3 7!NoLoad1 12winrecon.exe119Any startup section0150WinRecon - surveillance software that creat es records of everything people do on a computer, ie, spying or monitoring depending upon how you call it24http://www.winrecon.com/0
3 9$EnterNet1 12Enternet.exe119Any startup section0 65Connection manager for the EnterNet ISP. You can also use RASPPOE37http://user.cs.tu-berlin.de/~normanb/0
118executed file name1 12Regsrv32.com119Any startup section0 42Added as a result of the SOUTHGHOST VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.southghost.html0
1 8filename1 7App.exe119Any startup section0 78Added as a result of the WAXPOW VIRUS! where filename is the executed filename76http://securityresponse.symantec.com/avcenter/venc/data/w32.waxpow.worm.html0
1 4name1 12Svchosts.exe119Any startup section0 64Added as a result of the SDBOT.N VIRUS! where name can be random56http://www.sophos.com/virusinfo/analyses/trojsdbotn.html0
115random filename1 10wincpu.exe119Any startup section0 43Added as a result of an unidentified VIRUS!56http://www.sophos.com/virusinfo/analyses/trojsdbotn.html0
113various names1 7elf.exe119Any startup section0 48Elf is a hacker program, tied to a trojan server56http://www.sophos.com/virusinfo/analyses/trojsdbotn.html0
114(*)API Machine1 12winSOCKS.exe119Any startup section0 44Homepage hijacker, see here ( * = any digit) 01
1 9(Default)1 16media_driver.exe119Any startup section0 37Added as a result of the TUPEG VIRUS!70http://securityresponse.symantec.com/avcenter/venc/data/w32.tupeg.html0
1 9(Default)1 10Shania.vbs119Any startup section0 38Added as a result of the SHANIA VIRUS!71http://securityresponse.symantec.com/avcenter/venc/data/vbs.shania.html0
1 9(Default)1 11NOTEPAD.exe119Any startup section0110Added as the result of the RUSTY VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor72http://securityresponse.symantec.com/avcenter/venc/data/w32.rusty@m.html0
118*JanisRuckenbrodII1 9janis.com119Any startup section0 36Added as a result of the POPS VIRUS!69http://securityresponse.symantec.com/avcenter/venc/data/w32.pops.html0
4 9*StateMgr1 12statemgr.exe119Any startup section0 54Windows ME default for System Restore. Do NOT disable!69http://securityresponse.symantec.com/avcenter/venc/data/w32.pops.html0
118,main drive Loader1 11wininfo.exe119Any startup section0 76Suspected malware as it appears in 3 different registry locations - see here40http://forums.techguy.org/t151017/s.html0
3 8000StTHK1 12000StTHK.exe119Any startup section0160Toshiba Hot key functionality for the function keys (Fn-Esc, Fn-F1 (lock), Fn-F2, Fn-F3, Fn-F4, Fn-F5 (switching between laptop and CRT display output), etc...)40http://forums.techguy.org/t151017/s.html0
3 900THotkey1 1300THotKey.exe119Any startup section0 87For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.40http://forums.techguy.org/t151017/s.html0
1 61234561 54rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl219Any startup section0 99Added as a result of the KITRO.C ( or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number89http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DANDI. A&VSect=T0
2 21:1 9hpdrv.exe119Any startup section0 69HP utility for monitoring when and how many recoveries have been done36http://12ghosts.com/ghosts/popup.htm0
2231A:MacVisionTrayMonitor1 15TrayMonitor.exe119Any startup section0 90Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)36http://12ghosts.com/ghosts/popup.htm0
4151A:Stardock MCP1 13mcpserver.exe119Any startup section0253Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on36http://12ghosts.com/ghosts/popup.htm0
4231A:Stardock TrayMonitor1 14TrayServer.exe119Any startup section0 92For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX36http://12ghosts.com/ghosts/popup.htm0
3 61Srv321 13SpyAgent4.exe119Any startup section0113SpyTech SpyAgent m onitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."41http://www.spytech-web.com/spyagent.shtml0
3 91Win32Cfg1 12SpyBuddy.exe119Any startup section0 29SpyBuddy m onitoring software46http://www.parental-controls.com/spy_buddy.asp0
1142020Downloader1 9mssvr.exe119Any startup section0 572020Search Toolbar related. Reported to be auto-installed28http://www.keyloggerpro.com/0
3 92wSysTray1 142portalmon.exe119Any startup section0 322Wire Homeportal u ser interface36http://www.2wire.com/home/index.html0
4 83c1807pd1 273cmlink.exe 3cpipe-3c1807pd219Any startup section0 613Com WinModem driver. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
2 83cdminic1 123CDMINIC.EXE119Any startup section01003Com DMI (DynamicAccess D es ktop M an agement I nt erface) Agent associated with 3Com network cards34http://808hi.com/56k/winmodems.asp0
4 73Cmlink1 123CmlinkW.exe119Any startup section0165For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
2123ComDMIAgent1 123CDMINIC.EXE119Any startup section01003Com DMI (DynamicAccess D es ktop M an agement I nt erface) Agent associated with 3Com network cards34http://808hi.com/56k/winmodems.asp0
4133cpipe-USRpdA1 12USRmlnkA.exe119Any startup section0 35Modem driver files from US Robotics34http://808hi.com/56k/winmodems.asp0
2 73D Text1 113D Text.scr219Any startup section0 39Added as a result of the JERMY.A VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.jermy.a.html0
3193Deep Control Panel1 123DeepCTL.EXE119Any startup section0118From LightSurf Technologies ( nee E-Color) - 3Deep c orrects lighting, shading and color for all your 2D and 3D games32http: //www.colorific.com/d1.htm0
1 83Dfx Acc1 10GFXACC.EXE119Any startup section0 36Added as a result of the GIBE VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
2173dfx Task Manager1 113dfxMan.exe119Any startup section0 87System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start - Programs72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
4103dfx Tools1 113dfxCmn.dll119Any startup section0132Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
4123dfxv2ps.dll1 123dfxv2ps.dll119Any startup section0116Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
3173DLabsHelperDemon1 123dldemon.exe119Any startup section0365Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
3103qdctl.exe1 103qdctl.exe119Any startup section0194Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
4 93ware 3DM1 73dm.exe119Any startup section0 63Monitors status of the disk array on 3ware IDE RAID controllers72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
1 64wd!!!1 10Natal!.pif119Any startup section0 42Added as a result of the OPASERV.AI VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.AI0
1 36661 7Ska.exe119Any startup section0 38Added as a result of the NETBUS VIRUS!60http://www.dark-e.com/archive/trojans/netbusworm/index.shtml0
1119xHtProtect1 15AVprotect9x.exe119Any startup section0 40Added as a result of the NETSKY.M VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.m@mm.html0
1 7;Rundll1 8filename119Any startup section0 43Added as a result of the PWSLEGMIR.E VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_PWSLEGMIR.E0
1 1@1 20regedit -s ..win.dll219Any startup section0 40Added as a result of the SEEKER.K VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/js.seeker.k.html0
212@Hoc Toolbar1 9AtHoc.exe119Any startup section0 87One-click activated browsing toolbar used by various web-sites. See here f or more info62http://siliconvalley.internet.com/news/article.php/3531_4799510
2 5@loha1 12reminder.exe119Any startup section0109Registration reminder for http://www.pcworld.com/downloads/file_description/0,fid,6581,00.asp E -mail utility67http://www.pcworld.com/downloads/file_description/0,fid,6581,00.asp0
417a-winpoet-service1 22winpppoverethernet.exe119Any startup section0393WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking52http://www.finepoint.com/products/winpoet/index.html0
322A1000 Settings Utility1 12cpqa1000.exe119Any startup section0164Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features52http://www.finepoint.com/products/winpoet/index.html0
3 7A4Proxy1 11A4Proxy.exe119Any startup section0 89Anonymity 4 Proxy - local proxy server that makes you anonymous wh en visiting web sites47http://www.findincontext.com/a4proxy/review.htm0
212AAATraySaver1 13TraySaver.exe119Any startup section0191System Tray management utility from Mike Lin w hich allows you to hide, show , restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray20http://www.mlin.net/0
3 3AAK1 7aak.exe119Any startup section0142Advanced Anti-Keylogger - "Anti-spy software to p rohibit operation of any keyloggers currently in use or presently being developed anywhere"30http://www.anti-keylogger.net/0
221ABBYY Community Agent1 10CAGENT.EXE119Any startup section0243Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software30http://www.anti-keylogger.net/0
1 3ABC1 13keylogger.exe119Any startup section0140Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop i n their FAQ30http://www.spycop.com/faq. htm0
1 4ABsr1 8absr.exe119Any startup section0 41Added as a result of the AUTOUPDER VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
1 4absr1 9mwsvm.exe119Any startup section0 47SeekSeek search hijacker related - as seen here 01
1 4abtu1 26mp3serch.exe lopsearch.exe219Any startup section0110Loads the executable for Lop.com. mp3serch.exe is the final version whilst lops earch.exe is the beta version35http://www.spywareinfo.com/lop.html0
314AbyssWebServer1 11abyssws.exe119Any startup section0 17Abyss w eb server29http://abyss.sourceforge.net/0
412AcBtnMgr_Xxx1 16AcBtnMgr_Xxx.exe119Any startup section0123Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation29http://abyss.sourceforge.net/0
3 3acc1 7acc.exe119Any startup section0104Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"53http://www.voicecallcentral.com/#advanced_call_center0
310Accelerate1 14accelerate.exe119Any startup section0172Webroot Accelerate - allows you to optimize Windows network registry settings in o rder to boost surfing speeds. Leave this enabled if you find it improves your connection55http://www.webroot.com/wb/products/accelerate/index.php0
219Access Ramp Monitor1 11armon32.exe119Any startup section0433Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again55http://www.webroot.com/wb/products/accelerate/index.php0
220AccessRamp Monitor011 12ARMon32a.exe119Any startup section0671From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."55http://www.webroot.com/wb/products/accelerate/index.php0
215AccessRampLAN011 12ARUpld32.exe119Any startup section0662Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 200355http://www.webroot.com/wb/products/accelerate/index.php0
3 7AcctMgr1 11AcctMgr.exe119Any startup section0248NortonÖ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal i nformation, and retrieves the data needed for email logins, shopping orders, banking, and other online activitiesùall from the safety of your own PC44http://www.symantec.com/sabu/sysworks/basic/0
319AcerNotebookManager1 13almxptray.exe119Any startup section0 82System Tray access on some Acer Notebooks to give faster access to system settings71http://wwwa.accuweather.com/adcbin/public/index.asp?partner=accuweather0
312AcerPowerkey1 12Powerkey.exe119Any startup section0134PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F371http://wwwa.accuweather.com/adcbin/public/index.asp?partner=accuweather0
413ACMonitor_Xxx1 17ACMonitor_Xxx.exe119Any startup section0123Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation71http://wwwa.accuweather.com/adcbin/public/index.asp?partner=accuweather0
313Acombo3dmouse1 12Acombo3d.exe119Any startup section0 71Mouse driver - required if you use non-standard Windows driver features71http://wwwa.accuweather.com/adcbin/public/index.asp?partner=accuweather0
317Acrobat Assistant1 12ACROTRAY.EXE119Any startup section0190Used to create PDF files with Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation 01
326Acronis Scheduler2 Service1 12schedhlp.exe119Any startup section0256Part of Acronis True Image - backup software. Co-operates with the "s chedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images42http://www.acronis.com/products/trueimage/0
225Acronis TrueImage Monitor1 20TrueImageMonitor.exe119Any startup section0 91Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage42http://www.acronis.com/products/trueimage/0
217Action Manager 321 8am32.exe119Any startup section0132Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start - Programs42http://www.acronis.com/products/trueimage/0
210Activation1 14Activation.exe119Any startup section0 23Part of Microsoft Money42http://www.acronis.com/products/trueimage/0
310Activboard1 11MMKeybd.exe119Any startup section0176Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys42http://www.acronis.com/products/trueimage/0
113ActiveDesktop1 13systray32.exe119Any startup section0 38Added as a result of the DABOOM VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.hllw.daboom@mm.html0
1 8ACTIVEDS1 12ACTIVEDS.EXE119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
210ActiveEyes1 14ActiveEyes.exe119Any startup section0 31ActiveEyes f rom TFI Technology53http://www.tfi-technology.com/products.htm#ActiveEyes0
310ActiveMenu1 14ActiveMenu.exe119Any startup section0219Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that Wild Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
310ActivePlus1 14activeplus.exe119Any startup section0 70Interactive Agents Plugin f or Messenger Plus! ( MSN Messenger add-on)32http://www.patc hou.com/msgplus/0
412ActiveShield1 12MCVSSHLD.EXE119Any startup section0 45McAfee VirusScan On-line. See also McAgentExe32http://www.patc hou.com/msgplus/0
2 9ActivSurf1 16backweb*****.exe119Any startup section0105Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates32http://www.patc hou.com/msgplus/0
310Ad Blocker1 11blocker.exe119Any startup section0 79Ad Blocker - blocks popups, and also re moves banners, image ads and flash ads20http://www.cdkm.com/0
2 8Ad-aware1 12Ad-aware.exe119Any startup section0140Ad-aware f rom Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start - Programs40http://www.lavasoft.de/software/adaware/0
310Ad-Muncher1 11ADMUNCH.EXE119Any startup section0186Ad Muncher r emoves adverts, pop-ups and gene ral annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications25http://www.admuncher.com/0
3 8Ad-watch1 12Ad-watch.exe119Any startup section0149Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memo ry and registry for spyware that tries to install or change your system40http://www.lavasoft.de/software/adaware/0
310AD2KClient1 14AD2KClient.exe119Any startup section0192Executable for Active Disk f rom Iomega disk - allows software applications t o be run directly from an Iomega Zip« disk. Required if you wish the applications to launch on insertion of a disk42http://www.iomega-activedisk.com/index.jsp0
215AdaptecDirectCD1 12Directcd.exe119Any startup section0351DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start - Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later42http://www.iomega-activedisk.com/index.jsp0
214Adaware Bootup1 12ad-aware.exe119Any startup section0140Ad-aware f rom Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start - Programs40http://www.lavasoft.de/software/adaware/0
132Adaware lptt01or Ad aware ml097e1 11adaware.exe119Any startup section0225Variant of the RapidBlaster p arasite (in a "Adaware" folder in Program Files). It i s not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 8AddClass1 12AddClass.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
111AdDestroyer1 15AdDestroyer.exe119Any startup section0308Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code40http://www.merijn.org/cwschronicles.html0
2 7ADGJdet1 11ADGJDet.exe119Any startup section0 78Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection40http://www.merijn.org/cwschronicles.html0
118ADM Library Loader1 12admlib32.exe119Any startup section0 50Added as a result of a variant of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
1 5Adobe1 9Adobe.exe119Any startup section0 43Added as a result of an unidentified VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
318Adobe Gamma Loader1 22Adobe Gamma Loader.exe219Any startup section0231Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
1 6AdobeA1 10adobes.exe119Any startup section0 40Added as a result of the FLOOD.BA VIRUS!43http://vil.nai.com/vil/content/v_100373.htm0
110AdobeFonts1 9fonts.hta119Any startup section0 48Browser hijacker - redirecting to Hugesearch.net43http://vil.nai.com/vil/content/v_100373.htm0
213ADQuickAccess1 10Adtray.exe119Any startup section0112After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win9543http://vil.nai.com/vil/content/v_100373.htm0
112AdRoarUpdate1 12ARUpdate.exe119Any startup section0 22AdRoar a dware updater74http://securityresponse.symantec.com/avcenter/venc/data/adware.adroar.html0
3 9ADService1 13ADService.exe119Any startup section0177Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip« disk. Required if you wish the applications to launch on insertion of a disk42http://www.iomega-activedisk.com/index.jsp0
4 4ADSS1 8ADSS.exe119Any startup section0227ADSS is part of Access Denied s ecurity and privacy softwa re (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied22http://www.johnru.com/0
310AdSubtract1 9adsub.exe119Any startup section0149AdSubtract b locks ads, cookies, pop-up window s, animations, music, and more. Can be disabled from within AdSubtract. Available via Start - Programs26http://www.adsubtract.com/0
1 6AdultX1 10AdultX.exe119Any startup section0 34Adult content dialler and hijacker26http://www.adsubtract.com/0
3 9ADUserMon1 13ADUserMon.exe119Any startup section0177Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip« disk. Required if you wish the applications to launch on insertion of a disk42http://www.iomega-activedisk.com/index.jsp0
230Advanced Tools Checkor AD VCHK1 10ADVCHK.EXE119Any startup section0141Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget42http://www.iomega-activedisk.com/index.jsp0
1 6Advapi1 10Advapi.exe119Any startup section0 59Added as a result of the NETDEVIL.12 ( NetDevil 1.2) VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_NETDEVIL.120
2 8AELaunch1 12AELaunch.exe119Any startup section0 68Audio Applications Launcher for the Philips Acoustic Edge s oundcard 01
3 8AEZBProc1 11aptezbp.exe119Any startup section0203IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions23http://www.altiris.com/0
3 9AFAFilter1 14windefault.exe119Any startup section0 37AFAFilter - internet filter software25http://www.afafilter.com/0
2 5Agent1 9Agent.exe119Any startup section0172Cyberlink Power VCR II 3.0 i s a TV tuner rec ording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start - Programs25http://www.cyberlink.com/0
3 8AgfaCLnk1 12AgfaCLnk.exe119Any startup section0162For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive47http://www.pandasoftware.com/products/titanium/0
4 8AGRSMMSG1 12AGRSMMSG.exe119Any startup section0 20IBM AMR modem driver47http://www.pandasoftware.com/products/titanium/0
211AGSatellite1 15AGSatellite.exe119Any startup section0107Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start - Programs47http://www.pandasoftware.com/products/titanium/0
315ahfpor ah fprog1 8ahfp.exe119Any startup section0315Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"22http://www.softbe.com/0
3 5AHNSD1 9AhnSD.exe119Any startup section0 91AhnLab V 3 antivirus updater - leave enabled unless you manually upd ate on a regular basis48http://home.ahnlab.com/english/product/01_1.html0
2 7AHQInit1 11ahqinit.exe119Any startup section0149Part of AudioHQ f or the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required 01
1 4Ahst1 8iebs.exe119Any startup section0104Downloader - identified by BOClean as MENDWARE trojan. Also identified as PurityScan/C lickspring adware26http://www.purityscan.com/0
2 3AIM1 7aim.exe119Any startup section0142AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start - Programs56http://www.fadsoft.com/Another%20IE%20Popup%20Killer.htm0
112AIM reminder1 16AIM reminder.exe219Any startup section0 37Added as a result of the BUDDY VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BUDDY.E0
130aimaol lptt01or ai maol ml097e1 10aimaol.exe119Any startup section0176Variant of the RapidBlaster p arasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
211AimingClick1 15AimingClick.exe119Any startup section0 81AimingClick f rom AimingTech. Web searching tool. Available via St art - Programs46http://www.aimingtech.com/aimingclick/home.htm0
212AIMWDInstall1 16AIMWDInstall.exe119Any startup section0170Wild Tangent o n-line games installer as part of AOL Instant Messenger. Note that Wild Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
1 8AKEYNAME1 11WinServ.exe119Any startup section0 41Added as a result of the EVILBOT.C VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.evilbot.c.html0
313Alarm Manager1 13Alarm.app.exe119Any startup section0 93Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop40http://sourceforge.net/projects/akiller/0
216Album Fast Start1 10ABMTSR.EXE119Any startup section0 50Scanner software, not required for scanner to work40http://sourceforge.net/projects/akiller/0
1 6Alevir1 10Alevir.exe119Any startup section0 41Added as a result of the OPASERV.A VIRUS!57http://www.sophos.com/virusinfo/analyses/w32opaserva.html0
2 5Alexa1 9Alexa.exe119Any startup section0207Alexa Toolbar " is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start - Programs65http://download.alexa.com/alexa65/startpage.html?p=Dest_W_g_40_L10
212AlienAutopsy1 11Test_BS.exe119Any startup section0 47Alienware c omputer technical support softwar e25http://www.alienware.com/0
317All Aboard Status1 10stswin.exe119Any startup section0 52All Aboard! Internet Connection Sharing s tatus icon58http://yippee.i4free.co.nz/html/win/internet/title6724.htm0
120All Sea screen saver1 12TaskTray.exe119Any startup section0 72"Free screensaver", installs lots of foistware. See here. Get rid of it85http://www.spywareinfo.com/forums/index.php?act=ST&f=10&t=5833&hl=&s=0
116All Sea web link1 10FWLink.exe119Any startup section0 085http://www.spywareinfo.com/forums/index.php?act=ST&f=10&t=5833&hl=&s=0
3 7allSnap1 11allSnap.exe119Any startup section0144"allSnap i s a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"48http://members.rogers.com/ivanheckman/index.html0
3 8Alogserv1 12Alogserv.exe119Any startup section0372From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up48http://members.rogers.com/ivanheckman/index.html0
424Alps Electric USB Server1 11Monserv.exe119Any startup section0 62Alps Electric USB Server - required according to this a rticle62http://support.microsoft.com/default.aspx?scid=kb;en-us;2006920
319AlpsPointor Ap oint1 10Apoint.exe119Any startup section0261Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work62http://support.microsoft.com/default.aspx?scid=kb;en-us;2006920
229Altnetor Al tnetPointsManager1 18points manager.exe219Any startup section0225Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required26http://www.altnet.com/faq/0
314AltoMB_service1 13AltoMBsrv.exe119Any startup section0127Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management28http://www.altosoftware.com/0
3 8ALUAlert1 13ALUNotify.exe119Any startup section0116Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis28http://www.altosoftware.com/0
316AlwaysOnTopMaker1 20AlwaysOnTopMaker.exe119Any startup section0112Always On Top Maker - utilty to enable an application to alway s be displayed "on top" of others on the desktop43http://www.fadsoft.com/AlwaysOnTopMaker.htm0
228America Online *.* Tray Icon1 11aoltray.exe119Any startup section0122Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start - Programs43http://www.fadsoft.com/AlwaysOnTopMaker.htm0
4 4Amon1 8AMON.EXE119Any startup section0 46Monitoring part of Eset's NOD32 v irus-scanner34http://www.nod32.com/home/home.htm0
4 8Amonitor1 8amon.exe119Any startup section0 22Tiny Personal Firewall44http://www.tinysoftware.com/home/tiny2?la=EN0
1 6anbv321 10nabv32.exe119Any startup section0 39Added as a result of the TITOG.C VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.titog.c.worm.html0
213Announcements1 12Annclist.exe119Any startup section0163MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it77http://securityresponse.symantec.com/avcenter/venc/data/w32.titog.c.worm.html0
2 7Anntext1 11Anntext.exe119Any startup section0 39Caere Pagekeeper text annotation server77http://securityresponse.symantec.com/avcenter/venc/data/w32.titog.c.worm.html0
338Another Internet Explorer Popup Killer1 9aiepk.exe119Any startup section0 41Another IE Popup Killer - pop-up stopper56http://www.fadsoft.com/Another%20IE%20Popup%20Killer.htm0
320Anti-keylogger check1 11antikey.exe119Any startup section0 81Anti-keylogger - protects against keylogger progra ms monitoring your keystrokes31http://www.anti-keyloggers.com/0
1 9Antivirus1 6av.exe119Any startup section0 74Added as a result of the SINKIN VIRUS! Resets IE start page to realphx.com74http://securityresponse.symantec.com/avcenter/venc/data/trojan.sinkin.html0
1 9Antivirus1 8maja.exe119Any startup section0 40Added as a result of the NETSKY.H VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.h@mm.html0
4 5AnVir1 9AnVir.exe119Any startup section0 22AnVir v irus destroyer17http://anvir.com/0
3 8anvshell1 12anvshell.exe119Any startup section0194System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel - Display Properties - Advanced as well as the System Tray shortcuts toolbar17http://anvir.com/0
217AO Trayor AO Tray1 10AOTray.Exe119Any startup section0102System Tray application for AOpen soundcards. Can be run manually via Start - Settings - Control Panel17http://anvir.com/0
313AolAcsDaemon11 8Acsd.exe119Any startup section0188AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually17http://anvir.com/0
1 6AolCon1 10config.com119Any startup section0 38Added as a result of the TAPLAK VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.taplak.html0
2 6AolFix1 10AolFix.exe119Any startup section0211Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.taplak.html0
1 6Aornum1 10aornum.exe119Any startup section0109Installed along with iWon Prize Machine. Based upon their privacy s tatement this can be regarded as spyware81http://www.iwon.com/home/companyinfo/p rivacy/privacy_overview/0,11882,,00.html#10
414APC UPS Status1 11Display.exe119Any startup section0 44APC PowerChute Personal Edition s tatus icon71http://www.apcc.com/products/family/index.cfm?id=129&web_displayed=0
311APC_SERVICE1 12mainserv.exe119Any startup section0110PowerChute« Personal Edition - "safe system shutdown software with sophisticated pow er management functions"65http://www.apcc.com/tools/download/software_comp.cfm?sw_sku=SDW750
4 8apc_tray1 12apc_tray.exe119Any startup section0124Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure65http://www.apcc.com/tools/download/software_comp.cfm?sw_sku=SDW750
111App.EXEName1 4.exe119Any startup section0 38Added as a result of the BODIRU VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.bodiru.html0
3 6Appcon1 11vAppCon.exe119Any startup section0227Vital Application Console - part of POS-partner 2000 p oint-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established38http://www.pos-partner.com/Product.htm0
311AppExtender1 12AppExtCB.exe119Any startup section0102Loads the Confimax a dd-in for popular E-mail programs to confirm E-mails have been sent and rece ived67http://www.confimax.com/?PHPSESSID=aefc68296846f048b5b7ae96e48d854f0
3 7AppPlus1 11AppPlus.exe119Any startup section0251AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"29http://www.appplusonline.com/0
417Apvxdor Ap vxdwin1 12APVXDWIN.EXE119Any startup section0 73Part of Panda Anti-Virus. Required to enable permanent v irus protection29http://www.pandasoftware.com/0
4 7Apwheel1 11Apwheel.exe119Any startup section0 37Wheel support for an Alps mouse 29http://www.pandasoftware.com/0
1 7Aritima1 11aritima.exe119Any startup section0 39Added as a result of the ARITIMA VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.aritim.html0
4 8ashMaiSv1 12ashmaisv.exe119Any startup section0 35Part of Avast! a nti-virus software35http://www.alwil.com/en/default.asp0
3 7AsioReg1 23regsvr32.exe ctasio.dll219Any startup section0165ASIO ( Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
2 8asp4tray1 12asp4tray.exe119Any startup section0116System Tray application for Aureal Vortex based soundcards. Can be run manually via Start - Settings - Control Panel69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
417AspireTimeMachine1 11acertmb.exe119Any startup section0189System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
1 3AST1 3AST119Any startup section0 60Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
3 6ASTART1 10astart.exe119Any startup section0149ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
1 6AStart1 6AStart119Any startup section0 60Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
2 6asTray1 10Astray.exe119Any startup section0114Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/ organizer42http://www.voyetra.com/site/products/ump3/0
2 5Astro1 9Astro.exe119Any startup section0 48Checks for updates to Quicken on a system reboot42http://www.voyetra.com/site/products/ump3/0
210ASUS Probe1 12AsusProb.exe119Any startup section0100ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area42http://www.voyetra.com/site/products/ump3/0
316ASUS SmartDoctor1 12VGAProbe.exe119Any startup section0 35ASUS video card fan/thermal monitor42http://www.voyetra.com/site/products/ump3/0
316ASUS TweakEnable1 10astart.exe119Any startup section0130Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings42http://www.voyetra.com/site/products/ump3/0
2 7ASUSKey1 12V38SHELL.EXE119Any startup section0 49System tray Icon for quickly changing video modes42http://www.voyetra.com/site/products/ump3/0
2 5ASWDP1 9ASWDP.exe119Any startup section0143MLS Pulse - real estate software. Keeps the home buyer/seller continua lly informed on the status of his/her local/regional real estate market51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
223ATI GART Set-up Utility1 11Atigart.exe119Any startup section0169Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
313ATI Launchpad1 12launchpd.exe119Any startup section0174Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
213ATI Scheduler1 12Atisched.exe119Any startup section0297Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start - Programs - Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
220ATI Task Application1 11Atitkad.exe119Any startup section0 75System Tray access to common display functions on ATI video cards. As above51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
229ATI Task Application (Atikey)1 11Atitask.exe119Any startup section0149System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start - Settings - Control Panel - Display51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
2 8Ati2mdxx1 12Ati2mdxx.exe119Any startup section0 64For ATI video cards. System Tray access to display mode changing51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
318AtiCwdor At iCwd321 36AtiCwd.exe AtiCwd32.exe Ati2cwad.exe219Any startup section0147This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
2 6AtiKey1 25AtiKey32.exe atiptkad.exe219Any startup section0149System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start - Settings - Control Panel - Display51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
313ATIModeChange1 12Ati2mdxx.exe119Any startup section0 89System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
319ATIPOLABor AT IPOLL1 12ati2evxx.exe119Any startup section0209ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
330AtiPTAor At iPTAAAor at iptaxx1 25Ati2ptxx.exe Atiptaxx.exe219Any startup section0241Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start - Settings - Control Panel - Display. Some users may need it if they have optimised their settings51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
3 8AtiQiPcl1 12AtiQiPcl.exe119Any startup section0119Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's51http://www.stevejacksonre.com/mls_pulse_sign_up.htm0
3 8ATISmart1 12ati2s9ag.exe119Any startup section0166ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings53http://mirror.ati.com/products/pc/catalyst/index.html0
1 7atisrc21 12windfind.exe119Any startup section0181Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and R egCompres (REGCPM32.EXE), otherwise they return85http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=7756&hl=&s=0
223atitrayor At iTrayTools1 11atitray.exe119Any startup section0 65ATI Tray Tool - allows quick access to ATI graphics card settings85http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=7756&hl=&s=0
111ATM Control1 8adpn.exe119Any startup section0 37Added as a result of the MMS.A VIRUS!86http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MMS.A&VSect=T0
2 7ATnotes1 11atnotes.exe119Any startup section0 99Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start - Programs86http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MMS.A&VSect=T0
2 7Atomica1 11atomica.exe119Any startup section0197Atomica r uns from the System Tray and allo ws the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key23http://www.atomica.com/0
310AtomicTime1 14ATOMICTIME.EXE119Any startup section0 73AtomicTime - utility that synchronizes your PC cl ock to an atomic clock30http://schmail.com/atomictime/0
3 6Atrack1 10atrack.exe119Any startup section0426New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert30http://schmail.com/atomictime/0
3 5Atray1 9Atray.exe119Any startup section0108Active Tray i s a utility which lets you configure t he system tray. You can also create your own tray icons32http://www.divcomsoft.com/atray/0
318ATTBroadbandUpdate1 12SAUpdate.exe119Any startup section0 61Big Brother f rom Quest Software. S ystem and network monitor15http://bb4.com/0
312ATTRedUpdate1 14AutoUpdate.exe119Any startup section0246Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates15http://bb4.com/0
118AttuneClientEngine1 13attune_ce.exe119Any startup section0286"Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer". Not required - treated as adware15http://bb4.com/0
120AttuneContentUpdater1 13attune_cu.exe119Any startup section0 71Related to the above. All needed for the program to do its job properly15http://bb4.com/0
115AttuneDiscovery1 13attune_di.exe119Any startup section0 71Related to the above. All needed for the program to do its job properly15http://bb4.com/0
113AttuneSystray1 13attune_st.exe119Any startup section0 71Related to the above. All needed for the program to do its job properly15http://bb4.com/0
2 6aTuner1 10atuner.exe119Any startup section0 53aTuner - tweak tool for GeForce based graphics cards41http://www.3dcenter.de/atuner/index_e.php0
3 8AU Agent1 11AUagent.exe119Any startup section0179Au Agent f rom Zilab Software. Win2K/NT enhancement tool. Allows y ou to run applications under any security context without closing the whole logon session to process a new logon46http://www.zilab.com/Products/Au/index_2.shtml0
1 6au.exe1 6au.exe119Any startup section0 42Added as the result of the BEAGLE.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.b@mm.html0
4 7AUCBPNP1 11aucbnpn.exe119Any startup section0141Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus w hich provides USB 2.0 ports for laptop users via a PCMCIA card slot 01
1 8Aucompat1 12Aucompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 7AudioHQ1 9Ahqtb.exe119Any startup section0129For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start - Programs72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
428Aureal A3D Interactive Audio1 11sa3dsrv.exe119Any startup section0 80For Aureal based 3D soundcards. A3D sound features won't work with this disabled72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
433Aureal A3D Interactive Audio Init1 11A3dInit.exe119Any startup section0 80For Aureal based 3D soundcards. A3D sound features won't work with this disabled72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 5ausvc1 9ausvc.exe119Any startup section0 41Added as a result of the AUTOUPDER VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
222Auto T Baror au totbar1 12autotbar.exe119Any startup section0140If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
3 7Autobar1 11autobar.exe119Any startup section0 80Connect buttons on the keyboard for internet direct access, etc. on HP computers79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
2 6AutoEA1 10Ahqrun.exe119Any startup section0189For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
123Autoloaderaproposclient1 25Apropos_Client_Loader.exe119Any startup section0 20AproposMedia a dware45http://doxdesk.com/parasite/AproposMedia.html0
227AutoMate Task Service 1 12automate.exe119Any startup section0131Task scheduler for Unisyn Automate 4 t ask automation/macro r unning software. Available via a desktop shortcut or Start - Programs22http://www.unisyn.com/0
125Automatic Windows Updater1 10Update.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
276Automatically launches the United Devices Agent when you start your computer1 6UD.EXE119Any startup section0253The United Devices Agent c an recycle your PC's unused resou rces and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start - Programs36http://members.ud.com/download/gold/0
2 8AUTOPROP1 24REGPROP.EXE WMPADDIN.DLL219Any startup section0112Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension36http://members.ud.com/download/gold/0
3 9AutoSizer1 13AUTOSIZER.EXE119Any startup section0 78AutoSizer - utility that automatically maximizes window s when they're opened36http://www.southbaypc.com/AutoSizer/0
2 8AutoTKit1 12AUTOTKIT.EXE119Any startup section0142On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled28http://www.spellchecker.com/0
2 7autoupd1 11autoupd.exe119Any startup section0 75Raxco Software Auto Update u tility."Used to keep your software up-to-date"59http://www.raxco.com/support/windows/kb_details.cfm?kbid=460
111AutoUpdater1 11aupdate.exe119Any startup section0 34Aupdate, Tinybar v ariant. Spyware44http://www.doxdesk.com/parasite/TinyBar.html0
111AutoUpdater1 14AutoUpdate.exe119Any startup section0 23PeopleonPage f oistware48http://www.pchell.com/support/peopleonpage.shtml0
2 8AUXXTRAY1 12au30setp.exe119Any startup section0116System Tray application for Aureal Vortex based soundcards. Can be run manually via Start - Settings - Control Panel48http://www.pchell.com/support/peopleonpage.shtml0
4 6Avast!1 11ashserv.exe119Any startup section0 27Avast! a nti-virus software35http://www.alwil.com/en/default.asp0
312AvconsoleEXE1 12Avconsol.exe119Any startup section0151From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it35http://www.alwil.com/en/default.asp0
110AveoAttune1 12atmdlusr.exe119Any startup section0 36Related to AttuneClientEngine a bove 01
4 7AVG7_CC1 9AVGCC.exe119Any startup section0119AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates 01
