PYCTYSSKE service ??



This service was running on Windows XP Professional. I was shocked when I
noticed it in the Computer Management mmc snap-in. The executable was found
in C:\Documents and Settings\LOCALS~\Temp.. The application that I found was
Root Kit Revealer from Sysinternals renamed as PYCTYSSKE.exe. The CA
certificate showed that the object did not have a valid digital signature.
Valid from 4-4-06 to 10-4-07
! Key Usage Digital Signature non-Repudiation (c0)
! Basic Constraints Subject type =CA, PathLength.....
I use an account that belongs to the users group and very rarely log on as
Administrator. The application was installed on an account with Administrator
rights. I found a log file that it made in the Temp folder as well.
Google fails to query a result and I am without an explanation.
Any clue??

.



Relevant Pages

  • Re: PYCTYSSKE service ??
    ... The certificate used to sign the application has expired, and did not appear to use a timestamp. ... I use an account that belongs to the users group and very rarely log on as ... The application was installed on an account with Administrator ...
    (microsoft.public.security)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... one referencing the original administrator account: ... specific policy setting that was flagged with a big, ... I used an incorrect procedure to rename the ...
    (microsoft.public.windows.server.general)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... Did you check the Group Policies for references to the Administrator ... Administrator account? ... what policy do you have? ... referencing the former administrator account. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... Did I check Group Policies for references to the Administrator account? ... enabling the Rename Administrator account policy in Group Policy. ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)