home *** CD-ROM | disk | FTP | other *** search
/ Chip 2005 May / chip-cd_2005_05.zip / 05 / Narzedzia systemowe / Super Utilities 4.86 / supro.exe / {app} / bho.mdb / processes.json < prev    next >
JavaScript Object Notation  |  2004-11-21  |  122KB
  1. {
  2.     "schema": {
  3.         "PName": "Text (255)",
  4.         "PAltName": "Text (255)",
  5.         "Name": "Text (255)",
  6.         "Description": "Memo/Hyperlink (255)",
  7.         "Company": "Text (255)",
  8.         "SysProcess": "Text (255)",
  9.         "SecurityRisk": "Text (255)",
  10.         "Errors": "Text (255)",
  11.         "Status": "Long Integer"
  12.     },
  13.     "data": [
  14.         {
  15.             "PName": "acrord32",
  16.             "PAltName": "acrord32.exe",
  17.             "Name": "Acrobat Reader",
  18.             "Description": "Acrobat Reader, which is used to view PDF documents.",
  19.             "Company": "Adobe Systems",
  20.             "SysProcess": "No",
  21.             "SecurityRisk": "No",
  22.             "Errors": "N/A",
  23.             "Status": 0
  24.         },
  25.         {
  26.             "PName": "acrotray",
  27.             "PAltName": "acrotray.exe",
  28.             "Name": "Acrobat Assistant",
  29.             "Description": "Acrobat Distiller, which is used to print PDF documents.",
  30.             "Company": "Adobe Systems",
  31.             "SysProcess": "No",
  32.             "SecurityRisk": "No",
  33.             "Errors": "N/A",
  34.             "Status": 0
  35.         },
  36.         {
  37.             "PName": "acsd",
  38.             "PAltName": "acsd.exe",
  39.             "Name": "Aol Connectivity Service",
  40.             "Description": "Application that helps to save time when the users signs back on manually after loosing connectivity with AOL. The application starts an automatic function that restores the connection.",
  41.             "Company": "America Online, Inc.",
  42.             "SysProcess": "No",
  43.             "SecurityRisk": "No",
  44.             "Errors": "N/A",
  45.             "Status": 0
  46.         },
  47.         {
  48.             "PName": "actalert",
  49.             "PAltName": "actalert.exe",
  50.             "Name": "ActAlert",
  51.             "Description": "Contact management solution tool.",
  52.             "Company": "Best Software SB, Inc.",
  53.             "SysProcess": "No",
  54.             "SecurityRisk": "No",
  55.             "Errors": "N/A",
  56.             "Status": 0
  57.         },
  58.         {
  59.             "PName": "adaware",
  60.             "PAltName": "adaware.exe",
  61.             "Name": "foobin lptt01",
  62.             "Description": "Variant of the RapidBlaster parasite that gets a new folder and file name from its controlling server. After that it creates a named folder, copies itself to that directory, deletes the original process, and runs a new file.",
  63.             "Company": "N/A",
  64.             "SysProcess": "No",
  65.             "SecurityRisk": "Yes",
  66.             "Errors": "N/A",
  67.             "Status": 0
  68.         },
  69.         {
  70.             "PName": "agentsvr",
  71.             "PAltName": "agentsvr.exe",
  72.             "Name": "Microsoft Agent Server",
  73.             "Description": "ActiveX control that helps software developers to add character animation to their software or web pages, text to speech facilities, or end-user voice commands capability.",
  74.             "Company": "Microsoft Corp.",
  75.             "SysProcess": "Yes",
  76.             "SecurityRisk": "No",
  77.             "Errors": "N/A",
  78.             "Status": 0
  79.         },
  80.         {
  81.             "PName": "agrsmmsg",
  82.             "PAltName": "agrsmmsg.exe",
  83.             "Name": "SoftModem Messaging Applet",
  84.             "Description": "It is a part of the AMR modem driver.",
  85.             "Company": "Agere Systems Inc.",
  86.             "SysProcess": "No",
  87.             "SecurityRisk": "No",
  88.             "Errors": "N/A",
  89.             "Status": 0
  90.         },
  91.         {
  92.             "PName": "aim",
  93.             "PAltName": "aim.exe",
  94.             "Name": "AOL Instant Messenger",
  95.             "Description": "AOL Instant Messenger, which is an online chat and instant messaging client.",
  96.             "Company": "America Online, Inc.",
  97.             "SysProcess": "No",
  98.             "SecurityRisk": "No",
  99.             "Errors": "N/A",
  100.             "Status": 0
  101.         },
  102.         {
  103.             "PName": "alevir",
  104.             "PAltName": "alevir.exe",
  105.             "Name": "Opaserv-A Worm",
  106.             "Description": "Added to the system as a result of Opaserv-A WORM that spreads with network shares.",
  107.             "Company": "N/A",
  108.             "SysProcess": "No",
  109.             "SecurityRisk": "Yes",
  110.             "Errors": "N/A",
  111.             "Status": 0
  112.         },
  113.         {
  114.             "PName": "alg",
  115.             "PAltName": "alg.exe",
  116.             "Name": "Application Layer Gateway Service",
  117.             "Description": "Part of Internet Connection Sharing application and Internet Connection Firewall for Windows XP. This service provides support for third party protocol plug-ins for the Internet Connection Sharing application and Internet Connection Firewall.",
  118.             "Company": "Microsoft Corp.",
  119.             "SysProcess": "Yes",
  120.             "SecurityRisk": "No",
  121.             "Errors": "N/A",
  122.             "Status": 0
  123.         },
  124.         {
  125.             "PName": "alg",
  126.             "PAltName": "alg.exe",
  127.             "Name": "Application Layer Gateway Service",
  128.             "Description": "Part of Internet Connection Sharing application and Internet Connection Firewall for Windows XP. This service provides support for third party protocol plug-ins for the Internet Connection Sharing application and Internet Connection Firewall.",
  129.             "Company": "Microsoft Corp.",
  130.             "SysProcess": "Yes",
  131.             "SecurityRisk": "No",
  132.             "Errors": "N/A",
  133.             "Status": 0
  134.         },
  135.         {
  136.             "PName": "apoint",
  137.             "PAltName": "apoint.exe",
  138.             "Name": "Alps Pointing-device Driver",
  139.             "Description": "Pointing-device driver for touchpads manufactured by Alps.",
  140.             "Company": "Alps Electric Co",
  141.             "SysProcess": "No",
  142.             "SecurityRisk": "No",
  143.             "Errors": "N/A",
  144.             "Status": 0
  145.         },
  146.         {
  147.             "PName": "apoint",
  148.             "PAltName": "apoint.exe",
  149.             "Name": "Alps Pointing-device Driver",
  150.             "Description": "Pointing-device driver for touchpads manufactured by Alps.",
  151.             "Company": "Alps Electric Co",
  152.             "SysProcess": "No",
  153.             "SecurityRisk": "No",
  154.             "Errors": "N/A",
  155.             "Status": 0
  156.         },
  157.         {
  158.             "PName": "arr",
  159.             "PAltName": "arr.exe",
  160.             "Name": "Dialer.Lohan",
  161.             "Description": "Adult content dialer application that can be used to access pornographic material by dialing high-cost numbers using a modem.",
  162.             "Company": "N/A",
  163.             "SysProcess": "No",
  164.             "SecurityRisk": "Yes",
  165.             "Errors": "N/A",
  166.             "Status": 0
  167.         },
  168.         {
  169.             "PName": "ati2evxx",
  170.             "PAltName": "ati2evxx.exe",
  171.             "Name": "ATI External Event Utility EXE Module",
  172.             "Description": "ATI External Event Utility EXE module working in the background.",
  173.             "Company": "ATI Technologies Inc.",
  174.             "SysProcess": "No",
  175.             "SecurityRisk": "No",
  176.             "Errors": "N/A",
  177.             "Status": 0
  178.         },
  179.         {
  180.             "PName": "atiptaxx",
  181.             "PAltName": "atiptaxx.exe",
  182.             "Name": "ATI Utilitiy",
  183.             "Description": "ATI video card utility.",
  184.             "Company": "ATI Technologies Inc.",
  185.             "SysProcess": "No",
  186.             "SecurityRisk": "No",
  187.             "Errors": "N/A",
  188.             "Status": 0
  189.         },
  190.         {
  191.             "PName": "atrack",
  192.             "PAltName": "atrack.exe",
  193.             "Name": "Alert Tracker task",
  194.             "Description": "Newly added feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) that provides instant notification of events as they happen.",
  195.             "Company": "Symantec Corporation",
  196.             "SysProcess": "No",
  197.             "SecurityRisk": "No",
  198.             "Errors": "N/A",
  199.             "Status": 0
  200.         },
  201.         {
  202.             "PName": "autorun",
  203.             "PAltName": "autorun.exe",
  204.             "Name": "Autorun",
  205.             "Description": "AutoRun facility for Windows 95, 98, ME, NT4, 2000, and XP. This facility will automatically run an executable as soon as a CD-ROM is inserted into the CD drive of the computer.",
  206.             "Company": "Microsoft Corp.",
  207.             "SysProcess": "Yes",
  208.             "SecurityRisk": "No",
  209.             "Errors": "N/A",
  210.             "Status": 0
  211.         },
  212.         {
  213.             "PName": "avsynmgr",
  214.             "PAltName": "avsynmgr.exe",
  215.             "Name": "McAfee VirusScan Synchronization Manager",
  216.             "Description": "Service that synchronizes the workstation virus definitions with those collected from the McAfee site by the central file server on network versions of McAfee VirusScan.",
  217.             "Company": "Network Associates, Inc.",
  218.             "SysProcess": "No",
  219.             "SecurityRisk": "No",
  220.             "Errors": "N/A",
  221.             "Status": 0
  222.         },
  223.         {
  224.             "PName": "backWeb",
  225.             "PAltName": "backWeb.exe",
  226.             "Name": "Backweb Adware",
  227.             "Description": "Adware by Backweb Technologies.",
  228.             "Company": "Backweb Technologies",
  229.             "SysProcess": "No",
  230.             "SecurityRisk": "Yes",
  231.             "Errors": "N/A",
  232.             "Status": 0
  233.         },
  234.         {
  235.             "PName": "backweb-8876480",
  236.             "PAltName": "backweb-8876480.exe",
  237.             "Name": "Logitech Desktop Messenger",
  238.             "Description": "Comes with the software for Logitech products. Automatically checks for software upgrades and new products, services, and special offerings from Logitech.",
  239.             "Company": "Logitech",
  240.             "SysProcess": "No",
  241.             "SecurityRisk": "No",
  242.             "Errors": "N/A",
  243.             "Status": 0
  244.         },
  245.         {
  246.             "PName": "bargains",
  247.             "PAltName": "bargains.exe",
  248.             "Name": "Bargains Spyware",
  249.             "Description": "Advertising spyware that comes with some free software.",
  250.             "Company": "Exact Advertising",
  251.             "SysProcess": "No",
  252.             "SecurityRisk": "Yes",
  253.             "Errors": "N/A",
  254.             "Status": 0
  255.         },
  256.         {
  257.             "PName": "bcmsmmsg",
  258.             "PAltName": "bcmsmmsg.exe",
  259.             "Name": "BCMSMMSG",
  260.             "Description": "Background task used as a BCM voice modem driver and required for dial-up modems.",
  261.             "Company": "Broadcom Corporation.",
  262.             "SysProcess": "No",
  263.             "SecurityRisk": "No",
  264.             "Errors": "N/A",
  265.             "Status": 0
  266.         },
  267.         {
  268.             "PName": "blss",
  269.             "PAltName": "blss.exe",
  270.             "Name": "blss",
  271.             "Description": "CBlaster Trojan/dialer/downloader that dials pay numbers to adult sites.",
  272.             "Company": "N/A",
  273.             "SysProcess": "No",
  274.             "SecurityRisk": "Yes",
  275.             "Errors": "N/A",
  276.             "Status": 0
  277.         },
  278.         {
  279.             "PName": "bootconf",
  280.             "PAltName": "bootconf.exe",
  281.             "Name": "Internat Conf",
  282.             "Description": "Homepage hijacker, redirecting to coolwebsearch.com.",
  283.             "Company": "N/A",
  284.             "SysProcess": "No",
  285.             "SecurityRisk": "Yes",
  286.             "Errors": "N/A",
  287.             "Status": 0
  288.         },
  289.         {
  290.             "PName": "bpc",
  291.             "PAltName": "bpc.exe",
  292.             "Name": "RVP",
  293.             "Description": "Spyware included with the latest version of Grokster.",
  294.             "Company": "N/A",
  295.             "SysProcess": "No",
  296.             "SecurityRisk": "Yes",
  297.             "Errors": "N/A",
  298.             "Status": 0
  299.         },
  300.         {
  301.             "PName": "brasil",
  302.             "PAltName": "brasil.exe",
  303.             "Name": "Brasil",
  304.             "Description": "Added to the system as a result of the OPASERV.E virus.",
  305.             "Company": "N/A",
  306.             "SysProcess": "No",
  307.             "SecurityRisk": "Yes",
  308.             "Errors": "N/A",
  309.             "Status": 0
  310.         },
  311.         {
  312.             "PName": "bundle",
  313.             "PAltName": "bundle.exe",
  314.             "Name": "Adware.SAHAgent",
  315.             "Description": "An adware program that downloads and displays advertisements from shopathomeselect.com.",
  316.             "Company": "N/A",
  317.             "SysProcess": "No",
  318.             "SecurityRisk": "Yes",
  319.             "Errors": "N/A",
  320.             "Status": 0
  321.         },
  322.         {
  323.             "PName": "bvt",
  324.             "PAltName": "bvt.exe",
  325.             "Name": "BVT",
  326.             "Description": "Process added to the system as a result of AUTOUPDER virus that can be used as a distribution mechanism by worms or other malicious programs.",
  327.             "Company": "N/A",
  328.             "SysProcess": "No",
  329.             "SecurityRisk": "Yes",
  330.             "Errors": "N/A",
  331.             "Status": 0
  332.         },
  333.         {
  334.             "PName": "carpserv",
  335.             "PAltName": "carpserv.exe",
  336.             "Name": "CARPService",
  337.             "Description": "Background application that allows the internal modem speaker and allows you to listen to the dial-up sounds. It is related with Zoltrix modems.",
  338.             "Company": "Zoltrix International limited",
  339.             "SysProcess": "No",
  340.             "SecurityRisk": "No",
  341.             "Errors": "N/A",
  342.             "Status": 0
  343.         },
  344.         {
  345.             "PName": "ccapp",
  346.             "PAltName": "ccapp.exe",
  347.             "Name": "Common Client CC App",
  348.             "Description": "Associated with Norton AntiVirus 2003, which runs auto-protect and email checking facilities. Without this service, both facilities cannot function correctly.",
  349.             "Company": "Symantec Corporation",
  350.             "SysProcess": "No",
  351.             "SecurityRisk": "No",
  352.             "Errors": "N/A",
  353.             "Status": 0
  354.         },
  355.         {
  356.             "PName": "ccevtmgr",
  357.             "PAltName": "ccevtmgr.exe",
  358.             "Name": "Symantec Event Manager Service",
  359.             "Description": "Program associated with Norton AntiVirus 2003/4. The program is responsible for keeping track of all events that occur within the previously-mentioned products and then writing the details of those events to the Activity Log.",
  360.             "Company": "Symantec Corporation",
  361.             "SysProcess": "No",
  362.             "SecurityRisk": "No",
  363.             "Errors": "N/A",
  364.             "Status": 0
  365.         },
  366.         {
  367.             "PName": "cconnect",
  368.             "PAltName": "cconnect.exe",
  369.             "Name": "CorrectConnect",
  370.             "Description": "Background application that is included with the Windows 2000 Resource Kit and monitors user connections to servers and the system they are logging on to.",
  371.             "Company": "Microsoft Corp.",
  372.             "SysProcess": "Yes",
  373.             "SecurityRisk": "No",
  374.             "Errors": "N/A",
  375.             "Status": 0
  376.         },
  377.         {
  378.             "PName": "ccpxysvc",
  379.             "PAltName": "ccpxysvc.exe",
  380.             "Name": "Common Client Proxy Service.",
  381.             "Description": "Background task associated with Norton Personal Firewall 2003/4 and Norton Internet Security 2003/4 in Windows 2000/XP.",
  382.             "Company": "Symantec Corporation",
  383.             "SysProcess": "No",
  384.             "SecurityRisk": "No",
  385.             "Errors": "N/A",
  386.             "Status": 0
  387.         },
  388.         {
  389.             "PName": "ccregvfy",
  390.             "PAltName": "ccregvfy.exe",
  391.             "Name": "Common Client Registry Integrity Verifier.",
  392.             "Description": "Service that checks the integrity of the Windows registry entries for Norton AntiVirus 2003/4 and Norton Internet Security 2003/4 in case they may have been modified by a hacker or an unknown virus. Once complete, this task terminates.",
  393.             "Company": "Symantec Corporation",
  394.             "SysProcess": "No",
  395.             "SecurityRisk": "No",
  396.             "Errors": "N/A",
  397.             "Status": 0
  398.         },
  399.         {
  400.             "PName": "cdac11ba",
  401.             "PAltName": "cdac11ba.exe",
  402.             "Name": "cdac11ba",
  403.             "Description": "Associated with MacroVision SafeCast copy protection software that allows other software manufacturers to protect their products from illegal copying.",
  404.             "Company": "MacroVision",
  405.             "SysProcess": "No",
  406.             "SecurityRisk": "No",
  407.             "Errors": "N/A",
  408.             "Status": 0
  409.         },
  410.         {
  411.             "PName": "cdplayer",
  412.             "PAltName": "cdplayer.exe",
  413.             "Name": "CD Player",
  414.             "Description": "Microsoft Windows audio CD player, which comes with the Windows operating system.",
  415.             "Company": "Microsoft Corp.",
  416.             "SysProcess": "No",
  417.             "SecurityRisk": "No",
  418.             "Errors": "N/A",
  419.             "Status": 0
  420.         },
  421.         {
  422.             "PName": "cfd",
  423.             "PAltName": "cfd.exe",
  424.             "Name": "Application Client Foundation",
  425.             "Description": "Newer name for BroadJump Foundation Client (BJCFD) from BroadJump.com, now Motive. The software collects information on your Internet activity and sends it to your ISP so that your ISP can serve you advertisements related to the type of sites you visit.",
  426.             "Company": "Motive Communications",
  427.             "SysProcess": "No",
  428.             "SecurityRisk": "Yes",
  429.             "Errors": "N/A",
  430.             "Status": 0
  431.         },
  432.         {
  433.             "PName": "cidaemon",
  434.             "PAltName": "cidaemon.exe",
  435.             "Name": "Microsoft Indexing Service",
  436.             "Description": "Indexing Service that runs in the background and catalogs files so that you can search for files containing a specific text string.",
  437.             "Company": "Microsoft Corp.",
  438.             "SysProcess": "Yes",
  439.             "SecurityRisk": "No",
  440.             "Errors": "N/A",
  441.             "Status": 0
  442.         },
  443.         {
  444.             "PName": "cisvc",
  445.             "PAltName": "cisvc.exe",
  446.             "Name": "Microsoft Index Service Helper",
  447.             "Description": "Microsoft Index Service Helper, a service that monitors the memory usage of Microsoft Indexing Service (cidaemon.exe) and automatically re-starts cidaemon.exe if it uses more than 40 MB of memory.",
  448.             "Company": "Microsoft Corp.",
  449.             "SysProcess": "Yes",
  450.             "SecurityRisk": "No",
  451.             "Errors": "N/A",
  452.             "Status": 0
  453.         },
  454.         {
  455.             "PName": "clisvcl",
  456.             "PAltName": "clisvcl.exe",
  457.             "Name": "SMS Client Service",
  458.             "Description": "SMS Client Service (Clisvcl.exe) that starts the Microsoft Systems Management Server Software Inventory process. Microsoft Systems Management Server Software Inventory provides a comprehensive scan of the software installed on the computer.",
  459.             "Company": "Microsoft Corp.",
  460.             "SysProcess": "Yes",
  461.             "SecurityRisk": "No",
  462.             "Errors": "N/A",
  463.             "Status": 0
  464.         },
  465.         {
  466.             "PName": "cmd",
  467.             "PAltName": "cmd.exe",
  468.             "Name": "Windows Command Prompt",
  469.             "Description": "Microsoft Windows command prompt. Cmd.exe is a 32-bit command prompt used in Windows NT, 2000, and XP.",
  470.             "Company": "Microsoft Corp.",
  471.             "SysProcess": "Yes",
  472.             "SecurityRisk": "No",
  473.             "Errors": "N/A",
  474.             "Status": 0
  475.         },
  476.         {
  477.             "PName": "cmd32",
  478.             "PAltName": "cmd32.exe",
  479.             "Name": "CMD",
  480.             "Description": "Added to the system as a result of the P2P.TANKED virus",
  481.             "Company": "N/A",
  482.             "SysProcess": "No",
  483.             "SecurityRisk": "Yes",
  484.             "Errors": "N/A",
  485.             "Status": 0
  486.         },
  487.         {
  488.             "PName": "cmesys",
  489.             "PAltName": "cmesys.exe",
  490.             "Name": "Gator GAIN Adware",
  491.             "Description": "Gator GAIN, adware that is installed by certain free software and is advertising spyware that runs in the background and displays advertisements.",
  492.             "Company": "ThiefWare.com",
  493.             "SysProcess": "No",
  494.             "SecurityRisk": "Yes",
  495.             "Errors": "N/A",
  496.             "Status": 0
  497.         },
  498.         {
  499.             "PName": "cmmpu",
  500.             "PAltName": "cmmpu.exe",
  501.             "Name": "cmmpu",
  502.             "Description": "Background task that works as a MIDI emulator for the integrated sound chip by C-Media based on the CMI-8330 chip set found in cheap motherboards.",
  503.             "Company": "C-Media Electronics Inc",
  504.             "SysProcess": "No",
  505.             "SecurityRisk": "No",
  506.             "Errors": "N/A",
  507.             "Status": 0
  508.         },
  509.         {
  510.             "PName": "cpd",
  511.             "PAltName": "cpd.exe",
  512.             "Name": "CPD",
  513.             "Description": "Background task from McAfee Personal Firewall. The application implements the firewall security features. In older versions, the task was named CPDCLNT.exe.",
  514.             "Company": "Network Associates, Inc.",
  515.             "SysProcess": "No",
  516.             "SecurityRisk": "No",
  517.             "Errors": "N/A",
  518.             "Status": 0
  519.         },
  520.         {
  521.             "PName": "csrss",
  522.             "PAltName": "csrss.exe",
  523.             "Name": "Client/Server Runtime Server Subsystem",
  524.             "Description": "Windows client server run-time subsystem handles Windows and graphics functions for all subsystems.",
  525.             "Company": "Microsoft Corp",
  526.             "SysProcess": "Yes",
  527.             "SecurityRisk": "No",
  528.             "Errors": "N/A",
  529.             "Status": 0
  530.         },
  531.         {
  532.             "PName": "ctfmon",
  533.             "PAltName": "ctfmon.exe",
  534.             "Name": "Alternative User Input Services",
  535.             "Description": "A service that handles the Alternative User Input Text Processor (TIP) and the Microsoft Office Language Bar. It provides text input support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.",
