|
systray.exe (5.1.2600.0)
Contained in software |
|---|
| Name: | Windows XP Home Edition, Deutsch |
|---|
| License: | commercial |
|---|
| Information link: | http://www.microsoft.com/windowsxp/ |
|---|
File details |
|---|
| Filepath: | C:\WINDOWS\system32 \ systray.exe |
|---|
| Filedate: | 2002-08-29 14:00:00 |
|---|
| Version: | 5.1.2600.0 |
|---|
| Filesize: | 3.072 bytes |
|---|
Checksum and file hashes |
|---|
| CRC32: | 16148F07 |
|---|
| MD5: | E3B9 0147 1FAA AA0A E8E8 7E43 9A47 AB32 |
|---|
| SHA1: | FC85 B0F7 60C4 E867 AD2B 1C34 C408 B9A9 8BD9 F16A |
|---|
Version resource information |
|---|
| CompanyName: | Microsoft Corporation |
|---|
| FileDescription: | Systray .exe stub |
|---|
| FileOS: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
|---|
| FileType: | Application |
|---|
| FileVersion: | 5.1.2600.0 |
|---|
| InternalName: | systray |
|---|
| LegalCopyright: | © Microsoft Corporation. All rights reserved. |
|---|
| OriginalFilename: | systray.exe |
|---|
| ProductName: | Microsoft® Windows® Operating System |
|---|
| ProductVersion: | 5.1.2600.0 |
|---|
systray.exe was found in the following malware reports:
|
|
|---|
W32.Paukor.B@mm |
|---|
Technical details
...information from your computer: %Windows%Systray.exe %Windows%Msp.dll....
...It also adds the value Msp %Windows%SYSTRAY.EXE to the registry key...
...HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun so that Systray.exe is run each time that you start Windows....
...Functionality of dropped files Systray.exe This file is used to coordinate...
Removal instructions
...delete the following value: Msp %Windows%SYSTRAY.EXE Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.paukor.b@mm.html |
|---|
W32.Ghotex.A |
|---|
About W32.Ghotex.A
...W32.Ghotex.A is a virus that infects %System%Internat.exe and %System%Systray.exe. The virus is written in Microsoft...
Technical details
...FilesCommon FilesInternat.sys. Infects Internat.exe and Systray.exe. When the infected files are...
Removal instructions
...Run a full system scan and delete all the files detected as W32.Ghotex.A. Restore Systray.exe and Internat.exe. For specific details on each...
...FilesInternat.sys or from a clean backup. Restore Systray.exe from a clean backup. Write-up by:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.ghotex.a.html |
|---|
Backdoor.IRC.Aladinz.P |
|---|
Technical details
...as Backdoor.IRC.Aladinz.P) systray.exe (detected as Backdoor.IRC.Aladinz.P)...
..."Internat"="%System%SYSTEMCONFIG33systray.exe" "SystemTray"="SysTray.Exe"...
..."UninstallString"=""%System%SYSTEMCONFIG33systray.exe" -uninstall" in the registry key:...
Removal instructions
..."Internat"="%System%SYSTEMCONFIG33systray.exe" "SystemTray"="SysTray.Exe"...
..."UninstallString"=""%System%SYSTEMCONFIG33systray.exe" -uninstall" back to:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.p.html |
|---|
W32.HLLP.Systemp |
|---|
Technical details
...%System%Systempm.exe %Windir%Systray.exe %System%Sysddzg.dll...
...Adds the value: SysTray %Windir%SysTray.exe to the registry key:...
...On Windows 9x/Me systems, W32.HLLP.Systemp will also delete the registry value: SysTray under the registry key:...
Removal instructions
...Scroll through the list and look for Systray.exe. If you find the file, click...
...In the right pane, double-click the value, SysTray. Change the Value Data to SysTray.exe, and then click OK....
...In the right pane, delete the value, SysTray. Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.systemp.html |
|---|
W32.Petch |
|---|
Technical details
...C:WindowsSystem32Shutdown.exe C:WindowsSystem32Systray.exe C:WindowsSystem32Systray.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.petch.html |
|---|
Backdoor.IRC.Mutebot |
|---|
Technical details
...Copies itself to %System%Systray.exe, and then executes the file....
..."Systray driver" = "systray.exe" to the registry key:...
Removal instructions
..."Systray driver" = "systray.exe" Exit the Registry Editor....
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.mutebot.html |
|---|
Backdoor.Stanex |
|---|
Technical details
...Windows NT/2000/XP: %Windir%systemSysTray.exe. %Windir%TEMPCSRSS.exe...
...HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsNTCurrentVersionWindows Changes the SysTray.exe file to tasktray.exe when the infected computer is restarted....
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.stanex.html |
|---|
W32.Duksten.C@mm |
|---|
Technical details
...First, the worm copies itself to %system%SysTrayEx.exe. (This file name is very similar to the common Windows program Systray.exe)...
...SystemTrayExtended SysTrayEx.exe to the registry key...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.duksten.c@mm.html |
|---|
Backdoor.Beasty.H |
|---|
Technical details
...Explorer.exe Systray.exe Winlogon.exe...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.h.html |
|---|
|
|
![[filename.info logo]](/img/logo.png){kind=logo}
![[cn systray.exe]](/img/nix.gif){kind=small}
