F1Tray.exe (FusionOne’s MightyPhone,Wireless Synchronization Service for Mobile Phones)

Company:FusionOne

Default path:
C:\PROGRA~1\FUSION~1\f1Tray.exe

Added by the W32/SDBOT-WD WORM.

It will set the following registry entries(Key:Compaq Drivers,Value:F1rewalls.exe):
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

File of SDBOT WORM, delete it ASAP.

It will create item in registry :
"Mozilla Firefox"="F1REF0X.EXE" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run".
"Mozilla Firefox"="F1REF0X.EXE" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices".

Default path:
C:\WINDOWS\system32\F1REF0X.EXE

Part of virus, download beird.exe,lmhosts.exe,wshield.exe,PSEXESVC.EXE to your computer.

Delete all these files, and relate items in:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

A virtual puppy jumping around on your desktop


Default path:

C:\Program Files\Your Cottonelle Puppy\Your Cottonelle Puppy.exe

freddy50.exe is part of virus.
Freddy50.exe will add itself to Registry, and run at windows start up.

Default path:
c:/windows/freddy50.exe

Size:
34KB

It's part of computer game.

It's safe.

File extensions exe : The EXE executable (program) file
An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).
You may be see in my task manager processes that you have more than one firefox.exe.
It sometimes trying to connect to fxfeeds.mozilla.org:
Firefox (firefox.exe) is trying to connect to fxfeeds.mozilla.org
[IP] using remote port 89 (HTTP - World Wide Web).

What is firefox.exe?

Mozilla Firefox is a free and open source web browser descended from the Mozilla Application Suite and managed by Mozilla Corporation.

The following malware is known to disguise itself as firefox.exe:

Troj/Rbot-ATP (%SystemRoot%System32)
This is a Trojan horse that is known to spread by exploiting network vulnerabilities, including the RPC DCOM flaw in Windows XP.
W32/Banker-EBO (%SystemRoot%System32)
This is a Trojan horse that periodically attempts to download executable code from a remote URL.
W32/Tilebot-DN (%SystemRoot%)
This is a Trojan horse that is known to spread by exploiting network vulnerabilities, including the RPC DCOM flaw in Windows XP. It runs an IRC server to allow a remote attacker to take control over an infected system.

Product name: Firefox

Description:Firefox

Manufacturer:Mozilla Corporation


Common error:
A unhandled win32 exception occured in firefox.exe[3052], Just-In-Time debugging this exception failed with the following error: No installed debugger has Just-In-Time debugging enabled. In Visual Studio debugging can be enabled from Tools/Options/Debugging/Just-In-Time.
Check the documentation index for ‘Just-in-time debugging, errors’ for more information

fssm32 - F-Secure Corp. fssm32 - F-Secure Corp.
File extensions exe : The EXE executable (program) file An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).


Product name:  F-Secure Corp. fssm32
Description:  fssm32
Manufacturer:  F-Secure Corp.

FIXMAPI 1.0 MAPI Repair Tool - Microsoft® Windows® Operating System - Microsoft Corporation
File extensions exe : The EXE executable (program) file An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).


Product name:  Microsoft® Windows® Operating System
Description:  FIXMAPI 1.0 MAPI Repair Tool
Manufacturer:  Microsoft Corporation