412avgamsvr.exe1 12Avgamsvr.exe119Any startup section0 21AVG antivirus related 01
4 7AVGCtrl1 11AVGCTRL.EXE119Any startup section0100Background task of the AntiVir a ntivirus program which scans fi les transparently in the background21http://www.hbedv.com/0
411avgmsvr.exe1 11avgmsvr.exe119Any startup section0 43Required for AVG Anti-Virus 7.0 to function21http://www.hbedv.com/0
412Avgserv9.exe1 12Avgserv9.exe119Any startup section0 48Background monitoring program for AVG anti-virus21http://www.hbedv.com/0
417AVG_CCor av gcc321 11avgcc32.exe119Any startup section0105AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates21http://www.hbedv.com/0
4 7AVG_EMC1 10AVGEMC.exe119Any startup section0 79AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses21http://www.hbedv.com/0
414AVG_RegCleaner1 12AVGREGCL.exe119Any startup section0111AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems21http://www.hbedv.com/0
1 6Avimgt1 10Avimgt.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Avimgt321 12Avimgt32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
120Avril Lavigne - Muse1 15random filename219Any startup section0 39Added as a result of the AVRIL-A VIRUS!55http://www.sophos.com/virusinfo/analyses/w32avrila.html0
4 9AVSCHED321 13AVSched32.exe119Any startup section0 31AntiVir a nti-virus from H+BDEV21http://www.hbedv.com/0
2 6Avtray1 10Avtray.exe119Any startup section0 28Command Antivirus t ray icon53http://www.command.co.uk/html/products/csav/index.cfm0
3 8AVWUpd321 12AVWUPD32.EXE119Any startup section0 50AntiVir u pdater. Useful, but can be run manually21http://www.hbedv.com/0
416avx communicator1 12xcommsur.exe119Any startup section0 54Anti-virus part of BitDefender v irus scanner/firewall27http://www.bitdefender.com/0
4 7Avxlive1 11avxlive.exe119Any startup section0 36Bullguard o r BitDefender a ntivirus28http://www.bitdefender .com/0
4 6avxlni1 11avxinit.exe119Any startup section0 54Anti-virus part of BitDefender v irus scanner/firewall27http://www.bitdefender.com/0
2 8awhost321 12awhost32.exe119Any startup section0269Part of Symantec's pcAnywhere r emote PC management software. Provides an automatic startup of th e client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended72http://enterprisesecurity.symantec.com/products/products.cfm?productID=20
2 7B'sCLiP1 10BSCLIP.exe119Any startup section0 80CD recording utility that comes with a lot of CDR/CDRW drives and isn't required27http://www.emsisoft.com/en/0
2 8B.Reader1 9remin.exe119Any startup section0 44Birthday Reminder 5.0 - as the name implies25http://www.harshal.da.ru/0
1 3b3d1 20BDEsecureinstall.exe119Any startup section0409B3d Projector - installed along with the KaZaA file sharing ut ility. Causes a program called "ZUPDATE.EXE" to periodically try to access the internet. (1) Uninstall it via Start - Settings - Control Panel - Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents43http://www.kazaa.com/en/privacy/bundles.htm0
1 9b3dUpdate1 11Zupdate.exe119Any startup section0 41Same as above but not installed via KaZaA43http://www.kazaa.com/en/privacy/bundles.htm0
3 2b91 6B9.exe119Any startup section0296FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, p rivacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run"84http://www.firetrust.com/products/benign/?PHPSESSID=b60bb4b6eb22115639c465d6f606b7880
1 3b991 8msmm.exe119Any startup section0 27ClientMan p arasite variant42http://doxdesk.com/parasite/ClientMan.html0
1 6babeie1 31rundll32 cnbabe.dll, dllstartup219Any startup section0 50CommonName Toolbar s pyware. To uninstall see here66http://www.commonname.com/e nglish/ug/toolbar/default.asp?idx=10#40
218Babylon Translator1 11Babylon.exe119Any startup section0158"Babylon-Pro i s a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"23http://www.babylon.com/0
318BackgroundSwitcher1 12bgswitch.exe119Any startup section0329Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here33http://shellcity.net/content4.htm0
212Backpack UDF1 12bpudfmon.exe119Any startup section0177Backpack UDF p acket writing software fo r Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk20http://www.nero.com/0
319BackupExecScheduler1 9besch.exe119Any startup section0 32Veritas "Back Up My PC" software20http://www.nero.com/0
2 7BackWeb1 11backweb.exe119Any startup section0221Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start - Programs20http://www.nero.com/0
2 8Backwork1 12Backwork.exe119Any startup section0 25Backwork t rojan detector47http://www.framework.nl/backwork/eng/index.html0
3 7BACPI101 12bacpi10a.exe119Any startup section0196Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray47http://www.framework.nl/backwork/eng/index.html0
2 8BacsTray1 12BacsTray.exe119Any startup section0141Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems47http://www.framework.nl/backwork/eng/index.html0
1 7BADDATE1 11BADDATE.EXE119Any startup section0 43Added as a result of an unidentified VIRUS!47http://www.framework.nl/backwork/eng/index.html0
318Banpopup by Pratik1 12Banpopup.exe119Any startup section0 24Banpopup - popup killer36http://www33.brinkster.com/banpopup/0
1 8bargains1 29bargains.exe bargainbuddy.exe219Any startup section0121Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here52http://www.safersite.com/PestInfo/B/BargainBuddy.asp0
313Battery Scope1 10batmgr.exe119Any startup section0 47Monitors battery levels on a notebook/laptop PC 01
310BatteryBar1 14batterybar.exe119Any startup section0 87BatteryBar - displays battery usage, and the current percentage of battery power left45http://www.nistech.com/BatteryBar/Default.htm0
1 8BatzBack1 12BatzBack.scr119Any startup section0 39Added as a result of the BACKZAT VIRUS!64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 5BAUSB1 9BAUSB.exe119Any startup section0 34Boston Acoustics Audio, USB driver64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 6BayMgr1 11DockApp.exe119Any startup section0156Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices 64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 7Bayswap1 11bayswap.exe119Any startup section0161Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
2 9bbSysTray1 13bbSysTray.exe119Any startup section0159Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 4bbui1 8bbui.exe119Any startup section0 86AOL DSL status monitor displaying a red/green icon indicating if you have a connection64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 8BCDetect1 12bcdetect.exe119Any startup section0184Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
4 8BCMDMMSG1 12bcmdmmsg.exe119Any startup section0 75BCM voicemodem driver. Required for dial-up if you have one of these modems64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
3 6BCMHal1 33rundll32.exe bcmhal9x.dll, bcinit219Any startup section0171BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
4 8BCMSMMSG1 12BCMSMMSG.exe119Any startup section0 75BCM voicemodem driver. Required for dial-up if you have one of these modems64http://www.symantec.com/avcenter/venc/data/w32.backzat.worm.html0
2 4BCNT1 8bcnt.exe119Any startup section0 42AWS Weatherbug r elated. What does it d o?39http://www.weatherbug.com/aws/index.asp0
3 7BCTweak1 11bctweak.exe119Any startup section0171BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings39http://www.weatherbug.com/aws/index.asp0
2 8BCWipeTM1 12bcwipetm.exe119Any startup section0188BCWipe T ask Manager - scheduler for BCWip e so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed22http://www.jetico.com/0
4 6BDMCon1 10Bdmcon.exe119Any startup section0 22BitDefender a ntivirus46http://www.bitdefender.com/press/ref100203.php0
2 9BearShare1 13bearshare.exe119Any startup section0 77BearShare f ile sharing client. Versions know n to include spyware - see here30http://www.cexx.org/adware.htm0
119Benadril Alert Tool1 17benadrilalert.exe119Any startup section0102Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril30http://www.cexx.org/adware.htm0
4 2bg1 13bullguard.exe119Any startup section0 97Bullguard a ntivirus and firewall. The P2P ve rsion is free with KaZaA Media Desktop and Grokster25http://www.bullguard.com/0
2 7bgsmsnd1 11bgsmsnd.exe119Any startup section0 53Printer driver to generate PDF files from any program25http://www.bullguard.com/0
2 6BHOCop1 10BHOCop.exe119Any startup section0107ZDNet's BHO Cop t hat lets you see what browser helper objects are installed. Useful for detecting spyware70http://www.zdnet.com/products/stories/reviews/0,4161,2760348-9,00.html0
1 3BIE1 35Rundll32.exe BDSrHook.dll, Rundll32219Any startup section0 18BDplugin p arasite49http://www.pestpatrol.com/PestInfo/b/bdplugin.asp0
2 6bigfix1 10BIGFIX.EXE119Any startup section0354BigFix c an automatically download and read technical suppor t information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet« Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog40http://www.bigfix.com/website/index.html0
315BigPond Toolbar1 12bpumTray.exe119Any startup section0194Telstra BigPond Toolbar - "Introducing the free and easy to u se BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier"42http://www.bigpond.com/helpcentre/toolbar/0
210Billminder1 12Billmind.exe119Any startup section0 86Can be setup in Quicken to remind user of due payments. Available via Start - Programs42http://www.bigpond.com/helpcentre/toolbar/0
1 8bin32hpu1 10ppstub.exe119Any startup section0 20PrecisionPop a dware24http://precisionpop.com/0
1 8bingdian1 12Bingdian.vbs119Any startup section0 37Added as a result of the BINGD VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/vbs.bingd@mm.html0
1 4Bios1 10Bios32.exe119Any startup section0 43Added as a result of an unidentified VIURS!73http://securityresponse.symantec.com/avcenter/venc/data/vbs.bingd@mm.html0
1 5BIOS11 9BIOS1.EXE119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
424BitDefender Communicator1 12xcommsvr.exe119Any startup section0 22BitDefender a ntivirus46http://www.bitdefender.com/press/ref100203.php0
329BitDefender for MSN Messenger1 10msnmon.exe119Any startup section0112Bitdefender a nti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually52http://www.bitdefender.com/html/bd_msn_messenger.php0
422BitDefender Live! Init1 10bdinit.exe119Any startup section0 22BitDefender a ntivirus46http://www.bitdefender.com/press/ref100203.php0
415bitdefenderlive1 11avxlive.exe119Any startup section0 51Main program of BitDefender v irus scanner/firewall27http://www.bitdefender.com/0
323BitDefender_P2P_Startup1 27BitDefender_P2P_Startup.exe119Any startup section0166Bitdefender a nti-virus for file transfers via internet messaging client s such as ICQ and MSN Messenger. Unless you have these running all the time start it manually52http://www.bitdefender.com/html/bd_msn_messenger.php0
225BJ Printer Status Monitor1 10Cjstsr.exe119Any startup section0 31Canon BJ printer status monitor54http://www.accpac.com/products/communication/faxserve/0
221BJ Status Monitor 5xx1 11CJSTRxx.EXE119Any startup section0158Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer - Printers54http://www.accpac.com/products/communication/faxserve/0
2 5bjcfd1 7cdf.exe119Any startup section0156BroadJump C lient Foundation. Broadband troub leshooting software installed by various companies. Not required and you can remove it via Add/Remove programs25http://www.broadjump.com/0
242BlackICE PC Protectionor Bl ackIce Utility1 12blackice.exe119Any startup section0403Loads the user interface for the BlackICE PC Protection ( was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD26http://www.networkice.com/0
212BlazeChanger1 12FBZPaper.exe119Any startup section0 57Ember g raphic file viewer, manager, and touch-up system30http://www.firehand.com/Ember/0
122BLMessagingIntegration1 12blengine.exe119Any startup section0 18BuddyLinks a dware76http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=1010070
317BlockAdsor bl ads1 9blads.exe119Any startup section0129A Tweak-XP c omponent, blocks advertisement b anners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks23http://www.tweakxp.com/0
212BlockTracker1 16BlockTracker.exe119Any startup section0 91If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file23http://www.tweakxp.com/0
2 7BLSTAPP1 11blstapp.exe119Any startup section0 59Puts access to Creative's BlasterControl in the System Tray23http://www.tweakxp.com/0
218BMail Installation1 12FTP_back.exe119Any startup section0204Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not21http://www.imesh.com/0
3 6BMMGAG1 38Rundll32 PWRMONIT.DLL, StartPwrMonitor219Any startup section0165Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window21http://www.imesh.com/0
3 7BMMLREF1 11BMMLREF.EXE119Any startup section0 40Battery Manager for IBM ThinkPad laptops21http://www.imesh.com/0
321BMO MasterCard Wallet1 11EWALLET.EXE119Any startup section0 83The wallet conveniently stores billing, shipping and payment information on your PC21http://www.imesh.com/0
2 8BMupdate1 12BMupdate.exe119Any startup section0153Related to BookmarkCentral b elow. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install 01
1 6Bndt321 10Bndt32.exe119Any startup section0 37Added as a result of the LACON VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lacon@mm.html0
1 5Bnexe1 15random filename219Any startup section0 54Added as a result of the KITRO.D ( or ARGEN.A) VIRUS!89http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ARGEN. A&VSect=T0
416BOCleanautostart1 11Boclean.exe119Any startup section0 39NSClean's BOClean a nti-trojan software35http://www.nsclean.com/boclean.html0
3 8bombshel1 10BOMB32.EXE119Any startup section0163Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems35http://www.nsclean.com/boclean.html0
111BookedSpace1 14bs2.dll,DllRun119Any startup section0 41Adware, related to the Remanent p arasite45http://www.doxdesk.com/parasite/Remanent.html0
215BookmarkCentral1 14BMLauncher.exe119Any startup section0115Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use"31http://www.bookmarkexpress.com/0
316Boost XP Service1 13bxservice.exe119Any startup section0 54Boost XP f rom Systweak - WinXP tweaking utility 43http://www.systweak.com/boostxp/boostxp.htm0
1 4boot1 8boot.exe119Any startup section0 36Added as a result of the ELEM VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
112Boot Manager1 9Njgal.exe119Any startup section0 36Added as a result of the KILO VIRUS!61http://www.symantec.com/avcenter/venc/data/backdoor.kilo.html0
110BootLoader1 18BootLoader.exe vbs219Any startup section0 42Added as a result of the WATERWORKS VIRUS!67http://www.symantec.com/avcenter/venc/data/vbs.waterworks.worm.html0
310BootStatus1 12BOOTST~1.EXE119Any startup section0183Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources67http://www.symantec.com/avcenter/venc/data/vbs.waterworks.worm.html0
220Bose Wave/PC Monitor1 17wavepcmonitor.exe119Any startup section0 98System Tray access for this system (more info on the system here). Available via Start - Programs70http://www.bose.com/home_audio/interactive_systems/wave_pc/index.shtml0
311bpcpost.exe1 11bpcpost.exe119Any startup section0204MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it70http://www.bose.com/home_audio/interactive_systems/wave_pc/index.shtml0
3 3BPK1 7bpk.exe119Any startup section0190Blazing Tools Perfect Keylogger ( monitoring program). Given a "U" rec ommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove36http://www.blazingtools.com/bpk.html0
310BQTray.exe1 10BQTray.exe119Any startup section0181System Tray access to BurnQuick C D burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually25http://www.burnquick.com/0
1 6Brasil1 10Brasil.exe119Any startup section0 41Added as a result of the OPASERV.E VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.E0
1 6Brasil1 10BRASIL.PIF119Any startup section0 41Added as a result of the OPASERV.E VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.E0
415Brindys BriTray1 11BRITRAY.EXE119Any startup section0435Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired23http://www.brindys.com/0
216Broadband Wizard1 9bbwiz.exe119Any startup section0154Starts Broadband Wizard s o it runs in the System Tray. Th is application tests and optimizes your Cable or DSL connection. Available via Start - Programs31http://www.broadbandwizard.net/0
211BrowseProxy1 15FindService.exe119Any startup section0214Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you"46http://actualnames.com/index.php?cont=products0
111browser aid1 14browseraid.exe119Any startup section0 32BrowserAid/BrowserPal f oistware47http://www.doxdesk.com/parasite/BrowserAid.html0
422Browser Hijack Blaster1 13bhblaster.exe119Any startup section0111Browser Hijack Blaster - protects your system from browser hijac kers and spyware that alters your IE settings45http://www.wilderssecurity.com/bhblaster.html0
316Browser Launcher1 12Commandr.exe119Any startup section0162Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys45http://www.wilderssecurity.com/bhblaster.html0
111Browser Pal1 10adblck.exe119Any startup section0 32BrowserAid/BrowserPal f oistware47http://www.doxdesk.com/parasite/BrowserAid.html0
215BrowserWebCheck1 10loadwc.exe119Any startup section0 57Checks to make sure that IE is still your default browser47http://www.doxdesk.com/parasite/BrowserAid.html0
112Bsoft lppt011 9Bsoft.exe119Any startup section0185New variant of the RapidBlaster p arasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 6bttray1 10bttray.exe119Any startup section0361System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard (ditto above), advanced configuration, quick connect and shutdown device48http://www.doxdesk.com/parasite/BookedSpace.html0
4 9BTUSRBDGF1 12BtUsrBdg.exe119Any startup section0 42Used with a Mitsumi USB Bluetooth a daptor33http://www.mitsumi.de/index4.html0
2 9Buddyizer1 13Buddyizer.exe119Any startup section0113Part of the AIMster P eer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network 01
318bugwatcher service1 14bugwatcher.exe119Any startup section0306Bugtoaster i s a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures26http://www.bugtoaster.com/0
315Bulldog Service1 8upsd.exe119Any startup section0150Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link26http://www.bugtoaster.com/0
4 9BullGuard1 8mgui.exe119Any startup section0 28Part of Bullguard a ntivirus25http://www.bullguard.com/0
316BullGuard Update1 11avxlive.exe119Any startup section0 89Part of Bullguard a ntivirus. Leave enabled unless yo u manually update virus definitions25http://www.bullguard.com/0
415BullGuard XComm1 12XCOMMSVR.EXE119Any startup section0 28Part of Bullguard a ntivirus25http://www.bullguard.com/0
414BullguardoptIn1 16bulldownload.exe119Any startup section0 28Part of Bullguard a ntivirus25http://www.bullguard.com/0
313Button Server1 12bttnserv.exe119Any startup section0220Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required53http://www.intelliseek.com/prod/bullseye/bullseye.htm0
2 9ButtonKey1 13ButtonKey.exe119Any startup section0221CyberView TWAIN driver for the Pacific Image r ange of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut45http://www.scanace.com/en/product/product.php0
2 5Buzme1 8Bmui.exe119Any startup section0201Buzme b y RingCentral, Inc - internet call waiting. Interc epts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem38http://www.buzme.com/buzme/default.asp0
3 9Buzof.exe1 9buzof.exe119Any startup section0162Buzof f rom Basta Computing "enables you to automatica lly answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes"34http://www.basta.com/ProdBuzof.htm0
1 5bxsx51 21RunDLL32.EXE bsx5.dll219Any startup section0 29BookedSpace p arasite variant44http://doxdesk.com/parasite/BookedSpace.html0
1 5bxxs51 30RunDLL32.EXE bxxs5.dll, dllrun219Any startup section0 21BookedSpace p arasite44http://doxdesk.com/parasite/BookedSpace.html0
113Bymer.Scanner1 22Wininit.exe Msinit.exe219Any startup section0 37Added as a result of the BYMER VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.bymer.html0
1 1c1 15archiv~1win.com119Any startup section0 38Added as a result of the CUYDOC VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.cuydoc.html0
320C-Media Echo Control1 12EchoCtrl.exe119Any startup section0179C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer (below) 74http://securityresponse.symantec.com/avcenter/venc/data/trojan.cuydoc.html0
213C-Media Mixer1 9Mixer.exe119Any startup section0217C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start - Settings - Control Panel or Start - Programs74http://securityresponse.symantec.com/avcenter/venc/data/trojan.cuydoc.html0
3 3C2K1 9CYB2K.EXE119Any startup section0181CYBERsitter 2000 or 2001 - anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser74http://securityresponse.symantec.com/avcenter/venc/data/trojan.cuydoc.html0
1 6Cabchk1 10Cabchk.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Cabchk321 12Cabchk32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
111CABCInstall1 15CABCInstall.exe119Any startup section0 31CABC c ontent delivery software45http://www.cabc.com/product/product_main.html0
2 8Cacheman1 12Cacheman.exe119Any startup section0105Freeware disk cache tweaker from Outer Technologies. Should onl y be run once and not loaded at start-up25http://www.outertech.com/0
4 8CacheMgr1 12CacheMgr.exe119Any startup section0 31Sophos Antivirus R emote Update35http://www.sophos.com/products/sav/0
322Caddais BackupOnDemand1 10BODMon.exe119Any startup section0192Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"43http://www.caddais.com/BackupOnDemand.shtml0
2 6CAgent1 10CAgent.exe119Any startup section0102Abbyy Fine Reader O CR (Optical Character Recog nition) software for scanning and converting documents27http://www.fine-reader.com/0
213CahootWebcard1 17CahootWebcard.exe119Any startup section0293"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed63http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html0
221Cal Reminder Shortcut1 10calrem.exe119Any startup section0 75Produces a pop-up reminder of events scheduled using the MS Office Calendar63http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html0
211CallControl1 12ftctrl32.exe119Any startup section0268FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows63http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html0
2 8CamCheck1 12CamCheck.exe119Any startup section0 30NuCam c amera software related34http://www.nucam.com.tw/index1.htm0
214Camio Viewer x1 12IXApplet.exe119Any startup section0148Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version34http://www.nucam.com.tw/index1.htm0
2 6Canada1 10Canada.exe119Any startup section0 54Known to be a dial ler - but is it maliscous or clean?34http://www.nucam.com.tw/index1.htm0
212Card Monitor1 12REGCNT09.exe119Any startup section0 96For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start - Programs30http://www.captureexpress.com/0
311CARPservice1 12carpserv.exe119Any startup section0127Associated with Zoltrix m odems - enables the internal mode m speaker, allowing you to listen to the dial-up sounds for example23http://www.zoltrix.com/0
1 8Casdvqwa1 11bmqnzkg.exe119Any startup section0 41Added as a result of the RANDEX.BE VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.be.html0
229Cashsurfers Cashbar Navigator1 11Cashbar.Exe119Any startup section0159Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.be.html0
3 7CBWAttn1 11CBWAttn.exe119Any startup section0 77Required for Bitware t o answer incoming faxes, can cause sleep mode problems53http://www.accpac.com/products/communication/bitware/0
3 7CBWHost1 11CBWHost.exe119Any startup section0 77Required for Bitware t o answer incoming faxes, can cause sleep mode problems53http://www.accpac.com/products/communication/bitware/0
1 6CC2KUI1 9comet.exe119Any startup section0193Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here f or more information and for the uninstall procedure43http://www.accs-net.com/smallfish/comet.htm0
4 5ccApp1 9ccApp.exe119Any startup section0 93Part of Norton AntiVirus 2003. Auto-protect and E-mail check wil l not function without this37http://www.symantec.com/nav/nav_9xnt/0
1 5ccApp1 8filename119Any startup section0114Added as a result of the OBSORB VIRUS! Note the random filename compared to the valid Norton AntiVirus entry above74http://securityresponse.symantec.com/avcenter/venc/data/trojan.obsorb.html0
311CCD Manager1 7DDS.EXE119Any startup section0 65Project Labs Century CD m anager for their CD/DVD storage de vice27http://www.centurycdna.com/0
2 8Ccdecode1 43rundll32.exe streamci, StreamingDeviceSetup219Any startup section0 70Part of the closed caption decdoder/MS VBI codec. Should only run once27http://www.centurycdna.com/0
420CCDoctorLogonTesting1 12ccdoctor.exe119Any startup section0371Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product52http://www.rational.com/products/clearcase/index.jsp0
4 8CcEvtMgr1 12ccEvtMgr.exe119Any startup section0221Part of Norton AntiVirus 2003. Event mana ger for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this37http://www.symantec.com/nav/nav_9xnt/0
4 8CcPxySvc1 12CCPXYSVC.exe119Any startup section0146Part of Norton's AntiVirus 2003, Internet Security a nd Firewall p roducts. E-mail proxy service - required for E- mail scanning and the firewall38http://www.symantec.com/sabu/ nis/npf/0
1 5ccreg1 12explorer.exe119Any startup section0 79Added as a result of the ZCREW VIRUS! Note - this is not the valid explorer.exe66http://www.symantec.com/avcenter/venc/data/backdoor.irc.zcrew.html0
4 8CcRegVfy1 12ccRegVfy.exe119Any startup section0204Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"37http://www.symantec.com/nav/nav_9xnt/0
4 8ccSetMgr1 12ccSetMgr.exe119Any startup section0 47Part of Norton AntiVirus 2004. What does it do?37http://www.symantec.com/nav/nav_9xnt/0
3 8ccWasher1 13aolwasher.exe119Any startup section0204Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL37http://www.symantec.com/nav/nav_9xnt/0
2 8CDANTSRV1 12CDANTSRV.exe119Any startup section0234C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually37http://www.symantec.com/nav/nav_9xnt/0
1 8Cdcompat1 12Cdcompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
213CDInterceptor1 7cdi.exe119Any startup section0 48CD indexer for measuring the speed of CD players72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 6CDTray1 10CDTray.exe119Any startup section0 53On HP PCs, this is the small CD icon next to the time72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 3CFD1 7CFD.exe119Any startup section0156BroadJump C lient Foundation. Broadband troub leshooting software installed by various companies. Not required and you can remove it via Add/Remove programs25http://www.broadjump.com/0
1 8CFDStart1 13WinMuschi.exe119Any startup section0 18WINMUSCHI d ialler77http://securityresponse.symantec.com/avcenter/venc/data/dialer.winmuschi.html0
4 8cfgintpr1 12cfgintpr.exe119Any startup section0 62Configuration Interpreter - part of Tiny Personal Firewall V 444http://www.tinysoftware.com/home/tiny2?la=EN0
2 6cfgwiz1 10cfgwiz.exe119Any startup section0126Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it44http://www.tinysoftware.com/home/tiny2?la=EN0
1 8cftmon321 12taskmgr#.exe119Any startup section0106Added as a result of the SOWSAT.C a nd SOWSAT.J VIRUSES! where # is a number greater than or equal to zero77http://securityresponse.symantec.com/avcenter/venc/data/w32.sowsat.j@mm.h tml0
3 8CGServer1 12cgserver.exe119Any startup section0272Associated with an Eicon Networks I SDN or ADSL modem. Call Guard Server (CGserve r) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs42http://www.eicon.com/worldwide/default.htm0
115Cgtask Services1 10cgtask.exe119Any startup section0 38Added as a result of the LALA.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lala.b.html0
226Check for One Touch Update1 12wiseupdt.exe119Any startup section0 50Checks for updates for Visioneer OneTouch scanners30http://www.softshape.com/cham/0
315Check Messenger1 12cmesseng.exe119Any startup section0 99Check Messenger f rom Qchex.com - program that helps y ou manage the activity of your Qchex account34http://www.qchex.com/messenger.asp0
3 7CheckIt1 11ToolBox.exe119Any startup section0229CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as . ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify76http://cssvc.pcworld.compuserve.com/computing/cis/article/0,aid,15497,00.asp0
412CheckMsgPlus1 32MsgPlusH.dll, VerifyInstallation219Any startup section0129Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here f or more info.50http://www.patchou.com/msgplus/faq.htm#stopconnect0
312CherryKeyMan1 10KeyMan.exe119Any startup section0110Multimedia keyboard manager for the Cherry k eyboard series. Only required if you use any of the special keys34http://www.cherrycorp.com/english/0
311ChineseStar1 9cstar.exe119Any startup section0 33Chinese language support software34http://www.cherrycorp.com/english/0
2 8CHKADMIN1 12CHKADMIN.EXE119Any startup section0119Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"34http://www.cherrycorp.com/english/0
1 5Choke1 15Choke.exe blahh219Any startup section0 37Added as a result of the CHOKE VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.choke.worm.html0
1 7chostsv1 11chostsv.exe119Any startup section0 41Added as a result of the BANPAES.C VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.banpaes.c.html0
3 7CHotKey1 22mhotkey.exe MK9805.EXE219Any startup section0148Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features78http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.banpaes.c.html0
222Christmas Music Player1 10TTEST6.EXE119Any startup section0 86" Ch ristmas Music Player br ings the music of the Christmas Holiday to your desktop"78http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.banpaes.c.html0
111CiaBackdoor1 9msldr.com119Any startup section0 17Added by a VIRUS!35http://chromium.com/chromemark.html0
213CIJxP2PSERVER1 12CIJxP2PS.EXE119Any startup section0147Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=735http://chromium.com/chromemark.html0
214CISrvr Program1 10CISRVR.EXE119Any startup section0 40Related to internet setup on Compaq PC's35http://chromium.com/chromemark.html0
1 5Cissi1 9Cissi.exe119Any startup section0 39Added as a result of the CISSI.A VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.cissi.a@mm.html0
2 7CitiVAN1 11CitiVAN.exe119Any startup section0142Option from Citibank t o change a credit card number in a random fashion for each purchase. The number will only be used once and never again24http://www.citibank.com/0
4 7Cjstcom1 11Cjstcom.exe119Any startup section0 40Canon printer BJ status language monitor24http://www.citibank.com/0
338CleanSweep Smart Sweep- Internet Sweep1 12Csinsm32.exe119Any startup section0 85Automatic logging of installs from Norton CleanSweep - available via Start - Programs24http://www.citibank.com/0
223CleanSweep Useage Watch1 12CSUSEM32.EXE119Any startup section0151Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time24http://www.citibank.com/0
3 9CleanTemp1 27CLEANT~1.EXE BCleanTemp.exe219Any startup section0110CleanTemp - deletes the contents of the TEMP directory when Win dows starts and then closes - using no memory44http://www.html2exe.com/mnu/dl/dl.shtml#free0
2 7Cleanup1 12ONICTASK.EXE119Any startup section0112Internet Cleanup f rom Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet42http://www.aladdinsys.com/internetcleanup/0
217Click Radio Tuner1 12clickr~1.exe119Any startup section0 72ClickRadio - subscription service playing radio music via the internet35http://www.clickradio.com/home.html0
219Click Tray Calendar1 12ClickT~1.EXE119Any startup section0 83ClickTray Calendar - shows holidays, reminders of various anniversaries,ta sks etc55http://waseo.de/en/Freeware2/ClickTrayE/clicktraye.html0
114CLICKTHEBUTTON1 7CTB.EXE119Any startup section0 30Price comparison based spyware54http://www.safersite.com/pestinfo/C/ClickTheButton.asp0
1 8CLICONFG1 12CLICONFG.EXE119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
227Client Access Check Version1 12cwbckver.exe119Any startup section0325Part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources52http://www-1.ibm.com/servers/eserver/iseries/access/0
225Client Access Help Update1 12cwbinhlp.exe119Any startup section0273Client Access Help Registry Update Function - part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries52http://www-1.ibm.com/servers/eserver/iseries/access/0
221Client Access Service1 12CwbSvStr.Exe119Any startup section0407Part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources52http://www-1.ibm.com/servers/eserver/iseries/access/0
110ClientMan11 10mscman.exe119Any startup section0204Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"53http://www3.ca.com/Solutions/ProductFamily.asp?ID=1150
219Clik Status Monitor1 18toolsclickstat.exe119Any startup section0114Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed53http://www3.ca.com/Solutions/ProductFamily.asp?ID=1150
216Clipbook Service1 11Clipsrv.exe119Any startup section0 86Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks53http://www3.ca.com/Solutions/ProductFamily.asp?ID=1150
210ClipMate5x1 12ClipMt5x.exe119Any startup section0130Clip Mate 5.x b y Thornsoft. Utility that allows you to store mo re than one item in the clipboard. Available via Start - Programs44http://www.thornsoft.com/ProductOverview.asp0
2 9Clipmate61 12CLIPMT60.EXE119Any startup section0128Clip Mate 6 b y Thornsoft. Utility that allows you to s tore more than one item in the clipboard. Available via Start - Programs35http://www.thornsoft.com/new_60.htm0
210Clipomatic1 14Clipomatic.exe119Any startup section0171Mike Lin's Clipomatic i s a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data36http://www.mlin.net/Clipomatic.shtml0
2 7Clipsrv1 11Clipsrv.exe119Any startup section0 86Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks36http://www.mlin.net/Clipomatic.shtml0
313CLMFrontPanel1 12clmpanel.exe119Any startup section0163System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost27http://www.cliptrakker.com/0
1 9ClockSync1 8Sync.exe119Any startup section0244ClockSynck - synchronizes your system clock w ith an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available26http://www.clock-sync.com/0
3 9ClockWise1 13CLOCKWISE.EXE119Any startup section0260ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync36http://www.rjsoftware.com/ClockWise/0
322CloneCDor Cl oneCDTray1 15CloneCDTray.exe119Any startup section0151System tray for CloneCD - the only useful option is "Hide CDR Media" on ly available via this tray. Has additional unknown functions in later versions36http://www.elby.org/CloneCD/english/0
315CloneCDElbyCDFL1 13ElbyCheck.exe119Any startup section0320From Elaborate Bytes w ho make CloneCD - monitors the installed fil ters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it42http://www.elby.org/english/corp/index.htm0
112ClrSchLoader1 10Loader.exe119Any startup section0 30Clearsearch variant of IGetNet39http://www.igetnet.com/iGetNet_Home.asp0
3 3cma1 7cma.exe119Any startup section0 79DeskSite CMA siftware - "retrieves new content f rom the DeskSite Data Center"29http://www.desksitemusic.com/0
2 7Cmaudio1 32Rundll32 cmicnfg.cpl, CMICtrlWnd219Any startup section0163System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start - Settings - Control Panel29http://www.desksitemusic.com/0
1 3Cmd1 9cmd32.exe119Any startup section0 42Added as a result of the P2P.TANKED VIRUS!57http://www.viruslibrary.com/virusinfo/Worm.P2P.Tanked.htm0
1 3CME1 7cme.exe119Any startup section0 71Part of Gator a dvertising spyware - see here f or removal instructions42http://www.pchell.com/su pport/gator.shtml0
1 6CmeSYS1 10CMEsys.exe119Any startup section0 71Part of Gator a dvertising spyware - see here f or removal instructions42http://www.pchell.com/su pport/gator.shtml0
1 6CmeUPD1 10CMEupd.exe119Any startup section0 71Part of Gator a dvertising spyware - see here f or removal instructions42http://www.pchell.com/su pport/gator.shtml0
3 8CMPDPSRV1 12CMPDPSRV.EXE119Any startup section0229Printer Driver Plus f rom ViewAhead Technology (form erly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more." Installed with some Compaq and Lexmark printers32http://www.viewahead.com/PDP.htm0
1 5Cn3231 11cnfrm33.exe119Any startup section0 55Added as a result of the MIMAIL.D o r MIMAIL.G VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.g@mm.ht ml0
1 6CNBABE1 10CNBABE.EXE119Any startup section0103Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing77http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.g@mm.ht ml0
2 4cnet1 11kontiki.exe119Any startup section0117Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktop s95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
1 7Cnfrm321 9cnfrm.exe119Any startup section0 55Added as a result of the MIMAIL.D o r MIMAIL.G VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.g@mm.ht ml0
1 6CnsMax1 12Internat.exe119Any startup section0204Added as a result of the POINTEX VIRUS! Note - the real internat.exe resides in %windir%\system (where %wind ir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%64http://www.symantec.com/avcenter/venc/data/backdoor.pointex.html0
213CnxDslTaskBar1 12CnxDslTb.exe119Any startup section0 78Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems42http://217.115.153.73/parasite/CnsMin.html0
318Codename Dashboard1 13dashboard.exe119Any startup section0258Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"46http://www.downlinx.com/proghtml/415/41557.htm0
114Coldlife -icmp1 11Systray.exe119Any startup section0 78Added as a result of the FSERVE VIRUS! Note - this is not the real SysTray.exe51http://worms.help.quakenet.org/list.php?worm_id=25/0
3 8coloreal1 12coloreal.exe119Any startup section0 85Makes colours sharper and brighter, but will only work with coloreal capable monitors51http://worms.help.quakenet.org/list.php?worm_id=25/0
223Colorific Control Panel1 12Hgcctl95.exe119Any startup section0146From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor51http://worms.help.quakenet.org/list.php?worm_id=25/0
111COM Service1 11mscom32.com119Any startup section0 40Added as a result of the BEASTY.H VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.h.html0
111COM Service1 10msynvr.com119Any startup section0 40Added as a result of the BEASTY.G VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.g.html0
111COM Service1 10msjclh.com119Any startup section0 36Added as a result of the PLUX VIRUS!61http://www.symantec.com/avcenter/venc/data/backdoor.plux.html0
124COM+ System Applications1 8lsas.exe119Any startup section0 43Added as a result of an unidentified VIRUS!61http://www.symantec.com/avcenter/venc/data/backdoor.plux.html0
2 6COM-IP1 9COMIP.EXE119Any startup section0189COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)61http://www.symantec.com/avcenter/venc/data/backdoor.plux.html0
114ComcastSUPPORT1 10tgkill.exe119Any startup section0296Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start - Settings - Add/Remove Programs61http://www.symantec.com/avcenter/venc/data/backdoor.plux.html0
