%SysDir%\pnpsrv.exe |
| Name |
%SysDir%\pnpsrv.exe |
Description
|
Pnpsrv.exe is a worm W32.Spybot.UBH.
Pnpsrv.exe opens a back door on TCP port 5232.
Pnpsrv.exe spreads by using the vulnerability in Microsoft Windows Plug and Play Service (Microsoft Security Bulletin MS05-039).
Related files:
%System%\pnpsrv.exe
%System%\SVKP.sys
Adds the value:
"Windows PNP Server" = "pnpsrv.exe"
to the Windows startup registry keys.
More info: http://securityresponse.symantec.com/avc...
Removal:
Kill pnpsrv.exe process and remove pnpsrv.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer. |
|
|
|
|
Home
