Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats
X
Disk Master
??
Added as a result of the DISTER VIRUS!
X
drvupd
rundll32 drvupd.inf
Hijacker - drvupd.inf file installs a "searchforge.com" hijack
X
EScorcher
escorcher.exe
Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead
U
IAAnotif
iaanotif.exe
IAA Event Monitor User Notification Tool - part of Intel« Application Accelerator - "a performance software package for desktop PCs using select Intel« chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs"
X
Iamnacho On Irc.MusIrc.com Is a Homosexual!
XBox64.exe
Added as a result of the RANDEX.Y VIRUS!
X
Iehelper
syslaunch.exe
Outwar adware downloader
X
ld
ld.exe
Added as a result of the REPEATLD VIRUS!
N
lhttseng
rundll32.exe lhttseng.inf,RemoveCabinet
Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine
U
LPS
Lps.exe
Local Port Scanner - "With LPS you're able to check your computer for open or listening ports
U
MAIN
main.exe
SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
U
Mediafour Mac Volume Notifications
Macvntfy.exe
Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
U
Mediafour XPlay Tray Notification Icon
Xptryicn.exe
Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
X
Memory Check
memore.exe
Added as a result of the KILLAV.C VIRUS!
N
mmtask
mmtask.exe
Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator
X
Mscnt
mscnt.exe
Adult content dialler
X
MSNService
MSNService.exe
Added as a result of the CARPET.C VIRUS!
X
msreg.exe
msreg.exe
Added as a result of the ZINX VIRUS!
X
msrunocx32
msrunocx32.exe
Added as a result of the SKUS VIRUS!
X
msuser32.exe
msuser32.exe
Added as a result of the ANDROV VIRUS!
N
Necbar
Necbar.exe
Nec Assistant; Ark's Navigator, a graphical interface for NEC computers
U
NGServer
ngserver.exe
Symantec/Norton Ghost Console service
X
ntdll
ntdll.exe
Added as a result of the BIONET.404 VIRUS!
U
OWCWebCamDV
wcdvtray.exe
WebCamDV from Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam
U
Pervasive.SQL Workgroup Engine
W3dbsmgr.exe
Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup
X
Pofatch
nstrue.exe
Added as a result of the RANDEX.Z VIRUS!
U
Privoxy
privoxy.exe
Privoxy - web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk
X
RavTimeXP
??
Added as a result of the WULLIK.B VIRUS!
X
RavTimXP
??
Added as a result of the WULLIK.B VIRUS!
X
sagnt
sagnt.exe
Adware web downloader
X
SearchSquire33
SearchUpdate33.exe
SearchSquire parasite
X
Service.exe
Service.exe
"servedby.advertising" popup generator
X
Service Process
SVCHOST.EXE
Added as a result of the DARKER VIRUS! Note - not the valid svchost.exe as described here. Located in %Windir% not %Sysdir%
U
siService.exe
siService.exe
Spam Inspector - anti email spam software
X
SYS_CLEAN
Service.exe
Added as a result of the FLOPCOPY VIRUS!
X
SysInit
wininit32.exe
Added as a result of the XABOT VIRUS
U
SysMetrix
SysMetrix.exe
SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics
X
syspath
drv.exe
Added as a result of the SOBER VIRUS
X
System Configuration
iexplore.exe
Added as a result of the RANDEX.AD VIRUS! Note that the real "iexplore.exe" is located in Program Files\Internet Explorer
Winshow parasiate related - from the "RunOnce" keys it replaces "winshow.dll" with a new version
N
WXProcMgr Module
WXprocMgr.exe
TVTonic from Wavexpress - "enjoy 3 full-screen, DVD-quality video channels for FREE". Allows data content to be downloaded and synchronized on your system
U
YPC
ypc.exe
Yahoo Parental controls - "Let you decide what type of sites and Yahoo! services your kids can access"
X
Cn323
cnfrm33.exe
Added as a result of the MIMAIL.D or MIMAIL.G VIRUSSES!
X
Cnfrm32
cnfrm.exe
Added as a result of the MIMAIL.D or MIMAIL.G VIRUSSES
X
Config Loader2
explores.exe
Added as a result of the GAOBOT.BT VIRUS!
X
Configuration Loader
windex.exe
Added as a result of the GAOBOT.BM VIRUS
X
Configuration Loader
explorex.exe
Added as a result of the GAOBOT.BZ VIRUS
X
DOGStart
GSDOGST.EXE
Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS
U
FamilyKeyLogger
cisvc.exe
"Family Keylogger - is your best choice, if you want to know what other users on your machine are typing"
N
GEARsec
gearsec.exe
Installed by Apple Quicktime package - iPod/iTunes CDRW support. Can be disabled if you only require Quicktime player
X
Generic host proccess for windows
SVCHOSTS.EXE
Added as a result of an unidentified VIRUS!
U
IE Doctor
IEDoctor.exe
IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options
X
INTERNET SERVISES
WINZ32.exe
Added as a result of the SDBOT.Q VIRUS!
X
KaZooM
KaZooM.Exe
KaZoom from Blue Haven Media - "add-on application that automatically speeds up the download process and finds the files you want with far more power than regular KaZaA searches" while collect private information and open countless popup windows.
X
MHDOGStart
mhdogst.EXE
Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS
N
Microsoft Utility Startup
OSA9.Exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
X
Microsoft Windows Updater
winupdgm.exe
Added as a result of the GAOBOT.BI VIRUS!
X
MS Explorer
mexplore.exe
Added as a result of the YAHA.AE VIRUS!
X
NavScan
??
Added as a result of the OBSORB VIRUS!
X
NetWatch32
netwatch.exe
Added as a result of the MIMAIL.C VIRUS!
X
Office Startup
Exploer.exe
Added as a result of the GAOBOT.BV VIRUS! Note the different filename to the valid MS Office entry.
N
PNAgent
PNAgent.exe
PhatNoise Music Manager - manages WMA, MP3, WAV, etc music files
X
putil
??
Added as a result of the LDPINCH VIRUS!
X
rngmf
??
Added as a result of the RANKY.C VIRUS!
Y
SAVAgent
SAVAgent.exe
Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users
X
SysService32l
systask32l.exe
Added as a result of the THEUG VIRUS!
X
SystemLoad32
sysload32.exe
Added as a result of the MIMAIL.E VIRUS!
X
SystemSearch
regedit.exe -s c:\ie.reg
Installs a Seachxl.com browser page hijack
X
System time updator
CSysTime.exe
Added as a result of the RANDEX.S VIRUS!
X
UpdateComponent
CNF UPD.EXE
Added as a result of the SPYBOT.GEN VIRUS!
X
Winamp
winamp.hta
Hijacker - re-directing to adult content sites. Note - this isn't the real Winamp
X
Windows Loader
wstart32.exe
Added as a result of the GAOBOT.CA VIRUS!
U
WService
WService.exe
Tablet client Driver for UC-Logic Pen/Graphics Tablet
Y
Zapro
Zapro.exe
Firewall program from Zonelabs - paid for version
X
absr
mwsvm.exe
SeekSeek search hijacker related
X
AKEYNAME
WinServ.exe
Added as a result of the EVILBOT.C VIRUS
X
bxsx5
RunDLL32.EXE bsx5.dll
BookedSpace parasite variant
X
cesmain.dll
cmail.dll,Rundll32
CnsMin "Chinese Keywords" hijacker related
U
CLCLSet
CLCL.exe
CLCL clipboard caching utility
X
Configuration Loader
wincrt32.exe
Added as a result of the GAOBOT.BF VIRUS!
X
cpntmgc
simcss.exe
MagicControl downloader trojan variant
U
Disk_Monitor
Disk_Monitor.exe
Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader
X
Dxupdate.exe
Dxupdate.exe
Added as a result of the MAFEG VIRUS
U
E-color
IconMgr.Exe
Sets the colour of your monitor when running games that regognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
X
helper.dll
helper.dll,Rundll32
CnsMin "Chinese Keywords" hijacker related
X
Internal
regedit.exe /s %windir%\c
Added as a result of the FORTNIGHT.D VIRUS
X
Internet Explorer Updater
lexbac.exe
Added as a result of the DOWNLOAD VIRUS!
U
ISStart
ISStart.exe
LogitechGalleryRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 - hence the "U" rather than "Y" recommendation
Y
iTunes Helper
iTunesHelper.exe
Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
X
KAVutil
??
Added as a result of the WINTOO.B VIRUS!
Y
KeyAccess
keyacc32.exe
KeyServer KeyAccess client software - "when the KeyServer program is launched, the KeyServer process becomes active so license requests from client computers can be serviced. Without KeyAccess, a keyed program cannot run, so license control is very secure"
X
LAsIAf32
RePEAtLD.exe
Added as a result of the REPEATLD VIRUS
X
lnternet Explorer
AMSNDMGR.EXE
Added as a result of the KWBOT.R VIRUS! Note that the "l" is a lower case "L" and not an upper case "I"
X
load=
msater.exe
Added as a result of the RETSAM VIRUS!
X
load=
shambl3r.exe
Added as a result of the REMABL VIRUS!
X
loader
WMPLAYER.EXE
Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
X
LoadPowerProfile
rundl.exe
Added as a result of the TOFAZZOL VIRUS!
N
LogiTray
LogiTray.exe
Logitech Image Studio - installed with Logitech QuickCams
U
Master Volume Spy
MASTERVOLUMESPY.EXE
Volume control for the Gateway Destination "DestiVu" media interface
X
Messenger
messenger.exe
Added as a result of the KUTEX VIRUS!
X
Microsoft Office
MSMSGR.exe
Added as a result of the GAOBOT.BB VIRUS!
X
Microsoft Office Start
winupdates.exe
Added as a result of the GAOBOT.BC VIRUS!
U
MotMon
motmon.exe
On HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required
X
mscman
mscman.exe
Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
X
MS Config Loader
MSWin32bck.exe
Added as a result of the GAOBOT.AA VIRUS!
X
MSMcAfeeh
Avsynmgr32h.exe
Added as a result of the FRANGO VIRUS!
X
msvc32
msvc32.exe
ClientMan parasite variant
X
Mwsvm
mwsvm.exe
SeekSeek search hijacker related
N
NetPumper
NetPumperIEProxy.exe
NetPumper - download manager
N
NkvMon.exe
NkvMon.exe
Nikon View 5 - for transferring pictures from Nikon digital cameras
X
pmc
764.exe
Adult content dialler
X
Points Manager
points manager.exe
Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required, plus it records your surfing habbits.
U
Pop-Up Smasher
PopupSmasher.exe
Pop-Up Smasher - pop-up killer
U
Popup Terminator
GLADManager.exe
Popup Terminator - pop-up killer
X
Quicktime Pro 3.0
winuodps.exe
Added as a result of the GAOBOT.BH VIRUS!
X
redirect
redirect*.exe
Dotcomtoolbar/Linksummary hijacker installer
X
restory
restory.exe
Added as a result of the RETSAM VIRUS!
U
RH
rh32.exe
EuroFonts - adds Euro symbols to pre-Euro computers
U
rmctrl
rmctrl.exe
Remote Control background application for CyberLink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one
X
run=
unicall.exe
Added as a result of the RETSAM VIRUS!
X
run=
cnf.bat
Added as a result of the REMABL VIRUS!
X
run=
svcinit.exe
CoolWebSearch parasite variant
X
SafeSearch
safesearch.exe
AutoSearch parasite variant
U
SeMS
SeMS.exe
PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone
N
SetHook
Sethook.exe
Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
N
SetIcon
SetIcon.exe
Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog
X
shambl3r
cnf.bat
Added as a result of the REMABL VIRUS!
X
shambl3r*
shambl3r.exe
Added as a result of the REMABL VIRUS!
X
slmss
slmss.exe
SeekSeek search hijacker related
U
Smax4
Smax4.exe
System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
U
SMax4PNP
SMax4PNP.exe
SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
X
SVC Service
svcinit.exe
Added as a result of the SINIT VIRUS
X
SVC Service
svcpack.exe
CoolWebSearch parasite variant
X
sysfiler
sysfiler.exe
Added as a result of the RETSAM VIRUS!
X
system service
spoolcrv.cpl
Added as a result of the INSPIR.11 VIRUS!
U
UBSShell
UBSShell.exe
UBS (United Bank of Switzerland) banking software
X
updater
wupdater.exe
eUniverse KeenValue parasite related
Y
UrtSvcExe
Urt95Svc.exe
"Cisco Secure URT is a virtual LAN (VLAN) assignment service that enhances LAN security by actively identifying and authenticating users and then associating them only to their specific network services and resources"
X
Wardo
syslaunch.exe
Added as a result of the ADLCICKER.G VIRUS!
X
Windows Ba■lang²τ Dosyas²
sistem.exe
Added as a result of the MUZK VIRUS!
X
Windows Manager
winmants.exe
Added as a result of the MANTAS VIRUS!
X
Windows Services
service.exe
Added as a result of the RANDEX.R VIRUS!
X
Windows Shell Library Loader
load shell.dll /c /set
CoolWebSearch parasite related
X
winlocatorupdate
updatewinlocator.exe
Locator adult content toolbar related
X
Diskstart
Code.exe
Adult content dialler
Y
Openwares Liveupdate
LiveUpdate.exe
LiveUpdate is a free "Dynamic Software Update System" which offers a comprehensive solution for developers wanting to integrate automated updating capabilities into their software products. LiveUpdate is used by several dozen applications (including this one!)
U
SearchAide
Search-Aide.exe
Search-Aide quick search application - very useful for searching the web or looking for images, news, files, etc.
N
01:00
hpdrv.exe
HP utility for monitoring when and how many recoveries have been done
Added as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number
U
!NoLoad
winrecon.exe
WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U
$EnterNet
Enternet.exe
Connection manager for the EnterNet ISP. You can also use RASPPOE
X
??
winSOCKS.exe
Homepage hijacker, see here (* = any digit)
X
??
win32API.exe
Homepage hijacker, see here (* = any digit)
X
??
janis.com
Added as a result of the POPS VIRUS!
X
??
rundll32 miqpazc.dll, Init 1
Added as a result of the AFCORE.Q VIRUS!
Y
??
statemgr.exe
Windows default for System Restore. Do NOT disable!
X
,main drive Loader
wininfo.exe
Suspected malware as it appears in 3 different registry locations - see here
N
/l:eng
??
Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
X
??
App.exe
Added as a result of the WAXPOW VIRUS!
N
??
CDANTSRV.exe
C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually
X
??
CNBABE.EXE
Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
N
??
dbserv.exe
Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
N
??
lexpps.exe
For Lexmark printers. From Lexmark: This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all. It is known that firewalls can however alert you to lexpps.exe requesting server privileges
U
??
MODEMBTR.EXE
Modem Booster from inKline Global to improve ISP connections
U
??
NTVDM.EXE
Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
Y
??
PSTORES.EXE
Part of Windows Services Protected Storage
U
??
QuickCamPro.exe
System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example, auto FTP Upload, etc
N
??
rt7eng.exe
The remote client service for Norton Ghost on Win2k Pro. This is not normally needed to Auto-load as you can manually start the client service if you connect to a remote host. Loads in SERVICES
Y
??
SECWIZ98.EXE
Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here
X
??
Svchosts.exe
Added as a result of the SDBOT.N VIRUS! where <name> can be random
N
??
tcaudiag.exe
Associated with the 3COM diagnostic module (3COM NIC Doctor). No further information is available
X
??
wincpu.exe
Added as a result of an unidentified VIRUS!
N
??
winroute.exe
Win-Route 4.27. WinRoute Tray Icon for starting and stopping the WrCtrl.exe process, also to log in to the console to view logs and change settings. Can be unchecked and the engine still runs and functions normally. Can then use provided shortcuts for administration of the program. Loaded in SERVICES on Windows 2k
X
@
regedit -s ..\win.dll
Added as a result of the SEEKER.K VIRUS!
N
@Hoc Toolbar
AtHoc.exe
One-click activated browsing toolbar used by various web-sites. See here for more info
N
@loha
reminder.exe
Registration reminder for @loha@home E-mail utility
X
@tour_ww
@tour_ww[1].exe
Adult content dialler
U
_winadm
winadm.exe
Parents Friend - Log any activity and protect programs with a password. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC
X
_x-Finder
_x-Finder.exe
Disconnects and redials an ISP modem to an adult content site
X
{2CF0B992-5EEB-4143-
rundll32.exe stlbdist.dll, DllRunMain
Browseraid/Startium parasite
N
000StTHK
000StTHK.exe
Toshiba laptop related but not required. What does it do?
U
00THotkey
00THotKey.exe
For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
U
12Ghosts Popup-Killer
12popup.exe
12Ghosts Popup-Killer
N
1A:MacVisionTrayMonitor
TrayMonitor.exe
Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y
1A:Stardock MCP
mcpserver.exe
Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on
Y
1A:Stardock TrayMonitor
TrayServer.exe
For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
U
1Srv32
SpyAgent4.exe
SpyTech SpyAgent monitoring software. Spy software that allows you to monitor EVERYTHING users do on your PC.
U
1Win32Cfg
SpyBuddy.exe
SpyBuddy monitoring software
X
2020Downloader
mssvr.exe
2020Search Toolbar related. Reported to be auto-installed
U
2wSysTray
2portalmon.exe
2Wire Homeportal user interface
Y
3c1807pd
3cmlink.exe 3cpipe-3c1807pd
3Com WinModem driver. See here for more WinModem information
For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X
3Dfx Acc
GFXACC.EXE
Added as a result of the GIBE VIRUS!
N
3dfx Task Manager
3dfxMan.exe
System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y
3dfx Tools
3dfxCmn.dll
Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
Y
3dfxv2ps.dll
3dfxv2ps.dll
Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
U
3Dlabs Taskbar Display Manager
3DLman.exe
3DLabs graphics driver related. System Tray access to display settings
U
3DLabsHelperDemon
3dldemon.exe
Directly from the programs author It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive. In most cases it can be safely disabled
U
3qdctl.exe
3qdctl.exe
Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
X
5-1-61-96
members-area.exe
Adult content dialler
X
5-2-46-112
5-2-46-112.exe
Adult content pop-up dialler. Removal instructions here
X
99C0-5297EF71F444}
rundll32.exe stlbdist.dll, DllRunMain
Browseraid/Startium parasite
U
A1000 Settings Utility
cpqa1000.exe
Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
U
A4Proxy
A4Proxy.exe
Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
N
AAATraySaver
TraySaver.exe
System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
N
ABBYY Community Agent
CAGENT.EXE
Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the5.0 version of the software
X
ABC
keylogger.exe
Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
U
Absolute Shield
dseraser.exe
Absolute Shield/Evidence Eliminator - iternet history eraser
X
ABsr
absr.exe
Added as a result of the AUTOUPDER VIRUS!
X
abtu
lopsearch.exe
Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version
X
abtu
mp3serch.exe
Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version
U
AbyssWebServer
abyssws.exe
Abyss web server
Y
AcBtnMgr_Xxx
AcBtnMgr_Xxx.exe
Associated with the Lexmark Xxx (where xx is the model) all-in-one printer/scanner/copier. Required for correct operation
U
Accelerate
accelerate.exe
Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N
Access Ramp Monitor
armon32.exe
Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
N
AccessRamp Monitor01
ARMon32a.exe
From a visitor Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service.
N
AccessRampLAN01
ARUpld32.exe
Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
N
AccuWeather.com? Desktop
??
Desktop weather from AccuWeather.com
U
AcerNotebookManager
almxptray.exe
System Tray access on some Acer Notebooks to give faster access to system settings
U
AcerPowerkey
Powerkey.exe
PowerKey utility for Acer TravelMate notebook PCs.
Y
ACMonitor_Xxx
ACMonitor_Xxx.exe
Associated with the Lexmark Xxx (where xx is the model) all-in-one printer/scanner/copier. Required for correct operation
X
acocash
fastdown.exe
Adult content dialler
X
acocash
fastfown.exe
Adult content dialler
U
Acombo3dmouse
Acombo3d.exe
Mouse driver - required if you use non-standard Windows driver features
X
Aconti
aconti.exe
Adult content dialler
U
acoustic
acoustic.exe
Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
N
acpart
agpart11.exe
Program for finding trucks on-line
N
Acrobat Assistant
ACROTRAY.EXE
If you want to create a PDF using Acrobat Distiller, you can execute this program manually just before doing so
N
Action Manager 32
am32.exe
Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
N
Activation
Activation.exe
Part of Microsoft Money
U
Activboard
MMKeybd.exe
Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
X
ActiveDesktop
systray32.exe
Added as a result of the DABOOM VIRUS!
N
ActiveEyes
ActiveEyes.exe
ActiveEyes from TFI Technology
U
ActiveMenu
ActiveMenu.exe
Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally
U
ActivePlus
activeplus.exe
Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
Y
ActiveShield
MCVSSHLD.EXE
McAfee VirusScan On-line. See also McAgentExe
N
ActivSurf
backweb*****.exe
Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U
Ad Blocker
blocker.exe
Ad Blocker - blocks popups, and also removes banners, image ads and flash ads
U
AD2KClient
AD2KClient.exe
Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk
N
AdaptecDirectCD
Directcd.exe
DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N
Ad-aware
Ad-aware.exe
Ad-aware from Lavasoft. Checks your PC for Spyware which reports back your internet activities to base. Available via Start -> Programs
N
Adaware Bootup
ad-aware.exe
Ad-aware from Lavasoft. Checks your PC for Spyware which reports back your internet activities to base. Available via Start -> Programs
X
Adaware lptt01
adaware.exe
New variant of the RapidBlaster parasite (in a BelmontSoft folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware
N
ADG
ADG.exe
SoundBlaster Audigy related
N
ADGJdet
ADGJDet.exe
Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
X
ADM Library Loader
admlib32.exe
Added as a result of a variant of the SDBOT VIRUS!
U
Ad-Muncher
ADMUNCH.EXE
Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
U
Adobe Gamma Loader
Adobe Gamma Loader.exe
Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
X
AdobeA
adobes.exe
Added as a result of the FLOOD.BA VIRUS!
X
adp
adp.exe
Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
N
ADQuickAccess
Adtray.exe
After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
U
ADService
ADService.exe
Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk
U
AdsGone
Adsgone.exe
AdsGone - pop-up stopper
N
ADSL Diagnostic Tools
mapiicon.exe
System tray access to ADSL modem diagnostic tools. Available via Start -> Programs
Y
ADSS
ADSS.exe
ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
U
AdSubtract
adsub.exe
AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
X
Adult_Chat
Adult_Chat.exe
Adult content dialler
X
Adult_Chat1
Adult_Chat1.exe
Adult content dialler
U
ADUserMon
ADUserMon.exe
Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk
N
Advanced Tools Check
ADVCHK.EXE
Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
X
Advapi
Advapi.exe
Added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS!
U
Advertising Killer
Akiller.exe
AKiller - pop-up stopper
U
Ad-watch
Ad-watch.exe
Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
Y
Aeiwlsta.exe
Aeiwlsta.exe
IBM High Rate Wireless LAN Adapter driver.
N
AELaunch
AELaunch.exe
Audio Applications Launcher for the Philips Acoustic Edge soundcard
Y
AeXSWDUsr
AeXSWDUsr.exe
Altiris Express NS Client Manager software.
U
AEZBProc
aptezbp.exe
IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
U
AFAFilter
windefault.exe
AFAFilter - internet filter software
N
Agent
Agent.exe
Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
N
Agente
Remupd.exe
Part of Panda Antivirus Titanium.
U
AgfaCLnk
AgfaCLnk.exe
For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
Y
AGRSMMSG
AGRSMMSG.exe
IBM AMR modem driver
N
AGSatellite
AGSatellite.exe
Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U
ahfp
ahfp.exe
Advanced Hide Folders - is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either
U
ahfprog
ahfp.exe
Advanced Hide Folders - is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either
U
AHNSD
AhnSD.exe
AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
N
AHQInit
ahqinit.exe
Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
U
aiepk
aiepk2.exe
Another IE Popup Killer - pop-up stopper
N
AIM
aim.exe
AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
X
AIM reminder
AIM reminder.exe
Added as a result of the BUDDY VIRUS!
X
aimaol lptt01
aimaol.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N
AimingClick
AimingClick.exe
AimingClick from AimingTech. Web searching tool. Available via Start -> Programs
N
AIMster
??
Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
Y
Aiptek Graphics Tablet (USB)
atwtusb.exe
USB interface for Aiptek Graphics Tablet (USB)
U
AKiller
akiller.exe
BuyPin Advertising Killer - popup killer
U
Alarm Manager
Alarm.app.exe
Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
N
AlarmWatcher
AlarmWatcher.exe
Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops.
N
Album Fast Start
ABMTSR.EXE
Scanner software, not required for scanner to work
N
AlcxMonitor
Alcxmntr.exe
Realtek AC97 Audio - Event Monitor.
X
Alevir
Alevir.exe
Added as a result of the OPASERV.A VIRUS!
N
Alexa
??
Alexa Toolbar is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing. Available via Start -> Programs
Y
ALiSndMgr
ALiSndMg.exe
ALi AC97 Sound driver
U
AliUSBfix
GREENMK.exe
Realted to a USB 2.0 PCI card - the IOgear GIC220OU
U
All Aboard Status
stswin.exe
All Aboard! Internet Connection Sharing status icon
X
All Sea screen saver
TaskTray.exe
Free screensaver, installs lots of foistware. See here. Get rid of it
X
All Sea web link
FWLink.exe
Free screensaver, installs lots of foistware. See here. Get rid of it
U
allSnap
allSnap.exe
allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp orphotoshop
U
Alogserv
Alogserv.exe
From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
Y
Alps Electric USB Server
Monserv.exe
Alps Electric USB Server.
U
AlpsPoint
Apoint.exe
Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
N
ALServ
ALServ.exe
Altec Lansing AMS speaker related.
X
Altnet
points manager.exe
Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
X
AltnetPointsManager
points manager.exe
Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
U
ALUAlert
ALUNotify.exe
Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
U
AlwaysOnTopMaker
AlwaysOnTopMaker.exe
Always On Top Maker - utilty to enable an application to always be displayed on top of others on the desktop
N
AME_CSA
rundll32 amecsa.cpl, RUN_DLL
Loads ADSL modem Control Panel applet
N
America Online *.* Tray Icon
aoltray.exe
Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
Y
Amon
AMON.EXE
Monitoring part of Eset's NOD32 virus-scanner
Y
Amonitor
amon.exe
Tiny Personal Firewall
X
anbv32
nabv32.exe
Added as a result of the TITOG.C VIRUS!
N
Announcements
Annclist.exe
MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N
Anntext
Anntext.exe
Caere Pagekeeper text annotation server
U
Another Internet Explorer Popup Killer
aiepk.exe
Another IE Popup Killer - pop-up stopper
U
Anti-keylogger check
antikey.exe
Anti-keylogger - protects against keylogger programs monitoring your keystrokes
U
AntiPopUp
AntiPopUp.exe
AntiPopUp for IE - pop-up stopper
X
AntiVirusProtection
qumk.exe
Spyware
Y
AnVir
AnVir.exe
AnVir virus destroyer
U
anvshell
anvshell.exe
System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
Y
anycom bluetooth
ftflauncher.exe
Associated with an Anycom bluetooth wireless card.
N
AO Tray
AOTray.Exe
System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
U
AolAcsDaemon1
Acsd.exe
AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates havingto go through the procedure of signing back on manually
N
AolFix
AolFix.exe
Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once
X
Aornum
aornum.exe
Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
N
AOTray
AOTray.Exe
System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Y
APC UPS Status
Display.exe
APC PowerChute Personal Edition status icon
Y
apc_tray
apc_tray.exe
Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
U
Apmsrv9x
APMSRV9X.EXE
Intel AnyPoint Wireless II Home Network related.
U
Apoint
Apoint.exe
Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
U
Appcon
vAppCon.exe
Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the Auto-start when OS starts option. Required for a connection to be established
U
AppExtender
AppExtCB.exe
Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
Y
Application
mdmsetsp.exe
Aztech Labs modem driver
N
Apvxd
APVXDWIN.EXE
Part of Panda Anti-Virus.
Y
Apvxdwin
APVXDWIN.EXE
Part of Panda Anti-Virus. Required to enable permanent virus protection
Y
Apwheel
Apwheel.exe
Wheel support for an Alps mouse
X
ara-key
??
Added as a result of the ANTINNY VIRUS! where <random> is a random program name with random characters
N
ARCSolo Recovery
??
Backup software by Computer Associates - no longer supported
X
Aritima
aritima.exe
Added as a result of the ARITIMA VIRUS!
Y
ashMaiSv
ashmaisv.exe
Avast! anti-virus software - probably E-mail protection based upon the name?
U
AsioReg
regsvr32.exe ctasio.dll
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
N
asp4tray
asp4tray.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y
AspireTimeMachine
acertmb.exe
System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
N
asTray
Astray.exe
Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
N
Astro
Astro.exe
Checks for updates to Quicken on a system reboot
U
ASUS SmartDoctor
VGAProbe.exe
ASUS video card fan/thermal monitor
U
ASUS TweakEnable
astart.exe
Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N
ASUSKey
V38SHELL.EXE
System tray Icon for quickly changing video modes
N
ASWDP
ASWDP.exe
MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
X
ASWnk
aswnk.exe
Adult content dialler
N
ATI GART Set-up Utility
Atigart.exe
Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
U
ATI Launchpad
launchpd.exe
Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
N
ATI Scheduler
Atisched.exe
Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N
ATI Task Application
Atitkad.exe
System Tray access to common display functions on ATI video cards. As above
N
ATI Task Application (Atikey)
Atitask.exe
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display
N
Ati2cwxx
Ati2cwxx.exe
For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it
N
Ati2mdxx
Ati2mdxx.exe
For ATI video cards. System Tray access to display mode changing
U
AtiCwd
AtiCwd.exe
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U
AtiCwd32
Ati2cwad.exe
This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
N
AtiKey
AtiKey32.exe
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display
N
AtiKey
atiptkad.exe
System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start-> Settings -> Control Panel -> Display
U
ATIModeChange
Ati2mdxx.exe
System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
U
ATIPOLAB
ati2evxx.exe
ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U
ATIPOLL
ati2evxx.exe
ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U
AtiPTA
Ati2ptxx.exe
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U
AtiPTAAA
Ati2ptxx.exe
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U
atiptaxx
Ati2ptxx.exe
Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U
AtiQiPcl
AtiQiPcl.exe
Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
U
ATISmart
ati2s9ag.exe
ATI's SMARTGART, which is included with the Catalyst drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
X
atisrc2
windfind.exe
Adult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
U
ATIX10
atix10.exe
ATI Remote Wonder - PC wireless remote control
X
ATM Control
adpn.exe
Added as a result of the MMS.A VIRUS!
N
ATnotes
atnotes.exe
Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
N
Atomica
atomica.exe
Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
U
AtomicTime
ATOMICTIME.EXE
AtomicTime - utility that synchronizes your PC clock to an atomic clock
U
Atrack
atrack.exe
New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
U
ATTBroadbandUpdate
SAUpdate.exe
Big Brother from Quest Software. System and network monitor
U
ATTRedUpdate
AutoUpdate.exe
Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X
AttuneClientEngine
attune_ce.exe
Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer. Not required - treated as adware
X
AttuneContentUpdater
attune_cu.exe
Related to the above. All needed for the program to do its job properly
X
AttuneDiscovery
attune_di.exe
Related to the above. All needed for the program to do its job properly
X
AttuneSystray
attune_st.exe
Related to the above. All needed for the program to do its job properly
N
aTuner
atuner.exe
aTuner - tweak tool for GeForce based graphics cards
Y
atwtusb
atwtusb.exe
USB interface for Aiptek Graphics Tablet (USB)
U
AU Agent
AUagent.exe
Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
Y
AUCBPNP
aucbnpn.exe
Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
N
AudCtrl
RunDll32 AudCtrl.dll, RCMonitor
Audio control panel
N
AudioHQ
Ahqtb.exe
For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
Y
Aureal A3D Interactive Audio
sa3dsrv.exe
For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y
Aureal A3D Interactive Audio Init
A3dInit.exe
For Aureal based 3D soundcards. A3D sound features won't work with this disabled
X
ausvc
ausvc.exe
Added as a result of the AUTOUPDER VIRUS!
U
Autobar
autobar.exe
Connect buttons on the keyboard for internet direct access, etc. on HP computers
N
AutoEA
Ahqrun.exe
For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
N
AutoMate Task Service
automate.exe
Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
N
Automatically launches the United Devices Agent when you start your computer
UD.EXE
The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
N
AUTOPROP
REGPROP.EXE
Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
N
AUTOPROP
WMPADDIN.DLL
Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
U
AutoShutdown
pssvc.exe
Utility to fix vCard Export in MS Outlook 2000
U
AutoSizer
AUTOSIZER.EXE
AutoSizer - utility that automatically maximizes windows when they're opened
N
AutoSpell 5
ASWATC32.EXE
AutoSpell - spell checker
N
autoupd
autoupd.exe
Raxco Software Auto Update utility.Used to keep your software up-to-date
X
autoupd (2)
autoupd.exe
VIRUS! - found in a folder of the same name
X
AutoUpdater
aupdate.exe
Aupdate, Tinybar variant. Spyware
N
AUXXTRAY
au30setp.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y
Avast!
ashserv.exe
Avast! anti-virus software - probably the main scanner?
Y
Avast32
Astart32.exe
Avast32 anti-virus - scanner
U
AvconsoleEXE
Avconsol.exe
From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X
AveoAttune
atmdlusr.exe
Related to AttuneClientEngine above
Y
AVG_CC
avgcc32.exe
AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y
AVG_EMC
AVGEMC.exe
AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y
AVG_RegCleaner
AVGREGCL.exe
AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
Y
AVG7_CC
AVGCC.exe
AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Y
avgcc32
avgcc32.exe
AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y
AVGCtrl
AVGCTRL.EXE
Background task of the AntiVir antivirus program which scans files transparently in the background
Y
avgmsvr.exe
avgmsvr.exe
Required for AVG Anti-Virus 7.0 to function
Y
Avgserv9.exe
Avgserv9.exe
Background monitoring program for AVG anti-virus
Y
AvMaiSrv
Avmaisrv.exe
Avast32 anti-virus - E-mail scanner
Y
avpcc
avpcc.exe
Kaspersky Labs anti-virus
X
Avril Lavigne - Muse
??
Added as a result of the AVRIL-A VIRUS!
Y
AVSCHED32
AVSched32.exe
AntiVir anti-virus from H+BDEV
N
Avtray
Avtray.exe
Command Antivirus tray icon
U
AVWUpd32
AVWUPD32.EXE
AntiVir updater. Useful, but can be run manually
Y
avx communicator
xcommsur.exe
Anti-virus part of BitDefender virus scanner/firewall
Y
Avxlive
avxlive.exe
Bullguard or BitDefender antivirus
Y
avxlni
avxinit.exe
Anti-virus part of BitDefender virus scanner/firewall
N
awhost32
awhost32.exe
Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
Y
a-winpoet-service
winpppoverethernet.exe
WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
N
B.Reader
remin.exe
Birthday Reminder 5.0 - as the name implies
X
b3d
BDEsecureinstall.exe
B3d Projector - installed along with the KaZaA file sharing utility. Causes a program called ZUPDATE.EXE to periodically try to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the BDE directory and all its contents
X
b3dUpdate
Zupdate.exe
Same as above but not installed via KaZaA
X
b9
B9.exe
FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run
X
babeie
rundll32 cnbabe.dll, dllstartup
CommonName Toolbar spyware. To uninstall see here
N
Babylon Translator
Babylon.exe
Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on
U
BackgroundSwitcher
bgswitch.exe
Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a Desktop Slide Show. This would automatically change the Windows Desktop at an interval specified by the user. Available here
N
Backpack UDF
bpudfmon.exe
Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk
U
BackupExecScheduler
besch.exe
Veritas Back Up My PC software
N
BackWeb
backweb.exe
Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
N
Backwork
Backwork.exe
Backwork trojan detector
U
BACPI10
bacpi10a.exe
Known as PowerKey - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
N
bacstray
bacstray.exe
Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X
BADDATE
BADDATE.EXE
Added as a result of an unidentified VIRUS!
X
bargains
bargainbuddy.exe
Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here
X
bargains
bargains.exe
Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here
U
Bart Station
station.sbrt
Related to PeoplePC ISP.
N
Batchreg1
??
Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here
U
Battery Scope
batmgr.exe
Monitors battery levels on a notebook/laptop PC
U
BatteryBar
batterybar.exe
BatteryBar - displays battery usage, and the current percentage of battery power left
X
BatzBack
BatzBack.scr
Added as a result of the BACKZAT VIRUS!
U
BAUSB
BAUSB.exe
Boston Acoustics Audio, USB driver
U
BayMgr
DockApp.exe
Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
U
Bayswap
bayswap.exe
Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U
Bayswap2
TbUpdate.exe
Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
N
bbSysTray
bbSysTray.exe
Philips CD-RW related - the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions
U
bbui
bbui.exe
AOL DSL status monitor displaying a red/green icon indicating if you have a connection
U
BCDetect
bcdetect.exe
Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
Y
BCMDMMSG
bcmdmmsg.exe
BCM voicemodem driver. Required for dial-up if you have one of these modems
U
BCMHal
rundll32.exe bcmhal9x.dll, bcinit
BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
Y
BCMSMMSG
BCMSMMSG.exe
BCM voicemodem driver. Required for dial-up if you have one of these modems
BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
N
BCWipeTM
bcwipetm.exe
BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed
Y
BDMCon
Bdmcon.exe
BitDefender antivirus
N
BearShare
bearshare.exe
BearShare file sharing client. Versions known to include spyware - see here
U
Belsta.exe
Belsta.exe
Configuration tool for Belkin wireless network cards. Required to change the card?s configuration.
X
Benadril Alert Tool
benadrilalert.exe
Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
Y
bg
bullguard.exe
Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster
N
bgsmsnd
bgsmsnd.exe
Printer driver to generate PDF files from any program
N
BHOCop
BHOCop.exe
ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware
N
bigfix
BIGFIX.EXE
BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet? Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog
U
BigPond Toolbar
bpumTray.exe
Telstra BigPond Toolbar - Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier
N
Billminder
Billmind.exe
Can be setup in Quicken to remind user of due payments. Available via Start -> Programs
X
bingdian
Bingdian.vbs
Added as a result of the BINGD VIRUS!
X
Bios
Bios32.exe
Added as a result of an unidentified VIURS!
Y
BitDefender Communicator
xcommsvr.exe
BitDefender antivirus
U
BitDefender for MSN Messenger
msnmon.exe
Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually
Y
BitDefender Live! Init
bdinit.exe
BitDefender antivirus
Y
BitDefender Scan Server
bdss.exe
BitDefender antivirus
U
BitDefender_P2P_Startup
BitDefender_P2P_Startup.exe
Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually
Y
bitdefenderlive
avxlive.exe
Main program of BitDefender virus scanner/firewall
N
BitWare Print Monitor
bwprnmon.exe
FaxServe network fax software
N
BJ Status Monitor 5xx
CJSTRxx.EXE
Canon printer status monitor - where xx is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
N
bjcfd
cdf.exe
BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
N
BlackICE PC Protection
blackice.exe
Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the Startup menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
N
BlackIce Utility
blackice.exe
Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the Startup menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
U
blads
blads.exe
A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
N
BlazeChanger
FBZPaper.exe
Ember graphic file viewer, manager, and touch-up system
U
BlockAds
blads.exe
A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
N
BlockTracker
BlockTracker.exe
If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
X
blss
blss.exe
CBlaster trojan/dialer/downloader
N
BLSTAPP
blstapp.exe
Puts access to Creative's BlasterControl in the System Tray
Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not
U
BMMGAG
Rundll32 PWRMONIT.DLL, StartPwrMonitor
Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
U
BMMLREF
BMMLREF.EXE
Battery Manager for IBM ThinkPad laptops
U
BMO MasterCard Wallet
EWALLET.EXE
The wallet conveniently stores billing, shipping and payment information on your PC
N
BMupdate
BMupdate.exe
Related to BookmarkCentral below. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install
X
Bndt32
Bndt32.exe
Added as a result of the LACON VIRUS!
X
Bnexe
??
Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Y
BOCleanautostart
Boclean.exe
NSClean's BOClean anti-trojan software
U
bombshel
BOMB32.EXE
Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X
Bonzi Buddy
??
Spyware - read here for information and here for removal instructions
X
BookedSpace
bs2.dll,DllRun
Adware, related to the Remanent parasite
N
BookmarkCentral
BMLauncher.exe
Bookmark Express - offers a more flexible way to manage Web site bookmarks, regardless of which browser you use
U
Boost XP Service
bxservice.exe
Boost XP from Systweak - WinXP tweaking utility
X
boot
boot.exe
Added as a result of the ELEM VIRUS!
X
Boot Manager
Njgal.exe
Added as a result of the KILO VIRUS!