1 6COMCFG1 10comcfg.exe119Any startup section0 41Added as a result of the TOADCOM.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_TOADCOM.A0
3 8COMDRV321 11svdhost.exe119Any startup section0248Orvell Monitoring 2003 - surveillance softwar e that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/26http://www.protectcom.com/0
1 7Command1 10system.exe119Any startup section0 61Added as a result of the GATECRASH.A o r GATECRASH.B VIRUSES!81http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_GATECR ASH.B0
1 7Command1 9Gotit.exe119Any startup section0 37Added as a result of the TITOG VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.titog.worm.html0
1 7COMMAND1 11command.exe119Any startup section0 40Added as a result of the QQPASS.E VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html0
2 7CommCtr1 11commctr.exe119Any startup section0173"Net2Phone CommCenter i s the latest in Internet voice technology allowing you to p lace calls easily all over the world right from your PC!". Available via Start - Programs62http://commcenter.net2phone.com/GLPPublish.asp?idpage=features0
314Compaq Alerter1 12CPQAlert.exe119Any startup section0256Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here f or more information70http://www.compaq.com/products/servers/management/cim-description.html0
236Compaq Computer Corp SCCenter Module1 12SCCENTER.EXE119Any startup section0 32For Compaq PC's. Part of Backweb70http://www.compaq.com/products/servers/management/cim-description.html0
210Compaq DMI1 10cpqdmi.exe119Any startup section0 50Compaq version of the Desktop Management Interface70http://www.compaq.com/products/servers/management/cim-description.html0
221Compaq Internet Setup1 14inetwizard.exe119Any startup section0 89For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list70http://www.compaq.com/products/servers/management/cim-description.html0
323Compaq Knowledge Center1 27silent.exe & matcli.exe219Any startup section0671"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide70http://www.compaq.com/products/servers/management/cim-description.html0
221Compaq Message Server1 14COMPAQ-RBA.EXE119Any startup section0714Applies to CPQBootPerfDB below as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start - Programs - Compaq Advisor - Advisor Settings under the "advanced" tab. Not required and can cause problems70http://www.compaq.com/products/servers/management/cim-description.html0
316Compaq PK Daemon1 9cpqkl.exe119Any startup section0 91For Compaq laptops for programming user configurable keys. Not required unless you use them70http://www.compaq.com/products/servers/management/cim-description.html0
214CompaqPrinTray1 12printray.exe119Any startup section0168Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop70http://www.compaq.com/products/servers/management/cim-description.html0
213CompaqSystray1 11cpqpscp.exe119Any startup section0 23Compaq System Tray icon70http://www.compaq.com/products/servers/management/cim-description.html0
119ComTry Web Searcher1 10wstray.exe119Any startup section0 39Comtry MP3 Downloader related - spyware70http://www.compaq.com/products/servers/management/cim-description.html0
1 6Config1 11service.exe119Any startup section0 39Added as a result of the ISRAZ.B VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.israz.b@mm.html0
116Config Loadation1 14iEEexplore.exe119Any startup section0 39Added as a result of the SDBOT.H VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.h.html0
118Config Loadatiorin1 14I3Explorer.exe119Any startup section0 39Added as a result of the SDBOT.H VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.h.html0
113Config Loader1 11svchosl.exe119Any startup section0 40Added as a result of the GAOBOT.P VIRUS!65http://www.symantec.com/avcenter/venc/data/w32.hllw.gaobot.p.html0
113Config Loader1 12sysldr32.exe119Any startup section0 38Added as a result of the GAOBOT VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.html0
113Config Loader1 11scvhost.exe119Any startup section0 57Added as a result of the GAOBOT.AE o r GAOBOT.AO VIRUSES!80http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.h tml0
135Config Loader for Microsoft Windows1 13mwincfg32.exe119Any startup section0 43Added as the result of the AGOBOT.BD VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.BD0
114Config Loader21 12explores.exe119Any startup section0 41Added as a result of the GAOBOT.BT VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bt.html0
113ConfiggLoader1 11cart322.exe119Any startup section0 41Added as a result of the GAOBOT.DJ VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.dj.html0
310ConfigSafe1 23CFGSAFE.EXE AUTOCHK.EXE219Any startup section0200ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice47http://www.imaginelan.com/configsafe/index.html0
214ConfigServices1 10Config.exe119Any startup section0 36Part of initial setup on a Compaq PC47http://www.imaginelan.com/configsafe/index.html0
120Configuration Loaded1 12wupdated.exe119Any startup section0 65Added as a result of the MOEGA o r MOEGA.AG o r MOEGA.AP VIRUSES!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.moega.ap.htm l0
120Configuration Loader1 71aim95.exe cmd32.exe IEXPL0RE.EXE iexplore.exe loadcfg32.exe MSTasks.exe219Any startup section0235Added as a result of the LOADCFG o r SDBOT. Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/ 2K), or C:\Windows\System32 (WinXP) whereas the valid "iexplore.exe" (IE) resides in C:\Program Files75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
120Configuration Loader1 12service5.exe119Any startup section0 41Added as a result of the GAOBOT.AF VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.af.html0
120Configuration Loader1 11sycfg34.exe119Any startup section0 41Added as a result of the GAOBOT.AN VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.an.html0
120Configuration Loader1 12wincrt32.exe119Any startup section0 41Added as a result of the GAOBOT.BF VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bh.html0
120Configuration Loader1 10windex.exe119Any startup section0 41Added as a result of the GAOBOT.BM VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bz.html0
120Configuration Loader1 12dosrun32.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
120Configuration Loader1 13Servicess.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
120Configuration Loader1 8sw32.exe119Any startup section0 41Added as a result of the AGOBOT.BQ VIRUS!91http://es.trendmicro-europe.com/enterprise/security_info/ve_detail.php?VName=WORM_AGOBOT.BQ0
120Configuration Loader1 10System.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
120Configuration Loader1 11sysinfo.exe119Any startup section0 41Added as a result of the GAOBOT.FQ VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.fq.html0
120Configuration Loader1 13microsoft.exe119Any startup section0 41Added as a result of the GAOBOT.JB VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.jb.html0
120Configuration Loader1 12syscfg32.exe119Any startup section0 39Added as a result of the SDBOT.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.b.html0
121Configuration Loading1 11svchos1.exe119Any startup section0 41Added as a result of the GAOBOT.DK VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.dk.html0
121Configuration Manager1 24CNFGLD32.EXE Cnfgldr.exe219Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
221Configuration Utility1 10CONFIG.EXE119Any startup section0 64Controls linksys wireless connection. Available from the Desktop75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
220Configuration Wizard1 12Cfgwiz32.exe119Any startup section0157Added as a result of a variation of the HACKTACK VIRUS! Not to be confused with the valid MS "ISDN Configuration Wizard" (Cfgwiz32.exe) in C:\Windows\System80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HCKTCK.2K.C0
2 6Conmgr1 10conmgr.exe119Any startup section0 28Starts Winfax pro at startup80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HCKTCK.2K.C0
310ConMgr.exe1 10conmgr.exe119Any startup section0172Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut 80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HCKTCK.2K.C0
218Connection Manager1 12CManager.exe119Any startup section0229SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HCKTCK.2K.C0
115ContentDownload1 37rundll32.exe MSA64CHK.dll, DllMostrar219Any startup section0 20123Messenger a dware58http://www.pestpatrol.com/pestinfo\other\123_messenger.asp0
213control panel1 11smctrlw.exe119Any startup section0 68System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card40http://www.merijn.org/cwschronicles.html0
113Control Panel1 10System.exe119Any startup section0 36Added as a result of the DANI VIRUS!61http://www.symantec.com/avcenter/venc/data/backdoor.dani.html0
217ControlCentreTray1 11XWCTray.exe119Any startup section0108System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc61http://www.symantec.com/avcenter/venc/data/backdoor.dani.html0
210Controller1 12WFXCTL32.EXE119Any startup section0211From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start - Programs61http://www.symantec.com/avcenter/venc/data/backdoor.dani.html0
112ControlPanel1 42rundll32 internat.dll, LoadKeyboardProfile219Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
312Cookie Cop 21 13CookieCop.exe119Any startup section0161Cookie Cop 2 f rom PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return50http://www.pcmag.com/article/0,2997,a=20844,00.asp0
310Cookie Pal1 12CPBRWTCH.EXE119Any startup section0161Kookaburra Softwares Cookie Pal c ookie manager. Allows you to decide which internet sites can add "co okies" related to their sites for the next time you return61http://www.pcmag.com/article/0,2997,s=1626&a=12703,00.asp0
3 9CookieJar1 13Cookiejar.exe119Any startup section0161Cookie Jar c ookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return43http://www.jasons-toolbox.com/cookiejar.asp0
310CookieWall1 10cookie.exe119Any startup section0139CookieWall f rom Analog X. Allows you to decide which internet sites can add "c ookies" related to their sites for the next time you return59http://www.analogx.com/contents/download/network/cookie.htm0
3 9Cool Desk1 9cdesk.exe119Any startup section0241Cool Desk i s a virtual desktops manager. "Ev er you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you25http://www.shelltoys.com/0
310CoolSwitch1 14taskswitch.exe119Any startup section0138ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen25http://www.shelltoys.com/0
114coolwebprogram1 10clrssn.exe119Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
322CopernicPerUserTaskMgr1 26CopernicPerUserTaskMgr.exe119Any startup section0 66Automatic tasking feature of Copernic Pro multi-search engine tool40http://www.merijn.org/cwschronicles.html0
2 9Copyright1 11mwcpyrt.exe119Any startup section0 47Displays copyright information on IBM ThinkPads40http://www.merijn.org/cwschronicles.html0
241Corel Colleagues & Contacts Reminders1 10cffrem.exe119Any startup section0137Corel Colleagues & Contracts - all-in-one organizer for sc heduling meetings, maintaining addresses, etc. Part of Corel Print Office43http://www.corel.com/printoffice_v1/ccc.htm0
234Corel Desktop Application Director1 8dadx.exe119Any startup section0153The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start - Programs43http://www.corel.com/printoffice_v1/ccc.htm0
236Corel Family & Friends reminders1 10CFFREM.EXE119Any startup section0114Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic67http://www.corel.com/products/graphicsandpublishing/phmagic/CFF.htm0
249Corel Registrationor Co rel Registration Reminder1 12Remind32.exe119Any startup section0 94If you don't want to register Corel products and be reminded about it every 2 weeks disable it67http://www.corel.com/products/graphicsandpublishing/phmagic/CFF.htm0
215CorelCENTRAL 101 13I_26dadCC.exe119Any startup section0137CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start - Programs 01
226CorelMedia FoldersIndexer81 26MFindexer.exe MFINDE~1.EXE219Any startup section0 88Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office 01
1 7CoreSrv1 11coresrv.exe119Any startup section0 64Some IRC trojans/worms use this - see here f or more information29http://lockdowncorp.com/bots/0
214CorrectConnect1 12CConnect.exe119Any startup section0 89Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available29http://lockdowncorp.com/bots/0
234CountrySelectionor Co untry Select1 10pctptt.exe119Any startup section0235Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required29http://lockdowncorp.com/bots/0
1 9couponica1 13couponica.exe119Any startup section0 17Adware - see here47http://vil.nai.com/vil/content/v_100077.htm#top0
3 7CP32NOT1 11CP32BTN.EXE119Any startup section0116For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons47http://vil.nai.com/vil/content/v_100077.htm#top0
3 7CPATR101 11CPATR10.EXE119Any startup section0148Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast47http://vil.nai.com/vil/content/v_100077.htm#top0
3 8CPBrWtch1 12CPBrWtch.exe119Any startup section0161Kookaburra Softwares Cookie Pal c ookie manager. Allows you to decide which internet sites can add "co okies" related to their sites for the next time you return61http://www.pcmag.com/article/0,2997,s=1626&a=12703,00.asp0
1 7cpntmgc1 23wincomp.exe winmgts.exe219Any startup section0 54Remote-control trojan from Electronic Group - see here49http://www.doxdesk.com/parasite/MagicControl.html0
4 7CPQAcDc1 11CPQAcDc.exe119Any startup section0 53Compaq PowerCon power management software for laptops49http://www.doxdesk.com/parasite/MagicControl.html0
3 8CPQAlert1 12CPQAlert.exe119Any startup section0256Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here f or more information70http://www.compaq.com/products/servers/management/cim-description.html0
213CPQBootPerfDB1 17CPQBootPerfDB.EXE119Any startup section0 31See Compaq Message Server above70http://www.compaq.com/products/servers/management/cim-description.html0
4 8CPQCalib1 12CPQCalib.exe119Any startup section0 53Compaq PowerCon power management software for laptops70http://www.compaq.com/products/servers/management/cim-description.html0
2 8CPQDFWAG1 12CpqDfwAg.exe119Any startup section0 54For Compaq PC's. Runs Compaq diagnostics on every boot70http://www.compaq.com/products/servers/management/cim-description.html0
310CPQEASYACC1 11cpqeadm.exe119Any startup section0116For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys70http://www.compaq.com/products/servers/management/cim-description.html0
3 7cpqeaui1 11cpqeaui.exe119Any startup section0116For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys70http://www.compaq.com/products/servers/management/cim-description.html0
3 5cpqek1 10kcpqek.exe119Any startup section0 61For Compaq PC's. Easy Access b utton support for the keyboard75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
323CPQInet Runtime Service1 11CpqInet.exe119Any startup section0143For Compaq PC's. Allows AOL and Compuserve to use the Easy Access b uttons for the internet. Is not required if you don't use the ISP providers75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
211CPQINKAGENT1 12cpqinkag.exe119Any startup section0164That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
3 5cpqns1 12cpqnpcss.exe119Any startup section0 58Related to Compaq.Net - not required if you don't use that75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
410CPQSTUTFIX1 11stutfix.exe119Any startup section0194For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton 01
111CPU Manager1 10cpumgr.exe119Any startup section0 40Added as a result of the PANDEM.B VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.pandem.b.worm.html0
3 7CPUcool1 11Cpucool.exe119Any startup section0122Program to keep the processor cool when idle in "overclocked" systems. Also available via Start - Settings - Control Panel78http://securityresponse.symantec.com/avcenter/venc/data/w32.pandem.b.worm.html0
1 7Cpusave1 11Cpusave.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 9Cpusave321 13Cpusave32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 5cqlyg1 14world_cup_.bat119Any startup section0 36Added as a result of the WCUP VIRUS!74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BAT_WCUP.A0
316cracked_windows11 20cracked_windows1.exe119Any startup section0 29Cracked Windows p opup killer71http://www.angelfire.com/electronic/purplexed/files/crackedwindows.html0
215CrazyTalk Serve1 45rundll32.exe CrazyTalk.dll, DIIServeMediaFile219Any startup section0312CrazyTalk f rom Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS47http://www.reallusion.com/crazytalk/default.asp0
2 8CreateCD1 12Createcd.exe119Any startup section0 95Adaptec Easy CD Creator system tray application (pre version 5). Available via Start - Programs47http://www.reallusion.com/crazytalk/default.asp0
210CreateCD501 14Createcd50.exe119Any startup section0 89Adaptec Easy CD Creator version 5 system tray application. Available via Start - Programs47http://www.reallusion.com/crazytalk/default.asp0
219Creative AGP Wizard1 10agpwiz.exe119Any startup section0 33Part of Creative's BlasterControl47http://www.reallusion.com/crazytalk/default.asp0
217Creative Launcher1 14CTLauncher.exe119Any startup section0155For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start - Programs47http://www.reallusion.com/crazytalk/default.asp0
223Creative MediaSource Go1 11CTCMSGo.exe119Any startup section0 92"Creative MediaSource p laybacks music in DVD-Audio, MP3, WMA, WAV and other media formats"40http://www.soundblaster.com/mediasource/0
240Creative PCI Audio Configuration Utility1 11starter.exe119Any startup section0193System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this s pecial page. Similar to EnsoniqMixer58http://www.pacs-portal.co.uk/startup_pages/starter_exe.htm0
233Creative Service for CDROM Access1 12Ctsvccda.exe119Any startup section0204Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start - Programs58http://www.pacs-portal.co.uk/startup_pages/starter_exe.htm0
112Creative.exe1 12Creative.exe119Any startup section0 38Added as a result of the PROLIN VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.prolin.worm.html0
220CreativeDiscNotifier1 12CTNOTIFY.EXE119Any startup section0145For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start - Settings - Control Panel76http://securityresponse.symantec.com/avcenter/venc/data/w32.prolin.worm.html0
313CreativeMixer1 11CTMIX32.EXE119Any startup section0207Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon76http://securityresponse.symantec.com/avcenter/venc/data/w32.prolin.worm.html0
214CriticalUpdate1 12Wucrtupd.exe119Any startup section0110MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site76http://securityresponse.symantec.com/avcenter/venc/data/w32.prolin.worm.html0
1 6cronos1 10MARCO!.SCR119Any startup section0 41Added as a result of the OPASERV.G VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.G0
1 6Crusty1 9dmcpl.exe119Any startup section0 39Added as the result of the RUSTY VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.rusty@m.html0
2 6csaRem1 12spqmdmui.exe119Any startup section0 30Compaq modem country selection72http://securityresponse.symantec.com/avcenter/venc/data/w32.rusty@m.html0
417CSAV_CheckViruses1 12vchk.exe.exe119Any startup section0 25Part of Command AntiVirus65http://www.authentium.com/solutions/products/commandantivirus.cfm0
312CSINJECT.EXE1 12CSINJECT.EXE119Any startup section0213Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes."74http://service1.symantec.com/SUPPORT/cleansweep.nsf/docid/19990224132957280
1 5csrsc1 9csrsc.exe119Any startup section0 43Added as a result of an unidentified VIRUS!74http://service1.symantec.com/SUPPORT/cleansweep.nsf/docid/19990224132957280
1 5CSRSS1 9CSRSS.EXE119Any startup section0219Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handlin g69http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/0
1 7CSRSWIN1 15random filename219Any startup section0 43Added as a result of the WINSHELL.50 VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winshell.50.html0
1 5CSRSX1 15random filename219Any startup section0 45Added as a result of the WINSHELL.50.B VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winshell.50.b.html0
415CSScheduleCheck1 12SCHWIZEX.EXE119Any startup section0265Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot47http://www.imaginelan.com/configsafe/index.html0
1 4csss1 8Csss.exe119Any startup section0 38Added as a result of the BALICK VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.balick.trojan.html0
311CSS_Central1 12CSS_1631.EXE119Any startup section0224CSS Communication Agent (95 Host) from Command Software Systems " CSS CentralÖ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console."50http://www.commandcom.com/enterprise/csscntrl.html0
4 2ct1 6ct.exe119Any startup section0117ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it50http://www.commandcom.com/enterprise/csscntrl.html0
2 8CTAVTray1 12CTAvTray.exe119Any startup section0144For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ50http://www.commandcom.com/enterprise/csscntrl.html0
2 8CTDVDDet1 25CTDVDDet.exe CTDetect.exe219Any startup section0261Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again50http://www.commandcom.com/enterprise/csscntrl.html0
3 6ctfmon1 10ctfmon.exe119Any startup section0402CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services62http://support.microsoft.com/default.aspx?scid=kb;en-us;2825990
1 6ctfmon1 14taskmgr32#.exe119Any startup section0 72Added as a result of the SOWSAT.B VIRUS! where # is a number from 0 to 976http://securityresponse.symantec.com/avcenter/venc/data/w32.sowsat.b@mm.html0
110Ctfmon.exe1 12ctfmon32.exe119Any startup section0 62CoolWebSearch p arasite related - hijacking to Slawsearch.co m40http://www.merijn.org/cwschronicles.html0
2 8CTHELPER1 12CTHELPER.EXE119Any startup section0509CTHELPER is a backgr ound task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with CreativeÆs sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled40http://www.merijn.org/cwschronicles.html0
1 6CTin101 10CTin10.exe119Any startup section0 40Added as a result of the BANCOS.E VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.e.html0
2 8CTRegRun1 12CTRegRun.exe119Any startup section0 98For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.e.html0
2 9CTStartup1 12CTEaxSpl.exe119Any startup section0 90Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.e.html0
410cuagentExe1 11Cuagent.exe119Any startup section0 26Command Antivirus r elated53http://www.command.co.uk/html/products/csav/index.cfm0
1 3cuo1 7cuo.exe119Any startup section0 39Added as a result of the BUGBEAR VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUGBEAR.A0
2 8CursorXP1 12CursorXP.exe119Any startup section0 57CursorXP f rom Stardock - tool for creating mouse cursors42http://www.stardock.com/products/cursorxp/0
314Customizer20001 9logon.exe119Any startup section0201Automatic logon feature of Customizer 2000 - "a special utility which is designed to optimize Win9x/M E performance. The program lets you explore the many hidden settings in Windows, and make changes"55http://www.hot-shareware.com/utilities/customizer-2000/0
4 5CVPND1 9cvpnd.exe119Any startup section0 94Sub-system used by Cisco VPN client for making a connection to a remote IPSec server55http://www.hot-shareware.com/utilities/customizer-2000/0
2 8cwbckver1 12cwbckver.exe119Any startup section0325Part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources52http://www-1.ibm.com/servers/eserver/iseries/access/0
2 8cwbinhlp1 12cwbinhlp.exe119Any startup section0273Client Access Help Registry Update Function - part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries52http://www-1.ibm.com/servers/eserver/iseries/access/0
2 8cwbsvstr1 12cwbsvstr.exe119Any startup section0407Part of IBM's iSeries ( nee As/400) Client Access - communications suite that allows d esktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources52http://www-1.ibm.com/servers/eserver/iseries/access/0
2 5CXMon1 15Hpi_Monitor.exe119Any startup section0132Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start - Programs52http://www-1.ibm.com/servers/eserver/iseries/access/0
2 5Cyber1 12cyberchk.exe119Any startup section0199Part of Belkins "Multimedia Cleaning Kit" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after "x" amount of time has passed52http://www-1.ibm.com/servers/eserver/iseries/access/0
310Cyber Trio1 12showmode.exe119Any startup section0246From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs52http://www-1.ibm.com/servers/eserver/iseries/access/0
320CyberLat Ram Cleaner1 16CLRamCleaner.exe119Any startup section0209CyberLat RAM Cleaner i s a program that Frees, Optimize s and Defrags your system's wasted memory (RAM). Some users swear by programs such as this but I suggest you read this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
216CyberMedia Agent1 11CMAGENT.EXE119Any startup section0204Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled34http://www.aumha.org/a/memmgmt.htm0
1 9CyberWolf1 13CyberWolf.exe119Any startup section0 55Added as a result of the KICKIN.A ( or CYDOG.C) VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=W ORM_CYDOG.C0
122CyDooror Cy doorUpdate1 11CD_Load.exe119Any startup section0 92Adware. Check here f or information about Cy-Door and here f or a program that can remove it41h ttp://www.lavasoft.de/software/adaware/0
231D-Link AirPlus DWL-650+ Utility1 11WLANMON.exe119Any startup section0 52D-Link Air Plus Wireless PC modem connection monitor24http://www.cypherus.com/0
212D066UUtility1 12D066UUTY.EXE119Any startup section0104TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software24http://www.cypherus.com/0
113d3dupdate.exe1 11bbeagle.exe119Any startup section0 40Added as a result of the BEAGLE.A VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html0
211DACONFIGEXE1 12daconfig.exe119Any startup section0 523Com NIC Diagnostics. Available via Start - Programs45http://www.thinkman.com/dimension4/index.html0
4 6DadApp1 10dadapp.exe119Any startup section0255"DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell45http://www.thinkman.com/dimension4/index.html0
2 6Daemon1 12DAEMON32.EXE119Any startup section0146Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start - Programs45http://www.thinkman.com/dimension4/index.html0
327Daemonor DA EMON Tools-10331 10Daemon.exe119Any startup section0 85Daemon Tools - used to map an image-file (.iso, .bin et c) to a virtual CD/DVD-drive36http://www.daemon-tools.net/main.htm0
213Daily Planner1 11dayplan.exe119Any startup section0143Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and c heck activities off as you complete them36http://www.kmcsonline.com/index.html0
2 3Dap1 7DAP.exe119Any startup section0 72Download Accelerator Plus f rom SpeedBit - download ma nager/accelerator34http://www.speedbit.com/DAPDL.asp?0
121DarkDevil.Grasiele.BR1 12Grasiele.VBS119Any startup section0 38Added as a result of the LEMBRA VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/vbs.lembra@mm.html0
1 4Data1 14System.dat.vbs119Any startup section0 41Added as a result of the BISCUIT.A VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/vbs.biscuit.a@mm.html0
214Data LifeGuard1 12BACKWE~1.EXE119Any startup section0 75Data LifeGuard diagnostic tools for Western Digital's series of hard drives77http://securityresponse.symantec.com/avcenter/venc/data/vbs.biscuit.a@mm.html0
238Data LifeGuard LifeLine Lite installer1 9DLGLI.EXE119Any startup section0 28Backweb installer - see here29http://www.cexx.org/dlgli.htm0
211DataCaching1 12FlashKsk.exe119Any startup section0164SmartMedia Card m anagement from the installa tion of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon25http://www.smartdisk.com/0
217DataViz Messenger1 11DvzMsgr.exe119Any startup section0221DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts"46http://www.dataviz.com/products/documentstogo/0
1 8Datcheck1 12datcheck.exe119Any startup section0 40Added as a result of the KEYPANIC VIRUS!63http://www.symantec.com/avcenter/venc/data/keypanic.trojan.html0
112Date Manager1 15datemanager.exe119Any startup section0 89Date Manager - calender program. Spyware/adware based provided by The Gator Corporation28http://www.date-manager.com/0
113DateMakerIntl1 17DateMakerIntl.exe119Any startup section0 61Premium rate dialler also referred to as the PORNSPA.F VIRUS!75http://www.ntsecurity.net/Panda/Index.cfm?FuseAction=Virus&VirusID=13480
3 8DayToday1 12DAYTODAY.EXE119Any startup section0 73DayToday f rom RoboMagic Software Corp. Displays the date on th e taskbar43http://www.locutuscodeware.com/daytoday.htm0
320DAZEL Delivery Agent1 12DcDaemon.exe119Any startup section0 62Control and send documents, etc, to any destination - see here58http://www.clickly.com/ISSVDO4Z/EN/user/proddet.html?P=8880
2 6dbserv1 10dbserv.exe119Any startup section0 83Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled58http://www.clickly.com/ISSVDO4Z/EN/user/proddet.html?P=8880
318DCfssvcor dc fssve1 11dcfssvc.exe119Any startup section0302Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example58http://www.clickly.com/ISSVDO4Z/EN/user/proddet.html?P=8880
113DDCActiveMenu1 17DDCActiveMenu.exe119Any startup section0 56Digital Distribution Channel f rom Wild Tangent - adware51http://www.wildtangent.com/solutions/ddc/index.html0
114DDCMor DD CMan1 10DDCMan.exe119Any startup section0 56Digital Distribution Channel f rom Wild Tangent - adware51http://www.wildtangent.com/solutions/ddc/index.html0
1 5Debug1 12DebugW32.exe119Any startup section0 37Added as a result of the GUBED VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_GUBED.A0
119Default web browser1 12IexpIore.exe119Any startup section0177Added as a result of the OBLIVION.B VIRUS! Note - don not confuse "IexpIore.exe" with "iexplore.exe" (I nternet Explorer), the first has a captial "i" in place of lower case "L"59http://www.sophos.com/virusinfo/analyses/trojoblivionb.html0
113defragm_check1 14defragment.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
3 8defwatch1 12defwatch.exe119Any startup section0191Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis40http://www.merijn.org/cwschronicles.html0
317Delayor De layrun1 12delayrun.exe119Any startup section0 91On HP PCs this program is used to help prevent conflicts or timing issues on fast computers40http://www.merijn.org/cwschronicles.html0
1 9Delete Me1 8worm.exe119Any startup section0 44Added as the result of the DOOMHUNTER VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.doomhunter.html0
210Dell Alert1 9DAMon.exe119Any startup section0 77"Dell Alert" utility, that's supposed to make interaction with Support easier75http://securityresponse.symantec.com/avcenter/venc/data/w32.doomhunter.html0
321DELLMMKBor De llTouch1 12DELLMMKB.EXE119Any startup section0 93Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys75http://securityresponse.symantec.com/avcenter/venc/data/w32.doomhunter.html0
2 6DellSC1 10dellsc.exe119Any startup section0 80Dell Solution Center - web-based troubleshooting tools and educational offerings75http://securityresponse.symantec.com/avcenter/venc/data/w32.doomhunter.html0
1 7delmsbb1 11delmsbb.exe119Any startup section0 13nCase a dware42http://www.doxdesk.com/parasite/nCase.html0
2 8DeltTray1 11deltray.exe119Any startup section0185System Tray access to the control panel for the M-Audio Delta 44 P CI Analog Recording Interface. Available via a desktop short cut, Start - Programs or Start - Settings - Control Panel51http://www.midiman.net/products/m-audio/delta44.php0
3 7DepFrez1 12frzstate.exe119Any startup section0251Deep Freeze f rom Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example70http://www.winselect.com/pages/deepfreeze/dpfrz_info.htm?B13=More+Info0
2 9DeskColor1 13DESKCOLOR.EXE119Any startup section0 65Provides transparent icon text backgrounds and coloured icon text70http://www.winselect.com/pages/deepfreeze/dpfrz_info.htm?B13=More+Info0
2 8Deskflag1 12Deskflag.exe119Any startup section0 44DeskFlag - animated USA flag on the desktop24http://www.deskflag.com/0
312Desksite CMA1 7cma.exe119Any startup section0 79DeskSite CMA siftware - "retrieves new content f rom the DeskSite Data Center"29http://www.desksitemusic.com/0
1 7Desktop1 46rundll32.exe msconfd.dll, Restore ControlPanel219Any startup section0 42Added as a result of the BOOKMARKER VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/trojan.bookmarker.html0
217Desktop Architect1 10DATRAY.EXE119Any startup section0 95Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc55http://download.com.com/3000-2326-5630015.html?tag=list0
213Desktop Plant1 12AZARE10S.PLT119Any startup section0104Vritual plant from here - this version is an Azalea, there are others so the f ilename may be different40http://www.desksoft.com/DesktopPlant.htm0
215Desktop Weather1 23THE WEATHER CHANNEL.exe219Any startup section0 96Desktop Weather b y The Weather Channel - provides current temperature, condit ions, alerts, etc58http://www.weather.com/services/desktop.html?from=tutorial0
210desktopmgr1 14desktopmgr.exe119Any startup section0124Synchronisation manager for the cradles for the Research In Motion r ange of wireless handhelds, including the "Blackberry"39http://www.rim.net/products/index.shtml0
3 8DesktopX1 12DESKTOPX.EXE119Any startup section0 96A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking39http://www.rim.net/products/index.shtml0
2 6deskup1 10deskup.exe119Any startup section0 42Adds Iomega Zip drive icons to the desktop39http://www.rim.net/products/index.shtml0
3 6detect1 11idetect.exe119Any startup section0170iNTERNET Turbo f rom Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled41http://www.clasys.com/internet_turbo.html0
2 8Detector1 12detector.exe119Any startup section0263USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software41http://www.clasys.com/internet_turbo.html0
311DEventAgent1 12eventagt.exe119Any startup section0114DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this41http://www.clasys.com/internet_turbo.html0
315Device Detector1 13DevDetect.exe119Any startup section0 78Watches for external digital imaging products being connected from ACD Systems43http://www.acdsystems.com/English/index.htm0
315DeviceDiscovery1 12hpotdd01.exe119Any startup section0124Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products43http://www.acdsystems.com/English/index.htm0
110DevicePath1 22Proyecto1.exe Root.exe219Any startup section0 37Added as a result of the GRUEL VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.gruel@mm.html0
3 7Devices1 10olesvr.exe119Any startup section0 55Salfeld Child Control 2003 - parental control software52http://www.salfeld.com/parental_control_overwiew.htm0
3 8devldr161 12devldr16.exe119Any startup section0379Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start - Settings - Control Panel - System - Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices52http://www.salfeld.com/parental_control_overwiew.htm0
4 8dhcpagnt1 12dhcpagnt.exe119Any startup section0 79Intel DSL modem driver - leave enabled or you'll have to re-install the drivers52http://www.salfeld.com/parental_control_overwiew.htm0
2 7diagent1 11diagent.exe119Any startup section0123System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start - Programs52http://www.salfeld.com/parental_control_overwiew.htm0
116Dial22or Di al331 7dlm.exe119Any startup section0 21Adult content dialler52http://www.salfeld.com/parental_control_overwiew.htm0
310Dialgo SDK1 15PhoneAnswer.exe119Any startup section0271Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis"52http://www.salfeld.com/parental_control_overwiew.htm0
220Dialog Box Assistant1 9OSDEx.exe119Any startup section0142Dialog Box Assistant f rom Duality Software. Helps wi th the standard Open and Save As dialog boxes by showing recently used files and folders33http://www.dualitysoft.com/osdex/0
213Dialog Helper1 12PDDLGHLP.EXE119Any startup section0175Dialog Helper from PowerDesk Pro b y Ontrack. Helps with t he standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start - Programs33http://www.ontrack.com/powerdesk/0
2 9DigiGuide1 23CLIENT.EXE client01.exe219Any startup section0 21TV guide and reminder33http://www.ontrack.com/powerdesk/0
219Digital Line Detect1 7DLG.exe119Any startup section0201Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems33http://www.ontrack.com/powerdesk/0
218Digital River eBot1 12downlo~1.exe119Any startup section0271Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here 01
213DigitalWizard1 12ISWizard.exe119Any startup section0131InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content 01
2 9DIGStream1 13digstream.exe119Any startup section0224DIGStream Cache Manager - part of ESPN Motion a nd Disney Motion t hat periodically check for new videos and indication they're av ailable in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically59http://disney.go.com/guestservice s/disneymotion/about.html0
310Dimension41 6d4.exe119Any startup section0 92Atomic clock synchronisation freeware - starts-up, adjusts the system clock, then shuts down59http://disney.go.com/guestservice s/disneymotion/about.html0
1 5Dino31 9dino3.exe119Any startup section0138Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result59http://disney.go.com/guestservice s/disneymotion/about.html0
1 4Dir11 4caKe119Any startup section0 36Added as a result of the CAKE VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cake.html0
313Direct Update1 13DUControl.exe119Any startup section0 33DirectUpdate d ynamic DNS updater28http://www.directupdate.net/0
2 8DirectCD1 12DirectCD.exe119Any startup section0351DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start - Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later28http://www.directupdate.net/0
310DIRECTVDSL1 14Directvdsl.exe119Any startup section0 66Starts DirectTV DSL modem at boot up. Can also be started manually28http://www.directupdate.net/0
1 7DirectX1 12ddhelp32.exe119Any startup section0 92Added as a result of the BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe 01
1 7directx1 48Directx.exe Sqlexploit.exe NTCmd.exe PipeCmd.exe219Any startup section0 39Added as a result of the SDBOT.D VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.d.html0
1 7DirectX1 11DirectX.exe119Any startup section0 51Added as a result of the BLAXE o r LOGPOLE VIRUSES!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.htm l0
129DirectX For Microsoft Windows1 14dtxservice.exe119Any startup section0 39Added as a result of the PROGENT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.progent.html0
1 9DirectX641 14DirectXset.exe119Any startup section0 41Added as a result of the BROWNEY.A VIRUS!43http://vil.nai.com/vil/content/v_100098.htm0
3 6Dirkey1 10Dirkey.exe119Any startup section0289Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders 31http://www.protonfx.com/dirkey/0
213Disc Detector1 12CtNotify.exe119Any startup section0 64For Creative sound cards. Detects when you insert a CD, DVD, etc31http://www.protonfx.com/dirkey/0
