# $Id$ - $Revision$ # # Openpath OFFENDERS list # ******************************************************************************** Long Name: Check Point SSL Network Extender Short Name: cpextender Path: C:\Program Files\CheckPoint\SSL Network Extender\slimsvc.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: Juniper Network Connect Service Short Name: dsNcService Path: C:\Program Files\Juniper Networks\Common Files\dsNcService.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: iPodService Short Name: iPodService Path: C:\Program Files\iPod\bin\iPodService.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: Multi-user Cleanup Service Short Name: Multi-user Cleanup Service Path: C:\Program Files\lotus\notes\ntmulti.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: NetTime Short Name: NetTimeSvc Path: C:\Program Files\NetTime\NeTmSvNT.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: SVNService Short Name: SVNService Path: C:\Program Files\Subversion\bin\SvnService.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: AntDS Short Name: AntDS Path: C:\Program Files\BigAntSoft\AntServer\AntDS.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: AntServer Short Name: AntServer Path: C:\Program Files\BigAntSoft\AntServer\AntServer.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: ASUS DPC Proxy Short Name: asusdpc Path: C:\Program Files\ASUS\ASUS Remote Console\DpcProxy.exe /o File: read-only Runs As: LocalSystem ******************************************************************************** Long Name: AvServer Short Name: AvServer Path: C:\Program Files\BigAntSoft\AntServer\AvServer.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: DMS POP3 Service Short Name: dmsP3Service Path: C:\Program Files\DMS POP3 Server\dmsP3Srv.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: TABS MailCarrier 2.5 Short Name: tabsmc20 Path: C:\Program Files\Tabs\MailCarrier\2.0\MailHost.exe File: READ-WRITE Runs As: .\admin ******************************************************************************** Long Name: Tb2 Launch Short Name: Tb2Launch Path: C:\Program Files\Timbuktu Pro\tb2launch.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: VMware Tools Service Short Name: VMTools Path: C:\Program Files\VMware\VMware Tools\VMwareService.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: LC Remote Agent Short Name: LcAgent Path: C:\Program Files\@stake\LC5\lcagent.exe File: READ-WRITE Runs As: LocalSystem ******************************************************************************** Long Name: Kiwi Syslog Daemon Short Name: Kiwi Syslog Daemon Path: c:\program files\syslogd\syslogd_service.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: McAfee Framework Service Short Name: McAfeeFramework Path: C:\Program Files\Network Associates\Common Framework\FrameworkService.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: MSSQLServerADHelper Short Name: MSSQLServerADHelper Path: C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe File: READ-WRITE <---------------------------------- !!! Runs As: LocalSystem ******************************************************************************** Long Name: Bluetooth Service Short Name: btwdins Path: C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe File: READ-WRITE <---------------------------------- !!! Runs As: LocalSystem ******************************************************************************** Long Name: Intel(R) PROSet/Wireless Event Log Short Name: EvtEng Path: C:\Program Files\Intel\Wireless\Bin\EvtEng.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: NMSAccessU Short Name: NMSAccessU Path: C:\Program Files\CDBurnerXP\NMSAccessU.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: PRTG Service Short Name: PRTGService Path: C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: PRTG Watchdog Short Name: prtgwatchservice Path: C:\Program Files\PRTG Traffic Grapher\watchdog\prtgwatchdog.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Intel(R) PROSet/Wireless Registry Service Short Name: RegSrvc Path: C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Intel(R) PROSet/Wireless Service Short Name: S24EventMonitor Path: C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: VAIO Event Service Short Name: VAIO Event Service Path: C:\Program Files\Sony\VAIO Event Service\VESMgr.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: BES Client Short Name: BESClient Path: C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Cygwin cron Short Name: cygwin_cron Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Digipass Authentication Server Short Name: Digipass Authentication Server Path: C:\Program Files\VASCO\VACMAN Middleware 3\Bin\dpauthserver.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: MGE Network Shutdown Module - Acquisition engine Short Name: MGE Network Shutdown Module - Acquisition engine Path: C:\Program Files\MGE\NetworkShutdownModule\bin\dae\mgeDAE.exe File: File does not exist? Runs As: LocalSystem ******************************************************************************** Long Name: MGE Network Shutdown Module - Web server Short Name: MGE Network Shutdown Module - Web server Path: C:\Program Files\MGE\NetworkShutdownModule\bin\webserver\bin\Pi3Srv32.exe File: File does not exist? Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_admin Short Name: Tumbleweed_admin Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_as2d Short Name: Tumbleweed_as2d Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_database Short Name: Tumbleweed_database Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_ftpd Short Name: Tumbleweed_ftpd Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_httpd Short Name: Tumbleweed_httpd Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_sshd Short Name: Tumbleweed_sshd Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Tumbleweed_TM Short Name: Tumbleweed_TM Path: C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin\cygrunsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: SpySer Short Name: SpySer Path: C:\Program Files\American Megatrends, Inc\MegaRAID IDE\spyser.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: MSSQLSERVER Short Name: MSSQLSERVER Path: C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe File: READ-WRITE <---------------------------------- !!! Runs As: LocalSystem ******************************************************************************** Long Name: Novell Application Launcher Short Name: NALNTSERVICE Path: C:\Program Files\Novell\ZENworks\nalntsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Workstation Manager Short Name: ZFDWM Path: C:\Program Files\Novell\ZENworks\wm.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Altiris Agent Short Name: AeXNSClient Path: C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: HP WMI Storage Providers Short Name: HPWMISTOR Path: C:\Program Files\HPWBEM\Storage\Service\HPWMISTOR.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: UPS - APC PowerChute plus Short Name: UPS Path: C:\Program Files\Pwrchute\ups.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: ARCserve Discovery Service Short Name: ASDiscoverySvc Path: C:\Program Files\ComputerAssociates\ARCserveITDS\asdscsvc.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Client Agent for ARCserve Short Name: Client Agent for ARCserve Path: C:\Program Files\ComputerAssociates\NTAgent\Ntagent.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: McAfee Framework Service Short Name: McAfeeFramework Path: C:\Program Files\Network Associates\Common Framework\FrameworkSe rvice.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Symantec AntiVirus Scan Engine Short Name: SYMCScan Path: D:\Program Files\Symantec\Scan Engine\symcscan.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Kiwi Syslog Daemon Short Name: Kiwi Syslog Daemon Path: c:\program files\syslogd\syslogd_service.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: ProTrackAppServer Short Name: ProTrackAppServer Path: C:\Program Files\ProTrack\ProTrackAppServer.exe File: File does not exist? Runs As: LocalSystem ******************************************************************************** Long Name: PRTG Service - Paessler Router Traffic Grapher Short Name: PRTGService Path: C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: McAfee Rogue System Sensor Short Name: RSSensor Path: C:\Program Files\McAfee\Rogue System Sensor\RSSensor.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: SQLSERVERAGENT Short Name: SQLSERVERAGENT Path: C:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Transoft Solutions License Server V1.6 Short Name: Transoft Solutions License Server V1.6 Path: C:\Program Files\Transoft Solutions\License Server\TransoftLS.ex e File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Novell Application Launcher Short Name: NALNTSERVICE Path: M:\Program Files\Novell\ZENworks\nalntsrv.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: Reflection TimeSync Short Name: Reflection TimeSync Path: N:\Program Files\Reflection\rtsserv.exe File: File does not exist? Runs As: LocalSystem ******************************************************************************** Long Name: Workstation Manager Short Name: ZFDWM Path: M:\Program Files\Novell\ZENworks\wm.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: RwsRsu Short Name: rwsrsu Path: C:\Program Files\WatchGuard\Mobile VPN\rwsrsu.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: NcpSec Short Name: NcpSec Path: C:\Program Files\WatchGuard\Mobile VPN\ncpsec.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: ncpclcfg Short Name: ncpclcfg Path: C:\Program Files\WatchGuard\Mobile VPN\ncpclcfg.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: ncprwsnt Short Name: ncprwsnt Path: C:\Program Files\WatchGuard\Mobile VPN\ncprwsnt.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem ******************************************************************************** Long Name: FileZilla Server FTP server Short Name: FileZilla Server Path: C:\Program Files\FileZilla Server\FileZilla Server.exe File: Read-only or currently in use (e.g. the executable is running)! Runs As: LocalSystem WARNING - PATH IS NOT SYSTEMROOT! C:\Program Files\HP\NCU E:\oracle\ORA10_Client\bin E:\oracle\ORA10\bin E:\oracle\ora92\bin C:\Program Files\Oracle\jre\1.3.1\bin C:\Program Files\Oracle\jre\1.1.8\bin C:\Program Files\HP\NCU C:\Program Files\VASCO\VACMAN Middleware 3\Bin C:\Program Files\Tumbleweed\SecureTransport\STServer\bin C:\Program Files\Tumbleweed\SecureTransport\cygwin\bin c:\ruby\bin C:\Perl\site\bin C:\Perl\bin C:\Program Files\PHP\