X
BootLoader
BootLoader.exe.vbs
Added as a result of the WATERWORKS VIRUS!
U
BootStatus
BOOTST~1.EXE
Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources
N
Bose Wave/PC Monitor
wavepcmonitor.exe
System Tray access for this system (more info on the system here). Available via Start -> Programs
U
bpcpost.exe
bpcpost.exe
MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U
BPK
bpk.exe
Blazing Tools Perfect Keylogger (monitoring program). Given a U recommendation because it depends if you intentionally installed it. If you didn't treat it as X and uninstall or remove
U
BQTray.exe
BQTray.exe
System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
X
Brasil
Brasil.exe
Added as a result of the OPASERV.E VIRUS!
Y
Brindys BriTray
BRITRAY.EXE
Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired
N
Broadband Wizard
bbwiz.exe
Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs
N
BrowseProxy
FindService.exe
Actual Names - It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you
X
browser aid
browseraid.exe
BrowserAid/BrowserPal foistware
Y
Browser Hijack Blaster
bhblaster.exe
Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings
U
Browser Launcher
Commandr.exe
Logitech internet keyboard Commander software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X
Browser Pal
adblck.exe
BrowserAid/BrowserPal foistware
N
BrowserWebCheck
loadwc.exe
Checks to make sure that IE is still your default browser
N
B'sCLiP
BSCLIP.exe
CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
X
Bsoft lppt01
Bsoft.exe
New variant of the RapidBlaster parasite (in a BelmontSoft folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
Bsx3
Rundll32.exe bs3.dll, DllRun
BookedSpace parasite variant
U
btinst
btinst.exe
System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device
U
bttray
bttray.exe
System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device
Y
BTUSRBDGF
BtUsrBdg.exe
Used with a Mitsumi USB Bluetooth adaptor
N
Buddyizer
Buddyizer.exe
Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U
bugwatcher service
bugwatcher.exe
Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures
U
Bulldog Service
upsd.exe
Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
Y
BullGuard
mgui.exe
Part of Bullguard antivirus
U
BullGuard Update
avxlive.exe
Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions
Y
BullGuard XComm
XCOMMSVR.EXE
Part of Bullguard antivirus
Y
BullGuardInit
AVXINIT.EXE
Part of Bullguard antivirus
X
BullsEye Tracker
BeTrack.exe
Bullseye - intelligent research assistant
U
Button Server
bttnserv.exe
Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required
N
ButtonKey
ButtonKey.exe
CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut
N
Buzme
Bmui.exe
Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
U
Buzof.exe
buzof.exe
Buzof from Basta Computing enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes
X
Bymer.Scanner
Msinit.exe
Added as a result of the BYMER VIRUS!
X
Bymer.Scanner
Wininit.exe
Added as a result of the BYMER VIRUS!
U
C2K
CYB2K.EXE
CYBERsitter 2000 or 2001 - anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
N
Cacheman
Cacheman.exe
Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
N
CACStarter
cacstart.exe
Cash A Check - check writing software
U
Caddais BackupOnDemand
BODMon.exe
Caddais BackupOnDemand - runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location
U
CADS
cads.exe
Cyber Sentinel internet filtering software
N
CAgent
CAgent.exe
Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
X
cAgOu
??
Added as a result of the KAKWORM VIRUS!
N
CahootWebcard
CahootWebcard.exe
The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details. Run manually when needed
N
Cal Reminder Shortcut
calrem.exe
Produces a pop-up reminder of events scheduled using the MS Office Calendar
N
CallControl
ftctrl32.exe
FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
N
CamCheck
CamCheck.exe
NuCam camera software related
N
Camio Viewer x
IXApplet.exe
Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. x in the name is the version
N
CamMonitor
hpqcmon.exe
From HP and related to digital imaging
N
Canada
Canada.exe
Known to be a dialler - but is it maliscous or clean?
N
Canary
canary-std.exe
Canary monitoring program. Keylogger, monitors all computer activity
N
Canon Printer Monitor BJCxxx
Cjstlst.exe
Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
N
Capfax
capfax.exe
PhoneTools fax software
N
Capture Express 2000
capexp.exe
Capture Express - screen capture utility
N
Card Monitor
REGCNT09.exe
For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
U
CARPservice
carpserv.exe
Associated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example
U
CasAgnt
CasAgnt.exe
Related to a Casio PDA
U
CBWAttn
CBWAttn.exe
Required for Bitware to answer incoming faxes, can cause sleep mode problems
U
CBWHost
CBWHost.exe
Required for Bitware to answer incoming faxes, can cause sleep mode problems
U
CBWUser
CBWDial.exe
Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop
X
CC2KUI
comet.exe
Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more information and for the uninstall procedure
Y
CcApp
ccApp.exe
Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this
N
Ccdecode
rundll32.exe streamci, StreamingDeviceSetup
Part of the closed caption decdoder/MS VBI codec. Should only run once
Y
CCDoctorLogonTesting
ccdoctor.exe
Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product
Y
CcEvtMgr
ccEvtMgr.exe
Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via CcApp and was not required as a seperate entry but a recent update changed this
Y
CcPxySvc
CCPXYSVC.exe
Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall
X
ccreg
explorer.exe
Added as a result of the ZCREW VIRUS! Note - this is not the valid explorer.exe
Y
CcRegVfy
ccRegVfy.exe
Part of Norton AntiVirus 2003. ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack
Y
ccSetMgr
ccSetMgr.exe
Part of Norton AntiVirus 2004. What does it do?
N
CDInterceptor
cdi.exe
CD indexer for measuring the speed of CD players
N
CDTray
CDTray.exe
On HP PCs, this is the small CD icon next to the time
U
CeEKEY
CeEKey.exe
Toshiba Satellite E-Key related.
U
CeEPOWER
cepmtray.exe
Toshiba power management related.
X
Cekirge
??
Added as a result of the KERGEZ.A VIRUS!
N
CFD
CFD.exe
BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
Y
cfgintpr
cfgintpr.exe
Configuration Interpreter - part of Tiny Personal Firewall V4
N
cfgwiz
cfgwiz.exe
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
Y
cFosDNT
cFosDNT.exe
cFos DSL Modem driver related.
Y
cFosInst_Check
cfosinst.exe
cFos DSL Modem driver related.
X
cftmon32
taskmgr#.exe
Added as a result of the SOWSAT.C and SOWSAT.J VIRUSES! where # is a number greater than or equal to zero
U
CGServer
cgserver.exe
Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs
X
Cgtask Services
cgtask.exe
Added as a result of the LALA.B VIRUS!
U
ChamClock
ChamClock.exe
Chameleon Clock - system tray clock replacement
N
Check for One Touch Update
wiseupdt.exe
Checks for updates for Visioneer OneTouch scanners
U
Check Messenger
cmesseng.exe
Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account
U
CheckIt
ToolBox.exe
CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify
Y
CheckMsgPlus
MsgPlusH.dll, VerifyInstallation
Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.
N
checktime
ct.exe
Found in the \HPSelect\Frontend\ directory on a HP machine.
U
CherryKeyMan
KeyMan.exe
Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys
N
CHKADMIN
CHKADMIN.EXE
Compaq Network Management System. When running, it places an icon in the system tray titled Intelligent Manageability
X
Choke
Choke.exe-blahh
Added as a result of the CHOKE VIRUS!
U
CHotKey
mhotkey.exe
Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
U
CHotKey
MK9805.EXE
Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
N
Christmas Music Player
TTEST6.EXE
Christmas Music Player brings the music of the Christmas Holiday to your desktop
X
CiaBackdoor
msldr.com
Added by a VIRUS!
N
CIJxP2PSERVER
CIJxP2PS.EXE
Compaq printer utility which is required in order to make the printer work correctly - x depends upon the model, ie, for IJ300 x=3, for IJ700 x=7
N
CISrvr Program
CISRVR.EXE
Related to internet setup on Compaq PC's
N
CitiVAN
CitiVAN.exe
Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again
Y
Cjstcom
Cjstcom.exe
Canon printer BJ status language monitor
U
CleanSweep Smart Sweep- Internet Sweep
Csinsm32.exe
Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N
CleanSweep Useage Watch
CSUSEM32.EXE
Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
N
Cleanup
ONICTASK.EXE
Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet
N
Click Radio Tuner
clickr~1.exe
ClickRadio - subscription service playing radio music via the internet
N
Click Tray Calendar
ClickT~1.EXE
ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to.Not required - and can be turned off in the Client Access properties. It's a waste of resources
N
Client Access Express Welcome
cwbwlwiz.exe
Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers.
N
Client Access Help Update
cwbinhlp.exe
Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N
Client Access Service
CwbSvStr.Exe
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
Y
Client agent for ARCserve
W95AGENT.EXE
Part of Brightstor ARCserve Backup from Computer Associates.
X
ClientMan1
mscman.exe
Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!
N
Clik Status Monitor
toolsclickstat.exe
Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
N
Clipbook Service
Clipsrv.exe
Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N
ClipMate5x
ClipMt5x.exe
Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N
Clipmate6
CLIPMT60.EXE
Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N
Clipomatic
Clipomatic.exe
Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data
N
Clipsrv
Clipsrv.exe
Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N
ClipTrakker
ClipTrakker.exe
Cliptrakker - clipboard extender
U
CLMFrontPanel
clmpanel.exe
System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost
X
ClockSync
Sync.exe
ClockSynck - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available
U
ClockWise
CLOCKWISE.EXE
ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync
N
CloneCD
CloneCDTray.exe
System tray for CloneCD - the only useful option is Hide CDR Media only available via this tray
U
CloneCDElbyCDFL
ElbyCheck.exe
From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
N
CloneCDTray
CloneCDTray.exe
System tray for CloneCD - the only useful option is Hide CDR Media only available via this tray
U
Clotusorgreg0
prtStart.exe Orgprt.exe
Lotus SmartSuite related. In a Lotus\OrgReg folder.
X
ClrSchLoader
Loader.exe
Clearsearch variant of IGetNet
X
Cmd
cmd32.exe
Added as a result of the P2P.TANKED VIRUS!
X
CME
cme.exe
Part of Gator advertising spyware - see here for removal instructions
U
C-Media Echo Control
EchoCtrl.exe
C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer (below)
N
C-Media Mixer
Mixer.exe
C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
X
CmeSYS
CMEsys.exe
Part of Gator advertising spyware - see here for removal instructions
X
CmeUPD
CMEupd.exe
Part of Gator advertising spyware - see here for removal instructions
N
CMGrdian
CMGrdian.exe
One of the McAfee shared components.
U
CMPDPSRV
CMPDPSRV.EXE
Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more. Installed with some Compaq and Lexmark printers
N
cnet
kontiki.exe
Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
X
CnsMax
Internat.exe
Added as a result of the POINTEX VIRUS!
X
CnsMin
Rundll32.exe CNSMIN.DLL, Rundll32
Appears as Chinese Keywords in the Add/Remove programs box and symptoms are a whole list of rubbish URL's in your Internet Explorer history. Clear history does not remove these. For more information see here
N
CnxDslTaskBar
CnxDslTb.exe
Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
U
Codename Dashboard
dashboard.exe
Codename: Dashboard - an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time
X
Coldlife -icmp
Systray.exe
Added as a result of the FSERVE VIRUS! Note - this is not the real SysTray.exe
U
coloreal
coloreal.exe
Makes colours sharper and brighter, but will only work with coloreal capable monitors
N
Colorific Control Panel
Hgcctl95.exe
From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor
X
COM Service
mscom32.com
Added as a result of the BEASTY.H VIRUS!
X
COM Service
msjclh.com
Added as a result of the PLUX VIRUS!
X
COM Service
msynvr.com
Added as a result of the BEASTY.G VIRUS!
X
ComcastSUPPORT
tgkill.exe
Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an enhanced support and self-repairing tool. This is beta at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
X
COMCFG
comcfg.exe
Added as a result of the TOADCOM.A VIRUS!
U
COMDRV32
svdhost.exe
Orvell Monitoring 2003 - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/
N
COM-IP
COMIP.EXE
COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
X
COMMAND
command.exe
Added as a result of the QQPASS.E VIRUS!
X
Command
Gotit.exe
Added as a result of the TITOG VIRUS!
X
Command
system.exe
Added as a result of the GATECRASH.A or GATECRASH.B VIRUSES!
N
CommCtr
commctr.exe
Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!. Available via Start -> Programs
U
Compaq Alerter
CPQAlert.exe
Compaq's Insight Manager Agent - a tool that allows for fault, performance, and configuration management. Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N
Compaq Computer Corp SCCenter Module
SCCENTER.EXE
For Compaq PC's. Part of Backweb
N
Compaq DMI
cpqdmi.exe
Compaq version of the Desktop Management Interface
N
Compaq Internet Setup
inetwizard.exe
For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
U
Compaq Knowledge Center
silent.exe & matcli.exe
For Compaq PC's. matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support. You decide.
N
Compaq Message Server
COMPAQ-RBA.EXE
Applies to CPQBootPerfDB below as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the Compaq Advisor/Compaq Message Screener application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the advanced tab. Not required and can cause problems
U
Compaq PK Daemon
cpqkl.exe
For Compaq laptops for programming user configurable keys. Not required unless you use them
N
Compaq Video CD Watcher
??
For Compaq PC's. MPEG viewer
Y
CompaqHW Comp Manager
cpqhcm.exe
Running on a Compaq laptop
N
CompaqPrinTray
printray.exe
Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
N
CompaqSystray
cpqpscp.exe
Compaq System Tray icon
N
COMSMDEXE
comsmd.exe
3Com tray icon
X
ComTry Web Searcher
wstray.exe
Comtry MP3 Downloader related - spyware
X
Config
service.exe
Added as a result of the ISRAZ.B VIRUS!
X
Config Loadation
iEEexplore.exe
Added as a result of the SDBOT.H VIRUS!
X
Config Loadatiorin
I3Explorer.exe
Added as a result of the SDBOT.H VIRUS!
X
Config Loader
scvhost.exe
Added as a result of the GAOBOT.AE VIRUS! Note - this is not the valid svchost.exe as described here
X
Config Loader
svchosl.exe
Added as a result of the GAOBOT.P VIRUS!
X
Config Loader
sysldr32.exe
Added as a result of the GAOBOT VIRUS!
U
ConfigSafe
AUTOCHK.EXE
ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
U
ConfigSafe
CFGSAFE.EXE
ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
N
ConfigServices
Config.exe
Part of initial setup on a Compaq PC
X
Configuration Loaded
wupdated.exe
Added as a result of the MOEGA VIRUS!
X
Configuration Loader
aim95.exe
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereasthe valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
cmd32.exe
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas the valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
IEXPL0RE.EXE
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereasthe valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
iexplore.exe
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas the valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
loadcfg32.exe
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereasthe valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
MSTasks.exe
Added as a result of the LOADCFG or SDBOT. Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas the valid iexplore.exe (IE) resides in C:\Program Files
X
Configuration Loader
service5.exe
Added as a result of the GAOBOT.AF VIRUS!
X
Configuration Loader
sycfg34.exe
Added as a result of the GAOBOT.AN VIRUS!
X
Configuration Loader
syscfg32.exe
Added as a result of the SDBOT.B VIRUS!
X
Configuration Manager
CNFGLD32.EXE
Added as a result of the SDBOT VIRUS!
X
Configuration Manager
Cnfgldr.exe
Added as a result of the SDBOT VIRUS!
N
Configuration Utility
CONFIG.EXE
Controls linksys wireless connection. Available from the Desktop
N
Configuration Wizard
Cfgwiz32.exe
Added as a result of a variation of the HACKTACK VIRUS! Not to be confused with the valid MS ISDN Configuration Wizard (Cfgwiz32.exe) in C:\Windows\System
N
Conmgr
conmgr.exe
Starts Winfax pro at startup
U
ConMgr.exe
conmgr.exe
Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
X
Connect2Party
connect2party.exe
Adult content dialler
N
ConnectionManager
CManager.exe
SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
X
ContentService
winservn.exe
Homepage hijacker
X
ContinueInstall
bpsinstall.exe
BrowserAid parasite
N
control panel
smctrlw.exe
System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X
Control Panel
System.exe
Added as a result of the DANI VIRUS!
N
ControlCentreTray
XWCTray.exe
System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc
N
Controller
WFXCTL32.EXE
From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
U
Cookie Cop 2
CookieCop.exe
Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add cookies related to their sites for the next time you return
U
Cookie Pal
CPBRWTCH.EXE
Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add cookies related to their sites for the next time you return
U
CookieJar
Cookiejar.exe
Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add cookies related to their sites for the next time you return
U
CookiePatrol
CookiePatrol.exe
CookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
U
CookieWall
cookie.exe
CookieWall from Analog X. Allows you to decide which internet sites can add cookies related to their sites for the next time you return
U
Cool Desk
cdesk.exe
Cool Desk is a virtual desktops manager. Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them. Not required but may be of use to you
U
CoolSwitch
taskswitch.exe
ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
U
CopernicPerUserTaskMgr
CopernicPerUserTaskMgr.exe
Automatic tasking feature of Copernic Pro multi-search engine tool
N
Corel Colleagues & Contacts Reminders
cffrem.exe
Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office
N
Corel Desktop Application Director
dadx.exe
The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
N
Corel Family & Friends reminders
CFFREM.EXE
Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic
N
Corel Registration
Remind32.exe
If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N
Corel Registration Reminder
Remind32.exe
If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N
Corel Reminder
NAVBROWSER.EXE
If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N
CorelCENTRAL 10
I_26dadCC.exe
CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs
N
CorelMedia FoldersIndexer8
MFINDE~1.EXE
Part of CorelDraw bundles for indexing media files - similar to fast find in MS Office
N
CorelMedia FoldersIndexer8
MFindexer.exe
Part of CorelDraw bundles for indexing media files - similar to fast find in MS Office
X
CoreSrv
coresrv.exe
Some IRC trojans/worms use this - see here for more information
N
CorrectConnect
CConnect.exe
Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
N
Country Select
pctptt.exe
Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
N
CountrySelection
pctptt.exe
Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
X
couponica
couponica.exe
Adware - see here
U
CP32NOT
CP32BTN.EXE
For the programmable one-touch buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
U
CPATR10
CPATR10.EXE
Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast
U
CPBrWtch
CPBrWtch.exe
Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add cookies related to their sites for the next time you return
Y
CPD_EXE
CPD.EXE
Firewall bundled with McAfee VirusScan 6.*
X
cpntmgc
wincomp.exe
Remote-control trojan from Electronic Group - see here
X
cpntmgc
winmgts.exe
Remote-control trojan from Electronic Group - see here
Y
CPQAcDc
CPQAcDc.exe
Compaq PowerCon power management software for laptops
U
CPQAlert
CPQAlert.exe
Compaq's Insight Manager Agent - a tool that allows for fault, performance, and configuration management. Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N
CPQBootPerfDB
CPQBootPerfDB.EXE
See Compaq Message Server above
Y
CPQCalib
CPQCalib.exe
Compaq PowerCon power management software for laptops
N
CPQDFWAG
CpqDfwAg.exe
For Compaq PC's. Runs Compaq diagnostics on every boot
U
CPQEASYACC
cpqeadm.exe
For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U
cpqeaui
cpqeaui.exe
For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U
cpqek
kcpqek.exe
For Compaq PC's. Easy Access button support for the keyboard
U
CPQInet Runtime Service
CpqInet.exe
For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers
N
CPQINKAGENT
cpqinkag.exe
That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
U
cpqns
cpqnpcss.exe
Related to Compaq.Net - not required if you don't use that
Y
CPQSTUTFIX
stutfix.exe
For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton
X
CPU Manager
cpumgr.exe
Added as a result of the PANDEM.B VIRUS!
U
CPUcool
Cpucool.exe
Program to keep the processor cool when idle in overclocked systems. Also available via Start -> Settings -> Control Panel
X
cqlyg
world_cup_.bat
Added as a result of the WCUP VIRUS!
N
CQSCP2P SERVER
??
Compaq printer utility which is required in the startup menu in order to make the printer work correctly.
N
CQSCP2PS
??
Compaq printer utility which is required in the startup menu in order to make the printer work correctly.
U
cracked_windows1
cracked_windows1.exe
Cracked Windows popup killer
N
CrazyTalk Serve
rundll32.exe CrazyTalk.dll, DIIServeMediaFile
CrazyTalk from Reallusion - the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions. Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS
N
CreateCD
Createcd.exe
Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
N
CreateCD50
Createcd50.exe
Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
N
Creative AGP Wizard
agpwiz.exe
Part of Creative's BlasterControl
N
Creative Launcher
CTLauncher.exe
For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
N
Creative PCI Audio Configuration Utility
starter.exe
System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer
N
Creative Service for CDROM Access
Ctsvccda.exe
Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
X
Creative.exe
Creative.exe
Added as a result of the PROLIN VIRUS!
N
CreativeDiscNotifier
CTNOTIFY.EXE
For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel
U
CreativeMixer
CTMIX32.EXE
Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the speaker icon. Not required unless you adjust any settings otherwise available via the standard icon
N
CriticalUpdate
Wucrtupd.exe
MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site
X
cronos
MARCO!.SCR
Added as a result of the OPASERV.G VIRUS!
U
Crystal 3D Audio Control
CWD3DSND.EXE
Crystal 3D Audio sound driver.
U
CSINJECT.EXE
CSINJECT.EXE
Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes.
Y
CSRSS
CSRSS.EXE
Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X
CSRSWIN
??
Added as a result of the WINSHELL.50 VIRUS!
X
CSRSX
??
Added as a result of the WINSHELL.50.B VIRUS!
U
CSS_Central
CSS_1631.EXE
CSS Communication Agent (95 Host) from Command Software Systems CSS Central? provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console.
Y
CSScheduleCheck
SCHWIZEX.EXE
Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
X
csss
Csss.exe
Added as a result of the BALICK VIRUS!
Y
ct
ct.exe
ct.exe is a file is for the HP Learning Adventure softwareand if you use this software it is required to run it
N
CTAVTray
CTAvTray.exe
For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ
N
CTDVDDet
CTDetect.exe
Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
N
CTDVDDet
CTDVDDet.exe
Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
U
ctfmon
ctfmon.exe
CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
U
ctfmon.exe
ctfmon.exe
CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
X
ctfmon
taskmgr32#.exe
Added as a result of the SOWSAT.B VIRUS! where # is a number from 0 to 9
X
Ctfmon.exe
ctfmon32.exe
CoolWebSearch parasite related - hijacking to Slawsearch.com
N
CTHELPER
CTHELPER.EXE
CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative?s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a leave alone background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
Y
CTPDPSRV
CTPDPSRV.EXE
Printer driver (in the WINDOWS\System32\spool\DRIVERS\W32X86 folder).
N
CTRegRun
CTRegRun.exe
For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative
N
CTStartup
CTEaxSpl.exe
Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard
U
CTsysVol
CTSYSVOL.exe
Creative sound card volume controls
Y
cuagentExe
Cuagent.exe
Command Antivirus related
X
cuo
cuo.exe
Added as a result of the BUGBEAR VIRUS!
N
CursorXP
CursorXP.exe
CursorXP from Stardock - tool for creating mouse cursors
N
CuteMX
CuteMX.EXE
File sharing utility
Y
CVPND
cvpnd.exe
Sub-system used byCisco VPN client for making a connection to a remote IPSec server
N
cwbckver
cwbckver.exe
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to.Not required - and can be turned off in the Client Access properties. It's a waste of resources
N
cwbinhlp
cwbinhlp.exe
Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N
cwbsvstr
cwbsvstr.exe
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
N
CXMon
Hpi_Monitor.exe
Autodetects when a HP camera is attached to the computer and launches the HP Photoimaging Software. Available via Start -> Programs
N
Cyber
cyberchk.exe
Likely to be found in a directory called Belkin and pops up a dialog box saying It's time to Clean your Laser lens, with the window title PMC Laser Lens, referring the CD/CDRW/DVD drives. If you find anything more please let me know
U
Cyber Trio
showmode.exe
From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs
N
CyberMedia Agent
CMAGENT.EXE
Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled
X
CyberWolf
CyberWolf.exe
Added as a result of the KICKIN.A (or CYDOG.C) VIRUS!
X
CyDoor
CD_Load.exe
Adware. Check here for information about Cy-Door and here for a program that can remove it
X
CydoorUpdate
CD_Load.exe
Adware. Check here for information about Cy-Door and here for a program that can remove it
N
CyphTray
CyphTray.exe
Cypherus - encryption software
N
D066U Utility
D066UUTY
TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software
U
D4
D4.exe
Dimension 4 - network time synchronization software
N
DACONFIGEXE
daconfig.exe
3Com NIC Diagnostics. Available via Start -> Programs
Y
DadApp
dadapp.exe
DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked - direct from Dell
U
Daemon
Daemon.exe
Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
N
Daemon
DAEMON32.EXE
Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
U
DAEMON Tools-1033
Daemon.exe
Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
N
Daily Planner
dayplan.exe
Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them
N
Dap
DAP.exe
Download Accelerator Plus from SpeedBit - download manager/accelerator
X
DarkDevil.Grasiele.BR
Grasiele.VBS
Added as a result of the LEMBRA VIRUS!
X
DashIE
??
Dash Power Shopping tool bar in IE - DATA MINER
X
Data
System.dat.vbs
Added as a result of the BISCUIT.A VIRUS!
N
Data LifeGuard
BACKWE~1.EXE
Data LifeGuard diagnostic tools for Western Digital's series of hard drives
N
Data LifeGuard LifeLine Lite installer
DLGLI.EXE
Backweb installer - see here
X
Data789
Regedit.exe ....data789.tmp
Homepage hijacker
N
DataCaching
FlashKsk.exe
SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the Unplug and Eject Hardware System Tray icon
N
DataLayer
DataLayer.exe
Nokia PC Suite 5 - A collection of powerful tools that you can use to manage your phone features and data.
N
DataViz Messenger
DvzMsgr.exe
DataViz Documents to Go - allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts
X
Datcheck
datcheck.exe
Added as a result of the KEYPANIC VIRUS!
X
Date Manager
datemanager.exe
Date Manager - calender program. Spyware/adware based provided by The Gator Corporation
X
DateMakerIntl
DateMakerIntl.exe
Premium rate dialler also referred to as the PORNSPA.F VIRUS!
N
DAupdate
DAupdate.exe
DoubleAgent content manager
Y
DAW9532.exe
DAW9532.EXE
Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software.
U
DayToday
DAYTODAY.EXE
DayToday from RoboMagic Software Corp. Displays the date on the taskbar
U
DAZEL Delivery Agent
DcDaemon.exe
Control and send documents, etc, to any destination - see here
N
DCfssvc
dcfssvc.exe
Associated with digital cameras and known to cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. It is even money if you will be able to read the files off the camera without this
X
DDCActiveMenu
DDCActiveMenu.exe
As below
X
DDCM
DDCMan.exe
Digital Distribution Channel from Wild Tangent - adware
X
DDCMan
DDCMan.exe
Digital Distribution Channel from Wild Tangent - adware
X
ddeproc
ddeproc.exe
Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
N
DeadAIM
rundll32.exe DeadAIM.ocm, ExportedCheckODLs
DeadAIM - feature enhancing product for AOL's Instant Messenger program
X
Debug
DebugW32.exe
Added as a result of the GUBED VIRUS!
X
Default web browser
IexpIore.exe
Added as a result of the OBLIVION.B VIRUS! Note - don not confuse IexpIore.exe with iexplore.exe (Internet Explorer), the first has a captial i in place of lower case L
U
defwatch
defwatch.exe
Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U
Delay
delayrun.exe
On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
U
Delayrun
delayrun.exe
On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
N
Dell Alert
DAMon.exe
Dell Alert utility, that's supposed to make interaction with Support easier
U
DellDMI
delldmi.exe
Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards?
U
DELLMMKB
DELLMMKB.EXE
Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N
DellSC
dellsc.exe
Dell Solution Center - web-based troubleshooting tools and educational offerings
U
DellTouch
DELLMMKB.EXE
Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N
DelTmp
DelTemp.exe
Added to the startup list after installing a Creative SoundBlaster Audigy soundcard.
N
DeltTray
deltray.exe
System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel
U
demon
demon.exe
Part of the French Wanadoo ADSL extense pack
U
DepFrez
frzstate.exe
Deep Freeze from Hyper Technologies. Freezes the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example
X
Desire
desires.exe
Adult content dialler
N
DeskColor
DESKCOLOR.EXE
Provides transparent icon text backgrounds and coloured icon text
N
Deskflag
Deskflag.exe
DeskFlag - animated USA flag on the desktop
U
Desksite CMA
cma.exe
Desksie CMA siftware - retrieves new content from the Desksite Data Center
N
Desktop Architect
DATRAY.EXE
Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc
N
Desktop Plant
AZARE10S.PLT
Vritual plant from here - this version is an Azalea, there are others so the filename may be different
N
Desktop Weather
THE WEATHER CHANNEL.exe
Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc
N
desktopmgr
desktopmgr.exe
Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the Blackberry
U
DesktopX
DESKTOPX.EXE
A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking
N
deskup
deskup.exe
Adds Iomega Zip drive icons to the desktop
U
detect
idetect.exe
iNTERNET Turbo from Clasys Ltd. It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds. If you find it helps your connectivity leave it enabled
N
Detector
detector.exe
USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software
U
DEventAgent
eventagt.exe
DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X
DevicePath
Proyecto1.exe
Added as a result of the GRUEL VIRUS!
X
DevicePath
Root.exe
Added as a result of the GRUEL VIRUS!
U
devldr16
devldr16.exe
Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use Sound Play Control and Sound Recorder. To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable Creative SB16 Emulation under Creative Miscellaneous Devices
Y
dhcpagnt
dhcpagnt.exe
Intel DSL modem driver.
N
diagent
diagent.exe
System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X
Dialer
rundll32.exe msa32chk.dll
Unidentfied malware
X
DialNet
mxt32.exe
Adult content dialler
N
Dialog Box Assistant
OSDEx.exe
Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders
N
Dialog Helper
PDDLGHLP.EXE
Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
N
DigiGuide
CLIENT.EXE
TV guide and reminder
N
DigiGuide
client01.exe
TV guide and reminder
N
Digital Dashboard
devgulp.exe
For Compaq PC's. Loads Digital Dashboard options
N
Digital Line Detect
DLG.exe
Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
N
Digital River eBot
downlo~1.exe
Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here
N
DigitalWizard
ISWizard.exe
InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N
DigitalWizard Monitor
dwMon.exe
InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N
DIGStream
digstream.exe
DIGStream Cache Manager - part of ESPN Motion that periodically checks for new videos periodically, downloading them in the background is available. Starting ESPN Motion starts digstream automatically
U
Dimension4
d4.exe
Atomic clock synchronisation freeware - starts-up, adjusts the system clock, then shuts down
X
Dino3
dino3.exe
Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X
Dir1
caKe
Added as a result of the CAKE VIRUS!
U
Direct Update
DUControl.exe
DirectUpdate dynamic DNS updater
N
DirectCD
DirectCD.exe
DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
U
DIRECTVDSL
Directvdsl.exe
Starts DirectTV DSL modem at boot up. Can also be started manually
X
DirectX
ddhelp32.exe
Added as a result of the BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe
X
directx
Directx.exe
Added as a result of the SDBOT.D VIRUS!
X
DirectX
DirectX.exe
Added as a result of the BLAXE VIRUS!
X
directx
NTCmd.exe
Added as a result of the SDBOT.D VIRUS!
X
directx
PipeCmd.exe
Added as a result of the SDBOT.D VIRUS!
X
directx
Sqlexploit.exe
Added as a result of the SDBOT.D VIRUS!
X
DirectX For Microsoft Windows
dtxservice.exe
Added as a result of the PROGENT VIRUS!
X
DirectX64
DirectXset.exe
Added as a result of the BROWNEY.A VIRUS!
U
Dirkey
Dirkey.exe
Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders
N
Disc Detector
CtNotify.exe
For Creative sound cards. Detects when you insert a CD, DVD, etc
N
DiscoverDeskshop
Deskshop.exe
Discover Deskshop - single use virtual credit card
N
Disknag
disknag.exe
Dell program that reminds you to make your backup diskettes
N
DisplayTrayIcon
TrayIcon.exe
System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display
N
Distiller Assistant 3.01
DISTASST.EXE
From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
U
distributed.net client
DNETC.EXE
Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses
Y
Dit
dit.exe
Drive Icon and Label Utility - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found
N
DiTask.exe
DiTask.exe
Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs
X
DivX Updater
DivX.Exe
Added as a result of the MASTAK VIRUS!
N
DJREGFIX
regedit /s c:\hp\djregfix.reg
DJRegFix showed up first in WinME as a clever way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This utility adds the functionality and compatibility HP forgot to add in its WinME drivers
U
DkService
DkService.exe
From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. Used to schedule defragmenting on a regular basis and not required if you do so manually on a regular basis
X
Dkware lptt01
dkware.exe
New variant of the RapidBlaster parasite (in a DonkeySoft folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y
dla
tfswctrl.exe
Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones
N
DlaTray
Dlatray.exe
On HP PCs, tray icon for dla above
X
dlder
dlder.exe
Advertising spyware. Considered to be one oft the worst - even creating a fake explorer.exe file. Can be installed via versions of Grokster, Lime Wire and KaZaA amongst other file-sharing utilities (see here). Reported in the past as a virus
X
DlDir1
caKe
Added as a result of the CAKE VIRUS!
N
DLF_00000B00
Vcdlf.exe
Known to cause problems with Out of memory errors (see here). Otherwise, it's purpose is unknown
N
DLG
DLGCHBW.exe
Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
N
DLHelperEXE
WATCH.exe
Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
N
D-Link AirPlus DWL-650+ Utility
WLANMON.exe
D-Link Air Plus Wireless PC modem connection monitor
X
DLL Service Manager
??
Added as a result of the RPCBOT.F VIRUS!
X
DLL32
dllmem32.exe
Added as a result of the KWBOT.E VIRUS!
X
dluca
dluca.exe
Adult content dialler - see here
X
dluca
dluca.exe
Added as a result of the DLUCA.C VIRUS!
X
DM mgr
dm_mgr.exe
Added as a result of the JITTAR VIRUS!
N
DMILDR
dmildr.exe
Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs
N
DMISL
DMISL.EXE
DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
N
DMISLAPP
DMISLAPP.exe
DMI similar to above
X
Dnar
Dnar.exe
Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here
Y
DNE Binding Watchdog
rundll dnes.dll, DnDneCheckBindings
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
Y
DNE DUN Watchdog
rundll dnes.dll, DnDneCheckDUN13
Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
U
DNS2GoClient
dns2goclient.exe
DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?
X
DocTor
Doctor.exe
Added as a result of the DOTOR VIRUS!
N
DocuMagix Init
PWATCH.EXE
PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
U
Don't Panic
dontpanicdemodp.exe
30-day trial version of Don't Panic privacy software from Panicware. Clean up Internet tracks and quickly hide personal documents with this privacy suite.
U
Don't Panic Pop-Up Stopper
dpps2.exe
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N
Download Accelerator Plus 5.0
DAP.exe
Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based
X
Download Plus
DownloadPlus.exe
DownloadPlus parasite - opens pop-up adverts
N
Download Wonder
DownloadWonder.exe
Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features
X
DownloadWare
dw.exe
DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N
DPAgnt
DPAgnt.exe
digitalPersona fingerprint scanner
Y
Dpcnav
dpcnav.exe
DirecWay from DirectTV satellite based high-speed internet access
Y
DPCProxyLoadOnStartup
dpcstart.exe
DirecWay from DirectTV satellite based high-speed internet access
Y
Dpcstart
dpcstart.exe
DirecWay from DirectTV satellite based high-speed internet access. Proxy software
U
dpps2
dpps2.exe
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N
Drag'n'Drop_Autolaunch
Autolaunch.exe
Iomega HotBurn - CD-RW burning software
N
DriveLED
OODLed.exe
O&O DriveLED - displays your HDD LED on your monitor. Start manually
X
Driver32
Scam32.exe
Added as a result of the SIRCAM VIRUS!
N
DriveSelect
driveselect.exe
DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs
U
dRMON SmartAgent
SmartAgt.exe
Part of the network monitoring program group for 3Com NIC cards. See here for more info
X
drmu
W95Mm.exe
Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread
N
DrvListnr
DrvListnr.exe
Analog Devices SoundMAX soundcard related.
N
drvlsnr
drvlsnr.exe
Compaq/ADI SoundMAX integrated digital audio controller related
X
drvr32h
drvr32h.exe
Added as a result of an unidentified VIRUS!
X
drvrmanager
drvrquery32.exe
Added as a result of the BOOHOO VIRUS!
U
DS Clock
dsclock.exe
Digital desktop clock including synchronization with atomic servers - see here
X
dsa
dsa.exe
Homepage hijacker - redirecting to downseek.com
N
DSentry
DSentry.exe
Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
N
DSL Monitor
spdstrm.exe
Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y
DSLagentexe
DSLagent.exe
Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection
X
DSS
dssagent.exe
DSSAgent by Br?derbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info
N
DU Meter
DUMETER.EXE
Hagel Technologies internet bandwidth monitor
N
dumprep 0 -k
dumprep 0 -k
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
N
dumprep 0 -u
dumprep 0 -k
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
U
DVDBitSet
DVDBitSet.exe
DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
N
DVDSentry
DSentry.exe
Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
Y
Dvp95
Dvp95.exe
Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine
Y
dvpapi9x
DVPAPI9X.exe
Command AntiVirus for Windows 95/98/Me
Y
DvpInitExe
Dvpinit.exe
Command Antivirus related
Y
dvprpt
Dvprpt.exe
Command Antivirus real time protection
U
DVSync
dvsync.exe
DVSync is the program that allows you to synchronize your daVinci?s PDA's data with your Personal Information Manager on the PC
X
dw
dw.exe
DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N
DwlClient
support.exe
Download manager for Dell support alerts
X
DxLoad
DX3DRndr.exe
Added as a result of the GIBE.B VIRUS!
N
DXM6Patch_981116
p_981116.exe
Win32 cabinet self extractor. More info here
X
DyFuCA
optimize.exe
Adult content dialler - see here
X
DyFuCA Active Alert
actalert.exe
Adult content dialler - see here
N
E6TaskPanel
TaskPanl.exe
Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space
U
eabconfg.cpl
EabServr.exe
Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X
Eac Download
download.exe
Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
X
Eac_Cnry
canary.exe
Added as a result of the CANARY VIRUS!
U
EACLEAN
eaclean.exe
For Compaq PC's. Easy Access button support for the keyboard
X
EanthologyApp
EANTHO~1.EXE
Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here
N
Eapcisetup
sbsetup.exe
Rockwell RipTide soundcard application software. Sound works without it
N
EAPCISETUP
wizard.exe
Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
N
EarthLink ToolBar 5.0
etoolbar.exe
EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time
U
Easy Key
easykey.exe
For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
N
Easy Start Button
esb.exe
Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
X
EasyDates_nl
EasyDates_nl.exe
Adult content dialler
U
EasyKey
easykey.exe
For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
X
easyServ
Server.exe
Added as a result of the EASYSERV VIRUS!
U
EasySync Pro
XCPCMenu.exe
EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes
U
EasyTuneIII
EasyTune.exe
Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U
EasyTuneIV
ET4Tray.exe
Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
N
EbatesMoeMoneyMaker
wjview ...Code
Ebates is a website that provides discounts from purchases from many websites. Discounts are automatic if on the Ebates listing. Discounts are paid in cash quarterly
X
eBay Toolbar
EBAYTBAR.EXE
eBay Toolbar - reportes as spyware as it phones home
U
eBoard
Eboard.exe
eMachines multimedia keyboard manager. Required if you use the extra keys
N
eBot
DownloadWizard.exe
eBot from Digital River - helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'. Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs
X
E-Card
ecard.exe
Added as a result of the YODI VIRUS!
N
EDLoader
DTLoader.exe
Effective Desktop from MiniStars Software - desktop management software no longer being supported
N
eFax.com Tray Menu
HotTray.exe
eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
X
efaxs lptt01
efaxs.exe
New variant of the RapidBlaster parasite (in a efaxs folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
Efpap.exe
Efpap.exe
Easy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching
U
ehTray
ehtray.exe
eHome Media Center PC related
U
Eicon NetworksLAN_DAEMON
watch.exe
Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually
U
Eicon TechnologyLAN_DAEMON
watch.exe
Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually
X
eixfi
china.bat
Added as a result of the WCUP VIRUS!
U
Elbycheck
ElbyCheck.exe
From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
X
Element
Element.txt
Added as a result of the ELEM VIRUS!
