Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

HijackThis automated log analyzer! Submit a log and you will receive ALL the information we have in our DB's on everything on your system INSTANTLY!

syslogin.exe


Click here to scan for syslogin.exe Related Errors and Optimize PC performance

syslogin.exe
What is it?
syslogin.exe is a file associated with the W32.Bagz@mm worm.

What does it do?
W32.Bagz@mm is a mass-mailing worm that uses its own SMTP engine to send itself to email addresses gathered from the infected computer.

When W32.Bagz@mm is executed, it does the following:
  1. Creates the following copy of itself:

    %System% utorial.doc <spaces> .exe

    Note: %System% is a variable that refers to the System folder. By default this is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32 (Windows NT/2000), or C:WindowsSystem32 (Windows XP).
  2. Adds the value:

    "syslogin.exe" = "syslogin.exe"

    to the registry key:

    HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

    so that the worm is executed every time Windows starts.
  3. Creates the following files:
    • %System%dl.exe
    • %System%syslogin.exe
  4. Disables the Windows firewall.
  5. Downloads and executes remote files.
  6. Installs its own network driver to bypass local firewalls.
Removal
@symantec

Fix syslogin.exe Errors: Free Scan

Recommended: Free PC Speed Test - what is slowing down your PC?


syslogin.exe is Spyware!

Startup DB Entries:
[syslogin.exe]"Added by the BAGZ-B WORM!" b

Service DB Entries:
Nothing Found

Disclaimer

Every attempt has been made to ensure the information about syslogin.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments
Security Risks - Adware Spyware
sndconfg16.exe | salm.exe | isass.exe | se.dll | kazza.exe | backweb-7288971.exe | bridge.dll | wtoolsa.exe | tkbellexe.exe | dl.exe | newdot~1.dll | wupdt.exe | mwsoemon.exe | saie.exe | webrebates0.exe | bxxs5.dll | funny.exe | 180ax.exe | randreco.exe | mssearchnet.exe | service.exe | webrebates1.exe | saap.exe | sais.exe | wsup.exe | backweb-137903.exe | sed.exe | alcmtr.exe | wo.exe | ffisearch.exe | optimize.exe | iadhide4.dll | backweb-8876480.exe | cdaengine0400.dll | istsvc.exe | newdotnet6_38.dll | Fvprotect.exe | Winupdate.exe | java.exe | cmesys.exe |