216DiscoverDeskshop1 12Deskshop.exe119Any startup section0 53Discover Deskshop - single use "virtual" credit card43http://www.dealchecker.com/doc.cfm?OID=10910
111Disk Master1 8filename119Any startup section0 55Added as a result of the DISTER VIRUS! - a spam relayer76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dister.html0
2 7Disknag1 11disknag.exe119Any startup section0 65Dell program that reminds you to make your backup diskettes76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dister.html0
312Disk_Monitor1 16Disk_Monitor.exe119Any startup section0225Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dister.html0
115Display Drivers1 9cssrs.exe119Any startup section0 46Added as a result of the WORM_AGOBOT.FX VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.FX0
215DisplayTrayIcon1 12TrayIcon.exe119Any startup section0151System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel - Display78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.FX0
224Distiller Assistant 3.011 12DISTASST.EXE119Any startup section0 90From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start - Programs78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.FX0
322distributed.net client1 9DNETC.EXE119Any startup section0207Dsitributed computing projects client from Distributed.net w here numerous computers a re used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses38http://distributed.net/trojans.html.en0
4 3Dit1 7dit.exe119Any startup section0129"Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found38http://distributed.net/trojans.html.en0
210DiTask.exe1 10DiTask.exe119Any startup section0193Associated with an Eicon Networks I SDN or ADSL modem. System Tray icon which sho ws you the status of your lines (free, occupied with incoming or outgoing call). Available via Start - Programs42http://www.eicon.com/worldwide/default.htm0
120DivX MediaPlayer 7.01 11Dr.DivX.exe119Any startup section0 41Added as a result of the ALADINZ.G VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.g.html0
112DivX Updater1 8DivX.Exe119Any startup section0 51Added as a result of the NALDEM o r MASTAK VIRUSES!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.naldem.html0
111Divx4 codec1 12devldr32.exe119Any startup section0109Added as a result of an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe f ile69http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/0
2 8DJREGFIX1 28regedit /s c:\hpdjregfix.reg219Any startup section0265DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers69http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/0
3 9DkService1 13DkService.exe119Any startup section0589From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. Used to schedule defragmenting on a regular basis and not required if you do so manually. In Diskeeper Lite (v7 freeware version), DkService also pops up a 'reminder' after Diskeeper has not been used for two days. Removing the DkService startup will end this and have no further impact as scheduled defragmenting is not available in the Lite version. Note - when Diskeeper (Lite) is started manually, DkService will load into memory too and NOT unload after Diskeeper has been closed69http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/0
130Dkware lptt01or Dk ware ml097e1 10dkware.exe119Any startup section0180Variant of the RapidBlaster p arasite (in a "DonkeySoft" folder in Program Files). I t is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
4 3dla1 12tfswctrl.exe119Any startup section0376Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
2 7DlaTray1 11Dlatray.exe119Any startup section0 35On HP PCs, tray icon for dla a bove 01
1 5dlder1 9dlder.exe119Any startup section0250Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus70http://securityresponse.symantec.com/avcenter/venc/data/w32.dlder.html0
1 6DlDir11 4caKe119Any startup section0 36Added as a result of the CAKE VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cake.html0
212DLF_00000B001 9Vcdlf.exe119Any startup section0100Known to cause problems with "Out of memory" errors (see here). Otherwise, it's p urpose is unknown63http://support.microsoft.com/default.aspx?scid=kb;EN-US;q3030450
2 3DLG1 11DLGCHBW.exe119Any startup section0175Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates63http://support.microsoft.com/default.aspx?scid=kb;EN-US;q3030450
211DLHelperEXE1 9WATCH.exe119Any startup section0163Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished63http://support.microsoft.com/default.aspx?scid=kb;EN-US;q3030450
1 5DLL321 12dllmem32.exe119Any startup section0 39Added as a result of the KWBOT.E VIRUS!64http://www.symantec.com/avcenter/venc/data/w32.kwbot.e.worm.html0
1 6Dluxjp1 9cnfrm.exe119Any startup section0 39Added as a result of the DLUCA.D VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/downloader.dluca.d.html0
1 6DM mgr1 10dm_mgr.exe119Any startup section0 38Added as a result of the JITTAR VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.jittar.html0
2 6DMILDR1 10dmildr.exe119Any startup section0409Part of Dell OpenManage Client Instrumentation - software that allows remote management applica tion programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start - Programs 68http://docs.us.dell.com/docs/software/smcliins/cli60/en/ug/intro.htm0
2 5DMISL1 9DMISL.EXE119Any startup section0214DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here f or more information59http://support.intel.com/support/tokenexpress/pro/11601.htm0
2 8DMISLAPP1 12DMISLAPP.exe119Any startup section0 20DMI similar to above59http://support.intel.com/support/tokenexpress/pro/11601.htm0
1 9DM_server1 12dmserver.exe119Any startup section0 20Comet Cursor a dware48http://www.doxdesk.com/parasite/CometCursor.html0
1 4Dnar1 8Dnar.exe119Any startup section0 91Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here89http://www.spywareinfo.com/yabbse/index.php?board=10;action=display;threadid=1137;start=00
420DNE Binding Watchdog1 35rundll dnes.dll, DnDneCheckBindings219Any startup section0409Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work89http://www.spywareinfo.com/yabbse/index.php?board=10;action=display;threadid=1137;start=00
416DNE DUN Watchdog1 32rundll dnes.dll, DnDneCheckDUN13219Any startup section0409Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work89http://www.spywareinfo.com/yabbse/index.php?board=10;action=display;threadid=1137;start=00
1 6DocTor1 10Doctor.exe119Any startup section0 37Added as a result of the DOTOR VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DOTOR.A0
214DocuMagix Init1 10PWATCH.EXE119Any startup section0168PaperMaster i s an application for the PC des igned to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed25http://www.documagix.com/0
1 8DOGStart1 11GSDOGST.EXE119Any startup section0 84Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS25http://www.documagix.com/0
311Don't Panic1 19dontpanicdemodp.exe119Any startup section015830-day trial version of Don't Panic p rivacy software from Panicware. "Clean up Inte rnet tracks and quickly hide personal documents with this privacy suite."40http://www.panicware.com/product_dp.html0
326Don't Panic Pop-Up Stopper1 9dpps2.exe119Any startup section0322Pop-Up Stopper Companion f rom Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group47http://www.panicware.com/product_companion.html0
229Download Accelerator Plus 5.01 7DAP.exe119Any startup section0184Download Accelerator Plus f rom Speedbit. Do wnload manager for resuming downloads, amongst other features. Available via Start - Programs. Note that the free version is "adware" based24http://www.speedbit.com/0
215Download Wonder1 18DownloadWonder.exe119Any startup section0102Download Wonder f rom Forty Software. Dow nload manager for resuming downloads, amongst other features21http://www.forty.com/0
112DownloadWare1 6dw.exe119Any startup section0343DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its s ervers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads a nd PAgent 01
119DownloadWare Engine1 7Dwe.exe119Any startup section0343DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its s ervers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads a nd PAgent 01
2 6DPAgnt1 10DPAgnt.exe119Any startup section0 35digitalPersona f ingerprint scanner30http://www.digitalpersona.com/0
4 6Dpcnav1 10dpcnav.exe119Any startup section0 66DirecWay f rom DirectTV satellite based high-speed internet access71http://www.professionalsatellite.com/html/direcway_dw4000_features.html0
421DPCProxyLoadOnStartup1 12dpcstart.exe119Any startup section0 66DirecWay f rom DirectTV satellite based high-speed internet access71http://www.professionalsatellite.com/html/direcway_dw4000_features.html0
4 8Dpcstart1 12dpcstart.exe119Any startup section0 82DirecWay f rom DirectTV satellite based high-speed internet access. Proxy software71http://www.professionalsatellite.com/html/direcway_dw4000_features.html0
1 3dpi1 7dpi.exe119Any startup section0 47Adware based media viewer by The Delfin Project43http://www.delfinproject.com/services.shtml0
3 5dpps21 9dpps2.exe119Any startup section0322Pop-Up Stopper Companion f rom Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group47http://www.panicware.com/product_companion.html0
2 8DriveLED1 10OODLed.exe119Any startup section0 74O&O DriveLED - displays your HDD LED on your monitor. Star t manually43http://www.oosoft.de/english/products/oodl/0
1 6Driver1 8gbot.exe119Any startup section0 42Added as a result of the JUNTADOR.K VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_JUNTADOR.K0
1 8Driver321 10Scam32.exe119Any startup section0 38Added as a result of the SIRCAM VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html0
211DriveSelect1 15driveselect.exe119Any startup section0144DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start - Programs66http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html0
316dRMON SmartAgent1 12SmartAgt.exe119Any startup section0 88Part of the network monitoring program group for 3Com NIC cards. See here f or more info78http://support.3com.com/infodeli/tools/netmgt/rmonprob/product/drmon/chap1.htm0
1 4drmu1 9W95Mm.exe119Any startup section0 94Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread93http://www.lavasoft.nu/cgi-bin/forums/ikonboard.cgi?s=3d69d34f399dffff;act=ST;f=14;t=304;st=00
1 7drvr32h1 11drvr32h.exe119Any startup section0 43Added as a result of an unidentified VIRUS!93http://www.lavasoft.nu/cgi-bin/forums/ikonboard.cgi?s=3d69d34f399dffff;act=ST;f=14;t=304;st=00
111drvrmanager1 15drvrquery32.exe119Any startup section0 38Added as a result of the BOOHOO VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/bat.boohoo.worm.html0
414Drwebscheduler1 12Drwebscd.exe119Any startup section0162Dr. Web a ntivirus related - scheduler t hat allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem20http://www.sald.com/0
3 8DS Clock1 11dsclock.exe119Any startup section0 78Digital desktop clock including synchronization with atomic servers - see here35http://www.dualitysoft.com/dsclock/0
2 7DSentry1 11DSentry.exe119Any startup section0260Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts35http://www.dualitysoft.com/dsclock/0
1 3Dsi1 13dp-******.exe119Any startup section0 75Added as a result of unidentified adware where ****** are random characters35http://www.dualitysoft.com/dsclock/0
1 9Dskcompat1 13Dskcompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
211DSL Monitor1 11spdstrm.exe119Any startup section0 94Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
411DSLagentexe1 12DSLagent.exe119Any startup section0177Used in conjunction with USB connected ADSL modems from Eicon Networks ( as used by BT for its Broadband internet serv ice for example). Required for a permanent ADSL connection42http://www.eicon.com/worldwide/default.htm0
1 3DSS1 12dssagent.exe119Any startup section0158DSSAgent by Broderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here f or more info28http://cexx.org/dssagent.htm0
228dumprep 0 -kor du mprep 0 -u1 25dumprep 0 -kdu mprep 0 -u219Any startup section0324Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out31http://www.dumeter.com/main.php0
1 5dvd981 12windvd98.exe119Any startup section0 38Added as a result of the CULT.P VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cult.p@mm.html0
3 9DVDBitSet1 13DVDBitSet.exe119Any startup section0192DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cult.p@mm.html0
1 9Dvdcompat1 13Dvdcompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 9DVDSentry1 11DSentry.exe119Any startup section0260Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
4 5Dvp951 9Dvp95.exe119Any startup section0 94Scan engine for F-Secure a nd Command antivirus software based on the F-Prot AntiVirus e ngine35http://www.f-secure.com/index.shtml0
4 8dvpapi9x1 12DVPAPI9X.exe119Any startup section0 38Command AntiVirus for Windows 95/98/Me35http://www.f-secure.com/index.shtml0
410DvpInitExe1 11Dvpinit.exe119Any startup section0 26Command Antivirus r elated53http://www.command.co.uk/html/products/csav/index.cfm0
4 6dvprpt1 10Dvprpt.exe119Any startup section0 39Command Antivirus r eal time protection53http://www.command.co.uk/html/products/csav/index.cfm0
3 6DVSync1 10dvsync.exe119Any startup section0127DVSync is the program that allows you to synchronize your daVinciÆs PDA's data with your Personal Information Manager on the PC53http://www.command.co.uk/html/products/csav/index.cfm0
1 2dw1 6dw.exe119Any startup section0343DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its s ervers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads a nd PAgent 01
2 9DwlClient1 11support.exe119Any startup section0 40Download manager for Dell support alerts 01
1 2Dx1 8sys#.exe119Any startup section0 67Added as a result of the DEXTER.A VIRUS! where # is a random number77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DEXTER.A0
1 9Dx8compat1 13Dx8compat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
211DXDllRegExe1 12dxdllreg.exe119Any startup section0120Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 6DxLoad1 12DX3DRndr.exe119Any startup section0 38Added as a result of the GIBE.B VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe.b@mm.html0
216DXM6Patch_9811161 12p_981116.exe119Any startup section0 44Win32 cabinet self extractor. More info here 01
1 5Dxsty1 9Dxsty.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
112Dxupdate.exe1 12Dxupdate.exe119Any startup section0 37Added as a result of the MAFEG VIRUS!70http://securityresponse.symantec.com/avcenter/venc/data/w32.mafeg.html0
119DyFuCA Active Alert1 12actalert.exe119Any startup section0 057http://www.sophos.com/virusinfo/analyses/dialdyfucaa.html0
1 6E-Card1 9ecard.exe119Any startup section0 36Added as a result of the YODI VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.yodi.html0
3 7E-color1 11IconMgr.Exe119Any startup section0314Sets the colour of your monitor when running games that regognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.yodi.html0
211E6TaskPanel1 12TaskPanl.exe119Any startup section0132Earthlink Task Panel - part of Earthlink TotalAccess 2003 i nternet access software. Quick access to internet, E-mail and web-space39http://www.earthlink.net/home/software/0
312eabconfg.cpl1 12EabServr.exe119Any startup section0 92Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys39http://www.earthlink.net/home/software/0
3 7EACLEAN1 11eaclean.exe119Any startup section0 61For Compaq PC's. Easy Access b utton support for the keyboard75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
1 8Eac_Cnry1 10canary.exe119Any startup section0 38Added as a result of the CANARY VIRUS!56http://www.sophos.com/virusinfo/analyses/trojcanary.html0
113EanthologyApp1 12EANTHO~1.EXE119Any startup section0150Stop-Sign f rom eAccelerration. Detects spywa re, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here37http://www.eacceleration.com/privacy/0
210Eapcisetup1 11sbsetup.exe119Any startup section0 71Rockwell RipTide soundcard application software. Sound works without it37http://www.eacceleration.com/privacy/0
210EAPCISETUP1 10wizard.exe119Any startup section0108Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation37http://www.eacceleration.com/privacy/0
221EarthLink ToolBar 5.01 12etoolbar.exe119Any startup section0199EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time37http://www.eacceleration.com/privacy/0
217Easy Start Button1 7esb.exe119Any startup section0111Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys37http://www.eacceleration.com/privacy/0
319EasyKeyor Ea sy Key1 11easykey.exe119Any startup section0111For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used37http://www.eacceleration.com/privacy/0
1 8easyServ1 10Server.exe119Any startup section0 40Added as a result of the EASYSERV VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.easyserv.html0
312EasySync Pro1 12XCPCMenu.exe119Any startup section0 74EasySync Pro i s a Lotus program for synchronizing a PDA with Lot us Notes45http://www.lotus.com/products/easysyncpro.nsf0
1 7easywww1 12easywww2.exe119Any startup section0 43Added as a result of an unidentified VIRUS!45http://www.lotus.com/products/easysyncpro.nsf0
219EbatesMoeMoneyMaker1 14wjview ...Code219Any startup section0167Ebates i s a website that provides discounts from purchases from many websites. Discounts are automatic if on the Ebates listing. Discounts are paid in cash quarterly50http://www.ebates.com/landing_supn.jsp?banner=98520
112eBay Toolbar1 12EBAYTBAR.EXE119Any startup section0 55eBay Toolbar - reportes as spyware as it "phones home"35http://pages.ebay.com/ebay_toolbar/0
326eBoardor eM achines eBoard1 10Eboard.exe119Any startup section0 73eMachines multimedia keyboard manager. Required if you use the extra keys35http://pages.ebay.com/ebay_toolbar/0
2 4eBot1 18DownloadWizard.exe119Any startup section0253eBot f rom Digital River - "helps ensure your comp uter always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start - Programs30http://www.ebot.com/index.html0
1 7editpad1 11editpad.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
2 8EDLoader1 12DTLoader.exe119Any startup section0 97Effective Desktop from MiniStars Software - desktop management software no longer being supported40http://www.merijn.org/cwschronicles.html0
3 8Edwizard1 12Edwizard.exe119Any startup section0268SafeGuard Easy - "provides total company-wide protect ion for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"34http://www.ediport.hu/_sgeasy.html0
218eFax.com Tray Menu1 11HotTray.exe119Any startup section0136eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start - Programs. Disabling instructions available here34http://www.efax.com/help/index.asp0
128efaxs lptt01or ef axs ml097e1 9efaxs.exe119Any startup section0176Variant of the RapidBlaster p arasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 9Efpap.exe1 9Efpap.exe119Any startup section0129Easy File & Folder Protector. Deny access to certain fil es and folders, or to hide them securely from viewing and searching41http://www.softstack.com/fileprotpro.html0
354Eicon NetworksLAN_DAEMONor Ei con TechnologyLAN_DAEMON1 9watch.exe119Any startup section0327Associated with an Eicon Networks I SDN or ADSL modem. Watch protocols your conne ction with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually42http://www.eicon.com/worldwide/default.htm0
1 5eixfi1 9china.bat119Any startup section0 36Added as a result of the WCUP VIRUS!74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BAT_WCUP.A0
3 9Elbycheck1 13ElbyCheck.exe119Any startup section0320From Elaborate Bytes w ho make CloneCD - monitors the installed fil ters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it42http://www.elby.org/english/corp/index.htm0
1 7Element1 11Element.txt119Any startup section0 36Added as a result of the ELEM VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
2 3elm1 10Elmenv.exe119Any startup section0 68ViaTech eLicense for securing, distributing and selling music online76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
317ELSA WINman Suite1 12Winmsuit.exe119Any startup section0 96Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
411ElsaCapiCtl1 9Rcapi.exe119Any startup section0231Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
313ELSAChipGuard1 12elsavect.exe119Any startup section0249ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
2 7EMA.exe1 7EMA.EXE119Any startup section0 75Time management system which helps you to manage your time and appointments76http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html0
115eMailEncryption1 12VELOZSYS.EXE119Any startup section0 78eAcceleration Stop-Sign related - foistware. Read their privacy statement here37http://www.eacceleration.com/privacy/0
1 8emsw.exe1 8emsw.exe119Any startup section0223Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs37http://www.eacceleration.com/privacy/0
3 7EM_EXEC1 11EM_EXEC.EXE119Any startup section0186Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled37http://www.eacceleration.com/privacy/0
215EN4060C Taskbar1 12en4060ct.exe119Any startup section0 94Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray37http://www.eacceleration.com/privacy/0
210ENCMONITOR1 11monitor.exe119Any startup section0123The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it37http://www.eacceleration.com/privacy/0
213Encoder Agent1 12WMENCAGT.EXE119Any startup section0 95MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed37http://www.eacceleration.com/privacy/0
318Encompass_ENCMONTR1 12ENCMONTR.EXE119Any startup section0 46Optional simple browser from Yahoo (Encompass)37http://www.eacceleration.com/privacy/0
4 7EngUtil1 11EngUtil.exe119Any startup section0110Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking43http://www.energizerups.com/productline.asp0
312EnsoniqMixer1 11starter.exe119Any startup section0326Puts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this s pecial page. Similar to Creative PCI Audio Configuration Utility 01
117Enumerate Service1 8wsys.exe119Any startup section0 40Added as a result of the MANIFEST VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
3 7eonemng1 11eOneMng.exe119Any startup section0118eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
224EPSON Background Monitor1 8STMS.EXE119Any startup section0120Supposed to keep an Epson printer ready for quick printing. Users report little difference whether it is on or not25http://www.eprompter.com/0
317EPSON CardMonitor1 24EPSON CardMonitor1.0.exe219Any startup section0106Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint25http://www.eprompter.com/0
286EPSON Status Monitor 3 Environment Checkor EP SON Status Monitor 3 Environment Check 21 25e_srcv03.exe e_srcv02.exe219Any startup section0443According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check25http://www.eprompter.com/0
323Epson Stylus C62 Series1 12E-S0BIC1.EXE119Any startup section0132Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required25http://www.eprompter.com/0
323Epson Stylus C82 Series1 12e_s0hic1.EXE119Any startup section0132Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required25http://www.eprompter.com/0
317EpsonPhotoStarter1 22EPSON_PhotoStarter.exe119Any startup section0105Only needed if you want to make full use of the capabilities of an Epson printer that included this 25http://www.eprompter.com/0
2 4EReg1 9reg32.exe119Any startup section0186EReg is a software registration tool incorporated on products such as those by Broderbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it25http://www.eprompter.com/0
413eSafe Protect1 12ESPWatch.exe119Any startup section0 71eSafe f rom Aladdin - internet security for gateway and E-mail s ervers44http://www.esafe.com/esafe/default.asp?cf=tl0
3 3ESB1 7esb.exe119Any startup section0131Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys44http://www.esafe.com/esafe/default.asp?cf=tl0
413eScan Monitor1 13AVKWCTL9X.EXE119Any startup section0 16eScan a ntivirus45http://www.mspl.net/antivirus/escan/escan.asp0
315eScan Scheduler1 11avkserv.exe119Any startup section0 26eScan a ntivirus scheduler45http://www.mspl.net/antivirus/escan/escan.asp0
313eScan Updater1 12Trayicos.exe119Any startup section0119eScan a ntivirus updater - allows users to automatically download updates and set the auto time interval for downloads45http://www.mspl.net/antivirus/escan/escan.asp0
1 9EScorcher1 13escorcher.exe119Any startup section0199Part of eScorcher a nti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead25http://www.escorcher.com/0
2 5ESFTP1 9esftp.exe119Any startup section0 89ESftp - FTP client for transfering files between a local PC and another remote computer30http://esftp.com/features.html0
4 5Essdc1 9essdc.exe119Any startup section0 63Related to an ESS Solo soundcard. Seems as though it's required30http://esftp.com/features.html0
4 6ESSOLO1 10ESSOLO.exe119Any startup section0 65Sound card driver that re-instates itself every time it's removed30http://esftp.com/features.html0
4 5esspk1 9esspk.exe119Any startup section0 81ESS Technology modem speaker driver file. Required to get on-line with this modem30http://esftp.com/features.html0
311EssSpkPhone1 10essspk.exe119Any startup section0116ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets30http://esftp.com/features.html0
2 8Ethernet1 12tcaudiag.exe119Any startup section0 983Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start - Programs30http://esftp.com/features.html0
1 8Etraffic1 11JavaRun.exe119Any startup section0 32Marketing software from TopMoxie24http://www.etraffic.com/0
418eTrust EZ Firewall1 11efpeadm.exe119Any startup section0 18eTrust EZ Firewall47http://www1.my-etrust.com/products/Firewall.cfm0
410eTrustCIPE1 12ezdsmain.exe119Any startup section0166eTrust EZ Deskshield f rom Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unu sual behavior47http://www1.my-etrust.com/products/Firewall.cfm0
3 8EuroGlot1 12EuroGlot.exe119Any startup section0127Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian"44http://www.euroglotonline.nl/en/default.html0
214Event Reminder1 12pmremind.exe119Any startup section0 66A calendar/alarm program that installs with Broderbund Printmaster44http://www.euroglotonline.nl/en/default.html0
313EVENTLISTENER1 11EvLstnr.exe119Any startup section0 75Used with a Nikon digital camera to recognize when the camera is plugged in44http://www.euroglotonline.nl/en/default.html0
2 8eventmgr1 12eventmgr.exe119Any startup section0 97Used with a Microtek scanner. Manages the scanner's button events. Available via Start - Programs44http://www.euroglotonline.nl/en/default.html0
219Evidence Eliminator1 6ee.exe119Any startup section0134Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis48http://www.evidence-eliminator.com/product.shtml0
2 7evntsvc1 10evntsc.exe119Any startup section0192Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here f or more information, including how to disable it46http://www.mikescomputerinfo.com/TkBellExe.htm0
317EW Message Server1 9msg32.exe119Any startup section0112Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices46http://www.mikescomputerinfo.com/TkBellExe.htm0
213eWare Startup1 14iWareStart.exe119Any startup section0 35eWare i Ware task bar. Not required36http://www.eware.com/about/index.asp0
215Excite Platform1 12Exlaunch.exe119Any startup section0287Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer36http://www.eware.com/about/index.asp0
218ExciteAssistantEXE1 13ASSISTANT.EXE119Any startup section0160With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open36http://www.eware.com/about/index.asp0
124exe lptt01or ex e ml097e1 7exe.exe119Any startup section0174Variant of the RapidBlaster p arasite (in an "Exe" folder in Program Files). It is n ot recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 7execfg41 11execfg4.exe119Any startup section0 40Added as a result of the ELECTRON VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.electron.html0
1 9ExeName321 8Warm.scr119Any startup section0 37Added as a result of the SCOLD VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.scold@mm.html0
313Exif Launcher1 31Exiflaquickdcr.exe QuickDCF.exe219Any startup section0116USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly73http://securityresponse.symantec.com/avcenter/venc/data/w32.scold@mm.html0
310ExitKiller1 11Ekiller.exe119Any startup section0 67Exit Killer - automatically closes pop-up win dows in your browser26http://www.exitkiller.net/0
1 7explore1 11explore.exe119Any startup section0 60Added as a result of the NETBUS, HAWAWI a nd other VIRUSES!77http://securityresponse.symantec.com/avcenter/ven c/data/w32.hawawi.worm.html0
1 7Explore1 12Explorer.exe119Any startup section0 95Added as a result of the IRC.FLOOD.G VIRUS! Note - this is not the valid Windows "explorer.exe"81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.g.html0
111explore.exe1 11Explore.exe119Any startup section0 42Added as a result of the GRAYBIRD.G VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.g.html0
3 8explorer1 12explorer.exe119Any startup section0252Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO o r DVLDR o r MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DE L76http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.b@mm.html0
1 8explorer1 20wscript.exe filename219Any startup section0 62Sneaky way to start any VBS script. Many viruses use VBS files76http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.b@mm.html0
1 8Explorer1 13shellexpl.exe119Any startup section0 51Added as a result of the GPIX a nd SHELDOR VIRUSES!78http://securityresponse.symantec.com/avcenter/ venc/data/backdoor.sheldor.html0
1 8explorer1 10expl32.exe119Any startup section0 38Added as a result of the RATSOU VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.ratsou.html0
1 8Explorer1 12path_to_worm119Any startup section0 37Added as a result of the AUTEX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.autex.worm.html0
134Explorer lptt01or Ex plorer ml097e1 12explorer.exe119Any startup section0263Variant of the RapidBlaster p arasite (in an "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Explorer which has the same executab le name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
110Explorer321 10Expl32.exe119Any startup section0 40Added as a result of the HACKTACK VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HACKTACK.B0
3 8Exshow951 12EXSHOW95.exe119Any startup section0142Support software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_HACKTACK.B0
3 8ExtraDNS1 12ExtraDNS.exe119Any startup section0 34ExtraDNS - DNS configuration tool26http://www.extratools.com/0
2 7ezagent1 11ezagent.exe119Any startup section0 82EzVCR r ecording software for the ASUS TV FM card. Available via Start - Programs50http://www.asus.com/products/vga/tvfm/overview.htm0
2 6EZDesk1 10EZDESK.EXE119Any startup section0 82Utility that remembers icon locations for each user and resolution. Available here32http://members.aol.com/EzDesk95/0
2 8EzEjMnAp1 12EzEjMnAp.exe119Any startup section0272For IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start - Programs32http://members.aol.com/EzDesk95/0
1 6eZmmod1 8mmod.exe119Any startup section0137Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here f or more information39http://www.ahfb2000.com/ezula/ezula.php0
435ezShieldProtector for Pxor ez PS_Px1 29ezSP_Px.exe ezSP_PxEngine.exe219Any startup section0182Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD f rom Easy Systems (and maybe others) to record and protects against other software overwriting the settings35http://www.easy.co.jp/dd2e/sony/cd/0
311EZSMART App1 11ezsmart.exe119Any startup section0 97EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported35http://www.easy.co.jp/dd2e/sony/cd/0
1 5ezula1 10eZmmod.exe119Any startup section0129Regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here f or more information39http://www.ahfb2000.com/ezula/ezula.php0
1 9eZulaMain1 13eZulaMain.exe119Any startup section0137Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here f or more information39http://www.ahfb2000.com/ezula/ezula.php0
1 9eZuluMain1 13eZuluMain.exe119Any startup section0 87Comes with "KaZaA" installation. Advertising Spyware. Not required but KaZaA won't work39http://www.ahfb2000.com/ezula/ezula.php0
4 7F-StopW1 11F-StopW.exe119Any startup section0 57F-Prot a nti-virus backgroun d scanner by F-Risk Software22http://www.f-prot.com/0
1 4f6071 8f607.exe119Any startup section0 38Added as a result of the URAT.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.urat.b.html0
315FamilyKeyLogger1 9cisvc.exe119Any startup section0152"Family Keylogger - is your best choice, if you want to know w hat other users on your machine are typing". Note! - this is not the cisvc.exe s ervice.69http://www.liutilities.com/products/wintaskspro/processlibrary/cisvc/0
3 9FastCache1 6fc.exe119Any startup section0 79FastCache f rom AnalogX - speeds up browsing by resolving DNS requests loca lly55http://www.analogx.com/contents/download/network/fc.htm0
221FastTrack Accelerator1 12SPEED UP.EXE219Any startup section0138FastTrack Accelerator - "speedup" utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus40http://www.sharemonkey.com/fta/index.php0
215FastUsror fa st1 8fast.exe119Any startup section0332Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys40http://www.sharemonkey.com/fta/index.php0
3 7FatPipe1 4DHCP119Any startup section0115Software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users40http://www.sharemonkey.com/fta/index.php0
3 8FBDirect1 12FBDirect.exe119Any startup section0282Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start - Programs40http://www.sharemonkey.com/fta/index.php0
1 2fc1 9runfc.exe119Any startup section0 39Added as a result of the CAMPURF VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.campurf@mm.html0
319FEELitDeviceManager1 12feelitdm.exe119Any startup section0115Associated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)75http://securityresponse.symantec.com/avcenter/venc/data/w32.campurf@mm.html0
1 6fegoze1 11SVCH0ST.EXE119Any startup section0 42Added as a result of the GRAYBIRD.D VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.d.html0
314Fellowes Proxy1 11R3proxy.exe119Any startup section0173Installed with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.d.html0
3 7Fhtisxk1 11fhtisxk.exe119Any startup section0210XtraKeys - keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove via Spybot S&D (for example)54http://www.presorium.com/en_au/products/fg/index.shtml0
218FileFreedom_Plugin1 7wtm.exe119Any startup section0 41FileFreedom p eer-to-peer sharing program27http://www.filefreedom.com/0
113FileManager321 26Wscript.exe ..ChkMgr32.vbs219Any startup section0 39Added as a result of the NOTUP.A VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/vbs.notup.a@mm.html0
1 8FileSoft1 27Wscript.exe UpdataFiles.vbs219Any startup section0 37Added as a result of the SST.B VIRUS!60http://www.symantec.com/avcenter/venc/data/vbs.sst.b@mm.html0
310FilterGate1 14filtergate.exe119Any startup section0122Filtergate i nternet filtering software - filt ers sounds, popup ads, background sound and other unnecessary website items26http://www.filtergate.com/0
311Filterguard1 12Filtrgrd.exe119Any startup section0289An icon located in the lower left of the screen and looks like a lifesaver. This icon is a ôshort-cutö to access the basic features of SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by ôright-clickingö on the icon26http://www.filtergate.com/0
1 9Find Fast1 12Findfast.exe119Any startup section0121Complete utter waste of space! Part of MS Office - searches disk drives for Office file types to make opening them easier26http://www.filtergate.com/0
425Find Virus Launch Program1 12fvlaunch.exe119Any startup section0 31Part of Dr. Solomon's Antivirus25http://www.drsolomon.com/0
223FinePrint Dispatcher vx1 12FPDISPxA.EXE119Any startup section0188FinePrint - virtual printer for use with any printer. Search fo r "dispatcher" here f or more information. If removed, it will re-install wh en program is run - hence the Y recommendation41http://www.softwarelabs.com/fp/fp-faq.htm0
4 6Fix-it1 10mxtask.exe119Any startup section0207Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required41http://www.softwarelabs.com/fp/fp-faq.htm0
4 9Fix-it AV1 12memcheck.exe119Any startup section0242Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources41http://www.softwarelabs.com/fp/fp-faq.htm0
237FlashPath Statusor Fl ashPath Monitor1 23SDSTAT.EXE FLSHSTAT.EXE219Any startup section0184System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start - Programs41http://www.softwarelabs.com/fp/fp-faq.htm0
3 7Flexicd1 11Flexicd.exe119Any startup section0 40CD player - part of the Win95 Power Toys86http://www.microsoft.com/windows95/downloads/contents/WUToys/W95PwrToysSet/Default.asp0
1 8FLooDNeT1 11FLooDeR.exe119Any startup section0 40Added as a result of the FLOODNET VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.floodnet.html0
1 4flps1 8flps.vbs119Any startup section0 37Added as a result of the BYRON VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/vbs.bryon@mm.html0
410FltProcess1 10msinet.exe119Any startup section0163Part of Cyber Patrol i nternet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done27http://www.cyberpatrol.com/0
310FmctrlTray1 10Fmctrl.EXE119Any startup section0145Genius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)27http://www.cyberpatrol.com/0
3 7FMStart1 11Fmstart.exe119Any startup section0152GFI FAXmaker - native fax connector for Microso ft Exchange Server or for networks, allows all users to send and receive faxes right from their desktop28http://www.gfi.com/faxmaker/0
114Folder Service1 10wssdtu.exe119Any startup section0 40Added as a result of the MANIFEST VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
212Folding@home1 10WINFAH.EXE119Any startup section0231Folding@Home is a distributed computing project which studies protein folding, misfolding, aggregation, and related diseases - must be running in order to access the internet to upload to the servers. Available via Start - Programs80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
218FoneSyncSystemTray1 22FoneSyncSystemTray.exe119Any startup section0284System Tray icon for Nokia FoneSync utility for the 7160/7190 mobiles. Useful to send data from/to the cell phone and the computer. You can use it to backup data or even to input data through the computer keyboard (which naturally is much more comfortable). Run manually when required80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
1 7FontFix1 11fontfix.exe119Any startup section0 43Added as a result of an unidentified VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
1 8FONTVIEW1 12FONTVIEW.EXE119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
130foobin lptt01or fo obin ml097e1 11adaware.exe119Any startup section0174Variant of the RapidBlaster p arasite (in a "foo1" folder in Program Files). It is n ot recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
4 9FoolProof1 12fpwinldr.exe119Any startup section0 56FoolProof Security P C security software from SmartStuff42http://www.smartstuff.com/fps/fpsinfo.html0