N
elm
Elmenv.exe
ViaTech eLicense for securing, distributing and selling music online
U
ELSA WINman Suite
Winmsuit.exe
Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU
Y
ElsaCapiCtl
Rcapi.exe
Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem
U
ELSAChipGuard
elsavect.exe
ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking
U
EM_EXEC
EM_EXEC.EXE
Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as SmartMove. If you disable it and find you don't need it leave it disabled
N
EMA.exe
EMA.EXE
Time management system which helps you to manage your time and appointments
U
eMachines eBoard
Eboard.exe
eMachines multimedia keyboard manager. Required if you use the extra keys
X
eMailEncryption
VELOZSYS.EXE
eAcceleration Stop-Sign related - foistware. Read their privacy statement here
N
EN4060C Taskbar
en4060ct.exe
Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
N
Encarta Dictionary Quickshelf
QSHLFED.EXE
Provides quick access to Encarta's Dictionary features?
N
ENCMONITOR
monitor.exe
The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it
N
Encoder Agent
WMENCAGT.EXE
MS Windows Media Encoder, which already has a shortcut inthe Start Menu if installed
U
Encompass_ENCMONTR
ENCMONTR.EXE
Optional simple browser from Yahoo (Encompass)
Y
ENSApServer2_0
APSERVER.EXE
Intel AnyPoint Wireless II Home Network related.
N
ENSMIX32.EXE
ENSMIX32.EXE
Sound card driver.
U
EnsoniqMixer
starter.exe
Puts the Ensoniq mixer in system tray. From Ensoniq Technologies Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used. If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility
X
Enumerate Service
wsys.exe
Added as a result of the MANIFEST VIRUS!
U
eonemng
eOneMng.exe
eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC
U
ePrompter
ePrompter.exe
ePrompter - E-mail notification software
N
EPSON Background Monitor
STMS.EXE
Supposed to keep an Epson printer ready for quick printing. Users report little difference whether it is on or not
U
EPSON CardMonitor
EPSON CardMonitor1.0.exe
Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint
N
EPSON Status Monitor 3 Environment Check
e_srcv03.exe
According to the Epson info: Use this utility to automatically check for errors and also check the level of ink remaining. This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
U
Epson Stylus C62 Series
E-S0BIC1.EXE
Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U
Epson Stylus C82 Series
e_s0hic1.EXE
Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U
EpsonPhotoStarter
EPSON_PhotoStarter.exe
Only needed if you want to make full use of the capabilities of an Epson printer that included this
N
EReg
reg32.exe
EReg is a software registration tool incorporated on products such as those by Br?derbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it
X
eros.exe
eros.exe
Adult content dailler
Y
eSafe Protect
ESPWatch.exe
eSafe from Aladdin - internet security for gateway and E-mail servers
N
ESFTP
esftp.exe
ESftp - FTP client for transfering files between a local PC and another remote computer
N
ESS Daemon
Essd.exe
Related to an ESS based soundacard.
Y
Essdc
essdc.exe
Related to an ESS Solo soundcard. Seems as though it's required
N
ESSNDSYS
ESSNDSYS.EXE
Related to an ESS based soundacard.
Y
ESSOLO
ESSOLO.exe
Sound card driver that re-instates itself every time it's removed
Y
esspk
esspk.exe
ESS Technology modem speaker driver file. Required to get on-line with this modem
N
Ethernet
tcaudiag.exe
3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
X
Etraffic
JavaRun.exe
Marketing software from TopMoxie
Y
eTrust EZ Firewall
efpeadm.exe
eTrust EZ Firewall
Y
eTrustCIPE
ezdsmain.exe
eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior
N
Event Planner Reminders
PLNRnote.exe
Sierra Event Planner tray icon
N
Event Reminder
pmremind.exe
A calendar/alarm program that installs with Br?derbund Printmaster
U
EVENTLISTENER
EvLstnr.exe
Used with a Nikon digital camera to recognize when the camera is plugged in
N
eventmgr
eventmgr.exe
Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
N
Evidence Eliminator
ee.exe
Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis
N
evntsvc
evntsc.exe
Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it
U
EW Message Server
msg32.exe
Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices
N
eWare Startup
iWareStart.exe
eWare iWare task bar. Not required
N
Excite Platform
Exlaunch.exe
Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer
N
ExciteAssistantEXE
ASSISTANT.EXE
With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open
X
exe lptt01
exe.exe
New variant of the RapidBlaster parasite (in a Exe folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
execfg4
execfg4.exe
Added as a result of the ELECTRON VIRUS!
U
Exif Launcher
Exiflaquickdcr.exe
USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
U
Exif Launcher
QuickDCF.exe
USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
U
ExitKiller
Ekiller.exe
Exit Killer - automatically closes pop-up windows in your browser
X
Explkw
expup.exe
Keywords hijacker
X
explore
explore.exe
Added as a result of the NETBUS and other VIRUSES!
X
Explore
explore.exe
Adult content dialler - where explore.exe resides in the Windows or Wnnt folder
X
Explore
Explorer.exe
Added as a result of the IRC.FLOOD.G VIRUS! Note - this is not the valid Windows explorer.exe
X
explore.exe
Explore.exe
Added as a result of the GRAYBIRD.G VIRUS!
X
explorer
expl32.exe
Added as a result of the RATSOU VIRUS!
U
explorer
explorer.exe
Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR
X
Explorer
Explorer.exe
Added as a result of the DVLDR VIRUS! Note - this is not the valid Explorer.exe as it's in the Windows\Fonts directory
X
Explorer
shellexpl.exe
Added as a result of the GPIX and SHELDOR VIRUSES!
X
explorer
wscript.exe ??
Sneaky way to start any VBS script. Many viruses use VBS files
X
Explorer lptt01
explorer.exe
New variant of the RapidBlaster parasite (in a explorer folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Explorer which has the same executable name
X
Explorer32
Expl32.exe
Added as a result of the HACKTACK VIRUS!
U
Exshow95
EXSHOW95.exe
Support software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices
EzVCR recording software for the ASUS TV FM card. Available via Start -> Programs
N
EZDesk
EZDESK.EXE
Utility that remembers icon locations for each user and resolution. Available here
N
EzEjMnAp
EzEjMnAp.exe
For IBM Thinkpad Notebooks. Quote: The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually. Available via Start -> Programs
X
eZmmod
mmod.exe
Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
Y
ezPS_Px
ezSP_PxEngine.exe
Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings
Y
ezShieldProtector for Px
ezSP_Px.exe
Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings
U
EZSMART App
ezsmart.exe
EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported
X
ezula
eZmmod.exe
Regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
X
eZuluMain
eZuluMain.exe
Comes with KaZaA installation. Advertising Spyware. Not required but KaZaA won't work
X
f607
f607.exe
Added as a result of the URAT.B VIRUS!
U
fapmon
fapmon.exe
Fair Access Policy monitor for DirecPC/DirecWay internet access
N
fast
fast.exe
Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
U
FastCache
fc.exe
FastCache from AnalogX - speeds up browsing by resolving DNS requests locally
N
FastTrack Accelerator
SPEED UP.EXE
FastTrack Accelerator - speedup utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus
N
FastUsr
fast.exe
Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
U
FatPipe
DHCP
Software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U
Fatpipe Dialer
fpdialer.exe
See above
U
FBDirect
FBDirect.exe
Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
X
fc
runfc.exe
Added as a result of the CAMPURF VIRUS!
Y
FD_SAP
FD.exe
Genicom SAP Printer driver.
U
FEELitDeviceManager
feelitdm.exe
Associated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
X
fegoze
SVCH0ST.EXE
Added as a result of the GRAYBIRD.D VIRUS!
U
Fellowes Proxy
R3proxy.exe
Installed with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
U
FG1_00
frntgate.exe
FrontGate MX - e-mail spam blocker
U
Fhtisxk
fhtisxk.exe
XtraKeys - keylogger (monitoring program). Given a U recommendation because it depends if you intentionally installed it. If you didn't treat it as X and uninstall or remove via Spybot S&D (for example)
N
FileFreedom_Plugin
wtm.exe
FileFreedom peer-to-peer sharing program
X
FileSoft
Wscript.exe UpdataFiles.vbs
Added as a result of the SST.B VIRUS!
U
Filterguard
Filtrgrd.exe
An icon located in the lower left of the screen and looks like a lifesaver. This icon is a ?short-cut? to access the basic features of SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by ?right-clicking? on the icon
X
Find Fast
Findfast.exe
Complete utter waste of space! Part of MS Office - searches disk drives for Office file types to make opening them easier
Y
Find Virus Launch Program
fvlaunch.exe
Part of Dr. Solomon's Antivirus
N
FinePrint Dispatcher vx
FPDISPxA.EXE
FinePrint - virtual printer for use with any printer. Search for dispatcher here for more information. If removed, it will re-install when program is run - hence the Y recommendation
Y
Fix-it
mxtask.exe
Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required
Y
Fix-it AV
memcheck.exe
Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
N
FlashPath Monitor
SDSTAT.EXE
System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
N
FlashPath Status
SDSTAT.EXE
System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
U
Flexicd
Flexicd.exe
CD player - part of the Win95 Power Toys
X
FLooDNeT
FLooDeR.exe
Added as a result of the FLOODNET VIRUS!
Y
FltProcess
msinet.exe
Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done
X
FlyswatDesktop
flydesk.exe
Advertising spyware
U
FmctrlTray
Fmctrl.EXE
Genius SM-Live Control Panel. Enhancesaudio output through Genius sound cards (makes a big difference andworth the 3MB Ram used)
X
Folder Service
wssdtu.exe
Added as a result of the MANIFEST VIRUS!
N
Folding@home
WINFAH.EXE
Folding@Home is a distributed computing project which studies protein folding, misfolding, aggregation, and related diseases - must be running in order to access the internet to upload to the servers. Available via Start -> Programs
N
FontFix
fontfix.exe
Not required but what is it?
X
foobin lptt01
adaware.exe
New variant of the RapidBlaster parasite (in a foo1 folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y
FoolProof
fpwinldr.exe
FoolProof Security PC security software from SmartStuff
Y
FoolProofSweep
??
Part of FoolProof Security PC security software from SmartStuff
N
Forbes
ForbesAlerts.exe
Forbes Business News Alerts - displays business news headlines in a little window on the screen
X
ForceShow
rundll32.exe QaBar.dll, ForceShowBar
AdultLinks/QAbar parasite related
N
Forget Me Not
AGRemind.exe
Calendar reminder part of American Greetings? CreataCard?
N
FotoStation Easy AutoLaunch
FotoStation Easy AutoLaunch.exe
Installed with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either
U
FourthDay
FourthDay.exe
The Fourth Day - astronomical clock and almanac for your system tray
Y
FP Loader
loadfp.exe
FoolProof Security - PC security software from SmartStuff
N
Fpx
mnmsrvc.exe
Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations
Y
Freedom
Freedom.exe
Zero Knowledge Freedom - Anti-Virus, Personal Firewall and Parental Control, it also blocks ads, safeguards your personal information, encrypts your passwords, and much more
U
FreeMem Pro
FMEMPRO.EXE
Some users swear by memory management utilities such as FreeMem Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
U
FreeMemVn2
FreeMem.exe
Some users swear by memory management utilities such as FreeMem but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
U
FreeRAM XP
FreeRAM XP Pro x.exe
Some users swear by memory management utilities such as FreeRAM XP Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind. x indicates the version number
U
freesurfer
fs20.exe
EMS Free Surfer mk II - pop-up stopper
N
FriendlyWebQuick-Launch
SELFCERT.EXE
selfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
U
FRISK FP-Scheduler
F-Sched.exe
Scheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis
Y
FRW_EXE
FRW.EXE
ConSeal Signal9 firewall - now McAfee Personal firewall
F-Secure Antivirus - carry out scheduled virus scans automatically
U
fsp
fsp.exe
Folder Shield - hide entire directories and thus prevent access by anyone else to your personal files and documents
Y
fspr
FolderShield.exe
Folder Shield - hide personal files and folders
N
FSScrCtl
FSScrCtl.exe
Screen saver control applet used by the Stardust Screen Saver Toolkit and SolidWorks Screen Saver
U
fsserv
fserv.exe
Farsighter Server - monitors a remote computer invisibly by streaming video to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time
Y
F-StopW
F-StopW.exe
F-Prot anti-virus background scanner by F-Risk Software
X
FSW
FSW.exe
FreeScratchAndWin parasite
U
Ftpqueue
Ftpsched.exe
Part of WS_FTP Pro from Ipswitch. Queueing facility for scheduling FTP transfers
Y
fwenc.exe
fwenc.exe
Check Point SecuRemote VPN client - dynamic and fixed IP addressing for all ISP services - dial-up, cable modem, or DSL - the ideal solution for telecommuters and mobile workers
N
fwrastrc
fwrastrc.exe
Dial-up software for Friendly Technologies/1NationOnLine free ISP
U
fxredir
fxredir.exe
Canon MultiPASS fax redirector
N
Gadwin PrintScreen
PrintScreen.exe
Gadwin PrintScreen - utility to capture, print or save the current window
U
Gainward
TBPanel.exe
Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
N
GameSpot
kontiki.exe
Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
U
GammaHotKeys
setgamma.exe
Part of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop
X
Gator
gator.exe
Spyware - see here for removal instructions
X
Gator eWallet
gator.exe
Gator eWallet from The Gator Corporation. Spyware - see here for removal instructions
U
GazelDisplay
gsyno.exe
BT Digital Access USB - Gazel ISDN installation System Tray icon
U
GBTray
GBTray.exe
System Tray icon access to GoBack (below)
N
GCC Reminder
gccrem.exe
Associated with AcraMax Greeting Card Creator.
N
GDrive
GDriver.exe
Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
N
Gearbox
confsvr.exe
NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here
X
GEDZAC
GEDZAC.exe
Added as a result of the GEMEL VIRUS!
N
GemStRmW
GemStRmW.exe
For a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually
X
general lptt01
general.exe
New variant of the RapidBlaster parasite (in a General folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y
Genie USB Monitor
USBmonitor.exe
Port monitor for an external USB hard drive. Required to enable access to the drive
N
Get Smile
getsmile.exe
Puts smilie faces in your E-mail. Run manually when required
N
GetRight Tray Icon
GETRIGHT.EXE
GetRight from Headlight Software - download manager for resuming downloads and choosing multiple download locations. The freeware version is/was spyware. The registered version isn't if you don't install the Aureate/Radiate software. Available via Start -> Programs
N
GhostStartService
GhostStartService.exe
Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard
N
GhostStartTrayApp
GhostStartTrayApp.exe
System Tray access to Norton Ghost - added from the 2003 version
Y
Gilat SOM Enumerator
dllhost.exe
For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y
GilatFTC
ftc.exe
For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y
GisdnLog
gisdnlog.exe
BT Digital Access USB
Y
Glide
Glidew32.exe
Cirque touchpad driver
X
GLSetIT32
isass.exe
Added as a result of a variant of the OPTIX PRO series of VIRUSSES!
X
GLSetIT32
msiexec16.exe
Added as a result of the OPTIX PRO series of VIRUSSES!
Y
Gmouse
Gmouse.exe
Amouse mouse driver - required if you use non-standard Windows driver features
U
Gnetmous
gnetmous.exe
Genius NetScroll+ mouse driver - required if you use non-standard Windows driver features
X
Go!Zilla
gozilla.exe
A variant for the Go!Zilla download manager, see above
X
Go!Zilla Monster Downloads
Go.exe
Download manager for resuming downloads and choosing multiple download locations. Advertising spyware
U
GoBack
GBMenu.exe
Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U
GoBack Polling Service
GBPoll.exe
Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U
GoBack Tray Icon
GBTray.exe
System Tray icon access to GoBack (above)
U
Goldensoft_MndlSvr
MndlSvr.exe
Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
N
GoogleDCClient
GoogleDCC.exe
Google Compute Client - only present if you installed the Google Toolbar with Google Compute client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click Stop Computing
U
GoToMyPC
g2svc.exe
ExpertCity GoToMyPc logon - web-based remote-access solution that allows individuals and companies to register their computers online and then securely access those computers from any web browser
N
GRA
gra.exe
Looks at system resources at startup and warns you if they have dropped. Contains links to the Disk Clean Up, Defragand Start Up Menu. It does have a link to a startup configuration utility. Similar to msconfig but can keep a list of disabled apps. Not really necessary. Only appears if you load the Gateway Startup Utility
U
Gravis Appawareloader
dbserver.exe
Looks like it's associated with Gravis game controllers and the Keyset Manager, allowing the user to program the buttons for games that don't support them
U
Gravis Xperience Driver Support
Grxp4exe.exe
Driver for Gravis game controllers such as the Eliminator Aftershock. Must be loaded if you run the supplied application software for the controller to be recognized. Start it manually via a shortcut if not used
N
GrdSys32
GrdSys32.exe
X-Stream ISP software. Offers free Net access funded by on-screen ads.
N
Greetings Workshop
GWREMIND.EXE
You really want to be reminded about somebody's birthday at the expense of resources?
X
gremier
wscript.exe gpremier.vbs
Added as a result of the GPREMIER VIRUS!
N
GrpConv
grpconv.exe
To facilitate the upgrade from Windows 3.1 to Win95/98, an executable file named GRPCONV.EXE is included with Win95/98. This file provides the translation of groups and group items to folders and links unless you need to access Win 3.1 Group files
X
gshp
zzgshp.vbs
Homepage hi-jacker
N
Gsiconexe
Gsicon.exe
ADSL modem monitor from Eicon Networks (as used by BT for its Broadband internet service for example). Can safely be disabled without affecting the connection - all this does is give an indication of connectivity and access to the diagnostic facilities
N
GSOrganizer
GSOrganizer.exe
GoldenSection Organizer - personal information manager
X
GStartup
GMT.exe
Gator spyware variant. See Gator
N
Gtwatch
gtwatch.exe
Associated with a Mustec scanner and not required
N
Guardian
CMGrdian.exe
McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
X
GustavVED
??
Added as a result of the OPASERV.H VIRUS!
X
gvagfxj
rundll32 ...gvagfxj.dll
Unidentified adware, spyware or virus
Y
gw port controller
PORTCT95.EXE
From a visitor - I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work. From the file properties, the file is known as Smart Thru Fax Drive Spy and is supplied by Samsung
N
GWMDMMSG
GWMDMMSG.exe
Used with internal modems on Gateway and vprMatrix PCs. This is the GTW modem messaging applet and is not required for the modem to work correctly
U
GWMDMpi
GWMDMpi.exe
Used with internal modems on Gateway PCs such as the 450SX Notebook. Required for audio settings to be maintained and does not remain in memory once run. See here for more information
U
gwum
gwum.exe
Gigabyte utility manager. Loads if you have a Gigabyte motherboard and got a full bundle of utilities installed. Monitors CPU, fans, BIOS etc. Only used by system tweakers
X
gyy
gyy.exe
Gator (and therefore spyware) related
U
H/PC Connection Agent
WCESCOMM.EXE
Active sync for use with Windows CE based palm PC
N
HalifaxHowardCluster
skinkers.exe
Howard the Weatherman desktop client from Halifax by Skinkers - marketing/messaging tool
U
HaMFrontPanel
hampanel.exe
Displays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless
U
Handy Backup 3.9
hbagent.exe
Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers
U
Hardware Sensors Monitor
hmonitor.exe
Utility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for overclocked systems
U
Hare
hare.exe
Hare - improve and optimize performance of desktop/laptop PCs
U
HawkEye
HAWK_95.EXE
Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
U
HawkEye IV Control Panel
HAWK_32.EXE
Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
X
Hbinst
Hbinst.exe
Hotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
N
HC Reminder
hc.exe
For Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed
N
HCDetect
HCDetect.exe
MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem
U
Hcontrol
hcontrol.exe
Hotkeys on an ASUS Notebook. Only required if you use the additional keys
N
HDtray
HDtray.exe
Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel
X
hellodolly
shost.exe
Added as a result of the YODO VIRUS!
X
helpctl.exe
helpctl.exe
Added as a result of the GASLIDE VIRUS!
X
HelpExp.exe
HelpExp.exe
Attune HelpExpress. Disable - see here
X
helpmanager
spoler.exe
Added as a result of the RANDEX.J VIRUS!
U
Hermes Messenger
DGDRHE~1.EXE
A LAN messenger alternative to WinPopUp - Digital Dreams Software
N
Hewlett Packard Recorder
Remind32.exe
HP multifunction registration
U
Hf
Hf.exe
Hide Folders - hide your folders so only you can view them
U
hfxp
hfxp.exe
Hide Folders XP - Win2K/XP version of the above
N
HGTXPEI
FirstReboot.exe
Herucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
U
Hibernation
hib32.exe
Reduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run of battery regularly
X
Hid.exe
hid.exe
Added as a result of the RATSOU.B VIRUS!
X
HideRun.exe
Hiderun.exe and svhost.exe and pro.gif
Added as a result of the BOOHOO VIRUS!
U
hidserv
hidserv.exe
This is the Human Interface Device Server for Win98SE/2000/Me/XP, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the controller for the keyboard sound controls on the USB andPS/2 keyboards
N
HistoryKill
histkill.exe
HistoryKill removes your web surfing path by removing the URL drop-list history, detailed history file, cache, and cookies in both IE and Netscape Navigator browsers. Available via Start -> Programs
U
hkcmd
hkcmd.exe
Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via the Display Properties in Control Panel
U
hkserv
HKserv.exe
Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS
U
hkss
hkss.exe
Compaq HotKey Support - multimedia keyboard support
U
Hmonitor
Hmonitor.exe
Hardware sensor monitoring program. Only required if you overclock your system and want to check on the status
N
Holiday Lights
Holiday Lights.exe
Holiday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start -> Programs
U
HomeAlarm
HomeAlarm.exe
Chameleon Clock - system tray clock replacement
U
Hook99startup
hk2re.exe
Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons, bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent
U
HookSys
HookSys.exe
SurfinGuard Pro - protects against all malicious code delivered through executables, scripting files, ActiveX and Java
U
Hot Corners
Hotc.exe
Hot Corners - lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen
U
Hot Key Kbd 2690 Daemon
SK9910DM.exe
Multimedia keyboard manager - required if you use any special keys
U
Hot Key Keybd 9910 Daemon
SK9910DM.exe
Multimedia keyboard manager - required if you use any special keys
X
Hotbar
Hbinst.exe
Hotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
U
HotIDE
hotide.exe
HotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks
U
HotkeyApp
HotkeyApp.exe
Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
U
HotKeysCmds
hkcmd.exe
Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via Control Panel -> Display Properties
N
HotSync Manager
hotsync.exe
Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start -> Programs
X
hotwetlove
hotwetlove.exe
Adult content dialler. Will not uninstall - components have to be manually deleted
U
HoverDesk
HoverDesk.exe
HoverDesk - desktop replacement software
Y
hp 1000 firmware
fwdl.exe
HP LaserJet 1000 related.
N
HP CD Writer
hpcdtray.exe
System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
N
HP CD-DVD
hpcdtray.exe
System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
X
hp center
BACKWEB-137903.exe
Based upon HP's own description from here - With the My HP Center, consumers have access directly from the desktop to Internet sites featuring special offers for HP customers ranging from personal finance and shopping to digital imaging and music I have classified this as adware. The number may change - if yours is different let me know
X
hp center UI
ShadowBar.exe
User Interface for HP Center
Y
HP IDScheduler
HPIDSCHD.exe
HP Instant Delivery Scheduler
N
HP Info Express
??
On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
N
HP Internet Center
SURFBRD.EXE
Loads the HP Internet center surfboard on startup. HP Internet Center allows you to customize the multimedia keys on the fly without having to go the Control Panel --> Keyboards to change them
N
HP JetDiscovery
HPJETDSC.EXE
HP JetAdmin software which monitors printing jobs on a network environment
N
HP JetSpeed Autostart
AUTOSTART.EXE
Autostart executable for the old multiplayer game HP Jetspeed
N
HP Parallel Port Test
hppt.exe
Associated with a HP ScanJet scanner
N
HP Precision Scan
hpmdlbwx.exe
Same as HP ScanPicture below
N
HP Presentation Ready
PresRdy.exe
HP Omnibook related: Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device
U
hp psc 2000 Series
hpobnz08.exe
System Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start
U
HP RecordNow
??
From HP Software for the CD writer. Do not prevent from starting unless the CD writer is never going to be used.
U
HP ScanPatch
HPScanFix.exe
Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used, then it is safe to remove or prevent from starting
N
HP ScanPicture
hpsplmwa.exe
HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
Y
HP SchedIndexer
hppschedindexer.exe
HP laserjet related
Y
hp Silent Service
HpSrvUI.exe
HP related
N
HP Simple Trax
Hpcron.exe
Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start -> Programs or Desktop Icon
N
HP Updates
??
On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
N
HP_dla
dlatray.exe
On HP PCs, tray icon for dla - which provides drive letter access to HP's and Veritas' version of DirectCD
N
HP-Aio Flight
Remind32.exe
HP multifunction registration
N
HPAIO_PrintFolderMgr
hpoopm07.exe
Directly from HP: This process has one purpose - detects if the device moves to a different port, and notifies other processes to look on the new port. For various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the HP icon installed on the desktop that points to hpodir07.exe works just fine if you need to use the scanner
N
hpaiodevice
hpodev07.exe
Direct from HP - Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when portable is chosen during installation). Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the icon installed on the desktop that points to hpodir07.exe works just fine if you need to use the scanner
N
HPAiODevice(hp psc 900 series) -1
hpobrt07.exe
Installed with a Hewlett Packard 900 series colour printer, scanner, fax, photo card slot printer, copier. Assumed to perform an identical function to hpaiodevice above
U
HPDJ Taskbar Utility
hpztsb04.exe
(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer
U
HPDJ Taskbar Utility
hpztsb05.exe
(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer
U
HPDJ Taskbar Utility
hpztsbol.exe
(1) Ghostscript device driver for printers understanding Hewlett-Packard's Printer Command Language - see here for more info
U
HPDJ Taskbar Utility
hpztsd02.exe
(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer
N
hpfsched
hpfsched.exe
HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
U
HPGamesActiveMenu
ActiveMenu.exe
Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally
N
hpgs2wnd
hpgs2wnd.exe
HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites. Available via Start -> Programs
U
HPHAxMON
HPHAxMON.EXE
Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use thisfeature and known to cause system crashes in some cases. x can be 1, 2 or 3 and depends upon driver version. Replaced by HPHmon04 (below) from version 4 onwards
N
HPHmon03
HPHMON03.EXE
Monitors the status of a HP printer. If you turn off the printer while still using the computer, a yellow triangle with exclamation mark will replace the original icon on task bar
U
HPHmon04
hphmon04.exe
Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature
X
Hphome
hphome.js
Homepage hijacker
N
HPHUPD04
hphupd04.exe
HP Photosmart software update checker and wizard launcher. Available via Start -> Programs
Y
hpjsiroute
hpjsira.exe
Related to HP laserjet printers and IP addresses. An IP address is appended to the name field - ie hpjsiroute192.168.1.2
Y
HpLamp
HPLAMP.EXE
HP Scanner Utility that controls your scanner?s light bulb. Needed if it's switched on. Also refer here for troubleshooting
U
HPLogiFinder
hp_finder.exe
HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
N
hpodblia
hpodblia.exe
HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
N
hpodlb08
hpodlb08.exe
HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
Y
hpppta
HPPPTA.exe
HP parallel port driver for certain hardware
N
HPPROPTY
HPPROPTY.EXE
HP LaserJet Toolbox
U
HPPWRSAV
HPPWRSAV.EXE
Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com, pick your OS option under the SUPPORT tab, follow the instructions and you will find an updated lamp control patch
Y
hpqcmon
hpqcmon.exe
From HP and related to digital imaging
U
HPSCANMonitor
hpsjvxd.exe
HP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner
Y
hpScannerFirstBoot
scannerfb.exe
HP scanner related
N
hpsjbmgr
hpsjbmgr.exe
HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup, unless the scanner is used every day, such as in a business environment
N
HPStart
hpstart.wsf
This a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot
U
hpsysdrv
hpsysdrv.exe
This item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP, if it can't tell that it is an HP it will not run. If unchecked, it can prevent the running of the Application Recovery CDs, the use of the multimedia keys, and the HP Instant Support. Also seen that without it running, the Riptide Sound card that was installed on some older HP computers stops working
N
HPU
ProvenTactics.exe
Proven Internet Marketing software
N
HPZTS04
hpzts04.exe
Hewlett Packard printer toolbox shortcut that resides in the system tray
Y
HREF.OCX
regsvr32.exe ....\HREF.OCX
HREF.OCX is an ActiveX control developed by xFX JumpStart and used to provide HTML-alike clickable links on Windows-based programs such as PopUpKiller
U
Hti
npdor.exe
Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required
U
HTpatch
htpatch.exe
HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%
X
huigezi
HgzServer.exe
Added as a result of the GRAYBIRD.C VIRUS!
X
HWINFO*
HWINFO*
Added as a result of the PUROL VIRUS! where * is a random character
Y
HWinst
??
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X
HXDL.EXE
HXDL.EXE
Believed to be spyware - made by a company called Alset. Also known as HelpExpress. Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
X
HXIUL.EXE
HXIUL.EXE
Believed to be spyware - made by a company called Alset. Also known as HelpExpress. Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
U
HydraVisionDesktopManager
desk98.exe
ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
U
HydraVisionViewport
viewport.exe
ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
X
I386
I386.exe
Added as a result of the MYPOWER VIRUS!
Y
I81SHELL
I81SHELL.exe
Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard
U
i8kfangui
i8kfangui.exe
Graphical interface for fan speed control
Y
iamapp
iamapp.exe
AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
N
ibmmessages
ibmmessages.exe
Allows IBM to push messages onto users' computers. Quote: The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport
U
Ibmpmsvc
ibmpmsvc.exe
Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes
U
IBMUltraBayHotSwapCPLLoader
IBMBAY2N.EXE
Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
N
IC_KEY_3
spvic.exe
Instant Chess related
N
ICH Synth
eusexe.exe
Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with SoundMAX integrated Digital Audio (Analog Devices Inc.) devices
U
iClean
iClean.exe
IEClean - advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy
N
iCn
NAG.EXE
iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist
N
ICO
ICO.EXE
Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
N
Icon Animation
HDE.EXE
Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
N
Icon Hearit 95
hearit95.exe
Audio desktop customization utility from Moon Valley Software. Resource hog
N
Icon Hearit 98
hearit98.exe
Audio desktop customization utility from Moon Valley Software. Resource hog
X
Icon lptt01
icon.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y
ICONCLNT
iconclnt.exe
APC PowerChute Tray Icon. Associated with the UPS listing
U
ICONDESK
ICONDESK.EXE
Small utility which will allow you the option of hiding or showing your desktop icons
N
Iconfig.exe
Iconfig.exe
Icon for LS-120 Superdisk
N
Iconoid
Iconoid.exe
Iconoid is a desktop icon manager
N
Iconsaver
Iconsaver.exe
IconSaver is a desktop icon manager
X
ICQ Hacking Pro
ICQpro.exe
Added as a result of a version of the NETSPY VIRUS!
N
ICQ Lite
ICQLite.exe
ICQ Lite - compact version of the popular messaging program
N
ICQ Plus
vplus.exe
ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs
U
ICSDCLT
rundll32.exe Icsdclt.dll, ICSClient
Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines
N
ICServer
Icserver.exe
Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
Y
ICSMGR
ICSMGR.EXE
Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you?re sharing the internet on various computers
N
ID Commander
IDCom.exe
Caller ID utility for identifying incoming telephone numbers
X
ID8525
ID8525.exe
ID8525 VIRUS and homepage hijacker!
X
ID8525
id85255.exe
ID8525 VIRUS and homepage hijacker!
X
IDE
ide.exe
Added as a result of the ASSASIN.F VIRUS!
X
IDE Loader
IDElibr32.exe
Added as a result of the XILON VIRUS!. Related to the game Diablo II
U
iDesktop
idesktop.exe
Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse
N
IDMan
IDMan.exe
Internet Download Manager - download files faster, schedule and resume
N
IDW Logging Tool
idwlog.exe
Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
U
IECleanAux
Ieboot6.exe
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup
X
iedll
iedll.exe
Homepage hijacker, redirecting to coolwwwsearch.com
X
IEDriver
IEDriver.exe
Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze
X
IELoader32
iexplore32.exe
Added as a result of the SPEX VIRUS!
N
ietsr
ietsr.exe
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc
X
Iexplore
iexplore.exe
Added as a result of the BOXER VIRUS!
X
Iexplore Services
iexplore.exe
Added as a result of an unidentified VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder
X
iexplorer lptt01
iexplorer.exe
New variant of the RapidBlaster parasite (in a iexplorer folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Explorer which has the same executable name
U
IFSplash.exe
IFSplash.exe
I-FORCE driver for force feedback steering wheel
N
igfxtray
igfxtray.exe
Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
X
iilc
IILC.EXE
Homepage hijacker
N
iIWiper
Systemwiper.exe
System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
Y
IJ75P2PSERVER
IJ75P2PS.EXE
Printer utility which is required in order to make the printer work correctly
U
iKeyWorks
IKEYMAIN.EXE
A4Tech wireless keyboard driver and utility
X
iLLeGaL
Mplayer.exe
Added as a result of the HOLAR.C (or GALIL@MM) VIRUS! Note - this should not be comfused with Windows Media Player which has the same filename
X
iLLeGaL.exe
Mplayer.exe
Added as a result of the HOLAR.C (or GALIL@MM) VIRUS! Note - this should not be comfused with Windows Media Player which has the same filename
N
iM Start Center
iM_Tray.exe
Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
Y
Image & Restore
IMAGE32.exe
Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
U
Imagefox
imagefox.exe
ImageFox 2.0 is an add-on graphics previewer for most Windows Open/Save As dialog boxes
N
imekrig
imekrig.exe
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
N
Imesh
??
Imesh is a file sharing system
N
Imesh Auto Update
??
Update check for above. Turn the update off under options
N
ImgIcon
ImgIcon.exe
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
ImgStart
ImgStart.exe
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
imjpmig
IMJPMIG.EXE
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese)
N
Imjpmig8.1
IMJPMIG.EXE
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese)
N
Imonitor
Plguni.exe
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
N
InCD
incd.exe
Ahead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk
N
InControl Desktop Manager
DMHKEY.EXE
For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
N
Incredimail
incredimail.exe
IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality
N
IndexSearch
IndexSearch.exe
Associated with PaperPort scanner software from ScanSoft
X
Inet Delivery
Intdel.exe
Spyware
X
Inet Delivery
intdel_2.exe
Spyware
X
Inetapi
Netapi.exe
Added as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
U
Inetd
INETD32.EXE
Windows Inet Daemon from Hummingbird Communications. Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons. Provides PCs with the full functionality of a UNIX workstation
U
inetinfo.exe
inetinfo.exe
Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)
X
InetMSN
msnet.exe
Added as a result of a variant of the SDBOT VIRUS!
U
Info Select
is.exe
Info Select from Micro Logic - personal information manager
X
Infoplay.exe
Infoplay.exe
Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to).
U
Infra-red Monitor
IRMON.EXE
System Tray access to infra-red devices. Not required unless you use infra-red devices
X
infus
infus.exe
Adult content dialler
U
Infuzer
Infuzer.exe
Infuzer - is a service that copies dates from the web or an email straight to your electronic calendar. Beware of the following adware trait - Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities
X
infwin
infwin.exe
Msview parasite variant
Y
Initialize8x8
8x8_init.exe
Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
N
Ink Monitor
InkMonitor.exe
Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
N
InkWatch
InkWatch.exe
Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
Y
InoRPC
InoRpc.exe
Associated with eTrust Antivirus/InoculateIT
Y
InoRT
InoRT9x.exe
Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here
U
InoTask
InoTask.exe
Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here
N
Install Pending Files
sifxinst.exe
Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?
N
InstallAurealDemos
InstallAurealDemos.js
Used to initialize the Aureal A3D demos InstallShield wizard
U
InstallBuddy
Ibtna.exe
InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync
N
Instant Update Center
reminder.exe
From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner
U
Instant Wireless Configuration Utility
WUSB11cfg.exe
Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
N
InstantAccess
INSTAN~1.EXE
From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
X
instit
instit.bat
Added as a result of the OPASERV.H VIRUS!
U
Intel Active Monitor
imontray.exe
Monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you overclock
U
Intel File Transfer
xfr.exe
Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U
Intel PDS
pds.exe
Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
U
Intel Product Number Utility
IntelProcNumUtility.exe
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
N
Intel PROSet Tray Icon
promon.exe
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U
Intellitype
type32.exe
For MS programmable keyboards. If you disable Intellitype in Startup, any Hot Keys that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them
U
IntelProcNumUtility
cpunumber.exe
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
Y
InterCheck Monitor
Icmon.exe
Part of Sophos ant-virus sofware
X
Interdll
Interdll.exe
Added as a result of the DELF family of VIRUSES!
X
Internal
??
Added as a result of the SMOTHER & TRANSLAT VIRUSSES!
X
InternalSystray
Kazza.exe
Added as a result of the OPTIXPRO.12.C VIRUS! Note - unlike the valid KaZaA executable, this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or
X
Internat Conf
bootconf.exe
Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
N
internat.exe
internat.exe
Language selection icon in system tray
X
Internat.exe
internat.exe
Added as a result of the NETSNAKE VIRUS! Note - the real internat.exe resides in %windir%\system\ (where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a ? icon wheras this version resides in %windir% and has a ZIP icon
X
internct
WinSocks5.exe
Added as a result of the GRAYBIRD.F VIRUS!
U
Internet Answering Machine
IAMNET~1.EXE
From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
X
Internet Config
svchosts.exe
Added as a result of the SDBOT VIRUS!
X
Internet Explorer
iexplorer.exe
Added as a result of the LORSIS VIRUS! Note! - the valid Internet Explorer would not normally run at startup unless added manually by the user and would not run from the registry RunServices key as this does
U
Internet History Eraser
HERASER.exe
Internet History Eraser - deletes your browsing tracks
X
Internet Loader1
MSInstall61.exe
Added as a result of the KWBOT.B VIRUS!
U
Internet Optimizer
optimize.exe
Internet connection optimizer. Leave this enabled if you find it improves your connection
Y
Internet Sharing Server
iss_srvr.exe
Intel AnyPoint internet sharing software
N
Internet Sweeper
Sweeper.exe
Internet Sweeper - removes unnecessart left over files after browsing the internet
U
Internet Timer
ITIMER.exe
Shareware dial-up connection call cost calculator from Ratsoft
X
Internet.exe
Internet.exe
Added as a result of the MAGICCALL VIRUS!
X
INTERNET_SERVISES
winz32.exe
Added as a result of the SDBOT.Q VIRUS!
X
InternetWasherPro
iw.exe
Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
X
Internt
Internt.exe
Added as a result of the PEEPER VIRUS!
N
InterTrust Quick Start
it_cpq~1.exe
InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business
X
InterU
WINDRV.EXE
Added as a result of the IRCINTER.A VIRUS!
N
Intervideo Win Cinema Manager
WinCinemaMgr.exe
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N
Intervideo WinCinema Manager
WinCinemaMgr.exe
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N
Intervideo WinScheduler
WinScheduler.exe
WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
U
InterWARN
interwarn.exe
InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs
X
Intrenat
Intrenat.exe
Added as a result of the LEMIR.E VIRUS!
N
Introducing Media Manager
SPLASHA.EXE
MS Media Manager tour. Not required
N
Introduction-Registration
??
For Compaq PC's. Should only run first time, PC Introduction & Compaq registration
X
IntruderAlert
ia99.exe
Intruder Alert '99 from Bonzi - spyware
X
Ioadqm
Media Player.exe
Added as a result of the HAWAWI VIRUS!
U
iolo Task Agent
Task_Agent.exe
iOlo System Mechanic Task Agent. Scheduled maintenance
U
Iomega Automatic Backup
ibackup.exe
Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
U
Iomega Automatic Backup 1.0.1
ibackup.exe
Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
N
Iomega Backup Scheduler
dtiom98.exe
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
Iomega Disk Icons
IMGICON.EXE
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
Iomega Drive Icons
IMGICON.EXE
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
Iomega Startup Options
IMGSTART.EXE
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N
Iomega Watch
IOWATCH.EXE
Used by Iomega drives. Available via Start -> Programs
N
IomegaWare
COMMANDER.EXE
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
U
Iomon98.exe
Iomon98.exe
PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
N
iPalm
mon.exe
Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
X
IPInSightLAN 01
ipclient.exe
Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly phones home and wastes resource - hence the X status
N
IPInSightMonitor 01
ipmon32.exe
Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information
Y
IPinst
??
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X
ipmon.exe
ipmon.exe
Added as a result of the RECERV VIRUS!
