[Win2K] Unknown service

[Mournblade]

Just gone into my services to turn off FAH and any IIS/SQL services for a spot of before/after benchmarking when I saw a service called lb16_mtuw. It has no description, it is stopped and has no dependents. I've google'd and searched the forums and noone has every posted stuff on it before.

Have I been infected by spyware/virii (unlikely - NAV and I use FF)? Any ideas?

 

[pigster]

Couple of thoughts-

Download Process explorer from http://www.sysinternals.com/ and find out what program launched the process.

Download an antispyware program (counterspy, MS antispyware, spy sweeper, etc) and run that. Just running firefox does NOT guarantee that you will be protected against spyware.

 

[ksar123]

You need to find out what program the service is launching. Do this:

1.) Double click on the service and get the "Service name". It may be the same as the display name but it is usually different.

2.) Run regedit.exe from the run menu.

3.) Browse to HKEY_LOCAL_MACHINE-->SYSTEM-->CurrentControlSet-->Services-->%SERVICENAME%

4.) Look for the property name ImagePath. That is the program that the service is launching.

 

[Mournblade]

Download Process explorer from http://www.sysinternals.com/ and find out what program launched the process.

It's not actually running and don't quite trust it. If it was a nice process then it would have a description and stuff. It doesn't even have a path to executable listed.

Download an antispyware program

I already have S&D running twice a week automatically. Forgot to mention it.

Look for the property name ImagePath.

There isn't a ImagePath property on the object. However it appears to be of the group "SCSI miniport".

It's not running and I don't particularly want it to run. I think I will risk it and delete it.