Windows Startup Entries, Symbol: [space]

! | ' | $ | % | ( | * | , | - | . | / | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | \ | space | ? | @ | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | ^ | _ | {

Services.dll

File Name: smss.exe
Description:
Added by the External: SOBER-L WORM! Note - this is not the legitimate External: smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\system and note the space at the beginning of the "Startup Item" field
Bad startup (1) | Good startup (0) | (0)

WinCheck

File Name: services.exe
Description:
Added by the External: SOBER.V WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus\Microsoft and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

WinData

File Name: services.exe
Description:
Added by the External: SOBER-AD WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\PoolData and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

Windows

File Name: services.exe
Description:
Added by the External: SOBER.X WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\WinSecurity and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

WinINet

File Name: services.exe
Description:
Added by the External: SOBER.R WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\ConnectionStatus and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

WinStart

File Name: services.exe
Description:
Added by the External: SOBER.O WORM! Note - this is not the legitimate External: services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Connection Wizard\Status and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

winsystem.sys

File Name: smss.exe
Description:
Added by the External: SOBER.K WORM! Note - this is not the legitimate External: smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\msagent\win32 and note the space at the beginning of the "Startup Item" field
Bad startup (0) | Good startup (0) | (0)

;Rundll

File Name: [filename]
Description:
Added by the External: PWSLEGMIR.E TROJAN!
Bad startup (0) | Good startup (0) | (0)