U
iProtectYou
ip.exe
iProtectYou - internet filtering/parental control and network monitoring software
Y
IPSecMon
IPSecMon.exe
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
Y
IREIKE
IreIKE.exe
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
U
IrMon
IRMON.EXE
System Tray access to infra-red devices. Not required unless you use infra-red devices
N
isdbdc
isdbdc.exe
For Compaq PC's. May install properties in dial-up networking when you register with an ISP
U
ISDNwatch
IWatch.exe
FRITZ!X ISDNWatch - dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks
U
iSpyNOW
ispynow.exe
iSpyNOW - remote monitoring and surveillance software
X
IST Service
istsvc.exe
ISTBar foistware
U
Itk
Itk.exe
In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U
iTouch
iTouch.exe
iTouch loads the iTouch configuration program for Logitech keyboards. It?s needed if your keyboard has shortcut buttons and if you use them. It?s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock
N
ItsDeductiblePopUp
ItsDeductible.exe
ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
N
Iusage
netdet.exe
Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
N
IW Control Center
iwctrl.exe
VOB InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Supplied with some Toshiba CD-writers. Maybe required if you use this feature on a regular basis
X
I-Worm.GiGu
uGiG.eXe
Added as a result of the GINK VIRUS!
N
j2 Tray Menu
HotTray.exe
eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
U
Jammer
jammer.exe
Jammer by Agnitum - Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web
X
Java Runtimes
iexplore.exe
Added as a result of the KILLAV.B VIRUS! Note - this is not the valid IE (iexplore.exe) file as it's located in C:\Winnt\Java\Java\ rather than C:\Program Files\Internet Explorer
N
JB
Jiffybar.exe
Get Paid As You surf application
N
Jet Detection
ADGJDet.exe
Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
Y
JetAdmin Discovery Indicator
HPJETDSC.EXE
HP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator
U
JobHisInit
JobHisInit.exe
Used by Ricoh network printers to enable network printing from the client
U
Jog Serve
JogServ2.exe
Jog Dial on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features
U
JogServ2
JogServ2.exe
Jog Dial on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features
U
jv16 PT TempFileTool
TempTool.exe
jv16 PowerTools' temporary file remover
U
Jv16pt Network Resident
jv16pt_network.exe
jv16 PowerTools' network resident program. Only needed if you are using the program's network features
N
K6CPU.EXE
K6CPU.EXE
Authenticates CPU as K6 in system properties
X
kak
kak.hta
Added as a result of the KAKWORM VIRUS!
U
Kalibump
Kalibump.exe
Used with the now unsupported Kali software for on-line gaming. This is used to automatically bump up the priority of WinProxy to GREATLY improve game speed when using a SOCKS proxy
N
Kana Reminder
Reminder.exe
Kana Reminder is a program which can be used to set a reminder to be triggered at a specified time
U
KavRuns
Windll.exe
Added as a result of the TRYNOMA VIRUS!
N
KAZAA
kazaa.exe
KAZAA is a file-sharing program which unfortunately being ad-based includes Cy-door adware. Check here for information about Cy-door and here for a program that can remove it
X
Kazaa lptt01
kazaa.exe
New variant of the RapidBlaster parasite (in a kazaa folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid KaZaA file sharing program which has the same executable name
X
KAZAACuf
9
Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
N
kazaalite
kazaalite.exe
Kazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms
U
KBD
KBD.EXE
Multimedia keyboard manager. Required if you use the multimedia keys
U
KBD MediaCenter
MEDIACTR.EXE
Multimedia keyboard manager. Required if you use the multimedia keys
N
kdx
KHost.exe
KonTiki Secure Delivery Plug In related. The Kontiki Delivery Management System (DMS) is a secure delivery network for distribution of video, software, audio, documents, and other digital media. The Kontiki DMS enables enterprises to efficiently publish, secure, deliver and track digital media to employees, partners, and customers
U
KE9801
DriBat32.exe
KE-9801 multimedia keyboard - required if you use the multimedia keys
X
Keenvalue
Keenvalue.exe
Keenvalue spyware - see here
U
KEMailKb
KEMailKb.EXE
Controls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the buttons - like volume control or shut down
X
Kernel
bboy.exe
Added as a result of the MUMU.B VIRUS!
X
Kernel Loader
ntkrnl.exe
Added as a result of the CERVIVEC.A VIRUS!
X
kernel32
kern32.exe
Added as a result of the BADTRANS.A VIRUS!
X
kernel32
kernel.dli
Added as a result of the NETDEVIL.B VIRUS!
X
Kernel32
Kernel.dll
Added as a result of the REDLOF.M VIRUS!
X
kernel32
kernel32.dlI
Added as a result of the NETDEVIL.15 VIRUS!
X
Kernel32
Kernel32.exe
Added as a result of a number of VIRUSES - such as BABYLONIA, KERNEL and HOOKER
N
kernelfaultcheck
dumprep 0 -k
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
N
kernelfaultcheck
dumprep 0 -u
Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
X
Kernell32
Kernell.dll
Added as a result of the DESTINY VIRUS!
X
Kernelw
Kernelw32.exe
Added as a result of the INDOR.E VIRUS!
N
Key Text
KeyText.exe
Key Text 2000 from MJMSoft Design - utility to automate repetitive keyboard tasks. Available via Start -> Programs
X
Key1
Rlid.exe
Added as a result of the LIXY VIRUS!
U
Keyboard Manager
MMKeybd.exe
Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as MULTIMEDIA KEYBOARD
Y
Keyboard Preload Check
Preload.exe
Millenium Multi-Function Keyboard driver
U
KeyMaestro
kmaestro.exe
Multimedia keyboard manager. Required if you use the multimedia keys
U
keymap
keymap.exe
System Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game
KeyPatrol - detects Key Loggers (keyboard loggers or keyloggers) using both behavioral and pattern-matching algorithms
U
KeyWallet
KWallet.exe
KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins, passwords and other personal data manually
N
khooker
khooker.exe
SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U
KICKMON.EXE
KICKMON.EXE
KeepItClean - utility that deletes safe to remove files, cookies, browsing history, etc. This is the scheduler - if you don't schedule clean-ups it isn't required
N
Kinberlink
Kinberlink.exe
Kinberlink network messaging. Available via Start -> Programs
U
KK Loader
loadkk.exe
KeyKey XP Professional from KeyKey.com. Monitor Instant Messages, Chats, Emails, Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and much more completely undetected to the user.
U
klp
run32dll.exe
PAL PC Spy - key recorder and screen capture utility which controls and monitors everything that happens on your pc and online
U
KM9801U
MMHotKey.exe
Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
U
kmw_run.exe
kmw_run.exe
Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features
U
kmw_show.exe
kmw_show.exe
Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features
N
Kodak Batch Transfer
pezdow1.exe
Part of Kodak Picture Easy software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
N
Kodak Picture Transfer Software
pts.exe
Looks for Kodak camera connection and media insertion. Available via Start -> Programs
N
Kodak Software Updater
backweb*****.exe
Software updater for Kodak Easyshare digital cameras
Y
KodakCCS
KodakCCS.exe
Kodak DC File System Driver
N
Konni Symbol Autostart
KonniSymbol.exe
Gives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5
N
kontiki
kontiki.exe
Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
U
Krnlmod
Krnlmod.exe
Keylogger - see here. Given a U recommendation because it depends if you intentionally installed it. If you didn't, treat it as X and uninstall or remove via Spybot S&D (for example)
U
LanSpeed2
LanSpeed2.exe
Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
U
LapLink scheduler
Llsched.exe
Utility that automatically performs file transfers as unattended background operations
Y
LASTinst
??
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
N
Launch YahooPOPs! at Windows startup
YAHOOPOPS.EXE
YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start ->
U
LaunchAp
LaunchAp.exe
Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
U
Launchboard
lnchbrd.exe
LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions
X
Launcher
launcher.exe
Spyware component related to DownloadWare and found in Program Files\KFH
N
Launcher
relaunch.exe
Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
U
Lavasoft Adwatch
Ad-watch.exe
Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
Y
laxmsp32.exe
laxmsp32.exe
Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work
U
LCDC
LCDC.exe
LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins
N
LDM
backweb-8876480.exe
Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech. Also listed under Logitech Desktop Messenger
N
LDM
ldmconf.exe
U
LED TRAY
LEDTRAY.EXE
Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
N
LeechGet
LeechGet.exe
LeechGet download manager
X
LetsSearch
LetsSearch.exe
BrowserAid/BrowserPal foistware variant
U
Lexmark X5100 Series
lxbabmgr.exe
System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a
U
Lexmark X74-X75
lxbabmgr.exe
System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a
Y
Lexmark Xxx Button Manager
AcBtnMgr_Xxx.exe
Associated with the Lexmark Xxx (where xx is the model) all-in-one printer/scanner/copier. Required for correct operation
Y
Lexmark Xxx Button Monitor
ACMonitor_Xxx.exe
Associated with the Lexmark Xxx (where xx is the model) all-in-one printer/scanner/copier. Required for correct operation
N
LexmarkPrinTray
printray.exe
Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
U
LexStart
lexstart.exe
Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
U
Lfsndmng
lfsndmng.exe
LightningFAX Enterprise Fax Server - puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents
N
LicCrtl
runservice.exe
eLicense, licensing system incorporated with some software and games
N
LifeScape Media Detector
PicasaMediaDetector.exe
Media detector for Picasa's automatic photo organizer
X
li-multi****
li-multi****.exe
Adult web-dialler - **** is random
N
Line Speed Meter V3.0
LineSpeedMeter.exe
LineSpeedMeter - detect the download and upload speed of your internet connection
X
li-speed****
dlres.exe
Adult web-dialler - **** is random
X
li-thund****
li-thund****.exe
Adult web-dialler - **** is random
N
LIU
LIU.exe
Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
N
LIU
Rubicon.exe
Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
N
Live Menu
Dllcmd32.exe
eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here
N
LiveMonitor
LMonitor.exe
MSI Live Update2 - auto-detects and suggests the latest BIOS/Driver/Utilities information
N
LiveNote
Livenote.exe
Asus graphics card driver live update feature
X
li-vita****
li-vita****.exe
Adult web-dialler - **** is random
U
LManager
QtZgAcer.EXE
Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
Y
lmpdpsrv
lmpdpsrv.exe
Related to a Lexmark printer/scanner. Printer sharing server
N
LMSTATUS
LMSTATUS.EXE
Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)
U
LOAD WB
LOADWB.EXE
Part of Stardock's WindowBlinds custom desktop program. WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and muchmore. If you use it - keep it if not then uninstall it
N
load=
adw30.exe
After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
U
load=
asistat.exe
Status monitor for an NEC SuperScript printer
Y
load=
Bfrecv.exe
Bitware modem driver
U
load=
esspk.exe
Speakerphone capability through a soundcard for an ESS modem
Y
load=
hotkey.exe
Solo 5300 display driver for Win2K on some Gateway laptops
N
load=
HPWHRC.EXE
Loads the Status Window software for the HP Laserjet printers
N
load=
vi_grm.exe
Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
Y
load=
wpshrc.exe
Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
Y
load=
WPSLOAD.EXE
Related to a Canon BJ C series printer
X
load32
load32.exe
Added as a result of the NIBU, BAMBO and DUMARU VIRUSES!
X
LOAD32
Lorena.exe
Added as a result of the MAPSON.C VIRUS!
Y
LoadBlackD
blackd.exe
This is the intrusion detection system of the BlackICE PC Protection (was Defender) firewall which loads independently of the user interface (BlackICE Utility)
X
LoadDBackUp
BcTool.exe
Added as a result of the GIBE VIRUS!
X
loader
loader.exe
Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe
X
LoadFonts
LoadFonts.vbs
Homepage hijacker that changes your homepage to an adult content site
X
LoadFonts
Tahoma.vbs
Homepage hijacker that changes your homepage to an adult content site
X
LoadingAgent
msload32.exe
Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
X
LoadingAgent
ZipLoader32.exe
Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
N
LoadMSvcmm
msvcmm32.exe
Auto-update for Movielink - internet movie rental System Tray access
X
LoadOrderVerification
*.exe
Added as a result of the TRON VIRUS! * is a random file name, possibly Pthymvfr.exe
U
Loadout Manager
nost_LM.exe
Manager for the Belkin Nostromo n50 SpeedPad game controller - see here
X
LoadPowerProfile
ASDAPI.EXE
Added as a result of the CABRO VIRUS! Not to be confused with the valid entry below
X
LoadPowerProfile
Rundll.exe powerprof.dll
Added as a result of the LOXOSCAM VIRUS! Note - do not confuse with the valid LoadPowerProfile (2) entry above! Notice that the infected version uses Rundll.exe whereas the uninfected version uses Rundll32.exe
U
LoadPowerProfile
Rundll32.exe powrprof.dll
Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings
U
LoadQM
loadqm.exe
Loads the MSN Queue Manager. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the users choice recommendation. If you have problems leave it, otherwise I recommend you disable it
X
LoadWindowsFile
??
Added as a result of the DELF.B VIRUS! where <filename> is the infected file
U
Logi_Mwx
Logi_MwX.exe
Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as SmartMove. If you disable it and find you don't need it leave it disabled
X
Login Service
??
Added as a result of the MIGMAF VIRUS!
X
LoginPassport
Lgnpsp32.exe
Added as a result of the REDIST.C VIRUS!
N
Logitech Desktop Messenger
backweb-8876480.exe
Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
N
Logitech Desktop Messenger
ldmconf.exe
Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
U
Logitech Utility
Logi_MwX.exe
Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as SmartMove. If you disable it and find you don't need it leave it disabled
N
Logitech Wakeup
lgwakeup.exe
Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images
Y
LogitechGalleryRepair
ISStart.exe
Associated with Logitech cameras. If unchecked it causes DLL errors and isn't stable
N
LogitechImageStudioTray
LogiTray.exe
Associated with Logitech cameras
X
Logon.exe
logon.exe
Homepage hijacker
U
LogonStudio
logonstudio.exe
WinCustomize LogonStudio - Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users
U
LogWatch
logwat95.exe
Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied
Y
Look 'n' Stop
looknstop.exe
Look 'n' Stop personal firewall
X
Lookup_Sys
lookupsys.exe
P04n trojan
N
Lotus Organizer EasyClip
easyclip.exe
The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page. Available via Start -> Programs
N
Lotus QuickStart
smartctr.exe
Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs
U
Lotus SuiteStart
suitest.exe
Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as Lotus SuiteStart 97 Edition. All individual components available via Start -> Programs
X
LowVersionSupport
??
Added as a result of the LASTRAS VIRUS! where <filename> is the name of the file dropped by the virus
N
LS120 Superdisk
??
Supposed to accelerate transfer rate on LS-120, contributes to system lockups
X
lsass
lsass.exe
Added as a result of the RATSU.B VIRUS! Note! - the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
X
lsass
start.bat
Added as a result of the ZCREW VIRUS!
X
LSPFix
LSPmonitor.exe
eAcceleration Stop-Sign related - foistware. Read their privacy statement here
X
LSPmonitor
LSPmonitor.exe
eAcceleration Stop-Sign related - foistware. Read their privacy statement here
X
LSvr
LSvr.exe
PowerStrip foistware
Y
LT DAEMON
ltdaemon.exe
Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
X
LTDMgr
LTDMgr.exe
PowerStrip foistware
X
LTM2
bible.exe
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
X
LTM2
MPGSRV32.EXE
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
X
LTM2
MSGSRV32.EXE
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
X
LTM2
MSGSRV320.EXE
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
X
LTM2
winupdate.exe
All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
U
LtMoh
Ltmoh.exe
Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
N
LTSMMSG
LTSMMSG.exe
Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too
X
LTSMSG
Shell32.exe
Added as a result of the LEMIR.B VIRUS!
Y
LTWinModem1
ltmsg.exe
One of the popular WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
N
LVComs
lvcoms.exe
Lvcomm server. Related to Logitech Quick Cam - works fine without it
U
LWBMOUSE
lwbwheel.exe
Mouse driver - required if you use non-standard Windows driver features
U
LWBMOUSE
MOUSE32A.EXE
Mouse driver - required if you use non-standard Windows driver features
N
Lwinst Run Profiler
lwtest.exe
Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
N
LXSUPMON
LXSUPMON.EXE
Lexmark Printer. The printer should work fine without it
N
M3Tray
m3tray.exe
Movielink - internet movie rental System Tray access
U
Machine Debug Manager
mdm.exe
Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to hang if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable
N
MacLic
MacLic.exe
Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
N
MacName
MacName.exe
Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
Y
MAD.EXE
MAD.EXE
MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
N
MadExe
LaunchRA.exe
Dell Resolution Assistant
U
MagicDsk
MAGICDSK.EXE
Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
N
Magitime
Magitime.exe
Magitime - connection tracking utility which monitors online time, expense, data transfer
N
Mail.com
mcalert.exe
Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
X
Mail_Check
Mail_Check.exe
Added as a result of the PANOIL.C VIRUS!
U
MailBell
mailbell.exe
MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
U
Mailbox Verifier
mboxvrfy.exe
Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
Y
Main Executable (HP)
HP05T0R5.exe
HP (Hewlett-Packard) related.
N
Mania Win Restore
RESWIN.EXE
Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
X
Mantis
??
Added as a result of the MANTIBE VIRUS! where <filename> is the filename
N
Mass storage check registry
rundll32.exe MSDServ.dll, check registry
Used with a USB based smartmedia card reader
U
Matador
mlfbuddy.exe
MailFrontier - anti-spam application
X
MatrixScreenSaver
mss.exe
Malware, see here
N
Matrox Color Control
hgcctl95.exe
For Matrox video cards. Quick access to changing colors
N
Matrox Control Center
mgactrl.exe
For Matrox video cards. Quick access to settings
N
Matrox Diagnostic
mgadiag.exe
For Matrox video cards. Quick access to diagnostics
N
Matrox Powerdesk
PDesk.exe
For Matrox video cards. Quick access to tweak your card to your liking
N
Matrox QuickDesk
mgaqdesk.exe
For Matrox video cards. Quick access to tweak your card to your liking
X
MaxAlerts
max.exe
Bonzi MaxALERT - spyware
Y
MaxtorCombo
ComboButton.exe
Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
U
MaxtorReg
AUTOREG.EXE
Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
U
MBM 4
MBM4.exe
Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U
MBM 5
MBM5.exe
Motherboard Monitor 5 - as above but for version 5
U
MBProbe
mbrpobe.exe
MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
X
MC
wintrims.exe
Added as a result of the WINTRIM VIRUS!
Y
McAfee Firewall
CPD.EXE
Firewall bundled with McAfee VirusScan 6.*.Can also be listed as CPD_EXE
N
McAfee Guardian
CMGRDIAN.EXE
McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
N
McAfee Winguage
??
Part of McAfee Nuts & Bolts. WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious. Resource hog. Available via Start -> Programs
U
McAfee.InstantUpdate.Monitor
RuLaunch.exe
Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
Y
McAfeeUpdaterUI
UpdaterUI.exe
Associated with McAfee Enterprise 7.0.0. Updater for McAfee anti-virus and security programs
Y
McAfeeVirusScanService
Avsynmgr.exe
From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
Y
McAfeeWebscanX
WebScanX.exe
From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
U
McAgentExe
mcagent.exe
From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
N
Mcappins.exe
mcappins.exe
McAfee Application Installer.
N
MChanger
MChanger.exe
Media Changer - utility that allows you to change wallpapers, sounds, themes, etc
U
McUpdateExe
mcupdate.exe
From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
Y
McVsRte
mcusrt.exe
Part of McAfee's SecurityCenter. Must remain checked but one user reports Windows glitches with no response from McAfee as to why
Y
mcvsshld
mcvsshld.exe
McAfee VirusScan On-line. See also McAgentExe above
X
MD IE Plugin
md.exe
Adult content dialler
X
MD IE Plugin
winy.exe
Adware
N
mdac_runonce
runonce.exe
Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete runonce.exe.
X
Mdm
Mdm.vbs
Added as a result of the WHITEHO or TRAPPY VIRUSES!
U
MDM7
mdm.exe
Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to hang if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable
N
MECA
Meca.exe
Meca instant messenging client
U
Media Manager Indexer
AIRSVCU.EXE
Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
X
Media Plug x.1.2
msdm.exe
Added as a result of the MULDROP.352 VIRUS!
X
media_manager
mediaman.exe
Mini-Player, IMESH related foistware, see here
X
media_stub
stub.exe
Mini-Player, IMESH related foistware, see here
N
MediaFace Integration
Sethook.exe
Fellowes Neato? cd label design software. Launch NEATO's MediaFACE II label making software directly from the productname toolbar
U
MediaKey
MediaKey.exe
Multimedia keyboard manager. Required if you use the multimedia keys
X
MediaLoads
dw.exe
Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
X
MediaLoads Installer
dw.exe
Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
N
MediaMonitor
Mediam~1.exe
Installed by Smartdisk MVP CD burning software. Software will work fine without it
X
MediaPath
Proyecto1.exe
Added as a result of the GRUEL VIRUS!
X
MediaPath
Root.exe
Added as a result of the GRUEL VIRUS!
N
MediaRing Talk
mrtalk.exe
Media Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
U
MemoKit
MK.EXE
Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
N
Memory Stick Monitor
MSTAT.exe
Used with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
U
Memory+
tfimemsr.exe
Memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
X
MemoryMeter
MemoryMeter.exe
Autoinstalling spyware by Total Velocity
U
MemTurbo
memturbo.exe
MemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
N
MenuSnap
MenuSnap.exe
MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing Sort by Name if availabe
U
Message_Blocker
messageblock.exe
Message Blocker - prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message
N
MessagerStarter Freeserve
StartMessager.exe
Freeserve Messenger
X
Messenger Block
msngrblock.exe
Added as a result of the PATOO VIRUS!
X
Messenger start-up
Msgran.exe
Added as a result of the GRAMOS VIRUS!
N
MessengerPlus
MsgPlus.exe
Third party MSN Messenger extension that hides banner ads and adds archiving and other useful features. Appears not to work unless checked, but may be activated after startup. Not recommended as it includes Lop.com - see here
N
MessengerPlus2
MsgPlus.exe
Third party MSN Messenger extension that hides banner ads and adds archiving and other useful features. Appears not to work unless checked, but may be activated after startup. Not recommended as it includes Lop.com - see here
X
messnger
??
Added as a result of the DELODER VIRUS! where <filename> is the worm name
X
mfin32
mfin32.exe
MyFreeInternetUpdate - adware downloader
N
MGA Quickdesk
MGAQDESK.EXE
For Matrox video cards. Quick access to tweak your card to your liking
N
MGA_CD_Install
mgasetup.exe
Matrox Millennium video driver. Not required once drivers installed
Y
mgavctrl
mgavrtcl.exe
McAfee's Virus Scan Online
Y
mgavrtclexe
mgavrtcl.exe
McAfee's Virus Scan Online
N
MHINIT
MHINIT.EXE
Part of the Cybermedia Clean Sweep package
N
Microangelo Desktop
Muamgr.exe
Quick access to MicroAngelo 5.0. Available via Start -> Programs
N
microAttuneDownload
atmdlusr.exe
USR (US Robotics) modem auto updater. May be a sub-set of Attune
U
MicroDialler
atdialler1.exe
Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
X
Microfinder lptt01
mcf.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
MicroLoad
??
Added as a result of the DARBY VIRUS!
X
microsoft
svchost.exe
Added as a result of the ASTEF or RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here
N
Microsoft Announcement Listener
Annclist.exe
MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X
Microsoft auto update
winupdate.exe
Added as a result of the BMBOT VIRUS!
X
Microsoft Conf Ldr
sysconf.exe
Added as a result of a variant of the SDBOT VIRUS!
X
Microsoft Corporation
??
Added as a result of various VIRUSES such as VISAGES, BABYBEAR and TOFACED
X
Microsoft Cvrt
mscvrt32.exe
Added as a result of a unidentified VIRUS!. Named almost, but not exactly like the legitimate msvcrt or msvcrt20.dll
X
Microsoft Diagnostic
??
Added as a result of the ACEBOT VIRUS! The <filename>.exe will be random and must be deleted after the virus has been removed. Not to be confused with the DOS based MSD.EXE
X
Microsoft Find Fast
Findfast.exe
Complete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
Y
MICROSOFT FIREWALL CLIENT
ISATRAY.EXE
MS Internet Security and Acceleration Server 2000
N
Microsoft Greetings Workshop Reminder
Gwremind.exe
You really want to be reminded about somebody's birthday at the expense of resources?
N
Microsoft Greetings Reminder
MHPRMINF.EXE
You really want to be reminded about somebody's birthday at the expense of resources?
X
Microsoft Inet Xp..
teekids.exe
Added as a result of the BLASTER.C VIRUS!
U
Microsoft Intellitype Pro
speedkey.exe
Additional keyboard shortcuts on MS programmable keyboard
X
Microsoft IPC
svshost.exe
Added as a result of an unidentified VIRUS!
X
Microsoft IPC
system.exe
Added as a result of the NULLBOT VIRUS!
X
Microsoft Netview
gesfm32.exe
Added as a result of the RANDEX.C VIRUS!
N
Microsoft Office
Msoffice.exe
Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
N
Microsoft Office
Osa.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Osa9.exe is the Office 2000 variant
N
Microsoft Office Fast Cache
Fastboot.exe
Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast above and can be disabled
N
Microsoft Office Shortcut Bar
Msoffice.exe
Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
N
Microsoft Office Startup
Osa.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Osa9.exe is the Office 2000 variant
X
Microsoft RDLL
sysconf32.exe
Added as a result of a variant of the SDBOT VIRUS!
X
Microsoft Scanreg
microsoftscanreg.exe
Added as a result of the FRANRIV.A VIRUS!
N
Microsoft Sidewinder Game Controller Software
SWTRAY.EXE
MS SideWinder game controller system tray icon. Available via Start -> Programs
N
Microsoft Sound Volume Tool
mssvol.exe
This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
X
Microsoft Spool Server for Win32
spoolsrv.exe
Added as a result of the RANDEX.H VIRUS!
X
Microsoft System Checkup
Cool.exe
Added as a result of the DONK.B VIRUS!
X
Microsoft System Restore Configuration
CBRSS.EXE
Added as a result of a variant of the SPYBOT VIRUS!
X
Microsoft Tray
??
Added as a result of the DELF.BZ VIRUS!
U
Microsoft Webserver
svctrl.exe
Personal web server program which enables you to create and host a web server from your computer. Not required for most people
X
Microsoft Windows Kernel Services
winkrnl386.exe
Added as a result of the ZEBROXY VIRUS!
X
Microsoft Windows Update Service
wupdmgr32.exe
Added as a result of the DOS.AUTOCAT VIRUS!
N
Microsoft Works Calendar Reminders
wkcalrem.exe
Produces a pop-up reminder of events scheduled using the MS Works Calendar
N
Microsoft Works Portfolio
WksSb.exe
The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
N
Microsoft Works Update Detection
wkdetect.exe
Checks for updates to MS Works
X
microsoft xdaemon 2.0
xdaemon.exe
Added as a result of the DELF.D VIRUS!
X
Microsoft? System Mapper
SysMap.exe
Added as a result of the MAPSY VIRUS!
X
microsoft420
microsoft420.exe
Added as a result of the MENACE.B (or W32.SOFUNNY) VIRUS!
X
MicrosoftNetwork Daemon for Win32
NETD32.EXE
Added as a result of the RANDEX.F VIRUS!
X
MicrosoftServiceManager
EXPLORERE.EXE
Added as a result of the YAHA.AB VIRUS!
X
MicrosoftServiceManager
mstask32.exe
Added as a result of the YAHA.P VIRUS!
X
MicrosoftServiceManager
msupdat.exe
Added as a result of the YAHA.AA VIRUS!
X
MicrosoftServiceManager
Wintsk32.exe
Added as a result of the YAHA.U VIRUS!
X
MicrosoftValue
syscnfg.exe
Added as the result of an unidentified VIRUS!. syscnfg.exe is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
N
MightyFAX Controller
MFNTCTL.EXE
Mighty FAX from RKS Software - installs a printer driver so that you can fax directly from Windows software
X
MINIBUG
MINIBUG.EXE
Displays ads inside Weatherbug - see here
N
MINIFERT.EXE
MINIFERT.EXE
Part of Backweb
U
minilog
MINILOG.EXE
If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
N
MiniNote
MININOTE.EXE
Mini NoteTab was the first in the family of NoteTab text and HTML editors from Fookes Software
U
MinMaxExtender
Mmext.exe
MinMaxExtender - window handling tool
X
miqpazc
rundll32 miqpazc.dll, Init 1
Added as a result of the AFCORE.Q VIRUS!
N
Mirabilis ICQ
icq.exe
If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
N
Mirabilis ICQ
ICQNet.exe
If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
N
Mirabilis ICQ
NDetect.exe
If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
N
miroVIDEO Tray Tool
misitray.exe
Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card,e.g. for the above actions
N
Mixer
Mixer.exe
C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
N
Mixghost
mixghost.exe
Management software for Altec Lansing speakers. If a change is needed, the user can launch it from the Start menu
U
MMhid
mmhid.dll
This is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP
N
MMHotKey
MMHotKey.exe
Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
U
MMKeybd
MMKeybd.exe
Multimedia keyboard manager. Required if you use the additional keys
X
mmod
mmod.exe
Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
N
mmpti
m1mmpti.exe
Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
N
MMRun
mmrun.exe
related to Musicmatch Jukebox - NOT NEEDED
Y
MMTASK
mmtask.tsk
A check on the file's properties reveals Multimedia background task support module. MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc
X
MMtask Service
mmtask.exe
Added as a result of a VIRUS related to the SOBIG.E VIRUS!
N
MMTray
mm_tray.exe
Musicmatch Jukebox icon in the task tray. Often supplied with HP CD-RW drives. The program works fine without it
N
MMTray
MMTray.exe
Part of Morgan Multimedia Codecs. Only required when the codecs are used
N
MMTray2K
MMTray2K.exe
Part of Morgan Multimedia Codecs. Only required when the codecs are used
N
MMTrayLSI
MMTrayLSI.exe
Part of Morgan Multimedia Codecs. Only required when the codecs are used
X
mmxrun
msosa.exe
Adult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and RegCompres (REGCPM32.EXE), otherwise they return
X
mnsvc
mnsvc.exe
Added as a result of the AUTOUPDER VIRUS!
X
mnsvcsp
mnsvcsp.exe
VIRUS!
N
mobsync
mobsync.exe
MS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages
X
MOBSYNC32.EXE
mobsync32.exe
Added as a result of the FINERO VIRUS!
N
MOD
muamger.exe
MicroAngelo On Display from Impact Software lets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them
U
ModemOnHold
MOH.EXE
NetWaiting Modem-on-Hold Application
N
ModemUtility
mdmsetpe.exe
System Tray configuration icon for Aztech modems
X
ModularConfig
syscnfg.exe
Added as the result of an unidentified VIRUS!. syscnfg.exe is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X
Module Call initialize
RUNDLL32.EXE reg.dll, ondll_reg
Added as a result of the LOVGATE VIRUS!
N
Money Express
moneyexpress.exe
Part of MS Money. Available via Start -> Programs
N
MoneyAgent
money express.exe
Part of MS Money. Available via Start -> Programs
N
MoneyStartUp10.0
Activation.exe
Part of MS Money 2002. Available via Start -> Programs
U
Monitor Apache Servers
ApacheMonitor.exe
Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
N
moon phase
moon.exe
Moon Phase - tray icon that indicates the phases of the moon
N
Morpheus
morpheus.exe
MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes I have seen no instance of any since using it
X
mosearch
mosearch.exe
Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here
N
Motive SmartBridge
mpbtn.exe
System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
U
MotiveMonitor
motmon.exe
On HP systems. MotiveMonitor allows you to useHP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required
N
MotiveSB
MotiveSB.exe
The same as Motive SmartBridge below
U
Mount Safe & Sound
Fbmount.exe
From McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
N
Mouse 32A
Mouse32A.exe
Mouse driver to control mouse functions from Azona. Available via Start -> Programs
N
Mouse Suite 98 Daemon
pelmiced.exe
Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
N
MouseCount
MC.exe
MouseCount by Kittyfeet Software. Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year. Not required
U
mouseElf
MC.exe
System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features
U
MouseImp
MImpHost.exe
MouseImp Pro - A reliable assistant that turns your mouse into a simple, native but powerful controlling device
U
Mousinfo
mousinfo.exe
MS mouse information tool - for troubleshooting mouse problems
X
MovieNetworks
MovieNetworks.exe
MovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:\Program Files\MovieNetworks directory
X
Movieplace
Movieplace.exe
MoviePlace malware
N
Mozilla Quick Launch
Mozilla.exe
Netscape 6 and Mozilla browsers
N
Mozilla Quick Launch
Netscp6.exe
Netscape 6 and Mozilla browsers
U
MPEO
Csinsm32.exe
Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
Y
MPFExe
mpf.exe
McAfee Personal Firewall
Y
MPFExe
MpfTray.exe
McAfee Personal Firewall
U
MplSetup
MplSetup.exe
Used by Ricoh network printers to enable network printing from the client
U
MPower
MPower.exe
MPower from MindBeat. Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load. Some users swear by programs such as this but I suggest you read this article and make up your own mind
Y
MPREXE.exe
mprexe.exe
WIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here and here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus
X
MprHTML
MprHTML.exe
Added as a result of a variant of the VAGRNOCKER VIRUS!
U
MPSExe
mscifapp.exe
McAfee.com Privacy Service - combines personal identifiable information (PII) protection with online advertisement blocking and content filtering
X
MPtask Services
mptask.exe
Added as a result of the LALA or DOWNLOADER-BN.B or AOT VIRUSES!
N
MPTBox
MPTBOX.EXE
Cannon Multi-Pass toolbox - a button bar
X
mqbkup
mqbkup.exe
Added as a result of the OPASERV.K VIRUS!
N
mrtMngr
mrtMngr.exe
Maintenance Release Task Manager for Intuit?s QuickBooks or Quicken
U
MRU-Blaster Scheduler
scheduler.exe
MRU-Blaster scheduler - detects and cleans MRU (most recently used) lists on your computer
N
MRU-Blaster Silent Clean
mrublaster.exe
MRU-Blaster - performs silent cleaning of MRU lists at boot
X
MS Config Loader
svchos1.exe
Added as a result of the AGOBOT.R VIRUS!
X
MS HTML
??
Added as a result of the LATINUS.15 VIRUS!
X
MS HTML
msHtml.exe
Added as a result of the PESTDOOR.31 VIRUS!
X
MS HTML
mslat.exe
Added as a result of the LATINUS.SVR VIRUS!
X
MS Network Control
mswin.exe
Added as a result of the DUMBA VIRUS!
X
MS Security Hotfix
service5.exe
Added as a result of the GAOBOT.AG VIRUS!
X
Ms Spool32
MS SPOOL32.EXE
Added as a result of the ASASSIN VIRUS!
X
MS Updates
aupd.exe
Spyware web downloader
X
MS Updates
mscache.exe
Spyware web downloader
X
MS_SETUP.EXE
??
Added as a result of the CHARGE VIRUS!
X
MS7531
ms7531.exe
Homepage hijacker
X
MSAdmin
jdbgmrg.exe
Added as a result of the DASMIN.A VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
X
MSBB
msbb.exe
Advertising spyware
U
mscn
mscn.exe
Part of the SafeChildNet internet filtering program - required if you use it
N
MSConfig
msconfig.exe
This is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
N
MSConfig
MSCONFIG32.EXE
Unidentified adware, spyware or virus. Not to be confused with the valid entry above which has the command msconfig.exe
X
Msconfig lptt01
msconfig.exe
New variant of the RapidBlaster parasite (in a msconfig folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Windows Msconfig which has the same executable name
X
MSConfigr
jdbgmrg.exe
Added as a result of the DASMIN.C VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
N
MSConfigReminder
msconfig.exe
This is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
X
MS-Connect
arr.exe
Adult content dialler - see here
X
MS-Connect
cdm.exe
Adult content dialler - see here
X
MS-Connect
game.exe
Adult content dialler - see here
X
MS-Connect
msite18.exe
Adult content dialler - see here
X
MS-Connect
web.exe
Adult content dialler - see here
X
MSCORE
syscnfg.exe
Added as the result of an unidentified VIRUS!. syscnfg.exe is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X
Mscsgs
MSCSGS.EXE
Added as a result of the ZEZER VIRUS!
X
Mscsgs32
MSCSGS32.EXE
Added as a result of the ZEZER VIRUS!
X
Msctrl32
Msctrl32.scr
Added as a result of the REDIST VIRUS!
X
MSDLL
syscnfg.exe
Added as the result of an unidentified VIRUS!. syscnfg.exe is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X
Msdos32
Msdos32.pif
Added as a result of the RECORY VIRUS!
X
msdos423
msdos423.exe
Added as a result of the MENACE.A (or W95.SOFUNNY.WORM@M) VIRUS!
N
MSDTC
msdtc.exe
MS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
X
msfindosa.exe
msfindosa.exe
Added as a result of the DOWNLOADER-BS VIRUS!
X
Msgmgr
??
Added as a result of the BABYBEAR VIRUS!
X
Msgsrv16
Msgsrv16.exe
Added as a result of the DELF family of VIRUSES!
Y
MSGSRV32.exe
msgsrv32.exe
Windows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background
X
Msgtray
sys16.exe
Added as a result of an unknown VIRUS!
X
MSHT@
MSHT@.EXE
Added as a result of the MAGISTR.A VIRUS!
X
MSKCES32
??
Added as a result of the CLONER VIRUS!
X
MSKernel32
MSKernel32.vbs
Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
U
MSKExe
spamkiller.exe
McAfee SpamKiller
X
Mslogon lptt01
mslogon.exe
New variant of the RapidBlaster parasite (in a Mslogon folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
msmanager32
msmngr32.exe
Added as a result of the RANDON-R (or WOMANIZ.A) VIRUS!
X
Msmgt
msmgt.exe
Total Velocity adware/hijacker
Y
MsmqIntCert
regsvr32 /s mqrt.dll
Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem.
N
MSMSGS
msmsgs.exe
MSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck Run this program when Windows starts
X
msn
system32.exe
Added as a result of the KITRO.A VIRUS!
N
MSN Internet Access
trayclnt.exe
Quick way to connect to MSN internet service - replaces MSN Quick View from V5.6 onwards
X
MSN messenger
messenger.exe
Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
X
MSN messenger service
mssgs.exe
Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
N
MSN Quick View
Msndc.exe
Quick way to connect to MSN internet service
X
MSNET
msnet.exe
Added as a result of the BOA VIRUS!
Y
MsnFixer
msnfixjs.js
Located in the HP\bin\msnfix directory of a HP PC
N
msnmsgr
msnmsgr.exe
MSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck Run this program when Windows starts
X
MSOOBD
MSOOBD.EXE
Added as a result of the MAGISTR.A VIRUS!
X
Mspatch69
??
Added as a result of the MPROX VIRUS!
X
Mspatch89
cnqmax.exe
Added as a result of the RANDEX.P VIRUS!
X
MSPQFile
MSA****.TMP
Homepage hijacker. See here for more information. **** can be anything
U
mspwr
pupstman.exe
Transparent icon background feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me)
N
MSPY2002
ImScInst.exe
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
X
Msrc
Msrc.exe
Added as a result of the KRYPTONIC GHOST VIRUS!
X
MSREGIT
Msgp.exe
Added as a result of the KRYPGHOS (Kryptonic Ghost) VIRUS!
X
MSRegSvc
regsvc32.exe
Homepage hijacker that changes your homepage to an adult content site
X
MS-RunKey
arr.exe
MS-Connect dialler/hijacker
X
msservice
msserv.exe
Added as a result of the HYD VIRUS!
X
MSSHVC
MSSHVC.exe
Added as a result of the NUFFY.A VIRUS!
X
MSSQL
Mssql.exe
Added as a result of the SDBOT VIRUS!
X
MSStartOptimizer
Iexpres.exe
Added as a result of the POLDO.B VIRUS!
X
MSStartOptimizer
WINUPD.EXE
Adult material dialler - see here. This has to be cleared at the same time as RegCompres (REGCPM32.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
X
mssurfer lptt01
mssurfer.exe
New variant of the RapidBlaster parasite (in a surfer folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not the valid Lavasoft Adaware
X
mssvc
??
Added as a result of the PSK VIRUS!
Y
MSSVC.EXE
MSSVC.EXE
Stealthdisk - hides folders, files and applications. Will also encrypt them for better protection
X
mssys
mssys.exe
Added as a result of the MYSS.B VIRUS!
X
mssysint
Iexplore .exe
Added as a result of the PWSTEAL.ABCHLP and PSPIDER.310.B VIRUSES! Note - this is not the valid Internet Explorer (iexplore.exe)
X
mssyslanhelper
msmsgri32.exe
Added as a result of the RANDEX.D VIRUS!
X
Mstapi
Mstapi.exe
Keylogger trojan
X
Mstng32
MSTng32.exe
Added as a result of the TANG VIRUS!
X
MSVXD
MSVXD.EXE
Added as a result of the DATOM.A VIRUS!
U
MSwheel
mswheel.exe
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
X
Mswincfg
Mswincfg32.exe
Added as a result of the CYBERSPY VIRUS!
