<?xml version="1.0" encoding="Windows-1252"?>

<rdf:RDF 
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" 
xmlns:dc="http://purl.org/dc/elements/1.1/" 
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" 
xmlns:admin="http://webns.net/mvcb/" 
xmlns:cc="http://web.resource.org/cc/" 
xmlns="http://purl.org/rss/1.0/">

<channel rdf:about="StartupList">
<title>Recent 10 StartupList Entries</title>
<link>http://www.castlecops.com/StartupList.html</link>
<description>CastleCops - Paul Collins StartupList</description>
<dc:language>en-us</dc:language>
<dc:creator>Paul Laudanski (mailto:paul@computercops.biz)</dc:creator>
<dc:rights>Copyright &#169; 2002-2005 CastleCops&amp;reg;</dc:rights>
<dc:date>2008-05-09T19:29:07-05:00</dc:date>
<sy:updatePeriod>daily</sy:updatePeriod>
<sy:updateFrequency>24</sy:updateFrequency>
<sy:updateBase>2003-01-01T12:00-05:00</sy:updateBase>
<admin:generatorAgent rdf:resource="http://www.castlecops.com/" />

<item>
<name>VnrPack16</name>
<status>X</status>
<command>VnrPack16.exe</command>
<description>Identified as a variant of the Adware.Zeno_Search_Assistant, http://www.bleepingcomputer.com/startups/VnrPack16.exe-22936.html malware. [red]Note:[/red] Located in \%Program Files%\VnrPack\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16946.html</infourl>
<list>http://www.castlecops.com/startuplist-16946.html</list>
</item>
<item>
<name>VnrPack15</name>
<status>X</status>
<command>VnrPack15.exe</command>
<description>Identified as a variant of the Adware.Zeno_Search_Assistant, http://www.bleepingcomputer.com/startups/VnrPack15.exe-22935.html malware. [red]Note:[/red] Located in \%Program Files%\VnrPack\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16945.html</infourl>
<list>http://www.castlecops.com/startuplist-16945.html</list>
</item>
<item>
<name>PDFtypewriterPrinterMonitor</name>
<status>U</status>
<command>PDFtypewriterMonitorStart.exe</command>
<description>Related to PDF_typewriter_Printer, http://www.ctdeveloping.com/ from CT Developping. Create Archivable PDF Files and more. [red]Note:[/red] Located in \%Program Files%\PDFtypewriter\Printer\</description>
<infourl>http://www.castlecops.com/startuplist-16944.html</infourl>
<list>http://www.castlecops.com/startuplist-16944.html</list>
</item>
<item>
<name>GAlert</name>
<status>U</status>
<command>GAlert.exe</command>
<description>Related to MassGrid_GAlert, http://www.massgrid.com/ an easy to use and high performance skinnable Google notifier supports Google News, multiple GMail accounts, label filters and automatic login. [red]Note:[/red] Located in \%Program Files%\</description>
<infourl>http://www.castlecops.com/startuplist-16943.html</infourl>
<list>http://www.castlecops.com/startuplist-16943.html</list>
</item>
<item>
<name>SpyZooka</name>
<status>U</status>
<command>SpyZookaLdr.exe</command>
<description>Related to SpyZooka, http://www.spyzooka.com/ Spyware Removal Tool. [red]Note:[/red] Located in \%Program Files%\SpyZooka\</description>
<infourl>http://www.castlecops.com/startuplist-16942.html</infourl>
<list>http://www.castlecops.com/startuplist-16942.html</list>
</item>
<item>
<name>Utility Tray</name>
<status>U</status>
<command>sistray.exe</command>
<description>Related to System_Tray, http://www.sis.com/ icon for SiS based graphics. [red]Note:[/red] Located in \%WINDIR%\System32\</description>
<infourl>http://www.castlecops.com/startuplist-16941.html</infourl>
<list>http://www.castlecops.com/startuplist-16941.html</list>
</item>
<item>
<name>Windows Shutdown Service Launcher</name>
<status>X</status>
<command>wssl.exe</command>
<description>Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16940.html</infourl>
<list>http://www.castlecops.com/startuplist-16940.html</list>
</item>
<item>
<name>MSN Starter</name>
<status>X</status>
<command>msnstarter.exe</command>
<description>Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16939.html</infourl>
<list>http://www.castlecops.com/startuplist-16939.html</list>
</item>
<item>
<name>MSN Applet</name>
<status>X</status>
<command>msnapplet.exe</command>
<description>Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16938.html</infourl>
<list>http://www.castlecops.com/startuplist-16938.html</list>
</item>
<item>
<name>File Mapping Services</name>
<status>X</status>
<command>hp-1003.exe</command>
<description>Added by a variant of the IRCBOT, http://www.symantec.com/security_response/writeup.jsp?docid=2002-070818-0630-99 [red]Note:[/red] Located in \%WINDIR%\System32\ [red]Note:[/red] Use SDFix under supervision.</description>
<infourl>http://www.castlecops.com/startuplist-16937.html</infourl>
<list>http://www.castlecops.com/startuplist-16937.html</list>
</item>
</channel>

</rdf:RDF>

