|
services.exe (5.1.2600.0)
Bevat in software |
Naam: | Windows XP Home Edition, Deutsch |
Vergunning: | commercieel |
De verbinding van de informatie: | http://www.microsoft.com/windowsxp/ |
De details van het dossier |
De weg van het dossier: | C:\WINDOWS\system32 \ services.exe |
De datum van het dossier: | 2002-08-29 14:00:00 |
Versie: | 5.1.2600.0 |
De grootte van het dossier: | 101.888 bytes |
De knoeiboel van de controlesom en van het dossier |
CRC32: | 59F4EF56 |
MD5: | A87C 3A6B 407F B3B2 2C56 6315 607C E229 |
SHA1: | 9ECF 5BAC 16A2 F63E 0141 7565 E5CC D065 2845 4A2F |
Het middelinformatie van de versie |
Firmanaam: | Microsoft Corporation |
De beschrijving van het dossier: | Anwendung für Dienste und Controller |
Het werkende systeem van het dossier: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
Het type van dossier: | Application |
De versie van het dossier: | 5.1.2600.0 |
Interne naam: | services.exe |
Wettelijk auteursrecht: | © Microsoft Corporation. Alle Rechte vorbehalten. |
Originele filename: | services.exe |
De naam van het product: | Betriebssystem Microsoft® Windows® |
De versie van het product: | 5.1.2600.0 |
services.exe werd gevonden in de volgende rapporten:
|
Adware.Replace |
Technische details ...1.01.00.dll Services.exe When Adware.Replace is executed,... ...Creates the following files: %System%ServicesServices.exe 1.01.00.dll... ..."xpsystem"="%system%ServicesServices.exe" in the registry key:... ...in the [windows] section: run=%system%ServicesServices.exe load=%system%ServicesServices.exe... ...[windows] run=%system%ServicesServices.exe load=%system%ServicesServices.exe... De instructies van de verwijdering ..."xpsystem"="%system%ServicesServices.exe" Exit the Registry Editor.... ...look for a line similar to: run=%system%ServicesServices.exe load=%system%ServicesServices.exe... ...[windows] run=%system%ServicesServices.exe load=%system%ServicesServices.exe... Bron: http://securityresponse.symantec.com/avcenter/venc/data/adware.replace.html |
Adware.Clickbank |
Technische details ...File names: Services.exe When Adware.Clickbank is run,... ...Copies itself as %Windir%system32inetsrvServices.exe. Note: %Windir% is a variable.... ..."SuperBar.Component" = %windir%system32inetsrvservices.exe "AdRotator.Application"... ..."{357AA41A-B7A8-4632-A27D-5B980B25CF43}" = %windir%system32inetsrvservices.exe to the registry key:... De instructies van de verwijdering ..."SuperBar.Component" = %windir%system32inetsrvservices.exe "AdRotator.Application"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/adware.clickbank.html |
W32.HLLW.Kazping |
Technische details ...Copies itself as %Windir%Services.exe NOTE: %Windir% is a variable.... ...Adds the value: "Services.EXE"="%windir%services.exe"... ...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion RunServices Copies itself to the following... Aanbevelingen ...Turn off and remove unneeded services. By default, many operating... ...telnet, and a Web server. These services are avenues of attack. If they are removed, blended... ...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.... ...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services.... De instructies van de verwijdering ...the worm runs as>" "Services.EXE"="%windir%services.exe"... ...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion RunServices In the right pane, delete... ...the value: "Services.EXE"="%windir%services.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazping.html |
W32.Neveg.B@mm |
Technische details ...Copies itself as %Windir%systemservices.exe. Note: %Windir% is a variable... ...".Prog" = "%Windir%systemservices.exe" "BuildLab" = "%Windir%systemservices.exe"... ..."ccApps" = "%Windir%systemservices.exe" "FriendlyTypeName"... ..."Microsoft Visual SourceSafe" = "%Windir%systemservices.exe" "RegDone" = "%Windir%systemservices.exe"... ..."TEXTCONV" = "%Windir%systemservices.exe" "WMAudio" = "%Windir%systemservices.exe"... Aanbevelingen ...Turn off and remove unneeded services. By default, many operating... ...telnet, and a Web server. These services are avenues of attack. If they are removed, blended... ...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.... ...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services.... De instructies van de verwijdering ...".Prog" = "%Windir%systemservices.exe" "BuildLab" = "%Windir%systemservices.exe"... ..."ccApps" = "%Windir%systemservices.exe" "FriendlyTypeName"... ..."Microsoft Visual SourceSafe" = "%Windir%systemservices.exe" "RegDone" = "%Windir%systemservices.exe"... ..."TEXTCONV" = "%Windir%systemservices.exe" "WMAudio" = "%Windir%systemservices.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.b@mm.html |
W32.Neveg.C@mm |
Technische details ...Copies itself as %WinDir%systemservices.exe. Note: %Windir% is a variable... ...".Prog"="%Windir%systemservices.exe" "BuildLab"= "%Windir%systemservices.exe"... ..."ccApps"="%Windir%systemservices.exe" "FriendlyTypeName"="%Windir%systemservices.exe"... ..."Microsoft Visual SourceSafe"="%Windir%systemservices.exe" "RegDone"="%Windir%systemservices.exe"... ..."TEXTCONV"="%Windir%systemservices.exe" "WMAudio"="%Windir%systemservices.exe"... Aanbevelingen ...Turn off and remove unneeded services. By default, many operating... ...telnet, and a Web server. These services are avenues of attack. If they are removed, blended... ...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.... ...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services.... De instructies van de verwijdering ...".Prog"="%Windir%systemservices.exe" "BuildLab"= "%Windir%systemservices.exe"... ..."ccApps"="%Windir%systemservices.exe" "FriendlyTypeName"="%Windir%systemservices.exe"... ..."Microsoft Visual SourceSafe"="%Windir%systemservices.exe" "RegDone"="%Windir%systemservices.exe"... ..."TEXTCONV"="%Windir%systemservices.exe" "WMAudio"="%Windir%systemservices.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.c@mm.html |
W32.XTC.Worm |
De beoordeling van de bedreiging ...Name of attachment: Services.exe Size of attachment:... Aanbevelingen ...Turn off and remove unneeded services. By default, many operating... ...telnet, and a Web server. These services are avenues of attack. If they are removed, blended... ...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied.... ...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services.... De instructies van de verwijdering ... The Services.exe worm program runs as a service.... ...before you can delete it. To remove Services.exe from memory In the registry, search for... ...In the Windows (Windows 9x) or WINNT (Windows NT2000) directory, delete Services.exe. Note:... ...Be careful not to remove the file c:winntsystem32services.exe (a Windows NT system file.)... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.xtc.worm.html |
W32.Servese |
Technische details ...makes a copy of itself as: WindowsServices.exe It then adds the value... ...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesOnce It then exits.... De instructies van de verwijdering ...If the detected file is about 23 KB in size and the name is Services.exe, just you can delete this file.... ...... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.servese.html |
|
|