2 6Forbes1 16ForbesAlerts.exe119Any startup section0 95Forbes Business News Alerts - displays business news headlines in a little window on the screen42http://www.smartstuff.com/fps/fpsinfo.html0
213Forget Me Not1 12AGRemind.exe119Any startup section0 57Calendar reminder part of American Greetings« CreataCard«50http://ww w.broderbund.com/SubCategory.asp?CID=1070
227FotoStation Easy AutoLaunch1 31FotoStation Easy AutoLaunch.exe219Any startup section0193Installed with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either50http://ww w.broderbund.com/SubCategory.asp?CID=1070
3 9FourthDay1 13FourthDay.exe119Any startup section0 72The Fourth Day - "astronomical clock and almanac for your system tray"46http://www.starstonesoftware.com/fourthday.htm0
4 9FP Loader1 10loadfp.exe119Any startup section0 58FoolProof Security - PC security software from SmartStuff42http://www.smartstuff.com/fps/fpsinfo.html0
2 3Fpx1 11mnmsrvc.exe119Any startup section0132Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations42http://www.smartstuff.com/fps/fpsinfo.html0
1 6France1 11svchost.exe119Any startup section0 93Added as a result of the MIMAIL.L VIRUS!. This is not the valid svchost.exe as described here69http://support.microso ft.com/default.aspx?scid=KB;EN-US;Q250320&0
4 7Freedom1 11Freedom.exe119Any startup section0175Zero Knowledge Freedom - Anti-Virus, Personal Firewall an d Parental Control, it also blocks ads, safeguards your personal information, encrypts your passwords, and much more23http://www.freedom.net/0
311FreeMem Pro1 11FMEMPRO.EXE119Any startup section0187Some users swear by memory management utilities such as FreeMem Pro but others say you don't need them - especially if you have Win98 or WinME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
310FreeMemVn21 11FreeMem.exe119Any startup section0183Some users swear by memory management utilities such as FreeMem but others say you don't need them - especially if you have Win98 or WinME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
310FreeRAM XP1 20FreeRAM XP Pro x.exe219Any startup section0227Some users swear by memory management utilities such as FreeRAM XP Pro b ut others say you don't need them - especially if you have Win98 or WinME. See this a rticle and make up your own mind. "x" indicates the version number34http://www.aumha.org/a/memmgmt.htm0
223FriendlyWebQuick-Launch1 12SELFCERT.EXE119Any startup section0272selfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well39http://www.kolumbus.fi/eero.muhonen/FS/0
318FRISK FP-Scheduler1 11F-Sched.exe119Any startup section0100Scheduler for F-Prot a nitvirus software. Leave enabled unless you scan manually on a regular basis22http://www.f-prot.com/0
4 7FRW_EXE1 7FRW.EXE119Any startup section0 56ConSeal Signal9 f irewall - now McAfee Personal firewall42http://www.claymania.com/rate-conseal.html0
4 8frxmxins1 12frxmxins.exe119Any startup section0 28ATI 3D Studio MAX/VIZ driver42http://www.claymania.com/rate-conseal.html0
3 3fsp1 7fsp.exe119Any startup section0117Folder Shield - hide entire directories and thus prevent a ccess by anyone else to your personal files and documents39http://www.baxbex.com/foldershield.html0
4 4fspr1 16FolderShield.exe119Any startup section0 48Folder Shield - hide personal files and folders38http://www.baxbex.de/foldershield.html0
2 8FSScrCtl1 12FSScrCtl.exe119Any startup section0101Screen saver control applet used by the "Stardust Screen Saver Toolkit" and "SolidWorks Screen Saver"38http://www.baxbex.de/foldershield.html0
3 6fsserv1 9fserv.exe119Any startup section0197Farsighter Server - monitors a remote computer invisibly by streaming v ideo to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time52http://www.bysoft.se/sureshot/farsighter/manual.html0
1 3FSW1 7FSW.exe119Any startup section0 27FreeScratchAndWin p arasite54http://www.doxdesk.com/parasite/FreeScratchAndWin.html0
3 8Ftpqueue1 12Ftpsched.exe119Any startup section0 82Part of WS_FTP Pro f rom Ipswitch. Queueing facility for scheduling FTP transfers40http://www.ipswitch.com/Products/WS_FTP/0
4 9fwenc.exe1 9fwenc.exe119Any startup section0181Check Point SecuRemote VPN client - "dynamic and fixed IP addressing for all ISP services - dial-up, cable modem, or DSL - the ideal solution for telecommuters and mobile workers"58http://www.checkpoint.com/products/protect/vpn-1_srsc.html0
2 9Gadu-Gadu1 6gg.exe119Any startup section0 40Polish language Instant Messaging client75http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbros@mm.html0
218Gadwin PrintScreen1 15PrintScreen.exe119Any startup section0 75Gadwin PrintScreen - utility to capture, print or save the c urrent window34http://www.gadwin.com/printscreen/0
3 8Gainward1 11TBPanel.exe119Any startup section0147Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start - Settings - Control Panel34http://www.gadwin.com/printscreen/0
211Game Device1 12JOYUPDRV.EXE119Any startup section0 40Genius game controller profile activator34http://www.gadwin.com/printscreen/0
2 8GameSpot1 11kontiki.exe119Any startup section0117Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktop s95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
312gameutil.exe1 12gameutil.exe119Any startup section0192Part of Redline RegTweak as supplied with Sapphire ATI graphics cards. You can configure different overlclocking settings on a per game basis and this sets those conditions following a re-boot95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
312GammaHotKeys1 12setgamma.exe119Any startup section0193Part of the RadeonTweaker p rogram for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop37http://radeontweaker.sourceforge.net/0
1 5Gator1 9gator.exe119Any startup section0 44Spyware - see here f or removal instructions41http://www.pchell.com/support/gator.shtml0
113Gator eWallet1 9gator.exe119Any startup section0 88Gator eWallet f rom The Gator Corporation. Spyw are - see here f or removal instructions41http://www.pchell.com/support/gator.shtml0
312GazelDisplay1 9gsyno.exe119Any startup section0 66BT Digital Access USB - Gazel ISDN installation System Tray icon43http://www.bt.com/homehighway/more_info.htm0
316GBTrayor Go Back1 10GBTray.exe119Any startup section0404System Tray icon access to Roxio's (nee Adaptec) GoBack s oftware which allows you to revert back to a pre viously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users51http://www.roxio.com/en/products/goback/index.jhtml0
2 3GCS1 16GrabClipSave.exe119Any startup section0 33GrabClipSave s creen capture tool44http://www.boumchalak.net/Tools/GCS/gcs.html0
2 6GDrive1 11GDriver.exe119Any startup section0164Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start - Settings - Control Panel - System - Device Manager44http://www.boumchalak.net/Tools/GCS/gcs.html0
2 7Gearbox1 11confsvr.exe119Any startup section0210NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here41http://www.ntlworld.com/help/settings.htm0
2 7GEARsec1 11gearsec.exe119Any startup section0117Installed by Apple Quicktime package - iPod/iTunes CDRW support. Can be disabled if you only require Quicktime player41http://www.ntlworld.com/help/settings.htm0
1 6GEDZAC1 10GEDZAC.exe119Any startup section0 37Added as a result of the GEMEL VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.hllw.gemel.html0
2 8GemStRmW1 12GemStRmW.exe119Any startup section0116For a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually62http://www.symantec.com/avcenter/venc/data/w32.hllw.gemel.html0
132general lptt01or ge neral ml097e1 11general.exe119Any startup section0177Variant of the RapidBlaster p arasite (in a "General" folder in Program Files). It i s not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
133Generic host proccess for windows1 12SVCHOSTS.EXE119Any startup section0 43Added as a result of an unidentified VIRUS!60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
139Generic Host Process for Win32 Services1 10ntspcv.exe119Any startup section0 39Added as a result of the SDBOT.S VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.s.html0
417Genie USB Monitor1 14USBmonitor.exe119Any startup section0 83Port monitor for an external USB hard drive. Required to enable access to the drive77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.s.html0
2 9Get Smile1 12getsmile.exe119Any startup section0 60Puts smilie faces in your E-mail. Run manually when required77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.s.html0
218GetRight Tray Icon1 12GETRIGHT.EXE119Any startup section0264GetRight from Headlight Software - download manager for resuming downloads and choosing multiple download locations. The freeware version is/was spyware. The registered version isn't if you don't install the Aureate/Radiate software. Available via Start - Programs77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.s.html0
217GhostStartService1 21GhostStartService.exe119Any startup section0138Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard50http://www.symantec.com/sabu/ghost/ghost_personal/0
217GhostStartTrayApp1 21GhostStartTrayApp.exe119Any startup section0 65System Tray access to Norton Ghost - added from the 2003 version50http://www.symantec.com/sabu/ghost/ghost_personal/0
420Gilat SOM Enumerator1 11dllhost.exe119Any startup section0120For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system50http://www.symantec.com/sabu/ghost/ghost_personal/0
3 7Glass2k1 11Glass2k.exe119Any startup section0 95"Glass2k i s a small little program that allows Win2K/XP users to make any window transparent"42http://www.chime.tv/products/glass2k.shtml0
4 5Glide1 12Glidew32.exe119Any startup section0 23Cirque t ouchpad driver45http://www.cirque.com/products/touchpads.html0
1 9GLSetIT321 13msiexec16.exe119Any startup section0 54Added as a result of the OPTIX PRO s eries of VIRUSES!58http://www.megasecurity.org/trojans/o/optix/Optix_all.html0
1 9GLSetIT321 9isass.exe119Any startup section0 67Added as a result of a variant of the OPTIX PRO s eries of VIRUSES!58http://www.megasecurity.org/trojans/o/optix/Optix_all.html0
4 6Gmouse1 10Gmouse.exe119Any startup section0 78Amouse mouse driver - required if you use non-standard Windows driver features58http://www.megasecurity.org/trojans/o/optix/Optix_all.html0
3 8Gnetmous1 12gnetmous.exe119Any startup section0 91Genius NetScroll+ m ouse driver - required if you use non-standard Windows d river features56http://www.geniusnet.com.tw/product/mouse/netscroll+.htm0
1 8Go!Zilla1 11gozilla.exe119Any startup section0 54A variant for the Go!Zilla download manager, see above56http://www.geniusnet.com.tw/product/mouse/netscroll+.htm0
126Go!Zilla Monster Downloads1 6Go.exe119Any startup section0101Download manager for resuming downloads and choosing multiple download locations. Advertising spyware56http://www.geniusnet.com.tw/product/mouse/netscroll+.htm0
3 6GoBack1 10GBMenu.exe119Any startup section0377Roxio's (nee Adaptec) GoBack s oftware which allows you to revert back to a pre viously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users51http://www.roxio.com/en/products/goback/index.jhtml0
322GoBack Polling Service1 10GBPoll.exe119Any startup section0377Roxio's (nee Adaptec) GoBack s oftware which allows you to revert back to a pre viously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users51http://www.roxio.com/en/products/goback/index.jhtml0
318Goldensoft_MndlSvr1 11MndlSvr.exe119Any startup section0216Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking51http://www.roxio.com/en/products/goback/index.jhtml0
214GoogleDCClient1 13GoogleDCC.exe119Any startup section0296Google Compute Client - only present if you installed the Google T oolbar with "Google Compute" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click "Stop Computing"47http://toolbar.google.com/dc/faq_dc.html#about10
3 8GoToMyPC1 9g2svc.exe119Any startup section0197ExpertCity GoToMyPc l ogon - web-based remote-access solu tion that allows individuals and companies to register their computers online and then securely access those computers from any web browser37https://www.gotomypc.com/ad/corp/home0
110gouday.exe1 10readme.exe119Any startup section0 40Added as a result of the BEAGLE.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.c@mm.html0
2 3GRA1 7gra.exe119Any startup section0329Looks at system resources at startup and warns you if they have dropped. Contains links to the Disk Clean Up, Defrag and Start Up Menu. It does have a link to a startup configuration utility. Similar to msconfig but can keep a list of disabled apps. Not really necessary. Only appears if you load the Gateway Startup Utility76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.c@mm.html0
321Gravis Appawareloader1 12dbserver.exe119Any startup section0156Looks like it's associated with Gravis g ame controllers and the Keyset Ma nager, allowing the user to program the buttons for games that don't support them22http://www.gravis.com/0
331Gravis Xperience Driver Support1 12Grxp4exe.exe119Any startup section0213Driver for Gravis g ame controllers such as the Elimi nator Aftershock. Must be loaded if you run the supplied application software for the controller to be recognized. Start it manually via a shortcut if not used22http://www.gravis.com/0
218Greetings Workshop1 12GWREMIND.EXE119Any startup section0 85You really want to be reminded about somebody's birthday at the expense of resources?22http://www.gravis.com/0
1 7gremier1 24wscript.exe gpremier.vbs219Any startup section0 40Added as a result of the GPREMIER VIRUS!63http://www.symantec.com/avcenter/venc/data/vbs.gpremier@mm.html0
1 7Gremlin1 12intrenat.exe119Any startup section0 41Added as a result of the DOOMJUICE VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.doomjuice.html0
2 7GrpConv1 11grpconv.exe119Any startup section0253To facilitate the upgrade from Windows 3.1 to Win95/98, an executable file named GRPCONV.EXE is included with Win95/98. This file provides the translation of groups and group items to folders and links unless you need to access Win 3.1 Group files 79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.doomjuice.html0
2 9Gsiconexe1 10Gsicon.exe119Any startup section0254ADSL modem monitor from Eicon Networks ( as used by BT for its Broadband internet serv ice for example). Can safely be disabled without affecting the connection - all this does is give an indication of connectivity and access to the diagnostic facilities42http://www.eicon.com/worldwide/default.htm0
211GSOrganizer1 15GSOrganizer.exe119Any startup section0 56GoldenSection Organizer - personal information manag er33http://www.tgslabs.com/index.php30
1 9gssomatic1 13gssomatic.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
2 7Gtwatch1 11gtwatch.exe119Any startup section0 49Associated with a Mustec scanner and not required 01
2 8Guardian1 12CMGrdian.exe119Any startup section0211McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic 01
418gw port controller1 12PORTCT95.EXE119Any startup section0235From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung66http://www.symantec.com/avcenter/venc/data/w32.opaserv.h.worm.html0
212GWInkMonitor1 16GWInkMonitor.exe119Any startup section0120Gateway ink monitor - makes an annoying popup that says your printer may be running out of ink, do you want to buy some!66http://www.symantec.com/avcenter/venc/data/w32.opaserv.h.worm.html0
2 8GWMDMMSG1 12GWMDMMSG.exe119Any startup section0148Used with internal modems on Gateway and vprMatrix PCs. This is the "GTW modem messaging applet" and is not required for the modem to work correctly66http://www.symantec.com/avcenter/venc/data/w32.opaserv.h.worm.html0
3 7GWMDMpi1 11GWMDMpi.exe119Any startup section0184Used with internal modems on Gateway PCs such as the 450SX Notebook. Required for audio settings to be maintained and does not remain in memory once run. See here f or more information 01
3 4gwum1 8gwum.exe119Any startup section0173Gigabyte utility manager. Loads if you have a Gigabyte motherboard and got a full bundle of utilities installed. Monitors CPU, fans, BIOS etc. Only used by system "tweakers" 01
321H/PC Connection Agent1 12WCESCOMM.EXE119Any startup section0 49Active sync for use with Windows CE based palm PC 01
220HalifaxHowardCluster1 12skinkers.exe119Any startup section0 90Howard the Weatherman d esktop client from Halifax by Sk inkers - marketing/messaging tool36http://www.skinkers.com/clients.html0
313HaMFrontPanel1 12hampanel.exe119Any startup section0190Displays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless36http://www.skinkers.com/clients.html0
316Handy Backup 3.91 11hbagent.exe119Any startup section0141Handy Backup - automatic backup of your critic al data to virtually any type of storage media including CD-RW devices and remote FTP servers27http://www.handybackup.com/0
324Hardware Sensors Monitor1 12hmonitor.exe119Any startup section0181Utility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems27http://www.handybackup.com/0
3 4Hare1 8hare.exe119Any startup section0 62Hare - improve and optimize performance of desktop/laptop PCs51http://www.foxpop.ndirect.co.uk/pc/dachshund_03.htm0
3 7HawkEye1 11HAWK_95.EXE119Any startup section0136Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start - Programs51http://www.foxpop.ndirect.co.uk/pc/dachshund_03.htm0
324HawkEye IV Control Panel1 11HAWK_32.EXE119Any startup section0136Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start - Programs51http://www.foxpop.ndirect.co.uk/pc/dachshund_03.htm0
1 6Hbinst1 10Hbinst.exe119Any startup section0294Hotbar e nhances the surfing experience of fering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
211HC Reminder1 6hc.exe119Any startup section0101For Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
2 8HCDetect1 12HCDetect.exe119Any startup section0335MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
3 8Hcontrol1 12hcontrol.exe119Any startup section0 73Hotkeys on an ASUS Notebook. Only required if you use the additional keys53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
2 6HDtray1 10HDtray.exe119Any startup section0151Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge s eries soundcards. Available via Start - Settings - Control Panel15http://www.cons0
110hellodolly1 9shost.exe119Any startup section0 36Added as a result of the YODO VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.yodo@mm.html0
111helpctl.exe1 11helpctl.exe119Any startup section0 39Added as a result of the GASLIDE VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.gaslide.html0
111HelpExp.exe1 11HelpExp.exe119Any startup section0 38Attune HelpExpress. Disable - see here45http://www.c-squad.org/mpn/article.php?sid=420
111helpmanager1 10spoler.exe119Any startup section0 40Added as a result of the RANDEX.J VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.j.html0
316Hermes Messenger1 12DGDRHE~1.EXE119Any startup section0 65A LAN messenger alternative to WinPopUp - Digital Dreams Software27http://www.dgdr.com/hermes/0
3 2Hf1 6Hf.exe119Any startup section0 60Hide Folders - hide your folders so only yo u can view them24http://www.fspro.net/hf/0
3 4hfxp1 8hfxp.exe119Any startup section0 49Hide Folders XP - Win2K/XP version of the abo ve26http://www.fspro.net/hfxp/0
2 7HGTXPEI1 15FirstReboot.exe119Any startup section0110Herucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start - Settings - Control Panel26http://www.fspro.net/hfxp/0
311Hibernation1 9hib32.exe119Any startup section0202Reduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run of battery regularly26http://www.fspro.net/hfxp/0
1 7Hid.exe1 7hid.exe119Any startup section0 40Added as a result of the RATSOU.B VIRUS!82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.ratsou.b.html0
111HideRun.exe1 38Hiderun.exe and svhost.exe and pro.gif219Any startup section0 38Added as a result of the BOOHOO VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/bat.boohoo.worm.html0
3 7hidserv1 11hidserv.exe119Any startup section0606This is the Human Interface Device Server f or Win98SE/2000/Me/XP, it is required onl y if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume c ontrol and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the controller for the keyboard sound controls on the USB and PS/2 keyboards46http://www.microsoft.com/hwdev/hid/audctrl.htm0
211HistoryKill1 12histkill.exe119Any startup section0197HistoryKill removes your web surfing path by removing the URL drop-list history, detailed history file, cache, and cookies in both IE and Netscape Navigator browsers. Available via Start - Programs46http://www.microsoft.com/hwdev/hid/audctrl.htm0
3 5hkcmd1 9hkcmd.exe119Any startup section0248Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via the Display Properties in Control Panel55http://www.rightutilities.com/products/hitware_lite.htm0
3 6hkserv1 10HKserv.exe119Any startup section0121Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS55http://www.rightutilities.com/products/hitware_lite.htm0
3 8Hmonitor1 12Hmonitor.exe119Any startup section0110Hardware sensor monitoring program. Only required if you overclock your system and want to check on the status55http://www.rightutilities.com/products/hitware_lite.htm0
214Holiday Lights1 18Holiday Lights.exe219Any startup section0118Holiday Lights f rom Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start - Programs37http://www.tigertech.com/hlights.html0
313Hook99startup1 9hk2re.exe119Any startup section0317"Hook99 e nables the user to customize the start button. You can cha nge or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons, bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent"47http://thunder.prohosting.com/~ladi/e_hook.html0
3 7HookSys1 11HookSys.exe119Any startup section0120SurfinGuard Pro - protects against all malicious code delivered throug h executables, scripting files, ActiveX and Java51http://www.rocketdownload.com/details/secu/6889.htm0
311Hot Corners1 8Hotc.exe119Any startup section0126Hot Corners - "lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen"37http://www.southbaypc.com/HotCorners/0
323Hot Key Kbd 2690 Daemon1 12SK9910DM.exe119Any startup section0 66Multimedia keyboard manager - required if you use any special keys37http://www.southbaypc.com/HotCorners/0
1 6Hotbar1 10Hbinst.exe119Any startup section0294Hotbar e nhances the surfing experience of fering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
3 6HotIDE1 10hotide.exe119Any startup section0101HotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks53http://www.safersite.com/pestinfo/H/HotBar_Adware.asp0
3 9HotkeyApp1 13HotkeyApp.exe119Any startup section0 87Part of Acer L aunch Manager - programmable keys on such laptops as the TravelMate 61023http://global.acer.com/0
311HotKeysCmds1 9hkcmd.exe119Any startup section0243Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via Control Panel - Display Properties23http://global.acer.com/0
215HotSync Manager1 11hotsync.exe119Any startup section0176Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start - Programs23http://global.acer.com/0
110hotwetlove1 14hotwetlove.exe119Any startup section0 82Adult content dialler. Will not uninstall - components have to be manually deleted23http://global.acer.com/0
225HP CD-DVDor HP CD Writer1 12hpcdtray.exe119Any startup section0 80System Tray access to a HP CD-Writer's functions. Available via Start - Programs25http://www.hoverdesk.net/0
1 9hp center1 18BACKWEB-137903.exe119Any startup section0352Based upon HP's own description from here - "With the My HP Cent er, consu me rs have access directly from the desktop to Internet sites featuring special offers for HP cust omers rangin g from personal finance and shopping to digital imaging and music" I have classified this as adware. The number may cha nge - if yours is different let me know 01
112hp center UI1 13ShadowBar.exe119Any startup section0 28User Interface for HP Center 01
219HP Display Settings1 12hpdisply.exe119Any startup section0131Sets default display settings. Unchecking this item has been reported to cure a "Problem sending command to keyboard" error message 01
318HP Instant Support1 10matcli.exe119Any startup section0524"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". HP Instant Support is required to run with the Help and Support program. If you uncheck HP Instant Support and and then run Help and Support it will add another HP Instant Support in the startup menu. If you remove the HP Instant Support in the add/remove program some help menus in help and support will not be available. You decide 01
218HP Internet Center1 11SURFBRD.EXE119Any startup section0191Loads the HP Internet center surfboard on startup. HP Internet Center allows you to customize the multimedia keys on the fly without having to go the Control Panel -- Keyboards to change them 01
215HP JetDiscovery1 12HPJETDSC.EXE119Any startup section0 74HP JetAdmin software which monitors printing jobs on a network environment 01
221HP JetSpeed Autostart1 13AUTOSTART.EXE119Any startup section0 61Autostart executable for the old multiplayer game HP Jetspeed 01
221HP Parallel Port Test1 8hppt.exe119Any startup section0 36Associated with a HP ScanJet scanner 01
217HP Precision Scan1 12hpmdlbwx.exe119Any startup section0 29Same as HP ScanPicture b elow 01
221HP Presentation Ready1 11PresRdy.exe119Any startup section0196HP Omnibook related: "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device" 01
318hp psc 2000 Series1 12hpobnz08.exe119Any startup section0119System Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start 01
312HP ScanPatch1 13HPScanFix.exe119Any startup section0197Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used, then it is safe to remove or prevent from starting 01
214HP ScanPicture1 12hpsplmwa.exe119Any startup section0 89HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required 01
214HP Simple Trax1 10Hpcron.exe119Any startup section0135Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start - Programs or Desktop Icon 01
218HP software update1 13HPWuSchd2.exe119Any startup section0 84HP software updates. If a shortcut doesn't exist create your own and run it manually 01
211hpaiodevice1 12hpodev07.exe119Any startup section0436Direct from HP - "Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when "portable" is chosen during installation)". Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner 01
233HPAiODevice(hp psc 900 series) -11 12hpobrt07.exe119Any startup section0168Installed with a Hewlett Packard 900 series colour printer, scanner, fax, photo card slot printer, copier. Assumed to perform an identical function to hpaiodevice above 01
220HPAIO_PrintFolderMgr1 12hpoopm07.exe119Any startup section0381Directly from HP: "This process has one purpose - detects if the device moves to a different port, and notifies other processes to look on the new port." For various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the HP icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner 01
320HPDJ Taskbar Utility1 51hpztsbol.exe hpztsd02.exe hpztsb04.exe hpztsb05.exe219Any startup section0369(1) Ghostscript device driver for printers understanding Hewlett-Packard's Printer Command Language - see here f or more infoor (2 ) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer 57http://home.t-online.de/home/Martin.Lottermoser/pcl3.html0
2 8hpfsched1 12hpfsched.exe119Any startup section0218HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature57http://home.t-online.de/home/Martin.Lottermoser/pcl3.html0
317HPGamesActiveMenu1 14ActiveMenu.exe119Any startup section0219Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that Wild Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
2 8hpgs2wnd1 12hpgs2wnd.exe119Any startup section0157"HP's exclusive Share-to-Web s oftware makes it easy to share content with others through our affiliat e Internet websites." Avail able via Start - Programs66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
3 8HPHAxMON1 12HPHAxMON.EXE119Any startup section0321Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature and known to cause system crashes in some cases. "x" can be 1, 2 or 3 and depends upon driver version. Replaced by HPHmon** (where ** is the version number) from version 4 onwards66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
3 8HPHmon**1 12HPHMON**.EXE119Any startup section0324Monitors the status of the memory card reader slot on a HP printers and displays a tray icon if a memory card isn't inserted. Also creates a virtual drive and assigns it the first available drive letter - which can lead to problems with drive management. ** represents the version number. Disable if you don't use the reader66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
3 8HPHmon041 12hphmon04.exe119Any startup section0141Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
2 8HPHUPD**1 12hphupd**.exe119Any startup section0112HP software update checker and wizard launcher. ** represents the version number. Available via Start - Programs66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
4 6HpLamp1 10HPLAMP.EXE119Any startup section0124HP Scanner Utility that controls your scannerÆs light bulb. Needed if it's switched on. Also refer here f or troubleshooting 01
312HPLogiFinder1 13hp_finder.exe119Any startup section0118HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used 01
3 7HpMmKbd1 11HpMmKbd.exe119Any startup section0119HPÆs multimedia keyboard driver which enables the end-user to use the automation features of the HP multimedia keyboard 01
2 8hpodblia1 12hpodblia.exe119Any startup section0114HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually 01
2 8hpodlb081 12hpodlb08.exe119Any startup section0114HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually 01
4 6hpppta1 10HPPPTA.exe119Any startup section0 44HP parallel port driver for certain hardware 01
3 8HPPWRSAV1 12HPPWRSAV.EXE119Any startup section0297Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try http://www.hp.com/, pic k your OS option under the SUPPORT tab, follow the instructions and you will find an updated lamp control patch18http://www.hp.com/0
313HPSCANMonitor1 11hpsjvxd.exe119Any startup section0106HP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner18http://www.hp.com/0
2 8hpsjbmgr1 12hpsjbmgr.exe119Any startup section0242HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup, unless the scanner is used every day, such as in a business environment18http://www.hp.com/0
2 7HPStart1 11hpstart.wsf119Any startup section0147This a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot18http://www.hp.com/0
3 8hpsysdrv1 12hpsysdrv.exe119Any startup section0606This item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP, if it can't tell that it is an HP it will not run. If unchecked, it can prevent the running of the Application Recovery CDs, the use of the multimedia keys, and the HP Instant Support. Also seen that without it running, the Riptide Sound card that was installed on some older HP computers stops working18http://www.hp.com/0
2 3HPU1 17ProvenTactics.exe119Any startup section0 35Proven Internet Marketing s oftware29http://www.proventactics.com/0
2 7HPZTS041 11hpzts04.exe119Any startup section0 72Hewlett Packard printer toolbox shortcut that resides in the system tray29http://www.proventactics.com/0
2 6HP_dla1 11dlatray.exe119Any startup section0106On HP PCs, tray icon for dla - which provides drive letter access to HP's and Veritas' version of DirectCD29http://www.proventactics.com/0
4 8HREF.OCX1 25regsvr32.exe ....HREF.OCX219Any startup section0150HREF.OCX is an ActiveX control developed by xFX JumpStart and used to provide HTML-alike clickable links on Windows-based programs such as PopUpKiller58http://software.xfx.net/utilities/popupkiller/download.htm0
3 3Hti1 9npdor.exe119Any startup section0157Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the su rvey to work correctly. Otherwise not required21http://www.npdor.com/0
3 7HTpatch1 11htpatch.exe119Any startup section0197HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%21http://www.npdor.com/0
1 9HtProtect1 13AVprotect.exe119Any startup section0 40Added as a result of the NETSKY.L VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.l@mm.html0
1 9https-ssl1 9https.exe119Any startup section0 39Added as a result of the MOEGA.D VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.moega.d.html0
1 7huigezi1 13HgzServer.exe119Any startup section0 42Added as a result of the GRAYBIRD.C VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.c.html0
1 4Hvid1 8Hvid.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 7HWINFO*1 7HWINFO*119Any startup section0 67Added as a result of the PUROL VIRUS! where * is a random character75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.purol.html0
121HXDL.EXEor HX IUL.EXE1 18HXDL.EXE HXIUL.EXE219Any startup section0225Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs21http://www.alset.com/0
325HydraVisionDesktopManager1 10desk98.exe119Any startup section0167ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup21http://www.alset.com/0
111I-Worm.GiGu1 8uGiG.eXe119Any startup section0 36Added as a result of the GINK VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.gink.worm.html0
1 4I3861 8I386.exe119Any startup section0 39Added as a result of the MYPOWER VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mypower.b@mm.html0
3 9i8kfangui1 13i8kfangui.exe119Any startup section0 41Graphical interface for fan speed control77http://securityresponse.symantec.com/avcenter/venc/data/w32.mypower.b@mm.html0
3 8IAAnotif1 12iaanotif.exe119Any startup section0353IAA Event Monitor User Notification Tool - part of Intel« Application Accelerator - "a performance software pack age for desktop PCs using select Intel« chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed42http://www.intel.com/support/chipsets/iaa/0
4 6iamapp1 10iamapp.exe119Any startup section0139AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well42http://www.intel.com/support/chipsets/iaa/0
143Iamnacho On Irc.MusIrc.com Is a Homosexual!1 10XBox64.exe119Any startup section0 40Added as a result of the RANDEX.Y VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.y.html0
1 7IASHLPR1 11IASHLPR.EXE119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
211ibmmessages1 15ibmmessages.exe119Any startup section0210Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
3 8Ibmpmsvc1 12ibmpmsvc.exe119Any startup section0295Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
327IBMUltraBayHotSwapCPLLoader1 12IBMBAY2N.EXE119Any startup section0 73Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
2 9ICH Synth1 10eusexe.exe119Any startup section0217Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
3 6iClean1 10iClean.exe119Any startup section0134IEClean - "advanced, comprehensive package of tools wh ich perform a number of functions to allow you to control your online privacy"35http://www.nsclean.com/ieclean.html0
2 3iCn1 7NAG.EXE119Any startup section0114iChoose - shopping browser enhancement that alerts you to cheaper deal s for goods you want to buy, if they exist51http://www.rocketdownload.com/Details/Inte/4948.htm0
2 3ICO1 7ICO.EXE119Any startup section0213Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games51http://www.rocketdownload.com/Details/Inte/4948.htm0
214Icon Animation1 7HDE.EXE119Any startup section0 86Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons51http://www.rocketdownload.com/Details/Inte/4948.htm0
214Icon Hearit 951 12hearit95.exe119Any startup section0 75Audio desktop customization utility from Moon Valley Software. Resource hog51http://www.rocketdownload.com/Details/Inte/4948.htm0
214Icon Hearit 981 12hearit98.exe119Any startup section0 75Audio desktop customization utility from Moon Valley Software. Resource hog51http://www.rocketdownload.com/Details/Inte/4948.htm0
126Icon lptt01or Ic on ml097e1 8icon.exe119Any startup section0175Variant of the RapidBlaster p arasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
4 8ICONCLNT1 12iconclnt.exe119Any startup section0 58APC PowerChute Tray Icon. Associated with the UPS l isting 01
3 8ICONDESK1 12ICONDESK.EXE119Any startup section0 85Small utility which will allow you the option of hiding or showing your desktop icons 01
211Iconfig.exe1 11Iconfig.exe119Any startup section0 27Icon for LS-120 "Superdisk" 01
113iConfigLoader1 11DIIhost.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
2 7Iconoid1 11Iconoid.exe119Any startup section0 34Iconoid i s a desktop icon manager34http://www.sillysot.com/index.html0
2 9Iconsaver1 13Iconsaver.exe119Any startup section0 36IconSaver i s a desktop icon manager35http://www.iconsaver.com/index.html0
115ICQ Hacking Pro1 10ICQpro.exe119Any startup section0 51Added as a result of a version of the NETSPY VIRUS!75http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NETSPY0
2 8ICQ Lite1 11ICQLite.exe119Any startup section0 61ICQ Lite - compact version of the popular messa ging program28http://www.icq.com/download/0
1 7ICQ Net1 12winlogon.exe119Any startup section0230Added as a result of the NETSKY.C o r NETSKY.D o r NETSKY.E o r NETSKY.K VIRUSES! - file is located in C:\Windows or C:\Winnt, and not in it's System or System3 2 subdirectory, as is the case with the legitimate winlogon.exe f ile72http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/0
2 8ICQ Plus1 9vplus.exe119Any startup section0107ICQ Plus i s a freeware utility makes your ICQ skinnable (change the look). Available via Start - Programs23http://www.icqplus.org/0
3 7ICSDCLT1 35rundll32.exe Icsdclt.dll, ICSClient219Any startup section0164Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines23http://www.icqplus.org/0
2 8ICServer1 12Icserver.exe119Any startup section0117Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations23http://www.icqplus.org/0
4 6ICSMGR1 10ICSMGR.EXE119Any startup section0128Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if youÆre sharing the internet on various computers23http://www.icqplus.org/0
2 8IC_KEY_31 9spvic.exe119Any startup section0 22Instant Chess r elated58http://www.instantchess.com/?SN=Z4dMzyutgpE9Pspv&ABT=30
212ID Commander1 9IDCom.exe119Any startup section0 60Caller ID utility for identifying incoming telephone numbers58http://www.instantchess.com/?SN=Z4dMzyutgpE9Pspv&ABT=30
1 3IDE1 7ide.exe119Any startup section0 41Added as a result of the ASSASIN.F VIRUS!66http://www.symantec.com/avcenter/venc/data/backdoor.assasin.f.html0
110IDE Loader1 13IDElibr32.exe119Any startup section0 70Added as a result of the XILON VIRUS!. Related to the game "Diablo II"77http://securityresponse.symantec.com/avcenter/venc/data/w32.xilon.trojan.html0
3 8iDesktop1 12idesktop.exe119Any startup section0 83Immersion TouchWare Desktop s oftware for devices such as the Logitech iFeel Mo use59http://www.immersion.com/products/ce/generaldownloads.shtml0
2 5IDMan1 9IDMan.exe119Any startup section0 72Internet Download Manager - download files faster, schedul e and resume39http://www.internetdownloadmanager.com/0
216IDW Logging Tool1 10idwlog.exe119Any startup section0144Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems39http://www.internetdownloadmanager.com/0