X
msys lptt01
msys.exe
New variant of the RapidBlaster parasite (in a Msyss folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
Msys32
morfitwebentrance.exe
Morfit ADjectPager - uses home page rental technology for generating revenues. Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage
X
Mtr2
mtr2.exe
Added as a result of the KRYPTONIC GHOST VIRUS!
N
muamgr
muamgr.exe
Quick access to MicroAngelo 5.0. Available via Start -> Programs
U
MultiCAM Initializer
MCamBoot.exe
The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled
U
Multi-function keyboard
GWHotkey.exe
Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail, browser, volume and CD/DVD controls, etc)
U
Multimedia KBD
MMKeybd.exe
Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as Keyboard Manager
U
MULTIMEDIA KEYBOARD
MMKeybd.exe
Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as Keyboard Manager
U
MultiRes
MultiRes.exe
MultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP
U
MUPS
MUPS.exe
Lauches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions
Y
murphy shield
lmgui.exe
Firewall part of BitDefender virus scanner/firewall
N
Music01 Server
Music01 Server.exe
J River Media Jukebox
X
MusIRC (irc.music.com) client
musirc4.71.exe
Added as a result of the RANDEX.Q VIRUS!
N
MWSnap
MWSnap.exe
MWSnap - screen capture utility. Start manually when required
X
MxHLp32
MxHLp32.exe
Added as a result of a variant of the VAGRNOCKER VIRUS!
N
MXO Auto Loader
MXOaldr.exe
Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and can be disabled without causing problems
U
MxRunner
MxRunner.exe
EasyUninstall from Aladdin Systems (formerly by Ontrack)
X
My Search Bar Eq
S4BAREQ.EXE
MySearch bar parasite
U
MyAgtTry
MyAgtTry.exe
System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
X
Myapp
??
Added as a result of the FATEE.B VIRUS!
X
Myapp
service.exe
Homepage hijacker
Y
MyCIO Agent Service
myagtsvc.exe
McAfee VirusScan ASaP Agent service
U
myCIO.com ASaP
MyAgtTry.exe
System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
N
myCIO.com Splash
Splash.exe
Splash screen for McAfee VirusScan ASaP on-line scanner
N
MyFastAccess
myfastupdate.exe
My-Fast-Access toolbar updater
X
MyLife
CmdServ.exe
Added as a result of the HOLAR.A VIRUS!
U
myNetWatchman
nwclient.exe
Sends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running
U
myprint mileage
mpm.exe
Reports battery status on a portable printer
U
MytekSystrayExePath
MyTekSystray.exe
MyTek system tray - web site providing computer tech support in Australia
U
MyVitalAgent
VtlAgent.exe
MyVitalAgent from Lucent Technologies. Replacement for Net.Medic, monitoring all popular internet transactions and alerting the user of the loaction of connection problems. Available via Start -> Programs
U
N2PTray
Net2fone.exe
An Internet telephony application. Needed only if you have an account at Net2Phone, Inc
N
NADaemon
NADAEMON.EXE
Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after digital rights management. One user reports disabling it has no detrimental affect - not required
N
Naggerrunkey
nagger.exe
Packard Bell Free Internet Signup screen
Y
Naimagent_service
EPOAgentnaimas32.exe
Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
Y
Naimagent_UI
EPOAgentnaimag32.exe
Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
X
NAV
RuxDLL32.exe
Added as a result of the MAPSON.D VIRUS!
X
nAv AGENT
??
Added as a result of the RIOSYS VIRUS! Note the lower-case n and v in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
Y
NAV Agent
navapw32.exe
Introduced with Norton Anti-Virus 2002 to replace Norton Auto-Protect and Norton eMail Protect. Leaving Auto-Protect, E-mail Scanning and Script Blocking enabled doesn't seem to slow the system down.
X
NAV Auto Update
Navautoupdate.exe
Added as a result of the SPYBOT VIRUS!
N
NAV CfgWiz
cfgwiz.exe
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
N
NAV Configuration Wizard
cfgwiz.exe
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
U
NAV DefAlert
DefAlert.exe
Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X
NAV Live Update
??
Added as a result of the DEBORMS.C VIRUS! <filename> represents the path to the worm. Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
X
NavAgent32
lasvr32.exe
Added as a result of the FEMOT.D VIRUS!
X
NavAgent32
SCardSvr32.Exe
Added as a result of the MOFEI.B VIRUS!
Y
navapw32
navapw32.exe
Introduced with Norton Anti-Virus 2002 to replace Norton Auto-Protect and Norton eMail Protect. Leaving Auto-Protect, E-mail Scanning and Script Blocking enabled doesn't seem to slow the system down.
U
Naviscope
naviscope.exe
Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
X
NavPass
NavPass.exe
Free system for gaining access to and downloading from adult content web-sites
X
NAVUpd
rundll32.exe navupd.dll, Startup
Added as a result of the NAVU VIRUS!
N
NB Common Dialog Enhancements
COMDLGEX.EXE
Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
N
NB Start Menu
STARTM.EXE
Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
N
NB Windows Patterns
WINDBKGND.EXE
Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
U
NBJ
NBJ.exe
Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups
U
NbkCtrl
NbkCtrl.exe
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
N
NCD
ncd.exe
Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
N
NCLAUNCH
NCLAUNCH.Exe
Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP.
N
NCS_SS
Csinsm32.exe
Same as CleanSweep Smart Sweep-Internet Sweep
Y
NDDEAGNT
NDDEAGNT.EXE
WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
X
NDplDeamon
nstask32.exe
Added as a result of the RANDEX.E VIRUS!
X
NDplDeamon
winlogin.exe
Added as a result of the RANDEX.E VIRUS!
U
NDPS
DPMW32.EXE
Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature
U
NECMFK
necmfk.exe
Nec related - a browser and e-mail launch interface
X
Nero.ma
??
Added as a result of the JONBARR.D VIRUS! where <digits> is 2 or 3 random digits
U
NeroCheck
nerocheck.exe
Associated with Nero Burning Rom CD writing software. Used to install/control Nero driver nerocd2k.sys. Required only if you use Win2K/XP and login without admin privileges
X
Net
WINREG.EXE
Added as a result of the ASSASIN.D VIRUS!
U
Net Activity Diagram
nad.exe
Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs
U
NetAccelerator
NetAccel.exe
NetAccelerator is a software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance
X
Netapi
Netapi.exe
Added as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
X
NetApp
winserv.exe
Added as a result of the SHADOWTHIEF VIRUS!
U
NetCruiser Dialer
NCDialer.exe
NetCruiser Dialer from NetCruiser Software. An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections
N
Net-It Launcher
NILaunch.exe
Net-It - web publishing software
U
Netlimiter
Netlimiter.exe
Netlimiter - An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC.
N
Netline User
netchk.exe
Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example
X
NetManagerService
ntss.exe
Added as a result of the BESTPICS.A VIRUS!
N
NetPerSec
NetPerSec.exe
NetPerSec - measures the real-time speed of your Internet connection
X
Netropa Internet Receiver
Netropa.exe
Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
U
NetRun
NetRun.exe
NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost
N
Netscape Messenger
NETSCAPE.EXE
In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed
N
Netscp6
Netscp6.exe
Netscape 6
U
NetShow Powerpoint Helper
NSPPTHLP.EXE
If disabled, user created fonts can no longer be seen by other programs
N
NetStat Live
Nsl.exe
AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data
U
NetTime
NETTIME.EXE
From a visitor - This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP.
U
NetTurbo
netturbo.exe
NetTurbo from SharewareOnline.com. Accelerate Your Internet Connections by up to 600%. If you find it helps your connectivity leave it enabled
N
Netword Agent
nwant33.exe
An interesting browser utility that allows you to navigate by typing a single word or phrase (a NetWord) related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
X
Network Administration
NAS.exe
Added as a result of the ANTILAM.20.Q VIRUS!
U
NetWork Device Switch
NetDevSW.exe
Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X
NetworkClient
NetworkClient.exe
Added as a result of the LEMUR VIRUS!
N
NetworkSetup
dlink.exe
D-Link System Tray icon
X
Netzip Smart Downloader
npnzdad.exe
Advertising spyware
N
NetZIPFolders
nzfprop.exe
Netzip Classic zip file manager
X
NeuroMedia(IESpeaker)
NeuroMedia.exe
Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available
N
NeuroSpeech OESpeaker
OEMonitor.exe
Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not
X
New.net
rundll32.exe NewDotNetStartup
Advertising spyware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example
X
NEWDOT~1
rundll32.exe NewDotNetStartup
Advertising spyware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example
N
Newsalrt
NEWSALRT.EXE
MSNBC News system tray utility to alert you to new news
X
Newsgroup lptt01
newsgroup.exe
New variant of the RapidBlaster parasite (in a newsgroup folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N
NewsUpd
newsupd.exe
For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.
U
NFM Service
NPDOR9x.exe
Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly.
N
nForce Tray Options
sstray.exe
nVidia nForce Taskbar Utility - quick access to the nForce2 Sound Storm control panel and related utilitys
N
Nielsen NetRatings
insight.exe
Nielsen NetRatings - Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site?s audience and your customers. Is it required?
X
nikLaus
nikLaus.exe
Added as a result of the NIKLAS VIRUS!
N
NInit
NInit.exe
Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
Y
nisserv
NISSERV.EXE
Norton Personal Firewall
Y
Nisum
NISUM.EXE
Norton Personal Firewall
N
NkVwMon.exe
NkVwMon.exe
Installed with a Nikon digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
Y
NMSVC
nmSvc.exe
Covenant Eyes -surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it
U
NNSvc
nnsvc.exe
NetNanny internet filter
X
No Credit Card
??
Adult content pop-up dialler
U
NoAds
NoAds.exe
Blocks advertisement banners in Internet Explorer
U
Nod32CC
nod32cc.exe
Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button
Y
NOD32kernel
Nod32krn.exe
Nod32 Antivirus Version 2
Y
nod32kui
nod32kui.exe
Nod32 Antivirus Version 2
Y
NOD32POP3
Pop3scan.exe
POP3 E-mail part of Eset's NOD32 virus-scanner
X
nodriver
AUEKXRZ.EXE
Added as a result of a variant of the SPYBOT VIRUS!
U
No-IP DUC
DUC20.exe
Part of http://www.no-ip.comprovided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available
N
Nokia Connection Monitor
NclConf.exe
Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
U
NOMAD Detector
ctmnrun.exe
Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
N
NomdCheck
nomdchek.exe
Part of Intel's Native Audio
U
Norman ZANDA
ZLH.EXE
System Tray icon for Norman Antivirus
Y
Norton Auto-Protect
navapw32.exe
Norton Anti-Virus's background scanning process. Can be inconvenient because it scans files when Run/Opened or Downloaded/Created and you can scan files manually via right-click after downloading/copying. However, in light of some of the viruses around these days it's probably best to put up with the inconvenience
N
Norton Crashguard Monitor
cgmenu.exe
Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
N
Norton Disk Doctor
Ndd32.exe
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
Y
Norton eMail Protect
POPROXY.EXE
Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
N
Norton Navigator Loader
nnloader.exe
An older Norton utility for file management under Windows 95. More information here
U
Norton Program Scheduler
NPSsvc.exe
Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
U
Norton Program Scheduler
nsched32.exe
Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
N
Norton System Doctor
Sysdoc32.exe
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
X
Notepad lptt01
notepad.exe
New variant of the RapidBlaster parasite (in a nvd32 folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not Windows Notepad which has the same executable name
U
NovastorSchedulerd
SCHENGD.EXE
NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
U
NPROTECT
nprotect.exe
Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here
X
NSCheck
NSCHECK.EXE
Nettsetter - a market research program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter %WinDir%\SYSTEM\NSCheck.exe /uninstall (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
X
nsdlua
nsdlua.exe
All-In-One Telcom - adult content dialler
X
nsdriver
nssys32.exe
Added as a result of an unidentified VIRUS!
U
Nsengine
Nsengine.exe
Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
X
NSupdate
NSupdate.exe
Adult content dialer
X
Nsvdr
nsvdr.exe
Adult content dialler
N
NT Kernel Patch
ntkrnlpt.exe
FaxServe network fax software
X
NTDLM
csrss.exe
Added as a result of the HALE VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling as this resides in c:\winnt\system32\qossrv\
U
NTFSCLUP
NTFSCLUP.EXE
Part of ConfigSafe. What does this part do?
N
NTrtc
ntrtc.exe
Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here
X
NTsocket
NoeWinnt.exe
Added as a result of the ATAKA-E VIRUS!
X
ntvdscm
ntvdscm.exe
Added as a result of the TR/SCKEYLOG.SPY.20 VIRUS!
Y
NuTCSetupEnviron
ncoeenv.exe
Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone
U
NVCLOCK
rundll32 nvclock.dll, fnNvclock
Overclocking utility for nVidia based graphics cards?
U
NvColorInit
rundll32.exe NvQtwk.dll, NvColorInit
Associated with Nvidia based graphics cards
U
NvCpl
rundll32.exe NvCpl.dll, NvStartup
Intializes the clock and memory settings on nVidia based graphics cards. Disable if you overclock your card
U
NvCplDaemon
rundll32.exe NvCpl.dll, NvStartup
Intializes the clock and memory settings on nVidia based graphics cards. Disable if you overclock your card
N
NvCplDaemon
rundll32.exe NvQtwk.dll, NvCplDaemon
As above - the name is dependent upon the driver version you have
X
NvCplDmn
NAVSVC.EXE
Added as a result of an unidentified VIRUS!
X
nvd32 lptt01
nvd32.exe
New variant of the RapidBlaster parasite (in a nvd32 folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N
NvidiaQuickTweak
rundll32.exe NvQtwk.dll,
System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
U
NVIEW
rundll32.exe nview.dll, nViewLoadHook
This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
N
NvInitialize
rundll32.exe NvQtwk.dll, NvXTInit
Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
Y
NVmax
NVmax.exe
NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
U
NvMediaCenter
RunDLL32.exe NvMCTray.dll, NvTaskbarInit
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your
N
NVQuickTweak
rundll32.exe NvQtwk.dll,
System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
N
NvSvc
nvsvc.exe
NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
X
NvXplDeamon
xstyles.exe
Added as a result of the SMALL.AJ VIRUS!
N
nwiz
nwiz.exe
Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system
Y
Nwpopup
Nwpopup.exe
Broadcast message handler part of Novell Netware that displays server, printer and other messages. Older version of nwrecmsg below
U
nwrecmsg
nwrecmsg.exe
Broadcast message handler part of Novell Netware that displays server, printer and other messages. Newer version of Nwpopup above and can cause crashes
Y
NWTRAY
nwtray.exe
Novell Netware. Displays the red N tray icon which can be disabled (by right-click on the icon) but is also needed by the client
Y
oahstifr
oahstifr.exe
Comes with HyperTextStudio. From the supplier - The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up.
U
OAKSTART
OAKSTART.EXE
Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N
OAKTASK
OAKTASK.EXE
Taskbar utility for a control panel for a CD-RW
Y
Object Store Server
osserver.exe
Comes with HyperTextStudio. From the supplier - The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up.
N
OCAudioIni
OCAudioIni.exe
One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer
N
ocraware
ocraware.exe
Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start -> Programs
Resets OEM installation settings at bootup. Not required unless you're new to PC's
N
OEMRESET
OEMRESET.EXE
Used on OEM installations to preinstall drivers and software - not required since all the work has already been done
N
OEXCheck
EA2Check.exe
Express Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others
X
Offer Companion
offers.exe
Advertising spyware
X
Offers
offers.exe
Advertising spyware
X
Office Startup
Osa.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Osa9.exe is the Office 2000 equivalent. Some users claim there's no difference with or without it but it isn't required anyway
X
Office Startup
Osa9.exe
Resource hog that launches common MS Office components to help speed up the launch of Office programs. Osa9.exe is the Office 2000 equivalent. Some users claim there's no difference with or without it but it isn't required anyway
Autodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs
Y
ogrc
ogrc.exe
Kaspersky Labs anti-virus
N
Oil Change
OCTray32.exe
From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
U
OIM
oim.exe
Related to the O2 (was genie) mobile phone service. What does it do and is it required?
N
OmgStartup
omgstartup.exe
Sony program called OpenMG Jukebox - player and music organizer
U
OmniHTTPd
ohttpd.exe
OmniHTTPd web server from Omnicron
N
OmniPage
Opware32.exe
Part of OmniPage Pro from Scansoft (was Caere) - the fastest, easiest way to turn paper documents into digital files you can edit. Opware32.exe links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via File, Acquire Page. Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs
X
On Screen Display
OSD.EXE
By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a hot key on such a keyboard brings a corresponding panel on the screen for volume, etc. Nice but not required if you don't adjust things regularly - can also freeze
N
One Touch Monitor
1tou~2.exe
For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N
ONETOU~2
ONETOU~2.EXE
For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N
OneTouchMonitor
OneTouchMonitor.exe
For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X
Onflow
onflow.exe
Onflow is a internet company that offers an online advertising program. Not required - uninstall
U
OnlinePCfix SmoothSurfer
SS.exe
Smooth-Surfer - blocks banners, ads, popups, and cleans MRU and Recent file lists
N
OnlineTime
onlinetime.exe
OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs
X
OnSrvr
OnSrvr.exe
OnWebMedia adware
X
oo4
RunDLL32.EXE oo4.dll, DllRun
BookedSpace parasite variant
N
OP12 Reminder
Ereg.exe
Registration reminder for OmniPage Pro 12 from ScanSoft
N
OpenOffice.org x
QUICKS~1.EXE
Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). x represents the version number
N
Operator
??
Media Pilot operator, in Win.ini. Locks port open
U
Operator
xtmop.exe
Fax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported
N
OpiStat
OPISTAT.EXE
OpiStat is a European Research Institute whose goal is to understand consumer needs and opinions better
X
OPQFile
\rad03FA6.tmp
Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit
N
Optimum Online
Netsurf.exe
Optimum Online ISP software. Not required, just window dressing & advertising from Optimum
Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com
U
ORiNOCO
Cmluc.exe
Client Manager software for an ORiNOCO wireless LAN card
X
OSSProxy
OSSPROXY.EXE
Part of Nettsetter - a market research program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter %WinDir%\SYSTEM\NSCheck.exe /uninstall (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
U
OStivityInvAgt
ostivity.exe
OStivity - a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system
Y
Outpost Firewall
outpost.exe
Outpost personal firewall
X
Outwar
syslaunch.exe
Outwar adware downloader
N
Overnet
Overnet.exe
Overnet peer-to-peer (P2P) file sharing program
U
OWCCardbusTray
ocbtray.exe
Icon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface
X
OWMngr
OWMngr.exe
OnWebMedia advertising foistware - see here for exactly what to look for
N
p_981116
p_981116.exe
Win32 cabinet self extractor. More info here
X
P2P NETWORKING
P2P Networking.exe
Peer to Peer (P2P) sharing of files on the internet
X
P2P NETWORKING
p2pautostart.exe
Peer to Peer (P2P) sharing of files on the internet
U
Pagekeeper Jobs
pkjobs.exe
PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
U
Pagekeeper Lite
pkjobs.exe
PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
X
PAgent
PAgent.exe
Scans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found. See here for more info
N
Pagis Scheduler
Monitor.exe
Scheduler for the Pagis scanning suite from Scansoft.
N
Pagoo
PAGOO.EXE
Pagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
U
Palm MultiUser Config
Configtool.exe
MultiUser configuration for a Palm PDA device
N
Palm.exe
Palm.exe
Palm Desktop Software for use with Palm handheld devices. Available via Start -> Programs
N
PaltalkNetaware.exe
PALNETAW~1.EXE
Voice chat program. This program stores all buddy list infoapparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start -> Programs. Delete the shortcut in Start -> Programs -> StartUp as well otherwise it will be reinstated
U
Panda Scheduler
pavsched.exe
Panda Antivirus scan scheduler. Required if this is your virus scanner program and you have scans scheduled on a regular basis. I recommend that you scan manually so you don't need this but if you tend to forget then leave it
N
Paperport
runppdrv.exe
Loads the drivers associated with monitoring scanner status associated with PaperPort software. Can be a resource hog - see here
N
PaperPort PTD
pptd40nt.exe
PaperPort software associated with scanners
N
PaperQuote System Tray Icon
PQTRAY.EXE
PaperQuote is a wallpaper changer with daily quotes that are either for inspiration or motivation
N
PasteLister
plister.exe
PasteLister - clipboard extender. Start manually when required
X
Patch
patch.exe
Added as a result of the NETBUS VIRUS!
X
PAV.EXE
%Number%
Added as a result of the KITRO.D (or ARGEN.A) VIRUS!. %Number% can be any number
Y
PAV.EXE
PAV.EXE
PER Antivirus
Y
PAVFIRES
PavFires.exe
Panda Antivirus
U
PC Alert III
alert.exe
MSI PC Alert III - allows you to view your system and cpu temperature, fan rpm and more. Only required if you overclock
U
PC Booster
pcbooster.exe
PC Booster from inKline Global - easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition
Y
PCBG
PCBODYGUARD.EXE
PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
Y
PCBODYGUARD
PCBODYGUARD.EXE
PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
Y
PCCClient.exe
PCCClient.exe
PC-Cillin 2002 antivirus software
Y
pccguide.exe
pccguide.exe
PC-Cillin 2002 antivirus software
Y
PCCIOMON.EXE
PCCIOMON.EXE
PC-Cillin 2000 antivirus software. This is the actual virus-scanner
X
PC-Config32
corona.exe
Added as a result of the CORONEX.A VIRUS!
Y
PccPfw
PccPfw.exe
PC Cillin 2003 personal firewall
N
PCHbutton
PCHbutton.exe
Used by HP Instant Support
N
PCHealth
pchschd.exe
This is a scheduler and does not turn off PC Health. For more information refer here
U
PCIMODEM
pcimodem.exe
Associated with Lucent based Aztech MDP7800-U PCI modems.
U
PCLEPCI
ppe.exe
Pinnacle Systems PCI Performance Enhancer. This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards.
N
PCStart
Pcm25.exe
Runs as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big
N
PcSync
PcSync.exe
If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start -> Programs
U
pctspk
pctspk.exe
Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions
U
PCTVOICE
pctvoice.exe
The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. It?s better to leave it
U
PDEngine
PDEngine.exe
PerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot
N
pdexplo
PDEXPLO.EXE
PowerDesk Pro by Ontrack. Enhanced desktop and file manager. Available via Start -> Programs
N
pdfFactory Pro Dispatcher v1
fpdis1.exe
With pdfFactory you can create PDF documents from any program printing to the virtual PDF printer. Available via a desktop shortcut or Start -> Programs
N
PDirect
PDirect.exe
IBM Presentation Director software
U
pdp Server
ctpdpsrvr.exe
Included and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network
N
Pe2ckfnt SE
chkfont.exe
Used to check whether the fonts are installed properly on your computer or not for a scanner. If you don't want to execute it, you can uncheck it in the startup menu
Y
PER Email Protection
pavmail.exe
PER Antivirus
N
PerfectPrint
pfppop70.exe
Print engine used by Corel WordPerfect 7 and Presentations 7
Y
PersFw
PersFw.exe
Kerio or Tiny Personal Firewall
U
PestPatrol Control Center
PPControl.exe
PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
X
PgMonitr
PgMonitr.exe
Adware based media viewer by The Delfin Project
Y
PGPSDKSVC
pgpsdkserv.exe
PGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality
U
PGPSERVICE
pgpservice.exe
PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a fall-back mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference
N
PGPtray
pgptray.exe
PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start -> Programs
N
Phime2002a
TINTSETP.EXE
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
N
PHIME2002ASync
TINTSETP.EXE
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
U
PhoneFree version 6.2
PHONEF??.EXE
An Internet telephony application. Complicated registration and ad banners tailored to your profile - see here
N
Photo Express Calendar Checker SE
CALCHECK.EXE
If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper, Photo Express will replace the wallpaper automatically. Photo Express 2.0 has a calendar checker which checks the date on your system and updates your wallpaper accordingly
N
Photo Loader supervisory
Plauto.exe
Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures
N
PhotoWise QuickLink
quicklnk.exe
Agfa PhotoWise - PhotoWise QuickLinkTM lets you drag and drop photos right from the camera into your document (applications must be OLE-compliant). Use PhotoWise to print contact sheets and photographic prints. Create slide shows, screen savers, wallpaper and more.
N
Picasa Media Detector
PicasaMediaDetector.exe
Media detector for Picasa's automatic photo organizer
N
Pickatag
pickatag.exe
Pick-a-tag - Freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages
N
PICPRTR
PICPRTR.EXE
Program for viewing and measuring a variety of 3D CAD data formats
N
pictureBUZZTray
swtray.exe
System Tray access to PictureBUZZ on-line printing software from Streetwise Software. If you use the software set the page you use as a favourite in your browser and run it manually
U
PiDunHK
PIDUNHK.EXE
Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens
U
piiserviceOE
??
Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE
N
Pinger
pinger.exe
Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification
Y
PinnacleDriverCheck
PSDrvCheck.exe
Part of InstantCopy CD/DVD copying software from VOB/Pinnacle that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
N
Piolet
piolet.exe
Piolet - peer-to-peer file sharing client
N
PivotSoftware
wpctrl.exe
PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
U
pjWebCam
pjWebCam.exe
Webcam automation software that saves regular photos from webcam and can also act as HTTP server
U
PLEAPCPUCPL
pleapu.exe
CPU Control Panel for the Powerleap CPU upgrade
N
Plguni
Plguni.exe
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
X
Plob
kernel.com
Added as a result of the OPTIXPRO.12 VIRUS!
U
PLXSTART
PLXSTART.EXE
Sets the spindown timeout and access speeds at startup and displays the Plextor Manager 2000 splash screen for Plextor CD-RW.
N
PLXTASK
PLXTASK.EXE
Taskbar utility for a control panel for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files)
X
PMedia
winsrvc.exe
Internet marketing sofware from PMedia as used in E-Card FriendGreetings foistware - see here. Treated by Trend as the FRIENDGRT.B VIRUS!
N
PMTSHOOT
pmtshoot.exe
MS tool for troubleshooting power management problems
U
PMXInit
pmxinit.exe
Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma
U
Pnpchk
Pnpchk.exe
Aztech Labs Sound 3 PnP driver
U
PNSetup
PNSetup.exe
PopNot - pop-up killer
X
PNtask Services
pntask.exe
Added as a result of the LALA.C VIRUS!
U
Pocket Sheet Sync
PSXLTRAY.EXE
Casio Pocket Sheet synchronization software
U
point32
point32.exe
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
U
POINTER
point32.exe
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
X
POP
PopSrv***.exe
PeopleonPage foistware, bundled with Grokster where *** are random digits
PopOpen makes your windows spring open with animation effects
Y
Poproxy
POPROXY.EXE
Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
X
popsrv146
popsrv146.exe
PeopleOnPage online dating browser enhancement - also adware and privacy issues, see here. For removal instructions see here
U
PopSubtract
PopSub.exe
PopSubtract - pop-up killer
U
Popup Ad Filter
PopFilter.exe
Popup Ad Filter - pop-up killer
U
Popup Defender
PD.exe
Popup Defender - pop-up killer
U
Pop-Up Stopper
dpps2.exe
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
U
Pop-Up_Blocker
Popup.exe
A Tweak-XP component, blocks advertisement pop-up windows in Internet Explorer. Can be enabled/disabled via Tweak-XP -> Internet Tweaks
U
PopupEliminator
Popup Eliminator.exe
Popup Eliminator - pop-up killer
U
PopUpKiller
PopUpKiller.exe
PopUpKiller - pop-up killer
U
PopUpStopperFreeEdition
PSFREE.EXE
Pnaicware's Pop-Up Stopper - free limited features version
U
PopUpWatch
PopUpWatch.exe
Part of BPS Trace Remover - made by the folks who developed BPS Spyware Remover which reportedly uses an old, borrowed SpyBot database. Read this and this. Do not support these guys!
N
Post-It(r) Software
Psnotes.exe
Pop-up yellow notes on screen. Available via Start -> Programs
U
POW!
pow.exe
Pop-up killer
X
Power Scan
powerscan.exe
Foistware by Integrated Search Technologies - the people behind the ISTbar parasite
Y
PowerChute
Pwrchute.exe
During a power outage, if you're not available to save your files & close down Windows....PowerChute will do that for you. PowerChute will save your application files, close your applications and shut down your computer just like you would...otherwise, the APC UPS (Uninterruptible Power Supply) unit would go to battery until it wore down, then your computer would shutoff
N
PowerDVD
PowerDVD.exe
Launches Cyberlink's PowerDVD software and creates a system tray icon. If enabled, PowerDVD will open automatically when a DVD movie is inserted. Launch manually
U
PowerKey
PowerKey.exe
Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
X
PowerManagement
Rundlll.exe
Added as a result of the SURDUX VIRUS!
X
PowerManager
Svchost.exe
Added as a result of the JEEFO VIRUS! Note - this is not the valid svchost.exe as described here
Y
PowerPanel
POWPANEL.EXE
Power management utility on notebooks/laptops - automatically switches modes when running on battery
U
PowerPro
powerpro.exe
Part of the power professional program that loads the floating menu bar. Can be accessed from Start -> Programs, but I'd leave it alone if you use this program
N
PowerQuest Startup Utility
PQINIT.EXE
From a visitor - This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems
N
PowerReg Scheduler
PowerReg Scheduler.exe
PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
N
PowerReg SchedulerV2
PowerReg SchedulerV2.exe
PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
N
PowerStrip
powerstrip.exe
PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
N
PowerStrip
PSTRIP.EXE
PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
U
PowerTools Tray Icon
pttray.exe
PowerTools - add-on for AOL
U
Powertweak
PT2.EXE
Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured. This item is added to startup if 'Use predefined settings' is enabled in the programs options
U
Powertweak
PTCTRL.EXE
As for Powertweak above. This item is added to startup if 'Configure system at logon' is enabled in the programs options
N
PP****usb
FBDirect.exe
Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
U
PP2000 Instaupdate
PPInupdt.exe
Protector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually
Y
PP2000 Real Time Scan
PPVstop.exe
Protector Plus anti-virus software - real time scanner
Y
PP2000 Taskbar Control
PPTbc.exe
Protector Plus anti-virus software - system tray access
N
PP3100b
flatbed.exe
Twain driver for the Visioneer PaperPort 3100b scanner that allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop
U
ppass
Antispy.exe
AntiSpy firewall - program designed to combat against various types of intrusion and monitoring programs currently in use or presently being developed worldwide
U
PPControl
PPControl.exe
PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
U
PPK Setup(Server)
SEServe.exe
Programmable Power Key on Sony Vaio laptops. Using the Programmable Power Key (PPK) button, collect your e-mail automatically with one key stroke. You can also program your PPK to turn on your SuperSlim Notebook at a predetermined time and perform simple tasks - completely unattended
U
PPMemCheck
ppmemcheck.exe
PPMemCheck - extends PestPatrol's power so that the most dangerous Pests -- those that are about to execute -- are found, terminated, and cleaned from a user's system
N
PProTray
pprotray.exe
Part of the power professional program. Loads the System Tray control
N
pptd40nt
pptd40nt.exe
PaperPort software associated with scanners
U
PPUpdate
ppupdater.exe.exe
PPUpdater - is the update program that ships with PestPatrol. It is able to update licensed and evaluation versions, and presents a visual display of what it is doing. Run manually unless you think you'll forget to check for updates on a regular basis
N
PPWWebCap
PPWebCap.exe
PaperPort software associated with scanners
U
Praize Messenger
itLoad.exe
Praize IM Christian chat instant messenger
U
Prayer
PTW.EXE
Islamic Adhan program (call fpr daily prayers)
N
Precision Time Clock Checker
PrecisionTime.exe
Precision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
Y
Preload
Preload.exe
Millenium Multi-Function Keyboard driver
U
PreloadApp
hphprld.exe
HP Printer driver related
X
Premeter
nrpr.exe
NetRatings software by Opistat. OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits. This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
X
Premeter
prmt.exe
NetRatings software by Opistat. OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits. This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
N
Price Patrol
neo.exe
Price Patrol by Half.com - internet shopping companion for finding the best on-line prices
U
PrimaLauncher
Launcher.exe
Associated with PrimaScan scanners.
U
Primax 3D Mouse
3dmoused.exe
Enables the scroll button on the Primax 3-D Scroll mouse
Print Master Gold - calander feature that pops up reminders, such as birthdays
N
Print Screen Deluxe
psdeluxe.exe
Utility allows Print Scrn or Print Screen key to capture, print or save the current window
X
print sharing
??
Added as a result of the ZCREW.B VIRUS! Note - this is not the valid Windows Explorer (explorer.exe)
X
Printer
Spyassault.exe
Dubious spyware killer - see here. To be avoided
N
Printkey2000
printkey2000.exe
Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
N
printnow
printnow.exe
PrintNow - a utility that primarily allows Print Srceen or Alt+Print Screen screenshots to be sent directly to a printer
N
PrinTray
Printray.exe
Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
N
PrintScreen
UNWISE.EXE
Gadwin PrintScreen - utility to capture, print or save the current window
N
Printscreen 95
PRT95MIN.EXE
Printscreen 95 - utility to capture, print or save the current window
N
Privacy Eraser Pro
PrivacyEraser.exe
Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities
X
PrizeSurfer
prizesurfer.exe
PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online! Stealth installed malware
X
prmt
prmt.exe
NetRatings software by Opistat. OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits. This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
U
Pro PCL Status Monitor
PENGSS.EXE
Xerox printer/fax/copier status monitor (PCL = printer control language)
X
procmon
procmon.exe
Added as a result of the BIONET.40A VIRUS!
N
ProDsl
ProDsl.exe
Intel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
X
Profile
Profile.vbs
Added as a result of the WHITEHO or TRAPPY VIRUSES!
N
Profiler
Profiler.exe
Enables the Profiler to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs
X
Program File
Progmon.exe
Added as a result of the PEEPER VIRUS!
X
Program In Windows
IEXPLORE.EXE
Added as a result of the LOVGATE.F VIRUS! Note - iexplore.exe resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) wherasthe valid iexplore.exe (IE) resides in C:\Program Files
N
Promon.exe
promon.exe
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X
PromulGate
PgMonitr.exe
Adware based media viewer by The Delfin Project
N
PRONoMgr.exe
PRONoMgr.exe
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U
Propel Accelerator
PropelAC.exe
Propel Internet Accelerator
U
ProPort Startup
ProPort.exe
Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving
U
PRPCMonitor
PRPCUI.exe
Intel? SpeedStep? interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%
U
PS2
ps2.exe
Multimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost.
Y
PSDrvCheck
PSDrvCheck.exe
Part of InstantCopy CD/DVD copying software from VOB/Pinnacle that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
U
PSFree
PSFree.exe
Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N
PSIWin2.3 Connection Server
Psconsv.exe
Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
U
PsMFCard
PsMFCard.exe
Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use
U
PspContr
pspcontr.exe
Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
U
PsSound
PsSound.exe
On a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay
N
ptfb
ptfb.exe
Push the Freakin' Button - When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future
X
Ptsnoop
Ptsnoop.exe
Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info
U
pttrun
pttrun.exe
Transmeta Crusoe processor related. Reduces application launch times and makes the computer more responsive
N
PtUDFApp
PtUDFApp.exe
Sony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start -> Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar
U
Purgative
PURGATIVE100.EXE
AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack
N
Push Client
pull.exe
Client software from Interwise that MS use for their webcasts
N
Push The Freakin' Button
ptfb.exe
Push the Freakin' Button - When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future
N
PUSH6599
PUSH6599.EXE
Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software
N
PVR
PVR.exe
Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card
Y
Pwrmonit
Rundll32 PwrMonit.dll
IBM's proprietary 'battery maximiser' and power monitoring software for laptops
U
Pwrsave
Pwrsave.exe
Toshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power
U
PwrupTweakMe
PUPXPTWK.EXE
Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows? NT4, 2000 and XP configuration to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want.Boot-up options won't work if disabled
U
PWS Tray
PwsTray.exe
Microsoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start -> Programs
N
Q152404
wsript.exe Q152404.VBS
Appears to run Scandisk at bootup on NEC PCs
N
QAGENT
qagent.exe
Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled, background downloading takes advantage of unused bandwidth to download current financial information anytime your computer is connected to the Internet
N
QBCD autorun
autorun.exe
Quick Books CD
X
qbkupdbs
mqbkup.exe
Added as a result of the OPASERV.K VIRUS!
U
QCTRAY
Qctray.exe
System Tray icon providing access to the IBM Access Connections wizard on ThinkPad laptops and also allows to change the network environment. Not the same as QCWLIcon, which is pertinent only to the Wireless LAN
U
QCWLICON
Qcwlicon.exe
Used by IBM Thinkpad laptops with built-in wireless card (802.11). System Tray icon that provides a shortcut to Wireless Connection Status and allows to turn WL on and off
N
QD FastAndSafe
QDCSFS.exe
Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
U
QDM
QdmStart.exe
QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc
U
QDMStart
QdmStart.exe
QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc
X
QQ
sendmess.exe
Added as a result of the SEMES VIRUS!
N
QSort2000
QSORT.EXE
Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose Sort by Name
U
QT4HPOT
OneTouch.exe
Hewlett Packard One Touch keyboard driver. Required if you use the additional keys
U
QTaskStartup
qtask.exe
Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly, it is only required for the Desktop Alerts feature
N
QTSTUB.EXE
Qtstub.exe
Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
N
qttask
Qttask.exe
System Tray access to Apple's Quick Time viewer from version 5 onwards
U
Quick Controls
Astrotoolbar.exe
Gateway Astro Screen and Sound Controls tray icon
Y
Quick Heal On-Line Protection
Cateye.exe
Quick Heal - virus scanner
Y
Quick Heal Startup Scan
QHSTRT32.EXE
Quick Heal - virus scanner
N
Quick Shelf xx
qushelfxx.exe
Places an icon in the system tray for launching MS Bookshelf. Available via Start -> Programsxx represents the version number - ie, 98, 99
Y
Quick Startup
Fquick32.exe
For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
N
Quick View Plus
QVP32.EXE
Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start -> Programs
N
QuickBooks Delivery Agent
QBDAGENT.EXE
As far QAGENT but for QuickBooks. Can also have the version number in the name
N
Quickbooks Update Agent
qbupdate.exe
Associated with Intuit's Quickbooks. Possibly to do with the payroll update service which needs to run about 4 times per year
N
Quicken Scheduled Updates
bagent.exe
Quicken background downloading module
N
Quicken Startup
QWDLLS.EXE
Quicken option to load DLLs at startup
N
QuickenSEMessage
Qsemsg.exe
Quicken option
N
QuickFinder Scheduler
QFSCHD100.exe
Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
N
QuickFinder Scheduler
QFSched.exe
Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
Y
QuickLaunchEr
QuickLaunchEr.Exe
QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
N
Quicklink III
QL.EXE
HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode, that is, to receive faxes after a certain number of rings. Available via Start -> Programs
N
Quicknote
quicknote.exe
JC&MB Quicknote Virtual Scrapbook
N
QuickRes
QUICKRES.EXE
Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel -> Display. Not required unless you have to change resolutions on a regular basis
N
quickset
quickset.exe
Dell taskbar icon allowing you to quickly change settings
N
QuickTime Task
Qttask.exe
System Tray access to Apple's Quick Time viewer from version 5 onwards
N
QuickTime Update Completion x
quicktimeupdatehelper.exe
Different numbers caused by number of launches. So if 3 updates are made separately, 3 would appear (in theory)
U
QuickTV
QuickTV.exe
Infra-red remote control driver for the AVerTV Studio TV tuner/personal video recoder from AVerMedia. Required if you use the remote control
N
QuikSync
QUIKSYNC.EXE
Used by Iomega drives. Available via Start -> Programs
Y
r_server
r_server.exe
Radmin - remote admistrator server
X
RA Server
Slave.exe
Added as a result of the RA VIRUS!
U
RadBoot
RadBoot.exe
RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings
U
RAMDef
ramdef.exe
Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. Some users swear by programs such as this but I suggest you read this article and make up your own mind
U
RamIdle
ramidle.exe
RAM Idle - A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows. Some users swear by programs such as this but I suggest you read this article and make up your own mind
U
RAMpage
RAMpage.exe
Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source
Y
RapApp
RAPAPP.EXE
Application protection component of BlackICE PC Protection (was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch
X
RapidBlaster
rb32.exe
Homepage hijacker (adult content) - see this newsgroup thread
Y
Raptor Mobile
vpnservices.exe
Symantec VPN Client used to connect to corporate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking
Y
RAV8Tray
ravtray8.exe
RAV anti-virus related
X
RAVEN_VLZS.EXE
RAVEN_VLZS.EXE
Another eAcceleration program - spyware. Read their privacy statement here
X
RavTime
Mstray.exe
Added as a result of the WUKILL.A VIRUS!
