Service running, but ?

PSOL v206

Definately running



But HJT log states this ?

O23 - Service: CSIScanner - Unknown owner - C:\Program Files\RANDOM\RANDOM.exe" /service (file missing)

I've substituted the actual randomised name with RANDOM

Any ideas why it shows (file missing) when it isn't ?

TIA

 

I'm not sure, but couldn't it have to do with the self-protection and Prevx having a randomized .exe name to prevent malware from shutting it down?

 

I suspect this could be because of the parameter /service at the end of the filename. It's possible that they aren't parsing out the parameters properly but if the file does indeed exist, then I wouldn't be too concerned

 

@ PrevxHelp

I wasn't overly concerned, just curious as to why.

Thanks for your explanation