  536.             "Company": "Microsoft Corp.",
  537.             "SysProcess": "Yes",
  538.             "SecurityRisk": "No",
  539.             "Errors": "N/A",
  540.             "Status": 0
  541.         },
  542.         {
  543.             "PName": "cthelper",
  544.             "PAltName": "cthelper.exe",
  545.             "Name": "Plug-in manager",
  546.             "Description": "Background task that works as a plug-in manager for Creative drivers. It helps the third party manufacturers to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative sound drivers and utilities.",
  547.             "Company": "Creative Technology Ltd",
  548.             "SysProcess": "No",
  549.             "SecurityRisk": "No",
  550.             "Errors": "N/A",
  551.             "Status": 0
  552.         },
  553.         {
  554.             "PName": "ctsvccda",
  555.             "PAltName": "ctsvccda.exe",
  556.             "Name": "Creative CD-ROM Services",
  557.             "Description": "Background task for CD-ROM access that gets installed by the Windows 95, 98, or ME drivers of some Creative SoundBlaster soundcards. It also sometimes gets installed on Windows 2000 by non-driver related Creative software suites, such as Creative Jukebox.",
  558.             "Company": "Creative Technology Ltd",
  559.             "SysProcess": "No",
  560.             "SecurityRisk": "No",
  561.             "Errors": "N/A",
  562.             "Status": 0
  563.         },
  564.         {
  565.             "PName": "cvpnd",
  566.             "PAltName": "cvpnd.exe",
  567.             "Name": "Cisco Systems, Inc. VPN Service",
  568.             "Description": "Background application used by Cisco VPN client for making a connection to a remote IPSec server.",
  569.             "Company": "Cisco Systems, Inc.",
  570.             "SysProcess": "No",
  571.             "SecurityRisk": "No",
  572.             "Errors": "N/A",
  573.             "Status": 0
  574.         },
  575.         {
  576.             "PName": "dadapp",
  577.             "PAltName": "dadapp.exe",
  578.             "Name": "Dell AccessDirect Applet",
  579.             "Description": "Background task found on Dell laptop computers. The task implements the programmable buttons that you can set up for your laptop computer.",
  580.             "Company": "Dell",
  581.             "SysProcess": "No",
  582.             "SecurityRisk": "No",
  583.             "Errors": "N/A",
  584.             "Status": 0
  585.         },
  586.         {
  587.             "PName": "damon",
  588.             "PAltName": "damon.exe",
  589.             "Name": "Damon",
  590.             "Description": "Background task that is associated with the Dell support software suite.",
  591.             "Company": "Dell",
  592.             "SysProcess": "No",
  593.             "SecurityRisk": "No",
  594.             "Errors": "N/A",
  595.             "Status": 0
  596.         },
  597.         {
  598.             "PName": "datemanager",
  599.             "PAltName": "datemanager.exe",
  600.             "Name": "Date Manager",
  601.             "Description": "Date Manager is a well-designed system tray calendar with a reminder facility. It also installs some adware along with it. Adware software communicates back to an advertising server and displays advertisements as you are browsing the Internet.",
  602.             "Company": "The Gator Corporation",
  603.             "SysProcess": "No",
  604.             "SecurityRisk": "Yes",
  605.             "Errors": "N/A",
  606.             "Status": 0
  607.         },
  608.         {
  609.             "PName": "dcomx",
  610.             "PAltName": "dcomx.exe",
  611.             "Name": "Dcomx",
  612.             "Description": "Added to the system as a result of the CIREBOT virus",
  613.             "Company": "N/A",
  614.             "SysProcess": "No",
  615.             "SecurityRisk": "Yes",
  616.             "Errors": "N/A",
  617.             "Status": 0
  618.         },
  619.         {
  620.             "PName": "ddcman",
  621.             "PAltName": "ddcman.exe",
  622.             "Name": "Digital Distribution Channel Manager",
  623.             "Description": "Application that is associated with Wild Tangent GameChannel software.",
  624.             "Company": "Wild Tangent",
  625.             "SysProcess": "No",
  626.             "SecurityRisk": "No",
  627.             "Errors": "N/A",
  628.             "Status": 0
  629.         },
  630.         {
  631.             "PName": "ddhelp",
  632.             "PAltName": "ddhelp.exe",
  633.             "Name": "DirectDraw Helper",
  634.             "Description": "DirectDraw Helper, a part of DirectX and is used for graphics related services.",
  635.             "Company": "Microsoft Corp.",
  636.             "SysProcess": "Yes",
  637.             "SecurityRisk": "No",
  638.             "Errors": "N/A",
  639.             "Status": 0
  640.         },
  641.         {
  642.             "PName": "acrord32",
  643.             "PAltName": "acrord32.exe",
  644.             "Name": "Acrobat Reader",
  645.             "Description": "Acrobat Reader, which is used to view PDF documents.",
  646.             "Company": "Adobe Systems",
  647.             "SysProcess": "No",
  648.             "SecurityRisk": "No",
  649.             "Errors": "N/A",
  650.             "Status": 0
  651.         },
  652.         {
  653.             "PName": "defwatch",
  654.             "PAltName": "defwatch.exe",
  655.             "Name": "NAV CE Server/Client - DefWatch",
  656.             "Description": "Background application that detects out-of-date virus definitions for Norton Anti-Virus software and runs the Defwatch Wizard. Required only if you don't update the virus definitions manually on a regular basis.",
  657.             "Company": "Symantec Corporation",
  658.             "SysProcess": "No",
  659.             "SecurityRisk": "No",
  660.             "Errors": "N/A",
  661.             "Status": 0
  662.         },
  663.         {
  664.             "PName": "devldr32",
  665.             "PAltName": "devldr32.exe",
  666.             "Name": "Creative Ring3 NT Interface",
  667.             "Description": "Process that runs solely on Windows 2000 and XP. It seems to be crucial to the audio input, the Creative Mixer, the PlayCenter, and the AudioHQ application.",
  668.             "Company": "Creative Technology Ltd",
  669.             "SysProcess": "No",
  670.             "SecurityRisk": "No",
  671.             "Errors": "N/A",
  672.             "Status": 0
  673.         },
  674.         {
  675.             "PName": "dfssvc",
  676.             "PAltName": "dfssvc.exe",
  677.             "Name": "Distributed File System (DFS)",
  678.             "Description": "Background task that implements a Distributed File System (DFS) that consists of logical volumes distributed across a local or wide area network.",
  679.             "Company": "Microsoft Corp.",
  680.             "SysProcess": "Yes",
  681.             "SecurityRisk": "No",
  682.             "Errors": "N/A",
  683.             "Status": 0
  684.         },
  685.         {
  686.             "PName": "directcd",
  687.             "PAltName": "directcd.exe",
  688.             "Name": "DirectCD Packet Writing Software",
  689.             "Description": "Background task included with Easy CD Creator that allows you to use CDs and DVDs formatted with DirectCD.",
  690.             "Company": "Adaptec",
  691.             "SysProcess": "No",
  692.             "SecurityRisk": "No",
  693.             "Errors": "N/A",
  694.             "Status": 0
  695.         },
  696.         {
  697.             "PName": "dit",
  698.             "PAltName": "dit.exe",
  699.             "Name": "Drive Icon and Label Utility",
  700.             "Description": "Essential background task that is required to assign drive icons and names to flash memory cards.",
  701.             "Company": "N/A",
  702.             "SysProcess": "No",
  703.             "SecurityRisk": "No",
  704.             "Errors": "N/A",
  705.             "Status": 0
  706.         },
  707.         {
  708.             "PName": "divx",
  709.             "PAltName": "divx.exe",
  710.             "Name": "Divx",
  711.             "Description": "Added to the system as a result of the MASTAK virus",
  712.             "Company": "N/A",
  713.             "SysProcess": "No",
  714.             "SecurityRisk": "Yes",
  715.             "Errors": "N/A",
  716.             "Status": 0
  717.         },
  718.         {
  719.             "PName": "dlg",
  720.             "PAltName": "dlg.exe",
  721.             "Name": "Digital Line Detect",
  722.             "Description": "Application that comes with Connexant V.92 and Broadcom modems and is used to check whether you are connected with a digital telephone line or not. If you are connected, the application displays the information graphically.",
  723.             "Company": "Dell",
  724.             "SysProcess": "No",
  725.             "SecurityRisk": "No",
  726.             "Errors": "N/A",
  727.             "Status": 0
  728.         },
  729.         {
  730.             "PName": "dllhost",
  731.             "PAltName": "dllhost.exe",
  732.             "Name": "DCOM DLL Host Process",
  733.             "Description": "DCOM DLL host process that supports DLL-based COM objects and is used by many Windows programs.",
  734.             "Company": "Microsoft Corp.",
  735.             "SysProcess": "Yes",
  736.             "SecurityRisk": "No",
  737.             "Errors": "N/A",
  738.             "Status": 0
  739.         },
  740.         {
  741.             "PName": "dllreg",
  742.             "PAltName": "dllreg.exe",
  743.             "Name": "Dumaru.c Virus",
  744.             "Description": "Added to the system as a result of Dumaru.c virus that is a new variant of the Dumaru Virus. The worm trawls the hard disk, looking for files with extensions .htm, .wab, .html, .dbx, .tbb, or .abd for email addresses to send itself to. These email addresses are written to the winload.log file.",
  745.             "Company": "N/A",
  746.             "SysProcess": "No",
  747.             "SecurityRisk": "Yes",
  748.             "Errors": "N/A",
  749.             "Status": 0
  750.         },
  751.         {
  752.             "PName": "dns",
  753.             "PAltName": "dns.exe",
  754.             "Name": "DNS Server",
  755.             "Description": "Manages Domain Name System Server (DNS).",
  756.             "Company": "Microsoft Corp.",
  757.             "SysProcess": "Yes",
  758.             "SecurityRisk": "No",
  759.             "Errors": "N/A",
  760.             "Status": 0
  761.         },
  762.         {
  763.             "PName": "dpps2",
  764.             "PAltName": "dpps2.exe",
  765.             "Name": "Don├åt Panic!",
  766.             "Description": "Application that is used to control popups. It blocks those annoying popup advertisements from displaying while you are browsing the Internet.",
  767.             "Company": "Panicware",
  768.             "SysProcess": "No",
  769.             "SecurityRisk": "No",
  770.             "Errors": "N/A",
  771.             "Status": 0
  772.         },
  773.         {
  774.             "PName": "dsentry",
  775.             "PAltName": "dsentry.exe",
  776.             "Name": "Dsentry",
  777.             "Description": "Application provided by Dell that is anti-spyware. The application blocks other applications that send vital information to other computers.",
  778.             "Company": "Dell",
  779.             "SysProcess": "No",
  780.             "SecurityRisk": "No",
  781.             "Errors": "N/A",
  782.             "Status": 0
  783.         },
  784.         {
  785.             "PName": "dssagent",
  786.             "PAltName": "dssagent.exe",
  787.             "Name": "DSSAgent Spyware",
  788.             "Description": "Application that works in the background to send system information to the originators of the program by encrypted emails.",
  789.             "Company": "Broderbund",
  790.             "SysProcess": "No",
  791.             "SecurityRisk": "Yes",
  792.             "Errors": "N/A",
  793.             "Status": 0
  794.         },
  795.         {
  796.             "PName": "dumprep",
  797.             "PAltName": "dumprep.exe",
  798.             "Name": "Dump Reporting Tool",
  799.             "Description": "Microsoft provided Windows Error Dump Reporting Tool that creates memory dump reports that you can send back to Microsoft for further analysis. The tool is found on Windows XP/2003.",
  800.             "Company": "Microsoft Corp.",
  801.             "SysProcess": "Yes",
  802.             "SecurityRisk": "No",
  803.             "Errors": "N/A",
  804.             "Status": 0
  805.         },
  806.         {
  807.             "PName": "dw",
  808.             "PAltName": "dw.exe",
  809.             "Name": "DownloadWare",
  810.             "Description": "Application that is used to accelerate the download process using intelligent multi-part downloading technology. It can create, add, and modify multiple connections for each download based on your current speed and available bandwidth.",
  811.             "Company": "DownloadWare.net",
  812.             "SysProcess": "No",
  813.             "SecurityRisk": "No",
  814.             "Errors": "N/A",
  815.             "Status": 0
  816.         },
  817.         {
  818.             "PName": "dxdllreg",
  819.             "PAltName": "dxdllreg.exe",
  820.             "Name": "DXDllRegExe",
  821.             "Description": "DirectX registration routine.",
  822.             "Company": "Microsoft Corp.",
  823.             "SysProcess": "No",
  824.             "SecurityRisk": "No",
  825.             "Errors": "N/A",
  826.             "Status": 0
  827.         },
  828.         {
  829.             "PName": "emsw",
  830.             "PAltName": "emsw.exe",
  831.             "Name": "emsw",
  832.             "Description": "Believed to be spyware by Alset and is also known as \"HelpExpress\". The spyware installs itself if you have previously had Attune by Aveo installed.",
  833.             "Company": "Alset, Inc.",
  834.             "SysProcess": "No",
  835.             "SecurityRisk": "Yes",
  836.             "Errors": "N/A",
  837.             "Status": 0
  838.         },
  839.         {
  840.             "PName": "em_exec",
  841.             "PAltName": "em_exec.exe",
  842.             "Name": "Logitech Mouse Settings",
  843.             "Description": "Logitech MouseWare tray icon from which you can access the Control Panel Mouse properties and the MouseWare help.",
  844.             "Company": "Logitech",
  845.             "SysProcess": "No",
  846.             "SecurityRisk": "No",
  847.             "Errors": "N/A",
  848.             "Status": 0
  849.         },
  850.         {
  851.             "PName": "evntsvc",
  852.             "PAltName": "evntsvc.exe",
  853.             "Name": "EVNTSVC",
  854.             "Description": "Application which works as a Scheduler for Real Networks .It is installed with RealOne Player.",
  855.             "Company": "Real Networks",
  856.             "SysProcess": "No",
  857.             "SecurityRisk": "No",
  858.             "Errors": "N/A",
  859.             "Status": 0
  860.         },
  861.         {
  862.             "PName": "explore",
  863.             "PAltName": "explore.exe",
  864.             "Name": "Explore.exe",
  865.             "Description": "Added to the system as a result of the GRAYBIRD.G virus.",
  866.             "Company": "N/A",
  867.             "SysProcess": "No",
  868.             "SecurityRisk": "Yes",
  869.             "Errors": "N/A",
  870.             "Status": 0
  871.         },
  872.         {
  873.             "PName": "explorer",
  874.             "PAltName": "explorer.exe",
  875.             "Name": "Program Manager",
  876.             "Description": "Windows Program Manager or Windows Explorer, which handles the Windows Graphical Shell including the Start menu, taskbar, desktop, and File Manager.",
  877.             "Company": "Microsoft Corp.",
  878.             "SysProcess": "Yes",
  879.             "SecurityRisk": "No",
  880.             "Errors": "N/A",
  881.             "Status": 0
  882.         },
  883.         {
  884.             "PName": "ezsp_px",
  885.             "PAltName": "ezsp_px.exe",
  886.             "Name": "ezShieldProtector for Px",
  887.             "Description": "Application that is installed by the Easy Systems Drag├ån Drop CD & DVD writing software found on most Japanese computers.",
  888.             "Company": "Easy Systems Japan Ltd.",
  889.             "SysProcess": "No",
  890.             "SecurityRisk": "No",
  891.             "Errors": "N/A",
  892.             "Status": 0
  893.         },
  894.         {
  895.             "PName": "findfast",
  896.             "PAltName": "findfast.exe",
  897.             "Name": "Microsoft Office Indexing",
  898.             "Description": "Microsoft Office Indexing process used by Microsoft Office applications to index Office documents to speed up search operations.",
  899.             "Company": "Microsoft Corp.",
  900.             "SysProcess": "No",
  901.             "SecurityRisk": "No",
  902.             "Errors": "N/A",
  903.             "Status": 0
  904.         },
  905.         {
  906.             "PName": "firedaemon",
  907.             "PAltName": "firedaemon.exe",
  908.             "Name": "Firedaemon",
  909.             "Description": "Application that works in the background and allows a user to install and run any other suitable application as a Windows NT or 2000 service.",
  910.             "Company": "Sublime Solutions",
  911.             "SysProcess": "No",
  912.             "SecurityRisk": "No",
  913.             "Errors": "N/A",
  914.             "Status": 0
  915.         },
  916.         {
  917.             "PName": "fsg_4104",
  918.             "PAltName": "fsg_4104.exe",
  919.             "Name": "Trickler",
  920.             "Description": "Application that is associated with the file sharing software iMesh. The application has many versions.",
  921.             "Company": "The Gator Corporation",
  922.             "SysProcess": "No",
  923.             "SecurityRisk": "Yes",
  924.             "Errors": "N/A",
  925.             "Status": 0
  926.         },
  927.         {
  928.             "PName": "gamechannel",
  929.             "PAltName": "gamechannel.exe",
  930.             "Name": "GAMECHANNEL",
  931.             "Description": "Application that notifies a user of new or updated Wild Tangent games. If the application finds updated versions of installed games, then the application automatically downloads the updated version in the background.",
  932.             "Company": "Wild Tangent",
  933.             "SysProcess": "No",
  934.             "SecurityRisk": "No",
  935.             "Errors": "N/A",
  936.             "Status": 0
  937.         },
  938.         {
  939.             "PName": "gator",
  940.             "PAltName": "gator.exe",
  941.             "Name": "Gator Spyware",
  942.             "Description": "Spyware application associated with the Gator advertising program.",
  943.             "Company": "The Gator Corporation",
  944.             "SysProcess": "No",
  945.             "SecurityRisk": "Yes",
  946.             "Errors": "N/A",
  947.             "Status": 0
  948.         },
  949.         {
  950.             "PName": "gmt",
  951.             "PAltName": "gmt.exe",
  952.             "Name": "Gator Spyware Component",
  953.             "Description": "Background program that is part of the Gator GAIN adware software.",
  954.             "Company": "The Gator Corporation",
  955.             "SysProcess": "No",
  956.             "SecurityRisk": "Yes",
  957.             "Errors": "N/A",
  958.             "Status": 0
  959.         },
  960.         {
  961.             "PName": "grpconv",
  962.             "PAltName": "grpconv.exe",
  963.             "Name": "Windows Program Group Converter",
  964.             "Description": "Application that is used to convert the Windows 3.1 groups to folders while upgrading from Windows 3.1.",
  965.             "Company": "Microsoft Corp.",
  966.             "SysProcess": "Yes",
  967.             "SecurityRisk": "No",
  968.             "Errors": "N/A",
  969.             "Status": 0
  970.         },
  971.         {
  972.             "PName": "hbinst",
  973.             "PAltName": "hbinst.exe",
  974.             "Name": "HBINST",
  975.             "Description": "Installer for a program called \"HotBar\". Hotbar enhances the surfing experience offering a variety of innovative and fresh skins for the browser while providing users worldwide access to various services. These programs gather information on your browsing habits and transmit it back to HotBar.",
  976.             "Company": "Hotbar.com Inc",
  977.             "SysProcess": "No",
  978.             "SecurityRisk": "Yes",
  979.             "Errors": "N/A",
  980.             "Status": 0
  981.         },
  982.         {
  983.             "PName": "hbsrv",
  984.             "PAltName": "hbsrv.exe",
  985.             "Name": "Hbsrv",
  986.             "Description": "Part of Hotbar.com HotBar. HotBar is software that supposedly enhances and personalizes your Internet and email applications.",
  987.             "Company": "Hotbar.com Inc",
  988.             "SysProcess": "No",
  989.             "SecurityRisk": "Yes",
  990.             "Errors": "N/A",
  991.             "Status": 0
  992.         },
  993.         {
  994.             "PName": "helpctr",
  995.             "PAltName": "helpctr.exe",
  996.             "Name": "Microsoft Help and Support Center",
  997.             "Description": "Part of the Windows XP Help system. This application is started when you click Start > Help and Support from the Windows taskbar.",
  998.             "Company": "Microsoft Corp.",
  999.             "SysProcess": "Yes",
  1000.             "SecurityRisk": "No",
  1001.             "Errors": "N/A",
  1002.             "Status": 0
  1003.         },
  1004.         {
  1005.             "PName": "hh",
  1006.             "PAltName": "hh.exe",
  1007.             "Name": "Windows Help",
  1008.             "Description": "Windows Help program, which is used to open Help files and documentation included with many Windows programs.",
  1009.             "Company": "Microsoft Corp.",
  1010.             "SysProcess": "No",
  1011.             "SecurityRisk": "No",
  1012.             "Errors": "N/A",
  1013.             "Status": 0
  1014.         },
  1015.         {
  1016.             "PName": "hidserv",
  1017.             "PAltName": "hidserv.exe",
  1018.             "Name": "Microsoft Human Interface Device Audio Service",
  1019.             "Description": "Background service that provides support for USB audio devices and USB multimedia keyboards",
  1020.             "Company": "Microsoft Corp.",
  1021.             "SysProcess": "Yes",
  1022.             "SecurityRisk": "No",
  1023.             "Errors": "N/A",
  1024.             "Status": 0
  1025.         },
  1026.         {
  1027.             "PName": "hkcmd",
  1028.             "PAltName": "hkcmd.exe",
  1029.             "Name": "Hkcmd",
  1030.             "Description": "Application that implements the Intel Hotkey command.",
  1031.             "Company": "Intel Corporation",
  1032.             "SysProcess": "No",
  1033.             "SecurityRisk": "No",
  1034.             "Errors": "N/A",
  1035.             "Status": 0
  1036.         },
  1037.         {
  1038.             "PName": "htpatch",
  1039.             "PAltName": "htpatch.exe",
  1040.             "Name": "Htpatch",
  1041.             "Description": "Application that is a component for SiS AGP patch, which is useful only when the processor supports HyperThreading.",
  1042.             "Company": "Silicon Integrated Systems Corporation.",
  1043.             "SysProcess": "No",
  1044.             "SecurityRisk": "No",
  1045.             "Errors": "N/A",
  1046.             "Status": 0
  1047.         },
  1048.         {
  1049.             "PName": "hxdl",
  1050.             "PAltName": "hxdl.exe",
  1051.             "Name": "Hxdl",
  1052.             "Description": "Adware that helps a user in purchasing items. For example, the application tells a user when to buy printer cartridges and where to buy them.",
  1053.             "Company": "Alset Inc.",
  1054.             "SysProcess": "No",
  1055.             "SecurityRisk": "Yes",
  1056.             "Errors": "N/A",
  1057.             "Status": 0
  1058.         },
  1059.         {
  1060.             "PName": "hxiul",
  1061.             "PAltName": "hxiul.exe",
  1062.             "Name": "Hxiul",
  1063.             "Description": "Another adware application from Alset Inc. It has same functionality as others. For example, the application tells a user when to buy printer cartridges and where to buy them.",
  1064.             "Company": "Alset Inc.",
  1065.             "SysProcess": "No",
  1066.             "SecurityRisk": "Yes",
  1067.             "Errors": "N/A",