N
Ray Process Killer
Prkill.exe
Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click Ok to terminate it. Use CTRL+ALT+DEL instead
X
rb32 lptt01
rb32.exe
Homepage hijacker (adult content)
X
RCSync
RCSync.exe
PrizeSurfer related. PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online! Stealth installed malware
X
RDLL
RunDll16.exe
Added as a result of the SDBOT.F VIRUS!
X
rdvs
??
Added as a result of the ULTIMAX VIRUS! <filename.exe> is the worm filename created
N
RealDownload
RealPlay.exe
Download manager. Available via Start -> Programs
X
RealDownload Express
npnzdad.exe
Advertising spyware
N
Reality Fusion GameCam SE
RFTRay.exe
System Tray access for Logitech's Reality Fusion GameCam. For more details see here. Available via Start -> Programs
N
RealJukeboxSystray
tsystray.exe
System Tray icon for RealJukebox
X
realplay lptt01
realplay.exe
New variant of the RapidBlaster parasite (in a RealPlay folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note! - this is not RealPlayer which can have the same executable name
N
Realpopup
Realpopup.exe
RealPopup - Replaces old winpopup with a full featured freeware tool which remains stable and simple as its predecessor
N
Realsched
realsched.exe
Application Scheduler installed along with RealOne Player. Runs independently of RealOne Player, to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. If it can't be disabled try deleting or renaming realsched.exe and then delete the entry in the registry
X
Real-Tens
Real-Tens.exe
DownloadWare based advetising spyware
Y
Realtime Monitor
realmon.exe
Realtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates
U
RealTimeUpdate
RealTimeUpdate.exe
Product description in properties is InternetExplorerCommunicationAgent Module
N
RealTray
RealPlay.exe
System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling SmartCenter via Preferences
Y
Recguard
recguard.exe
On HP computers, Recguard prevents the deletion or corruption of the WinXP Recovery Partition. Without it enabled, it is possible to knock that completely out and force the customer to send the PC back to HP for a re-image, possibly at the customer's expense
N
Reclip
reclip.exe
Reclip Popup Clipboard manager
N
Recover
??
Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete
N
Red Flag
redflag.exe
PMS prediction program with modes for guys and girls - no longer available
X
Red Swoosh EDN Client
RSEDNClient.exe
Red Swoosh - mechanism used by web sites to allow you to download files from those sites quicker and more efficiently. Note from the license agreement they automatically update the software and share non-personally identifiable information with others in the network
U
Referee
referee.exe
MediaComm's monitor for file association changes. Stop rogue programs from screwing your settings either on installation or whenever they run
N
Refresh
Refresh.exe
(Iomega) Refresh - loads the Iomega desktop icons at startup
X
Reg
Reg.hta
Homepage hi-jacker. Removal instructions here
X
Regcheck
~CAB001.EXE
Added as a result of the CYBERSPY VIRUS!
X
RegCleaner
SYSio32.exe
Added as a result of an unidentified virus VIRUS!. Note - do not confuse this with the popular RegCleaner registry cleaner freeware
X
RegCompres
Regcpm32.exe
Added as a result of the POLDO.B VIRUS!
X
RegCompres
REGCPM32.EXE
Adult material dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
X
regedit
regedit.exe
Added as a result of the BRID.A VIRUS! Note - resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). The valid regedit.exe resides in C:\Windows (Win9x/Me/XP) or C:\Winnt (WinNT/2K)
N
Register MediaRing Talk
register.exe
If you don't want to register MediaRing and be reminded about it every bootup disable it
U
RegisterDropHandler
REGIST~1.EXE
Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for Send To can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation
N
Registration-Studio 8
RegTool.exe
Registration for Pinnacle Studio Version 8 home video software from Pinnacle Systems
X
Registry
wscript.exe
Added as a result of the VBSWG VIRUS!
X
Registry Loader
regloadr.exe
Added as a result of the GAOBOT.AO VIRUS!
X
Registry Scanner
regscanr.exe
Added as a result of the OPTIX LITE FIREWALL BYPASS VIRUS!
X
Registry Services
Registry.exe
Added as a result of the DOWNLOADER.CILE VIRUS!
Y
RegProt
Regprot.exe
RegistryProt from Diamond Computer Systems - protects the system registry against changes
Y
Regrun2
WatchDog.exe
Greatis Software's RegRun 3 Security Suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, viruses, etc
N
RegShave
regshave.exe
Part of the USB driver set for the Fuji Finepix series or digital cameras as it works fine without it as mentioned here
X
regsrv
regsrv.exe
Added as a result of the OPTIXPRO.11 VIRUS!
X
regsvc32
regsvc32.exe
Homepage hijacker that changes your homepage to an adult content site
U
REGSVR32
regsvr32.exe ctasio.dll
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
U
RegTweak
RegTwk.exe
Rage3d Tweak - ATI Radeon tweaker which allows access to registry tweak options, custom display modes, refresh rates and overclocking all through an easy to use interface
X
RegVer
REGVER.EXE
Added as a result of the LATINUS.16 VIRUS!
X
RegWrite
csrss.exe
Added as a result of the SOKACAPS VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
U
Regx10EXE
atix10.exe
ATI Remote Wonder - PC wireless remote control
U
ReleaseRAM
RRAM.exe
Release RAM allows your computer to run faster and uses your computer's RAM more efficiently. Some users swear by programs such as this but I suggest you read this article and make up your own mind
N
RemHelp
Remhelp.exe
BT Voyager ADSL Modem Help related
N
Reminder
reminder.exe
From MS Money. Reminds you of your bills
N
Reminder-cpqXXXXX
remind32.exe
Compaq printer Registration
N
Reminder-hpcXXXXX
remind32.exe
HP CD-Writer Registration
N
Reminder-ranXXXXX
remind32.exe
Registration reminder widget for Rand Mcnally maps
N
reminder-ScanSoft Product Registration
remind32.exe
Registration reminder for ScanSoft products such as PaperPort
U
Remote Access
rnaapp.exe
Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie,analogue 56K modem) and terminates after the connection is closed
X
Remote Access Slave
Synchost.exe
Added as a result of the RIPJAC VIRUS!
U
Remote Desktop Computing
marspc.exe
Marspc Remote Desktop Computing
U
Remote Management Agent
zenrc32.exe
Part of Novell's ZENworks - Complete End-to-End Directory-enabled Network Management. Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation
U
remote master
remote master.exe
Required if you want your ASUS Remote control to work at all. Available via Start -> Programs
X
Remote Procedure Call Locator
RUNDLL32.EXE reg678.dll ondll_reg
Added as a result of the LOVGATE.F VIRUS!
N
Remote_Agent
RemoteAgent.exe
Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings, you will need this, otherwise can be disabled. Available via Start -> Programs
N
RemoteControl
rmctrl.exe
Added via the installation of PowerDVD 4 software. Function unknown but not required
X
Removed.exe
Removed.exe
GatorCheat - adware downloader
U
RepliGo Assistant
RepliGoMon.exe
Cerience RepliGo software - any document you have on your PC can be transferred to your mobile device
N
Resolution Assistant
matcli.exe
Dell Resolution Assistant
N
Resource Meter
rsrcmtr.exe
Windows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes
Y
RestoreIT!
VBPTASK.EXE
RestoreIT! from FarStone allows you to recover instantly your files, system configuration, and even your operating system, to any point in time prior to the data loss or system failure.
U
Resume Copy
copyfstq.exe
Part of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut down. Not required if your not using the program or don't care about that function
U
ResumeFixClocks
resumefix.exe
Part of the RadeonTweaker utility for overclocking ATI Radeon graphics cards
U
RetrieverScheduler
retrieverscheduler.exe
80-20 Retriever from 80-20 - 80-20 Retriever is a powerful personal search tool that encompasses email folders, archived email, and local or network file systems, giving users one point of fast, accurate search for all personal information. Real-time scheduler - shortcut available
N
RexSyMon
rexsymon.exe
Intellisync for REX sychronization software for Xircom REX MicroPDAs for sharing information between the PDA and PC
X
RFTray
??
Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs
N
RFX_auto_upgrade
rundll32.exe npvpg005.dll
A browser plugin called the RichFX player. Here is a link to download RichFX's solution to removing the auto upgrade
U
Ring Central Fax
rcenterrll.exe
Only needed if you want a PC to answer faxes automatically
X
rIOphosIs
rIOPHosIs.vBS
Added as a result of the RIOSYS VIRUS!
U
RivaTuner
RivaTuner.exe
RivaTuner for tweaking nVidia graphics cards. Required if you make any changes
U
RivaTunerStartupDaemon
RivaTuner.exe
RivaTuner for tweaking nVidia graphics cards. Required if you make any changes
N
rmmon
mprmmon.exe
Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card
U
RNBOStart
sentstrt.exe
Program used to initialise the VxD virtual driver for Sentinel drivers associated with Rainbow H/W keys that plug-in to the parallel port. These are usually supplied with workplace design tools and restrict the use of the software only to the machine to which the H/W key is connected. Required if you have such tools
N
RoboFormWatcher
RoboFormWatcher.exe
AI Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs
U
Rocket.Time
RocketTime.exe
Time synchronization software from Rocket Software
N
RoxioAudioCentral
RxMon.exe
Part of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Exact purpose unknown?
N
RoxioDragToDisc
DrgToDsc.exe
Part of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Packet writing like DirectCD?
N
RoxioEngineUtility
EngUtil.exe
Part of Roxio EasyCD Creator 6.0. Not required for Roxio to work properly. Exact purpose unknown?
U
RP32
rp32.exe
ControlIT (was Remotely Possible) from Enterprise International for remote control and access to Win9x/NT systems.
Y
RPCSS.exe
rpcss.exe
Remote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se, a program may need it to communicate with other components of itself. You could delete the program but if any abnormalities occur soon after then reinstall. Under NT, deleting this critical system component will disable the OS. For a more detailed explanation see here
X
RRMedic
rrmedic.exe
Troubleshooting utility for the RoadRunner cable internet service. Not required and you are advised to completely uninstall it. Provides a lot of false alarms and gets a lot of people panicking about there internet connection
U
rscmpt
rscmpt.exe
Required on the GeFroce 64 meg MX card to show the full 64 meg memory and appears to be a software memory emulator running under the Win2K - see here. High CPU useage results - hence the U status
U
rsMenu
rsMenu.exe
Synchronizes a Casio PDA with MS Outlook
X
RSS
rundll32 RSSToolbar.dll, DllRunMain
Related Sites toolbar - SearchAndClick hijacker variant
Y
rtvscn95
RTVSCN95.EXE
Real-time virus scanner component of Norton Anti-Virus Corporate Edition
U
RuLaunch
RuLaunch.exe
Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
X
Run MSupdt32
wscript MSupdt32.vbs
Added as a result of the CASER VIRUS!
U
Run POPFile in background
perl.exe
POPFile - E-mail spam blocker
U
Run POPFile in background
wperl.exe
POPFile - E-mail spam blocker
U
Run StartupMonitor
StartupMonitor.exe
Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
X
Run[0]
syscnfg.exe
Added as the result of an unidentified VIRUS!. syscnfg.exe is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X
Run_cd
Run_cd.exe
Added as a result of the GHOST.23 VIRUS!
X
run=
CapsideRed.pif
Added as a result of the CASPID VIRUS!
X
run=
cekirge.scr
Added as a result of the KERGEZ.A VIRUS!
N
run=
cmmpu.exe
MIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as part of the software for a Guillemot Maxi Muse sound card (PCI)
X
run=
dllreg.exe
Added as a result of the NIBU, BAMBO and DUMARU VIRUSES!
X
run=
explore.exe
Added as a result of the GRAYBIRD.G VIRUS!
X
run=
HgzServer.exe
Added as a result of the GRAYBIRD.C VIRUS!
N
run=
hpfsched
HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
N
run=
lxdboxcp.exe
Lexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS
X
run=
MagicRulez.exe
Added as a result of the MINIMAN VIRUS!
X
run=
Mail_Check.exe
Added as a result of the PANOIL.C VIRUS!
X
run=
msiexec16.exe
Added as a result of the OPTIX PRO series of VIRUSSES!
N
run=
pcfix2k.exe
pcfix2k splash screen
X
run=
ptlseq.cpl
PhoenixNet BIOS adware. See here
U
run=
ramsys.exe
Advanced Startup Manager from Rays Lab
X
run=
Sp00lsv.exe
Added as a result of the GRAYBIRD.E VIRUS!
X
run=
svch0st.EXE
Added as a result of the GRAYBIRD VIRUS!
X
run=
SVCH0ST.EXE
Added as a result of the GRAYBIRD.D VIRUS!
X
run=
Virus_Cleaner.exe
Added as a result of the PANOL VIRUS!
X
run=
VLFHO.exe
VIRUS!
X
Run32dll
ocxdll.exe
Unidentified mIRC VIRUS!
X
run32dll
task32.exe
Unidentified mIRC VIRUS!
X
run32dll
WINClock.exe
Unidentified mIRC VIRUS!
U
RunAlert
AService.exe
MSI MOtherboard PC Alert III - MSI motherboard monitoring software. Only required if you overclock your system
N
runAP
oemreset.exe
Resets OEM installation settings at bootup. Not required unless you're new to PC's
N
runAP
runAP.exe
Not required but what is it?
X
Runapp32
Runapp32.exe
Added as a result of the NEODURK VIRUS!
X
rundli32
rundli32.exe
Added as a result of the LADE VIRUS!
X
rundll###
die.exe and either ttg.exe or secure.exe or mdll.exe or secure.bat
Added as a result of the SUMTAX VIRUS! where ### is 134, 569, 777 or 946
X
Rundll16
Rundll16.exe
Added as a result of any number of VIRUSES!
X
Rundll32
Rundll32.exe
Added as a result of the DVLDR VIRUS! Note - this is not the valid Rundll32.exe as it's in the Windows\Fonts directory
N
RunDLL32
RunDLL32.exe NvMCTray.dll, NvTaskbarInit
System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
N
RUNDLL32
RUNDLL32.EXE NvQtwk, NvCplDaemon
This loads the System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again
U
rundll32
Rundll32.exe Wf2kcpl.dll, DllLoadDefaultSettings
Loads default settings for Leadtek Winfast graphics cards
X
Rundll32
Windows.exe
Added as a result of the QQPASS.E VIRUS!
X
RunDLL32
winupdate.exe
Unidentified VIRUS! - possibly a BMBOT variant
X
Rundll32.exe
Proyecto1.exe
Added as a result of the GRUEL VIRUS!
X
Rundll32.exe
Root.exe
Added as a result of the GRUEL VIRUS!
X
Rundll32_7
rundll32.exe MSIEFR40.DLL, DllRunServer
BrowserAid Featured Results hijacker variant
X
Rundllsystem32
Rundllsystem32.exe
Added as a result of the NETDEVIL.B VIRUS!
U
RunOnce
RUNONCE.EXE
Part of MS Data Access Components - only required if you use these
X
RunProg
Server.exe
Added as a result of the OPTIX.04.A VIRUS!
X
RunProg
wini.exe
Added as a result of the OPTIX.04.D VIRUS!
U
RunSysd32
RunSysd32.exe
DesktopShield2000 by Stphane Groleau. Locks the desktop at bootup so that users cannot bypass the Windows screensaver password. Only essential if using the program and is an optional setting. It can be disabled from within
X
RunWindowsUpdate
uptodate.exe
BrowserAid/BrowserPal foistware
X
rvde
??
Related to li-speed****
X
RVP
bpc.exe
Spyware included with the latest version of Grokster. Also see here
N
RxMon
rxmon9x.exe
Dell Resolution Assistant
N
S3TRAY
S3Tray.exe
S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display
U
S4F
S4F.exe
S4F internet filtering software
U
SA
Sa3.exe
Logitech QuickCam driver.
U
SA Service
SAservice.exe
Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs.
N
Sa3dsrv
Sa3dsrv.exe
3D sound extension for Windows
N
Sabreserver
SABSERV.EXE
Airline reservation software from Sabre. Available via Start -> Programs
N
SafeInstall.exe
SAFEIN~1.EXE
Monitors a download and ensures an newer version of a file isn't replaced by an older one
N
SafeOFF
SafeOff.exe
Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation
X
SafeSurfingUpdate
SSUpdate.exe
DyFuCa/MoneyTree parasite variant
U
Safeworld
Freedom.exe
SafeWorld Internet Security
N
SAgent2ExePath
SAgent2.exe
Seiko Epson printer status agent. Disable if printer is not used often
X
SAHagent
Sahagent.exe
ShopAtHomeSelect parasite
X
SAHBundle
bundle.exe
ShopAtHomeSelect parasite related
U
SAIMON
SaiMon.exe
Saitek joystick driver
N
SaiSmart
SaiSmart.exe
Smart Button Special Sauce - included with the latest software for Saitek game controllers. Related to the S, Shift or Smart button.
U
SaitekAutoConfigure
saicnfig.exe
Configuration for Saitek game controllers
N
SandIcon
SandIcon.exe
SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources
U
SAUpdate
SAUpdate.exe
Big Brother from Quest Software. System and network monitor
X
Save
Save.exe
Rebranded version of SaveNow advertising spyware
X
Savenow
SaveNow.exe
Advertising spyware. Installed as part of the Kazaa Media Desktop bundle for example
X
Savenow
savenow.exe
Added as a result of the SPREDA.B VIRUS!
U
Say The Time 5.0
SAYTIME.EXE
This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly
N
SB Audigy 2 Startup Menu
/l:eng
Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
X
SB Watchdog
SBWatchdog.exe
Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here for more information
U
SBDrvDet
SBDrv.exe
Detects the Easy Front-Panel Audio Connectivity Drive Internal Drive Bay on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one
X
SBHC
sbhc.exe
SuperBar parasite - uninstall available here
N
SBMX
sbmx.exe
SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
U
sc
sc.exe
Watchdog 2.0 Software - monitoring program
N
sc
scrubxp.exe
ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc
X
scan
mscman.exe
Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!
N
Scan Wizard
button.exe
Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect.
X
ScanDisk
ScanDisk.exe
Added as a result of the GANDA.A VIRUS! Note! - this is not the valid ScanDisk Win9x/Me standard disk error checker
U
ScanInicio
Inicio.exe
Part of Panda Anti-Virus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active
N
Scanner Detector
SDetect.exe
ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the GO button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the GO button
X
Scanreg
??
Added as a result of the QQPASS.E VIRUS!
X
ScanRegistry
nsrvnt.exe
Added as a result of the NERTE VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe
X
ScanRegistry
scanregv.exe
Added as a result of the MASTERLOCK VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe
X
ScanRegistry
Scanregw.exe
Added as a result of the STATOR VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable Scanregw.exe is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt). Runs from the registry RunServices key as opposed to the Run key
X
ScanRegistry
Scanregw.exe
Added as a result of the GWGHOST VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable Scanregw.exe is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
Y
ScanRegistry
Scanregw.exe /autorun
Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable Scanregw.exe is located in %windir% (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
N
SCardSvr
scardsvr.exe
Related to SmartCard readers and sometimes uses lots of system resources
X
SCardSvr
SCardSvr32.Exe
Added as a result of the MOFEI.B VIRUS!
N
Scheduled Maintenance
Scheduled_Maintenance.exe
Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs
X
Scheduling Agent
Scheduler.exe
Added as a result of the SUBWOOFER VIRUS! Note! - this is not the real MS Scheduling agent listed above as the executable is incorrect
U
SchedulingAgent
mstask.exe
MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
U
SchedulingAgent
mstinit.exe
MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
U
Schmaili
Schmaili.exe
Schmaili - insert animated smilies into your e-mail
Y
SCHWIZEX
SCHWIZEX.EXE
Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
N
Scotia OnLine Recovery
etdirrcv.exe
Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
N
Scotia OnLine Security v*.* Recovery
etdirrcv.exe
Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
N
ScrapPad
Scrappad.exe
ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper
U
Screen Guard
launch.exe
Part of Access Denied security and privacy software
U
Screen Guard Message Scan
sgms.exe
Part of Access Denied security and privacy software
N
Screen Saver Control
FSScrCtl.exe
Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon
Y
ScriptBlocking
SBServ.exe
Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information
Y
ScriptSentry
Scriptsentry.exe
Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly
U
Scroll-In-Mouse V2.0
SCROLL.EXE
Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features
X
ScrSvr
ScrSvr.exe
Added as a result of the OPASOFT.A VIRUS!
U
SDaemon
sdaemon.exe
PC Security from Tropical Software. 'PC Security? 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, Drag and Drop support, plus many other handy features'
N
SDetect
SDetect.exe
ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the GO button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the GO button
U
Search-Aide
Search-Aide.exe
Search-Aide quick search application - very useful for searching the web or looking for images, news, files, etc.
X
SearchEnhancement
scbar.exe
IE search hijacker
X
Search-Exe
SE.exe
Hijacker - redirecting to Search-exe.com
U
SecondChance
sctray.exe
Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash
X
Secret-Crush
start.exe
Hijacker that may reset your browser's home page and/or search settings to point to undesired sites
U
Secsys
Secsys.exe
Key Interceptor - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
N
SecureCleanIEClean
SCIEClean.exe
SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches
U
SecureItPro
Secureitpro470p.exe
SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop
X
SecureLogin
Mslg32.exe
Added as a result of the REDZED VIRUS!
X
SENTRY
SENTRY.exe
From IP Insight. Allows website owners to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website. Will be detected by most firewalls and the majority of home users should disable it
Y
serrdctl.exe
serrdctl.exe
Shared Modem Service Client Event Viewer - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems
X
server
server.exe
Added as a result of the DELTAD.A VIRUS!
X
SERVER.EXE
SERVER.EXE
Added as a result of the BUSHTRO122 VIRUS!
X
server.exe
server.exe
Added as a result of the SMOKODOOR VIRUS!
X
serverex
Server.txt.vbs
Added as a result of the DELTAD.A VIRUS!
N
Service Connection
bwtray.exe
For Compaq PC's. Part of Backweb
N
Service Connection
sccenter.exe
For Compaq PC's. Part of Backweb
X
Service Host
spoolos.exe
Added as a result of the TORVEL VIRUS!
N
Service Manager
sqlmangr.exe
SQL Server Service Manager - provides tray access to SQL server,the server agent and MSDTC. Available via Start -> Programs
U
ServiceConfig
ispbeg.exe
Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation
X
Services
??
Added as a result of the RANCK or RANCK.B VIRUSSES!
X
services
start.bat
Added as a result of the ZCREW VIRUS!
X
Services Host
Scchost.exe
Added as a result of the DONK VIRUS! Note - this is not the valid svchost.exe as described here
X
Services.EXE
services.exe
Added as a result of the KAZPING VIRUS! Note! - this is not the valid Windows Service Controller (services.exe) process
N
Serv-U
serv-u32.exe
FTP server
X
Serv-U
wssdsu.exe
Added as a result of the MANIFEST VIRUS!
N
ServUTrayIcon
ServUTray.exe
System Tray icon for Serv-U FTP server.
N
SetDefaultMIDI
MIDIDef.exe
Related to a Soundblaster Audigy soundcards.
X
setFTPBack
createsw.exe
Added as a result of the FTP_BMAIL VIRUS!
N
SETI@home
SETI@home.exe
SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
N
seticlient
SETI@home.exe
SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
N
SetiQueue
Setiqu~1.exe
Provides work unit buffering for Seti@Home clients - see here for more details
N
SetiSpy
SetiSpy.exe
From the site - 'SETI Spy is a little program I wrote to spy on the progress and performance of the SETI@home client. I call it a spy because I tried to make it as unobtrusive as possible'
N
setup
hphprld.exe ....setup.exe
Properties reveal it as HP DeskJet Setup. Probably not required
N
SetupICWDesktop
icwconn1.exe
Appears to be the Internet Connection Wizard from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
X
SetVrc
setvrc.exe
Added as a result of the HUNTOCX VIRUS!
X
Sex Teris
st01b.exe
Added as a result of the REPAD VIRUS!
X
SFtrb Service
cftrb32.exe
Added as a result of the SOBIG.D VIRUS!
U
SfWinStartInfo
sfWinStartupInfo.exe
SFIRM32 Online Banking software
U
sgtray
sgtray.exe
StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
N
Share-to-Web Namespace Daemon
hpgs2wnd.exe
HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites. In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs
Y
Sharing and Mapping Software
DShmap.exe
Intel AnyPoint internet sharing software
N
SharkEject
AEJCT32.exe
Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required
X
Shell
ray.exe
Homepage hijacker re-directing browsers to adult content websites
X
Shell
Shell32.exe
Added as a result of the BADSECTOR VIRUS!
X
Shell
Tray.exe
Homepage hijacker re-directing browsers to adult content websites
X
ShellApi
SHELLMSN.EXE
Added as a result of the NETDEV.B VIRUS!
X
Shellapi32
Shellapi32.exe
Added as a result of the NETDEVIL (or NERTE) VIRUS!
X
ShellEx
ShellEx.exe
Added as a result of the ANAKHA VIRUS!
X
Shine
Shine.exe
Added as a result of the HAPPYLOW (or NISHE-A) VIRUS!
N
shockmachine reminder
SmReminder.exe
Shockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version
N
Shockwave Init
SWINIT.EXE
Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
N
ShortKeys 99
SHORTKEY.EXE
ShortKeys from Insight Software Solutions - allows you to program keys with text strings
Card reader for memory cards from digital cameras.
U
SHPC32
SHPC32.exe
Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled
Y
ShStatEXE
SHSTAT.EXE
From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs
U
Shutdownaware
shutdownaware.exe
Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system
U
ShutDownPro
ShutDownPro.exe
ShutDownPro - shutdown, reboot, logoff your System with one mouse click
X
Sicom
Sicom.exe
Added as a result of the NETLIP VIRUS!
U
SideACT
SideACT.exe
SideACT organizer software
N
SideWinderTrayV4
SWTrayV4.exe
MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
X
Singapore
singapore.exe
Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself
N
SiS KHooker
khooker.exe
SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U
SiS Tray
sistray.exe
System Tray icon for SiS based graphics. Note - this resides in C:\Windows\System
U
siscolor
color.exe
Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
U
SiSSetCDfmt
SiSSetCDfmt.exe
Related to a Silicon Integrated Systems Corp (SiS) product
U
SISSoundman
Soundman.exe
Related to a Silicon Integrated Systems Corp (SiS) product
U
SiSSWLED
sisswled.exe
System Tray utility for SiS 900 network cards
X
sistrai.exe
sistrai.exe
Added as a result of the PROVA VIRUS!
U
sistray
sistray.exe
System Tray icon for SiS based graphics. Note - this resides in C:\Windows\System
X
sistray
sistray.exe
Added as a result of the PROVA VIRUS! Note - this resides in C:\Windows\Command
N
SiSUSBRG
SiSUSBrg.exe
SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP. Souldn't be in startup
U
SK9910DM
SK9910DM.EXE
Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U
SKDAEMON
SKDAEMON.EXE
Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
N
skinkers
skinkers.exe
Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's Desktop Ozzy and Arsenal's Desktop Wenger - see here
Y
SkyBlaster Scheduler
SSFSch.exe
For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y
SkySurfer Management Service
SmaServ.exe
For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
N
SleepManager
SleepMgr.exe
This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode
X
slide
Iexplore.exe
Added as a result of the GASLIDE VIRUS! Note - this is not the valid Internet Explorer file iexplore.exe
N
slimp3
SliMP3 Server.exe
Slimp3 Server - presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC
N
Slingshot
SLINGS~1.EXE
Atomica Slingshot -reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more
N
Sm56acl
sm56hlpr.exe
Helper utility for Motorola based SM56 software modems - resides in the System Tray
N
Smapp
smtray.exe
System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N
Smart Card Service
ScardSvr.exe
For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly
U
Smart Connect Monitor
SCMon.exe
Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U
Smart Connect Setup
SCSetup.exe
Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
N
Smart Label O Server
ssloserv.exe
Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N
Smart Label RFViewer
SSLFVIEW.EXE
Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N
Smart Type Assistant
sta.exe
Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer
U
Smartalec
pcaccel.exe
Smartalec PC Accelerator - system optimization utility
N
sMaRTcaPs
SMARTC~1.EXE
sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys
U
SmartPCXL
pcaccel.exe
Smartalec PC Accelerator - system optimization utility
Y
smc
smc.exe
Sygate Firewall
Y
SMC Service
spfsmc.exe
Sygate Firewall
Y
SmcServices
spfsmc.exe
Sygate Firewall
Y
Smcsta.exe
Smcsta.exe
SMC Networks wireless PCI card driver.
N
Smith Micro try
smiptray.exe
Smith Micro shared files. Comes with D-Link web cam
U
SMS Application Launcher
LAUNCH32.EXE
Microsoft Systems Management Server - used to manage computers on a network remotely
U
SMS Client Service
clisvc95.exe
When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)
U
SMS Win9x Message Agent
??
This program assigns a user to a Systems Management Server site
Y
Smserial
sm56hlpr.exe
Motorola based modem driver
N
SMSI Loader
SMLoader.exe
Smith Micro HotFax - fax software
X
SMSS
smss.exe
Added as a result of the FLOOD.F VIRUS! Note - this is not the valid windows file smss.exe as it resides in C:\Winnt\system32\CatRoot\ rather than C:\Windows\System32
X
smsys
Explorer.exe
Added as a result of the CLICKER-C VIRUS! Note! - the valid explorer.exe is located in C:\Windows or C:\Winnt whereas this one is located in a C:\Windows\Template or
X
smsys
vi.exe
Adult content dialler
N
Smtray
smtray.exe
System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N
Snsicon
Snsicon.exe
Launches a screensaver program from Second Nature
U
SO5 Integrator Pass One
sointgr.exe
StarOffice 5. See here for more details
U
SO5 Integrator Pass Two
sointgr.exe
StarOffice 5. See here for more details
X
Sock32
sock32.exe
Added as a result of the SDBOT VIRUS!
Y
SoDA Startup
SodaStartup.exe
Used by the Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software
N
soffice
SOFFICE.EXE
Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).
Y
SOFTinst
??
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
Y
Solo Sentry
Solosent.exe
Solo Antivirus
U
SoloSchedule
Solocfg.exe
Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis
N
Sonic A3D Control
vrtxctrl.exe
Sound related options
N
SoniqueQuickStart
sqstart.exe
Quickstart for Sonique audio player. Available via Start -> Programs
N
SonnReg
SonnReg.exe
Part of E-Color 3Deep for color calibration.
N
soundman
soundman.exe
Utilty software for the built-in soundcards on some motherboards from companies such as ASUS and Gigabyte. Available via Start -> Programs
N
SourcePath
gwreg.exe
Used to update Gateway registry settings for System Restoration Kit and Web update programs
X
sp
regedit-s .... sp.dll
Malicious javascript annoyance that changes the default search engine in IE to one of many including topsearcher. See here for more and a fix
X
sp
sp.reg
IE search hijacker - changes the default search to http://www.gocybersearch.com/
X
SP00LSV
Sp00lsv.exe
Added as a result of the GRAYBIRD.E VIRUS!
U
SpamPal
spampal.exe
SpamPal - anti-spam tool
N
Spdstart
Spdstart.exe
Norton Utilities Speed Start. This feature optimizes the start up speed of launching applications, such as Word and Excel.
U
Speaking Clock Deluxe
SpClDlx.exe
Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly
N
Speed racer
CTSRReg.exe
Software for a Creative sound card
U
Speed Tec
speedtec.exe
Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled
U
Speedkey
SPEEDKEY.EXE
Additional keyboard shortcuts on MS programmable keyboard
U
Speedtouch USB Disgnostics
Dragdiag.exe
For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
N
Spellex Anywhere
sa.exe
Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used
Y
SpIDerMail
spiderml.exe
DrWeb antivirus Spider Mail e-mail scanner
N
Spinner Plus
spinner.exe
Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness. Available via Start -> Programs
X
Spool lptt01
spool.exe
New variant of the RapidBlaster parasite (in a spool folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
SpoolerSubSystemProcess
SpooI32.exe
Added as a result of the SPY.EHKS.21 VIRUS! Note - the I between o and 3 is a captial i not a lower case L
X
Spoolsv
Spoolsv.exe
Added as a result of the CIADOOR.121 VIRUS! Note - Spoolsv.exe is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
X
spp
regedit -s spp.reg
IE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/
Y
sppbridge
sppbridge.exe
Associated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example.
X
sps
regedit-s .... sp.dll
Malicious javascript annoyance that changes the default search engine in IE to one of many including topsearcher. See here for more and a fix
U
SPSTEALT
SmartProtectorPro.exe
Smart Protector Pro - internet privacy tool that erases tracks, MRU lists, etc
U
Spy Blocker
spyblocker.exe
SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all
X
SpyBlast
SpyBlast.exe
Spyware killer that is in effect autoinstalled foistware, targeted by SpyBot, among others
U
SpyBotSnD
Spybotsd.exe
Spybot - Search & Destroy - free multi-spyware removal tool from Patrick Kolla
X
Spybott lptt01
spybott.exe
New variant of the RapidBlaster parasite (in a Spybott folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
SpyCop ScanCheck
MAIN.EXE
SpyCop surveillance software detection
X
SpyNuker
Spynuker.exe
A spyware removal program by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ?TrekData? and ?Blue Haven Media?, who distribute spyware through ActiveX drive-by-download on web pages
U
SpyStopper
spystopper.exe
SpyStopper - blocks intrusive spyware, Web bugs, worms, scripts, advertisements, and cookies. Protects you from being profiled and tracked
U
SpySweeper
SpySweeper.exe
Spy Sweeper - detects and removes spyware
X
Spyware
Spyware.exe
BPS Spyware Remover - reportedly uses an old, borrowed SpyBot database. Read this and this. Do not support these guys!
U
Spyware Guard Control Panel
spywar~1.exe
SpywareGuard provides a real-time protection solution against spyware
X
Spyware Nuker Installer
SpywareNukerInstaller.exe
A spyware removal program by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ?TrekData? and ?Blue Haven Media?, who distribute spyware through ActiveX drive-by-download on web pages
SpywareGuard provides a real-time protection solution against spyware
X
Spywareguard lptt01
Spywareguard.exe
New variant of the RapidBlaster parasite (in a Spyguard folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
SPYWATCH
SpyWatch.exe
BPS Spyware Remover - reportedly uses an old, borrowed SpyBot database. Read this and this. Do not support these guys!
X
SQConfigChecker
cc.exe
Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
N
SQL Server
scm.exe
SQL Server Service Control Manager. Available via Start -> Programs
X
SQUpdatesChecker
uc.exe
Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
U
sr1exe
updtSup3.exe
Found on a Dell computer, in a Documents and Settings\All Users\Application Data\Dell\Alert2 subfolder
U
Srmclean
srmclean.exe
Srmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. According to Compaq - If you disable the entry from loading into startup, then you will not be able to use the features of the sound card
X
SRNG
srng.exe
Search hijacker - see here
U
SRP Startup
srrpro.exe
System Restore Remover Pro allows you to safely and easily remove System Restore and various other Windows Millennium features. This is enabled if you tick the Remove unnecessary System Restore information on startup box. Available via Start -> Settings -> Control Panel
Y
SRS Applet
SrsTray.Exe
S3 Sonic Vibes sound card drivers - if disabled you loose sound
X
Srv32
Srv32.exe
Added as a result of the OPASERV.J VIRUS!
X
Srv32Old
??
Added as a result of the OPASERV.J VIRUS! where <filename> is the original worm name
U
Srv32Win
SpyAgent4.exe
SpyAgent - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U
Srv32Win
Svchost.exe
Realtime-Spy keylogger (monitoring program). Given a U recommendation because it depends if you intentionally installed it. If you didn't treat it as X and uninstall or remove
Y
Ssd
Std.exe
Stealthdisk - file and folder hiding/locking utility
U
ssdiag
ssdiag.exe
Equinox Configuration and DOS Diagnostic for DOS and Windows platforms
N
SSDPSRV
ssdpsrv.exe
Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. Used by Universal Plug and Play (for network device discovery). To remove this program, open Add/Remove Programs, select either Communications (Me) or Networking Services (XP), and remove the checkmark next to Universal Plug and Play
X
SSK Service
winssk32.exe
Added as a result of the SOBIG.E VIRUS!
N
sstray
sstray.exe
nVidia nForce Taskbar Utility - quick access to the nForce2 Sound Storm control panel and related utilitys
Y
Start
Quick95.exe
For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
X
Start
windows.vbs
Homepage hijacker
N
Start Getright
getright.exe
See Getright Tray Icon
U
Start Up Cop
startcop.exe
StartUp Cop - startup manager
N
Start Wingman Profiler
lwemon.exe
Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer, it's best to leave it unchecked
N
Start Wingman Profiler
lwtest.exe
Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer, it's best to leave it unchecked
Y
StartEAK
StartEAK.exe
Easy Access Button Support for Compaq PCs. Required if you use these
N
startl.exe
startl.exe
Lingocom LingoWare - translates any application into your language
U
StartStop
STARTSTOP.EXE
StartStop from TFI Technology - startup manager
U
StartSurfing
STARTS.exe
Start Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a filter between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start -> Programs
N
Startup
??
Related to an Iomega drive
N
Startup Launcher GUI
GUI.exe
Startup manager
U
StartupMonitor
StartupMonitor.exe
Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
X
startwindowskeyuser
rundle2.exe
Added as a result of the JAVAKILLER VIRUS!
N
Stat 'n' Perf
StatnPerf.exe
Stat 'n' Perf monitors your internet connection and displays information about sent and received bytes
X
StatBar
STATBAR.exe
StatBar (system status bar) allows you to quickly get an overview of your system's condition (memory, CPU, uptime, and much more). Due to the sheer number of resources (over 60%) consumed by this program, it is unsuitable for Windows 95/98/SE/Me
N
Status Monitor XE
ENGSS.EXE
The Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start -> Programs
N
Stay Connected!
StayCon.exe
More than just a pinger, actually simulates online activity. Supports AOL, NetZero, MSN, ATT WorldNet, CompuServe and many other ISPs as well. Available via Start -> Programs
U
StayAlive
sa.exe
StayAlive from TFI Technology.This top-notch tool intercepts crashes when they happen, keeping your programs running so you can save your work.
Y
STBVision
STBVisn.exe
Related to the STB Velocity graphics card.
N
STBWEBTV
STBWEBTV.EXE
Used to display TV on your PC
X
STCLOA~1
STCLOA~1.exe
Popup adware by 2ndThought software
X
stcloader
stcloader.exe
Popup adware by 2ndThought software
U
Stealth Anonymizer 2.5
stealth25.exe
Now named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy
N
Steam
Steam.exe
Program used for the game Half-Life. Valve (Half-Life creator) made it to test update and patches of the game as well as other games. Can be started manually
N
Stickies
STICKIES.EXE
Stickies - utility that allows you to put yellow Post-It type messages on your desktop and can be used to set reminders. Available via Start -> Programs
N
StickyNote
StickyNote.exe
Utility that allows you to put yellow Post-It type messages on your desktop. Available via Start -> Programs
U
StillImageMonitor
Stimon.exe
Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners
U
StorageGuard
sgtray.exe
StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
U
STPMGR
STPMGR.EXE
Part of SafeTP which is transparent FTP security software.
X
Strng32
strngbox.exe
Added as a result of the STRANO VIRUS!
U
StyleXP
StyleXP.exe
StyleXP allows you customize the way WinXP looks. If disabled via msconfig it re-instates itself at reboot, therefore uninstall it if you don't want it
N
Subtract the Ads
AdSub.exe
Removes adverts from web pages. Although useful - not required
X
SULFNBJ.EXE
SULFNBJ.EXE
Left as the result of being infected by the PE_MAGISTR.DAM virus. This virus infects system files and renames them (changing one letter) before adding them to the Run keys in the registry. Once the virus is removed via anti-virus software, delete the infected file and remove the key from the registry
N
SunJavaUpdateSched
jusched.exe
Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel
N
Supastatus
status.exe
Supanet ISP software
U
Supercleaner
Supercleaner.exe
Supercleaner - all in one disk cleaner for your computer
U
SuperCool Compress Backup
Main.exe
SuperCool Zip Backup software is a data backup,restore and file synchronization program
X
Supernova
??
Added as a result of the SURNOVA (or SUPOVA) VIRUS! <filename>.exe is the chosen name
X
superslut
msslut32.exe
Added as a result of the SLUTER-A VIRUS!
