|
Malware -
Harmful EXE
|
server.exe is a common name. It is also the name of a process belonging to Novell's server suite. Any software could incorporate that name, therefore if you find a process of that name running on your computer it will be difficult to tell forthright whether it belongs to a legitimate software or not. This very familiarity if the name prompts virus writers to use it to create harmful files on your computer.
| Aliases: There are a number of viruses that create a filename of server.exe, see link
| Here are some of the places where the malicious server.exe could be located. C:\Documents and Settings\[UserName]\Application Data\bifrost\server.exe C:\Documents and Settings\[UserName]\Application Data\server.exe C:\Documents and Settings\server.exe C:\Program Files\ messenger\server.exe C:\Program Files\12313\server.exe C:\Program Files\bifroft\server.exe C:\Program Files\bifrost 1.2\server.exe C:\Program Files\bifrost\server.exe C:\Program Files\der konig\server.exe C:\Program Files\discreet\backburner2\server.exe C:\Program Files\driverss\server.exe C:\Program Files\frost\server.exe C:\Program Files\man\server.exe C:\Program Files\massenger live\server.exe C:\Program Files\messenger2\server.exe C:\Program Files\messengerplus\server.exe C:\Program Files\msn\server.exe C:\Program Files\mssn\server.exe C:\Program Files\ripway\server.exe C:\Program Files\sami\server.exe C:\Program Files\server.exe C:\Program Files\server\server.exe C:\Program Files\serveur.exe C:\Program Files\set32\server.exe C:\Program Files\sex\server.exe C:\Program Files\silentt\server.exe C:\Program Files\spy-net\server.exe C:\Program Files\system\server.exe C:\Program Files\system32\server.exe C:\Program Files\systeme\server.exe C:\Program Files\update\server.exe C:\Program Files\website\server.exe C:\Program Files\windoof\server.exe C:\Program Files\windows nt\server.exe C:\Program Files\windows\server.exe C:\Program Files\windowspps\server.exe C:\Windows\System32\9494\server.exe C:\Windows\System32\9529\server.exe C:\Windows\System32\9991\server.exe C:\Windows\System32\9995\server.exe C:\Windows\System32\9998\server.exe C:\Windows\System32\bazooka\server.exe C:\Windows\System32\bif123\server.exe C:\Windows\System32\bifrost\server.exe C:\Windows\System32\clrprv.oo\server.exe C:\Windows\System32\com\server.exe C:\Windows\System32\computer\server.exe C:\Windows\System32\computers\server.exe C:\Windows\System32\dark\server.exe C:\Windows\System32\drivers\server.exe C:\Windows\System32\fds\server.exe C:\Windows\System32\fgghfh\server.exe C:\Windows\System32\firefoxs\server.exe C:\Windows\System32\microsoft\server.exe C:\Windows\System32\msn1\server.exe C:\Windows\System32\new\server.exe
| reprinted with permission from threatexpert
|
|