  1068.             "Status": 0
  1069.         },
  1070.         {
  1071.             "PName": "iamapp",
  1072.             "PAltName": "iamapp.exe",
  1073.             "Name": "iamapp",
  1074.             "Description": "Essential component of the Norton Internet Security and Norton Personal Firewall security products.",
  1075.             "Company": "Symantec Corporation",
  1076.             "SysProcess": "No",
  1077.             "SecurityRisk": "No",
  1078.             "Errors": "N/A",
  1079.             "Status": 0
  1080.         },
  1081.         {
  1082.             "PName": "iedll",
  1083.             "PAltName": "iedll.exe",
  1084.             "Name": "iedll",
  1085.             "Description": "Application that hijacks the browser home page and redirects all requests to coolwwwsearch.com.",
  1086.             "Company": "N/A",
  1087.             "SysProcess": "No",
  1088.             "SecurityRisk": "Yes",
  1089.             "Errors": "N/A",
  1090.             "Status": 0
  1091.         },
  1092.         {
  1093.             "PName": "iedriver",
  1094.             "PAltName": "iedriver.exe",
  1095.             "Name": "iedriver",
  1096.             "Description": "Application that is installed by peer-to-peer file sharing software.",
  1097.             "Company": "Urlblaze.com",
  1098.             "SysProcess": "No",
  1099.             "SecurityRisk": "Yes",
  1100.             "Errors": "N/A",
  1101.             "Status": 0
  1102.         },
  1103.         {
  1104.             "PName": "iexplore",
  1105.             "PAltName": "iexplore.exe",
  1106.             "Name": "Internet Explorer",
  1107.             "Description": "Microsoft Internet Explorer web browse used to browse the World Wide Web through HTTP.",
  1108.             "Company": "Microsoft Corp.",
  1109.             "SysProcess": "Yes",
  1110.             "SecurityRisk": "No",
  1111.             "Errors": "N/A",
  1112.             "Status": 0
  1113.         },
  1114.         {
  1115.             "PName": "iexplorer",
  1116.             "PAltName": "iexplorer.exe",
  1117.             "Name": "iexplorer",
  1118.             "Description": "Application that is a variant of the RapidBlaster parasite that downloads advertising from the Internet and displays it periodically.",
  1119.             "Company": "N/A",
  1120.             "SysProcess": "No",
  1121.             "SecurityRisk": "Yes",
  1122.             "Errors": "N/A",
  1123.             "Status": 0
  1124.         },
  1125.         {
  1126.             "PName": "igfxtray",
  1127.             "PAltName": "igfxtray.exe",
  1128.             "Name": "igfxtray",
  1129.             "Description": "Intel graphics system tray icon that gets installed with the drivers for onboard VGA cards based on the Intel 81x graphics chip set. Double-clicking the icon allows you to quickly change the display resolution, save your current display scheme, or configure your onboard graphics card. You can also configure keyboard hotkeys; shortcuts are handled by another background task called HKCMD. You can access the same features through the \"Intel Graphics Technology\" icon in the Control Panel.",
  1130.             "Company": "Intel Corporation.",
  1131.             "SysProcess": "No",
  1132.             "SecurityRisk": "No",
  1133.             "Errors": "N/A",
  1134.             "Status": 0
  1135.         },
  1136.         {
  1137.             "PName": "inetinfo",
  1138.             "PAltName": "inetinfo.exe",
  1139.             "Name": "IIS Admin Service Helper",
  1140.             "Description": "InetInfo, which is part of Microsoft Internet Information Services (IIS) and is used for debugging. The service is seen primarily on Windows NT 4 or 2000 Server where InetInfo provides Internet proxy and web server services.",
  1141.             "Company": "Microsoft Corp.",
  1142.             "SysProcess": "Yes",
  1143.             "SecurityRisk": "No",
  1144.             "Errors": "N/A",
  1145.             "Status": 0
  1146.         },
  1147.         {
  1148.             "PName": "infus",
  1149.             "PAltName": "infus.exe",
  1150.             "Name": "Infus Dialer",
  1151.             "Description": "Adult content dialer that is specific to porn related material.",
  1152.             "Company": "N/A",
  1153.             "SysProcess": "No",
  1154.             "SecurityRisk": "Yes",
  1155.             "Errors": "N/A",
  1156.             "Status": 0
  1157.         },
  1158.         {
  1159.             "PName": "infwin",
  1160.             "PAltName": "infwin.exe",
  1161.             "Name": "Infwin",
  1162.             "Description": "Variant of Msview parasite that monitors web pages requested and data entered into forms. The parasite sends this information to its home server and opens pop-up advertisement windows.",
  1163.             "Company": "N/A",
  1164.             "SysProcess": "No",
  1165.             "SecurityRisk": "Yes",
  1166.             "Errors": "N/A",
  1167.             "Status": 0
  1168.         },
  1169.         {
  1170.             "PName": "intdel",
  1171.             "PAltName": "intdel.exe",
  1172.             "Name": "Inet Delivery",
  1173.             "Description": "Adware application that provides offers to users through popups.",
  1174.             "Company": "Inet-Traffic Inc.",
  1175.             "SysProcess": "No",
  1176.             "SecurityRisk": "Yes",
  1177.             "Errors": "N/A",
  1178.             "Status": 0
  1179.         },
  1180.         {
  1181.             "PName": "internat",
  1182.             "PAltName": "internat.exe",
  1183.             "Name": "Input Locales",
  1184.             "Description": "Application that provides multi-language support on keyboards for Microsoft Windows programs.",
  1185.             "Company": "Microsoft Corp.",
  1186.             "SysProcess": "Yes",
  1187.             "SecurityRisk": "No",
  1188.             "Errors": "N/A",
  1189.             "Status": 0
  1190.         },
  1191.         {
  1192.             "PName": "ireike",
  1193.             "PAltName": "ireike.exe",
  1194.             "Name": "ireike",
  1195.             "Description": "Microsoft virtual private network client that provide remotes access connections across public networks, such as the Internet.",
  1196.             "Company": "Microsoft Corp.",
  1197.             "SysProcess": "Yes",
  1198.             "SecurityRisk": "No",
  1199.             "Errors": "N/A",
  1200.             "Status": 0
  1201.         },
  1202.         {
  1203.             "PName": "isass",
  1204.             "PAltName": "isass.exe",
  1205.             "Name": "isass",
  1206.             "Description": "Virus added to the system as a result of variant of the OPTIX PRO TROJAN that opens TCP port 3410 and allows a hacker to control an infected computer.",
  1207.             "Company": "N/A",
  1208.             "SysProcess": "No",
  1209.             "SecurityRisk": "Yes",
  1210.             "Errors": "N/A",
  1211.             "Status": 0
  1212.         },
  1213.         {
  1214.             "PName": "ismserv",
  1215.             "PAltName": "ismserv.exe",
  1216.             "Name": "Intersite Messaging",
  1217.             "Description": "Application that allows a user to send and receive messages between Windows Advanced Server sites.",
  1218.             "Company": "Microsoft Corp.",
  1219.             "SysProcess": "Yes",
  1220.             "SecurityRisk": "No",
  1221.             "Errors": "N/A",
  1222.             "Status": 0
  1223.         },
  1224.         {
  1225.             "PName": "istsvc",
  1226.             "PAltName": "istsvc.exe",
  1227.             "Name": "IST Service",
  1228.             "Description": "Application that is an Internet Explorer toolbar that helps a user to find adult material on the net. The application also displays advertisements.",
  1229.             "Company": "Integrated Search Technologies",
  1230.             "SysProcess": "No",
  1231.             "SecurityRisk": "Yes",
  1232.             "Errors": "N/A",
  1233.             "Status": 0
  1234.         },
  1235.         {
  1236.             "PName": "javaw",
  1237.             "PAltName": "javaw.exe",
  1238.             "Name": "javaw.exe",
  1239.             "Description": "Application that is associated with Sun Java for Windows.",
  1240.             "Company": "Sun Corporation",
  1241.             "SysProcess": "No",
  1242.             "SecurityRisk": "No",
  1243.             "Errors": "N/A",
  1244.             "Status": 0
  1245.         },
  1246.         {
  1247.             "PName": "jdbgmrg",
  1248.             "PAltName": "jdbgmrg.exe",
  1249.             "Name": "TROJ_DASMIN.B VIRUS!",
  1250.             "Description": "Added to the system as a result of the TROJ_DASMIN.B virus that creates auto-run registry entries that enable the automatic execution of its copy, JDBGMRG.EXE.",
  1251.             "Company": "N/A",
  1252.             "SysProcess": "No",
  1253.             "SecurityRisk": "Yes",
  1254.             "Errors": "N/A",
  1255.             "Status": 0
  1256.         },
  1257.         {
  1258.             "PName": "jusched",
  1259.             "PAltName": "jusched.exe",
  1260.             "Name": "Sun Java Update Scheduler",
  1261.             "Description": "Application that is an update scheduler. The application checks the Sun site to see if newer Java versions are available.",
  1262.             "Company": "Sun Corporation",
  1263.             "SysProcess": "No",
  1264.             "SecurityRisk": "No",
  1265.             "Errors": "N/A",
  1266.             "Status": 0
  1267.         },
  1268.         {
  1269.             "PName": "kazaa",
  1270.             "PAltName": "kazaa.exe",
  1271.             "Name": "Kazaa",
  1272.             "Description": "Application that is a file sharing program used by adware programs.",
  1273.             "Company": "Sharman Networks Ltd",
  1274.             "SysProcess": "No",
  1275.             "SecurityRisk": "No",
  1276.             "Errors": "N/A",
  1277.             "Status": 0
  1278.         },
  1279.         {
  1280.             "PName": "kazza",
  1281.             "PAltName": "kazza.exe",
  1282.             "Name": "Kazza.exe",
  1283.             "Description": "Indication of a possible infection of OPTIXPRO.12.C. Backdoor.OptixPro.12.c is a variant of the Backdoor.OptixPro.12 Trojan Horse and allows unauthorized remote access to an infected computer on port 3410.",
  1284.             "Company": "N/A",
  1285.             "SysProcess": "No",
  1286.             "SecurityRisk": "Yes",
  1287.             "Errors": "N/A",
  1288.             "Status": 0
  1289.         },
  1290.         {
  1291.             "PName": "kbd",
  1292.             "PAltName": "kbd.exe",
  1293.             "Name": "Kbd",
  1294.             "Description": "Multimedia keyboard manager for Logitech keyboards and is required if you use the multimedia keys.",
  1295.             "Company": "Logitech",
  1296.             "SysProcess": "No",
  1297.             "SecurityRisk": "No",
  1298.             "Errors": "N/A",
  1299.             "Status": 0
  1300.         },
  1301.         {
  1302.             "PName": "keenvalue",
  1303.             "PAltName": "keenvalue.exe",
  1304.             "Name": "Keenvalue",
  1305.             "Description": "Application that monitors the web pages a user visits and displays advertisements based on keyword searches from the user.",
  1306.             "Company": "EUNIVERSE INC",
  1307.             "SysProcess": "No",
  1308.             "SecurityRisk": "Yes",
  1309.             "Errors": "N/A",
  1310.             "Status": 0
  1311.         },
  1312.         {
  1313.             "PName": "kernel32",
  1314.             "PAltName": "kernel32.dll",
  1315.             "Name": "Windows Kernel Process",
  1316.             "Description": "Windows Kernel, which provides system services for managing threads, memory, and resources.",
  1317.             "Company": "Microsoft Corp.",
  1318.             "SysProcess": "Yes",
  1319.             "SecurityRisk": "No",
  1320.             "Errors": "N/A",
  1321.             "Status": 0
  1322.         },
  1323.         {
  1324.             "PName": "kernel32",
  1325.             "PAltName": "kernel32.exe",
  1326.             "Name": "kernel32",
  1327.             "Description": "Virus added to the system as a result of Floodnet virus that attempts to send a message to the alias\"All Users\" using Microsoft Outlook. If this address is not present in a local or global address book, or not an alias on the specified SMTP server, then the message is not sent.",
  1328.             "Company": "N/A",
  1329.             "SysProcess": "No",
  1330.             "SecurityRisk": "Yes",
  1331.             "Errors": "N/A",
  1332.             "Status": 0
  1333.         },
  1334.         {
  1335.             "PName": "launch32",
  1336.             "PAltName": "launch32.exe",
  1337.             "Name": "launch32",
  1338.             "Description": "Application that is a Microsoft Systems Management Server that provides application deployment, asset management, security patch management, Windows Management Services integration, and other facilities.",
  1339.             "Company": "Microsoft Corp.",
  1340.             "SysProcess": "Yes",
  1341.             "SecurityRisk": "No",
  1342.             "Errors": "N/A",
  1343.             "Status": 0
  1344.         },
  1345.         {
  1346.             "PName": "launcher",
  1347.             "PAltName": "launcher.exe",
  1348.             "Name": "Launcher",
  1349.             "Description": "Spyware application associated with DownloadWare.",
  1350.             "Company": "Intercort Systems (DownloadWare)",
  1351.             "SysProcess": "No",
  1352.             "SecurityRisk": "Yes",
  1353.             "Errors": "N/A",
  1354.             "Status": 0
  1355.         },
  1356.         {
  1357.             "PName": "lexbces",
  1358.             "PAltName": "lexbces.exe",
  1359.             "Name": "LexBce Service",
  1360.             "Description": "Application that is associated with Lexmark MarkVision software that is used to configure the internal network card that comes with a Lexmark printer.",
  1361.             "Company": "Lexmark International Inc",
  1362.             "SysProcess": "No",
  1363.             "SecurityRisk": "No",
  1364.             "Errors": "N/A",
  1365.             "Status": 0
  1366.         },
  1367.         {
  1368.             "PName": "lexpps",
  1369.             "PAltName": "lexpps.exe",
  1370.             "Name": "Lexpps",
  1371.             "Description": "Background application used for the Lexmark Printer Port Scanner. The application allows a user to share a printer over a Windows network. Without this application, users cannot share printers. The application is installed with other printer drivers.",
  1372.             "Company": "Lexmark International Inc",
  1373.             "SysProcess": "No",
  1374.             "SecurityRisk": "No",
  1375.             "Errors": "N/A",
  1376.             "Status": 0
  1377.         },
  1378.         {
  1379.             "PName": "lights",
  1380.             "PAltName": "lights.exe",
  1381.             "Name": "Lights",
  1382.             "Description": "System tray bar application that is used to show the modem status. The application contains two red/green activity lights that help users to get the modem status.",
  1383.             "Company": "Microsoft Corp.",
  1384.             "SysProcess": "Yes",
  1385.             "SecurityRisk": "No",
  1386.             "Errors": "N/A",
  1387.             "Status": 0
  1388.         },
  1389.         {
  1390.             "PName": "livenote",
  1391.             "PAltName": "livenote.exe",
  1392.             "Name": "Livenote",
  1393.             "Description": "Application that is used to update the Asus graphics card drivers.",
  1394.             "Company": "ASUSTeK Computer Inc.",
  1395.             "SysProcess": "No",
  1396.             "SecurityRisk": "No",
  1397.             "Errors": "N/A",
  1398.             "Status": 0
  1399.         },
  1400.         {
  1401.             "PName": "loader",
  1402.             "PAltName": "loader.exe",
  1403.             "Name": "Loader",
  1404.             "Description": "Application that hijacks a user├ås home page and redirects the browser to coolwwwsearch.com.",
  1405.             "Company": "N/A",
  1406.             "SysProcess": "No",
  1407.             "SecurityRisk": "Yes",
  1408.             "Errors": "N/A",
  1409.             "Status": 0
  1410.         },
  1411.         {
  1412.             "PName": "loadqm",
  1413.             "PAltName": "loadqm.exe",
  1414.             "Name": "MSN Queue Manager Loader",
  1415.             "Description": "MSN Queue Manager Loader, a service that is installed with MSN Explorer and MSN Messenger. It can use a lot of system resources.",
  1416.             "Company": "Microsoft Corp.",
  1417.             "SysProcess": "No",
  1418.             "SecurityRisk": "No",
  1419.             "Errors": "N/A",
  1420.             "Status": 0
  1421.         },
  1422.         {
  1423.             "PName": "loadwc",
  1424.             "PAltName": "loadwc.exe",
  1425.             "Name": "Load WebCheck",
  1426.             "Description": "Load WebCheck does the following: (1) customizes some of the settings in Internet Explorer, (2) adds, removes, and updates subscriptions and (3) propagates settings for user profiles.",
  1427.             "Company": "Microsoft Corp.",
  1428.             "SysProcess": "No",
  1429.             "SecurityRisk": "No",
  1430.             "Errors": "N/A",
  1431.             "Status": 0
  1432.         },
  1433.         {
  1434.             "PName": "locator",
  1435.             "PAltName": "locator.exe",
  1436.             "Name": "RPC Locator",
  1437.             "Description": "Background task that runs on Windows NT 4, 2000, and XP platforms, and maintains the database of currently publicly-declared procedures. Server processes and applications register all their publicly declared procedures with Locator. Thus, client processes can query Locator for specific publicly-declared procedures.",
  1438.             "Company": "Microsoft Corp.",
  1439.             "SysProcess": "Yes",
  1440.             "SecurityRisk": "No",
  1441.             "Errors": "N/A",
  1442.             "Status": 0
  1443.         },
  1444.         {
  1445.             "PName": "lsass",
  1446.             "PAltName": "lsass.exe",
  1447.             "Name": "Local Security Authority Service",
  1448.             "Description": "Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.",
  1449.             "Company": "Microsoft Corp.",
  1450.             "SysProcess": "Yes",
  1451.             "SecurityRisk": "No",
  1452.             "Errors": "N/A",
  1453.             "Status": 0
  1454.         },
  1455.         {
  1456.             "PName": "lucomserver",
  1457.             "PAltName": "lucomserver.exe",
  1458.             "Name": "Lucomserver",
  1459.             "Description": "Application that is associated with Norton LiveUpdate, which updates the software and virus definitions.",
  1460.             "Company": "Symantec Corporation",
  1461.             "SysProcess": "No",
  1462.             "SecurityRisk": "No",
  1463.             "Errors": "N/A",
  1464.             "Status": 0
  1465.         },
  1466.         {
  1467.             "PName": "lvcoms",
  1468.             "PAltName": "lvcoms.exe",
  1469.             "Name": "Lvcoms",
  1470.             "Description": "Application that is used for Logitech QuickCam home cameras. The application allows the camera to be accessed by NetMeeting, Windows Movie Maker, and the QuickCam software.",
  1471.             "Company": "Logitech",
  1472.             "SysProcess": "No",
  1473.             "SecurityRisk": "No",
  1474.             "Errors": "N/A",
  1475.             "Status": 0
  1476.         },
  1477.         {
  1478.             "PName": "mad",
  1479.             "PAltName": "mad.exe",
  1480.             "Name": "System Attendant Service",
  1481.             "Description": "System Attendant Service for Microsoft Exchange Server that runs in the background and is needed by Microsoft Exchange Server. The service loads DLLs for Microsoft Exchange, writes log messages, and generates the offline address books",
  1482.             "Company": "Microsoft Corp.",
  1483.             "SysProcess": "Yes",
  1484.             "SecurityRisk": "No",
  1485.             "Errors": "N/A",
  1486.             "Status": 0
  1487.         },
  1488.         {
  1489.             "PName": "mapisp32",
  1490.             "PAltName": "mapisp32.exe",
  1491.             "Name": "Mapisp32",
  1492.             "Description": "Also known as MAPI Spooler. The application dispatches the messages waiting in Microsoft Exchange, Windows Messaging, or the Microsoft Outlook outbox.",
  1493.             "Company": "Microsoft Corp.",
  1494.             "SysProcess": "Yes",
  1495.             "SecurityRisk": "No",
  1496.             "Errors": "N/A",
  1497.             "Status": 0
  1498.         },
  1499.         {
  1500.             "PName": "mapisvc32",
  1501.             "PAltName": "mapisvc32.exe",
  1502.             "Name": "mapisvc32",
  1503.             "Description": "Added to the system as a result of the KX virus and also recognized by Symantec as FPAI adware.",
  1504.             "Company": "N/A",
  1505.             "SysProcess": "No",
  1506.             "SecurityRisk": "Yes",
  1507.             "Errors": "N/A",
  1508.             "Status": 0
  1509.         },
  1510.         {
  1511.             "PName": "mcshield",
  1512.             "PAltName": "mcshield.exe",
  1513.             "Name": "McAfee VirusScan",
  1514.             "Description": "Application that is associated with McAfee antivirus software that scans files in the background when you access them.",
  1515.             "Company": "Network Associates, Inc.",
  1516.             "SysProcess": "No",
  1517.             "SecurityRisk": "No",
  1518.             "Errors": "N/A",
  1519.             "Status": 0
  1520.         },
  1521.         {
  1522.             "PName": "md",
  1523.             "PAltName": "md.exe",
  1524.             "Name": "SystemMD",
  1525.             "Description": "Home page hijacker application that redirects the browser to a pornographic web site.",
  1526.             "Company": "N/A",
  1527.             "SysProcess": "No",
  1528.             "SecurityRisk": "Yes",
  1529.             "Errors": "N/A",
  1530.             "Status": 0
  1531.         },
  1532.         {
  1533.             "PName": "mdm",
  1534.             "PAltName": "mdm.exe",
  1535.             "Name": "Machine Debug Manager",
  1536.             "Description": "Machine Debug Manager is used for debugging applications by technically advanced users and developers and is installed by the Microsoft Script Editor that is included in Microsoft Office.",
  1537.             "Company": "Microsoft Corp.",
  1538.             "SysProcess": "Yes",
  1539.             "SecurityRisk": "No",
  1540.             "Errors": "N/A",
  1541.             "Status": 0
  1542.         },
  1543.         {
  1544.             "PName": "mfin32",
  1545.             "PAltName": "mfin32.exe",
  1546.             "Name": "MyFreeInternetUpdate",
  1547.             "Description": "MyFreeInternetUpdate is an adware program and downloader.",
  1548.             "Company": "N/A",
  1549.             "SysProcess": "No",
  1550.             "SecurityRisk": "Yes",
  1551.             "Errors": "N/A",
  1552.             "Status": 0
  1553.         },
  1554.         {
  1555.             "PName": "mgabg",
  1556.             "PAltName": "mgabg.exe",
  1557.             "Name": "Matrox BIOS Guard",
  1558.             "Description": "Matrox BIOS guard process. Disabling this will impact the operation of your Matrox graphics card.",
  1559.             "Company": "Matrox",
  1560.             "SysProcess": "No",
  1561.             "SecurityRisk": "No",
  1562.             "Errors": "N/A",
  1563.             "Status": 0
  1564.         },
  1565.         {
  1566.             "PName": "mmc",
  1567.             "PAltName": "mmc.exe",
  1568.             "Name": "Microsoft Management Console",
  1569.             "Description": "Microsoft Management Console application is used to display various management plug-ins accessed from the Control Panel, such as the Device Manager or the Computer Management console. The Microsoft Management Console manages most of the Microsoft system products such as SQL Server, Exchange server, and more.",
  1570.             "Company": "Microsoft Corp.",
  1571.             "SysProcess": "Yes",
  1572.             "SecurityRisk": "No",
  1573.             "Errors": "N/A",
  1574.             "Status": 0
  1575.         },
  1576.         {
  1577.             "PName": "mmod",
  1578.             "PAltName": "mmod.exe",
  1579.             "Name": "Mmod",
  1580.             "Description": "Spyware application that is packed with the popular iMesh and KaZaA file-sharing programs.",
  1581.             "Company": "Ezula Inc.",
  1582.             "SysProcess": "No",