X
supporter5
supporter5.exe
Part of eScorcher anti-virus software. eScorcher consists of 2 parts: Supporter5 and eScorcher. Supporter5 is responsible for updates of new virus bases each time you logon to the web. eScorcher is responsible for performing virus checks and deletions. Note from their privacy statement: eScorcher collects IP addresses. eScorcher uses the information it gathers to tailor our content to suit our members' needs and to help our advertisers better understand our members' demographics
U
Sureshotpopupkiller
Stopthepop.exe
Stop-the-Pop-Up popup blocker
U
SurfChoice
SCMan.exe
SCMan is a utility that can control services on WinNT from the command line. This utility can create, start, pause, stop, delete services. Furthermore it can retrieve a service's current state, get the displayname for a service and vice versa
X
Surfer lptt01
surfer.exe
New variant of the RapidBlaster parasite (in a mssurfer folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
SurfSecret
ss2-full.exe
House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray, eliminating tell-tale files at a regular interval of your choosing. You can set it to clear your Internet cache files, cookies, history, temp folder, etc. It can also clear the history of your Run and Find menus, in addition to the AOL cache
X
Sustem
explorer.exe
Undentified VIRUS!
X
SustemUpdate
explorer.exe
Undentified VIRUS!
X
SVA Player
SVAplayer.exe
QuickFlicks Streaming Player - regarded as spyware. See here for details of how to disable or uninstall it
X
Svc
svc.exe
Hijacker, Clientman parasite variant, redirecting to madfinder.com
X
Svced
Svced.exe
Added as a result of the DELF.F VIRUS!
X
svchost
ADMAGIC.EXE
Added as a result of the SMIBAG VIRUS!
X
SVCHOST
mrowyekdc.exe
Added as a result of the GOTORM VIRUS!. This is not the valid svchost.exe as described here
X
svchost
Svch0st.exe
Added as a result of the GAYBIRD.B VIRUS!. Note - there is a number 0 in the executable filename, not a lower/upper case O. This is not the valid svchost.exe as described here
X
svchost
Svch0st.exe
Added as a result of the GRAYBIRD VIRUS!
X
SVCHOST
svchost.exe
System1060 homepage hi-jacker. Found in a Windows\System\1060 directory. Note - this is not the valid svchost.exe as described here
X
svchost
svchost.exe
Added as a result of the MORB VIRUS!. This is not the valid svchost.exe as described here. Located in the Windows directory, and not in Windows/System(32)
X
svchost.exe
svchost32.exe
CoolWebSearch hijacker - reroutes every thinkable URL for Google and MSN to CWS. Note - this is not the valid svchost.exe as described here
X
svcwinprocess32
??
Added as a result of the UPERING VIRUS!
X
svshost
svshost.exe
Added as a result of an unidentified VIRUS!
N
Swap Nut
javaw.exe
SwapNut is a peer-to-peer file sharing and searching utility developed and marketed by File Metrics, Inc. Users can search for and find almost any type of digital file (audio, video, photos etc.) through a secure peer-to-peer network
X
SWCaller
SWcaller.exe
Homepage hijacker - see here
X
SWCaller
Swcaller2.exe
Homepage hijacker - see here
N
SWd
winwd.exe
PC Security from Tropical Software - lock files, password protect, etc
Y
Sweep95
ICLOAD95.EXE
Part of Sophos ant-virus sofware
X
Swf32
_backup.exe
Added as a result of the SYMTEN VIRUS!
X
Swf32
AVupdate.exe
Added as a result of the MERKUR VIRUS!
X
SwimSuitNetwork
SwimSuitNetwork.exe
Advertising spyware
U
Switch Off
swoff.exe
Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer, disconnect your current dialup connection, lock workstation, etc
N
Switchboard.com Toolbar
AtHoc.exe
Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com
X
sws.exe
??
Haldex type adult content dialler
N
SwTray
SWTRAY.EXE
MS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it
N
SWTrayV4
SWTrayV4.exe
MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
U
SXGDSENU
sxgdsenu.exe
Yamaha SXG soundcard driver
U
SxgTkBar
sxgtkbar.exe
Yamaha SXG soundcard driver
X
SYDNEY
??
Added as a result of the SYNEY VIRUS!
U
SyGateService
sgserv95.exe
SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs
Y
Symantec Core LC
symlcsvc.exe
Part of Norton AntiVirus 2004. What does it do?
N
Symantec Fax Starter Edition Port
OLFSNT40.EXE
Offers a virtual printer as a fax machine. Can be run via a desktop shortcut
U
SymKeepAlive
CKA.exe
Part of Norton SystemWorks 2003 - keeps a dial-up modem connection alive
N
SymTray - Norton SystemWorks
SYMTRAY.EXE
Keeps all System Tray icons for Norton SystemWorks together to reduce clutter. SystemWorks includes Norton Anti-Virus, Norton Utilities and Norton CleanSweep - mentioned elsewhere here. Personally I only have Norton eMail Protect running which doesn't need SymTray
U
Sync Data
Hndsync.exe
Pocket Real Estate - mobile synchronization manager
U
SyncAgent
syncagent.exe
Ghost Keylogger (monitoring program). Given a U recommendation because it depends if you intentionally installed it. If you didn't treat it as X and uninstall or remove
N
Synchronization Manager
mobsync.exe
Find more information about its use here
U
Sync-It
Syncit.exe
Sync-It - synchronizes the system clock with time servers on the internet
U
SynTPEnh
syntpenh.exe
Synaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll
Y
SynTPLpr
syntplpr.exe
Synaptics touchpad driver helper. Required for touchpad features to work
X
sys
regedit /s sys.reg
Hijacker
U
SysAgent
SysAgent.exe
SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
U
Sysbot
sysbot.exe
Spector - spying (or monitoring) software to record internet activity
X
syscfg34.exe
syscfg34.exe
Added as a result of the ELECTRON VIRUS!
X
syscon lptt01
syscon.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
sysconfig
iexplorer.exe
Added as a result of the CULT.C VIRUS!. Note! - iexplorere.exe is not to be confused with Interrnet Explorer (iexplore.exe)
X
sysconfig
iexplorer.exe
Added as a result of the CULT.H VIRUS! Note! - the valid iexplorer.exe resides in C:\Program Files whereas this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
X
SysConfig
syscfg35.exe
Added as a result of the KAZMOR.C VIRUS!
X
SysCtl
sysctl.exe
Added as a result of the AOK VIRUS!
X
Sysctrls
procdll.exe
Added as a result of the WEEDBOTZ.14 VIRUS!
X
syshelp
syshelp.exe
Added as a result of the LOVGATE VIRUS!
X
Syslog lptt01
Syslog.exe
New variant of the RapidBlaster parasite (in a Syslog folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
SysOps
SysOps
Added as a result of the MSNCORRUPT VIRUS!
X
sysPnP
bootconf.exe
Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
StealthDisk - hides folders, files and applications. Will also encrypt them for better protection
X
SysProtect
System.exe
Added as a result of the NETSPY VIRUS!
X
SysR
sysmd.exe
Adult content based foistware (adds hidden components to your system)
X
SysReg
SysReg.exe
Added as a result of the CCINVADER2 VIRUS!
X
SysReg
SysReg.exe
SearchSeekFind textual marketing foistware
X
Sysres
Sysres.exe
Added as a result of the LOGMOD VIRUS!
X
SysScan
bvt.exe
Added as a result of the AUTOUPDER VIRUS!
X
SysService
SysService.exe
Added as a result of the DELF family of VIRUSES!
X
SysService32
ln32k.dll
Added as a result of the KINDAL VIRUS!
X
SysService32
SysService32.exe
Added as a result of the KINDAL VIRUS!
X
System
dcomx.exe
Added as a result of the CIREBOT VIRUS!
X
system
Explorer.exe
Added as a result of the GRAYBIRD VIRUS! Note - this is located in this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32
X
system
regedit -s system.dll
Homepage hijacker
X
System
run322.exe
Added as a result of the LANFILT VIRUS!
X
System
system.exe
Added as a result of a number of VIRUSES, including CHILI, NULLBOT, FULAMER.25, NETCONTROLL, NETCONTROLL, GATECRASH.A, GATECRASH.B, NTCONTROL.A, BUSHTRO122 & VIVAEL
X
system
systemsearch.hta
Jetseeker.com hijacker
X
System 64 Driver for Games
sys64dvr.exe
Added as a result of the SDBOT VIRUS!
U
System Check
Rundll32.exe SysDll32.dll, SystemCheck
XPCSpy Pro keylogger, surveillance and monitoring software
N
System DLF
cpqdiaga.exe
Compaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via Start -> Programs
X
System Efficiency Monitor
mscedit32.exe
Added as a result of the SDBOT.P VIRUS!
X
System Efficiency Monitor
mscommand.exe
Added as a result of the KWBOT.P VIRUS!
X
System Initialization
msmsgri32.exe
Added as a result of the RANDEX.D or ROXY VIRUSSES!
X
System Initialization
msmsgri32.exe
Added as a result of the ROXY.B VIRUS!
X
System Initialization
payload.dat
Added as a result of the RANDEX.D or ROXY VIRUSSES!
X
System Initialization
payload.dat
Added as a result of the ROXY.B VIRUS!
U
System LifeGuard Scheduler
Slsched.exe
System LifeGuard scheduler
U
System Monitor
SYSMON.EXE
Comes with some Aopen motherboards. Monitors CPU temp, voltage and fan speed. Warns if any become abnormal
X
System Monitor
Sysmon16.exe
Added as a result of the SDBOT VIRUS!
X
System MScvb
mscvb32.exe
Added as a result of the SOBIG.C VIRUS!
X
System Profile
Regsrv.exe
Added as a result of the BDS/OPTIXPRO.12 VIRUS!
X
System Service
MSREXE.EXE
Added as a result of the AML VIRUS!
X
System Soap Pro
soap.exe
System Soap Pro internet cleaning software. Bundles foistware like HTTPER and Zipclix - best avoided
U
System startup
charmapx.exe
Only required if using an oriental language
X
System Tray
msccn32.exe
Added as a result of the PALYH.A VIRUS! Warning - spreading via infected E-mail attachments with the sender address faked as support@microsoft.com. Note - do not confuse with the valid SystemTray above
X
System Tray32
SysTray32.exe
Added as a result of the REPAD VIRUS!
X
system.exe
system.exe
Added as a result of a number of VIRUSES, including CHILI, NULLBOT, FULAMER.25, NETCONTROLL, NETCONTROLL, GATECRASH.A, GATECRASH.B, NTCONTROL.A, BUSHTRO122 & VIVAEL
X
System32
system.exe
Added as a result of the BUSHTRO122 VIRUS!
X
System32
System32.exe
Added as a result of the MARI, SYSXXX and other VIRUSSES!
X
System33
FB_PNU.EXE
Added as a result of the NICHELLO-A VIRUS!
X
SystemAdministration
Wincmp32.exe
Added as a result of the ASYLUM VIRUS!
U
SystemAgent
Sage.exe
Microsoft Plus! System Agent automatically tunes your system, performing tasks such as disk optimization and error correction. It can also run any application at prescheduled times
X
SystemBackup
MicroLog.exe
Added as a result of the MICROLOG.A VIRUS!
X
SystemBackup
mtx.exe
Added as a result of the MTX VIRUS!
X
SystemBoot
Mshta.exe ...filename.hta
Adult content dialler
X
SystemCheck
Systemcheck.exe
Added as a result of the LAVITS VIRUS!
X
SystemCONF98i
SystemCONF98i.exe
Added as a result of the FROZEN BOT VIRUS!
X
SystemDll
SystemDll.exe
Added as a result of the LOXOSCAM VIRUS!
X
systemdrv
ms32sys.exe
VIRUS related - most likely GAOBOT
X
SystemFTP
VSENMB.exe
Malware (ie, malicious software). Also changes the system.ini Shell line to read Shell=Explorer.exe VSENMB.exe, and it hacks the Winstart.bat as well
X
SystemInit
iservc.exe
Added as a result of the FIZZER VIRUS!
X
SystemManager
Sysman32.exe
Added as a result of the DOWNLOADER-BW.B VIRUS!
X
SystemMap32
Netisp32.vbs
Added as a result of the REDIST.C VIRUS!
X
SystemMD
md.exe
Homepage hijacker
X
SystemReg
svchost.exe
Added as a result of the DEWIN.E VIRUS! Note - this is not the valid svchost.exe as described here
X
SystemReg
WINREG.EXE
Added as a result of the DEWIN.A VIRUS!
U
Systems.exe
Systems.exe
Keyboard Spectator - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U
SystemSafe
Syssafe.exe
System Safety Monitor - system monitoring tool with additional application firewalling
X
SYSTEMSars32
csrss.exe
Added as a result of the AHLEM.A VIRUS! Note! - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X
SystemSAS
System32.exe
Added as a result of the KWBOT.C VIRUS!
X
System-Service
EXPLORER.SCR
Added as a result of the BENJAMIN VIRUS! KaZaA file-sharing users beware!
U
SystemSuite Task Manager
MXTASK.EXE
vcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program's configuration options to enable only the parts you want running all the time - such as Virusscanner Pro
X
SystemTasks
filez.exe
Adult content dialler
X
SystemTasks
loaded.exe
Adult content dialler
X
SystemTasks
sexypicz.exe
Adult content dialler
X
SystemTray
SystemTray.exe
Added as a result of the BIGFOOT VIRUS! Note! - this is not the valid SystemTray above
U
SystemTray
SysTray.Exe
SYSTRAY.EXE - System Tray Services. Provides the Volume Control, PC Card Status, Power Management and other icons that reside in the System Tray (see here). SYSTRAY.EXE may be disabled if none of these services are required. It will launch as and when required if you later enable the icons. If you need these items they're available via Start -> Settings -> Control Panel
N
SystemUpd
SystemUpd.exe
Updater for Swapoo.com, a kind of Napster for games
U
SystemWizard Sniffer
Sniffer.exe
SystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC
X
systhread
winkernal.exe
Added as a result of the LIAMED VIRUS!
X
Systoan32
systoan.exe
Added as the result of an unidentified VIRUS!
U
SysTray
SysTray.Exe
SYSTRAY.EXE - System Tray Services. Provides the Volume Control, PC Card Status, Power Management and other icons that reside in the System Tray (see here). SYSTRAY.EXE may be disabled if none of these services are required. It will launch as and when required if you later enable the icons. If you need these items they're available via Start -> Settings -> Control Panel
X
Systray
Systray_.Exe
Added as a result of the KERGEZ.A VIRUS!
U
SysW8
csta.exe
Clean Space - privacy and perfomance enhancer
U
SYSWB6
SYSWB6.exe
We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content
X
Syswindow
Syswindow.exe
Added as a result of the COW VIRUS!
U
SZMsgSvc.exe
SZMsgSvc.exe
StopZilla! - pop-up killer
X
Taba
stte.exe
Clickspring spyware
N
Tablet
Tablet.exe
Loads the tablet drivers for the Wacom Graphics Tablet. This can be unchecked in msconfig without problems if you don't need the tablet functional all the time. Create your own shortcut if you need to run it ad hoc. If you forget to run it before running Paint Shop Pro & Adobe Photo Shop) you may find the following: (1) Paint Shop Pro (version 7.04) - (a) Browse function will NOT work (program freezes) (b) On program exit, PSP does not terminate (you have to CTRL+ALT+DEL to close it) (2) Photo Shop (version 6.01) - (a) Program functions slowdown (d) On program exit it takes noticeably longer to shut down (like 30-45 seconds)
Y
TabUserW
TabUserW.exe
Wacom pen tablet driver
N
Tad
tad.exe
From Turtle Beach's Santa Cruz on a Dell WinME system. Not required - works fine without it including keyboard hot controls for volume and mute
N
Tahni Deskmate
Tahni.exe
Tahni Deskmate - Interactive cartoon character that lives on your Windows desktop
N
TalkingReminder
TALKINGREMINDER.EXE
Talking Reminder from Software River Solutions - talking calendar reminder
X
Tapicfg
Tapicfg.exe
CoolWebSearch hijacker variant
U
TapiTNA
TapiTNA.exe
Telephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys
U
Tardis
Tardis.exe
Tardis - time synchronization software
X
Task Bar
TASKBAR.EXE
Added as a result of the FRETHEM.J VIRUS!
U
Task BarClient
TaskBarClient.exe
Responsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service
U
Task BarSvr
TaskBarSvr.exe
Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?
N
Taskbar Display Controls
RunDLL deskcp16.dll, QUICKRES_RUNDLLENTRY
Only appears in MSCONFIG if you have a Display Settings icon in the System Tray allowing resolution changes on the fly. Can also be disabled under Control Panel -> Display -> Settings -> Advanced -> General. Also appears if you have Win95 with the QuickRes Powertoy installed
X
TaskMan
rundll32.exe
Added as a result of the DVLDR VIRUS! Note - this is not the valid rundll32.exe as it's in the Windows\Fonts directory
X
Taskmgr
Taskmgr.exe
System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a Windows\System\1060 directory
X
Taskmgr
tskmgr32.exe
Homepage hi-jacker
N
taskmgr.exe
taskmgr.exe
Windows Task Manager in Windows XP. If run from the Startup folder, the tray icon will be put to the system tray after boot. Useful to check if XP has finished running the delayed services after boot. Available via a desktop shortcut
X
taskmngr lptt01
taskmngr.exe
New variant of the RapidBlaster parasite (in a Taskmngr folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
TaskMonitor
taskmon.exe
The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase)
N
TaskPlus
TASKPL~1.EXE
Task and calendar management software available as freeware or as a Professional version for sharing over a LAN
N
TaskPlus
TASKPLUS0.EXE
Task and calendar management software available as freeware or as a Professional version for sharing over a LAN
X
TaskReg
??
Added as a result of the CBLAD VIRUS! <filename.exe> is the full path and name of the infected file
X
Taskschd
TRAYWND.EXE
Added as a result of the LITMUS.002 VIRUS!
N
taskswitch
taskswitch.exe
ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
N
Tasktray
CTLTray.exe
Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound BlasterAudigy from a systray icon. Also allows you to launch the Taskbar via right-click -> Show Taskbar. The tasktray can be accessed via Start -> Programs -> Creative -> Sound Blaster Audigy -> Taskbar
Y
Tau monitor
Taumon.exe
Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system.
U
TBC Pro
tbcpro.exe
TitleBarClock Pro - displays Day, Time, Date, Month, Year, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus
N
tbctray
tbctray.exe
Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
Y
TBLFUNC
tblmouse.exe
Aiptek HyperPen driver
U
TBPanel
TBPanel.exe
Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
N
TBTray
tbtray.exe
VLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel
Y
tcactive
tca.exe
Part of The Cleaner from MooSoft - stops virus trojans before they can do any damage
U
TClock
TCLOCK.EXE
Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs
U
TClockEx
TCLOCKEX.EXE
Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks
U
tcmonitor
tcm.exe
Part of The Cleaner from MooSoft - warns of changes to the registry
U
TDKSTART
TDKSTART.EXE
Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N
TDKTASK
TDKTASK.EXE
Taskbar utility for a control panel for a CD-RW
N
Teach In Box
teachbox.exe
Tutoring program that comes with a SystemAX Computer
Y
Tech-In-A-Box
techbox.exe
Tech-in-a-Box provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs, Tech-in-a-Box is your tool to stay up and running
N
Telemeter 3.0
telemeter3.exe
Internet connection bandwidth meter from a user ISP
Y
Telepath
telepath.exe
Drivers for the WinModem versions of the US Robotics Telepath series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
X
Terminate Popup
FPUK.exe
Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here
X
Terminate Popup
ZPU.exe
Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here
U
TEscKey
TEscKey.exe
Toshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
N
TextAloud
TextAloudMP3.exe
TextAloud MP3 - convert text into spoken words and MP3s
N
Textbridge Instant Access OCR
telepath.exe
TextBridge from Scansoft. OCR (optical character recognition) software for scanning documents into popular editing applications. Available via Start -> Programs
U
TFncKy
TFncky.exe
Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
U
TFNF5
TFNF5.exe
Toshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5>, a window appears showing the displays that can be chosen ? LCD, LCD + CRT, CRT, TV
Y
tfswctrl
tfswctrl.exe
Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones
X
TFTP###
tftp###
Added as a result of the SPYBOT VIRUS! where # can be any number
U
TFunckey
TFuncKey.exe
Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
N
TgAddServer
tgfix.exe
Software from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech)) and ISPs (such as Comcast, Cox and Charter (Pipeline Support Agent)) that allows them to offer on-line support - to update drivers, fix faults, etc. Can cause a deterioration in a PC's peformance (see here). This part does the protection and self-healing. Uninstallation is recommended by most people - especially for System Restore users (WinME/XP). If not available via Add/Remove, Charter offer some uninstallation instructions involving a registry patch that you may be able to modify for your proivder or try here
U
Tgcmd
tgcmd.exe
See above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. tgcmdprovidersbc is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the U recommendation
U
tgcmdprovidersbc
tgcmd.exe
See above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. tgcmdprovidersbc is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the U recommendation
N
TGCMG
??
Related to Rogers@Home, causes errors in WinSock32.dll. Not required for connection to work
X
TGDC IE Plugin
tgdc.exe
ShopForGood spyware - see here
X
tgkill
tgkill.exe
Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an enhanced support and self-repairing tool. This is beta at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
U
Tgsetsite
tgfix.exe
See TgAddserver and Tgcmd above. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the U recommendation
N
Thdetrf
thdetr32.exe
Appears to be related to Lycos advertising
U
THGuard
TH_Guard.exe
Resident memory scanning for TrojanHunter
U
THOTKEY
THotkey.exe
Associated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked, like the one that regulates the volume of the system beep, but others didn't, like the one that immediately blackens your screen
U
ThrustTSR
TMTMTSR.exe
Thrustmaster Thrustmapper. The Thrustmapper - t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly
U
TiADSL
tidslmon.exe
Actiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start -> Programs
X
Tiger
Shine.exe
Added as a result of the HAPPYLOW (or NISHE-A) VIRUS!
X
Time Zone Synchronization
wscript zshell.js
Added as a result of the NETDEX-A VIRUS!
N
TimeCalendar
tc.exe
TimeCalender - calendar reminder
N
Timed Backups Manager Startup
BACKTIME.EXE
Backup Plus - backup software
N
Timemanager.exe
Timemanager.exe
Easy to use program for recording how you spend your time, designed to help you in billing multiple clients
N
TimeOnline
TIMEONLINE.EXE
Lightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
X
TimeSink Add Client
TSADBOT.EXE
Advertising spyware
N
TimeUp
Timeup.exe
TimeUp - internet online timer
N
TINTSETP
TINTSETP.EXE
Location in the IME directory on a PC and may therefore be related to an Asian language part of a program. See more on IME here. Known to be not required
Y
Tiny Personal Firewall
persfw.exe
Tiny Personal Firewall
U
tinySpell
tinyspell.exe
Tinyspell - allows you to easily and quickly check the spelling of words in any Windows application. Monitors your typing on the fly, alerts you whenever it detects a misspelled word, and checks the spelling of every word you copy to the clipboard
U
TiomanExe
Tioman.Exe
Agate Tioman - warm and hot swap removable bay device manager for IBM laptops
N
Tips
mousetips.exe
Suggests tips on using your mouse
U
TiTleBarClock
TiTleBarClock.exe
TitleBarClock displays the day/month/time and free physical RAM on the right hand side of an open window, replacing the system tray clock at startup
Y
Tivoli
LCFEP.EXE
Appears to be part of a corporate backup strategy - waiting for a backup server to contact your PC and initiate a backup
N
TkBellExe
evntsvc.exe
Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable tkbell.exe in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK
N
TkBellExe
tkbell.exe
Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable tkbell.exe in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK
N
tkonnect
TKONNECT.EXE
Dialer for the Tiscali internet service provider. Available as a desktop shortcut
U
TMA distribution
cfinst.exe
Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U
TMESBS
TMESBS21.exe
Toshiba Mobile Extension Selectable Bay Service for WinXP - support for docking stations. Not required if you don't use a docking station
U
TMExLogon
TMESRV.EXE
Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
U
TMOUSE
tmouse.exe
Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects, except disabling the scroll/zoom features of the AccuPoint
Y
tmproxy
tmproxy.exe
Trend Micro PC-cillin 2003 antivirus software
N
TMTMTSR
TMTMTST.exe
Installed with Thrustmaster game controllers. It launches the Thrustmapper utility. Not required if you install the driver only from Thrustmaster website
U
TNTClk
TNTCLK.exe
Overclocking program forTNT, TNT2, and other graphics cards. This program can overclock the graphics card manually after startup when needed, especially before starting a gaming session. However, for simplicity, it can be left checked to let itrun once at startup to automatically overclock the graphics card. In this case, it doesn't even run in the background after doing its job
U
ToADiMon.exe
ToADiMon.exe
T-Online ISP software connection assistant
X
topmoxie
JavaRun.exe
Marketing software from TopMoxie
U
ToshHKCW
ToshHKCW.exe
Toshiba Hot Key Change/Control Wireless. Permits you to use a hot key to activate/deactivate built-in 802.11b wireless transmission on a laptop (if installed)
Y
Toshiba Fan
fan.exe
Toshiba untilty to keep the fan on a laptop running if they fail to detect there is too much heat
U
Toshiba Key State
KEYSTATE.EXE
Displays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g., Toshiba) laptops which do not have a Caps Lock indicator light. Available via Start -> Programs
N
ToshibaPinger
pinger.exe
Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification. Disabling instructions here
U
TOSHIBSU
Toshibsu.exe
Reduces the power consumption when the laptop isn't being used to preserve battery power. Hibernate function doesn't work if this is disabled. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run off battery regularly
Y
TosMem
tosmem.exe
Toshiba laptop related. Win98/Me ACPI system can not hibernate or go on standby if all of the physical memory lower than 640KB is locked. This utility allocates and locks three pages on boot and then releases them on standby/hibernation for ACPI.SYS in order to solve the above problem
U
TotRecSched
TotRecSched.exe
Scheduler for Total Recorder - allows automatic recording of a show at a given time for later playback or you can use the scheduler as an alarm
U
Touch Manager
WinLED.exe
Dell keyboard utility. Disabling can result in loss of screen saver and power saver functionality
N
tour
regedit ..tour.reg
Edits registry values to keep the WinMe tour in Task Scheduler
N
Tour
wincool.exe
Component of WinME that's annoying as hell. Pop's up a prompt to play the C:\WINDOWS\Application Data\Microsoft\INTRO\CONTENT.HTA that plays a full screen version of the WinME product preview Windows Media video file that cannot be stopped to my knowledge until it finishes. That prompt will keep popping up after an install/reinstall of WinME until you give in and watch the thing. It also puts a task scheduler entry to run that annoying thing every 30 minutes, and don't bother deleting that entry, Windows puts it right back. Not only should you disable it from running, you should delete the thing altogether, as it, somehow can re-enable itself. Apparently you can try setting the file to read only
U
TP4EX
tp4ex.exe
Adds accessibility options for an IBM TrackPoint
U
tp4serv
tp4serv.exe
Supports the pointer stick on Thinkpads in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the scroll button to work
N
TP98UTIL
TP98.EXE
IBM Thinkpad feature setup & configuration utility
U
TpHotKey
TPHKMGR.EXE
Activates ThinkPad Help when the Thinkpad key is pressed on an IBM ThinkPad laptop. Also activates the audio buttons (volume up/down, mute) on models such as the Thinkpad T30
U
TpKmapMn
TpKmapMn.exe
Create Keyboard combinations for special Thinkpad buttons when using an external keyboard, e.g. Ctrl-arrow up for volume up. Only required when using an external keyboard. Available via Start -> Programs
U
TPP Auto Loader
Tppaldr.exe
Installed with DataStor's (and some other manufacturers) USB 2.0 based external DVD, CD-ROM and CD-RW drives.System tray icon allowing the user to disconnect the external drive without an error message being displayed
U
Tprtray
Tprtray.exe
Displays the Power icon in the System Tray on a Toshiba laptop
Y
TPWRTRAY
Tpwrtray.exe
Toshiba laptop's own Advanced Power Management system which disables Windows APM (greyed-out in Control Panel). You can't choose which of the 2 systems to use
N
Traceless
launch.exe
Traceless 2003 - clear your cookies, temp directories and browser history with a click of a button. It also clears the recent documents and the IE drop down auto complete box
U
TrackpointSrv
daemon.exe
Supports the pointer stick in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the scroll button to work
U
TrackpointSrv
tp4serv.exe
Supports the pointer stick in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the scroll button to work
U
Tracks Eraser
te.exe
Tracks Eraser Pro from Acesoft - Erases all tracks of your internet activity
U
Tracks Eraser Pro
te.exe
Tracks Eraser Pro from Acesoft - Erases all tracks of your internet activity
U
tranicon
tranicon.exe
A Tweak-XP component (only in the registered version), makes Desktop icons transparent. Can be enabled/disabled via Tweak-XP -> System + File Tweaks -> Windows Tweaks -> Desktop Tweaks -> Make Desktop Icons Transparent
U
Transparent
TransparentB.exe
Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here
U
Transparent
TransparentD.exe
Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here
U
Transparent
TransparentW.exe
Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here
U
TransparentIcons
tranicon.exe
A Tweak-XP component (only in the registered version), makes Desktop icons transparent. Can be enabled/disabled via Tweak-XP -> System + File Tweaks -> Windows Tweaks -> Desktop Tweaks -> Make Desktop Icons Transparent
U
Trashgrd
TRASHGRD.EXE
Part of McAfee Nuts & Bolts. Protects all the files you delete, even files deleted in DOS or in 16-bit Windows applications, by sending them to the Recycle Bin
N
Tray Temperature
Weatherbug.exe
Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs
N
tray_helper
tray_helper.exe
Tray Helper is an Email checker with additional tools, including a popup window killer, pinger module to monitor hosts and an event reminder
U
traydate.exe
TRAYDATE.EXE
Displays the date as well as the time in the System Tray. Available from TUCOWS
U
TrayManager
Trayman.exe
TrayManager hides system tray icons (FreeCell won't work when TrayMan is loaded)
U
Traymon
traymon.exe
Netropa Internet Receiver traymonitor. Will only launch the bar if you are connected to the internet and there's new news
N
TraySantaCruz
tbctray.exe
Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
N
TrayServer
TrayServer.exe
For monitoring tray icons
X
TrayX
winppr32.exe
Added as a result of the SOBIG.F VIRUS!
Y
TrendMicro Antivirus
Aveagent.exe
Virus scanner
Y
TrendMicro OfficeScan NT
TMLISTEN.EXE
Virus scanner
X
Trickler
fsg.exe
Advertising spyware
X
Trickler
fsg-ag_3102.exe
Advertising spyware
X
Trickler
gain_trickler_3202.exe
Advertising spyware
X
trickler_bic_GatorDM_4010
trickler_bic_GatorDM_4010.exe
Advertising spyware
U
TrojanScanner
Trjscan.exe
Trojan Remover from Simply Super Software. Scans for an removes trojan viruses where anti-virus software may have not detected or removed
U
True Internet Color Icon
internetcolor.exe
Part of Colorific & 3Deep from LightSurf Technologies (nee E-Color). With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images
N
TrueSync Launcher
tstool.exe
Starfish TrueSync - for synchronization between Windows platforms and popular devices, applications and services
Y
TrueVector
VSMON.EXE
Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this
X
TsAdbot
TSADBOT.EXE
TimeSink Add Client - advertising spyware
X
tskdbg
tskdbg.exe
Added as a result of the FLOOD.E VIRUS!
N
TSMsger
TSMsger.exe
Epson scannner software - required for one-touch operation. Can be launched manually
U
Tukati
TukatiRedistributor.exe
Tukati Digital Content Distribution.
U
TuneUp MemOptimizer
memoptimizer.exe
Part of TuneUp Utilities, specifically 2003 version. Monitors and optimizes free memory in the background. Basically, it cleans RAM and also allows you to clear the clipboard
U
TurboExplorer
TE.exe
Web accelerator - TurboExplorer? 2.x is a real-time web surfing accelerator specifically designed for Internet Explorer? 4/5 to achieve a faster and more effective approach to the internet. Only needed if you find it improves web browsing
U
TurboMemoryCharger
turbomemorycharger.exe
Some users swear by memory management utilities such as Turbo Memory Charger but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
N
TurboNote
tbnote.exe
Post-It's on your desktop. Available via Start -> Programs
U
TurboTop
TurboTop.exe
TurboTop - make any window Always on top
X
TVMD
tvmd.exe
Total Velocity - Secure commerce company that enables the ?checkout? process for our customers in order to safely and securely purchase our award winning software. Autointsalling spyware
X
TVTMD
TVTMD.EXE
Total Velocity variant - autoinstalling spyware
N
TVWakeup
tvwakeup.exe
MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U
Tvwatch
tvwatch.exe
Associated with the TV-oOut option on Asus AGP or Intel graphics cards.
U
TWarnMsg
twarnmsg.exe
Toshiba System Warning Function for Windows 98, Me, 2000 - provides notification dialog when the cooling fan stops
N
Tweak Manager
WinManager.Exe
WinGuides Tweak Manager.
U
Tweak UI
RunDLL32 tweakUI.DLL, TWEAKUI /tweakmeup
Added as a result of the SUBWOOFER VIRUS! Note! - the real Tweak UI entry for this is rundll32.exe tweakui.cpl, tweakmeup as shown in the Tweak UI (1) entry above
U
Tweak UI
rundll32.exe tweakui.cpl,tweaklogon
Automatically logs you on if you have Microsoft's Tweak UI powertoy installed
U
Tweak UI
rundll32.exe tweakui.cpl,tweakmeup
Restores settings that can't be retained if you have Microsoft's Tweak UI powertoy installed
U
TweakDUN
tweakdun.exe
Utility to optimize your Internet Browser Software. TweakDUN promotes faster Internet data transfer rates and faster downloads by eliminating fragmentation of data packets
U
Tweak-Me
TWEAK-ME.exe
3rd party version of Miscrosoft'sTweak UI powertoy with many more options and controls (plus full support), designed specifically to take advantage of features in WinMe/2K and above, available from here
U
Tweak-xp
Tweak-xp.exe
Main program for Tweak-XP - a WinXP tweaking utility
N
TwkSCardSrv
SCardS32.Exe
Used with Towitoko SmartCard Readers for card recognition
X
Twunk_64
twunk_64.exe
System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a Windows\System\1060 directory
N
type32
type32.exe
For MS programmable keyboards. If you disable Intellitype in Startup, any Hot Keys that are changed by the user to perform functions other than default settings, defer back to their default settings. Not required unless you have changed them
N
TypingSatellite
KBOOST.exe
Typing Master 2002 background utility that collects typing errors and builds up customised typing lessons for your needs. Available via Start -> Programs
U
UD Agent
UD.EXE
The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
U
Ueproc32
UEPROC32.exe
Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions
N
Uidler
Uidler.exe
Uniloc Titlewave Browser used with some shareware
N
UIWatcher
UIWatcher.exe
Ashampoo Uninstaller Suite - installation watcher. Available via Start -> Programs
X
UKVideo2
ukvideo2.exe
Adult content dialler
N
Ulead Photo Express x.0 Calendar
calcheck.exe
Ulead Calendar Checker - part of Ulead Photo Express, where x represents the version number. Automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually. See here for disabling instructions
N
UltimateZip Quick Start
uzqkst.exe
UltimateZip - file compression utility
N
Ultra Hal Assistant 4.5 Startup
HalAsst.exe
Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion
N
UMAX VistaAccess
vsaccess.exe
VistaAccess gives you quick and easy access to scanning functions right from your desktop
Y
umxagent
umxagent.exe
Tiny Personal Firewall V4 - main engine
Y
umxldra
umxldra.exe
User mode executive module DLL loader - part of Tiny Personal Firewall V4
Y
UMXLDRW
UMXLDRW.exe
Tiny Personal Firewall (pre V4)
X
Uninstall####
upd.exe
Adult content based screen saver where #### can be any number
N
UninstallAbility
uability.exe
UninstallAbility uninstaller
X
Update
??
Added as a result of the LYNDEGG VIRUS!
N
Update Grokster
WiseUpdt.exe
Automatically updates the Grokster file sharing software. Beware of adware and spyware when using this type of program, for instance, Grokster contains CyDoor
Y
Update Service
Update.exe
Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is run so best to leave it enabled. Prevent it dialling out via a firewall
N
UPDATE~1
UPDATE~1.EXE
Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Can go to http://www.earthlink.net and download the updates manually
X
UpdateMedia
UpdateMedia.exe
MediaUpdate foistware
N
updatemgr.exe
updatemgr.exe
Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Can go to http://www.earthlink.net and download the updates manually
N
Updates from HP
backweb*****.exe
Automatically detects an internet connection and downloads any available updates - * is random digit
N
Updatestats
Updatestats.exe
Statblaster - Get officially liscensed MLB pitch-by-pitch real time updates from every stadium around the league. StatBlaster provides live streaming statistics for each fantasy matchup you want tracked either in one league or across all your leagues
N
UpdReg
Updreg.exe
Reminder to register Creative Labs SoundBlaster Live! cards
Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss
Y
UPSlim
upsd.exe
Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss
U
Uptimer4
Uptimer4.exe
Uptimer4 is an appbar which displays time, date, uptime, free ram, free pagefile, cpu usage, disk free space, battery power, IP addresses, TCP throughput, list of running processes, netstat and several more things
X
UpToDate
uptodate.exe
BrowserAid/BrowserPal foistware
N
URLMAP
Urlmap.exe
Installed by MS Money, and runs whenever you start IE. All it does is bring up an annoying sidebar (kind of like the search window) with 'financial links' when the web page supports it
U
USB Hub Keyboard Patch
SKBPATCH.EXE
USB HUB Update
U
USBMMKBD
usbmmkbd.exe
USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version (available here) no longer pings a server when on-line wheras the older version did but did not transmit any user information
N
USBTA
usbtapnp.exe
System Tray access for the BeWAN Gazel 128 USB ISDN adapter
X
User23.exe
DIAL.exe
This is a trojan trying to disguise itself as User32.dll
X
ushli
sscbltqu.exe
Obtained from an MP3 search list site. Also generates random processes on reboot
N
Usrobotics Online Registration
??
Pop-up reminding customers to register their products online at US Robotics
Y
USRSTA
USRSTA.exe
Wireless Card controller.
N
USSShReg
USSSHREG.EXE
Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers
N
UtilityPro
UtilityPro.exe
IE search toolbars as supplied by people such as Yellow Internet and SearchBoss and written by Rawhide Search Solutions
Y
UTILsInst
??
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
U
V.92 Modem On Hold
Ltmoh.exe
Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
Y
V128IID
Rundll32.exe v128iitw.dll, STB_InitTweak
Loads drivers for some STB graphics cards such as the STB nVIDIA TNT 16MB. Required if you don't want to experience lock-ups or error messages
U
va10key
va10key.exe
Only required if you use the 10 kay bay unit with a Sony Vaio laptop
Y
VAGCtrl
VAGCTRL.EXE
Vexira Antivirus - virus scanner from Central Command
Y
VAGuard
VAGNT.exe
Vexira Antivirus - virus scanner from Central Command
U
VAIO Action Setup (Server)
VAServ.exe
Sony Vaio utility that auto-launches selected applications when you plug in a digital video camera, digital still camera, etc. via iLink (FireWire) or USB
X
VB_run
comctl_32.exe
Dubious downloader from densmail.com
X
VbouncerDL
VBouncerInnerxxxx.exe
Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose custom uninstall as automatic may remove other programs - see here and here. xxxx represents 4 random numbers
N
VC5Play
VC5Play.exe
Virtual CD drive emulator - version 5. Available via Start -> Programs
X
VCatch Premium
VCatchpre.exe
VCatch antivirus. Considered spyware itself - see here
N
VCDPlayer
VCDPlayer.exe
Virtual CD drive emulator. Available via Start -> Programs
N
vcdplayx
vcdplayx.exe
CD emulation part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically
U
VCDTower
VCDTower.exe
Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
N
VCSPlayer
vcsplay.exe
Virtual CD drive emulator. Available via Start -> Programs
N
vdtask
vdtask.exe
Program part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically
N
Vegas Palms - Launcher
Launcher.exe
Vegas Palms on-line cassino
N
Verizon Control Pad
cpad.exe
Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience
U
Verizon Online Support Center
matcli.exe
matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file. Verizon Online Support Center is required to run with the Help and Support program. If you uncheck Verizon Online Support Center and and then run help and Support it will add another Verizon Online Support Center in the startup menu. If you remove the Verizon Online Support Center in the add/remove program some help menus in help and support will not be available. You decide.
U
versato
versato.exe
Hot button (such as volume and browser control) management and a CD player as supplied with QTronix (as possibly Micro Innovations) keyboards
Y
Vet Alert
vetmsg9x.exe
Computer Associates InnoculateIT and Vet Anti-Virus virus software
Y
Vet Start Up
vet32.exe
Computer Associates InnoculateIT and Vet Anti-Virus virus software. This option will slow down your system, if set too aggressively. There is no need to scan every file when opened, closed, etc. Check in InoculateIT PE options
Y
Vet Start Up
vet98.exe
Computer Associates InnoculateIT and Vet Anti-Virus virus software. This option will slow down your system, if set too aggressively. There is no need to scan every file when opened, closed, etc. Check in InoculateIT PE options
U
VetTray
vettray.exe
Computer Associates InnoculateIT and Vet Anti-Virus virus software. System Tray quicklaunch access, not really necessary but only occupies 36k resources
X
Video Manager
videomgr.exe
Added as a result of the PANDEM.C VIRUS!
