Re: Suspicious Running processes. Do I need them?

From: clapper (clopper@totalise.co.uk)
Date: 10/31/02 

From: clopper@totalise.co.uk (clapper)
Date: 31 Oct 2002 13:41:18 -0800

wssdtu starts the dsu which is an ftp server running on port 20 (on my
machine) - there is an ini file - you'll find it. i suggest you remove
it immediately. it allows full access to your entire drive. that said
it is password protected - however - i do not know which program
(kazaa?) put it there - but it is wrong.

the ftp program is good - but its definitely spyware as they have
configured it.

cheers

edit your registry run to stop it loading at startup.

"Rick" <Rick@EmbraceHisGrace.com> wrote in message news:<6c4501c2800e$823f5000$3bef2ecf@TKMSFTNGXA10>...
> Thanks, Jupiter, that was a great link to information on
> startup processes!!
>
> Rick www.EmbraceHisGrace.com
>
> >-----Original Message-----
> >Run Ad-Aware to check for spyware:
> >http://www.webattack.com/get/adaware.shtml
> >Look here to know what is running:
> >http://www.pacs-
> portal.co.uk/startup_pages/startup_full.htm
> >
> >--
> >Jupiter Jones
> >Please respond to newsgroup only.
> >Everyone can benefit from the message.
> >
> >
> >" - 781 -" <lets@have.org> wrote in message
> >news:u00$Fx9fCHA.2092@tkmsftngp12...
> >> Could someone please tell me which processes I need?
> >> I am thinking there is a spyware on my system, but
> don't know which
> file it
> >> could be. Perhaps someone out there might recognize
> the filename.
> >> Here is the list:
> >> Running processes:
> >>
> >> #:1 : smss.exe <<suspicious
> >> #:2 : winlogon.exe
> >> #:3 : services.exe <<suspicious
> >> #:4 : lsass.exe <<suspicious
> >> #:5 : svchost.exe #5 and #6 and #10 are
> same files?
> >> #:6 : svchost.exe
> >> #:7 : spoolsv.exe
> >> #:8 : atievxx.exe
> >> #:9 : mdm.exe
> >> #:10 : svchost.exe
> >> #:11 : nprotect.exe
> >> #:12 : navapsvc.exe
> >> #:13 : ccevtmgr.exe <<suspicious
> >> #:14 : explorer.exe
> >> #:15 : hplamp.exe
> >> #:16 : ccapp.exe <<suspicious
> >> #:17 : wssdtu.exe <<suspicious
> >> #:18 : wssdsu.exe <<suspicious
> >> #:19 : wsys.exe <<suspicious
> >> #:20 : ntvdm.exe
> >> #:21 : ntvdm.exe
> >> #:22 : ad-aware.exe
> >> #:23 : msmsgs.exe
> >>
> >> Thanks alot.
> >> G
> >
> >
> >.
> >