  1583.             "SecurityRisk": "Yes",
  1584.             "Errors": "N/A",
  1585.             "Status": 0
  1586.         },
  1587.         {
  1588.             "PName": "mmtask",
  1589.             "PAltName": "mmtask.tsk",
  1590.             "Name": "Multimedia Support Task",
  1591.             "Description": "Windows Multimedia Background Task Support Module that handles multimedia services. The software provides simulated multitasking for multimedia applications; for example, you could be playing more than one AVI movie at the same time. This task does not exist in Windows NT 4, 2000, or XP operating systems, which are true multitasking operating systems.",
  1592.             "Company": "Microsoft Corp.",
  1593.             "SysProcess": "Yes",
  1594.             "SecurityRisk": "No",
  1595.             "Errors": "N/A",
  1596.             "Status": 0
  1597.         },
  1598.         {
  1599.             "PName": "mmtask",
  1600.             "PAltName": "mmtask.exe",
  1601.             "Name": "Mmtask",
  1602.             "Description": "Part of MusicMatch Jukebox that is digital music player, CD burner and ripper, music organizer, and play list creator.",
  1603.             "Company": "Musicmatch, Inc",
  1604.             "SysProcess": "No",
  1605.             "SecurityRisk": "No",
  1606.             "Errors": "N/A",
  1607.             "Status": 0
  1608.         },
  1609.         {
  1610.             "PName": "mobsync",
  1611.             "PAltName": "mobsync.exe",
  1612.             "Name": "Microsoft Synchronization Manager",
  1613.             "Description": "Application that is associated with Internet Explorer and used to update the network copy of materials that are edited offline, such as documents, calendars, and email messages.",
  1614.             "Company": "Microsoft Corp.",
  1615.             "SysProcess": "No",
  1616.             "SecurityRisk": "No",
  1617.             "Errors": "N/A",
  1618.             "Status": 0
  1619.         },
  1620.         {
  1621.             "PName": "monitor",
  1622.             "PAltName": "monitor.exe",
  1623.             "Name": "Monitor",
  1624.             "Description": "Application that helps in monitoring Windows NT Server Performance. Monitor.exe runs from the command line on your local workstation. You use this service to start, stop, and set up the Datalog service on the target server.",
  1625.             "Company": "Microsoft Corp.",
  1626.             "SysProcess": "Yes",
  1627.             "SecurityRisk": "No",
  1628.             "Errors": "N/A",
  1629.             "Status": 0
  1630.         },
  1631.         {
  1632.             "PName": "mostat",
  1633.             "PAltName": "mostat.exe",
  1634.             "Name": "Mostat",
  1635.             "Description": "Application that is used to collect information and statistics about user browsing habits and transmit them back to the World Media center. The application takes the browser to a site that is part of the advertising network and then redirects back the browser to the original target site.",
  1636.             "Company": "Wurld Media Inc",
  1637.             "SysProcess": "No",
  1638.             "SecurityRisk": "Yes",
  1639.             "Errors": "N/A",
  1640.             "Status": 0
  1641.         },
  1642.         {
  1643.             "PName": "mplayer2",
  1644.             "PAltName": "mplayer2.exe",
  1645.             "Name": "Windows Media Player",
  1646.             "Description": "Newer version of Windows Media Player, which is used to open and play music, sound and video files.",
  1647.             "Company": "Microsoft Corp.",
  1648.             "SysProcess": "No",
  1649.             "SecurityRisk": "No",
  1650.             "Errors": "N/A",
  1651.             "Status": 0
  1652.         },
  1653.         {
  1654.             "PName": "mprexe",
  1655.             "PAltName": "mprexe.exe",
  1656.             "Name": "Windows Routing Process",
  1657.             "Description": "Application that allows Windows 95, 98, or ME to have more than one network client, protocol, or adapter. The software routes network requests between the different adapters and clients.",
  1658.             "Company": "Microsoft Corp.",
  1659.             "SysProcess": "Yes",
  1660.             "SecurityRisk": "No",
  1661.             "Errors": "N/A",
  1662.             "Status": 0
  1663.         },
  1664.         {
  1665.             "PName": "msapp",
  1666.             "PAltName": "msapp.exe",
  1667.             "Name": "Msapp",
  1668.             "Description": "Added to the system as a result of the RSBOT virus.",
  1669.             "Company": "N/A",
  1670.             "SysProcess": "No",
  1671.             "SecurityRisk": "Yes",
  1672.             "Errors": "N/A",
  1673.             "Status": 0
  1674.         },
  1675.         {
  1676.             "PName": "msbb",
  1677.             "PAltName": "msbb.exe",
  1678.             "Name": "MSBB Web3000 Spyware Application",
  1679.             "Description": "MSBB Web3000 spyware application that is included with some adware products and is started from the registry when Windows is loaded.",
  1680.             "Company": "180Solutions.com",
  1681.             "SysProcess": "No",
  1682.             "SecurityRisk": "Yes",
  1683.             "Errors": "N/A",
  1684.             "Status": 0
  1685.         },
  1686.         {
  1687.             "PName": "msblast",
  1688.             "PAltName": "msblast.exe",
  1689.             "Name": "MSBlast Worm",
  1690.             "Description": "Internet worm that uses a vulnerability in DCOM/RPC (port 135) to infect 2000/XP systems. The worm allows TFTP that is used to transfer the worm.",
  1691.             "Company": "N/A",
  1692.             "SysProcess": "No",
  1693.             "SecurityRisk": "Yes",
  1694.             "Errors": "N/A",
  1695.             "Status": 0
  1696.         },
  1697.         {
  1698.             "PName": "mscache",
  1699.             "PAltName": "mscache.exe",
  1700.             "Name": "Mscache",
  1701.             "Description": "Spyware web downloader. The application is installed by a spyware ISTbar that is an Internet Explorer toolbar. The spyware is a home page and search hijacker.",
  1702.             "Company": "Integrated Search Technologies/CDT Inc.",
  1703.             "SysProcess": "No",
  1704.             "SecurityRisk": "Yes",
  1705.             "Errors": "N/A",
  1706.             "Status": 0
  1707.         },
  1708.         {
  1709.             "PName": "msccn32",
  1710.             "PAltName": "msccn32.exe",
  1711.             "Name": "Msccn32",
  1712.             "Description": "Added to the system as a result of Win32.Sobig.B@mm (Palyh) virus that is a mass mailer and spreads with email, as an attached file.",
  1713.             "Company": "N/A",
  1714.             "SysProcess": "No",
  1715.             "SecurityRisk": "Yes",
  1716.             "Errors": "N/A",
  1717.             "Status": 0
  1718.         },
  1719.         {
  1720.             "PName": "mscman",
  1721.             "PAltName": "mscman.exe",
  1722.             "Name": "Mscman",
  1723.             "Description": "Application that loads into the system as an Internet Explorer Helper add-on and changes the browser behavior. When the user browses the Internet, specific words are highlighted in yellow to attract the user and re-direct the user to advertiser related pages when the user clicks on the words.",
  1724.             "Company": "Odysseus Marketing Inc",
  1725.             "SysProcess": "No",
  1726.             "SecurityRisk": "Yes",
  1727.             "Errors": "N/A",
  1728.             "Status": 0
  1729.         },
  1730.         {
  1731.             "PName": "msconfig",
  1732.             "PAltName": "msconfig.exe",
  1733.             "Name": "Windows System Configuration Utility.",
  1734.             "Description": "A file that helps to manage startup and configure system files like autoexec.bat and win.ini. This file also changes the display of printer properties.",
  1735.             "Company": "Microsoft Corp.",
  1736.             "SysProcess": "Yes",
  1737.             "SecurityRisk": "No",
  1738.             "Errors": "N/A",
  1739.             "Status": 0
  1740.         },
  1741.         {
  1742.             "PName": "msdm",
  1743.             "PAltName": "msdm.exe",
  1744.             "Name": "Media Plug x.1.2",
  1745.             "Description": "Added as to the system as a result of the MULDROP.352 virus.",
  1746.             "Company": "N/A",
  1747.             "SysProcess": "No",
  1748.             "SecurityRisk": "Yes",
  1749.             "Errors": "N/A",
  1750.             "Status": 0
  1751.         },
  1752.         {
  1753.             "PName": "msdtc",
  1754.             "PAltName": "msdtc.exe",
  1755.             "Name": "Distributed Transaction Coordinator",
  1756.             "Description": "Application that is loaded into the system by Microsoft Personal Web Server and Microsoft SQL Server. The service is used to manage transactions across multiple servers.",
  1757.             "Company": "Microsoft Corp.",
  1758.             "SysProcess": "Yes",
  1759.             "SecurityRisk": "No",
  1760.             "Errors": "N/A",
  1761.             "Status": 0
  1762.         },
  1763.         {
  1764.             "PName": "msgsrv32",
  1765.             "PAltName": "msgsrv32.exe",
  1766.             "Name": "Windows Message Server",
  1767.             "Description": "Windows Message Server, which loads Windows drivers and the Program Manager at start-up. The software runs invisibly in the background performing a variety of essential services, most of which concern on-screen messages and notifications.",
  1768.             "Company": "Microsoft Corp.",
  1769.             "SysProcess": "Yes",
  1770.             "SecurityRisk": "No",
  1771.             "Errors": "N/A",
  1772.             "Status": 0
  1773.         },
  1774.         {
  1775.             "PName": "msgsys",
  1776.             "PAltName": "msgsys.exe",
  1777.             "Name": "Msgsys",
  1778.             "Description": "Application that belongs to Intel LANDesk client Manager v6.0.",
  1779.             "Company": "Intel Corporation",
  1780.             "SysProcess": "No",
  1781.             "SecurityRisk": "No",
  1782.             "Errors": "N/A",
  1783.             "Status": 0
  1784.         },
  1785.         {
  1786.             "PName": "mshta",
  1787.             "PAltName": "mshta.exe",
  1788.             "Name": "Microsoft HTML Application Host",
  1789.             "Description": "Application that is used to run HTA files in Windows. The application is loaded as soon as an .HTA application needs to run and then terminates when the application completes.",
  1790.             "Company": "Microsoft Corp.",
  1791.             "SysProcess": "No",
  1792.             "SecurityRisk": "No",
  1793.             "Errors": "N/A",
  1794.             "Status": 0
  1795.         },
  1796.         {
  1797.             "PName": "msiexec",
  1798.             "PAltName": "msiexec.exe",
  1799.             "Name": "Windows Installer Component",
  1800.             "Description": "Windows Installer Component that is used to install new programs that use Windows Installer package files (MSI).",
  1801.             "Company": "Microsoft Corp.",
  1802.             "SysProcess": "Yes",
  1803.             "SecurityRisk": "No",
  1804.             "Errors": "N/A",
  1805.             "Status": 0
  1806.         },
  1807.         {
  1808.             "PName": "msiexec16",
  1809.             "PAltName": "msiexec16.exe",
  1810.             "Name": "Troj/OptixP-13 Trojan",
  1811.             "Description": "Added to the system as a result of the Troj/OptixP-13 Trojan. This Trojan is a backdoor virus that can be used to gain unauthorized remote access to the computer over a network.",
  1812.             "Company": "N/A",
  1813.             "SysProcess": "No",
  1814.             "SecurityRisk": "Yes",
  1815.             "Errors": "N/A",
  1816.             "Status": 0
  1817.         },
  1818.         {
  1819.             "PName": "msimn",
  1820.             "PAltName": "msimn.exe",
  1821.             "Name": "Microsoft Outlook Express",
  1822.             "Description": "Microsoft Outlook Express, an email and newsgroup client included with Microsoft Windows.",
  1823.             "Company": "Microsoft Corp.",
  1824.             "SysProcess": "No",
  1825.             "SecurityRisk": "No",
  1826.             "Errors": "N/A",
  1827.             "Status": 0
  1828.         },
  1829.         {
  1830.             "PName": "mslaugh",
  1831.             "PAltName": "mslaugh.exe",
  1832.             "Name": "Windows automation",
  1833.             "Description": "Added to the system as a result of as a result of the BLASTER.E WORM that exploits the DCOM Rcomputer vulnerability using TCP port 135. The worm targets only Windows 2000 and Windows XP computers.",
  1834.             "Company": "N/A",
  1835.             "SysProcess": "No",
  1836.             "SecurityRisk": "Yes",
  1837.             "Errors": "N/A",
  1838.             "Status": 0
  1839.         },
  1840.         {
  1841.             "PName": "msmgt",
  1842.             "PAltName": "msmgt.exe",
  1843.             "Name": "Msmgt",
  1844.             "Description": "Adware and home page hijacker.",
  1845.             "Company": "Total Velocity",
  1846.             "SysProcess": "No",
  1847.             "SecurityRisk": "Yes",
  1848.             "Errors": "N/A",
  1849.             "Status": 0
  1850.         },
  1851.         {
  1852.             "PName": "msmsgri32",
  1853.             "PAltName": "msmsgri32.exe",
  1854.             "Name": "Msmsgri32",
  1855.             "Description": "Added to the system as a result of the RANDEX.D virus.",
  1856.             "Company": "N/A",
  1857.             "SysProcess": "No",
  1858.             "SecurityRisk": "Yes",
  1859.             "Errors": "N/A",
  1860.             "Status": 0
  1861.         },
  1862.         {
  1863.             "PName": "msmsgs",
  1864.             "PAltName": "msmsgs.exe",
  1865.             "Name": "MSN Messenger Traybar Process",
  1866.             "Description": "Tray bar icon for MSN Messenger that is an online chat and instant messaging client.",
  1867.             "Company": "Microsoft Corp.",
  1868.             "SysProcess": "No",
  1869.             "SecurityRisk": "No",
  1870.             "Errors": "N/A",
  1871.             "Status": 0
  1872.         },
  1873.         {
  1874.             "PName": "msnmsgr",
  1875.             "PAltName": "msnmsgr.exe",
  1876.             "Name": "MSN Messenger",
  1877.             "Description": "MSN Messenger, an online chat and instant messaging client.",
  1878.             "Company": "Microsoft Corp.",
  1879.             "SysProcess": "No",
  1880.             "SecurityRisk": "No",
  1881.             "Errors": "N/A",
  1882.             "Status": 0
  1883.         },
  1884.         {
  1885.             "PName": "msoobe",
  1886.             "PAltName": "msoobe.exe",
  1887.             "Name": "Windows Product Activation",
  1888.             "Description": "Windows Product Activation, which is used to activate an Windows XP license.",
  1889.             "Company": "Microsoft Corp.",
  1890.             "SysProcess": "Yes",
  1891.             "SecurityRisk": "No",
  1892.             "Errors": "N/A",
  1893.             "Status": 0
  1894.         },
  1895.         {
  1896.             "PName": "mspaint",
  1897.             "PAltName": "mspaint.exe",
  1898.             "Name": "Microsoft Paint",
  1899.             "Description": "Microsoft Paint, which is an image editor included with Microsoft Windows that can be used to edit bitmap images.",
  1900.             "Company": "Microsoft Corp.",
  1901.             "SysProcess": "No",
  1902.             "SecurityRisk": "No",
  1903.             "Errors": "N/A",
  1904.             "Status": 0
  1905.         },
  1906.         {
  1907.             "PName": "mspmspsv",
  1908.             "PAltName": "mspmspsv.exe",
  1909.             "Name": "WMDM PMSP Service",
  1910.             "Description": "Helper service installed by Windows Media Player 7. The service allows Windows Media Player to support the SDMI (Secure Digital Music Initiative) protocol when copying CDs or packaging copyrighted downloaded music to SDMI-compliant music players and storage devices.",
  1911.             "Company": "Microsoft Corp.",
  1912.             "SysProcess": "No",
  1913.             "SecurityRisk": "No",
  1914.             "Errors": "N/A",
  1915.             "Status": 0
  1916.         },
  1917.         {
  1918.             "PName": "msrexe",
  1919.             "PAltName": "msrexe.exe",
  1920.             "Name": "Remote Access / Hacking tool / ICQ trojan",
  1921.             "Description": "Added to the system as a result of an ICQ Trojan that alters Win.ini and System.ini files and generates several. .exe-files with randomly chosen names.",
  1922.             "Company": "N/A",
  1923.             "SysProcess": "No",
  1924.             "SecurityRisk": "Yes",
  1925.             "Errors": "N/A",
  1926.             "Status": 0
  1927.         },
  1928.         {
  1929.             "PName": "mssearch",
  1930.             "PAltName": "mssearch.exe",
  1931.             "Name": "MS Index Service",
  1932.             "Description": "Application that generates full-text indexes on content and properties of structured and semi-structured data to allow fast linguistic searches on this data that is used for IIS.",
  1933.             "Company": "Microsoft Corp.",
  1934.             "SysProcess": "Yes",
  1935.             "SecurityRisk": "No",
  1936.             "Errors": "N/A",
  1937.             "Status": 0
  1938.         },
  1939.         {
  1940.             "PName": "mssvc",
  1941.             "PAltName": "mssvc.exe",
  1942.             "Name": "StealthDisk",
  1943.             "Description": "Application that is used to hide folders, files, and applications. The application can also encrypt them for better protection. Folders and files are hidden even when this application and the operating system are not running.",
  1944.             "Company": "Tucows Inc.",
  1945.             "SysProcess": "No",
  1946.             "SecurityRisk": "No",
  1947.             "Errors": "N/A",
  1948.             "Status": 0
  1949.         },
  1950.         {
  1951.             "PName": "mssys",
  1952.             "PAltName": "mssys.exe",
  1953.             "Name": "Mssys",
  1954.             "Description": "Added to the system as a result of the MYSS.B virus.",
  1955.             "Company": "N/A",
  1956.             "SysProcess": "No",
  1957.             "SecurityRisk": "Yes",
  1958.             "Errors": "N/A",
  1959.             "Status": 0
  1960.         },
  1961.         {
  1962.             "PName": "mstask",
  1963.             "PAltName": "mstask.exe",
  1964.             "Name": "Windows Task Scheduler",
  1965.             "Description": "Windows Task Scheduler, a service that schedules tasks, such as backups or updates, to run at certain times or dates.",
  1966.             "Company": "Microsoft Corp.",
  1967.             "SysProcess": "Yes",
  1968.             "SecurityRisk": "No",
  1969.             "Errors": "N/A",
  1970.             "Status": 0
  1971.         },
  1972.         {
  1973.             "PName": "msvxd",
  1974.             "PAltName": "msvxd.exe",
  1975.             "Name": "W32/Datom-A",
  1976.             "Description": "Msvxd.exe, the executable component of a Win32 worm called W32/Datom-A that uses Windows network shares to spread. The worm consists of three files: msvxd.exe, msvxd16.dll and msvxd32.dll. Msvxd.exe loads two other DLL files.",
  1977.             "Company": "N/A",
  1978.             "SysProcess": "No",
  1979.             "SecurityRisk": "Yes",
  1980.             "Errors": "N/A",
  1981.             "Status": 0
  1982.         },
  1983.         {
  1984.             "PName": "mtx",
  1985.             "PAltName": "mtx.exe",
  1986.             "Name": "Microsoft Transaction Server (MTS)",
  1987.             "Description": "Application that is used to load a specific MTS package by generating MTS objects on behalf of client applications.",
  1988.             "Company": "Microsoft Corp.",
  1989.             "SysProcess": "Yes",
  1990.             "SecurityRisk": "No",
  1991.             "Errors": "N/A",
  1992.             "Status": 0
  1993.         },
  1994.         {
  1995.             "PName": "navapsvc",
  1996.             "PAltName": "navapsvc.exe",
  1997.             "Name": "Norton AntiVirus Auto-Protect Service",
  1998.             "Description": "Background application for Norton AntiVirus that provides auto-protection features to the system. It runs on Windows NT/2000/XP.",
  1999.             "Company": "Symantec Corporation",
  2000.             "SysProcess": "No",
  2001.             "SecurityRisk": "No",
  2002.             "Errors": "N/A",
  2003.             "Status": 0
  2004.         },
  2005.         {
  2006.             "PName": "navapw32",
  2007.             "PAltName": "navapw32.exe",
  2008.             "Name": "Norton AntiVirus Agent",
  2009.             "Description": "Background application for Norton AntiVirus that provides auto-protection to the system. It runs on Windows 95/98/ME.",
  2010.             "Company": "Symantec Corporation",
  2011.             "SysProcess": "No",
  2012.             "SecurityRisk": "No",
  2013.             "Errors": "N/A",
  2014.             "Status": 0
  2015.         },
  2016.         {
  2017.             "PName": "nerocheck",
  2018.             "PAltName": "nerocheck.exe",
  2019.             "Name": "Nero Driver Monitor",
  2020.             "Description": "Application that is used to install or control Nero driver nerocd2k.sys application. It is associated with Nero CD writing software.",
  2021.             "Company": "Ahead Software",
  2022.             "SysProcess": "No",
  2023.             "SecurityRisk": "No",
  2024.             "Errors": "N/A",
  2025.             "Status": 0
  2026.         },
  2027.         {
  2028.             "PName": "netd32",
  2029.             "PAltName": "netd32.exe",
  2030.             "Name": "MicrosoftNetwork Daemon for Win32",
  2031.             "Description": "Added to the system as a result of the RANDEX.F virus that is a network aware worm.",
  2032.             "Company": "N/A",
  2033.             "SysProcess": "No",
  2034.             "SecurityRisk": "Yes",
  2035.             "Errors": "N/A",
  2036.             "Status": 0
  2037.         },
  2038.         {
  2039.             "PName": "netdde",
  2040.             "PAltName": "netdde.exe",
  2041.             "Name": "Microsoft Windows Network DDE server",
  2042.             "Description": "Application that is the Network DDE server for Microsoft Windows. The software allows applications that use the DDE transport to transparently exchange data over a network.",
  2043.             "Company": "Microsoft Corp.",
  2044.             "SysProcess": "Yes",
  2045.             "SecurityRisk": "No",
  2046.             "Errors": "N/A",
  2047.             "Status": 0
  2048.         },
  2049.         {
  2050.             "PName": "netscape",
  2051.             "PAltName": "netscape.exe",
  2052.             "Name": "Netscape Messenger",
  2053.             "Description": "Application that is the principal file called by Netscape Navigator, Netscape Mail and News, and Netscape Messenger.",
  2054.             "Company": "Netscape",
  2055.             "SysProcess": "No",
  2056.             "SecurityRisk": "No",
  2057.             "Errors": "N/A",
  2058.             "Status": 0
  2059.         },
  2060.         {
  2061.             "PName": "netscp6",
  2062.             "PAltName": "netscp6.exe",
  2063.             "Name": "Netscape 6",
  2064.             "Description": "Executable for Netscape 6.",
  2065.             "Company": "Netscape",
  2066.             "SysProcess": "No",
  2067.             "SecurityRisk": "No",
  2068.             "Errors": "N/A",
  2069.             "Status": 0
  2070.         },
  2071.         {
  2072.             "PName": "nisum",
  2073.             "PAltName": "nisum.exe",
  2074.             "Name": "Norton Internet Security Stats",
  2075.             "Description": "Application that collects all information about the traffic that passes through the Norton firewall.",
  2076.             "Company": "Symantec Corporation",
  2077.             "SysProcess": "No",
  2078.             "SecurityRisk": "No",
  2079.             "Errors": "N/A",
  2080.             "Status": 0
  2081.         },
  2082.         {
  2083.             "PName": "nopdb",
  2084.             "PAltName": "nopdb.exe",
  2085.             "Name": "Nopdb",
  2086.             "Description": "Application that is associated with Norton Speed Disk. The application is installed only to start the Speed Disk automatically by default on Windows start-up.",
  2087.             "Company": "Symantec Corporation",
  2088.             "SysProcess": "No",
  2089.             "SecurityRisk": "No",
  2090.             "Errors": "N/A",
  2091.             "Status": 0
  2092.         },
