strange entries on Service.msc

nordloewelabs

Senior member
Mar 18, 2005
542
0
0
sometimes, i find odd-looking entries on my Services.msc. they all follow the same pattern:

1) strange "un-Google-ble) names (eg: hfweuil, fhdsiuew, ejkdhdsk, etc.).
2) they are always set to "Disabled".
3) they have no "Description", "Path to executable" or "Dependencies".

today i spotted this odd entry: ".NTSRVCTK".

my machine is XP Home (original CD). i run it as a "Restricted/Limited User" with DEP "on" for all Progs and Services. i keep my free AntiVir updated and i always run a full system scan once a month. i also scan using SysClean and BitDefender (both updated) from a BartPE disc. i also keep my Windows XP updated. my browser is Firefox 3.0.1 with NoScript, AdBlock and FlashBlock. i also run Spybot and SuperAntiSpyware every month. neither the AV progs nor the AntiSpyware progs ever find anything.

i only log as Admin to perform updates for the apps listed above. i cant understand how those strange entries show up on my Services....(!) sometimes they appear on my Win2000 box too. same pattern....always strange names that dont appear in Google searches!

do you guys experience things like that too? it doesnt happen to me every month, but it happens 1-2x a year.... i find it odd.


thanks in advance.
 

SagaLore

Elite Member
Dec 18, 2001
24,036
21
81
Yea you probably do have a very low key trojan on your system.

Run HiJackThis, post the log, and we can analyze it for you.

Follow the instructions here, but you don't have to post there - post it here.