|
| Name
| Process
| Details
|
| X | (random file name without extension) | (random file name).sys | Added by the TROJ_ROOTKIT.AI TROJAN! Read the link rootkit type stealth involved.
|
| X | *wuauclt.exe | random | Related to WORM_RBOT.AKU or variant.
|
| X | NetDDEipx (NetDDEipx) | random | Added by the NetDDEipx TROJAN! **note 3ylv.exe may be one of the random file names used
|
| X | Network Devices Controller (ndcsvc) | random file name | Added by the Alnica TROJAN!
|
| X | Network Devices Controller (ndcsvc) | random.$$$ | Added by the Alnica TROJAN!
|
| X | Network Security Service | random | CoolWebSearch res:// variant
|
| X | Network Security Service (NSS) | random | CoolWebSearch res:// variant
|
| X | Remote Procedure Call (RPC) Helper | random | CoolWebSearch malware
|
| X | svchost.exe (moto) | (Random 18-character filename) | Added by the Troj/Agent-MD TROJAN!
|
| X | Windows Overlay Components | (Random).exe | Reported as the Trojan-Dropper.Win32.Agent.tb TROJAN! by Kaspersky Anti-Virus. Note: This trojan fil |
| X | Windows VisFx Components | (Random) | Added by the Win32.Agent.mu Worm!
|
| X | Workstation NetLogon Service | random | CoolWebSearch malware
|
| X | Workstation NetLogon Service ( 11Fßä #•ºÄÖ`I) | (Random).exe | CoolWebSearch malware.
|
| X | Workstation NetLogon Service (11Fßä #•ºÄÖ`I) | (Random)32.exe | CoolWebSearch malware.
|
| X | xadz | random | Related to Backdoor.Exdis
|
| X | zzzxIPSPEC_1 (zzzxIPSPEC_1) | zzzx[random characters].exe | Added by the Netdepix.B TROJAN!
|