  2093.         {
  2094.             "PName": "notepad",
  2095.             "PAltName": "notepad.exe",
  2096.             "Name": "Notepad",
  2097.             "Description": "Notepad, text editor that is used to open text documents and is included with Windows.",
  2098.             "Company": "Microsoft Corp.",
  2099.             "SysProcess": "No",
  2100.             "SecurityRisk": "No",
  2101.             "Errors": "N/A",
  2102.             "Status": 0
  2103.         },
  2104.         {
  2105.             "PName": "nssys32",
  2106.             "PAltName": "nssys32.exe",
  2107.             "Name": "nsdriver",
  2108.             "Description": "Added to the system as a result of an unidentified virus.",
  2109.             "Company": "N/A",
  2110.             "SysProcess": "No",
  2111.             "SecurityRisk": "Yes",
  2112.             "Errors": "N/A",
  2113.             "Status": 0
  2114.         },
  2115.         {
  2116.             "PName": "nstask32",
  2117.             "PAltName": "nstask32.exe",
  2118.             "Name": "NDplDeamon",
  2119.             "Description": "Added to the system as a result of the RANDEX.E virus.",
  2120.             "Company": "N/A",
  2121.             "SysProcess": "No",
  2122.             "SecurityRisk": "Yes",
  2123.             "Errors": "N/A",
  2124.             "Status": 0
  2125.         },
  2126.         {
  2127.             "PName": "nsupdate",
  2128.             "PAltName": "nsupdate.exe",
  2129.             "Name": "Nsupdate",
  2130.             "Description": "A dialer program that dials to a site specific to adult or pornographic content.",
  2131.             "Company": "N/A",
  2132.             "SysProcess": "No",
  2133.             "SecurityRisk": "Yes",
  2134.             "Errors": "N/A",
  2135.             "Status": 0
  2136.         },
  2137.         {
  2138.             "PName": "ntfrs",
  2139.             "PAltName": "ntfrs.exe",
  2140.             "Name": "File Replication Service",
  2141.             "Description": "Application that is used to maintain file synchronization of file directory contents among multiple servers.",
  2142.             "Company": "Microsoft Corp.",
  2143.             "SysProcess": "Yes",
  2144.             "SecurityRisk": "No",
  2145.             "Errors": "N/A",
  2146.             "Status": 0
  2147.         },
  2148.         {
  2149.             "PName": "ntvdm",
  2150.             "PAltName": "ntvdm.exe",
  2151.             "Name": "Windows 16-bit Virtual Machine",
  2152.             "Description": "Application that provides an environment for a 16-bit process to execute on a 32-bit platform.",
  2153.             "Company": "Microsoft Corp.",
  2154.             "SysProcess": "Yes",
  2155.             "SecurityRisk": "No",
  2156.             "Errors": "N/A",
  2157.             "Status": 0
  2158.         },
  2159.         {
  2160.             "PName": "nvsvc32",
  2161.             "PAltName": "nvsvc32.exe",
  2162.             "Name": "NVIDIA Driver Helper Service",
  2163.             "Description": "Application that is loaded to the system by NVIDIA graphics card drivers.",
  2164.             "Company": "NVIDIA Corporation",
  2165.             "SysProcess": "No",
  2166.             "SecurityRisk": "No",
  2167.             "Errors": "N/A",
  2168.             "Status": 0
  2169.         },
  2170.         {
  2171.             "PName": "nwiz",
  2172.             "PAltName": "nwiz.exe",
  2173.             "Name": "NVIDIA nView Wizard",
  2174.             "Description": "Application that allows a users to have 32 virtual desktops, get a desktop larger than the viewable area of the monitor, divide the display across more than one monitor, manage applications, and many more features.",
  2175.             "Company": "NVIDIA Corporation",
  2176.             "SysProcess": "No",
  2177.             "SecurityRisk": "No",
  2178.             "Errors": "N/A",
  2179.             "Status": 0
  2180.         },
  2181.         {
  2182.             "PName": "onsrvr",
  2183.             "PAltName": "onsrvr.exe",
  2184.             "Name": "OnSrvr",
  2185.             "Description": "Adware from OnWebMedia.",
  2186.             "Company": "OnWebMedia.Com",
  2187.             "SysProcess": "No",
  2188.             "SecurityRisk": "Yes",
  2189.             "Errors": "N/A",
  2190.             "Status": 0
  2191.         },
  2192.         {
  2193.             "PName": "optimize",
  2194.             "PAltName": "optimize.exe",
  2195.             "Name": "Optimize",
  2196.             "Description": "Adult content dialer that dials numbers specific to porn related sites.",
  2197.             "Company": "N/A",
  2198.             "SysProcess": "No",
  2199.             "SecurityRisk": "Yes",
  2200.             "Errors": "N/A",
  2201.             "Status": 0
  2202.         },
  2203.         {
  2204.             "PName": "osa",
  2205.             "PAltName": "osa.exe",
  2206.             "Name": "Office Startup Assistant",
  2207.             "Description": "Microsoft Office Startup Assistant that is loaded at start-up and improves performance by handling automation, Office fonts, certain Office commands, and Outlook notification.",
  2208.             "Company": "Microsoft Corp.",
  2209.             "SysProcess": "No",
  2210.             "SecurityRisk": "No",
  2211.             "Errors": "N/A",
  2212.             "Status": 0
  2213.         },
  2214.         {
  2215.             "PName": "osd",
  2216.             "PAltName": "osd.exe",
  2217.             "Name": "OnScreen Display System Tray icon",
  2218.             "Description": "System tray bar application that allows a user to change the color or font of display. The user can also modify other display settings.",
  2219.             "Company": "Netropa Corporation",
  2220.             "SysProcess": "No",
  2221.             "SecurityRisk": "No",
  2222.             "Errors": "N/A",
  2223.             "Status": 0
  2224.         },
  2225.         {
  2226.             "PName": "patch",
  2227.             "PAltName": "patch.exe",
  2228.             "Name": "Patch",
  2229.             "Description": "Added to the system as a result of the NETBUS virus. The program is a remote administration hack tool that can be used to control other computers, with Netbus Server installed, through the Internet or the network. The hacker must have the Netbus Client installed. PATCH.EXE is the server part of the program.",
  2230.             "Company": "N/A",
  2231.             "SysProcess": "No",
  2232.             "SecurityRisk": "Yes",
  2233.             "Errors": "N/A",
  2234.             "Status": 0
  2235.         },
  2236.         {
  2237.             "PName": "pctspk",
  2238.             "PAltName": "pctspk.exe",
  2239.             "Name": "Pctspk",
  2240.             "Description": "Application that is loaded to the system by the drivers for the PCTEL 2304WT V.92 MDC modems.",
  2241.             "Company": "PCTEL",
  2242.             "SysProcess": "No",
  2243.             "SecurityRisk": "No",
  2244.             "Errors": "N/A",
  2245.             "Status": 0
  2246.         },
  2247.         {
  2248.             "PName": "pds",
  2249.             "PAltName": "pds.exe",
  2250.             "Name": "Intel Ping Discovery Service",
  2251.             "Description": "Application that is associated with Intel LANDesk Management Suite software. The application helps to find registered products on a computer.",
  2252.             "Company": "Intel Corporation.",
  2253.             "SysProcess": "No",
  2254.             "SecurityRisk": "No",
  2255.             "Errors": "N/A",
  2256.             "Status": 0
  2257.         },
  2258.         {
  2259.             "PName": "pgmonitr",
  2260.             "PAltName": "pgmonitr.exe",
  2261.             "Name": "Pgmonitr",
  2262.             "Description": "Application that is associated with the advertising product from The Delfin Project. The application is loaded to the system by the file sharing application kazaa.",
  2263.             "Company": "Delfin Project Inc",
  2264.             "SysProcess": "No",
  2265.             "SecurityRisk": "Yes",
  2266.             "Errors": "N/A",
  2267.             "Status": 0
  2268.         },
  2269.         {
  2270.             "PName": "pinger",
  2271.             "PAltName": "pinger.exe",
  2272.             "Name": "Pinger",
  2273.             "Description": "Background task for Toshiba that regularly checks for software and driver updates.",
  2274.             "Company": "TOSHIBA Corp.",
  2275.             "SysProcess": "No",
  2276.             "SecurityRisk": "No",
  2277.             "Errors": "N/A",
  2278.             "Status": 0
  2279.         },
  2280.         {
  2281.             "PName": "point32",
  2282.             "PAltName": "point32.exe",
  2283.             "Name": "Microsoft Intellimouse Monitor",
  2284.             "Description": "Microsoft Intellimouse Monitor adds a mouse settings icon to the tray bar.",
  2285.             "Company": "Microsoft Corp.",
  2286.             "SysProcess": "No",
  2287.             "SecurityRisk": "No",
  2288.             "Errors": "N/A",
  2289.             "Status": 0
  2290.         },
  2291.         {
  2292.             "PName": "powerscan",
  2293.             "PAltName": "powerscan.exe",
  2294.             "Name": "Powerscan",
  2295.             "Description": "Foistware by Integrated Search Technologies that is behind the ISTbar parasite. ISTbar is an Internet Explorer toolbar, home page, and search hijacker.",
  2296.             "Company": "Integrated Search Technologies",
  2297.             "SysProcess": "No",
  2298.             "SecurityRisk": "Yes",
  2299.             "Errors": "N/A",
  2300.             "Status": 0
  2301.         },
  2302.         {
  2303.             "PName": "prizesurfer",
  2304.             "PAltName": "prizesurfer.exe",
  2305.             "Name": "Prizesurfer",
  2306.             "Description": "Application that allows users to win cash and prizes just for surfing the Internet and shopping online.",
  2307.             "Company": "prizesurfer.com",
  2308.             "SysProcess": "No",
  2309.             "SecurityRisk": "Yes",
  2310.             "Errors": "N/A",
  2311.             "Status": 0
  2312.         },
  2313.         {
  2314.             "PName": "prmt",
  2315.             "PAltName": "prmt.exe",
  2316.             "Name": "NetRatings software",
  2317.             "Description": "NetRatings software that measures Internet usage anonymously and surveys participants according to their profiles and online habits. This software has been reported to be installed automatically after a Grokster install. The application anonymously collects your use of the Internet protocols, such as sites visited, web pages, advertisements seen, electronic commerce, and streaming data.",
  2318.             "Company": "OpiStat",
  2319.             "SysProcess": "No",
  2320.             "SecurityRisk": "Yes",
  2321.             "Errors": "N/A",
  2322.             "Status": 0
  2323.         },
  2324.         {
  2325.             "PName": "prmvr",
  2326.             "PAltName": "prmvr.exe",
  2327.             "Name": "YahooStock",
  2328.             "Description": "Adware software Adtomi that offers banner advertising services and ad hosting for web masters.",
  2329.             "Company": "Adtomi",
  2330.             "SysProcess": "No",
  2331.             "SecurityRisk": "Yes",
  2332.             "Errors": "N/A",
  2333.             "Status": 0
  2334.         },
  2335.         {
  2336.             "PName": "promon",
  2337.             "PAltName": "promon.exe",
  2338.             "Name": "Promon",
  2339.             "Description": "System tray bar application that shows LEDs that give information on the network traffic going through an Intel Pro network card. The application also allows users to call diagnostic features, configuration data, and setup screens.",
  2340.             "Company": "Intel Corporation.",
  2341.             "SysProcess": "No",
  2342.             "SecurityRisk": "No",
  2343.             "Errors": "N/A",
  2344.             "Status": 0
  2345.         },
  2346.         {
  2347.             "PName": "prpcui",
  2348.             "PAltName": "prpcui.exe",
  2349.             "Name": "PRPCMonitor",
  2350.             "Description": "Application that detects whether the laptop computer is getting its power from the battery or from the adaptor. If the laptop computer is running on a battery, the application scales down the frequency and voltage of the CPU to reduce power consumption.",
  2351.             "Company": "Intel Corporation.",
  2352.             "SysProcess": "No",
  2353.             "SecurityRisk": "No",
  2354.             "Errors": "N/A",
  2355.             "Status": 0
  2356.         },
  2357.         {
  2358.             "PName": "ps2",
  2359.             "PAltName": "ps2.exe",
  2360.             "Name": "Ps2",
  2361.             "Description": "Application that provides functionality to keyboard on Hewlett Packard computers.",
  2362.             "Company": "Hewlett-Packard",
  2363.             "SysProcess": "No",
  2364.             "SecurityRisk": "No",
  2365.             "Errors": "N/A",
  2366.             "Status": 0
  2367.         },
  2368.         {
  2369.             "PName": "psfree",
  2370.             "PAltName": "psfree.exe",
  2371.             "Name": "Psfree",
  2372.             "Description": "Application that allows a user to block advertising popups while browsing the Internet.",
  2373.             "Company": "Panicware, Inc",
  2374.             "SysProcess": "No",
  2375.             "SecurityRisk": "No",
  2376.             "Errors": "N/A",
  2377.             "Status": 0
  2378.         },
  2379.         {
  2380.             "PName": "pstores",
  2381.             "PAltName": "pstores.exe",
  2382.             "Name": "Protected Storage Service",
  2383.             "Description": "Microsoft Protected Storage Server, in Win95/98/ME, or Protected Storage Service, in WinNT/2000/XP. Protected Storage, in the form of PSTORES, was introduced with Internet Explorer 4. It is invoked by Microsoft Internet programs, such as Outlook Express and Internet Explorer, to securely store a variety of secure and confidential data into the registry, such as Outlook Express passwords, SSL certificates, auto-complete fields, such as usernames and passwords to enter web sites, and so forth, and web forms data.",
  2384.             "Company": "Microsoft Corp.",
  2385.             "SysProcess": "Yes",
  2386.             "SecurityRisk": "No",
  2387.             "Errors": "N/A",
  2388.             "Status": 0
  2389.         },
  2390.         {
  2391.             "PName": "ptsnoop",
  2392.             "PAltName": "ptsnoop.exe",
  2393.             "Name": "Ptsnoop",
  2394.             "Description": "Application that is associated with PCTEL modems and is needed for the functioning of those modems.",
  2395.             "Company": "PCTEL",
  2396.             "SysProcess": "No",
  2397.             "SecurityRisk": "No",
  2398.             "Errors": "N/A",
  2399.             "Status": 0
  2400.         },
  2401.         {
  2402.             "PName": "qserver",
  2403.             "PAltName": "qserver.exe",
  2404.             "Name": "NAV CE Server/Client - Symantec Central Quarantine",
  2405.             "Description": "Application that is associated with Norton and is used to accept infected files from servers and clients and communicates with Quarantine Console.",
  2406.             "Company": "Symantec Corporation",
  2407.             "SysProcess": "No",
  2408.             "SecurityRisk": "No",
  2409.             "Errors": "N/A",
  2410.             "Status": 0
  2411.         },
  2412.         {
  2413.             "PName": "qttask",
  2414.             "PAltName": "qttask.exe",
  2415.             "Name": "Quick Time Tray Icon",
  2416.             "Description": "System tray bar application for Apple QuickTime software that allows a user to access software from the system tray.",
  2417.             "Company": "Apple Computer, Inc.",
  2418.             "SysProcess": "No",
  2419.             "SecurityRisk": "No",
  2420.             "Errors": "N/A",
  2421.             "Status": 0
  2422.         },
  2423.         {
  2424.             "PName": "ramsys",
  2425.             "PAltName": "ramsys.exe",
  2426.             "Name": "Advanced StartUp Manager",
  2427.             "Description": "Application that allows a user to control system startup programs. By using the registry, Startup folders in the Start menu and Win.ini file, the application gives list of all programs that are configured to start on boot up. A user can enable, disable, or delete an application from that list.",
  2428.             "Company": "Rayslab, Inc.",
  2429.             "SysProcess": "No",
  2430.             "SecurityRisk": "No",
  2431.             "Errors": "N/A",
  2432.             "Status": 0
  2433.         },
  2434.         {
  2435.             "PName": "ray",
  2436.             "PAltName": "ray.exe",
  2437.             "Name": "Ray",
  2438.             "Description": "Application that hijacks the browser home page and re-directs browsers to adult content web sites.",
  2439.             "Company": "N/A",
  2440.             "SysProcess": "No",
  2441.             "SecurityRisk": "Yes",
  2442.             "Errors": "N/A",
  2443.             "Status": 0
  2444.         },
  2445.         {
  2446.             "PName": "rb32",
  2447.             "PAltName": "rb32.exe",
  2448.             "Name": "Rrb32",
  2449.             "Description": "Variant of the RapidBlaster parasite that runs as a task at Windows start-up. The application downloads advertising from the Internet and displays it periodically.",
  2450.             "Company": "N/A",
  2451.             "SysProcess": "No",
  2452.             "SecurityRisk": "Yes",
  2453.             "Errors": "N/A",
  2454.             "Status": 0
  2455.         },
  2456.         {
  2457.             "PName": "rcsync",
  2458.             "PAltName": "rcsync.exe",
  2459.             "Name": "Rcsync",
  2460.             "Description": "Related to PrizeSurfer. PrizeSurfer is stealth-installed malware that automatically enters you to win cash and prizes when you surf and shop on the web. This program can show different popup windows and can redirect you to different web sites. This may cause a problem with your security and privacy.",
  2461.             "Company": "N/A",
  2462.             "SysProcess": "No",
  2463.             "SecurityRisk": "Yes",
  2464.             "Errors": "N/A",
  2465.             "Status": 0
  2466.         },
  2467.         {
  2468.             "PName": "realplay",
  2469.             "PAltName": "realplay.exe",
  2470.             "Name": "Real Player",
  2471.             "Description": "System tray icon for RealPlayer. Real Player is a media player used to open and play music, sound and video files in Real Media Format. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling SmartCenter with Preferences",
  2472.             "Company": "Real Networks",
  2473.             "SysProcess": "No",
  2474.             "SecurityRisk": "No",
  2475.             "Errors": "N/A",
  2476.             "Status": 0
  2477.         },
  2478.         {
  2479.             "PName": "realsched",
  2480.             "PAltName": "realsched.exe",
  2481.             "Name": "RealNetworks Scheduler",
  2482.             "Description": "Application that is a scheduler program for the RealOne player that prompts for update.",
  2483.             "Company": "Real Networks",
  2484.             "SysProcess": "No",
  2485.             "SecurityRisk": "No",
  2486.             "Errors": "N/A",
  2487.             "Status": 0
  2488.         },
  2489.         {
  2490.             "PName": "reboot",
  2491.             "PAltName": "reboot.exe",
  2492.             "Name": "REBOOT",
  2493.             "Description": "Small Dos based application used to reboot the computer. Users can set delays for reboots through the command line switch.",
  2494.             "Company": "Top Cat Computing",
  2495.             "SysProcess": "No",
  2496.             "SecurityRisk": "No",
  2497.             "Errors": "N/A",
  2498.             "Status": 0
  2499.         },
  2500.         {
  2501.             "PName": "regedit",
  2502.             "PAltName": "regedit.exe",
  2503.             "Name": "Registry Editor",
  2504.             "Description": "Application that is used to change settings in the system registry. This application contains information about how your computer runs and what software is installed on the computer.",
  2505.             "Company": "Microsoft Corp.",
  2506.             "SysProcess": "No",
  2507.             "SecurityRisk": "No",
  2508.             "Errors": "N/A",
  2509.             "Status": 0
  2510.         },
  2511.         {
  2512.             "PName": "regsvc",
  2513.             "PAltName": "regsvc.exe",
  2514.             "Name": "Remote Registry Service",
  2515.             "Description": "A service that allows access to the Windows registry from remote computers. The service runs on Windows 2000 Server and Advanced Server. Whenever you install Microsoft software, such as SQL on Windows 2000 Server, and your setup program needs to write keys to the registry, the setup program interacts with the Remote registry Service (REGSVC.EXE) and the Remote registry Service does the actual writing of the registry keys. This background service is also required if you intend to edit the registry from a remote computer using Windows 2000 Remote Administration facilities.",
  2516.             "Company": "Microsoft Corp.",
  2517.             "SysProcess": "Yes",
  2518.             "SecurityRisk": "No",
  2519.             "Errors": "N/A",
  2520.             "Status": 0
  2521.         },
  2522.         {
  2523.             "PName": "regsvr32",
  2524.             "PAltName": "regsvr32.exe",
  2525.             "Name": "Regsvr32",
  2526.             "Description": "Application that is used to register dynamic-link libraries and ActiveX controls in the registry.",
  2527.             "Company": "Microsoft Corp.",
  2528.             "SysProcess": "Yes",
  2529.             "SecurityRisk": "No",
  2530.             "Errors": "N/A",
  2531.             "Status": 0
  2532.         },
  2533.         {
  2534.             "PName": "rnaapp",
  2535.             "PAltName": "rnaapp.exe",
  2536.             "Name": "Windows Modem Connection",
  2537.             "Description": "Windows Dial-Up Networking application that handles dial-up modem connections. RNAAPP only appears in your Task List if your computer tries or tried to dial out at some stage or if the computer is waiting for an in-bound connection using Dial-Up Networking.",
  2538.             "Company": "Microsoft Corp.",
  2539.             "SysProcess": "Yes",
  2540.             "SecurityRisk": "No",
  2541.             "Errors": "N/A",
  2542.             "Status": 0
  2543.         },
  2544.         {
  2545.             "PName": "rnathchk",
  2546.             "PAltName": "rnathchk.exe",
  2547.             "Name": "Rnathchk",
  2548.             "Description": "Part of Real Networks RealOne Player.",
  2549.             "Company": "Real Networks",
  2550.             "SysProcess": "No",
  2551.             "SecurityRisk": "No",
  2552.             "Errors": "N/A",
  2553.             "Status": 0
  2554.         },
  2555.         {
  2556.             "PName": "rndal",
  2557.             "PAltName": "rndal.exe",
  2558.             "Name": "Rndal",
  2559.             "Description": "Background application associated with Real Networks RealOne Player.",
  2560.             "Company": "Real Networks",
  2561.             "SysProcess": "No",
  2562.             "SecurityRisk": "No",
  2563.             "Errors": "N/A",
  2564.             "Status": 0
  2565.         },
  2566.         {
  2567.             "PName": "rpcss",
  2568.             "PAltName": "rpcss.exe",
  2569.             "Name": "Remote Procedure Call Services",
  2570.             "Description": "Application that allows other programs to call publicly declared procedures over a network. This application becomes a crucial component for other network related Microsoft software.",
  2571.             "Company": "Microsoft Corp.",
  2572.             "SysProcess": "Yes",
  2573.             "SecurityRisk": "No",
  2574.             "Errors": "N/A",
  2575.             "Status": 0
  2576.         },
  2577.         {
  2578.             "PName": "rtvscan",
  2579.             "PAltName": "rtvscan.exe",
  2580.             "Name": "Real Time Virus Scan service",
  2581.             "Description": "Application that is associated with Norton Anti-Virus that provides a real-time virus scan service. It also helps to keep in touch with the Symantec System Center.",
  2582.             "Company": "Symantec Corporation",
  2583.             "SysProcess": "No",
  2584.             "SecurityRisk": "No",
  2585.             "Errors": "N/A",
  2586.             "Status": 0
  2587.         },
  2588.         {
  2589.             "PName": "rulaunch",
  2590.             "PAltName": "rulaunch.exe",
  2591.             "Name": "Rulaunch",
