|
services.exe (5.1.2600.0)
Contenuto nel software |
|---|
| Nome: | Windows XP Home Edition, Deutsch |
|---|
| Autorizzazione: | commerciale |
|---|
| Collegamento delle informazioni: | http://www.microsoft.com/windowsxp/ |
|---|
Particolari della lima |
|---|
| Percorso della lima: | C:\WINDOWS\system32 \ services.exe |
|---|
| Data della lima: | 2002-08-29 14:00:00 |
|---|
| Versione: | 5.1.2600.0 |
|---|
| Formato di lima: | 101.888 byte |
|---|
Il totale di controllo e la lima hashes |
|---|
| CRC32: | 59F4EF56 |
|---|
| MD5: | A87C 3A6B 407F B3B2 2C56 6315 607C E229 |
|---|
| SHA1: | 9ECF 5BAC 16A2 F63E 0141 7565 E5CC D065 2845 4A2F |
|---|
Le informazioni delle risorse di versione |
|---|
| Nome di azienda: | Microsoft Corporation |
|---|
| Descrizione della lima: | Anwendung für Dienste und Controller |
|---|
| Sistema operativo della lima: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| Tipo della lima: | Application |
|---|
| Versione della lima: | 5.1.2600.0 |
|---|
| Nome interno: | services.exe |
|---|
| Copyright legale: | © Microsoft Corporation. Alle Rechte vorbehalten. |
|---|
| Nome di schedario originale: | services.exe |
|---|
| Nome del prodotto: | Betriebssystem Microsoft® Windows® |
|---|
| Versione del prodotto: | 5.1.2600.0 |
|---|
services.exe è stato trovato nei seguenti rapporti:
|
|
|---|
Adware.Replace |
|---|
Particolari tecnici
...1.01.00.dll Services.exe When Adware.Replace is executed,...
...Creates the following files: %System%ServicesServices.exe 1.01.00.dll...
..."xpsystem"="%system%ServicesServices.exe" in the registry key:...
...in the [windows] section: run=%system%ServicesServices.exe load=%system%ServicesServices.exe...
...[windows] run=%system%ServicesServices.exe load=%system%ServicesServices.exe...
Istruzioni di rimozione
..."xpsystem"="%system%ServicesServices.exe" Exit the Registry Editor....
...look for a line similar to: run=%system%ServicesServices.exe load=%system%ServicesServices.exe...
...[windows] run=%system%ServicesServices.exe load=%system%ServicesServices.exe...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/adware.replace.html |
|---|
Adware.Clickbank |
|---|
Particolari tecnici
...File names: Services.exe When Adware.Clickbank is run,...
...Copies itself as %Windir%system32inetsrvServices.exe. Note: %Windir% is a variable....
..."SuperBar.Component" = %windir%system32inetsrvservices.exe "AdRotator.Application"...
..."{357AA41A-B7A8-4632-A27D-5B980B25CF43}" = %windir%system32inetsrvservices.exe to the registry key:...
Istruzioni di rimozione
..."SuperBar.Component" = %windir%system32inetsrvservices.exe "AdRotator.Application"...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/adware.clickbank.html |
|---|
W32.HLLW.Kazping |
|---|
Particolari tecnici
...Copies itself as %Windir%Services.exe NOTE: %Windir% is a variable....
...Adds the value: "Services.EXE"="%windir%services.exe"...
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion RunServices Copies itself to the following...
Raccomandazioni
...Turn off and remove unneeded services. By default, many operating...
...telnet, and a Web server. These services are avenues of attack. If they are removed, blended...
...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied....
...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services....
Istruzioni di rimozione
...the worm runs as>" "Services.EXE"="%windir%services.exe"...
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion RunServices In the right pane, delete...
...the value: "Services.EXE"="%windir%services.exe"...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazping.html |
|---|
W32.Neveg.B@mm |
|---|
Particolari tecnici
...Copies itself as %Windir%systemservices.exe. Note: %Windir% is a variable...