X
VideoDriver
??
Added as a result of the GSPOT20.A VIRUS!
X
VideoDriver
gspotbot.exe
Added as a result of the SPIGOT.C VIRUS!
X
VideoDriver
videodrv.exe
Added as a result of the MIMAIL.A VIRUS!
N
VidSvr
vidsvr.exe
MS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X
vietato.exe
vietato.exe
Adult content dialler
U
Virtual Access Scheduler
VASCHD32.EXE
The scheduler for mail and usenet tool
X
Virtual Bouncer
VirtualBouncer.exe
Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose custom uninstall as automatic may remove other programs - see here and here
N
VirtualDrive
VDTask.exe
VirtualDrive from Farstone - virtual CD drive emulator. Available via Start -> Programs
X
Virus Scan
virscana.exe
Added as a result of a VIRUS!
X
Virus_Scanner
Virus_Cleaner.exe
Added as a result of the PANOL VIRUS!
X
VirusCheckII
AVIRCHK.EXE
Added as a result of the DASMIN VIRUS!
Y
VirusScan Online
mcvsshld.exe
McAfee VirusScan On-line. See also McAgentExe
N
Vistascan
vistascan.exe
Included in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users, you'll see a scanner icon in the Windows Tray of the Taskbar. Click this icon and a menu opens
Y
VMDFW
vmdfw.exe
VirusMD Personal Firewall
X
VnCplUpdate
msdm.exe
Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory
Y
VOBRegCheck
VOBRegCheck.exe
Part of InstantCopy CD/DVD copying software from VOB/Pinnacle that verifies registry settings. Once loaded it doesn't use any resources so you can leave it enabled
U
VoodooBanshee
rundll32.exe 3DBBps.dll, BansheeLoadSettings
Loads the configuration settings for a 3dfx Voodoo Banshee chipset based graphics card. If you change some of the settings from default you probably need this - otherwise maybe not
N
Vortex Tray
asp4setp.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N
VortexTray
asp4setp.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N
VortexTray
asp4tray.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N
VortexTray
au30setp.exe
System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N
VoyetraTray
vtray.exe
This provides an abbreviated Control Group for the Turtle Beach Montego II sound functions/associated with AudioStation 3 and 32
U
Vpop3 Mail Server
vpop3.exe
Mail server from Paul Smith Computer Services. Runs in system tray to collect mail. Can be run from a shortcut and if it isn't running then it won't get your email!
U
vptray
vptray.exe
System Tray icon for Norton Anti-Virus Corporate Edition. Gives access to the options available and may not be required. Some users may have problems - refer here
X
vscanner
spooll32.exe
Added as a result of the OPTIXPRO VIRUS!
N
VsEcomrEXE
VSECOMR.EXE
From McAfee VirusScan up to version 4.x. This executable is responsible for the periodic update prompts
Y
Vshwin32EXE
VSHWIN32.EXE
From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start -> Programs
Y
VSOCheckTask
MCMNHDLR.EXE
Part of McAfee's SecurityCenter and Virusscan Online. Must be enabled for scanning to work
N
vspdfprsrv.exe
vspdfprsrv.exe
Visage PDF Printer
Y
VsStatEXE
VSSTAT.EXE
From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start -> Programs
N
vTPass
vtpassld.exe
Part of vTrails - a live media delivery solution. vTPass is the driver enabling the system to work. If unavailable via Start -> Programs, create your own shortcut for the vtpass.exe file
N
vTunerStartUp
vTuner.exe
vTuner - an easy way to find and listen to radio and TV broadcasts over the Internet
X
W32Load
??
Added as a result of the CASPID VIRUS!
X
W32Tc
WTC32.scr
Added as a result of the VOTE.D or VOTE.K VIRUSES!
X
W3KNetwork
rundll32.exe w3knet.dll, dllinitrun
Advertising spyware. Check here for more info on this particular one
Y
W75P2PSERVER
W75P2PS.EXE
Printer utility which is required in order to make the printer work correctly
Y
WanMPSvc
WanMPSvc.exe
An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling AOL doesn?t help
N
war-ftpd.exe
WAR-FTPD.EXE
War FTP Daemon from JGAA's Internet - FTP client
U
Warner
warner.exe
Also known as CyberWarner. From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
U
Warnet
warnet.exe
Warnet - system cleanup software
X
Warning: do not remove it!
fpplock.exe
Unidentified malware
N
WARSVR
war-ftpd.exe
War FTP Daemon - the original free FTP server for windows
N
Washer
washer.exe
Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
N
Washerie.exe
washerie.exe
Cache & Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available via Start -> Programs
N
washindex
washidx.exe
Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
N
Watch
watch.exe
Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted
N
Watch Dog Program
watchdog.exe
For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do
N
Watchdog
Watchdog.exe
Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, but not required as they give instructions on removing it on their webpage
N
WaveTop Launcher
WaveTop.exe
WaveTop - Get push content from TV without an Internet connection - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N
WaveTop Receiver 1
??
See above
N
WaveTop Receiver 2
??
See above
N
WaveTop Upload Manager
??
See above
N
Wbiff
Wbiff.exe
Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received
N
WCESCOMM
WCESCOMM.EXE
Active sync for use with Windows CE based palm PC
N
wcmdmgr.exe
wcmdmgr.exe
It will periodically contact Wild Tangent servers to see if an update is available for your system and allows us to make the product exceptionally reliable. You can control its behavior, or disable it completely, inside your Windows Control Panel
U
wcmdmgrl
wcmdmgrl.exe
Checks for periodic updates of Wild Tangent Web Driver over the web. A multimedia extension/plug-in
U
WCOLOREAL
coloreal.exe
Makes colours sharper and brighter, but will only work with coloreal capable monitors
N
WEATHER
WEATHER.EXE
Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs
N
WeatherCast
Weather.exe
Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
N
WeatherWatcher
ww.exe
WeatherWatcher - weather reporting in the System Tray
For Logitech Web Cams. Not required - camera works fine without it
X
Webcelerator
webcel.exe
Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Spyware and troublesome - see here
X
Webdav.exe
webdav.exe
IRC DDoS bot which gives the hacker full control over your system
X
WebHancer Agent
whagent.exe
System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here
X
WebInstall2
INS????.TMP
Left over from a failed install of Movie Networks, ie, if it is already installed
N
WebKey
WebKey.exe
WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet
N
WebOutfitterTray
sttray.exe
Intel WebOutfitter service System Tray icon
N
Webposition Gold 2
wpsche~1.exe
Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines
U
websaverlive
websaverlive.exe
WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle
X
WebScan
DEFSCANGUI.EXE
Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware in itself - see their privacy statement here
Y
WebScanX
WebScanX.exe
From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
N
Webshots
websho~1.exe
Screensaver program that automatically downloads from the webshots web site
N
Webshots
Webshots Tray.exe
Screensaver program that automatically downloads from the webshots web site
Y
Webtrap
webtrap.exe
Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating
U
WebWasher
wwasher.exe
Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs
N
Welcome
Welcome.exe
Launches the Welcome to Windows tutorial on boot up
N
WetSock
wetsock.exe
RoboMagic Wetsock - weather reporting in the System Tray
N
WFGStartup
WFGStartup.exe
World Weather. This midlet displays the current weather conditions for major cities around the world. This version is for memory limited mobile phones
U
wfips
iphider.exe
ICQ (messaging/chat program) anti-bomb software. WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed. For more information about ICQ bombs see here
N
WFXCTL32.EXE
WFXCTL32.EXE
From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y
wfxsnt40
wfxsnt40.exe
WinFax 10.0 and maybe earlier versions. The program that opens the port for WinFax and not normally in the start menu. Needed if you want to run WinFax
U
WGWLocalManager
WGWLocalManager.exe
Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so. It could be started by creating a shortcut, running it only when connecting to the internet. If internet is used often, it's recommended to leave it in startup so it starts with the system
X
whagent
whagent.exe
System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here
U
WheelMouse
4DMAIN.EXE
Mouse software for Fellowes Wheelman mouse. Has caused some users problems but shouldn't be needed if you don't use any enhanced features it may provide
U
WheelMouse
AMOUMAIN.EXE
A4Tech wireless mouse driver and utility - required if you use non-standard Windows driver features
X
WhenUSave
Save.exe
Rebranded version of SaveNow advertising spyware
X
Whvlxd
Whvlxd.exe
Added as a result of the W32.LXD.Mirc VIRUS!
N
WIAWizardMenu
RUNDLL32.EXE sti_ci.dll, WiaCreateWizardMenu
Still Image Class Installer - installed with a webcam
U
WildTangent Web Driver updater
wcmdmgrl.exe
Checks for periodic updates of Wild Tangent Web Driver over the web. A multimedia extension/plug-in
N
Wildwire Monitor
WWMon.exe
This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem
N
Willow Road
WillowRoad.exe
Willow Road Screen Saver
X
win
regedit -s ..\win.dll
Added as a result of the SEEKER.K VIRUS!
U
Win Chimes
winchi~1.exe
WinChimes - enhancement software for the system clock that runs in the system tray
X
WIN HOST PROCESS
WIN HOST PROCESS.EXE
Added as a result of the KEYLOGGER.CLONE VIRUS!
X
Win Server
winserv.exe
Added as a result of the IMISERV VIRUS!
X
Win Server Updt
wupdt.exe
Added as a result of the IMISERV VIRUS!
X
win32
Shakira_1997_Part_1_.Mpeg_.scr
Added as a result of the MYLIFE.N VIRUS!
X
WIN32
WIN32.EXE
Added as a result of the RATEGA VIRUS!
X
Win32 Kernel core component
Kernel32.pif
Added as a result of the MOKS VIRUS!
X
Win32 Rundll Loader
Rundll32.exe
Added as a result of the SDBOT.A VIRUS! Note: Rundll32.exe is a valid Windows application called Run a DLL as an App and stored in the C:\Windows directory. The version created by this virus is saved in the C:\Windows\System directory
X
win32_i lptt01
win32_i.exe
New variant of the RapidBlaster parasite (in a win32_i folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
win32app
winpup32.exe
Added as a result of the ADCLICKER VIRUS!
X
Win32BaseServiceMOD
Wintask.exe
Added as a result of the NAVIDAD VIRUS!
X
win32clf
win32clf.exe
Added as a result of an unidentified VIRUS!
X
Win32DLL
Win32DLL.vbs
Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
X
Win32G
Kernel32.com
Added as a result of the ESTRELLA VIRUS!
X
Win32G
Scandisk.com
Added as a result of the ESTRELLA VIRUS!
X
win32gb
win32gb.exe
All-In-One-Telcom (adult content dialler) variant
X
win32ini
systroy.exe
Added as a result of the IRC.ALADINZ.C VIRUS!
X
Win32R
Server.com
Added as a result of the ESTRELLA VIRUS!
Y
WIN32SL
Win32sl.exe
Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. The specific function of this is to load MIF's in order for Dell OpenManage Client to work
X
Win32system
??
Added as a result of the DDV.B VIRUS!
X
win32us
win32us.exe
All-In-One-Telcom (adult content dialler) variant
X
win33
Setup_32.exe
Added as a result of the EVILBOT.B VIRUS!
X
win34
WinSetup.exe
Added as a result of the EVILBOT.B VIRUS!
X
win35
Win32.exe
Added as a result of the ISRAZ.A VIRUS!
X
win36
winsrv32.exe
Added as a result of the ADUENT VIRUS! Acts as a hi-jacker redirecting to Surferbar.com and adult content sites
X
Win386
sp32.dll
Homepage hijacker. Not a dll but a regfile in disguise
X
Win386
Win386.exe
Added as a result of the GOSUSUB VIRUS!
X
winactive
WINACTIVE.EXE
Active variant of LOP.com hijacker - see here
X
Winahlp.exe
Winahlp.exe
Added as a result of a variant of the VAGRNOCKER VIRUS!
X
winallap
winallap.exe
Added as a result of the DELF.E VIRUS!
X
winallapu
winallapu.exe
Added as a result of the DELF.E VIRUS!
U
Winampa
WINAMPa.exe
Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs
U
WinampAgent
WINAMPa.exe
Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs
X
Winapp
winpup32.exe
Produces popup ads to adult material sites
X
WinApp32
msapp.exe
Added as a result of the RSBOT VIRUS!
U
WinBackup Scheduler
Wbsched.exe
LIUtilities WinBackup scheduler - backup software
U
WinBar
WinBar.exe
WinBar is a free and compact program that lets you monitor your system and provides easy access to frequently used controls
X
WIN-BUGSFIX
WIN-BUGSFIX.EXE
Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
X
WinCheck
WinCheck.exe
Added as a result of the PWS-CY VIRUS!
X
Winde
winde.exe
Added as a result of the DLUCA VIRUS!
X
Windll
Windll.exe
Added as a result of the TRYNOMA VIRUS!
X
windll
windll32.exe
Added as a result of the ASTEF or RESPAN VIRUSES!
U
WINDLL
WSYS.EXE
STARR key logger. It logs almost everything that goes through the box. It logs all key strokes, all passwords transacted even if they weren't keyed in, all web sites visited, every program launched including the path to that program, and more
X
Windll.exe
Windll.exe
Added as a result of the STEALER VIRUS!
X
Windll32
Windll32.exe
Added as a result of the MSNPWS VIRUS!
X
Windoes Kernel
kernel32.exe
Added as a result of the KICKIN.A (or CYDOG.C) VIRUS!
U
WindowBlinds
wbload.exe
WindowBlinds from Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object Desktop. Required to restore settings if you use it. Available via right-click on the Desktop -> Properties -> Skins
X
WindowEnhancer
Winex.exe
SCbar foistware variant
U
WindowFX
wfxload.exe
Stardock WindowFX - Allows you to add an unprecedented number of special effects to windows
X
Windows
explorer.exe
Added as a result of an unidentified VIRUS! Note - this is not the valid Windows Explorer (explorer.exe). It was found in the C:/Windows directory on a WinNT machine and the wheras the valid explorer.exe would be found in C:/Winnt
X
Windows
Kernel32.exe
Added as a result of the TENDOOLF VIRUS!
X
Windows
msdos98.exe
Added as a result of the PWSTEAL VIRUS!
X
Windows
Windows.exe
Added as a result of the KAZMOR, BOBBINS & ALADINZ.D VIRUSSES!
U
Windows Accelerators
setup.exe
KeySpy keylogger (monitoring program). Given a U recommendation because it depends if you intentionally installed it. If you didn't treat it as X and uninstall or remove
X
windows auto update
msblast.exe
Added as a result of the BLASTER.B VIRUS!
X
windows auto update
penis32.exe
Added as a result of the BLASTER (or MSBLAST.A) VIRUS!
X
windows automation
mslaugh.exe
Added as a result of the BLASTER.E VIRUS!
X
Windows Config Loader
Wincfg32.exe
Added as a result of the SILVERFTP VIRUS!
X
Windows Explorer
??
Added as a result of the SDBOT VIRUS! Note! - this is not the valid Windows Explorer (explorer.exe) which would only be in startups if you added it manually
X
Windows Explorer Shell
Winexec32.exe
Added as a result of the REDIST.B VIRUS!
X
Windows Explorer Update Build 1142
EXPLORER32.EXE
Added as a result of the KaZaA based KWBOT VIRUS!
N
Windows Eyes
??
For blind people, gives a voice description of items on the screen. Windows application which gives you total control over what you hear, when you hear it, and how you hear it. Available via Start -> Programs
U
Windows Guardian
Fawgrd32.exe
Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes
U
Windows Guardian
thehel1iawgrd32.exe
Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes
X
Windows Management Instrumentation
mwd.exe
Added as a result of the GRAPS VIRUS!
N
Windows Media Powerpoint Helper
NSPPTHLP.EXE
German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start -> Programs
X
Windows Media SP.2.37
??
Added as a result of the LEMIR.C VIRUS!
X
Windows MeTaLRoCk service
metalrock.exe
Added as a result of the TASTYRED VIRUS!
X
Windows Service Host
scvhost.exe
Added as a result of the SDBOT.N VIRUS!
X
Windows Startup
winsta~1.exe
Added by browser enhancement some people find annoying called Go Hip. See here for details of what Go Hip is and the page also includes a link for removing it.
X
Windows Startup
winstartup.exe
Added by browser enhancement some people find annoying called Go Hip. See here for details of what Go Hip is and the page also includes a link for removing it.
X
Windows System Restorer
SystemRestorer.exe
Added as a result of the DULOAD.C VIRUS!
X
Windows Task Manager
ACCOUNT_DETAILS.DOC.exe
Added as a result of the QUATERS.A VIRUS!
X
Windows Update
??
Added as a result of the NORIO VIRUS! Acts as a hi-jacker redirecting to adult content sites
X
Windows Update Files
dnetc.exe
Unidentified VIRUS! Note! - wupdmgr.exe is the real Windows Update
X
Windows Update.exe
??
Homepage hijacker, see here
X
Windows Updater
wupdmgr32.exe
Added as a result of a variant of the DOS.AUTOCAT VIRUS!
N
Windows Version Check
ver_chk.exe
Version checker for CyberAudioLibrary (A new way to exchange information through the Internet)
X
Windows_VXD
user32.exe
Added as a result of the PWSTEAL.PPORT VIRUS!
X
WindowsAgent
WindowsAgent.exe
Added as a result of the GOP.G VIRUS!
X
WindowsCriticalUpdate
windows_critical_update.exe
Added as a result of the ASTEF or RESPAN VIRUSES!
X
WindowsMGM
Winmgm32.exe
Added as a result of the SOBIG and LALA.C VIRUSSES!
X
WindowsSetup
??
Added as a result of the EZBOT VIRUS!
X
windowsupdate
RPCX1sQ3.exe
Added as a result of the IRCBOT.B VIRUS!
X
WindowsUpdate
svchost.exe
Added as a result of the ASTEF or RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here
X
WindowsUpdate
windows_update.exe
Added as a result of the LOHACK.B VIRUS!
X
Windowz Update V2.0
Explorer.exe
Added as a result of the YODO VIRUS! Note! - the valid explorer.exe is located in C:\Windows or C:\Winnt whereas this one is located in the System32 sub-directory
X
windrv
windrv32.exe
Unidentified VIRUS - possibly a strain of OBLIVION or BIONET
X
WinDSNX
??
Added as a result of the DNSX VIRUS!
N
WINDVDpatch
CTHELPER.EXE
CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative?s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a leave alone background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
N
WinDVRCtrl
WinDVRCtrl.exe
Control center software for an AOpen VA1000 TV tuner card
X
Windws Configuration Loader
LEXPLORE.exe
Added as a result of the SODABOT VIRUS!
X
WinExec32
WinExec32.exe
Added as a result of the KAZWIN VIRUS!
U
WinFast Schedule
Wfwiz.exe
Leadtek WinFast TV tuner scheduler
U
Winfast_2K
WF2k.exe
System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start -> Settings -> Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card
U
WinFast_Gamma
Rundll32.exe wfcpl.dll, DllLoadGammaRampSettings
Loads if you change the gamma settings on Leadtek WinFast graphics cards
U
Winfast2KLoadDefault
Rundll32.exe Wf2kcpl.dll, DllLoadDefaultSettings
Loads default settings for Leadtek Winfast graphics cards
N
WinFax PRO Controller
WFXCTL32.EXE
From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y
WinFaxAppPortStarter
wfxsnt40.exe
WinFax 10.0 and maybe earlier versions. Used to initiate the WinFax port to enable printing to the WinFax printer (send a fax) from any application.
U
WinFoxV2
WF2k.exe
System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start -> Settings -> Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card
X
WinGate
WinGate.exe
Added as a result of the LOVGATE.G VIRUS!
X
WinGate initialize
WinGate.exe
Added as a result of the LOVGATE VIRUS!
N
WinGuage Pro
WGPRO32.EXE
Part of McAfee Nuts & Bolts. WinGauge is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious. Resource hog. Available via Start -> Programs
Y
Winguard
WGFE95.EXE
Dr Solomon's Virex antivirus
N
WinHacker
rundll32.exe wh95.dll, HackMe
Tweaking utility by Wedge Software. There arefar better tweakers and, unlike WinHacker, most are free
X
Winhelp
winhe1p.exe
Added as a result of the QQPASS.E VIRUS!
X
Winhelp
winhelp.exe
Added as a result of the LOVGATE.G VIRUS!
X
Winhlp32
Wscript.exe ..Msexec32.vbs
Added as a result of the GANT.B VIRUS!
X
wininetd
wininetd.exe
Added as a result of the WINET VIRUS!
X
wininit
wininit.exe
Added as a result of the WOLLF.16 VIRUS!
X
Wink*.exe
Wink*.exe
Added as a result of a version of the KLEZ VIRUS! * represents any random characters
U
Winkb6
winkb6.exe
Part of We-Blocker, works in tandem with syswb6. Both files are needed to run WeBlocker. Required if We-Blocker is installed
X
WinKernel
WinKer.exe
Added as a result of the MIRAB or SERVIDOR VIRUSES!
U
WinKey
winkey.exe
Loads Copernic's WinKey. Used to map out Windows key hotkey combinations. Not required for the system, but is necessary for this to be running if you use these hotkey combos
X
WinLibUpdate
libupdate.exe
Added as a result of the BIONET series of VIRUSES such as BIONET.31 or BIONET.310
X
WinLibUpdate32
libupdate32.exe
Added as a result of the BIONET.405 VIRUS!
X
WinLibUpdte
libupdte.exe
Added as a result of the BIONET.318 VIRUS!
X
Winlme
windll.exe
Added as a result of the GOP.F VIRUS!
X
WinLoader
??
Added as a result of versions of the SUBSEVEN VIRUS!
X
winlogon
winlogin.exe
Added as a result of the RANDEX.E VIRUS!
Y
winlogon
winlogon.exe
Windows Logon Process - handles user logons
Y
winlogon
winlogon.exe
Hijacker - file is located in C:\Windows or Winnt, and not in it's System or System32 subdirectory, as is the case with the legitimate winlogon.exe file above
Y
winlogon
winlogon.exe
Added as a result of the RANDEX.E VIRUS! Note - this is not the valid Winlogon.exe which would normally be located in the same directory (C:\Windows\System (Win9x/Me),
X
Winmain
winmain.exe
One of the first of a new breed of malware. When run it immediately loads MSHTA.EXE from the Windows folder, placing it on hot standby, ready to accept HTA scripting within a web page and then EXECUTE what is embedded IN the page as a program! In other words, it's possible for a rogue website to actually embed trojans, worms and/or viruses directly into a web page. BOClean's HTA Stop offers an easy way to toggle this capabiltity, or rather vulnerability, on and off. I suggest you leave it disabled!
U
winmatrix.exe
WinMatrixXP.exe
WinMatrix XP - wallpaper replacement that shows different matrix effects (including flowing matrix codes from 'The Matrix' movie) on your desktop
X
WinMenssage
winmax.exe
Added as a result of the BANCOS.B VIRUS!
N
WinMgmt
WinMgmt.exe
Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth scheduler - refer here
X
WinMine
D4NG3.vbs
Added as a result of the BISCUIT.A VIRUS!
Y
winmodem
wmexe.exe
Software for software based modems. Required if you have one of these. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
N
WinMySQLadmin Tool
winmysqladmin.exe
Starts the MySQL database admin tool
X
winnet
winnet.exe
CommonName Toolbar spyware. To uninstall see here
X
WinNtBB
WinntBB.exe
Added as a result of the DULOAD.C VIRUS!
U
WinPatrol
WinPatrol.exe
WinPatrol - Manage Startup programs, tasks, cookies; will sniff out Worms, Trojan horses, Cookies, Adware, Spyware, Klez, Assumption and other malicious programs
Y
WinPoet
WinPPPoverEthernet.exe
WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
N
WinPopup
WINPOPUP.EXE
Intranet chat software provided by windows for chat on small networks. Handy little LAN messaging util. Has been included in Windows since 95, and maybe in WFWG 3.11. Normally it won't set itself up to run unless the user specifically adds it to startup
X
winpopup
winupie.exe
Adware by Tradeexit.com
X
WinProfile
Command.exe
Added as a result of the BUDDY VIRUS!
X
WinProt
server.exe
Added as a result of the CHUPACABRA VIRUS!
X
WinProt
Winprot.exe
Added as a result of the CHUPACABRA VIRUS!
U
WinProxy
WinProxy.EXE
WinProxy is the world-first proxy server and a firewall with integrated mail server for Windows 95/98/ME/NT/2000/XP
X
winpup32
Winpup32.exe
Added as a result of the ADCLICKER VIRUS!
X
winReg
winReg.exe
Added as a result of the YAHA.H or YAHA.J VIRUSES!
X
winregsrv
winregsrv.exe
Added as a result of the SYNRG VIRUS!
X
Winres32vis
??
Added as a result of the THRAX.A VIRUS!
X
winrun
msconfig.exe
Added as a result of the WINUR VIRUS! Note! - this is not the real msconfig.exe
X
WinRunners
WinDrivers.exe
Added as a result of the DULOAD.C VIRUS!
X
winserver
Server.txt.vbs
Added as a result of the DELTAD.A VIRUS!
X
WinServices
WinServices.exe
Added as a result of the YAHA.K or YAHA.M VIRUSES!
X
winservn
winservn.exe
PurityScan that purports to scan your hard drive for adult content but is adware
X
winservs
winservs.exe
PurityScan that purports to scan your hard drive for adult content but is adware
X
WinSetBrowse
BasicUpdate.dll.vbs
Added as a result of the BISCUIT.A VIRUS!
X
Winsock2 driver
SDJOIJE.EXE
Added as a result of the SPYBOT.DR VIRUS!
X
Winsock32 driver
lcd.exe
Added as a result of the SPYBOT.B VIRUS!
X
Winsock32 driver
Sdjoije.exe
Added as a result of the SPYBOT.B VIRUS!
X
Winsock32 driver
Testing.exe
Added as a result of the SPYBOT.B VIRUS!
X
Winsock32driver
win32server.scr
Added as a result of the HACARMY VIRUS!
X
WinSocketComponent
nthost.exe
Added as a result of an unidentified VIRUS!
X
WinSrv
kn0x.exe
Added as a result of the HOBBIT.F VIRUS!
X
WinSrv
SHIZZLE.EXE
Added as a result of the HOBBIT.C VIRUS!
X
Winsta~1
winsta~1.exe
GoHip foistware
X
WinStart
WinStart.exe
From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words, with this installed, typing car in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge
X
WinStart
Wscript.exe WinStart.vbs
Added as a result of the CIAN.C VIRUS!
X
WinStart
winstart32.exe
Added as a result of the PUROL VIRUS!
X
WinStart001
WinStart001.exe
From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words, with this installed, typing car in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge
X
WinStart001.EXE
WinStart001.exe
From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words, with this installed, typing car in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge
X
WinSth16
WinSth16.exe
Added as a result of the CAKE VIRUS!
X
winstro
RUN32DLL.exe
Added as a result of the FTP_ANA VIRUS!
X
Winsvc32
Winsvc32.exe
Homepage hijacker
U
Winsys
Winsys.exe
Win-Spy - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
X
WinSys32
Winsys32.exe
Added as a result of the CIGIVIP VIRUS!
X
winsyslog lptt01
winsyslog.exe
New variant of the RapidBlaster parasite . It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
WinSysStartUpWKbLw
TaskSystemDll.Exe
Added as a result of the BACKZAT.G VIRUS!
X
WinSyst32
winsyst32.exe
Added as a result of the MORB VIRUS!
X
WinSystem
winsystem.exe
Added as a result of the WHITEBAIT VIRUS!
X
WinTask
Wintask.exe
Added as a result of the HIPO or LEMIR.F VIRUSES!
U
WinTasks Traybar
wintasks.exe
WinTasks - Efficient Resource and Task Management is absolutely critical if you want to achieve the highest system performance levels possible. WinTasks 4 will not only help you achieve this task, but will actually make your system run faster and more smoothly than ever before
N
Wintercooler Pro
WINCOOL.EXE
Wintercooler Pro - utility that monitors CPU usage, RAM consumption and Internet connection speed
N
WinTidy
WinTidy.exe
Desktop icon manager from PC Magazine (Ziff-Davis) for Win95. Available via Start -> Programs
N
Wintime Wtxpload
Wxpload.exe Wintime
Part of the software to support a Dexxa USB graphics tablet. From a visitor - This gets started anyway when you plug in the USB connector for the graphics tablet, if it's not already running. It then starts an application which manages the tablet messages. Since I leave the tablet unplugged unless I need to use it, I don't need this running at startup. I suspect that this program monitors a number of windows messages, so that when it's loaded, my regular mouse slows down - it acts like it 'sticks' entering and leaving windows. Certainly my performance returned to what I expected when I removed this item using MSCONFIG
X
WinTray
wintray.exe
Added as a result of the LEGUARDIEN.B VIRUS!
X
WinUPD32
explorer.exe
Unidentified VIRUS!
X
WinUpdate
RBSKQQBO.EXE
Added as a result of the VBS.Vbswg2b.A@mm VIRUS!
X
winupdate.exe
winupdate.exe
Added as a result of the RADO VIRUS!
X
Winux Piriax Service
PH32.EXE
Added as a result of the RANDEX.G VIRUS!
U
WinVNC
WinVNC.exe
WinVNC is an application that allows you to remote control your PC from another PC somewhere on the internet
X
winwan lptt01
winwan.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U
WinXPLoad
Rundll32 LoadDll, LoadExe WinXPLoad.exe
Compaq hotkey related - required if you use the hotkeys
N
WinZip Quick Pick
WZQKPICK.EXE
Added with WinZip version 8.1. The new WinZip Quick Pick taskbar tray icon gives you instant access to WinZip and your Zip files. Just left click the icon to open WinZip, or right click it to instantly reopen recently used Zip files, access your Favorite Zip Folders, open WinZip Help, or start WinZip itself.. You can right-click and close it - choosing to not re-load it at start-up
U
Wireless PCI Card Configuration Utility
WMP11Cfg.exe
Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
U
Wireless-G Notebook Adapter Utility
WPC54CFG.EXE
Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G)
N
wjview
wjview.exe
MS tool used to view window-based Java applications from the command line
N
wkcalrem
wkcalrem.exe
Produces a pop-up reminder of events scheduled using the MS Works Calendar
N
WkDetect
WkDetect.exe
Checks for updates to MS Works
N
wkfud
wkfud.exe
A marketing program for MS Works
N
WksSb
WksSb.exe
The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file
N
WkUFind
WkUFind.exe
MS Works Update Detection. MS Picture It! (versions 7 to current) use this automatic update feature during the log on process. It can also cause your system to automatically dial into your ISP as it tries to access the internet, if you have your system set to automatically dial when the internet is invoked. To manually update, go to Microsoft's Office/Works update site
N
WLAN Status Tray Applet
WLANSTA.EXE
System Tray icon for checking the status of a Wireless LAN
N
WMBoot
??
Associated with Logitech Wingman game controllers. Not required but what does it do?
U
WMIEXE.exe
wmiexe.exe
NT component, used by Windows Millennium to detect Plug and Play-compliant IEEE 1394 devices during the startup process. Since this is important for the computer to work properly if you have these, Windows Millennium protects wmiexe.exe and will restore the file even if it's deleted or renamed. Check here for some details on what to do to stop it loading
X
WNAD
WNAD.EXE
Spyware added as a result of running a program called Yo Mama Osama (osama.exe). See here for more and how to get rid of it. There are other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like
N
Woowatch
Watch.exe
Wanadoo ISP software, not required
N
WordWeb
wweb32.exe
WordWeb - free theasaurus and dictionary. Start manually
N
Works Calendar Reminder
wkcalrem.exe
Produces a pop-up reminder of events scheduled using the MS Works Calendar
N
WorksFUD
wkfud.exe
A marketing program for MS Works
U
Workstation Scheduler
wm95.exe
Desktop Management Scheduler. Part of Novell's Netware Client. Schedueles NDS events. If events have been schedueled, it is required, otherwise, it is useless and a memory hog
U
Worm Detector
wd.exe
Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam
X
wormexe
winstart.exe
Added as a result of the EARLYBIRD VIRUS!
N
Wpctrl
wpctrlnt.exe
WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
N
wpctrl95
wpctrl95.exe
WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
Y
WPCycle.exe
WpCycleWin.exe
Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end, preventing instability of your CPU (freezing)
X
WQK
WQK.exe
Added as a result of a version of the KLEZ VIRUS!
N
WrCtrl
WrCtrl.exe
Win-Route 4.27 NAT engine on Win2k Pro for connection sharing and security using Win-Route by Tiny Software. A connection sharing/Firewall Application. If service is disabled the program does not work, but you can manually start/stop the service with a shortcut the program installs at any time
X
WRDialer
WrDialer.exe
WinPoet DSL dialler
U
wrexec
wrexec.exe
Watch Right - monitoring program, part of the PowerTools add-on for AOL. Records instant messages, E-mail, chat. Watch Right appears to be, and functions as an online clock updater which connects with the U.S. National Institute of Standards and Technology. It was designed for parents who wish to keep an eye on what their children are doing online
U
WScheduler
WScheduler.exe
Windows Scheduler - schedule unattended running of applications, batch files, scripts and much more. Also, you can schedule popup reminders so you'll never forget reminders, tasks and other events.
Y
wstimeb
wstimeb.exe
Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it
Y
wswpd
wswpd.exe
Used with some models of Panasonic, Epson and NEC printers. Some older drivers known to have a memory leak. Needed for printing to work
N
WT Game Channel
GameChannel.exe
Wild Tangent GameChannel - notification of new games, quick access to games and fast and easy game downloads
N
WT GameChannel
wtgamechannel.exe
Wild Tangent GameChannel - notification of new games, quick access to games and fast and easy game downloads
Y
WUOLService
WUOLService9x.exe
Remote wakeup status agent. Part of Novell's ZenWorks. Processes Wake-up on LAN requests (turn on a computer remotely on LAN)
X
WUPD
iglmtray.exe
Added as a result of the TZET VIRUS!
X
wupdt
wupdt.exe
Added as a result of the IMISERV VIRUS!
Y
WUSB11B.exe
WUSB11B.exe
Linksys WUSB11 WLAN USB adapter
X
www.hidro.4t.com
enbiei.exe
Added as a result of the BLASTER.F VIRUS!
N
Xanadu
Xanadu.exe
Xanadu - free language and translation wizard from Foreignword
U
XE 8x LM Status
lmsxxe.exe
Xerox XE8 series laser printer status monitor
X
Xecuter.bat
psexec.bat
Added as a result of the BOOHOO VIRUS!
N
XemiCo
ADC.EXE
XemiComputers Active Desktop Calendar
N
X-Grabber
sswizard.exe
ScreenShot Wizard
X
XiD
mmx.exe
Added as a result of the ANALOGX VIRUS!
Y
XircWinModem4
ltcm000c.exe
WinModem drivers. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
U
xitami
Xiwin32.exe
Xitami Multiplatform Open Source web server
X
XNSearchAssistant
SrchAsst.exe
iWon Search Assistant - spyware
U
XStop95
XStop95.exe
XStop - internet filter
U
XTNDConnect PC - 3CmPlm
Autodet.exe
Component of EasySync Pro. Synchronisation between Palm PDAs and Microsoft Outlook
U
XTNDConnect PC - ErPhn2
ErPhn2.exe
Component of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook
U
XTNDConnect PC - LtNts4
NtsAgnt.exe
Component of EasySync Pro
U
XtreamLok License Manager
xl.exe
License manager for xLok (XtreamLok) - prevents software being reverse engineered
X
Xupiter Startup
XupiterStartup.exe
Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X
XupiterCfgLoader
BWCfgLoader.exe
Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X
XupiterCfgLoader
XTCfgLoader.exe
Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X
xupiterstartup2003
xupiterstartup2003.exe
Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X
XupiterToolbarLoader
XupiterToolbarLoader.exe
Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
U
xv_ctrl
v_ctrl.exe
3dfx Underground Tools - Gives direct hardware control to your video graphics adapter
N
Yahoo! Pager
ypager.exe
Yahoo! Messenger allows you to send instant messages. Using Yahoo! Messenger, you can see when friends are online and chat back and forth with them, like having a real conversation. Available via Start -> Programs
X
yahoo_toolbar lptt01
yahoo_toolbar.exe
New variant of the RapidBlaster parasite. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X
YahooStock
Prmvr.exe
Adtomi adware
X
YahooStock
ystckAO32.exe
Adtomi adware
N
YAMAHA DS-XG Launcher
dslaunch.exe
System Tray access for the features of the Yamaha DS-XG soundcard unless you regularly change set-ups
N
Yankee Clipper III
YankClip.exe
Yankee Clipper III - 'A super powerful Windows clipboard extender/memory - now in its third generation. Handles Pictures, Richtext, URLS, etc - any size. Features printing, drag and drop, optional permanent storage of clippings. Familiar Outlook interface'. Freeware
N
ypager
ypager.exe
Yahoo! Messenger allows you to send instant messages. Using Yahoo! Messenger, you can see when friends are online and chat back and forth with them, like having a real conversation. Available via Start -> Programs
Y
YTrayMagic Lite 1
YTRAYMAGIC.EXE
YTrayMagic from YoconSoft automatically restores your tray icons after an Explorer(the windows shell) crash. Leave to run at startup since only those icons that are in the taskbar after YTrayMagic has initialized will be restored
X
ywzizdon
ywzizdon.exe
Free_Scratch_Cards foistware
X
yyyyyyyy
??
Added as a result of the MUMUBOY.B VIRUS!
X
yz.exe
yz.exe
Added as a result of the VARDO VIRUS!
X
ZaCker
??
Added as a result of the HOLAR.A VIRUS! where <filename> is the worm filename
X
Zacker
Zacker.exe
Added as a result of the GEMEL VIRUS!
N
zBrowser Launcher
Commandr.exe
For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
N
zBrowser Launcher
iTouch.exe
For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X
zcproo
qssstiej.exe
Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise. see this thread
N
zdnet
kontiki.exe
Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
N
Zebus
msdc32.exe
Runs a HTML tutorial on the Zebus web-site
X
Zenet
rundll32 CNBabe.dll, DllStartup
CommonName Toolbar spyware. To uninstall see here
Y
ZENRC
zenrc32.exe
The main component of Novell's ZenWorks - Complete End-to-End Directory-enabled Network Management. Leave well alone
Y
ZENRC Tray Icon
zentray.exe
Part of Novell's ZenWorks - Complete End-to-End Directory-enabled Network Management. Best left alone
Y
ZENworks Imaging Service
ZISWin.exe
Imaging Agent. Part of Novell's ZenWorks - Complete End-to-End Directory-enabled Network Management
U
ZeroAds
??
ZeroAds - culls ads, cookies and pop-ups. Tells ZeroAds not to run at startup - needed to start it manually
X
ZIBMACC
rundll.exe -> ZIBMACC.INF
ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435)
U
ZingSpooler
ZingSpooler.exe
Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums
N
Zinio DLM
ZDLM.EXE
Zinio - used to read magazines in digital rather than paper format
X
Zip Driver Loader
msload32.exe
Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
X
Zip Driver Loader
ZipLoader32.exe
Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
N
ZipDisk Icons
IMGICON.EXE
Creates a Zip Drive icon on the system tray
N
ZipGenius Clean
zg.exe
ZipGenius file compression utility
N
ZipMagic
zm32.exe
Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first
U
ZLH
ZLH.EXE
System Tray icon for Norman Antivirus
X
Zonavirus
??
Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Y
Zone Labs Client
Zapro.exe
Firewall program from Zonelabs - paid for version
Y
ZoneAlarm
zonealarm.exe
Firewall program from Zonelabs - free version
Y
ZoneAlarm Pro
Zapro.exe
Firewall program from Zonelabs - paid for version
U
Zoom
zoom.exe
Zoom - speeds up Windows startup and manages startup applications
Y
ZPOINT32
ZPOINT32.exe
USB graphics/writing tablet driver
U
zSPGuard
Spguard.exe
StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'.
X
ZtgServerSwitch
server.vbs
ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware
X
Zupdate
Zupdate.exe
B3d Projector - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the BDE directory and all its contents
U
z-WrDialer
WrDialer.exe
WinPoet DSL dialer
X
zzgshp
gshp.vbs
Homepage hi-jacker that re-defines your IE or Netscape start page
Y
??
hpztsb06.exe
HP Printer Taskbar Manager - controls your HP printing jobs