  2592.             "Description": "Background application used to download Instant Updater for McAfee VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products whenever a user connects to the Internet.",
  2593.             "Company": "Network Associates, Inc.",
  2594.             "SysProcess": "No",
  2595.             "SecurityRisk": "No",
  2596.             "Errors": "N/A",
  2597.             "Status": 0
  2598.         },
  2599.         {
  2600.             "PName": "run32dll",
  2601.             "PAltName": "run32dll.exe",
  2602.             "Name": "PAL PC Spy",
  2603.             "Description": "A key recorder and screen capture utility that controls and monitors everything that happens on your computer and online.",
  2604.             "Company": "RF1 Systems",
  2605.             "SysProcess": "No",
  2606.             "SecurityRisk": "Yes",
  2607.             "Errors": "N/A",
  2608.             "Status": 0
  2609.         },
  2610.         {
  2611.             "PName": "rundll",
  2612.             "PAltName": "rundll.exe",
  2613.             "Name": "Rundll",
  2614.             "Description": "Added to the system as a result of the LOXOSCAM virus that is a backdoor Trojan that allows a hacker to gain access to the computer. The application is written in the Delphi programming language.",
  2615.             "Company": "N/A",
  2616.             "SysProcess": "No",
  2617.             "SecurityRisk": "Yes",
  2618.             "Errors": "N/A",
  2619.             "Status": 0
  2620.         },
  2621.         {
  2622.             "PName": "rundll16",
  2623.             "PAltName": "rundll16.exe",
  2624.             "Name": "Rundll16",
  2625.             "Description": "Added to the system as a result of the Sdbot.F virus that is a Backdoor Trojan that is a variant of Backdoor.Sdbot. The application allows a hacker to control your computer by using the Internet Relay Chat (IRC).",
  2626.             "Company": "N/A",
  2627.             "SysProcess": "No",
  2628.             "SecurityRisk": "Yes",
  2629.             "Errors": "N/A",
  2630.             "Status": 0
  2631.         },
  2632.         {
  2633.             "PName": "rundll32",
  2634.             "PAltName": "rundll32.exe",
  2635.             "Name": "Rundll32",
  2636.             "Description": "Microsoft \"Run a DLL as an App\". RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.",
  2637.             "Company": "Microsoft Corp.",
  2638.             "SysProcess": "Yes",
  2639.             "SecurityRisk": "No",
  2640.             "Errors": "N/A",
  2641.             "Status": 0
  2642.         },
  2643.         {
  2644.             "PName": "runonce",
  2645.             "PAltName": "runonce.exe",
  2646.             "Name": "Runonce",
  2647.             "Description": "Known as the Microsoft \"Run Once\" wrapper. The application is a program that developers can use as part of their installation procedures to ensure, for example, that after the first reboot after the software installation, some additional configuration program runs once, and once only, to complete the installation.",
  2648.             "Company": "Microsoft Corp.",
  2649.             "SysProcess": "Yes",
  2650.             "SecurityRisk": "No",
  2651.             "Errors": "N/A",
  2652.             "Status": 0
  2653.         },
  2654.         {
  2655.             "PName": "ruxdll32",
  2656.             "PAltName": "ruxdll32.exe",
  2657.             "Name": "Ruxdll32",
  2658.             "Description": "Added to the system as a result of the MAPSON.D virus. W32.Mapson.D.Worm is a mass-mailing worm that sends itself to all the contacts in the MSN Messenger contact list and also attempts to spread through file-sharing networks and ICQ. The worm also attempts to terminate some popular antivirus, firewall, and system-monitoring programs.",
  2659.             "Company": "N/A",
  2660.             "SysProcess": "No",
  2661.             "SecurityRisk": "Yes",
  2662.             "Errors": "N/A",
  2663.             "Status": 0
  2664.         },
  2665.         {
  2666.             "PName": "sage",
  2667.             "PAltName": "sage.exe",
  2668.             "Name": "SystemAgent",
  2669.             "Description": "Application that automatically performs system tuning tasks like disk optimization and error correction. The application can also run any application at prescheduled times.",
  2670.             "Company": "Microsoft Corp.",
  2671.             "SysProcess": "Yes",
  2672.             "SecurityRisk": "No",
  2673.             "Errors": "N/A",
  2674.             "Status": 0
  2675.         },
  2676.         {
  2677.             "PName": "sagent2",
  2678.             "PAltName": "sagent2.exe",
  2679.             "Name": "Sagent2",
  2680.             "Description": "Application that is used to detect the presence of a printer port and whether it is set to ECP or EPP. After detection, the application sets options in the printer software.",
  2681.             "Company": "Epson",
  2682.             "SysProcess": "No",
  2683.             "SecurityRisk": "No",
  2684.             "Errors": "N/A",
  2685.             "Status": 0
  2686.         },
  2687.         {
  2688.             "PName": "sahagent",
  2689.             "PAltName": "sahagent.exe",
  2690.             "Name": "Sahagent",
  2691.             "Description": "Application that collects and combines user Internet browsing behavior and sends it to ShopAtHomeSelect servers.",
  2692.             "Company": "ShopAtHomeSelect.com",
  2693.             "SysProcess": "No",
  2694.             "SecurityRisk": "Yes",
  2695.             "Errors": "N/A",
  2696.             "Status": 0
  2697.         },
  2698.         {
  2699.             "PName": "save",
  2700.             "PAltName": "save.exe",
  2701.             "Name": "Save",
  2702.             "Description": "Application that provides users with coupons and offers while browsing the Internet. The application captures the web site addresses and search words and displays popup advertising related to sites that the user visited.",
  2703.             "Company": "WhenU.com",
  2704.             "SysProcess": "No",
  2705.             "SecurityRisk": "Yes",
  2706.             "Errors": "N/A",
  2707.             "Status": 0
  2708.         },
  2709.         {
  2710.             "PName": "savenow",
  2711.             "PAltName": "savenow.exe",
  2712.             "Name": "Savenow",
  2713.             "Description": "Application that provides users with crucial coupons and offers while browsing the Internet. The application captures the web site addresses and search words and displays popup advertising related to sites that the user visited.",
  2714.             "Company": "WhenU.com",
  2715.             "SysProcess": "No",
  2716.             "SecurityRisk": "Yes",
  2717.             "Errors": "N/A",
  2718.             "Status": 0
  2719.         },
  2720.         {
  2721.             "PName": "sbhc",
  2722.             "PAltName": "sbhc.exe",
  2723.             "Name": "Sbhc",
  2724.             "Description": "Application that is an Internet Explorer plug-in and claims to enhance user web browser functionality.",
  2725.             "Company": "Gigatech Software, Inc.",
  2726.             "SysProcess": "No",
  2727.             "SecurityRisk": "No",
  2728.             "Errors": "N/A",
  2729.             "Status": 0
  2730.         },
  2731.         {
  2732.             "PName": "sc",
  2733.             "PAltName": "sc.exe",
  2734.             "Name": "Watchdog 2.0 Software",
  2735.             "Description": "Main executable for Watchdog 2.0 Software that is a monitoring program. The application has many features like Key Log Capture., Instant Messenger Capture, for MSN, AOL, and Yahoo, and Application Log Capture.",
  2736.             "Company": "Rhombus Technologies.",
  2737.             "SysProcess": "No",
  2738.             "SecurityRisk": "Yes",
  2739.             "Errors": "N/A",
  2740.             "Status": 0
  2741.         },
  2742.         {
  2743.             "PName": "scam32",
  2744.             "PAltName": "scam32.exe",
  2745.             "Name": "Scam32",
  2746.             "Description": "Added to the system as a result of the SIRCAM virus that contains its own SMTP engine and propagates in a manner similar to the W32.Magistr worm.",
  2747.             "Company": "N/A",
  2748.             "SysProcess": "No",
  2749.             "SecurityRisk": "Yes",
  2750.             "Errors": "N/A",
  2751.             "Status": 0
  2752.         },
  2753.         {
  2754.             "PName": "scanregw",
  2755.             "PAltName": "scanregw.exe",
  2756.             "Name": "Microsoft├ås Registry Checker.",
  2757.             "Description": "Application that is used to check the integrity of the Windows registry. The application starts on boot up and checks the registry for errors. On finding major errors, the application informs the user to restore from backup; otherwise, the application fixes minor errors.",
  2758.             "Company": "Microsoft Corp.",
  2759.             "SysProcess": "Yes",
  2760.             "SecurityRisk": "No",
  2761.             "Errors": "N/A",
  2762.             "Status": 0
  2763.         },
  2764.         {
  2765.             "PName": "scardsvr",
  2766.             "PAltName": "scardsvr.exe",
  2767.             "Name": "Smartcard-Ressource server",
  2768.             "Description": "Application that provides a facility for Smart Card authentication on local or network computers.",
  2769.             "Company": "Microsoft Corp.",
  2770.             "SysProcess": "Yes",
  2771.             "SecurityRisk": "No",
  2772.             "Errors": "N/A",
  2773.             "Status": 0
  2774.         },
  2775.         {
  2776.             "PName": "schwizex",
  2777.             "PAltName": "schwizex.exe",
  2778.             "Name": "SCHWIZEX",
  2779.             "Description": "Application that is used to track the changes to the registry, INI files, system files, hardware, network connections, and operating system versions. The application also offers a restore function.",
  2780.             "Company": "Imagine LAN, Inc",
  2781.             "SysProcess": "No",
  2782.             "SecurityRisk": "No",
  2783.             "Errors": "N/A",
  2784.             "Status": 0
  2785.         },
  2786.         {
  2787.             "PName": "scm",
  2788.             "PAltName": "scm.exe",
  2789.             "Name": "Service Control Manager",
  2790.             "Description": "Application that is used to manage all services running on windows. The application provides functionality to stop start, pause, and restart the service. Also offers to change and set the startup type, both automatic and manual, for the service.",
  2791.             "Company": "Microsoft Corp.",
  2792.             "SysProcess": "Yes",
  2793.             "SecurityRisk": "No",
  2794.             "Errors": "N/A",
  2795.             "Status": 0
  2796.         },
  2797.         {
  2798.             "PName": "scrsvr",
  2799.             "PAltName": "scrsvr.exe",
  2800.             "Name": "Scrsvr",
  2801.             "Description": "Application that is the OPASERV virus. The worm attempts to spread over network shares by copying itself to the Windows directory of remotely accessible computers as SCRSVR.EXE.",
  2802.             "Company": "N/A",
  2803.             "SysProcess": "No",
  2804.             "SecurityRisk": "Yes",
  2805.             "Errors": "N/A",
  2806.             "Status": 0
  2807.         },
  2808.         {
  2809.             "PName": "scvhost",
  2810.             "PAltName": "scvhost.exe",
  2811.             "Name": "Scvhost",
  2812.             "Description": "Added to the system as a result of the W32/Agobot-S virus that is an IRC backdoor Trojan and network worm. W32/Agobot-S copies itself to network shares with weak passwords and attempts to spread to computers using the DCOM Rcomputer and the Rcomputer locator vulnerabilities.",
  2813.             "Company": "N/A",
  2814.             "SysProcess": "No",
  2815.             "SecurityRisk": "Yes",
  2816.             "Errors": "N/A",
  2817.             "Status": 0
  2818.         },
  2819.         {
  2820.             "PName": "scvhost",
  2821.             "PAltName": "scvhost.exe",
  2822.             "Name": "Scvhost",
  2823.             "Description": "Added to the system as a result of the W32/Agobot-S virus that is an IRC backdoor Trojan and network worm. W32/Agobot-S copies itself to network shares with weak passwords and attempts to spread to computers using the DCOM Rcomputer and the Rcomputer locator vulnerabilities.",
  2824.             "Company": "N/A",
  2825.             "SysProcess": "No",
  2826.             "SecurityRisk": "Yes",
  2827.             "Errors": "N/A",
  2828.             "Status": 0
  2829.         },
  2830.         {
  2831.             "PName": "sentry",
  2832.             "PAltName": "sentry.exe",
  2833.             "Name": "SENTRY",
  2834.             "Description": "Application that allows web site owners to determine the geographic location, connection speed and detailed demographics of every visitor to a web site.",
  2835.             "Company": "ipinsight.com",
  2836.             "SysProcess": "No",
  2837.             "SecurityRisk": "No",
  2838.             "Errors": "N/A",
  2839.             "Status": 0
  2840.         },
  2841.         {
  2842.             "PName": "service",
  2843.             "PAltName": "service.exe",
  2844.             "Name": "Service",
  2845.             "Description": "Added to the system as a result of the Worm.Win32.Raleka virus.",
  2846.             "Company": "N/A",
  2847.             "SysProcess": "No",
  2848.             "SecurityRisk": "Yes",
  2849.             "Errors": "N/A",
  2850.             "Status": 0
  2851.         },
  2852.         {
  2853.             "PName": "services",
  2854.             "PAltName": "services.exe",
  2855.             "Name": "Windows Service Controller",
  2856.             "Description": "Application that is used only in Windows NT 4, 2000, and XP for starting, stopping, and interacting with system services.",
  2857.             "Company": "Microsoft Corp.",
  2858.             "SysProcess": "Yes",
  2859.             "SecurityRisk": "No",
  2860.             "Errors": "N/A",
  2861.             "Status": 0
  2862.         },
  2863.         {
  2864.             "PName": "setup",
  2865.             "PAltName": "setup.exe",
  2866.             "Name": "Setup",
  2867.             "Description": "Common setup application for software.",
  2868.             "Company": "N/A",
  2869.             "SysProcess": "No",
  2870.             "SecurityRisk": "No",
  2871.             "Errors": "N/A",
  2872.             "Status": 0
  2873.         },
  2874.         {
  2875.             "PName": "sgtray",
  2876.             "PAltName": "sgtray.exe",
  2877.             "Name": "StorageGuard Tray Application",
  2878.             "Description": "System tray bar application that is used to remind the user to back up files. This free utility works with BackupMyPC, Simple Backup, and MS Backup software.",
  2879.             "Company": "VERITAS Software Corporation.",
  2880.             "SysProcess": "No",
  2881.             "SecurityRisk": "No",
  2882.             "Errors": "N/A",
  2883.             "Status": 0
  2884.         },
  2885.         {
  2886.             "PName": "showbehind",
  2887.             "PAltName": "showbehind.exe",
  2888.             "Name": "Showbehind",
  2889.             "Description": "Application that displays advertisements.",
  2890.             "Company": "MicroSmarts Enterprise",
  2891.             "SysProcess": "No",
  2892.             "SecurityRisk": "Yes",
  2893.             "Errors": "N/A",
  2894.             "Status": 0
  2895.         },
  2896.         {
  2897.             "PName": "smc",
  2898.             "PAltName": "smc.exe",
  2899.             "Name": "Sygate Firewall",
  2900.             "Description": "Sygate Secure Enterprise that extends the traditional network security solutions, such as firewall and IDS to the endpoint, and enforces the fact that each device on the network is running the correct security policy.",
  2901.             "Company": "Sygate, Inc",
  2902.             "SysProcess": "No",
  2903.             "SecurityRisk": "No",
  2904.             "Errors": "N/A",
  2905.             "Status": 0
  2906.         },
  2907.         {
  2908.             "PName": "smss",
  2909.             "PAltName": "smss.exe",
  2910.             "Name": "Session Manager Subsystem",
  2911.             "Description": "Application that is used to start, manage, and delete user sessions or client sessions under Terminal Server.",
  2912.             "Company": "Microsoft Corp.",
  2913.             "SysProcess": "Yes",
  2914.             "SecurityRisk": "No",
  2915.             "Errors": "N/A",
  2916.             "Status": 0
  2917.         },
  2918.         {
  2919.             "PName": "sndvol32",
  2920.             "PAltName": "sndvol32.exe",
  2921.             "Name": "Windows Volume Control",
  2922.             "Description": "Windows Volume Control process, which is used to control the volume of the sound card and can usually be access from the system tray bar.",
  2923.             "Company": "Microsoft Corp.",
  2924.             "SysProcess": "No",
  2925.             "SecurityRisk": "No",
  2926.             "Errors": "N/A",
  2927.             "Status": 0
  2928.         },
  2929.         {
  2930.             "PName": "snmp",
  2931.             "PAltName": "snmp.exe",
  2932.             "Name": "Microsoft SNMP Agent",
  2933.             "Description": "Windows Simple Network Managment Protocol (SNMP) agent, a proxy that listens for requests and hands them off to the appropriate network provider.",
  2934.             "Company": "Microsoft Corp.",
  2935.             "SysProcess": "Yes",
  2936.             "SecurityRisk": "No",
  2937.             "Errors": "N/A",
  2938.             "Status": 0
  2939.         },
  2940.         {
  2941.             "PName": "snmptrap",
  2942.             "PAltName": "snmptrap.exe",
  2943.             "Name": "SNMP Trap Service",
  2944.             "Description": "A trap message that was generated by local or remote MP agents. The service receives and passes these on to SNMP management programs on the computer.",
  2945.             "Company": "Microsoft Corp.",
  2946.             "SysProcess": "Yes",
  2947.             "SecurityRisk": "No",
  2948.             "Errors": "N/A",
  2949.             "Status": 0
  2950.         },
  2951.         {
  2952.             "PName": "soap",
  2953.             "PAltName": "soap.exe",
  2954.             "Name": "System Soap Pro",
  2955.             "Description": "System Soap Pro Internet cleaning software that bundles foistware like HTTPER and Zipclix.",
  2956.             "Company": "System Soap",
  2957.             "SysProcess": "No",
  2958.             "SecurityRisk": "Yes",
  2959.             "Errors": "N/A",
  2960.             "Status": 0
  2961.         },
  2962.         {
  2963.             "PName": "soundman",
  2964.             "PAltName": "soundman.exe",
  2965.             "Name": "Avance Sound Effect Manager",
  2966.             "Description": "System tray bar application that provides support to control the Sony/Philips Digital Interface input and output. The application also allows a user to change the function of the input and output ports of a soundcard from Line-In, Line-Out, and MIC to Front, Rear, and Centre speakers.",
  2967.             "Company": "Realtek Avance Logic Inc.",
  2968.             "SysProcess": "No",
  2969.             "SecurityRisk": "No",
  2970.             "Errors": "N/A",
  2971.             "Status": 0
  2972.         },
  2973.         {
  2974.             "PName": "spoler",
  2975.             "PAltName": "spoler.exe",
  2976.             "Name": "Spoler",
  2977.             "Description": "Added to the system as a result of the RANDEX.J virus, a network-aware worm. This worm receives instructions from an IRC channel on a specific IRC server. One of these commands starts the spread of the worm across the network.",
  2978.             "Company": "N/A",
  2979.             "SysProcess": "No",
  2980.             "SecurityRisk": "Yes",
  2981.             "Errors": "N/A",
  2982.             "Status": 0
  2983.         },
  2984.         {
  2985.             "PName": "spool32",
  2986.             "PAltName": "spool32.exe",
  2987.             "Name": "Printer Spooler",
  2988.             "Description": "Application that handles the spooling of print jobs transparently. It works only when the user configures the printer to spool print jobs.",
  2989.             "Company": "Microsoft Corp.",
  2990.             "SysProcess": "Yes",
  2991.             "SecurityRisk": "No",
  2992.             "Errors": "N/A",
  2993.             "Status": 0
  2994.         },
  2995.         {
  2996.             "PName": "spoolss",
  2997.             "PAltName": "spoolss.exe",
  2998.             "Name": "Printer Spooler Subsystem",
  2999.             "Description": "Windows Printer Spooler Subsystem, a service that controls de-spooling of printer data from disk to printer.",
  3000.             "Company": "Microsoft Corp.",
  3001.             "SysProcess": "Yes",
  3002.             "SecurityRisk": "No",
  3003.             "Errors": "N/A",
  3004.             "Status": 0
  3005.         },
  3006.         {
  3007.             "PName": "spoolsv",
  3008.             "PAltName": "spoolsv.exe",
  3009.             "Name": "Printer Spooler Service",
  3010.             "Description": "Windows Printer Spooler, a service that stores printer jobs and forwards them to the printer when it is ready.",
  3011.             "Company": "Microsoft Corp.",
  3012.             "SysProcess": "Yes",
  3013.             "SecurityRisk": "No",
  3014.             "Errors": "N/A",
  3015.             "Status": 0
  3016.         },
  3017.         {
  3018.             "PName": "srng",
  3019.             "PAltName": "srng.exe",
  3020.             "Name": "Search hijacker",
  3021.             "Description": "Also called ShopNav. This application is a search hijacker implemented as an Internet Explorer Browser Helper Object, with an updater process run at startup. The application tracks and hijacks the following: Address bar searches, the Search explorer bar, unknown domains, and, in some variants, non-www server names entered into the address bar without the preceding 'http://' will be sent to Srng controlling server www.srng.net, that redirects to a search service at apps.webservicehost.com.",
  3022.             "Company": "ShopNav",
  3023.             "SysProcess": "No",
  3024.             "SecurityRisk": "Yes",
  3025.             "Errors": "N/A",
  3026.             "Status": 0
  3027.         },
  3028.         {
  3029.             "PName": "srvany",
  3030.             "PAltName": "srvany.exe",
  3031.             "Name": "Srvany",
  3032.             "Description": "Application that is associated with Microsoft Windows NT 4, 2000, and XP Resource Kits and is used to run normal Windows applications as services.",
  3033.             "Company": "Microsoft Corp.",
  3034.             "SysProcess": "Yes",
  3035.             "SecurityRisk": "No",
  3036.             "Errors": "N/A",
  3037.             "Status": 0
  3038.         },
  3039.         {
  3040.             "PName": "ssdpsrv",
  3041.             "PAltName": "ssdpsrv.exe",
  3042.             "Name": "Ssdpsrv",
  3043.             "Description": "Application that provides Simple Service Discovery Protocol and General Event Notification Architecture services for the Universal Plug and Play functionality and is a component designed for the future generation of plug and play devices.",
  3044.             "Company": "Microsoft Corp.",
  3045.             "SysProcess": "No",
  3046.             "SecurityRisk": "No",
  3047.             "Errors": "N/A",
  3048.             "Status": 0
  3049.         },
  3050.         {
  3051.             "PName": "start",
  3052.             "PAltName": "start.exe",
  3053.             "Name": "Secret-Crush",
  3054.             "Description": "Hijacker application that may reset your browser home page and/or search settings to point to sites that you do not want.",
  3055.             "Company": "N/A",
  3056.             "SysProcess": "No",
  3057.             "SecurityRisk": "Yes",
  3058.             "Errors": "N/A",
  3059.             "Status": 0
  3060.         },
  3061.         {
  3062.             "PName": "starteak",
  3063.             "PAltName": "starteak.exe",
  3064.             "Name": "Starteak",
  3065.             "Description": "Application that provides easy access features for Compaq Easy Access Keyboard. A user can program those keyboard keys to perform specific tasks.",
  3066.             "Company": "Compaq",
  3067.             "SysProcess": "No",
  3068.             "SecurityRisk": "No",
  3069.             "Errors": "N/A",
  3070.             "Status": 0
  3071.         },
  3072.         {
  3073.             "PName": "stcloader",
  3074.             "PAltName": "stcloader.exe",
  3075.             "Name": "Stcloader",
  3076.             "Description": "Popup adware by 2ndThought software.",