...".Prog" = "%Windir%systemservices.exe" "BuildLab" = "%Windir%systemservices.exe"...
..."ccApps" = "%Windir%systemservices.exe" "FriendlyTypeName"...
..."Microsoft Visual SourceSafe" = "%Windir%systemservices.exe" "RegDone" = "%Windir%systemservices.exe"...
..."TEXTCONV" = "%Windir%systemservices.exe" "WMAudio" = "%Windir%systemservices.exe"...
Raccomandazioni
...Turn off and remove unneeded services. By default, many operating...
...telnet, and a Web server. These services are avenues of attack. If they are removed, blended...
...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied....
...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services....
Istruzioni di rimozione
...".Prog" = "%Windir%systemservices.exe" "BuildLab" = "%Windir%systemservices.exe"...
..."ccApps" = "%Windir%systemservices.exe" "FriendlyTypeName"...
..."Microsoft Visual SourceSafe" = "%Windir%systemservices.exe" "RegDone" = "%Windir%systemservices.exe"...
..."TEXTCONV" = "%Windir%systemservices.exe" "WMAudio" = "%Windir%systemservices.exe"...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.b@mm.html |
|---|
W32.Neveg.C@mm |
|---|
Particolari tecnici
...Copies itself as %WinDir%systemservices.exe. Note: %Windir% is a variable...
...".Prog"="%Windir%systemservices.exe" "BuildLab"= "%Windir%systemservices.exe"...
..."ccApps"="%Windir%systemservices.exe" "FriendlyTypeName"="%Windir%systemservices.exe"...
..."Microsoft Visual SourceSafe"="%Windir%systemservices.exe" "RegDone"="%Windir%systemservices.exe"...
..."TEXTCONV"="%Windir%systemservices.exe" "WMAudio"="%Windir%systemservices.exe"...
Raccomandazioni
...Turn off and remove unneeded services. By default, many operating...
...telnet, and a Web server. These services are avenues of attack. If they are removed, blended...
...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied....
...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services....
Istruzioni di rimozione
...".Prog"="%Windir%systemservices.exe" "BuildLab"= "%Windir%systemservices.exe"...
..."ccApps"="%Windir%systemservices.exe" "FriendlyTypeName"="%Windir%systemservices.exe"...
..."Microsoft Visual SourceSafe"="%Windir%systemservices.exe" "RegDone"="%Windir%systemservices.exe"...
..."TEXTCONV"="%Windir%systemservices.exe" "WMAudio"="%Windir%systemservices.exe"...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.c@mm.html |
|---|
W32.XTC.Worm |
|---|
Valutazione di minaccia
...Name of attachment: Services.exe Size of attachment:...
Raccomandazioni
...Turn off and remove unneeded services. By default, many operating...
...telnet, and a Web server. These services are avenues of attack. If they are removed, blended...
...If a blended threat exploits one or more network services, disable, or block access to, those services until a patch is applied....
...Always keep your patch levels up-to-date, especially on computers that host public services and are accessible through the firewall, such as HTTP, FTP, mail, and DNS services....
Istruzioni di rimozione
... The Services.exe worm program runs as a service....
...before you can delete it. To remove Services.exe from memory In the registry, search for...
...In the Windows (Windows 9x) or WINNT (Windows NT2000) directory, delete Services.exe. Note:...
...Be careful not to remove the file c:winntsystem32services.exe (a Windows NT system file.)...
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/w32.xtc.worm.html |
|---|
W32.Servese |
|---|
Particolari tecnici
...makes a copy of itself as: WindowsServices.exe It then adds the value...
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesOnce It then exits....
Istruzioni di rimozione
...If the detected file is about 23 KB in size and the name is Services.exe, just you can delete this file....
......
Fonte: http://securityresponse.symantec.com/avcenter/venc/data/w32.servese.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn services.exe]](/img/nix.gif){kind=small}
