I get a strange message about a program crashing. I don’t recognize its name (swdsvc.exe). Is it legit or not? When I google it, I don’t know if I should trust the web-sites that come up any more than the mysterious executable. What to do?
CastleCops keeps very valuable lists of programs and things you’d expect to find on your PC, and those you don’t.
- XP/NT Services (O23)
- A CLSID list for every CLSID you’d expect to find.
- Shared task-scheduler DLLs and CLSIDs (O22)
- Shell-hook DLLs and CLSIDs
- AppInit and Winlogon-Notify DLLs (O20)
- O18 lists CLSIDs and DLL names of extra protocols and protocol hijackers.
- Internet Explorer Buttons (O9)
- ActiveX Objects (O16)
Hint: Use the search box. There are a lot of entries.
(As it turns out, swdsvc.exe is SpyWareDoctor.)
Update 1/26/2009: Castlecops’ useful information is now at SystemLookup.com.