3 9IE Doctor1 12IEDoctor.exe119Any startup section0241IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"39http://www.internetdownloadmanager.com/0
310IECleanAux1 11Ieboot6.exe119Any startup section0117IEClean b y Kevin McAleavy - cookie manager, cache clea ner, history cleaner, etc. Performs cleaning tasks at startup35http://www.nsclean.com/ieclean.html0
1 5iedll1 9iedll.exe119Any startup section0 51Homepage hijacker, redirecting to coolwwwsearch.com35http://www.nsclean.com/ieclean.html0
1 8IEDriver1 24IEDriver.exe explore.exe219Any startup section0 93Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze35http://www.nsclean.com/ieclean.html0
110IEFeatures1 35IEFeatures.exe Internetfeatures.exe219Any startup section0 74Added as a result of the POPMON.A VIRUS! - also known as PopMonster adware77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_POPMON.A0
110IELoader321 14iexplore32.exe119Any startup section0 49Added as a result of the SPEX o r SPEX.B VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/w32.spex.b.worm.html0
1 5Iesar1 9Iesar.exe119Any startup section0 51Browser hijacker - redirecting to an adult web page76http://securityresponse.symantec.com/avcenter/venc/data/w32.spex.b.worm.html0
2 5ietsr1 9ietsr.exe119Any startup section0 81IEClean b y Kevin McAleavy - cookie manager, cache clea ner, history cleaner, etc35http://www.nsclean.com/ieclean.html0
1 8ieupdate1 11MCP****.exe119Any startup section0 70Added as a result of the ASOXY VIRUS! where **** are random characters75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.asoxy.html0
1 8Iexplore1 12iexplore.exe119Any startup section0149Added as a result of the BOXER VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder73http://securityresponse.symantec.com/avcenter/venc/data/trojan.boxer.html0
117Iexplore Services1 12iexplore.exe119Any startup section0154Added as a result of an unidentified VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.aphexdoor.html0
136iexplorer lptt01or ie xplorer ml097e1 13iexplorer.exe119Any startup section0264Variant of the RapidBlaster p arasite (in an "iexplorer" folder in Program Files). I t is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Explorer which has the same executab le name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
312IFSplash.exe1 12IFSplash.exe119Any startup section0 48I-FORCE driver for force feedback steering wheel60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
2 8igfxtray1 12igfxtray.exe119Any startup section0209Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start - Settings - Control Panel60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
2 7iIWiper1 15Systemwiper.exe119Any startup section0134System Wiper f rom iI Software - allows you to clear the h istory of your activites from you computer. Run manually on a regular basis38http://nn101.virtualave.net/clean.html0
413IJ75P2PSERVER1 12IJ75P2PS.EXE119Any startup section0 77Printer utility which is required in order to make the printer work correctly38http://nn101.virtualave.net/clean.html0
414IKE Service 951 14IKEService.exe119Any startup section0120Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything20http://www.pgpi.org/0
3 9iKeyWorks1 12IKEYMAIN.EXE119Any startup section0 44A4Tech w ireless keyboard driver and utility46http://www.a4tech.com/a4techenglish/index.html0
122iLLeGaLor iL LeGaL.exe1 11Mplayer.exe119Any startup section0210Added as a result of the HOLAR.C ( or http://securityresponse.symantec.com/avcenter/venc/data/w32.galil@mm.html) VIRUS! Note - this should not be comfused with Windows Media Player which has the same filename73http://securityresponse.symantec.com/avcenter/venc/data/w32.galil@mm.html0
215iM Start Center1 11iM_Tray.exe119Any startup section0187Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start - Programs - iM Networks - iM Radio Tuner25http://www.intense.co.uk/0
419Image & Restore1 11IMAGE32.exe119Any startup section0156Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run40http://www.merijn.org/cwschronicles.html0
3 8Imagefox1 12imagefox.exe119Any startup section0 90ImageFox 2.0 i s an "add-on" graphics previewer for most Windows Open/Save As dialog boxes76http://www.acdsystems.com/English/Products/ImageFox/index.htm?LAN=EnglishX200
110Imagemgt321 14Imagemgt32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 7imekrig1 11imekrig.exe119Any startup section0140Part of MS Input Method Editor w hich is used to ease the input of Asian characters in MS Office (Chines e, Japanese and this one is Korean)73http://www.microsoft.com/windows/ie/downloads/recommended/ime/default.asp0
211IMEKRMIG6.11 12IMEKRMIG.EXE119Any startup section0140Part of MS Input Method Editor w hich is used to ease the input of Asian characters in MS Office (Chines e, Japanese and this one is Korean)73http://www.microsoft.com/windows/ie/downloads/recommended/ime/default.asp0
3 7ImgIcon1 11ImgIcon.exe119Any startup section0354Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start - Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running21http://www.imesh.com/0
2 8ImgStart1 12ImgStart.exe119Any startup section0 96Used by Iomega drives. Details of its purpose can be found here. Available via Start - Programs57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
221imjpmigor Im jpmig8.11 11IMJPMIG.EXE119Any startup section0140Part of MS Input Method Editor w hich is used to ease the input of Asian characters in MS Office (Chines e, Korean and this one is Japanese)73http://www.microsoft.com/windows/ie/downloads/recommended/ime/default.asp0
2 8Imonitor1 10Plguni.exe119Any startup section0 72McAfee QuickClean 3.0 - removes internet clutter and unwanted p rograms44http://www.mcafee.com/myapps/qc3/default.asp0
2 4InCD1 8incd.exe119Any startup section0189Ahead InCD p acket writing software. Sim ilar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk20http://www.nero.com/0
2 7IncMail1 11IncMail.exe119Any startup section0232"IncrediMail i s an advanced, feature-rich email program that offe rs you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"45http://www.incredimail.com/english/index.html0
225InControl Desktop Manager1 10DMHKEY.EXE119Any startup section0140For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start - Programs45http://www.incredimail.com/english/index.html0
211Incredimail1 15incredimail.exe119Any startup section0232"IncrediMail i s an advanced, feature-rich email program that offe rs you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"45http://www.incredimail.com/english/index.html0
211IndexSearch1 15IndexSearch.exe119Any startup section0 56Associated with PaperPort scanner software from ScanSoft45http://www.incredimail.com/english/index.html0
1 7Inetapi1 10Netapi.exe119Any startup section0 59Added as a result of the NETDEVIL.14 ( NetDevil 1.4) VIRUS!63http://www.megasecurity.org/trojans/n/netdevil/Netdevil1.4.html0
3 9inetcntrl1 13inetcntrl.exe119Any startup section0 30Bsafe Online - internet filter63http://www.megasecurity.org/trojans/n/netdevil/Netdevil1.4.html0
3 5Inetd1 11INETD32.EXE119Any startup section0254Windows Inet Daemon f rom Hummingbird Communications. "Hummingbird Inetd ha s the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation55http://www.hummingbird.com/products/nc/inetd/index.html0
312inetinfo.exe1 12inetinfo.exe119Any startup section0240Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)55http://www.hummingbird.com/products/nc/inetd/index.html0
1 7InetMSN1 9msnet.exe119Any startup section0 50Added as a result of a variant of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
311Info Select1 6is.exe119Any startup section0 61Info Select f rom Micro Logic - personal information manager32http://www.miclog.com/isover.htm0
1 7Info32x1 11Info32x.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
317Infra-red Monitor1 9IRMON.EXE119Any startup section0 86System Tray access to infra-red devices. Not required unless you use infra-red devices29http://www.allyoursearch.com/0
3 7Infuzer1 11Infuzer.exe119Any startup section0388Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"36http://www.infuzer.com/IDC/features/0
1 6infwin1 10infwin.exe119Any startup section0 24Msview p arasite variant48http://www.doxdesk.com/parasite/Transponder.html0
413Initialize8x81 128x8_init.exe119Any startup section0 83Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay48http://www.doxdesk.com/parasite/Transponder.html0
211Ink Monitor1 14InkMonitor.exe119Any startup section0140Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line48http://www.doxdesk.com/parasite/Transponder.html0
2 8InkWatch1 12InkWatch.exe119Any startup section0140Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line48http://www.doxdesk.com/parasite/Transponder.html0
4 6InoRPC1 10InoRpc.exe119Any startup section0 44Associated with eTrust Antivirus/InoculateIT96http://www1.my-etrust.com/?CFID=6909348&CFTOKEN=43ce20d-0001f1aa-f6e5-1d77-be1e-2f0eac14303f0
4 5InoRT1 11InoRT9x.exe119Any startup section0198Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT v ersion 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a p atch if seeing high CPU useage - see here47http://support.ca.com/techbases/ilnt/31103.html0
3 7InoTask1 11InoTask.exe119Any startup section0280Scheduled scans and signature updates for eTrust Antivirus/InoculateIT v ersion 6 virus scanners from Computer Associates. Leave enabled unless you manually u pdate signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here47http://support.ca.com/techbases/ilnt/31103.html0
218InstallAurealDemos1 21InstallAurealDemos.js119Any startup section0 60Used to initialize the Aureal A3D demos InstallShield wizard71http://ww w.lanovation.com/support/docs/General/rollbackfiles_prism.htm0
312InstallBuddy1 9Ibtna.exe119Any startup section0187InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync58http://www.bluenomad.com/ib/prod_installbuddy_details.html0
221Instant Update Center1 12reminder.exe119Any startup section0298From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner58http://www.bluenomad.com/ib/prod_installbuddy_details.html0
338Instant Wireless Configuration Utility1 13WUSB11cfg.exe119Any startup section0178Utility used by the LINKSYS L INKSYS wireless USB Adapter (WUSB11) and ind icates when a wireless access connection is made by a screen colour change. Also used for configuration34http://www.linksys.com/default.asp0
213InstantAccess1 12INSTAN~1.EXE119Any startup section0 76From TextBridge Pro 9.0 OCR scanner software. Available via Start - Programs34http://www.linksys.com/default.asp0
312InstantDrive1 16InstantDrive.exe119Any startup section0142Pinnacle Systems ( ex VOB) InstantDrive - creat es a virtual CD-ROM drive on the computerÆs hard drive. Part of InstantCD/DVD burning software27http://www.pinnaclesys.com/0
1 6instit1 10instit.bat119Any startup section0 41Added as a result of the OPASERV.H VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.opaserv.h.worm.html0
320Intel Active Monitor1 12imontray.exe119Any startup section0216System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.K0
319Intel File Transfer1 7xfr.exe119Any startup section0143Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.K0
3 9Intel PDS1 7pds.exe119Any startup section0228Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.K0
328Intel Product Number Utility1 23IntelProcNumUtility.exe119Any startup section0284Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here58http://www.intel.com/support/processors/pentiumiii/psu.htm0
222Intel PROSet Tray Icon1 10promon.exe119Any startup section0 96System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features58http://www.intel.com/support/processors/pentiumiii/psu.htm0
1 9InteliSys1 8smss.exe119Any startup section0218Advertisingvision adware - file is located in C:\Windows or C:\Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe s ystem file which would normally NOT figure in Msconfig/Startup!68http://www.liutilities.com/products/wintaskspro/processlibrary/smss/0
311Intellitype1 10type32.exe119Any startup section0229For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them68http://www.liutilities.com/products/wintaskspro/processlibrary/smss/0
319IntelProcNumUtility1 13cpunumber.exe119Any startup section0284Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here58http://www.intel.com/support/processors/pentiumiii/psu.htm0
418InterCheck Monitor1 9Icmon.exe119Any startup section0 33Part of Sophos a nt-virus sofware40http://www.sophos.com/products/software/0
1 8Interdll1 12Interdll.exe119Any startup section0 49Added as a result of the DELF f amily of VIRUSES!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.family.html0
1 8Internal1 15trojan filename219Any startup section0 57Added as a result of the SMOTHER & amp; TRANSLAT VIRUSES!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.translat .html0
1 8Internal1 38regedit.exe /s %windir%c:\month number219Any startup section0 43Added as a result of the FORTNIGHT.D VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/js.fortnight.d.html0
115InternalSystray1 9Kazza.exe119Any startup section0198Added as a result of the OPTIXPRO.12.C VIRUS! Note - unlike the valid KaZaA executable, this is located in C:\Windows\System (W in9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optixpro.12.c.html0
113Internat Conf1 12bootconf.exe119Any startup section0 73Homepage hijacker, redirecting to coolwwwsearch.com; see for example here48http://boards.cexx.org/viewtopic.php?p=2464#24640
212internat.exe1 12internat.exe119Any startup section0 38Language selection icon in system tray48http://boards.cexx.org/viewtopic.php?p=2464#24640
1 8internct1 13WinSocks5.exe119Any startup section0 42Added as a result of the GRAYBIRD.F VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.f.html0
326Internet Answering Machine1 12IAMNET~1.EXE119Any startup section0138From Callwave. It offers a free utility to monit or your incoming phonecalls if you only have a single telephone line for internet access24http://www.callwave.com/0
115Internet Config1 12svchosts.exe119Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
126Internet Exploere Services1 16urlmon32.dll.exe119Any startup section0 39Added as a result of the EVIAN.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.evianc.html0
117Internet Explorer1 13iexplorer.exe119Any startup section0209Added as a result of the LORSIS VIRUS! Note - the valid Internet Explorer would not normally run at startup unless added manually by the user and would not run from the registry "RunServices" key as this does76http://securityresponse.symantec.com/avcenter/venc/data/w32.lorsis.worm.html0
125Internet Explorer Updater1 10lexbac.exe119Any startup section0 40Added as a result of the DOWNLOAD VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/download.trojan.html0
323Internet History Eraser1 11HERASER.exe119Any startup section0 55Internet History Eraser - deletes your browsing tracks49http://www.internet-history-eraser.com/index.html0
116Internet Loader11 15MSInstall61.exe119Any startup section0 39Added as a result of the KWBOT.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.b.worm.html0
318Internet Optimizer1 12optimize.exe119Any startup section0 89Internet connection optimizer. Leave this enabled if you find it improves your connection77http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.b.worm.html0
117INTERNET SERVISES1 10winz32.exe119Any startup section0 39Added as a result of the KWBOT.Z VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbotz.worm.html0
216Internet Sweeper1 11Sweeper.exe119Any startup section0 84Internet Sweeper - removes unnecessart lef t over files after browsing the internet23http://www.bmesite.com/0
112Internet.exe1 12Internet.exe119Any startup section0 41Added as a result of the MAGICCALL VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.magiccall.html0
140InternetWasherProor In ternet Washer Pro1 6iw.exe119Any startup section0157Internet Washer m anages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 200330http://www.internetwasher.com/0
117INTERNET_SERVISES1 10winz32.exe119Any startup section0 39Added as a result of the SDBOT.Q VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.q.html0
1 7Internt1 11Internt.exe119Any startup section0 38Added as a result of the PEEPER VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.peeper.html0
222InterTrust Quick Start1 12it_cpq~1.exe119Any startup section0137InterTrust o ffers something known as Digital Rights Man agement to control legal software download and other E-commerce related business36http://www.intertrust.com/index.html0
1 6InterU1 10WINDRV.EXE119Any startup section0 42Added as a result of the IRCINTER.A VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_IRCINTER.A0
261Intervideo Win Cinema Manageror In tervideo WinCinema Manager1 29WinCinemaMgr.exe WINCIN~1.EXE219Any startup section0125WinCinema Manager i s needed when using the WinDVD Remote Control for WinDVD fro m Intervideo. Available via Start - Programs60http://www.intervideo.com/jsp/WinCinema_Manager_Download.jsp0
223Intervideo WinScheduler1 27WinScheduler.exe SchSvr.exe219Any startup section0191WinScheduler i s installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start - Programs26http://www.intervideo.com/0
3 9InterWARN1 13interwarn.exe119Any startup section0252InterWARN b y Storm Alert Inc. Provides customized, automat ed access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start - Programs39http://www.interwarn.com/interwarn.html0
1 6Intmgr1 10Intmgr.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Intrenat1 12Intrenat.exe119Any startup section0 39Added as a result of the LEMIR.E VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.e.html0
225Introducing Media Manager1 11SPLASHA.EXE119Any startup section0 36MS Media Manager t our. Not required69http://www.frontpageworld.com/frontpagetools/mediamanager/default.htm0
113IntruderAlert1 8ia99.exe119Any startup section0 40Intruder Alert '99 f rom Bonzi - spyware56http://www.safersite.com/PestInfo/db/i/internetalert.asp0
1 6Ioadqm1 16Media Player.exe219Any startup section0 38Added as a result of the HAWAWI VIRUS!63http://www.symantec.com/avcenter/venc/data/w32.hawawi.worm.html0
315iolo Task Agent1 14Task_Agent.exe119Any startup section0 55iOlo System Mechanic T ask Agent. Scheduled maintenance32http://www.iolo.com/sm/index.htm0
356Iomega Automatic Backupor Io mega Automatic Backup 1.0.11 11ibackup.exe119Any startup section0 83Iomega Automatic Backup - automatic backups for use with Iomega portable HDD 01
223Iomega Backup Scheduler1 11dtiom98.exe119Any startup section0 96Used by Iomega drives. Details of its purpose can be found here. Available via Start - Programs57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
339Iomega Disk Iconsor Io mega Drive Icons1 11IMGICON.EXE119Any startup section0354Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start - Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
222Iomega Startup Options1 12IMGSTART.EXE119Any startup section0 96Used by Iomega drives. Details of its purpose can be found here. Available via Start - Programs57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
212Iomega Watch1 11IOWATCH.EXE119Any startup section0 53Used by Iomega drives. Available via Start - Programs57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
210IomegaWare1 13COMMANDER.EXE119Any startup section0 96Used by Iomega drives. Details of its purpose can be found here. Available via Start - Programs57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
311Iomon98.exe1 11Iomon98.exe119Any startup section0 74PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang57http://pw2.netcom.com/~deepone/zipjaz/ioware.html#startup0
1 8IP Stack1 11ipstack.exe119Any startup section0 43Added as the result of the AGOBOT.CW VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.CW0
2 5iPalm1 7mon.exe119Any startup section0174Installed with a Panasonic iPalm d igital camera. Used to uploaded photos from the camera. If your camera is not conne cted (via USB port) you do not need this program loaded71http://www.panasonic.com/consumer_electronics/digital_cameras/ipalm.asp0
115IPInSightLAN 011 12ipclient.exe119Any startup section0231Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here f or more information. This one constantly "phone s home" and wastes resource - hence the "X" status34http://www.dslreports.com/faq/12470
219IPInSightMonitor 011 11ipmon32.exe119Any startup section0152Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here f or more information34http://www.dslreports.com/faq/12470
1 9ipmon.exe1 9ipmon.exe119Any startup section0 38Added as a result of the RECERV VIRUS!63http://www.symantec.com/avcenter/venc/data/backdoor.recerv.html0
311iPodManager1 15iPodManager.exe119Any startup section0135Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods63http://www.symantec.com/avcenter/venc/data/backdoor.recerv.html0
311iProtectYou1 6ip.exe119Any startup section0 83iProtectYou - internet filtering/parental control and netw ork monitoring software39http://www.softforyou.com/ip-index.html0
4 8IPSecMon1 12IPSecMon.exe119Any startup section0179Microsoft L2TP/IPSec VPN Client f or Win98/Me/NT. Secure technology for making remote access virtual pri vate network (VPN) connections across public networks such as the Internet84http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
219iRis Active Monitor1 12winmon32.exe119Any startup section0 60Iris Antivirus - discontinued, replace with good alternative84http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
229iRiS AntiVirus Active Monitor1 12WIMMUN32.exe119Any startup section0 084http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
3 5IrMon1 9IRMON.EXE119Any startup section0 86System Tray access to infra-red devices. Not required unless you use infra-red devices84http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
2 6isdbdc1 10isdbdc.exe119Any startup section0 91For Compaq PC's. May install properties in dial-up networking when you register with an ISP84http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
212ISDN Monitor1 11Linksts.exe119Any startup section0294Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon84http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpclient.asp0
3 9ISDNwatch1 10IWatch.exe119Any startup section0265FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"63http://www.avm.de/en/press/announcements/2003/2003_05_19_1.php30
2 8ISLP2STA1 12ISLP2STA.EXE119Any startup section0103Possibly a left ov er from Windows Update for wireless NIC (maybe Linksys) drivers? Not required though63http://www.avm.de/en/press/announcements/2003/2003_05_19_1.php30
3 7iSpyNOW1 11ispynow.exe119Any startup section0 55iSpyNOW - remote monitoring and surveillan ce software23http://www.ispynow.com/0
3 7ISStart1 11ISStart.exe119Any startup section0314LogitechGalleryRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 - hence the "U" rather than "Y" recommendation23http://www.ispynow.com/0
111IST Service1 10istsvc.exe119Any startup section0 17ISTBar f oistware43http://www.doxdesk.com/parasite/ISTbar.html0
3 3Itk1 7Itk.exe119Any startup section0153In The Know - surveillance software that creates re cords of everything people do on a computer, ie, spying or monitoring depending upon how you call it32http://www.itksoft.com/index.asp0
3 6iTouch1 10iTouch.exe119Any startup section0318iTouch loads the iTouch configuration program for Logitech keyboards. ItÆs needed if your keyboard has shortcut buttons and if you use them. ItÆs also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock32http://www.itksoft.com/index.asp0
218ItsDeductiblePopUp1 17ItsDeductible.exe119Any startup section0227ItsDeductible f rom Income Dynamics. Calculates yo ur noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip30http://www.itsdeductible2.com/0
413iTunes Helper1 16iTunesHelper.exe119Any startup section0219Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation30http://www.itsdeductible2.com/0
2 6Iusage1 10netdet.exe119Any startup section0 93Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up48http://members.tripod.com/gauravdhup0/iumos.html0
216IW ControlCenter1 10iwctrl.exe119Any startup section0271Pinnacle Systems I nstantWrite enables you to u se your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis27http://www.pinnaclesys.com/0
212j2 Tray Menu1 11HotTray.exe119Any startup section0136eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start - Programs. Disabling instructions available here34http://www.efax.com/help/index.asp0
3 6Jammer1 10jammer.exe119Any startup section0225Jammer b y Agnitum - "Jammer is the last word in Internet s ecurity. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"39http://www.agnitum.com/products/jammer/0
113Java Runtimes1 12iexplore.exe119Any startup section0178Added as a result of the KILLAV.B VIRUS! Note - this is not the valid IE (iexplore.exe) file as it's located in C:\Winnt \Java\Java rather than C:\Program Files\Internet Explorer76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
2 2JB1 12Jiffybar.exe119Any startup section0 34"Get Paid As You surf" application76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
213Jet Detection1 11ADGJDet.exe119Any startup section0 78Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
428JetAdmin Discovery Indicator1 12HPJETDSC.EXE119Any startup section0264HP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
310JobHisInit1 14JobHisInit.exe119Any startup section0 73Used by Ricoh network printers to enable network printing from the client76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
321JogServ2or Jo g Serve1 12JogServ2.exe119Any startup section0131"Jog Dial" on a Sony Vaio laptop. The dial can select various functions such as control audio. Needed if you use its features76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.b.html0
2 7jusched1 11jusched.exe119Any startup section0152Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com/ o r just run the Ja va Plug-In Control Panel20http://java.sun.com/0
323Jv16pt Network Resident1 18jv16pt_network.exe119Any startup section0104jv16 PowerTools' network resident program. Only needed if you are using the program's network features46http://www.vtoy.fi/jv16/shtml/powertools.shtml0
114K2ps_full.task1 13K2ps_full.exe119Any startup section0 42Added as a result of the JUNTADOR.K VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_JUNTADOR.K0
2 9K6CPU.EXE1 9K6CPU.EXE119Any startup section0 44Authenticates CPU as K6 in system properties79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_JUNTADOR.K0
1 3kak1 7kak.hta119Any startup section0 39Added as a result of the KAKWORM VIRUS!63http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html0
3 8Kalibump1 12Kalibump.exe119Any startup section0183Used with the now unsupported Kali s oftware for on-line gaming. This is used to automatically bump up the priority of WinProxy to GREATLY improve game speed when using a SOCKS proxy20http://www.kali.net/0
213Kana Reminder1 12Reminder.exe119Any startup section0100Kana Reminder i s a program which can be used to set a remin der to be triggered at a specified time40http://www.istop.com/~phartana/reminder/0
111KasperskyAv1 13kaspersky.exe119Any startup section0104Added as a result of the MIMAIL.T VIRUS! Note - this has nothing to do with the real Kaspersky AntiVirus76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.t@mm.html0
1 7KavRuns1 10Windll.exe119Any startup section0 39Added as a result of the TRYNOMA VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.trynoma.html0
2 5KAZAA1 9kazaa.exe119Any startup section0180KAZAA is a file-sharing program which unfortunately being ad-based includes "Cy-door" adware. Check here f or information about "Cy-door" and here f or a program that can remove it40http://www.lavasoft.de/software/adaware/0
128Kazaa lptt01or Ka zaa ml097e1 9kazaa.exe119Any startup section0269Variant of the RapidBlaster p arasite (in a "kazaa" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid KaZaA file sharing program which has the sam e executable name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 8KAZAACuf1 12kazaacuf.exe119Any startup section0 54Added as a result of the KITRO.D ( or ARGEN.A) VIRUS!89http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ARGEN. A&VSect=T0
2 9kazaalite1 13kazaalite.exe119Any startup section0176Kazaalite i s a file sharing client - not to be confused with th e original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms44http://www.webattack.com/get/kazaalite.shtml0
2 6KaZooM1 10KaZooM.Exe119Any startup section0180KaZoom from Blue Haven Media - "add-on application that autom atically speeds up the download process and finds the files you want with far more power than regular KaZaA searches"30http://www.bluehavenmedia.com/0
3 3KBD1 7KBD.EXE119Any startup section0 68Multimedia keyboard manager. Required if you use the multimedia keys30http://www.bluehavenmedia.com/0
2 3kdx1 9KHost.exe119Any startup section0336KonTiki Secure Delivery Plug In r elated. "The Kontiki Delivery Management System (DMS) is a secure delivery network for di stribution of video, software, audio, documents, and other digital media. The Kontiki DMS enables enterprises to efficiently publish, secure, deliver and track digital media to employees, partners, and customers"95http://help.kontiki.com/enduser/group.jsp;jsessionid=445B8C402E10C9AFBC8E053A3BBC395C?node=18290
3 6KE98011 12DriBat32.exe119Any startup section0 71KE-9801 m ultimedia keyboard - required if you use the multimedia keys30http://www.reset.bg/ke9801.htm0
1 9Keenvalue1 13Keenvalue.exe119Any startup section0 29Keenvalue s pyware - see here73http://www.dslreports.com/fo rum/remark,6752007~root=security,1~mode=flat0
3 8KEMailKb1 12KEMailKb.EXE119Any startup section0169Controls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the bu ttons - like volume control or shut down69http://www.mic-innovations.com/micro_inv/large_image_pages/kb650i.htm0
1 6Kernel1 8bboy.exe119Any startup section0 38Added as a result of the MUMU.B VIRUS!75http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MUMU.B0
113Kernel Loader1 10ntkrnl.exe119Any startup section0 42Added as a result of the CERVIVEC.A VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.cervivec.a@mm.html0
120kernel system daemon1 13ACTIVAT0R.exe119Any startup section0 41Added as a result of the RANDEX.AW VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.aw.html0
1 8kernel321 10kern32.exe119Any startup section0 42Added as a result of the BADTRANS.A VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BADTRANS.A0
1 8Kernel321 12Kernel32.exe119Any startup section0 81Added as a result of a number of VIRUSES - such as BABYLONIA, KERNEL a nd HOOKER80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_HOOKER .24C0
1 8kernel321 10kernel.dli119Any startup section0 42Added as a result of the NETDEVIL.B VIRUS!67http://www.symantec.com/avcenter/venc/data/backdoor.netdevil.b.html0
1 8Kernel321 10Kernel.dll119Any startup section0 40Added as a result of the REDLOF.M VIRUS!49http://vil.mcafee.com/dispVirus.asp?virus_k=994760
1 8kernel321 12kernel32.dlI119Any startup section0 43Added as a result of the NETDEVIL.15 VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.netdevil.15.html0
1 8Kernel321 10krnl32.exe119Any startup section0 36Added as a result of the EPON VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.epon@mm.html0
216kernelfaultcheck1 25dumprep 0 -kdu mprep 0 -u219Any startup section0324Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.epon@mm.html0
114KernelFaultChk1 7sms.exe119Any startup section0133Added as a result of the DEADHAT VIRUS! Do not confuse with the valid "kernelfaultcheck" which runs "dumprep 0 -k" or "du mprep 0 -u"77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deadhat.html0
1 9Kernell321 11Kernell.dll119Any startup section0 39Added as a result of the DESTINY VIRUS!77http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DESTINY.A0
1 7Kernelw1 13Kernelw32.exe119Any startup section0 39Added as a result of the INDOR.E VIRUS!67http://www.symantec.com/avcenter/venc/data/w32.hllw.indor.e@mm.html0
2 8Key Text1 11KeyText.exe119Any startup section0115Key Text 2000 f rom MJMSoft Design - utility to automa te repetitive keyboard tasks. Available via Start - Programs34http://www.mjmsoft.com/keytext.htm0
1 4Key11 8Rlid.exe119Any startup section0 36Added as a result of the LIXY VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lixy.html0
4 9KeyAccess1 12keyacc32.exe119Any startup section0256KeyServer KeyAccess client software - "when the KeyServer program is launched, the KeyServer process becomes active so license requests from client computers can be serviced. Without KeyAccess, a keyed program cannot run, so license control is very secure"74http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lixy.html0
316Keyboard Manager1 11MMKeybd.exe119Any startup section0111Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as MULTIMEDIA KEYBOARD 01
310KeyMaestro1 12kmaestro.exe119Any startup section0 68Multimedia keyboard manager. Required if you use the multimedia keys 01
3 6keymap1 10keymap.exe119Any startup section0182System Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game 01
3 9KeyPatrol1 13KeyPatrol.exe119Any startup section0124KeyPatrol - detects Key Loggers ("keyboard loggers" or "keyloggers") using both behavioral and pattern-matching algorithms36http://www.pestpatrol.com/KeyPatrol/0
3 9KeyWallet1 11KWallet.exe119Any startup section0154"KeyWallet i s a useful and convenient desktop utility that spares you the trouble of filling in your logins, passwords and other personal data manually"34http://www.keywallet.com/index.php0
1 6kfienq1 9masbl.bat119Any startup section0 37Added as a result of the KIFER VIRUS!70http://securityresponse.symantec.com/avcenter/venc/data/w32.kifer.html0
2 7khooker1 11khooker.exe119Any startup section0156SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required70http://securityresponse.symantec.com/avcenter/venc/data/w32.kifer.html0
311KICKMON.EXE1 11KICKMON.EXE119Any startup section0162KeepItClean - utility that deletes safe to remove files, cookies, browsing history, etc. This is the scheduler - if you don't schedule clean-ups it isn't required70http://securityresponse.symantec.com/avcenter/venc/data/w32.kifer.html0
210Kinberlink1 14Kinberlink.exe119Any startup section0 61Kinberlink n etwork messaging. Available via Start - Programs45http://www.kinberlin.com/kinberlink/index.asp0
3 9KK Loader1 10loadkk.exe119Any startup section0206KeyKey XP Professional f rom KeyKey.com. "Monitor Ins tant Messages, Chats, Emails, Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and much more completely undetected to the user."33http://www.keykey.com/index1.html0
3 3klp1 12run32dll.exe119Any startup section0128PAL PC Spy - key recorder and screen capture utility which controls and monitors everything that happens on your pc and online40http://www.newfreeware.com/internet/480/0
3 7KM9801U1 12MMHotKey.exe119Any startup section0190Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen40http://www.newfreeware.com/internet/480/0
311kmw_run.exe1 11kmw_run.exe119Any startup section0 97Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features40http://www.newfreeware.com/internet/480/0
312kmw_show.exe1 12kmw_show.exe119Any startup section0 97Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features40http://www.newfreeware.com/internet/480/0
220Kodak Batch Transfer1 11pezdow1.exe119Any startup section0144Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC40http://www.newfreeware.com/internet/480/0
231Kodak Picture Transfer Software1 7pts.exe119Any startup section0 85Looks for Kodak camera connection and media insertion. Available via Start - Programs40http://www.newfreeware.com/internet/480/0
222Kodak Software Updater1 16backweb*****.exe119Any startup section0 53Software updater for Kodak Easyshare d igital cameras65http://www.kodak.com/global/en/digital/easyShare/indexFlash.jhtml0
4 8KodakCCS1 12KodakCCS.exe119Any startup section0 27Kodak DC File System Driver65http://www.kodak.com/global/en/digital/easyShare/indexFlash.jhtml0
222Konni Symbol Autostart1 15KonniSymbol.exe119Any startup section0141Gives configuration access to RagTime Solo p rofessional business publishing software. RagTime Solo is the private user version of RagTime 536http://www.besoftware.com/index.html0
2 7kontiki1 11kontiki.exe119Any startup section0117Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktop s95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
3 6KREC321 10krec32.exe119Any startup section0 45StarrCommander Pro Keystroke logging software95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
3 7Krnlmod1 11Krnlmod.exe119Any startup section0192Keylogger - see here. Given a "U" recommendation because it depends if you intentionally inst alled it. If you didn't, treat it as "X" and uninstall or remove via Spybot S&D (for example)58http://www.pestpatrol.com/PestInfo/W/Windows_Keylogger.asp0
3 8ktchnsnk1 12ktchnsnk.exe119Any startup section0144HP program found with the Office Jet 500/600/700 series which initializes the Office Jet manager each time the computer is booted up or rebooted58http://www.pestpatrol.com/PestInfo/W/Windows_Keylogger.asp0
1 6kv30001 9lover.vbe119Any startup section0 40Added as a result of the ZSYANG.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/vbs.zsyang.b@mm.html0
3 9LanSpeed21 13LanSpeed2.exe119Any startup section0 86Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)76http://securityresponse.symantec.com/avcenter/venc/data/vbs.zsyang.b@mm.html0
317LapLink scheduler1 11Llsched.exe119Any startup section0 86Utility that automatically performs file transfers as unattended background operations76http://securityresponse.symantec.com/avcenter/venc/data/vbs.zsyang.b@mm.html0
1 3Lar1 9Llass.exe119Any startup section0 38Added as a result of the INOR-A VIRUS!55http://www.sophos.com/virusinfo/analyses/trojinora.html0
1 3lar1 8filename119Any startup section0 38Added as a result of the ROXY.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.roxy.c.html0
1 8LAsIAf321 12RePEAtLD.exe119Any startup section0 40Added as a result of the REPEATLD VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repeatld.html0
236Launch YahooPOPs! at Windows startup1 13YAHOOPOPS.EXE119Any startup section0153YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start - Programs33http://yahoopops.sourceforge.net/0
3 8LaunchAp1 12LaunchAp.exe119Any startup section0 87Part of Acer L aunch Manager - programmable keys on such laptops as the TravelMate 61023http://global.acer.com/0
311Launchboard1 11lnchbrd.exe119Any startup section0353"LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions"23http://global.acer.com/0
1 8Launcher1 12launcher.exe119Any startup section0 71Spyware component related to DownloadWare and found in Program FilesKFH23http://global.acer.com/0
2 8Launcher1 12relaunch.exe119Any startup section0186Audio Applications Launcher for the Philips Rythmiic Edge s oundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start - Programs 01
