« previous next »
Pages: [1]   Go Down
Share this topic on AskShare this topic on Del.icio.usShare this topic on DiggShare this topic on FacebookShare this topic on GoogleShare this topic on LiveShare this topic on MagnoliaShare this topic on MySpaceShare this topic on RedditShare this topic on SlashdotShare this topic on StumbleUponShare this topic on TechnoratiShare this topic on TwitterShare this topic on YahooShare this topic on Google buzz

Author Topic: strange entries in services.msc  (Read 590 times)

0 Members and 1 Guest are viewing this topic.

Offline mg-42

  • New Member
  • *
  • Posts: 2
strange entries in services.msc
« on: May 20, 2009, 06:26:00 PM »
My thinkpad t61 with vista sp1, creates strange entries in services.msc since i bought it.

There are some examples bellow listed.

2009/5/20, Hdaoteaue created.

2009/5/5, Sym_996 created.

2009/4/8, Exfatrsnt created.

2009/3/31, Viarvmtsmtl created.

2009/3/30, Gys55clpp created.

2009/3/19, Hdaknempfrn created.

2009/3/6, .netvewi created.

...

All the strange services are DISABLE by default.

All drivers and windows updates are up-to-date.

NO spyware, virus or trojan are beeing found.

My softwares installed are normally, NO illegal sofz.

I delete the entries in regeit, located HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\, but about two weeks later then, the STRANGE service will create again. :-[
Logged

Offline mg-42

  • New Member
  • *
  • Posts: 2
strange entries in services.msc
« Reply #1 on: August 17, 2009, 10:36:30 PM »
is there any idea to solve this issue, everyone?
Logged

Offline couttsj

  • Hero Member
  • *****
  • Posts: 528
strange entries in services.msc
« Reply #2 on: August 18, 2009, 07:58:30 AM »
Quote from: mg-42 on May 20, 2009, 06:26:00 PM
My thinkpad t61 with vista sp1, creates strange entries in services.msc since i bought it.

There are some examples bellow listed.
2009/5/20, Hdaoteaue created.
2009/5/5, Sym_996 created.
2009/4/8, Exfatrsnt created.
2009/3/31, Viarvmtsmtl created.
2009/3/30, Gys55clpp created.
2009/3/19, Hdaknempfrn created.
2009/3/6, .netvewi created.
...
All the strange services are DISABLE by default.
All drivers and windows updates are up-to-date.
NO spyware, virus or trojan are beeing found.
My softwares installed are normally, NO illegal sofz.
I delete the entries in regeit, located HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\, but about two weeks later then, the STRANGE service will create again. :-[
Some specialized malware can reload themselves using random file names and service names. What you need to find out is the filename and path. Before you delete the entry from the registry, examine the entry. The "ImagePath" will identify the executable that is used to load the file. If it is a container file such as "svchost.exe", you will have to look further. Open up the "Parameters" key and find the "ServiceDll" key. That should display the library file and location.

J.A. Coutts
Logged

Offline WildcatDan

  • Full Member
  • ***
  • Posts: 103
Re: strange entries in services.msc
« Reply #3 on: August 18, 2009, 01:19:32 PM »
I can't speak for the legitimacy of any of those entries.  I get concerned when I see entries that look like random letters thrown together.  What are you using to scan for malware?
Logged
Pages: [1]   Go Up
« previous next »