  3077.             "Company": "2nd-Thought.com",
  3078.             "SysProcess": "No",
  3079.             "SecurityRisk": "Yes",
  3080.             "Errors": "N/A",
  3081.             "Status": 0
  3082.         },
  3083.         {
  3084.             "PName": "steam",
  3085.             "PAltName": "steam.exe",
  3086.             "Name": "Steam",
  3087.             "Description": "Program used to test update and patches for Half-Life Valve game.",
  3088.             "Company": "GameSpy Industries",
  3089.             "SysProcess": "No",
  3090.             "SecurityRisk": "No",
  3091.             "Errors": "N/A",
  3092.             "Status": 0
  3093.         },
  3094.         {
  3095.             "PName": "stimon",
  3096.             "PAltName": "stimon.exe",
  3097.             "Name": "Windows 98/ME├ås Still Image Monitor.",
  3098.             "Description": "Application that provides one-touch scanning for a scanner. The application is automatically started through registry settings.",
  3099.             "Company": "Microsoft Corp.",
  3100.             "SysProcess": "No",
  3101.             "SecurityRisk": "No",
  3102.             "Errors": "N/A",
  3103.             "Status": 0
  3104.         },
  3105.         {
  3106.             "PName": "stisvc",
  3107.             "PAltName": "stisvc.exe",
  3108.             "Name": "Still Image Service",
  3109.             "Description": "Still Image Service, which handles scanners and digital cameras and is installed by Windows if a scanner or camera is connected to the computer. This is the equivalent of STIMON.exe, but for Windows 2000 and XP.",
  3110.             "Company": "Microsoft Corp.",
  3111.             "SysProcess": "No",
  3112.             "SecurityRisk": "No",
  3113.             "Errors": "N/A",
  3114.             "Status": 0
  3115.         },
  3116.         {
  3117.             "PName": "studio",
  3118.             "PAltName": "studio.exe",
  3119.             "Name": "WinAmp",
  3120.             "Description": "Application used to play all common sound files.",
  3121.             "Company": "Nullsoft Inc.",
  3122.             "SysProcess": "No",
  3123.             "SecurityRisk": "No",
  3124.             "Errors": "N/A",
  3125.             "Status": 0
  3126.         },
  3127.         {
  3128.             "PName": "support",
  3129.             "PAltName": "support.exe",
  3130.             "Name": "Support",
  3131.             "Description": "Added to the system as a result of the W32.Akosw@mm virus. This virus is an email worm that spreads using its own SMTP engine. W32/Israz-A also targets the KaZaA file sharing utility. Upon execution, the worm creates copies of itself in the Windows system folder with the filenames vShell.exe and Win32.exe. The worm also creates copies of itself in the Windows temp folder using the filenames Fun.exe, FAQ.exe, Q322593.exe, Support.exe, ToolBar.exe, and Wizard.exe.",
  3132.             "Company": "N/A",
  3133.             "SysProcess": "No",
  3134.             "SecurityRisk": "Yes",
  3135.             "Errors": "N/A",
  3136.             "Status": 0
  3137.         },
  3138.         {
  3139.             "PName": "svc",
  3140.             "PAltName": "svc.exe",
  3141.             "Name": "Svc",
  3142.             "Description": "Hijacker, Clientman parasite variant, redirecting to madfinder.com. Detected by Symantec as the MADFIND virus.",
  3143.             "Company": "N/A",
  3144.             "SysProcess": "No",
  3145.             "SecurityRisk": "Yes",
  3146.             "Errors": "N/A",
  3147.             "Status": 0
  3148.         },
  3149.         {
  3150.             "PName": "svchost",
  3151.             "PAltName": "svchost.exe",
  3152.             "Name": "Service Host Process",
  3153.             "Description": "Application that works as a host process for services that run from dynamic link libraries.",
  3154.             "Company": "Microsoft Corp.",
  3155.             "SysProcess": "Yes",
  3156.             "SecurityRisk": "No",
  3157.             "Errors": "N/A",
  3158.             "Status": 0
  3159.         },
  3160.         {
  3161.             "PName": "svchosts",
  3162.             "PAltName": "svchosts.exe",
  3163.             "Name": "Svchosts",
  3164.             "Description": "Added to the system as a result of the Sdbot-N virus which is a backdoor Trojan that allows a remote user unauthorized access and control over the computer with IRC channels. The application runs in the background as a service process and attempts to connect to an IRC server and join a specific channel. The virus then listens on the IRC channel for specific commands and carries out the appropriate actions.",
  3165.             "Company": "N/A",
  3166.             "SysProcess": "No",
  3167.             "SecurityRisk": "Yes",
  3168.             "Errors": "N/A",
  3169.             "Status": 0
  3170.         },
  3171.         {
  3172.             "PName": "svshost",
  3173.             "PAltName": "svshost.exe",
  3174.             "Name": "Svshost",
  3175.             "Description": "Added to the system as a result of Worm.P2P.Spybot.gen virus. This virus spreads through peer-to-peer (P2P) sharing, rather than through open Windows file shares. The infected systems are scanned for unprotected Windows file shares.",
  3176.             "Company": "N/A",
  3177.             "SysProcess": "No",
  3178.             "SecurityRisk": "Yes",
  3179.             "Errors": "N/A",
  3180.             "Status": 0
  3181.         },
  3182.         {
  3183.             "PName": "svshost",
  3184.             "PAltName": "svshost.exe",
  3185.             "Name": "Svshost",
  3186.             "Description": "Added to the system as a result of Worm.P2P.Spybot.gen virus. This virus spreads through peer-to-peer (P2P) sharing, rather than through open Windows file shares. The infected systems are scanned for unprotected Windows file shares.",
  3187.             "Company": "N/A",
  3188.             "SysProcess": "No",
  3189.             "SecurityRisk": "Yes",
  3190.             "Errors": "N/A",
  3191.             "Status": 0
  3192.         },
  3193.         {
  3194.             "PName": "system32",
  3195.             "PAltName": "system32.exe",
  3196.             "Name": "System32",
  3197.             "Description": "Added as a result of the MARI , SYSXXX and other viruses. Mari is an Internet worm spreading with emails as an attached .exe file. Whereas SysXXX is a backdoor Trojan program that was written in the Delphi language, Backdoor.SysXXX gives a hacker complete access to your computer. By default, the Trojan opens two TCP ports, 31,556 and 6,051, that it uses to communicate with the hacker. The application notifies the hacker through email or ICQ. Also, Backdoor.SysXXX attempts to terminate various security products and system monitoring tools.",
  3198.             "Company": "N/A",
  3199.             "SysProcess": "No",
  3200.             "SecurityRisk": "Yes",
  3201.             "Errors": "N/A",
  3202.             "Status": 0
  3203.         },
  3204.         {
  3205.             "PName": "system",
  3206.             "PAltName": "system.exe",
  3207.             "Name": "System",
  3208.             "Description": "Net Controller 1.08 Trojan.",
  3209.             "Company": "N/A",
  3210.             "SysProcess": "No",
  3211.             "SecurityRisk": "Yes",
  3212.             "Errors": "N/A",
  3213.             "Status": 0
  3214.         },
  3215.         {
  3216.             "PName": "system",
  3217.             "PAltName": "system",
  3218.             "Name": "Windows System Process",
  3219.             "Description": "Microsoft Windows System Process.",
  3220.             "Company": "Microsoft Corp.",
  3221.             "SysProcess": "Yes",
  3222.             "SecurityRisk": "No",
  3223.             "Errors": "N/A",
  3224.             "Status": 0
  3225.         },
  3226.         {
  3227.             "PName": "system process",
  3228.             "PAltName": "system process",
  3229.             "Name": "Windows Memory Handler System Process",
  3230.             "Description": "The Windows Memory Handler System Process zeroes any free pages of RAM and is the only process with priority 0",
  3231.             "Company": "Microsoft Corp.",
  3232.             "SysProcess": "Yes",
  3233.             "SecurityRisk": "No",
  3234.             "Errors": "N/A",
  3235.             "Status": 0
  3236.         },
  3237.         {
  3238.             "PName": "systray",
  3239.             "PAltName": "systray.exe",
  3240.             "Name": "System Tray Services",
  3241.             "Description": "Background application that runs the Windows system tray, which provides space to display the clock time and icons installed by other applications.",
  3242.             "Company": "Microsoft Corp.",
  3243.             "SysProcess": "Yes",
  3244.             "SecurityRisk": "No",
  3245.             "Errors": "N/A",
  3246.             "Status": 0
  3247.         },
  3248.         {
  3249.             "PName": "tapisrv",
  3250.             "PAltName": "tapisrv.exe",
  3251.             "Name": "TAPI Service",
  3252.             "Description": "Background service that provides Windows Telephony (TAPI) Support in Windows 98 and Windows NT 4. The service is an essential task used by all telephony services, such as dial-up networking through any type of modem, in these two operating systems.",
  3253.             "Company": "Microsoft Corp.",
  3254.             "SysProcess": "Yes",
  3255.             "SecurityRisk": "No",
  3256.             "Errors": "N/A",
  3257.             "Status": 0
  3258.         },
  3259.         {
  3260.             "PName": "taskmgr",
  3261.             "PAltName": "taskmgr.exe",
  3262.             "Name": "The Windows Task Manager.",
  3263.             "Description": "Application that displays all processes running on the system. The application is activated by pressing Ctrl+Alt+Del buttons on Windows NT 4, 2000, and XP.",
  3264.             "Company": "Microsoft Corp.",
  3265.             "SysProcess": "Yes",
  3266.             "SecurityRisk": "No",
  3267.             "Errors": "N/A",
  3268.             "Status": 0
  3269.         },
  3270.         {
  3271.             "PName": "taskmon",
  3272.             "PAltName": "taskmon.exe",
  3273.             "Name": "Windows Task Optimizer",
  3274.             "Description": "Application that is used to collect information from hard disksby monitoring the most frequently used programs. This information is used by the Disk Defragmenter program, so that the programs and files that the user accesses the most will load faster.",
  3275.             "Company": "Microsoft Corp.",
  3276.             "SysProcess": "Yes",
  3277.             "SecurityRisk": "No",
  3278.             "Errors": "N/A",
  3279.             "Status": 0
  3280.         },
  3281.         {
  3282.             "PName": "taskswitch",
  3283.             "PAltName": "taskswitch.exe",
  3284.             "Name": "Microsoft TaskSwitch Utility",
  3285.             "Description": "Application that displays a preview window of each program that the user can switch to by pressing Alt+Tab on the keyboard.",
  3286.             "Company": "Microsoft Corp.",
  3287.             "SysProcess": "Yes",
  3288.             "SecurityRisk": "No",
  3289.             "Errors": "N/A",
  3290.             "Status": 0
  3291.         },
  3292.         {
  3293.             "PName": "tcpsvcs",
  3294.             "PAltName": "tcpsvcs.exe",
  3295.             "Name": "TCP/IP Services",
  3296.             "Description": "Application that provides network and Internet communication through TCP/IP. Started only when the user configures special TCP/IP services, such as the DHCP Server.",
  3297.             "Company": "Microsoft Corp.",
  3298.             "SysProcess": "No",
  3299.             "SecurityRisk": "No",
  3300.             "Errors": "N/A",
  3301.             "Status": 0
  3302.         },
  3303.         {
  3304.             "PName": "teekids",
  3305.             "PAltName": "teekids.exe",
  3306.             "Name": "Teekids",
  3307.             "Description": "Indication of the Lovesan worm. This worm scans several IP networks to get access to port 135 (COM). The worm sends a buffer overrun request to vulnerable computers. The newly infected computer then initiates the command shell on TCP port 4444. Lovesan runs the thread that opens the connection on port 4444 and waits for the FTP 'get' request from the victim computer. The worm then forces the victim computer to send the 'FTP get' request. Thus the victim computer downloads the worm from the infected computer and runs it. The victim computer is now infected.",
  3308.             "Company": "N/A",
  3309.             "SysProcess": "No",
  3310.             "SecurityRisk": "Yes",
  3311.             "Errors": "N/A",
  3312.             "Status": 0
  3313.         },
  3314.         {
  3315.             "PName": "tfswctrl",
  3316.             "PAltName": "tfswctrl.exe",
  3317.             "Name": "DLA Packet Writing Software",
  3318.             "Description": "Application that is used to write data to CDs directly from Windows applications, without using the actual CD Writing software.",
  3319.             "Company": "Hewlett-Packard",
  3320.             "SysProcess": "No",
  3321.             "SecurityRisk": "No",
  3322.             "Errors": "N/A",
  3323.             "Status": 0
  3324.         },
  3325.         {
  3326.             "PName": "tgcmd",
  3327.             "PAltName": "tgcmd.exe",
  3328.             "Name": "Tgcmdprovidersbc",
  3329.             "Description": "Spyware from SupportSoft provided to manufacturers, such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech), and ISPs, such as Comcast, Cox and Charter (Pipeline Support Agent), that allows them to offer on-line support. This part ensures that software is installed correctly. Regarded as spyware as it has the ability to retrieve user information.",
  3330.             "Company": "SupportSoft, Inc",
  3331.             "SysProcess": "No",
  3332.             "SecurityRisk": "No",
  3333.             "Errors": "N/A",
  3334.             "Status": 0
  3335.         },
  3336.         {
  3337.             "PName": "tkbell",
  3338.             "PAltName": "tkbell.exe",
  3339.             "Name": "Tkbell",
  3340.             "Description": "Application that works as a scheduler and is loaded into the system along with RealOne Player.",
  3341.             "Company": "Real Networks",
  3342.             "SysProcess": "No",
  3343.             "SecurityRisk": "No",
  3344.             "Errors": "N/A",
  3345.             "Status": 0
  3346.         },
  3347.         {
  3348.             "PName": "trickler",
  3349.             "PAltName": "trickler.exe",
  3350.             "Name": "GAIN Trickler",
  3351.             "Description": "Gator Advertising and Informational Network (GAIN) that delivers online advertising and informational messages based on web sites that you view.",
  3352.             "Company": "The Gator Corporation",
  3353.             "SysProcess": "No",
  3354.             "SecurityRisk": "Yes",
  3355.             "Errors": "N/A",
  3356.             "Status": 0
  3357.         },
  3358.         {
  3359.             "PName": "tsadbot",
  3360.             "PAltName": "tsadbot.exe",
  3361.             "Name": "Tsadbot",
  3362.             "Description": "Adware application that affects the performance of Internet connections seriously. The application comes with free software.",
  3363.             "Company": "Conducent / TimeSink",
  3364.             "SysProcess": "No",
  3365.             "SecurityRisk": "Yes",
  3366.             "Errors": "N/A",
  3367.             "Status": 0
  3368.         },
  3369.         {
  3370.             "PName": "tvmd",
  3371.             "PAltName": "tvmd.exe",
  3372.             "Name": "Tvmd",
  3373.             "Description": "Allows the checkout process for customers in order to safely and securely purchase software. This spyware installs automatically.",
  3374.             "Company": "Total Velocity",
  3375.             "SysProcess": "No",
  3376.             "SecurityRisk": "Yes",
  3377.             "Errors": "N/A",
  3378.             "Status": 0
  3379.         },
  3380.         {
  3381.             "PName": "tvtmd",
  3382.             "PAltName": "tvtmd.exe",
  3383.             "Name": "Tvtmd",
  3384.             "Description": "Allows the checkout process for customers in order to safely and securely purchase software. This spyware installs automatically.",
  3385.             "Company": "Total Velocity",
  3386.             "SysProcess": "No",
  3387.             "SecurityRisk": "Yes",
  3388.             "Errors": "N/A",
  3389.             "Status": 0
  3390.         },
  3391.         {
  3392.             "PName": "unwise",
  3393.             "PAltName": "unwise.exe",
  3394.             "Name": "PrintScreen",
  3395.             "Description": "Utility program to capture, print or save the current window from Gadwin Systems, Inc.",
  3396.             "Company": "Gadwin Systems, Inc.",
  3397.             "SysProcess": "No",
  3398.             "SecurityRisk": "No",
  3399.             "Errors": "N/A",
  3400.             "Status": 0
  3401.         },
  3402.         {
  3403.             "PName": "updatestats",
  3404.             "PAltName": "updatestats.exe",
  3405.             "Name": "Updatestats",
  3406.             "Description": "Application that allows live streaming statistics for each match of one league or across all leagues. The application is officially licensed MLB pitch-by-pitch real-time updates from every stadium around the league.",
  3407.             "Company": "Wild Media, LLC",
  3408.             "SysProcess": "No",
  3409.             "SecurityRisk": "No",
  3410.             "Errors": "N/A",
  3411.             "Status": 0
  3412.         },
  3413.         {
  3414.             "PName": "updreg",
  3415.             "PAltName": "updreg.exe",
  3416.             "Name": "Creative Register Reminder",
  3417.             "Description": "Application that reminds users to register for their Creative Labs products.",
  3418.             "Company": "Creative Technology Ltd",
  3419.             "SysProcess": "No",
  3420.             "SecurityRisk": "No",
  3421.             "Errors": "N/A",
  3422.             "Status": 0
  3423.         },
  3424.         {
  3425.             "PName": "uptodate",
  3426.             "PAltName": "uptodate.exe",
  3427.             "Name": "Uptodate",
  3428.             "Description": "BrowserPal, a free popup ad blocker. Browser",
  3429.             "Company": "BrowserPal.com",
  3430.             "SysProcess": "No",
  3431.             "SecurityRisk": "Yes",
  3432.             "Errors": "N/A",
  3433.             "Status": 0
  3434.         },
  3435.         {
  3436.             "PName": "urlmap",
  3437.             "PAltName": "urlmap.exe",
  3438.             "Name": "Urlmap",
  3439.             "Description": "Program that gets installed with Microsoft Money 2002. The application runs in the background and works with Internet Explorer and the MoneySide applet from Microsoft Money. The application monitors the web pages you visit and, if you come to a page with financial information that may be relevant to financial information in Microsoft Money, the program displays the MoneySide toolbar in Internet Explorer.",
  3440.             "Company": "Microsoft Corp.",
  3441.             "SysProcess": "No",
  3442.             "SecurityRisk": "No",
  3443.             "Errors": "N/A",
  3444.             "Status": 0
  3445.         },
  3446.         {
  3447.             "PName": "userinit",
  3448.             "PAltName": "userinit.exe",
  3449.             "Name": "UserInit Process",
  3450.             "Description": "Application used to run a program before a shell starts. The service runs logon scripts, reestablishes network connections and starts the shell.",
  3451.             "Company": "Microsoft Corp.",
  3452.             "SysProcess": "No",
  3453.             "SecurityRisk": "No",
  3454.             "Errors": "N/A",
  3455.             "Status": 0
  3456.         },
  3457.         {
  3458.             "PName": "vptray",
  3459.             "PAltName": "vptray.exe",
  3460.             "Name": "VirusProtect Shield System Tray icon",
  3461.             "Description": "Tray bar icon application for Norton AntiVirus Corporate Edition 7.x. It helps you to start Norton AntiVirus in order to configure it, run a virus scan, do a LiveUpdate, and more.",
  3462.             "Company": "Symantec Corporation",
  3463.             "SysProcess": "No",
  3464.             "SecurityRisk": "No",
  3465.             "Errors": "N/A",
  3466.             "Status": 0
  3467.         },
  3468.         {
  3469.             "PName": "vshwin32",
  3470.             "PAltName": "vshwin32.exe",
  3471.             "Name": "McAfee On-access scanner",
  3472.             "Description": "Real-time virus scanning task for McAfee VirusScan, which runs in the background and scans files as you use or create them.",
  3473.             "Company": "Network Associates, Inc.",
  3474.             "SysProcess": "No",
  3475.             "SecurityRisk": "No",
  3476.             "Errors": "N/A",
  3477.             "Status": 0
  3478.         },
  3479.         {
  3480.             "PName": "vsmon",
  3481.             "PAltName": "vsmon.exe",
  3482.             "Name": "True Vector Internet Monitor",
  3483.             "Description": "Application that is associated with ZoneAlarm personal firewall, which monitors Internet traffic and generates alerts by following the security rules that users configure in Zone Alarm.",
  3484.             "Company": "Zone Labs Inc.",
  3485.             "SysProcess": "No",
  3486.             "SecurityRisk": "No",
  3487.             "Errors": "N/A",
  3488.             "Status": 0
  3489.         },
  3490.         {
  3491.             "PName": "wanmpsvc",
  3492.             "PAltName": "wanmpsvc.exe",
  3493.             "Name": "Wan miniport (ATW) service",
  3494.             "Description": "Wan miniport (ATW) service provided by AOL. Deletion of this file creates problems with Internet connections. Re-installing AOL does not fix the problem.",
  3495.             "Company": "America Online, Inc.",
  3496.             "SysProcess": "No",
  3497.             "SecurityRisk": "No",
  3498.             "Errors": "N/A",
  3499.             "Status": 0
  3500.         },
  3501.         {
  3502.             "PName": "wcescomm",
  3503.             "PAltName": "wcescomm.exe",
  3504.             "Name": "Microsoft ActiveSync Connection Manager",
  3505.             "Description": "Microsoft free synchronization manager that runs in the background in the system tray and allows you to synchronize your Windows CE-based handheld or Palm-size computer with your desktop computer. The manager helps to synchronize documents, email, and calendar items.",
  3506.             "Company": "Microsoft Corp.",
  3507.             "SysProcess": "No",
  3508.             "SecurityRisk": "No",
  3509.             "Errors": "N/A",
  3510.             "Status": 0
  3511.         },
  3512.         {
  3513.             "PName": "wcmdmgr",
  3514.             "PAltName": "wcmdmgr.exe",
  3515.             "Name": "Automated Support Engine",
  3516.             "Description": "Web driver used in many applications, from games to MP3 players. The driver is provided by Wild Tangent to collect feedback about new hardware through an Internet connection.",
  3517.             "Company": "Wild Tangent",
  3518.             "SysProcess": "No",
  3519.             "SecurityRisk": "No",
  3520.             "Errors": "N/A",
  3521.             "Status": 0
  3522.         },
  3523.         {
  3524.             "PName": "webdav",
  3525.             "PAltName": "webdav.exe",
  3526.             "Name": "Webdav",
  3527.             "Description": "Application that is used mainly by hacker to gain control of targeted system.",
  3528.             "Company": "N/A",
  3529.             "SysProcess": "No",
  3530.             "SecurityRisk": "Yes",
  3531.             "Errors": "N/A",
  3532.             "Status": 0
  3533.         },
  3534.         {
  3535.             "PName": "webscanx",
  3536.             "PAltName": "webscanx.exe",
  3537.             "Name": "McAfee├ås Web and ActiveX Scanner",
  3538.             "Description": "Component of McAfee antivirus products that run in the background and scan Internet downloads for viruses. The component also provides you with email protection by scanning email attachments. The component also watches out for malicious code in the Java and ActiveX applets on the web pages that you access.",
  3539.             "Company": "Network Associates, Inc.",
  3540.             "SysProcess": "No",
  3541.             "SecurityRisk": "No",
  3542.             "Errors": "N/A",
  3543.             "Status": 0
  3544.         },
  3545.         {
  3546.             "PName": "win-bugsfix",
  3547.             "PAltName": "win-bugsfix.exe",
  3548.             "Name": "Win-bugsfix",
  3549.             "Description": "Added to the system as a result of the LOVELETTER (I Love You) virus.",
  3550.             "Company": "N/A",