316Lavasoft Adwatch1 12Ad-watch.exe119Any startup section0149Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memo ry and registry for spyware that tries to install or change your system40http://www.lavasoft.de/software/adaware/0
412laxmsp32.exe1 12laxmsp32.exe119Any startup section0124Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work 40http://www.lavasoft.de/software/adaware/0
3 4LCDC1 8LCDC.exe119Any startup section0148LCDC i s an application that displays various in formation on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins28http://www.lcdc.cc/about.htm0
2 5lcfep1 9lcfep.exe119Any startup section0221Tivoli æTMEÆ System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"28http://www.lcdc.cc/about.htm0
1 2ld1 6ld.exe119Any startup section0 65CoolWebSearch p arasite related - redirects to fastwebfinder .com40http://www.merijn.org/cwschronicles.html0
2 3LDM1 31backweb-8876480.exe ldmconf.exe219Any startup section0202Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech. Also listed under Logitech Desktop Messenger40http://www.merijn.org/cwschronicles.html0
3 8LED TRAY1 11LEDTRAY.EXE119Any startup section0183Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work40http://www.merijn.org/cwschronicles.html0
2 8LeechGet1 12LeechGet.exe119Any startup section0 26LeechGet d ownload manager23http://www.leechget.de/0
110LetsSearch1 14LetsSearch.exe119Any startup section0 40BrowserAid/BrowserPal f oistware variant47http://www.doxdesk.com/parasite/BrowserAid.html0
320Lexmark X5100 Series1 12lxbabmgr.exe119Any startup section0148System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut47http://www.doxdesk.com/parasite/BrowserAid.html0
426Lexmark Xxx Button Manager1 16AcBtnMgr_Xxx.exe119Any startup section0123Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation47http://www.doxdesk.com/parasite/BrowserAid.html0
426Lexmark Xxx Button Monitor1 17ACMonitor_Xxx.exe119Any startup section0123Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation47http://www.doxdesk.com/parasite/BrowserAid.html0
215LexmarkPrinTray1 12printray.exe119Any startup section0159Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray47http://www.doxdesk.com/parasite/BrowserAid.html0
2 6lexpps1 10lexpps.exe119Any startup section0300For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges47http://www.doxdesk.com/parasite/BrowserAid.html0
3 8LexStart1 12lexstart.exe119Any startup section0223Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance47http://www.doxdesk.com/parasite/BrowserAid.html0
3 8Lfsndmng1 12lfsndmng.exe119Any startup section0195LightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents"62http://www.lightningfax.com/products/lightningfax/features.htm0
2 8lhttseng1 42rundll32.exe ..lhttseng.inf, RemoveCabinet219Any startup section0116Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine62http://www.lightningfax.com/products/lightningfax/features.htm0
112li-multi****1 16li-multi****.exe119Any startup section0 34Adult web-dialler - **** is random62http://www.lightningfax.com/products/lightningfax/features.htm0
112li-thund****1 16li-thund****.exe119Any startup section0 34Adult web-dialler - **** is random62http://www.lightningfax.com/products/lightningfax/features.htm0
111li-vita****1 15li-vita****.exe119Any startup section0 34Adult web-dialler - **** is random62http://www.lightningfax.com/products/lightningfax/features.htm0
2 7LicCrtl1 14runservice.exe119Any startup section0 70eLicense, licensing system incorporated wit h some software and games24http://www.elicense.com/0
224LifeScape Media Detector1 23PicasaMediaDetector.exe119Any startup section0 54Media detector for Picasa's automatic photo organizer22http://www.picasa.net/0
221Line Speed Meter V3.01 18LineSpeedMeter.exe119Any startup section0 83LineSpeedMeter - detect the download and upload speed of your inter net connection48http://www.tcpiq.com/tcpiq/linespeed/Default.asp0
2 7Linksts1 11linksts.exe119Any startup section0294Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon48http://www.tcpiq.com/tcpiq/linespeed/Default.asp0
1 5Linux1 9Linux.vbs119Any startup section0 45Added as a result of the LOVELETTER.AS VIRUS!42http://vil.nai.com/vil/content/v_98684.htm0
310LiquidView1 10lviewj.exe119Any startup section0216"Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor"42http://vil.nai.com/vil/content/v_98684.htm0
2 3LIU1 19LIU.exe Rubicon.exe219Any startup section0189Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway42http://vil.nai.com/vil/content/v_98684.htm0
2 9Live Menu1 12Dllcmd32.exe119Any startup section0110eFax Send button for eFax Messenger Plus. Available via Start - Programs Disabling instructions available here34http://www.efax.com/help/index.asp0
211LiveMonitor1 12LMonitor.exe119Any startup section0 91MSI Live Update2 - auto-detects and suggests the latest BIOS/Driver/Utilities infor mation64http://www.msicomputer.com/product/all_products/Productindex.asp0
3 8LManager1 12QtZgAcer.EXE119Any startup section0165Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio64http://www.msicomputer.com/product/all_products/Productindex.asp0
2 8LMSTATUS1 12LMSTATUS.EXE119Any startup section0 90Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)64http://www.msicomputer.com/product/all_products/Productindex.asp0
117lnternet Explorer1 12AMSNDMGR.EXE119Any startup section0103Added as a result of the KWBOT.R VIRUS! Note that the "l" is a lower case "L" and not an upper case "I"84http://http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.r.worm.html0
3 7LOAD WB1 10LOADWB.EXE119Any startup section0301Part of Stardock's WindowBlinds c ustom desktop program. "WindowBli nds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it28http://www.windowblinds.net/0
1 6LOAD321 10Lorena.exe119Any startup section0 40Added as a result of the MAPSON.C VIRUS!65http://www.symantec.com/avcenter/venc/data/w32.mapson.c.worm.html0
1 6load321 10load32.exe119Any startup section0 58Added as a result of the NIBU, BAMBO a nd DUMARU VIRUSES!75http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru@mm.h tml0
1 6load321 8l32x.exe119Any startup section0 69Added as a result of the DUMARU.Z o r DUMARU.Y o r DUMARU.AD VIRUSES!78http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.ad@mm.ht ml0
1 6load321 91111a.exe119Any startup section0 41Added as a result of the DUMARU.AH VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.ah@mm.html0
2 5load=1 9adw30.exe119Any startup section0102After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win9577http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.ah@mm.html0
3 5load=1 11asistat.exe119Any startup section0 45Status monitor for an NEC SuperScript printer77http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.ah@mm.html0
3 5load=1 9esspk.exe119Any startup section0 61Speakerphone capability through a soundcard for an ESS m odem23http://www.esstech.com/0
4 5load=1 10hotkey.exe119Any startup section0 58Solo 5300 display driver for Win2K on some Gateway laptops23http://www.esstech.com/0
2 5load=1 10HPWHRC.EXE119Any startup section0 61Loads the Status Window software for the HP Laserjet printers23http://www.esstech.com/0
2 5load=1 10vi_grm.exe119Any startup section0109Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings23http://www.esstech.com/0
4 5load=1 10wpshrc.exe119Any startup section0107Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)23http://www.esstech.com/0
1 5load=1 10msater.exe119Any startup section0 38Added as a result of the RETSAM VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.retsam.html0
1 5load=1 12shambl3r.exe119Any startup section0 38Added as a result of the REMABL VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.remabl.worm.html0
1 5load=1 11Spoolsv.exe119Any startup section0174Added as a result of the CIADOOR.B VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in Sys tem32, like the legitimate Spoolsv.exe system file79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ciadoor.b.html0
4 5load=1 12AICLIENT.EXE119Any startup section0143Asset Insight from Tangram - asset managing software. Required if an o rganisation is running a centrally administered asset management system32http://www.tangram.com/index.htm0
410LoadBlackD1 10blackd.exe119Any startup section0165This is the "intrusion detection system" of the BlackICE PC Protection ( was Defender) firewall which loads independe ntly of the "user interface" (BlackICE Utility)49http://blackice.iss.net/product_pc_protection.php0
111LoadDBackUp1 10BcTool.exe119Any startup section0 36Added as a result of the GIBE VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
1 6loader1 10loader.exe119Any startup section0 77Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
1 6loader1 12WMPLAYER.EXE119Any startup section0157Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
1 9LoadFonts1 24LoadFonts.vbsTa homa.vbs219Any startup section0 69Homepage hijacker that changes your homepage to an adult content site72http://securityresponse.symantec.com/avcenter/venc/data/w32.gibe@mm.html0
112LoadingAgent1 28ZipLoader32.exe msload32.exe219Any startup section0105Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.oblivion.html0
111LoadManager1 10msload.exe119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
210LoadMSvcmm1 12msvcmm32.exe119Any startup section0 70Auto-update for Movielink - internet movie rental System Tra y access25http://www.movielink.com/0
121LoadOrderVerification1 5*.exe119Any startup section0 83Added as a result of the TRON VIRUS! * is a random file name, possibly Pthymvfr.exe74http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=BKDR_TRON.A0
315Loadout Manager1 11nost_LM.exe119Any startup section0 71Manager for the Belkin Nostromo n50 SpeedPad game controller - see here86http://catalog.belkin.com/IWCatProductPage.process?Merchant_Id=1&Product_Id=1077270
116LoadPowerProfile1 10ASDAPI.EXE119Any startup section0 83Added as a result of the CABRO VIRUS! Not to be confused with the valid entry below75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.cabro.html0
316LoadPowerProfile1 25Rundll32.exe powrprof.dll219Any startup section0279Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whethe r you modify the default Control Panel - Power Options settings62http://support.microsoft.com/default.aspx?scid=kb;en-us;1876110
316LoadPowerProfile1 46Rundll32.exe powrprof.dll,LoadCurrentPwrScheme219Any startup section0279Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whethe r you modify the default Control Panel - Power Options settings62http://support.microsoft.com/default.aspx?scid=kb;en-us;1876110
116LoadPowerProfile1 24Rundll.exe powerprof.dll219Any startup section0210Added as a result of the LOXOSCAM VIRUS! Note - do not confuse with the valid LoadPowerProfile entry above! Notice that th e infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe"78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.loxoscam.html0
116LoadPowerProfile1 9rundl.exe119Any startup section0107Added as a result of the TOFAZZOL VIRUS! Note - do not confuse with the valid LoadPowerProfile entry above!73http://securityresponse.symantec.com/avcenter/venc/data/w32.tofazzol.html0
116LoadPowerProfile1 12Rundll32.exe119Any startup section0158Added as a result of the MIROOT VIRUS! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.d ll" appended to the command/data line76http://securityresponse.symantec.com/avcenter/venc/data/w32.miroot.worm.html0
3 6LoadQM1 10loadqm.exe119Any startup section0378Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabli ng this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it63http://support.microsoft.com/default.aspx?scid=KB;EN-US;q3094180
3 5Login1 10winlog.exe119Any startup section0 55Salfeld Child Control 2003 - parental control software52http://www.salfeld.com/parental_control_overwiew.htm0
113Login Service1 15random filename219Any startup section0 38Added as a result of the MIGMAF VIRUS!52https://www.europe.f-secure.com/v-descs/migmaf.shtml0
113LoginPassport1 12Lgnpsp32.exe119Any startup section0 40Added as a result of the REDIST.C VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
226Logitech Desktop Messenger1 31backweb-8876480.exe ldmconf.exe219Any startup section0156Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
316Logitech Utility1 12Logi_MwX.exe119Any startup section0186Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
215Logitech Wakeup1 12lgwakeup.exe119Any startup section0557Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start -Programs and still be able to scan images81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
321LogitechGalleryRepair1 11ISStart.exe119Any startup section0290Part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 - hence the "U" rather than "Y" recommendation81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
223LogitechImageStudioTray1 12LogiTray.exe119Any startup section0 57Logitech Image Studio - installed with Logitech QuickCams81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
3 8Logi_Mwx1 12Logi_MwX.exe119Any startup section0186Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
311LogonStudio1 15logonstudio.exe119Any startup section0253WinCustomize LogonStudio - "Allows Windows XP users to edit, change, and appl y new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users"45http://www.stardock.com/products/logonstudio/0
3 8LogWatch1 12logwat95.exe119Any startup section0222Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been app lied61http://support.ca.com/Download/patches/licenseit/LO51215.html0
224Lotus Organizer EasyClip1 12easyclip.exe119Any startup section0186"The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start - Programs38http://www.looknstop.com/En/index2.htm0
216Lotus QuickStart1 12smartctr.exe119Any startup section0224Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start - Programs38http://www.looknstop.com/En/index2.htm0
316Lotus SuiteStart1 11suitest.exe119Any startup section0217Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG - Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start - Programs38http://www.looknstop.com/En/index2.htm0
117LowVersionSupport1 8filename119Any startup section0 99Added as a result of the LASTRAS VIRUS! where filename is the name of the file dropped by the virus77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lastras.html0
1 6Lpr1231 10Lpr123.exe119Any startup section0 60Added as a result of an unidentified password stealer trojan77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lastras.html0
3 3LPS1 7Lps.exe119Any startup section0 94Local Port Scanner - "With LPS you're able to check your computer for open or listening ports"77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lastras.html0
1 5lsass1 9lsass.exe119Any startup section0144Added as a result of the RATSU.B VIRUS! Note - this is not the legitimate Lsass.exe s ystem file should normally NOT figure in Msconfig/Startup!70http://www.liutilities.com/products/wintask spro/processlibrary/lsass/0
1 5lsass1 9start.bat119Any startup section0 37Added as a result of the ZCREW VIRUS!55http://www.sophos.com/virusinfo/analyses/trojzcrew.html0
120LSPFixor LS Pmonitor1 14LSPmonitor.exe119Any startup section0 78eAcceleration Stop-Sign related - foistware. Read their privacy statement here37http://www.eacceleration.com/privacy/0
1 4LSvr1 8LSvr.exe119Any startup section0 21PowerStrip f oistware47http://www.doxdesk.com/parasite/PowerStrip.html0
4 9LT DAEMON1 12ltdaemon.exe119Any startup section0108Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used47http://www.doxdesk.com/parasite/PowerStrip.html0
1 6LTDMgr1 10LTDMgr.exe119Any startup section0 21PowerStrip f oistware47http://www.doxdesk.com/parasite/PowerStrip.html0
1 4LTM21 63MSGSRV32.EXE MPGSRV32.EXE MSGSRV320.EXE winupdate.exe bible.exe219Any startup section0295All added by variants of the LITMUS VIRUS!. See here f or MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confuse d with the valid version in C:\Windows\System), here f or MPGSRV32.EXE, here f or MSGSRV320.EXE and here f or winupdate.exe and bible.exe80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNa me=BKDR_LITMUS.2030
3 5LtMoh1 9Ltmoh.exe119Any startup section0122Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNa me=BKDR_LITMUS.2030
2 7LTSMMSG1 11LTSMMSG.exe119Any startup section0128Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNa me=BKDR_LITMUS.2030
1 6LTSMSG1 11Shell32.exe119Any startup section0 39Added as a result of the LEMIR.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.b.html0
411LTWinModem11 9ltmsg.exe119Any startup section0203One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
2 6LVComs1 10lvcoms.exe119Any startup section0 68Lvcomm server. Related to Logitech Quick Cam - works fine without it34http://808hi.com/56k/winmodems.asp0
3 8LWBMOUSE1 25lwbwheel.exe MOUSE32A.EXE219Any startup section0 71Mouse driver - required if you use non-standard Windows driver features34http://808hi.com/56k/winmodems.asp0
219Lwinst Run Profiler1 10lwtest.exe119Any startup section0 84Logitech Wingman Profiler for the Logitech joysticks. Available via Start - Programs34http://808hi.com/56k/winmodems.asp0
2 8LXSUPMON1 12LXSUPMON.EXE119Any startup section0 56Lexmark Printer. The printer should work fine without it34http://808hi.com/56k/winmodems.asp0
2 6M3Tray1 10m3tray.exe119Any startup section0 54Movielink - internet movie rental System Tra y access25http://www.movielink.com/0
321Machine Debug Manager1 7mdm.exe119Any startup section0335Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here t o disable62http://support.microsoft.com/default.aspx?scid=kb;en-us;3214100
2 6MacLic1 10MacLic.exe119Any startup section0 82Part of Conversions Plus f rom DataViz - allowing PC and MAC owners to share disks58http://www.dataviz.com/products/conversionsplus/index.html0
2 7MacName1 11MacName.exe119Any startup section0 82Part of Conversions Plus f rom DataViz - allowing PC and MAC owners to share disks58http://www.dataviz.com/products/conversionsplus/index.html0
4 7MAD.EXE1 7MAD.EXE119Any startup section0291MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?58http://www.dataviz.com/products/conversionsplus/index.html0
3 8MagicDsk1 12MAGICDSK.EXE119Any startup section0114Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons58http://www.dataviz.com/products/conversionsplus/index.html0
2 8Magitime1 12Magitime.exe119Any startup section0 91Magitime - connection tracking utility which monitors online time, expense, data transfer47http://www.geocities.com/magistone/magitime.htm0
3 8MailBell1 12mailbell.exe119Any startup section0292MailBell e -mail notification tool that will notif y you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)30http://www.emtec.com/mailbell/0
316Mailbox Verifier1 12mboxvrfy.exe119Any startup section0299Mailbox Verifier (MV) i s fr ee software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance) 01
419MailScan Dispatcher1 10Launch.exe119Any startup section0185MailScan D ispatcher splits each e-mail message into various componen ts such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned49http://www.mspl.net/antivirus/mailscan/ms4adv.asp0
110Mail_Check1 14Mail_Check.exe119Any startup section0 40Added as a result of the PANOIL.C VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_PANOIL.C0
3 4MAIN1 8main.exe119Any startup section0147SpyCop s urveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan22http://www.spycop.com/0
217Mania Win Restore1 10RESWIN.EXE119Any startup section0142Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start - Programs22http://www.spycop.com/0
1 6Mantis1 8filename119Any startup section0 70Added as a result of the MANTIBE VIRUS! where filename is the filename72http://securityresponse.symantec.com/avcenter/venc/data/w32.mantibe.html0
1 9mapisvc321 13mapisvc32.exe119Any startup section0 81Added as a result of the KX VIRUS and also recognised by Symantec as FPAI a dware72http://securityresponse.symantec.com/avcenter/venc/data/adware.fapi.html0
227Mass storage check registry1 40rundll32.exe MSDServ.dll, check registry219Any startup section0 44Used with a USB based smartmedia card reader72http://securityresponse.symantec.com/avcenter/venc/data/adware.fapi.html0
317Master Volume Spy1 19MASTERVOLUMESPY.EXE119Any startup section0 68Volume control for the Gateway Destination "DestiVu" media interface72http://securityresponse.symantec.com/avcenter/venc/data/adware.fapi.html0
117MatrixScreenSaver1 7mss.exe119Any startup section0 17Malware, see here77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
220Matrox Color Control1 12hgcctl95.exe119Any startup section0 55For Matrox video cards. Quick access to changing colors77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
221Matrox Control Center1 11mgactrl.exe119Any startup section0 48For Matrox video cards. Quick access to settings77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
217Matrox Diagnostic1 11mgadiag.exe119Any startup section0 51For Matrox video cards. Quick access to diagnostics77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
216Matrox Powerdesk1 9PDesk.exe119Any startup section0 70For Matrox video cards. Quick access to tweak your card to your liking77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
411MaxtorCombo1 15ComboButton.exe119Any startup section0140Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)77http://www.spywareinfo.com/forums/index.php?s=&act=ST&f=11&t=72780
3 9MaxtorReg1 11AUTOREG.EXE119Any startup section0168Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of37http://www.netsizzle.net/sysagent.asp0
3 5MBM 41 8MBM4.exe119Any startup section0157Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start - Programs37http://www.netsizzle.net/sysagent.asp0
3 5MBM 51 8MBM5.exe119Any startup section0 52Motherboard Monitor 5 - as above but for versi on 527http://mbm.livewiredev.com/0
3 7MBProbe1 11mbrpobe.exe119Any startup section0145MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start - Programs41http://mbprobe.livewiredev.com/about.html0
1 2MC1 12wintrims.exe119Any startup section0 39Added as a result of the WINTRIM VIRUS!52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
415McAfee Firewall1 7CPD.EXE119Any startup section0 78Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
215McAfee Guardian1 12CMGRDIAN.EXE119Any startup section0211McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
328McAfee.InstantUpdate.Monitor1 12RuLaunch.exe119Any startup section0194Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
422McAfeeVirusScanService1 12Avsynmgr.exe119Any startup section0196From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
414McAfeeWebscanX1 12WebScanX.exe119Any startup section0192From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
310McAgentExe1 11mcagent.exe119Any startup section0220From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
2 8MChanger1 12MChanger.exe119Any startup section0 81Media Changer - utility that allows you to change wallpapers, sounds, themes, etc52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
311McUpdateExe1 12mcupdate.exe119Any startup section0136From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions52http://www.europe.f-secure.com/v-descs/wintrim.shtml0
4 7McVsRte1 10mcusrt.exe119Any startup section0137Part of McAfee's SecurityCenter. Must remain checked but one user reports Windows glitches with no response from McAfee as to why51http://us.mcafee.com/root/product.asp?productid=msc0
4 8mcvsshld1 12mcvsshld.exe119Any startup section0 52McAfee VirusScan On-line. See also McAgentExe a bove 01
212mdac_runonce1 11runonce.exe119Any startup section0146Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe". 01
1 3Mdm1 7Mdm.vbs119Any startup section0 52Added as a result of the WHITEHO o r TRAPPY VIRUSES!75http://securityresponse.symantec.com/avce nter/venc/data/vbs.trappy@mm.html0
3 4MDM71 7mdm.exe119Any startup section0352Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here t o disable62http://support.microsoft.com/default.aspx?scid=kb;en-us;3214100
2 4MECA1 8Meca.exe119Any startup section0 31Meca i nstant messenging client31http://www.meca.com/Default.htm0
321Media Manager Indexer1 11AIRSVCU.EXE119Any startup section0284Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here79http://www.cug.edu.cn/fwzn/wlzx/wlfw/vid/USINGVID/0-7897/0-7897-0762-4/ch09.htm0
116Media Plug x.1.21 8msdm.exe119Any startup section0 43Added as a result of the MULDROP.352 VIRUS!79http://www.cug.edu.cn/fwzn/wlzx/wlfw/vid/USINGVID/0-7897/0-7897-0762-4/ch09.htm0
221MediaFace Integration1 11Sethook.exe119Any startup section0131Fellowes NeatoÖ cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"79http://www.cug.edu.cn/fwzn/wlzx/wlfw/vid/USINGVID/0-7897/0-7897-0762-4/ch09.htm0
334Mediafour Mac Volume Notifications1 12Macvntfy.exe119Any startup section0164Mediafour Xplay - allows you to use an Apple iPod digital m usic player with a PC running Windows. If not used regularily start manually before connecting the iPod40http://www.mediafour.com/products/xplay/0
3 8MediaKey1 12MediaKey.exe119Any startup section0 69Multimedia keyboard m anager. Required if you use the multimedia keys62http://www.futurepowerusa.com/support/kb_911/help/overview.htm0
134MediaLoadsor Me diaLoads Installer1 6dw.exe119Any startup section0158Medialoads i s advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here f or more information50http://and.doxdesk.com/paras ite/DownloadWare.html0
212MediaMonitor1 12Mediam~1.exe119Any startup section0 82Installed by Smartdisk MVP CD burning software. Software will work fine without it50http://and.doxdesk.com/paras ite/DownloadWare.html0
1 9MediaPath1 22Proyecto1.exe Root.exe219Any startup section0 37Added as a result of the GRUEL VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.gruel@mm.html0
214MediaRing Talk1 10mrtalk.exe119Any startup section0 89Media Ring Talk, voice recognition software, Resource hog. Available via Start - Programs73http://securityresponse.symantec.com/avcenter/venc/data/w32.gruel@mm.html0
113media_manager1 12mediaman.exe119Any startup section0 54Mini-Player,& nbsp; IMESH related foistware, se e here98http://www.spywareinfo.com/yabbse/index.php?board=10;action=display;threadid=2633;start=0#msg203710
1 9MemConfig1 11SetupIE.com119Any startup section0 38Added as a result of the TAPLAK VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.taplak.html0
3 7MemoKit1 6MK.EXE119Any startup section0453Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
112Memory Check1 10memore.exe119Any startup section0 40Added as a result of the KILLAV.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.c.html0
220Memory Stick Monitor1 9MSTAT.exe119Any startup section0101Used with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.c.html0
320Memory Stick Monitor1 10MSstat.exe119Any startup section0112Sony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive76http://securityresponse.symantec.com/avcenter/venc/data/trojan.killav.c.html0
3 7Memory+1 12tfimemsr.exe119Any startup section0132Memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
111MemoryMeter1 15MemoryMeter.exe119Any startup section0 40Autoinstalling spyware by Total Velocity29http://www.totalvelocity.com/0
3 8MemTurbo1 12memturbo.exe119Any startup section0143MemTurbo m emory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
2 8MenuSnap1 12MenuSnap.exe119Any startup section0248MenuSnap f rom Rietta Solutions. Utility that re-or ders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start - Programs and right-clicking and choosing "Sort by Name" if availabe31http://www.rietta.com/menusnap/0
115Message Queuing1 9msmqs.exe119Any startup section0 40Added as a result of the FREEFORS VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.freefors.html0
315Message_Blocker1 16messageblock.exe119Any startup section0194Message Blocker - "prevents Outlook Express from loading im ages or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"40http://www.ograhl.com/en/messageblocker/0
1 9Messenger1 13messenger.exe119Any startup section0 37Added as a result of the KUTEX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.kutex.html0
115Messenger Block1 14msngrblock.exe119Any startup section0 37Added as a result of the PATOO VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.patoo@mm.html0
118Messenger start-up1 10Msgran.exe119Any startup section0 38Added as a result of the GRAMOS VIRUS!71http://securityresponse.symantec.com/avcenter/venc/data/w32.gramos.html0
231MessengerPlusor Me ssengerPlus21 11MsgPlus.exe119Any startup section0225Third party MSN Messenger extension that hides banner ads and adds archiving and other useful features. Appears not to work unless checked, but may be activated after startup. Not recommended as it includes Lop.com - see here62http://www.spywareinfo.com/newsletter/archives/june-2003/3.php0
1 8messnger1 8filename119Any startup section0 71Added as a result of the DELODER VIRUS! where filename is the worm name77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
213MGA Quickdesk1 12MGAQDESK.EXE119Any startup section0 70For Matrox video cards. Quick access to tweak your card to your liking77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
214MGA_CD_Install1 12mgasetup.exe119Any startup section0 67Matrox Millennium video driver. Not required once drivers installed77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
110MHDOGStart1 11mhdogst.EXE119Any startup section0 84Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
2 6MHINIT1 10MHINIT.EXE119Any startup section0 42Part of the Cybermedia Clean Sweep package77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
319Microangelo Desktop1 10Muamgr.exe119Any startup section0227Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start - Programs77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
219microAttuneDownload1 12atmdlusr.exe119Any startup section0 64USR (US Robotics) modem auto updater. May be a sub-set of Attune77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deloder.html0
312MicroDialler1 14atdialler1.exe119Any startup section0117Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access probl ems are encountered65https://www.freeserve.com/time/anytimereg/migration/?redirect=int0
140Microfinder lptt01or Mi crofinder ml097e1 7mcf.exe119Any startup section0173Variant of the RapidBlaster p arasite (in a "mcf" folder in Program Files). It is no t recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 9MicroLoad1 15random filename219Any startup section0 37Added as a result of the DARBY VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.darby.html0
1 9microsoft1 11svchost.exe119Any startup section0109Added as a result of the ASTEF o r RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here69http://support.mi crosoft.com/default.aspx?scid=KB;EN-US;Q250320&0
128Microsoft .NET Confingurator1 11msnconf.exe119Any startup section0 43Added as a result of an unidentified VIRUS!69http://support.mi crosoft.com/default.aspx?scid=KB;EN-US;Q250320&0
231Microsoft Announcement Listener1 12Annclist.exe119Any startup section0163MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it69http://support.mi crosoft.com/default.aspx?scid=KB;EN-US;Q250320&0
121Microsoft auto update1 13winupdate.exe119Any startup section0 37Added as a result of the BMBOT VIRUS!62http://www.symantec.com/avcenter/venc/data/backdoor.bmbot.html0
118Microsoft Conf Ldr1 11sysconf.exe119Any startup section0 50Added as a result of a variant of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
121Microsoft Corporation1 15random filename219Any startup section0 76Added as a result of various VIRUSES such as VISAGES, BABYBEAR a nd TOFACED78http://securityresponse.symantec.com/avcenter/venc/data/w32.h llw.tofaced.html0
114Microsoft Cvrt1 12mscvrt32.exe119Any startup section0118Added as a result of a unidentified VIRUS!. Named a lmost, but not exactly like the legitimate msvcrt or msvcrt20.dll78http://securityresponse.symantec.com/avcenter/venc/data/w32.h llw.tofaced.html0
126Microsoft Database Handler1 11mssql32.exe119Any startup section0 41Added as a result of the RANDEX.AX VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.ax.html0
117Microsoft DirectX1 13Spoolserv.exe119Any startup section0 38Added as a result of the DINFOR VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.dinfor.worm.html0
119Microsoft Find Fast1 12Findfast.exe119Any startup section0142Complete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier76http://securityresponse.symantec.com/avcenter/venc/data/w32.dinfor.worm.html0
425MICROSOFT FIREWALL CLIENT1 11ISATRAY.EXE119Any startup section0 49MS Internet Security and Acceleration Server 200076http://securityresponse.symantec.com/avcenter/venc/data/w32.dinfor.worm.html0
237Microsoft Greetings Workshop Reminder1 12Gwremind.exe119Any startup section0 85You really want to be reminded about somebody's birthday at the expense of resources?76http://securityresponse.symantec.com/avcenter/venc/data/w32.dinfor.worm.html0
113Microsoft IIS1 11syshost.exe119Any startup section0 41Added as a result of the FRANCETTE VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.francette.worm.html0
119Microsoft Inet Xp..1 11teekids.exe119Any startup section0 41Added as a result of the BLASTER.C VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.c.worm.html0
325Microsoft Intellitype Pro1 12speedkey.exe119Any startup section0 57Additional keyboard shortcuts on MS programmable keyboard79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.c.worm.html0
127Microsoft Internet Explorer1 12iexplore.exe119Any startup section0146Downloader trojan. Note! - this is not the valid iexplore.exe as the file is loacted in Program Files\MSIE and not Program Files\Internet Explorer79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.c.worm.html0
135Microsoft Internet Firewall Manager1 9GMT16.exe119Any startup section0 41Added as a result of the RANDEX.AT VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.at.html0
113Microsoft IPC1 10system.exe119Any startup section0 39Added as a result of the NULLBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.nullbot.html0
113Microsoft IPC1 11svshost.exe119Any startup section0 43Added as a result of an unidentified VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.nullbot.html0
121Microsoft Movie Maker1 10Mmaker.exe119Any startup section0 88Added as a result of the IRCBOT.C VIRUS! Note that this is not a valid Microsoft program73http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.c.html0
118Microsoft MSUPDATE1 12SpoolSvc.exe119Any startup section0 38Added as a result of the SXTB-A VIRUS!55http://www.sophos.com/virusinfo/analyses/trojsxtba.html0
117Microsoft Netview1 11gesfm32.exe119Any startup section0 40Added as a result of the RANDEX.C VIRUS!60http://www.symantec.com/avcenter/venc/data/w32.randex.c.html0
117Microsoft Netview1 11mssvc32.exe119Any startup section0 43Added as a result of an unidentified VIRUS!60http://www.symantec.com/avcenter/venc/data/w32.randex.c.html0
132Microsoft Netview Component v5.11 10msnv32.exe119Any startup section0 40Added as a result of the RANDEX.F VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.f.html0
117Microsoft Network1 9msnet.exe119Any startup section0 41Added as a result of the MOCKBOT.A VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.mockbot.a.worm.html0
134Microsoft Network Daemon for Win321 10Netd32.exe119Any startup section0 39Added as a result of the SDBOT.R VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.r.html0
116Microsoft Office1 10MSMSGR.exe119Any startup section0 41Added as a result of the GAOBOT.BB VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bb.html0
227Microsoft Office Fast Cache1 12Fastboot.exe119Any startup section0145Part of MS Office 95 (v7.0). According to this i t improves the performance. Most likely a predecessor of MS Find Fast above and can be disabled63http://support.microsoft.com/default.aspx?scid=kb;en-us;Q1327550
122Microsoft Office Start1 14winupdates.exe119Any startup section0 41Added as a result of the GAOBOT.BC VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bc.html0
249Microsoft Officeor Mi crosoft Office Shortcut Bar1 12Msoffice.exe119Any startup section0217Alternative shortcuts to the Start - Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bc.html0
244Microsoft Officeor Mi crosoft Office Startup1 16Osa.exe Osa9.exe219Any startup section0238Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bc.html0
114Microsoft RDLL1 13sysconf32.exe119Any startup section0 50Added as a result of a variant of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
117Microsoft Runtime1 12CfgDll32.exe119Any startup section0 41Added as a result of the RANDEX.BD VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.bd.html0
117Microsoft Scanreg1 20microsoftscanreg.exe119Any startup section0 41Added as a result of the FRANRIV.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_FRANRIV.A0
245Microsoft Sidewinder Game Controller Software1 10SWTRAY.EXE119Any startup section0 78MS SideWinder game controller system tray icon. Available via Start - Programs78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_FRANRIV.A0
227Microsoft Sound Volume Tool1 10mssvol.exe119Any startup section0202This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start - Settings - Control Panel78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_FRANRIV.A0
132Microsoft Spool Server for Win321 12spoolsrv.exe119Any startup section0 40Added as a result of the RANDEX.H VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.h.html0
124Microsoft System Checkup1 8Cool.exe119Any startup section0 38Added as a result of the DONK.B VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.donk.b.html0
124Microsoft System Checkup1 11Wnetlib.exe119Any startup section0 38Added as a result of the DONK.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.donk.c.html0
138Microsoft System Restore Configuration1 9CBRSS.EXE119Any startup section0 51Added as a result of a variant of the SPYBOT VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.donk.c.html0
114Microsoft Tray1 15random filename219Any startup section0 39Added as a result of the DELF.BZ VIRUS!43http://www.vsantivirus.com/back-delf-bz.htm0
119Microsoft UPDATER321 9lsass.exe119Any startup section0146Added as a result of the RANDEX.AR VIRUS! Note - this is not the legitimate Lsass.exe s ystem file should normally NOT figure in Msconfig/Startup!70http://www.liutilities.com/produc ts/wintaskspro/processlibrary/lsass/0
123Microsoft Updaters Pros1 14WINDLL32XP.EXE119Any startup section0 45Addes as a result of the SPYBOTTER.GEN VIRUS!70http://www.liutilities.com/produc ts/wintaskspro/processlibrary/lsass/0
125Microsoft Utility Startup1 8OSA9.exe119Any startup section0238Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants70http://www.liutilities.com/produc ts/wintaskspro/processlibrary/lsass/0
319Microsoft Webserver1 10svctrl.exe119Any startup section0126Personal web server program which enables you to create and host a web server from your computer. Not required for most people70http://www.liutilities.com/produc ts/wintaskspro/processlibrary/lsass/0
