| Name | Status | Filename | Description |
|---|
| msieupdater (Microsoft IE Updater) | X | update44105609.exe | Related to a variant of the Malware.IFN.dropper family. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Note: filename is random in the format of update(Random Number).exe |
| MSIEUpdater_1 (Microsoft IE Updater_1) | X | ie_updater1.exe | Identified as Downloader.Small.eop or Downloader.Murlo.fa Note: This worm is located in %userprofile%\ |
| MSIEUpdater_2 (Microsoft IE Updater_2) | X | ie_updater.exe | Added by a variant of the Troj/Bckdr-QGB TROJAN! Note: This worm\trojan is located in %userprofile%\ |
| MSInfo Framework Service (MSInfoFrv) | X | MSInfnd.exe | Troj/Hupigon-FU Read the link, allows remote access |
| MsInfo Service (MsInfo) | X | MsInfo.exe | Small.H Note: Located in C:\RECYCLER\MsInfo\ Read the link, allows remote access |
| msinit (Microsoft Scheduling Agent) | X | msinit.exe | Added by the W32/Tilebot-BJ
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| MSI_WLAN_Service | L | WLAN_Service.exe | Part of Microstar's WLan card. File found in the C:\Program Files\MicroStar\WLANUtility folder. |
| mslogon (Microsoft System Logon Manager) | X | mslogon.exe | Reported as Trojan-Dropper.Win32.Delf.ng by Kaspersky Anti-Virus.
Note: This file is found in the Windows or Winnt folder. |
| MsLS32 (MsLS32) | X | MsLS32.exe | Added by the W32/Tilebot-BS
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| MsLX32 (MsLX32) | X | MsLX32.exe | Added by the W32/Sdbot-AFS
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| MSMAPDEVICE | X | MSMAPDEVICE.SYS | Added by the TROJ_ROOTKIT.AK
TROJAN!
Read the link, rootkit type stealth involved.
|
| msmbios (Microsoft System Management BIOS Driver) | X | mssmbios.exe | Added by the W32/Tilebot-AI
TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved. |
| MSMPSVC | L | MSMPSVC.exe | Related to Windows_OneCare_Live from Microsoft |
| MSN Clean Messenger | X | msnmsgr.exe | W32/Rbot-GJZ Read the link, allows remote access |
| MSN RAV | X | msnrav.exe | W32/Sdbot-DGO
Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Turns off anti-virus applications
Allows others to access the computer Read the link |
| Msn Service (MSNSVC) | X | msnsrv.exe | Added by a variant of the W32/SDBOT WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| msnntlp | X | msnntlp.exe | W32/Tilebot-JI Read the link, allows remote access |
| MSQMX | X | msqmx.sys | Troj/StartP-BEH |
| MSR Collector | L | msrCollector.exe | Related to Black White Box, Inc. Now owned by Vericept Corp. A Risk Management Platform |
| msriv1 (msriv1) | X | msriv1.sys | Added by the Troj/Rootkit-W
TROJAN!
Read the link, rootkit type stealth involved.
|
| msscmc43 | X | msscmc43.exe | Added by the W32/Spybot-NB WORM! Note: This worm\trojan is located in C:\Windows\System\dllcache\ (Win9x/Me), C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| MsService | X | proxy.exe | Identified as Win32:Delf-IZD by Avast Note: Located in \%WINDIR%\System\ |
| MSSQL (MSSQL2K6) | X | sqlsrv.exe | Added by the SDBOT.CNY
or MYTOB.NC
WORM!
Read the link, rootkit type stealth involved.
|
| MSSQLServerADHelper | L | sqladhlp.exe | Related to Microsoft SQL Server 2000 desktop engine. |
| MSSvc CRSS (CRSS) | X | MSSvc.EXE | Reported by Ewido security suite as Backdoor.SdBot.nj |
| MSSysInterv | X | winself.exe | Added by a variant of the Trojan-Downloader.Win32.Small.ufd TROJAN! Note: located in \%WINDIR%\ Note: Use SDFix under supervision. |
| mst Defrag Service (mstDfrgS) | L | mstDfrgS.exe | Related to mst_Defrag |
| MSTCS | X | MSTCS.EXE | Reported as Backdoor.Iroffer TROJAN! by What-process.com
|
| mstdel32 (mstdel32) | X | mstdel32.exe | Added by the W32/Tilebot-BE
WORM!
Note: This worm\trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| MsUpd | X | msupd4.exe | Added by the Lodmedud TROJAN! |
| MsUpd | X | msupd5.exe | Added by the Lodmedud TROJAN! |
| MsUpd | X | msupd6.exe | Added by the Lodmedud TROJAN! |
| MSUpdate (Microsoft Update Service for 2005) | X | msupdate24.exe | Added by the W32/Tilebot-H
WORM!
|
| msupdatefs (Microsoft Updater FileSystem) | X | update13428241.exe | Related to a variant of the Malware.IFN.dropper family. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Note: filename is random in the format of update(Random Number).exe |
| msupdatefss (Microsoft Updater FileSystems) | X | update62523833.exe | Related to a variant of the Malware.IFN.dropper family. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Note: filename is random in the format of update(Random Number).exe |
| msupdates (Microsoft Message Service XP) | X | win32chk.exe | Added by a variant of the Backdoor.Win32.SdBot.aad family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\ |
| msvbn | X | msvbn.exe | Added by the Backdoor.Win32.SdBot.auv TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| msvnc (msvnc) | X | msvnc.sys | Added by the TROJ_ROOTKIT.M
TROJAN!
Read the link, rootkit type stealth involved.
|
| msvrcs(msvrcs) (msvrcs) | X | msvrcs.exe | Added by the W32/Sdbot-CRX WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| MtRepair1 | X | MtRepair1.exe | Mirar |
| MtRepair2 | X | MtRepair2.exe | Mirar |
| muamgrd.exe | X | muamgrd.exe | Added by a variant of the AGOBOT.GEN WORM! Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Multi-user Cleanup Service | L | ntmulti.exe | Related to IBM Lotus Note software. |
| MWAgent | L | MWASER.EXE | Related to MicroWorld Technologies Inc. - Antivirus & Content Security suite. Note: Located in C:\Program Files\Common Files\MicroWorld\Agent\ |
| MWSarcpkt | L | MWSEtherpkt.exe | Related to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/ |
| MWSejcap | L | MWSejcap.exe | Related to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/ |
| MWSpollserver | L | PollServer.exe | Related to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/ |
| MWSsched | L | sutmsced.exe | Related to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/ |
| MWSTick | L | MWSTick.exe | Related to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/ |
| MXS(mxs) (MXS) | X | mxs.exe | Added by the W32/Sdbot-CTT WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
