Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| Patch | patch.exe | Added by the W32/NetBus TROJAN! | X |
| Telechips,Mass | patch.exe | Removable Disk Driver for the Muro MP3 player | U |
O23 List Results
Windows Services
Windows Services
| Name | Filename | Description | Status |
| Autodesk Data Management Job Dispatch | Connectivity.WindowsService.JobDisp atch.exe | Related to Autodesk_Data_Management Web Server. Note: Located in C:\Program Files\Autodesk\Data Management Server 5\Server\Dispatch\ | L |
| ISS Buffer Overflow Exploit Prevention (VPatch) | vpatch.exe | Related to BlackICE (Internet Security Systems) Note: Located in \%Program Files%\BlackIce\ | L |
| winconfig.exe | SP2PATCH.EXE | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. | X |
| MlPatch | MlPatch.exe | Related to Magic Control Technology Corp. MCT Custom Service. Note: Located in \%Windir%\%System%\ | L |
Drivers List Results
Driver Entry
Driver Entry
| Name | Filename | Description | Status |
| vaccinepc Update Service | updatepatch.exe | Korean rogue hailing from vaccinepc.co.kr and identified by Microsoft as "Rogue:Win32/Onescan" | X |
FF Extensions List Results
Firefox Extension
Firefox Extension
| CLSID | Name | Filename | Description | Status |
| sw-patch--sonic-world-ru@jetpack | SW patch | sw-patch--sonic-world-ru@jetpack.xpi | SW patch adds some extra functions in the sonic-world.ru website. | L |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {0FAD3184-5012-4D27-5BBC-22850469D194} | (no name) | patch.exe | Infostealer trojan, detected by Microsoft as Virtool:Win32/Vbinder.Ar - also see here | X |