  3551.             "SysProcess": "No",
  3552.             "SecurityRisk": "Yes",
  3553.             "Errors": "N/A",
  3554.             "Status": 0
  3555.         },
  3556.         {
  3557.             "PName": "win32",
  3558.             "PAltName": "win32.exe",
  3559.             "Name": "Win32",
  3560.             "Description": "Added to the system as a result of the RATEGA virus that is a Trojan horse that gives a hacker complete access to your computer. By default, the Trojan listens on port 6969 and notifies the hacker through email. The Trojan notification message will contain the subject line \"Omega Help.\"",
  3561.             "Company": "N/A",
  3562.             "SysProcess": "No",
  3563.             "SecurityRisk": "Yes",
  3564.             "Errors": "N/A",
  3565.             "Status": 0
  3566.         },
  3567.         {
  3568.             "PName": "win32us",
  3569.             "PAltName": "win32us.exe",
  3570.             "Name": "All-In-One-Telcom",
  3571.             "Description": "Variant of adult content dialer program that dials toll numbers without user awareness or permission.",
  3572.             "Company": "N/A",
  3573.             "SysProcess": "No",
  3574.             "SecurityRisk": "Yes",
  3575.             "Errors": "N/A",
  3576.             "Status": 0
  3577.         },
  3578.         {
  3579.             "PName": "winactive",
  3580.             "PAltName": "winactive.exe",
  3581.             "Name": "Winactive",
  3582.             "Description": "Active variant of LOP.com hijacker that sets your start page and Internet Explorer search features to use the site lop.com ('Live Online Portal') or one of its clone sites.",
  3583.             "Company": "N/A",
  3584.             "SysProcess": "No",
  3585.             "SecurityRisk": "Yes",
  3586.             "Errors": "N/A",
  3587.             "Status": 0
  3588.         },
  3589.         {
  3590.             "PName": "winamp",
  3591.             "PAltName": "winamp.exe",
  3592.             "Name": "WinAmp",
  3593.             "Description": "Launches popular high fidelity music player for Windows 95, 98, and NT that plays MP3s, MP2s, WAVs, VOCs, and MIDIs. The utility also helps to organize these sound and video files.",
  3594.             "Company": "Nullsoft Inc.",
  3595.             "SysProcess": "No",
  3596.             "SecurityRisk": "No",
  3597.             "Errors": "N/A",
  3598.             "Status": 0
  3599.         },
  3600.         {
  3601.             "PName": "windows",
  3602.             "PAltName": "windows.exe",
  3603.             "Name": "Windows",
  3604.             "Description": "Added to the system as a result of W32.HLLW.Nulut WORM that attempts to spread through file-sharing networks and email.",
  3605.             "Company": "N/A",
  3606.             "SysProcess": "No",
  3607.             "SecurityRisk": "Yes",
  3608.             "Errors": "N/A",
  3609.             "Status": 0
  3610.         },
  3611.         {
  3612.             "PName": "wininetd",
  3613.             "PAltName": "wininetd.exe",
  3614.             "Name": "Wininetd",
  3615.             "Description": "Added to the system as a result of the WINET VIRUS! which is a Backdoor Trojan Horse that will install itself in the System directory. It receives instructions from a hard-coded URL.",
  3616.             "Company": "N/A",
  3617.             "SysProcess": "No",
  3618.             "SecurityRisk": "Yes",
  3619.             "Errors": "N/A",
  3620.             "Status": 0
  3621.         },
  3622.         {
  3623.             "PName": "wininit",
  3624.             "PAltName": "wininit.exe",
  3625.             "Name": "Wininit",
  3626.             "Description": "Added to the system as a result of the WOLLF.16 VIRUS! which is a Backdoor Trojan Horse that installs itself as a server and allows unauthorized access to an infected computer. This Trojan is written in Microsoft Visual C++.",
  3627.             "Company": "N/A",
  3628.             "SysProcess": "No",
  3629.             "SecurityRisk": "Yes",
  3630.             "Errors": "N/A",
  3631.             "Status": 0
  3632.         },
  3633.         {
  3634.             "PName": "winlogin",
  3635.             "PAltName": "winlogin.exe",
  3636.             "Name": "Winlogin",
  3637.             "Description": "Added to the system as a result of the RANDEX.E VIRUS! which is an Internet Relay Chat (IRC) Trojan Horse that allows its creator to control a computer by using IRC. It is also a worm that can use the DCOM RPC vulnerability to spread itself.",
  3638.             "Company": "N/A",
  3639.             "SysProcess": "No",
  3640.             "SecurityRisk": "Yes",
  3641.             "Errors": "N/A",
  3642.             "Status": 0
  3643.         },
  3644.         {
  3645.             "PName": "winlogon",
  3646.             "PAltName": "winlogon.exe",
  3647.             "Name": "Windows Logon Process",
  3648.             "Description": "Windows NT logon utility that manages user logons and logoffs. The utility prompts you for the password when you log on and allows you to log off or shut down.",
  3649.             "Company": "Microsoft Corp.",
  3650.             "SysProcess": "Yes",
  3651.             "SecurityRisk": "No",
  3652.             "Errors": "N/A",
  3653.             "Status": 0
  3654.         },
  3655.         {
  3656.             "PName": "winmain",
  3657.             "PAltName": "winmain.exe",
  3658.             "Name": "Winmain",
  3659.             "Description": "New breed of malware which loads MSHTA.EXE.mshta.exe accept HTA scripting within a web page and then execute what is embedded IN the page as a program.",
  3660.             "Company": "N/A",
  3661.             "SysProcess": "No",
  3662.             "SecurityRisk": "Yes",
  3663.             "Errors": "N/A",
  3664.             "Status": 0
  3665.         },
  3666.         {
  3667.             "PName": "winmgmt",
  3668.             "PAltName": "winmgmt.exe",
  3669.             "Name": "Windows Management Service",
  3670.             "Description": "Windows Management Instrumentation from Microsoft that allows you to write scripts for the management of devices, user accounts, services, networking, and other aspects of your Windows 98/ME/NT/2000 system.",
  3671.             "Company": "Microsoft Corp.",
  3672.             "SysProcess": "Yes",
  3673.             "SecurityRisk": "No",
  3674.             "Errors": "N/A",
  3675.             "Status": 0
  3676.         },
  3677.         {
  3678.             "PName": "winnet",
  3679.             "PAltName": "winnet.exe",
  3680.             "Name": "CommonName Spyware",
  3681.             "Description": "Internet Explorer Add-on toolbar from CommonName which enables you to enter keywords or short phrases which will take you straight to the website of the organisation that might have bought those keywords.",
  3682.             "Company": "CommonName Ltd",
  3683.             "SysProcess": "No",
  3684.             "SecurityRisk": "Yes",
  3685.             "Errors": "N/A",
  3686.             "Status": 0
  3687.         },
  3688.         {
  3689.             "PName": "winoa386",
  3690.             "PAltName": "winoa386.mod",
  3691.             "Name": "MS-DOS Console",
  3692.             "Description": "Windows MS-DOS Console provides DOS console and script functions in Windows. It is the interface between the Windows mode and DOS mode in Windows.",
  3693.             "Company": "Microsoft Corp.",
  3694.             "SysProcess": "Yes",
  3695.             "SecurityRisk": "No",
  3696.             "Errors": "N/A",
  3697.             "Status": 0
  3698.         },
  3699.         {
  3700.             "PName": "winppr32",
  3701.             "PAltName": "winppr32.exe",
  3702.             "Name": "SoBig Virus",
  3703.             "Description": "Existance of this file shows that you have the W32.Sobig.F worm in your system.W32.Sobig.F is a mass-mailing, network-aware worm that sends itself to all the email addresses it finds on your system. The email message has a fake FROM address",
  3704.             "Company": "N/A",
  3705.             "SysProcess": "No",
  3706.             "SecurityRisk": "Yes",
  3707.             "Errors": "N/A",
  3708.             "Status": 0
  3709.         },
  3710.         {
  3711.             "PName": "wins",
  3712.             "PAltName": "wins.exe",
  3713.             "Name": "Windows Internet Name Service",
  3714.             "Description": "Windows Internet name service that is based on DNS (Domain Name System).",
  3715.             "Company": "Microsoft Corp.",
  3716.             "SysProcess": "Yes",
  3717.             "SecurityRisk": "No",
  3718.             "Errors": "N/A",
  3719.             "Status": 0
  3720.         },
  3721.         {
  3722.             "PName": "winservn",
  3723.             "PAltName": "winservn.exe",
  3724.             "Name": "Winservn",
  3725.             "Description": "Added to the system by PurityScan which is distributed by an advertising company.winservn loads at start-up and spawn massive quantities of large popup ads when the user is online",
  3726.             "Company": "ClickSpring",
  3727.             "SysProcess": "No",
  3728.             "SecurityRisk": "Yes",
  3729.             "Errors": "N/A",
  3730.             "Status": 0
  3731.         },
  3732.         {
  3733.             "PName": "winssk32",
  3734.             "PAltName": "winssk32.exe",
  3735.             "Name": "Winssk32",
  3736.             "Description": "new variant of Sobig, known as Sobig.E.The worm usually arrives in e-mails with body text \"Please see the attached zip file for details.\" and attachment \"your_details.zip\"",
  3737.             "Company": "N/A",
  3738.             "SysProcess": "No",
  3739.             "SecurityRisk": "Yes",
  3740.             "Errors": "N/A",
  3741.             "Status": 0
  3742.         },
  3743.         {
  3744.             "PName": "winstart",
  3745.             "PAltName": "winstart.exe",
  3746.             "Name": "Winstart",
  3747.             "Description": "A Foistware from iGetNet which installs components without your knowledge.It turns the IE address bar into a keyword engine piped into IGetNet.",
  3748.             "Company": "iGetNet",
  3749.             "SysProcess": "No",
  3750.             "SecurityRisk": "Yes",
  3751.             "Errors": "N/A",
  3752.             "Status": 0
  3753.         },
  3754.         {
  3755.             "PName": "winstart001",
  3756.             "PAltName": "winstart001.exe",
  3757.             "Name": "Winstart001",
  3758.             "Description": "Internet Explorer Helper plug-in from iGetNet which redirects the end-user to advertising clients of iGetNet. iGetNet sales keyword to his client.so whenever the user enters that words it connects the user to that client's site.",
  3759.             "Company": "iGetNet",
  3760.             "SysProcess": "No",
  3761.             "SecurityRisk": "Yes",
  3762.             "Errors": "N/A",
  3763.             "Status": 0
  3764.         },
  3765.         {
  3766.             "PName": "wintsk32",
  3767.             "PAltName": "wintsk32.exe",
  3768.             "Name": "Wintsk32",
  3769.             "Description": "Addedto the system  as a result of the YAHA.U VIRUS! which is a variant of W32.Yaha.J@mm.Terminates some antivirus and firewall processes and uses its own SMTP engine to email itself to all the contacts of the Windows Address Book, MSN Messenger, .NET Messenger, Yahoo Pager, and in all the files whose extensions contain the letters HT.",
  3770.             "Company": "N/A",
  3771.             "SysProcess": "No",
  3772.             "SecurityRisk": "Yes",
  3773.             "Errors": "N/A",
  3774.             "Status": 0
  3775.         },
  3776.         {
  3777.             "PName": "winupdate",
  3778.             "PAltName": "winupdate.exe",
  3779.             "Name": "Winupdate",
  3780.             "Description": "Added to the system as a result of the RADO VIRUS! which is a Backdoor Trojan Horse.It gives its creator unauthorized remote access to your computer. When the Trojan is executed for the first time, it displays a fake error message with the text, \"Incompartible Windows Version.\" See the Technical Details section for an illustration.",
  3781.             "Company": "N/A",
  3782.             "SysProcess": "No",
  3783.             "SecurityRisk": "Yes",
  3784.             "Errors": "N/A",
  3785.             "Status": 0
  3786.         },
  3787.         {
  3788.             "PName": "winword",
  3789.             "PAltName": "winword.exe",
  3790.             "Name": "Microsoft Word",
  3791.             "Description": "Microsoft Word, a word processing program included in Microsoft Office.",
  3792.             "Company": "Microsoft Corp.",
  3793.             "SysProcess": "No",
  3794.             "SecurityRisk": "No",
  3795.             "Errors": "N/A",
  3796.             "Status": 0
  3797.         },
  3798.         {
  3799.             "PName": "winzip32",
  3800.             "PAltName": "winzip32.exe",
  3801.             "Name": "WinZip",
  3802.             "Description": "WinZip, which is a file compression utility used to create, open and extract zip files. WinZip zips up a document and attaches it to an email message without leaving Explorer. It can also extract and install from MIME and other encoded files. This tool makes working with .zip and other types of archive files easier.",
  3803.             "Company": "Nico Mak Computing, Inc.",
  3804.             "SysProcess": "No",
  3805.             "SecurityRisk": "No",
  3806.             "Errors": "N/A",
  3807.             "Status": 0
  3808.         },
  3809.         {
  3810.             "PName": "wjview",
  3811.             "PAltName": "wjview.exe",
  3812.             "Name": "Wjview",
  3813.             "Description": "Command line utility tool from Microsoft (R) Corporation to view window-based Java applications.",
  3814.             "Company": "Microsoft Corp.",
  3815.             "SysProcess": "No",
  3816.             "SecurityRisk": "No",
  3817.             "Errors": "N/A",
  3818.             "Status": 0
  3819.         },
  3820.         {
  3821.             "PName": "wkcalrem",
  3822.             "PAltName": "wkcalrem.exe",
  3823.             "Name": "Microsoft Works Calendar Reminder",
  3824.             "Description": "Application that is used to remind the user of scheduled events. It is associated with MS Works Calendar program.",
  3825.             "Company": "Microsoft Corp.",
  3826.             "SysProcess": "No",
  3827.             "SecurityRisk": "No",
  3828.             "Errors": "N/A",
  3829.             "Status": 0
  3830.         },
  3831.         {
  3832.             "PName": "wkdetect",
  3833.             "PAltName": "wkdetect.exe",
  3834.             "Name": "Wkdetect",
  3835.             "Description": "A background process that checks automatically for Microsoft Works updates when you are connected to the Internet.",
  3836.             "Company": "Microsoft Corp.",
  3837.             "SysProcess": "Yes",
  3838.             "SecurityRisk": "No",
  3839.             "Errors": "N/A",
  3840.             "Status": 0
  3841.         },
  3842.         {
  3843.             "PName": "wkufind",
  3844.             "PAltName": "wkufind.exe",
  3845.             "Name": "Wkufind",
  3846.             "Description": "Update detector for Microsoft Works 2002 PictureIt. If the detector is enabled, it tries to dial your Internet service provider, connect to the Internet, and download any updates available.",
  3847.             "Company": "Microsoft Corp.",
  3848.             "SysProcess": "No",
  3849.             "SecurityRisk": "No",
  3850.             "Errors": "N/A",
  3851.             "Status": 0
  3852.         },
  3853.         {
  3854.             "PName": "wmiexe",
  3855.             "PAltName": "wmiexe.exe",
  3856.             "Name": "Microsoft├ås Windows Management Instrumentation (WMI).",
  3857.             "Description": "Application that gives a standard method of accessing system information, performance information, event monitors, and application monitors. The application works as a transparent task.",
  3858.             "Company": "Microsoft Corp.",
  3859.             "SysProcess": "Yes",
  3860.             "SecurityRisk": "No",
  3861.             "Errors": "N/A",
  3862.             "Status": 0
  3863.         },
  3864.         {
  3865.             "PName": "wmplayer",
  3866.             "PAltName": "wmplayer.exe",
  3867.             "Name": "Windows Media Player",
  3868.             "Description": "Windows Media Player, which is used to open and play music, sound, and video files. It is the default media player that comes with the Windows operating system.",
  3869.             "Company": "Microsoft Corp.",
  3870.             "SysProcess": "No",
  3871.             "SecurityRisk": "No",
  3872.             "Errors": "N/A",
  3873.             "Status": 0
  3874.         },
  3875.         {
  3876.             "PName": "wnad",
  3877.             "PAltName": "wnad.exe",
  3878.             "Name": "WinAd Client",
  3879.             "Description": "This parasite  added to the system as a result of running a program called \"Yo Mama Osama\" (osama.exe).There are other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like.",
  3880.             "Company": "Twistedhumor.com",
  3881.             "SysProcess": "No",
  3882.             "SecurityRisk": "Yes",
  3883.             "Errors": "N/A",
  3884.             "Status": 0
  3885.         },
  3886.         {
  3887.             "PName": "wordpad",
  3888.             "PAltName": "wordpad.exe",
  3889.             "Name": "Wordpad",
  3890.             "Description": "WordPad, a text editor used to open and edit.txt and .rtf documents. You can create and edit simple text as well as documents with complex formatting and graphics. You can link or embed information from other documents into a WordPad document.",
  3891.             "Company": "Microsoft Corp.",
  3892.             "SysProcess": "No",
  3893.             "SecurityRisk": "No",
  3894.             "Errors": "N/A",
  3895.             "Status": 0
  3896.         },
  3897.         {
  3898.             "PName": "wowexec",
  3899.             "PAltName": "wowexec.exe",
  3900.             "Name": "Windows On Windows Execution Process",
  3901.             "Description": "Windows On Windows Execution Support Process that provides support for 16-bit Windows applications together with ntvdm.exe. The service is started by NTVDM, which starts every time you run a 16-bit program.",
  3902.             "Company": "Microsoft Corp.",
  3903.             "SysProcess": "Yes",
  3904.             "SecurityRisk": "No",
  3905.             "Errors": "N/A",
  3906.             "Status": 0
  3907.         },
  3908.         {
  3909.             "PName": "wscript",
  3910.             "PAltName": "wscript.exe",
  3911.             "Name": "Windows Script Host",
  3912.             "Description": "Application that allows users to run scripts from Windows. The application displays a dialog box for setting script properties.",
  3913.             "Company": "Microsoft Corp.",
  3914.             "SysProcess": "No",
  3915.             "SecurityRisk": "No",
  3916.             "Errors": "N/A",
  3917.             "Status": 0
  3918.         },
  3919.         {
  3920.             "PName": "wuauclt",
  3921.             "PAltName": "wuauclt.exe",
  3922.             "Name": "AutoUpdate for WindowsME",
  3923.             "Description": "Background process responsible for updates to Windows ME. Whenever you connect to the Internet, Wuauclt checks the Microsoft web site for updates to Windows ME.",
  3924.             "Company": "Microsoft Corp.",
  3925.             "SysProcess": "Yes",
  3926.             "SecurityRisk": "No",
  3927.             "Errors": "N/A",
  3928.             "Status": 0
  3929.         },
  3930.         {
  3931.             "PName": "wupdt",
  3932.             "PAltName": "wupdt.exe",
  3933.             "Name": "Wupdt",
  3934.             "Description": "Added to the system as a result of the IMISERV VIRUS! which is a backdoor Trojan used to control a target computer from a remote location.It consists of a Server and a Client part. It distributes the Server part to target computers and uses the Client part to control the system running the Server part.",
  3935.             "Company": "N/A",
  3936.             "SysProcess": "No",
  3937.             "SecurityRisk": "Yes",
  3938.             "Errors": "N/A",
  3939.             "Status": 0
  3940.         },
  3941.         {
  3942.             "PName": "wuser32",
  3943.             "PAltName": "wuser32.exe",
  3944.             "Name": "Wuser32",
  3945.             "Description": "Application that is used to solve a problem of remote control service starting.",
  3946.             "Company": "Novell Inc.",
  3947.             "SysProcess": "No",
  3948.             "SecurityRisk": "No",
  3949.             "Errors": "N/A",
  3950.             "Status": 0
  3951.         },
  3952.         {
  3953.             "PName": "wzqkpick",
  3954.             "PAltName": "wzqkpick.exe",
  3955.             "Name": "WinZip System Tray Application",
  3956.             "Description": "System tray bar application that allows a user to start WinZip software from the system tray.",
  3957.             "Company": "Nico Mak Computing, Inc.",
  3958.             "SysProcess": "No",
  3959.             "SecurityRisk": "No",
  3960.             "Errors": "N/A",
  3961.             "Status": 0
  3962.         },
  3963.         {
  3964.             "PName": "xfr",
  3965.             "PAltName": "xfr.exe",
  3966.             "Name": "Intel File Transfer",
  3967.             "Description": "Application that is associated with Intel LANDesk Management Suite and used for communicating between the core server and managed clients.",
  3968.             "Company": "Intel Corporation",
  3969.             "SysProcess": "No",
  3970.             "SecurityRisk": "No",
  3971.             "Errors": "N/A",
  3972.             "Status": 0
  3973.         },
  3974.         {
  3975.             "PName": "xl",
  3976.             "PAltName": "xl.exe",
  3977.             "Name": "License manager",
  3978.             "Description": "Software that prevents software from being reverse engineered.",
  3979.             "Company": "XtreamLok.com",
  3980.             "SysProcess": "No",
  3981.             "SecurityRisk": "No",
  3982.             "Errors": "N/A",
  3983.             "Status": 0
  3984.         },
  3985.         {
  3986.             "PName": "ypager",
  3987.             "PAltName": "ypager.exe",
  3988.             "Name": "Yahoo Messenger Helper",
  3989.             "Description": "System tray application for Yahoo Messenger, which is one of the most popular instant messaging programs.",
  3990.             "Company": "Yahoo! Inc.",
  3991.             "SysProcess": "No",
  3992.             "SecurityRisk": "No",
  3993.             "Errors": "N/A",
  3994.             "Status": 0
  3995.         },
  3996.         {
  3997.             "PName": "BHOZapper.exe",
  3998.             "Name": "BHOZapper Application",
  3999.             "Description": "This application protects your computer against malicious BHOs and does registry optimization.",
  4000.             "Company": "Powerhouse Programming",
  4001.             "SysProcess": "No",
  4002.             "SecurityRisk": "No",
  4003.             "Errors": "N/A",
  4004.             "Status": 1
  4005.         },
  4006.         {
  4007.             "PName": "Port Monitor Standalone.exe",
  4008.             "Name": "Port Monitor Application",
  4009.             "Description": "Port Monitor is an application that monitors and protects all access ports.",
  4010.             "Company": "Powerhouse Programming",
  4011.             "SysProcess": "No",
  4012.             "SecurityRisk": "No",
  4013.             "Errors": "N/A",
  4014.             "Status": 1
  4015.         },
  4016.         {
  4017.             "PName": "daemon.exe",
  4018.             "Name": "DAEMON Tools",
  4019.             "Description": "Application for mounting CD images",
  4020.             "Company": "VeNoM386 and SwENSkE",
  4021.             "SysProcess": "unknown",
  4022.             "SecurityRisk": "unknown",
  4023.             "Errors": "N/A",
  4024.             "Status": 1
  4025.         },
  4026.         {
  4027.             "PName": "avpcc.exe",
  4028.             "Name": "Kaspersky Anti-Virus",
  4029.             "Description": "Kaspersky Anti-Virus",
  4030.             "Company": "Kaspersky Labs.",
  4031.             "SysProcess": "No",
  4032.             "SecurityRisk": "No",
  4033.             "Errors": "N/A",
  4034.             "Status": 1
  4035.         },
  4036.         {
  4037.             "PName": "RadLight.exe",
  4038.             "Name": "RadLight",
  4039.             "Description": "Application for playing media files",
  4040.             "Company": "RadLight, Inc.",
  4041.             "SysProcess": "unknown",
  4042.             "SecurityRisk": "No",
  4043.             "Errors": "N/A",
  4044.             "Status": 1
  4045.         }
  4046.     ]
  4047. }