DisplayName : SATA bus driver.
Parts of spyware TR_Spy_Haxspy_AP.

Default path:
C:\WINDOWS\system32\satau325.sys
C:\Windows\System32\satau320.dll

Registry items:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\satau325
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\satau325
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\satau320
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\satau325
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SATAU325
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SATAU325
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SATAU325

Spacemonger.exe track of files and folders on your hardisk, it is also show file/folder information like the filename, the icon, the date, size, and attributes.

If the "Windows" box takes up 90% of the screen, the "C:\Windows" folder and all its sub-folders and files are taking up 90% of your "C:" drive.

It's part of virus,remove it asap.

It'll create
c:\windows\system32\comsa32.sys
c:\windows\system32\urlmon.dll to c:\docume~1\user\locals~1\temp\mta25631.dll
Also need to be remove.

It may rename itself as:
84272873.EXE
07568889.EXE
08217691.EXE
33879434.EXE
12559331.DAT
15466923.SVD
62566532.EXE
SOPIDLKC.EXE
97535612.EXE
SOXPECA.EXE
58143154.SVD
58649309.EXE
76948094.EXE

Default Path:
C:\Program Files\iolo\System Mechanic 6\SMSystemAnalyzer.exe

It's part of iolo System Mechanic software.

Veo Velocity Connect

Part of the Veo Velocity Connect USB 2.0 web camer.

Path:
C:\WINDOWS\crescentec\stim11.exe

All files :
cres1100.exe -- [192.0 KB -- 7 Jun 2004]
csaud.sys -- [11.0 KB -- 7 Jun 2004]
CsAudGB.inf -- [1.7 KB -- 7 Jun 2004]
CsCamd20.sys -- [42.6 KB -- 7 Jun 2004]
CsCamd98.sys -- [39.7 KB -- 7 Jun 2004]
DC1100GB.inf -- [8.5 KB -- 7 Jun 2004]
DC1100GB_2K.inf -- [8.9 KB -- 7 Jun 2004]
dibapi32.dll -- [99.7 KB -- 7 Jun 2004]
GABPipe.sys -- [4.1 MB -- 7 Jun 2004]
GABProp.ax -- [49.2 KB -- 7 Jun 2004]
GABscan.sys -- [5.6 KB -- 7 Jun 2004]
GABtw.ds -- [49.2 KB -- 7 Jun 2004]
gabusd.dll -- [17.8 KB -- 7 Jun 2004]
GABvfw.dll -- [73.7 KB -- 7 Jun 2004]
GMini20.sys -- [73.7 KB -- 7 Jun 2004]
GMini98.sys -- [74.0 KB -- 7 Jun 2004]
Preview.dll -- [36.4 KB -- 7 Jun 2004]
stim11.exe -- [147.5 KB -- 7 Jun 2004]

180ax.exe
Part of TROJ.ISTZONE.H, spyware downloader

a.exe
Part of spyware W32.Ahlem.A@mm

actalert.exe
part of adwares

alevir.exe
Part of spyware

aqadcup.exe
Part of Backdoor.Agent.bg

archive.exe
Change ie's setting

arr.exe arr.exe
Spyware

ARUpdate.exe
Part of spyware Adroar

File extensions exe : The EXE executable (program) file

An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).

What's svchost.exe?

Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services allows for better control and easier debugging.

Default location:
%SystemRoot%\System32


Product name: Microsoft® Windows® Operating System

Description: Generic Host Process for Win32 Services

Manufacturer: Microsoft Corporation

Common errors:

1. Svchost.exe Application Error.The Instructionat 0×745f2780 , refrenceced 0×00000000 .The Memory Could Not Be Read.
Svchost.exe Application Error. The instruction at"0x7c918fea" refferenced memory at "0x00000010". The memory could not be "written".
Solution:
Go to Control Panel >Administrative Tools>Services, disable the service Windows Driver Foundation - User-mode Driver Framework. And turning off the windows automatic update.

2. The instruction at "0x009a96bc" referenced memory at "0x0000000". The memory could not be "written".
Solution:
Go to Start > run, input "sfc /scannow", run this tool to fix this error.

File extensions exe : The EXE executable (program) file

An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).


What is spoolsv.exe?

Spoolsv.exe ispart of Windows Print Spooler service, for manage spooled print jobs and handle the print queue.


It is common for virus writers and spyware vendors to disguise their malware as the genuine one.
The following malware is known to disguise itself as the Print Spooler:

Backdoor.Ciadoor.B (%SystemRoot%)
Troj/Bancban-NP (%ProgramFiles%MSN Messenger)
Troj/Gunboun-A (%SystemRoot%)
W32.Rbot-AHP (%SystemRoot%)


Common errors:

Spoolsv.exe has encountered a problem and needs to close

Spoolsv.exe wants access to port 1987

High CPU usage



Product name: Microsoft® Windows® Operating System

Description:Spooler SubSystem App

Manufacturer: Microsoft Corporation

File extensions exe : The EXE executable (program) file

An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).


What is services.exe?

Services.exe is the Windows Services Control Manager, for starting, stopping, and managing system services.


It is common for virus and spyware to disguise themself as the genuine one.

The following malware is known to disguise itself as services.exe:
W32.Randex.R (%SystemRoot%service.exe)
W32.HLLW.Kazping (%SystemRoot%)
W32.XTC.Worm (%SystemRoot%)
Backdoor.win32.Prorat.19g
W32.Mydoom


Common errors:

High cpu usage
Services.exe causes a Blue Screen



Product name:Microsoft(R) Windows (R) 2000

Description: services.exe

Manufacturer:  Microsoft Corporation

File extensions exe : The EXE executable (program) file

An executable file is a program that can be executed on the various Microsoft operating systems (Dos,windows 98/xp/vista).


What is smss.exe?

Smss.exe is part of session manager subsystem.


It is common for virus and spyware to disguise themself as the genuine one.

The following malware is known to disguise itself as smss.exe:

Backdoor.IRC.Flood.F (%SystemRoot%System32CatRoot)
W32.Resdoc (%SystemRoot%)
W32.Dalbug.Worm (%SystemRoot%)


Common Errors:

High cpu usage
Windows will not boot due to smss.exe not being found


Product name:  Microsoft(R) Windows (R) 2000 Operating System

Description: Windows NT Session Manager

Manufacturer: Microsoft Corporation