
Description:
Added by the External: SOBER.V WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus\Microsoft and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
WinData
File Name: services.exe
Description:
Added by the External: SOBER-AD WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\PoolData and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
Windows
File Name: services.exe
Description:
Added by the External: SOBER.X WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\WinSecurity and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
WinINet
File Name: services.exe
Description:
Added by the External: SOBER.R WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
WinStart
File Name: services.exe
Description:
Added by the External: SOBER.O WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Connection Wizard\Status and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
winsystem.sys
File Name: smss.exe
Description:
Added by the External: SOBER.K WORM! Note - this is not the legitimate External: smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\win32 and note the space at the beginning of the "Startup Item" field
(0) | (0) | (0)
;Rundll
File Name: [filename]
Description:
Added by the External: PWSLEGMIR.E TROJAN!
(0) | (0) | (0)