122Microsoft Windows 20001 14Winupdsdgm.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
133Microsoft Windows Kernel Services1 14winkrnl386.exe119Any startup section0 39Added as a result of the ZEBROXY VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zebroxy.html0
124Microsoft Windows Update1 11rundlls.exe119Any startup section0 39Added as a result of the HABRACK VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.habrack.html0
132Microsoft Windows Update Service1 13wupdmgr32.exe119Any startup section0 43Added as a result of the DOS.AUTOCAT VIRUS!59http://www.symantec.com/avcenter/venc/data/dos.autocat.html0
125Microsoft Windows Updater1 12winupdgm.exe119Any startup section0 41Added as a result of the GAOBOT.BI VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bi.html0
234Microsoft Works Calendar Reminders1 12wkcalrem.exe119Any startup section0 74Produces a pop-up reminder of events scheduled using the MS Works Calendar79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bi.html0
225Microsoft Works Portfolio1 9WksSb.exe119Any startup section0173The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bi.html0
232Microsoft Works Update Detection1 12wkdetect.exe119Any startup section0 30Checks for updates to MS Works79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bi.html0
121microsoft xdaemon 2.01 11xdaemon.exe119Any startup section0 38Added as a result of the DELF.D VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.d.html0
112microsoft4201 16microsoft420.exe119Any startup section0 59Added as a result of the MENACE.B ( or W32.SOFUNNY) VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.sofunny.html0
123MicrosoftMultimediaTask1 10Mmtask.exe119Any startup section0 83Adware downloader - not the valid MusicMatch Jukebox which shares the same filename72http://securityresponse.symantec.com/avcenter/venc/data/w32.sofunny.html0
133MicrosoftNetwork Daemon for Win321 10NETD32.EXE119Any startup section0 40Added as a result of the RANDEX.F VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.f.html0
123MicrosoftServiceManager1 12mstask32.exe119Any startup section0 38Added as a result of the YAHA.P VIRUS!50http://vil.mcafee.com/dispVirus.asp?virus_k=1000920
123MicrosoftServiceManager1 12Wintsk32.exe119Any startup section0 38Added as a result of the YAHA.U VIRUS!61http://www.symantec.com/avcenter/venc/data/w32.yaha.u@mm.html0
123MicrosoftServiceManager1 13EXPLORERE.EXE119Any startup section0 39Added as a result of the YAHA.AB VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.ab@mm.html0
123MicrosoftServiceManager1 11msupdat.exe119Any startup section0 39Added as a result of the YAHA.AA VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.aa@mm.html0
114MicrosoftValue1 11syscnfg.exe119Any startup section0158Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside75http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.aa@mm.html0
116MicrosoftWindows1 17various filenames219Any startup section0 47MagicSearch - a CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
118Microsoft⌐ PID Lex1 10PIDLex.exe119Any startup section0 41Added as a result of the NIOVADOOR VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.niovadoor.html0
124Microsoft« System Mapper1 10SysMap.exe119Any startup section0 37Added as a result of the MAPSY VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.mapsy.html0
220MightyFAX Controller1 11MFNTCTL.EXE119Any startup section0111Mighty FAX f rom RKS Software - "installs a printer driver so that you can fax directly from Windows software"50http://www.rkssoftware.com/mightyfax/overview.html0
212MINIFERT.EXE1 12MINIFERT.EXE119Any startup section0 15Part of Backweb98http://spybot.safer-networking.de/index.php?lang=en&page=knowledgebase/threats/spybots-minibug0
3 7minilog1 11MINILOG.EXE119Any startup section0171If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use98http://spybot.safer-networking.de/index.php?lang=en&page=knowledgebase/threats/spybots-minibug0
2 8MiniNote1 12MININOTE.EXE119Any startup section0 98Mini NoteTab w as the first in the family of "NoteTab" text and HTML editors from Fookes Software43http://www.fookes.com/software/mininote.htm0
213Mirabilis ICQ1 30NDetect.exe icq.exe ICQNet.exe219Any startup section0129If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start - Programs48http://www.geocities.com/revenger_inc/mmext.html0
219miroVIDEO Tray Tool1 12misitray.exe119Any startup section0285Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card, e.g. for the above actions48http://www.geocities.com/revenger_inc/mmext.html0
2 5Mixer1 9Mixer.exe119Any startup section0233C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start - Settings - Control Panel or Start - Programs49http://www.video-drivers.com/drivers/26/26750.htm0
2 8Mixghost1 12mixghost.exe119Any startup section0119Management software for Altec Lansing speakers. If a change is needed, the user can launch it from the Start menu49http://www.video-drivers.com/drivers/26/26750.htm0
1 5mload1 12lxmstart.exe119Any startup section0 43Added as a result of an unidentified VIRUS!49http://www.video-drivers.com/drivers/26/26750.htm0
3 5MMhid1 9mmhid.dll119Any startup section0497This is the Human Interface Device Server f or Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume c ontrol and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP46http://www.microsoft.com/hwdev/hid/audctrl.htm0
2 8MMHotKey1 12MMHotKey.exe119Any startup section0190Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen46http://www.microsoft.com/hwdev/hid/audctrl.htm0
3 7MMKeybd1 11MMKeybd.exe119Any startup section0 68Multimedia keyboard manager. Required if you use the additional keys46http://www.microsoft.com/hwdev/hid/audctrl.htm0
1 4mmod1 8mmod.exe119Any startup section0137Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here f or more information39http://www.ahfb2000.com/ezula/ezula.php0
2 5mmpti1 11m1mmpti.exe119Any startup section0107Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards39http://www.ahfb2000.com/ezula/ezula.php0
4 6MMTASK1 10mmtask.tsk119Any startup section0274A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc39http://www.ahfb2000.com/ezula/ezula.php0
2 6mmtask1 10mmtask.exe119Any startup section0110Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator97http://www.musicmatch.com/download/plus/jukebox_intro.htm?os=pc&mode=input&BTD=1&DID=0
114MMtask Service1 10mmtask.exe119Any startup section0102Added as a result of the BACKGAT.A VIRUS! Not the valid MusicMatch Jukebox which has the same filename58http://www.sophos.com/virusinfo/analyses/trojbackgata.html0
2 6MMTray1 11mm_tray.exe119Any startup section0125MusicMatch Jukebox i con in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator97http://www.musicmatch.com/download/plus/jukebox_intro.htm?os=pc&mode=input&BTD=1&DID=0
2 6MMTray1 10MMTray.exe119Any startup section0 74Part of Morgan Multimedia Codecs. Only required when the cod ecs are used33http://www.morgan-multimedia.com/0
2 8MMTray2K1 12MMTray2K.exe119Any startup section0 74Part of Morgan Multimedia Codecs. Only required when the cod ecs are used33http://www.morgan-multimedia.com/0
2 9MMTrayLSI1 13MMTrayLSI.exe119Any startup section0 74Part of Morgan Multimedia Codecs. Only required when the cod ecs are used33http://www.morgan-multimedia.com/0
1 6mmxrun1 9msosa.exe119Any startup section0185Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) a nd RegCompres (REGCPM32.EXE), otherwise they return85http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=7756&hl=&s=0
1 5mnsvc1 9mnsvc.exe119Any startup section0 41Added as a result of the AUTOUPDER VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
2 7mobsync1 11mobsync.exe119Any startup section0142MS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
113MOBSYNC32.EXE1 13mobsync32.exe119Any startup section0 38Added as a result of the FINERO VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.finero.html0
2 3MOD1 11muamger.exe119Any startup section0152MicroAngelo On Display from Impact Software l ets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them57http://www.impactsoft.com/muangelo/ondisplay/prodinfo.htm0
3 8MODEMBTR1 12MODEMBTR.EXE119Any startup section0 61Modem Booster from inKline Global t o improve ISP connections25http://inklineglobal.com/0
113ModularConfig1 11syscnfg.exe119Any startup section0158Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside25http://inklineglobal.com/0
122Module Call initialize1 31RUNDLL32.EXE reg.dll, ondll_reg219Any startup section0 39Added as a result of the LOVGATE VIRUS!67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
213Money Express1 16moneyexpress.exe119Any startup section0 48Part of MS Money. Available via Start - Programs67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
210MoneyAgent1 17money express.exe219Any startup section0 48Part of MS Money. Available via Start - Programs67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
216MoneyStartUp10.01 14Activation.exe119Any startup section0 53Part of MS Money 2002. Available via Start - Programs67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
322Monitor Apache Servers1 17ApacheMonitor.exe119Any startup section0125Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start - Programs67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
118Monitoring Service1 11svchost.exe119Any startup section0160Added as a result of the CONE.C VIRUS! This is not the valid svchost.exe as described here. Located in a Windows\Tasks directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
110Monitormgt1 14Monitormgt.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
216Monstersoundtray1 12Freectrl.exe119Any startup section0 43Diamond Multimedia sound card control panel72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
210moon phase1 8moon.exe119Any startup section0 62Moon Phase - tray icon that indicates the phases o f the moon31http://www.locutuscodeware.com/0
2 8Morpheus1 12morpheus.exe119Any startup section0266MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"31http://www.locutuscodeware.com/0
1 8mosearch1 12mosearch.exe119Any startup section0301Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here62http://support.microsoft.com/support/kb/articles/Q282/1/06.asp0
218Motive SmartBridge1 9mpbtn.exe119Any startup section0212System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start - Programs - not required21http://www.attbi.com/0
313MotiveMonitor1 10motmon.exe119Any startup section0297On HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required21http://www.attbi.com/0
2 8MotiveSB1 12MotiveSB.exe119Any startup section0 36The same as Motive SmartBridge below21http://www.attbi.com/0
3 6MotMon1 10motmon.exe119Any startup section0297On HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required21http://www.attbi.com/0
322Mount Safe & Sound1 11Fbmount.exe119Any startup section0193From McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start21http://www.attbi.com/0
2 9Mouse 32A1 12Mouse32A.exe119Any startup section0 82Mouse driver to control mouse functions from Azona. Available via Start - Programs21http://www.attbi.com/0
221Mouse Suite 98 Daemon1 12pelmiced.exe119Any startup section0121Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games21http://www.attbi.com/0
210MouseCount1 6MC.exe119Any startup section0162MouseCount b y Kittyfeet Software. "Utility for counting ho w many times us computer junkies click our mouse in a given session/day/week/month/year." Not required39http://www.kittyfeet.com/mousecount.htm0
3 8mouseElf1 6MC.exe119Any startup section0129System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features39http://www.kittyfeet.com/mousecount.htm0
3 8MouseImp1 12MImpHost.exe119Any startup section0113MouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device"39http://www.kittyfeet.com/mousecount.htm0
3 8Mousinfo1 12mousinfo.exe119Any startup section0 62MS mouse information tool - for troubleshooting mouse problems39http://www.kittyfeet.com/mousecount.htm0
113MovieNetworks1 17MovieNetworks.exe119Any startup section0252MovieNetworks w ill connect you by DOMESTIC PREMI UM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:\Program Files\MovieNetworks directory29http://www.movienetworks.com/0
110Movieplace1 14Movieplace.exe119Any startup section0 19MoviePlace m alware68http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=4530606620
220Mozilla Quick Launch1 23Netscp6.exe Mozilla.exe219Any startup section0 31Netscape 6 and Mozilla browsers68http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=4530606620
3 4MPEO1 12Csinsm32.exe119Any startup section0 85Automatic logging of installs from Norton CleanSweep - available via Start - Programs68http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=4530606620
4 6MPFExe1 19mpf.exe MpfTray.exe219Any startup section0 24McAfee Personal Firewall68http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=4530606620
3 8MplSetup1 12MplSetup.exe119Any startup section0 73Used by Ricoh network printers to enable network printing from the client68http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=4530606620
3 6MPower1 10MPower.exe119Any startup section0313MPower f rom MindBeat. "Defragments and free s your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load". Some users swear by programs such as this but I suggest you read this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
1 6MPREXE1 10MPREXE.EXE119Any startup section0 99Added as a result of the OPASERV.T VIRUS! Note - this is not the legitimate Mprexe.exe s ystem file71http://www.liutilities.com/products/w intaskspro/processlibrary/mprexe/0
410MPREXE.exe1 10mprexe.exe119Any startup section0409WIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here a nd here. Not e - why some people have it listed in start-up prog rams I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus42http://www.ohsu.edu/win95/html/mprexe.html0
1 7MprHTML1 11MprHTML.exe119Any startup section0 55Added as a result of a variant of the VAGRNOCKER VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_VAGRNOCK.120
3 6MPSExe1 12mscifapp.exe119Any startup section0147McAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_VAGRNOCK.120
115MPtask Services1 10mptask.exe119Any startup section0 66Added as a result of the LALA o r DOWNLOADER-BN.B or AOT VIRUSES!43http://vil.nai.com/vil/content/v _99788.htm0
2 7MPXTray1 12mpxptray.exe119Any startup section0186Windows Media Player PowerToy which is run from the taskbar. It can be used to hide Windows Media Player (when in use) and choose various standard buttons (play/pause, next,previous) etc43http://vil.nai.com/vil/content/v _99788.htm0
1 6mqbkup1 10mqbkup.exe119Any startup section0 41Added as a result of the OPASERV.K VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.k.worm.html0
2 7mrtMngr1 11mrtMngr.exe119Any startup section0 67Maintenance Release Task Manager for IntuitÆs QuickBooks or Quicken79http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.k.worm.html0
321MRU-Blaster Scheduler1 13scheduler.exe119Any startup section0 92MRU-Blaster s cheduler - detects and cleans MRU (most recently use d) lists on your computer46http://www.wilderssecurity.com/mrublaster.html0
224MRU-Blaster Silent Clean1 14mrublaster.exe119Any startup section0 60MRU-Blaster - performs silent cleaning of MRU lists at boot46http://www.wilderssecurity.com/mrublaster.html0
116MS Config Loader1 11svchos1.exe119Any startup section0 40Added as a result of the AGOBOT.R VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.R0
116MS Config Loader1 14MSWin32bck.exe119Any startup section0 41Added as a result of the GAOBOT.AA VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.aa.html0
111MS Explorer1 12mexplore.exe119Any startup section0 39Added as a result of the YAHA.AE VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.ae@mm.html0
1 7MS HTML1 10msHtml.exe119Any startup section0 43Added as a result of the PESTDOOR.31 VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_PESTDOOR.310
1 7MS HTML1 9mslat.exe119Any startup section0 43Added as a result of the LATINUS.SVR VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_LATINUS.SVR0
118MS Network Control1 9mswin.exe119Any startup section0 37Added as a result of the DUMBA VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/trojan.dumba.html0
118MS Security Hotfix1 12service5.exe119Any startup section0 41Added as a result of the GAOBOT.AG VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ag.html0
110Ms Spool321 14MS SPOOL32.EXE219Any startup section0 39Added as a result of the ASASSIN VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.assasin.html0
110MS Updates1 20mscache.exe aupd.exe219Any startup section0 22Spyware web downloader77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.assasin.html0
1 7MS-HTML1 15random filename219Any startup section0 42Added as a result of the LATINUS.15 VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_LATINUS.150
1 7MSAdmin1 11jdbgmrg.exe119Any startup section0 97Added as a result of the DASMIN.A VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here50http://vil.mcafee.c om/dispVirus.asp?virus_k=994360
1 6mscman1 10mscman.exe119Any startup section0198Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"50http://vil.mcafee.c om/dispVirus.asp?virus_k=994360
3 4mscn1 8mscn.exe119Any startup section0 76Part of the SafeChildNet internet filtering program - required if you use it50http://vil.mcafee.c om/dispVirus.asp?virus_k=994360
113MSCONFG32.EXE1 13MSCONFG32.EXE119Any startup section0 42Added as a result of the OPTIX.04.C VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optix.04.c.html0
2 8MSConfig1 14MSCONFIG32.EXE119Any startup section0121Unidentified adware, spyware or virus. Not to be confused with the valid entry above which has the command "msconfig.exe"80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optix.04.c.html0
1 8msconfig1 12msconfig.exe119Any startup section0189CoolWebSearch p arasite related. Note - this is not the vali d "msconfig" entry which can be left over if you don't uncheck the box after re-booting when running in "Selective Startup" mode40http://www.merijn.org/cwschronicles.html0
134Msconfig lptt01or Ms config ml097e1 12msconfig.exe119Any startup section0262Variant of the RapidBlaster p arasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executab le name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
110MSConfig451 14MSConfig45.exe119Any startup section0 40Added as a result of the SDBOT.OJ VIRUS! 01
228MSConfigor MS ConfigReminder1 12msconfig.exe119Any startup section0205This is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode 01
1 9MSConfigr1 11jdbgmrg.exe119Any startup section0 97Added as a result of the DASMIN.C VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here50http://vil.mcafee.c om/dispVirus.asp?virus_k=994360
1 6MSCORE1 11syscnfg.exe119Any startup section0158Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside50http://vil.mcafee.c om/dispVirus.asp?virus_k=994360
1 6Mscsgs1 10MSCSGS.EXE119Any startup section0 37Added as a result of the ZEZER VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.zezer.worm.html0
1 8Mscsgs321 12MSCSGS32.EXE119Any startup section0 37Added as a result of the ZEZER VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.zezer.worm.html0
1 8Msctrl321 12Msctrl32.scr119Any startup section0 38Added as a result of the REDIST VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.hllw.redist@mm.html0
1 5MSCVT1 9MSCVT.exe119Any startup section0 41Added as a result of the SLIDESHOW VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.slideshow.html0
1 5MSDLL1 11syscnfg.exe119Any startup section0158Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.slideshow.html0
1 7Msdos321 11Msdos32.pif119Any startup section0 38Added as a result of the RECORY VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.recory@mm.html0
1 8msdos4231 12msdos423.exe119Any startup section0127Added as a result of the MENACE.A ( or http://securityresponse.symantec.com/avcenter/venc/data/w95.sofunny.worm@m.html) VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w95.sofunny.worm@m .html0
2 5MSDTC1 9msdtc.exe119Any startup section0146MS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server80http://securityresponse.symantec.com/avcenter/venc/data/w95.sofunny.worm@m .html0
1 6Msfind1 10Msfind.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
1 8MSFind321 12msfind32.exe119Any startup section0 37Added as a result of the CAYAM VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cayam@mm.html0
113msfindosa.exe1 13msfindosa.exe119Any startup section0 45Added as a result of the DOWNLOADER-BS VIRUS!42http://vil.nai.com/vil/content/v_99960.htm0
1 8Msgsrv161 12Msgsrv16.exe119Any startup section0 49Added as a result of the DELF f amily of VIRUSES!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.family.html0
412MSGSRV32.exe1 12msgsrv32.exe119Any startup section0252Windows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background62http://support.microsoft.com/support/kb/articles/q138/7/08.asp0
1 8msgsvr321 12msgsvr32.exe119Any startup section0183Added as the result of the DEADHAT.B VIRUS! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:\Windows\System) on a Win9x/Me machine79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deadhat.b.html0
1 7Msgtray1 9sys16.exe119Any startup section0 38Added as a result of an unknown VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.deadhat.b.html0
1 5MSHT@1 9MSHT@.EXE119Any startup section0 41Added as a result of the MAGISTR.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=PE_MAGISTR.A0
1 6MSInfo1 10msinfo.exe119Any startup section0 41Added as a result of the ALADINZ.M VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.m.html0
1 8MSKCES321 8filename119Any startup section0 38Added as a result of the CLONER VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.cloner.html0
110MSKernel321 14MSKernel32.vbs119Any startup section0 56Added as a result of the LOVELETTER ( I LOVE YOU) VIRUS!77http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_LOVELETTER0
110MSkernel321 15System.exe 4820219Any startup section0 38Added as a result of the TUXDER VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.tuxder.html0
132Mslogon lptt01or Ms logon ml097e1 11mslogon.exe119Any startup section0177Variant of the RapidBlaster p arasite (in a "Mslogon" folder in Program Files). It i s not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 9MsManager1 11msmgr32.exe119Any startup section0 39Added as a result of the YAHA.AF VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.af@mm.html0
111msmanager321 12msmngr32.exe119Any startup section0 57Added as a result of the RANDON-R ( or WOMANIZ.A) VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.as p?VName=BKDR_WOMANIZ.A0
1 9MSMcAfeeh1 15Avsynmgr32h.exe119Any startup section0 38Added as a result of the FRANGO VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.frango.html0
1 9MSMcAfeeS1 15Avsynmgr32S.exe119Any startup section0 52Added as a result of the VOLAC o r VOLAC.DR VIRUSES!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.volac.dr.ht ml0
1 5Msmgt1 9msmgt.exe119Any startup section0 31Total Velocity a dware/hijacker29http://www.totalvelocity.com/0
3 6MSMSGS1 10msmsgs.exe119Any startup section0222Windows Messenger u tility. If you don't use Windows Messenger, this can be a nnoying. Available via Start - Programs. Go to Windows Messenger Tools Options Preferences and uncheck "Run this program when Windows starts"63http://www.microsoft.com/windowsxp/windowsmessenger/default.asp0
1 3msn1 12system32.exe119Any startup section0 39Added as a result of the KITRO.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KITRO.A0
219MSN Internet Access1 12trayclnt.exe119Any startup section0 90Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_KITRO.A0
113MSN messenger1 13messenger.exe119Any startup section0 86Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread63http://forums.techguy.org/showthread.php?s=&threadid=1090540
121MSN messenger service1 9mssgs.exe119Any startup section0 86Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread63http://forums.techguy.org/showthread.php?s=&threadid=1090540
214MSN Quick View1 9Msndc.exe119Any startup section0 44Quick way to connect to MSN internet service63http://forums.techguy.org/showthread.php?s=&threadid=1090540
110Msnarrator1 14msnarrator.exe119Any startup section0 83Added as a result of the NARAT.A VIRUS! - also identified as MPGCOM Toolbar a dware75http://securityresponse.symantec.com/avcenter/venc /data/adware.mpgcom.html0
1 5MSNET1 9msnet.exe119Any startup section0 35Added as a result of the BOA VIRUS!60http://www.symantec.com/avcenter/venc/data/w32.boa.worm.html0
2 5MSNIA1 12MSNIASVC.EXE119Any startup section0105Added with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG60http://www.symantec.com/avcenter/venc/data/w32.boa.worm.html0
2 7msnmsgr1 11msnmsgr.exe119Any startup section0209MSN Messenger u tility. If you don't use MSN Messenger, this can be annoying. Available via Start - Programs. Go to MS Messenger Tools Options Preferences and uncheck "Run this program when Windows starts"25http://messenger.msn.com/0
110MSNService1 14MSNService.exe119Any startup section0 40Added as a result of the CARPET.C VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.carpet.c.html0
113MSNSysRestore1 8pc32.exe119Any startup section0 51Added as a result of a variant of the MASTAK VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.carpet.c.html0
110MSObject321 13MSObject32.js119Any startup section0 35Added as a result of the PUN VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/js.pun.trojan.html0
1 8Msoffice1 12msoffice.hta119Any startup section0 39Hijacker - redirecting to Searchdot.net74http://securityresponse.symantec.com/avcenter/venc/data/js.pun.trojan.html0
1 6MSOOBD1 10MSOOBD.EXE119Any startup section0 41Added as a result of the MAGISTR.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=PE_MAGISTR.A0
1 9Mspatch891 10cnqmax.exe119Any startup section0 40Added as a result of the RANDEX.P VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.p.html0
1 8MSPQFile1 11MSA****.TMP119Any startup section0 71Homepage hijacker. See here f or more information. **** can be anything89http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=776;start=100
113MSprotect.exe1 13MSprotect.exe119Any startup section0 39Added as a result of the DABYREV VIRUS!89http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=776;start=100
3 5mspwr1 12pupstman.exe119Any startup section0114"Transparent icon background" feature of Ashampoo's PowerUp XP ( WinNT/2K/XP) and PowerUp Deluxe ( Win98/Me) 72http://www.ashampoo.com/frontend/products/php/produc t.php?idstring=00050
2 8MSPY20021 12ImScInst.exe119Any startup section0108Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word72http://www.ashampoo.com/frontend/products/php/produc t.php?idstring=00050
1 4Msrc1 8Msrc.exe119Any startup section0 47Added as a result of the KRYPTONIC GHOST VIRUS!72http://www.ashampoo.com/frontend/products/php/produc t.php?idstring=00050
1 9msreg.exe1 10msrege.exe119Any startup section0 36Added as a result of the ZINX VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/backdoor.zinx.html0
1 7MSREGIT1 8Msgp.exe119Any startup section0 59Added as a result of the KRYPGHOS ( Kryptonic Ghost) VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_KRYPGHOS.130
1 8MSRegSvc1 12regsvc32.exe119Any startup section0 69Homepage hijacker that changes your homepage to an adult content site80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_KRYPGHOS.130
110msrunocx321 14msrunocx32.exe119Any startup section0 36Added as a result of the SKUS VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.skus.html0
1 9msservice1 10msserv.exe119Any startup section0 35Added as a result of the HYD VIRUS!71http://securityresponse.symantec.com/avcenter/venc/data/w32.hyd@mm.html0
1 6MSSHVC1 10MSSHVC.exe119Any startup section0 39Added as a result of the NUFFY.A VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.nuffy.a.html0
1 5MSSQL1 9Mssql.exe119Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
1 7Msstart1 11msstart.exe119Any startup section0 39Added as a result of the LIVUP.C VIRUS!89http://it.trendmicro-europe.com/enterprise/security_info/ve_detail.php?Vname=BKDR_LIVUP.C0
116MSStartOptimizer1 11Iexpres.exe119Any startup section0 39Added as a result of the POLDO.B VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.poldo.b.html0
116MSStartOptimizer1 10WINUPD.EXE119Any startup section0174Adult content dialler - see here. This has to be cleared at the same time as RegCompres (REGCPM32.EXE), atisrc2 (windfind.exe) and m mxrun (msosa.exe), otherwise they return85http://www.spywareinfo.com/forums/index.php?act=ST&f=11&t=7756&hl=&s=0
134mssurfer lptt01or ms surfer ml097e1 12mssurfer.exe119Any startup section0224Variant of the RapidBlaster p arasite (in a "surfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
4 9MSSVC.EXE1 9MSSVC.EXE119Any startup section0 99Stealthdisk - hides folders, files and applica tions. Will also encrypt them for better protection27http://www.stealthdisk.com/0
1 5mssys1 9mssys.exe119Any startup section0 38Added as a result of the MYSS.B VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.myss.b.html0
1 8mssysint1 13Iexplore .exe219Any startup section0129Added as a result of the PWSTEAL.ABCHLP a nd PSPIDER.310.B VIRUSES! Note - this is not the valid Internet Explorer (iexplore.exe)84http://securityresponse.symantec.com/avcenter/venc/da ta/backdoor.pspider.310.b.html0
114mssyslanhelper1 13msmsgri32.exe119Any startup section0 40Added as a result of the RANDEX.D VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.d.html0
1 8MsSystem1 9mssys.exe119Any startup section0 39Added as a result of the VANTA.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_VANTA.A0
1 6Mstask1 10mstask.exe119Any startup section0137Added as a result of the OPASERV.N VIRUS! Note - this is not the "Scheduling Agent" and the executable resides in C:\Windo ws or C:\WINNT78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.N0
1 7Mstng321 11MSTng32.exe119Any startup section0 36Added as a result of the TANG VIRUS!64http://www.symantec.com/avcenter/venc/data/w32.hllw.tang@mm.html0
1 8MSUpdate1 8wupd.exe119Any startup section0 41Added as a result of the ALADINZ.M VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.m.html0
112MSupdate.exe1 12MSupdate.exe119Any startup section0 76CoolWebSearch p arasite related - resets home page to an adu lt content site40http://www.merijn.org/cwschronicles.html0
113MSupdater.exe1 13MSupdater.exe119Any startup section0 73CoolWebSearch p arasite related. Installs the Winshow.dll br owser plugin40http://www.merijn.org/cwschronicles.html0
112msuser32.exe1 12msuser32.exe119Any startup section0 38Added as a result of the ANDROV VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.androv.html0
1 6msvc321 10msvc32.exe119Any startup section0 27ClientMan p arasite variant42http://doxdesk.com/parasite/ClientMan.html0
1 5msvcc1 12msvchost.exe119Any startup section0 37Added as a result of the XOMBE VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/trojan.xombe.html0
1 9MSVersion1 35INTERNETFEATURES.exe clrschp038.exe219Any startup section0 74Added as a result of the POPMON.A VIRUS! - also known as PopMonster adware77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_POPMON.A0
1 5MSVXD1 9MSVXD.EXE119Any startup section0 39Added as a result of the DATOM.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DATOM.A0
3 7MSwheel1 11mswheel.exe119Any startup section0130Microsoft Intellipoint s oftware for their Intellimouse se ries of mice - required if you use non-standard Windows driver features38http://www.microsoft.com/intellipoint/0
1 8Mswincfg1 14Mswincfg32.exe119Any startup section0 40Added as a result of the CYBERSPY VIRUS!38http://www.microsoft.com/intellipoint/0
111msys lptt011 8msys.exe119Any startup section0179New variant of the RapidBlaster p arasite (in a "Msyss" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 6Msys321 21morfitwebentrance.exe119Any startup section0284Morfit ADjectPager - "uses home page rental t echnology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage 26http://www.morfit.com/Eng/0
113MS_NETD_WIN321 10netd32.EXE119Any startup section0 40Added as a result of the RANDEX.F VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.f.html0
112MS_SETUP.EXE1 12MS_SETUP.EXE119Any startup section0 38Added as a result of the CHARGE VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.charge.html0
1 4Mtr21 8mtr2.exe119Any startup section0 47Added as a result of the KRYPTONIC GHOST VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.charge.html0
3 4MUAL1 8mual.exe119Any startup section0 40Millesky video mail updater and launcher76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.charge.html0
3 6muamgr1 10muamgr.exe119Any startup section0227Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start - Programs76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.charge.html0
323Multi-function keyboard1 12GWHotkey.exe119Any startup section0161Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail, browser, volume and CD/DVD controls, etc)76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.charge.html0
320MultiCAM Initializer1 12MCamBoot.exe119Any startup section0265The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging i n order to run up to 10 USB ViCAM or 3Com Ho me Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled40http://www.vistaimaging.com/multicam.htm0
337Multimedia KBDor MU LTIMEDIA KEYBOARD1 11MMKeybd.exe119Any startup section0108Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as Keyboard Manager 01
3 8MultiRes1 12MultiRes.exe119Any startup section0153MultiRes - system tray utility allowing quick a ccess to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP28http://www.entechtaiwan.com/0
3 4MUPS1 8MUPS.exe119Any startup section0101Lauches the Belkin B ulldog Plus Service - required if you want to access the UPS advanced functions22http://www.belkin.com/0
413murphy shield1 9lmgui.exe119Any startup section0 52Firewall part of BitDefender v irus scanner/firewall27http://www.bitdefender.com/0
214Music01 Server1 18Music01 Server.exe219Any startup section0 21J River Media Jukebox36http://www.musicex.com/mediajukebox/0
129MusIRC (irc.music.com) client1 14musirc4.71.exe119Any startup section0 40Added as a result of the RANDEX.Q VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.q.html0
114MutexServiceEx1 12Sys32Smm.exe119Any startup section0 43Added as a result of an unidentified VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.q.html0
2 8MWProEng1 12MWProEng.exe119Any startup section0 76Logitech Mouseware Pro software - only required when using special functions73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.q.html0
1 8mwsoemon1 12mwsoemon.exe119Any startup section0 23"My Web Search" malware45http://www.mirekw.com/winfreeware/mwsnap.html0
1 5Mwsvm1 9mwsvm.exe119Any startup section0 47SeekSeek search hijacker related - as seen here 01
1 7MxHLp321 11MxHLp32.exe119Any startup section0 55Added as a result of a variant of the VAGRNOCKER VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_VAGRNOCK.120
315MXO Auto Loader1 11MXOaldr.exe119Any startup section0238Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_VAGRNOCK.120
3 8MxRunner1 12MxRunner.exe119Any startup section0 57EasyUninstall f rom Aladdin Systems (formerly by Ontrack)40http://www.aladdinsys.com/easyuninstall/0
1 8My Agent1 11msagent.exe119Any startup section0 41Added as a result of the NEGASMS.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NEGASMS.A0
116My Search Bar Eq1 11S4BAREQ.EXE119Any startup section0 22MySearch bar p arasite41http://doxdesk.com/parasite/MySearch.html0
3 8MyAgtTry1 12MyAgtTry.exe119Any startup section0125System tray notification for McAfee VirusScan ASaP o n-line scanner. Not required to be protected but you lose notif ications60http://www.mcafeeasap.com/content/virusscan_asap/default.asp0
1 5Myapp1 8filename119Any startup section0 39Added as a result of the FATEE.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.fatee.b.html0
1 4MyAV1 12avpguard.exe119Any startup section0 40Added as a result of the NETSKY.J VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.j@mm.html0
314myCIO.com ASaP1 12MyAgtTry.exe119Any startup section0125System tray notification for McAfee VirusScan ASaP o n-line scanner. Not required to be protected but you lose notif ications60http://www.mcafeeasap.com/content/virusscan_asap/default.asp0
216myCIO.com Splash1 10Splash.exe119Any startup section0 56Splash screen for McAfee VirusScan ASaP o n-line scanner60http://www.mcafeeasap.com/content/virusscan_asap/default.asp0
113MyCometCursor1 12MYCOME~1.EXE119Any startup section0 20Comet Cursor a dware48http://www.doxdesk.com/parasite/CometCursor.html0
1 6MyLife1 11CmdServ.exe119Any startup section0 39Added as a result of the HOLAR.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_HOLAR.A0
313myNetWatchman1 12nwclient.exe119Any startup section0205Sends your firewall alerts to a website, which then filters them and forwards de tails of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running29http://www.mynetwatchman.com/0
118MyPointsPointAlert1 35wjview ...MyPointsPointAlertrun.exe219Any startup section0140"With MyPoints you can earn rewards from name-brand merchants. You can even earn vacations and frequent flyer miles". Dubious privacy policy29http://www.mynetwatchman.com/0
315myprint mileage1 7mpm.exe119Any startup section0 44Reports battery status on a portable printer29http://www.mynetwatchman.com/0
319MytekSystrayExePath1 16MyTekSystray.exe119Any startup section0 75MyTek s ystem tray - web site providing comp uter tech support in Australia24http://www.mytek.com.au/0
312MyVitalAgent1 12VtlAgent.exe119Any startup section0205MyVitalAgent f rom Lucent Technologies. Replacement for Net.Medic, monitoring all popular internet transactions and alerting the user of th e loaction of connection problems. Available via Start - Programs 01
3 7N2PTray1 12Net2fone.exe119Any startup section0 87An Internet telephony application. Needed only if you have an account at Net2Phone, Inc25http://web.net2phone.com/0
2 8NADaemon1 12NADAEMON.EXE119Any startup section0220Program by NetActive w hich appears to be piggybacked on to some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required25http://www.netactive.com/0
212Naggerrunkey1 10nagger.exe119Any startup section0 40Packard Bell Free Internet Signup screen25http://www.netactive.com/0
417Naimagent_service1 20EPOAgentnaimas32.exe119Any startup section0268Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages25http://www.netactive.com/0
412Naimagent_UI1 33EPOAgentnaimag32.exe naimag32.exe219Any startup section0400Workstation background program for Network AssociatesÆ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan25http://www.netactive.com/0
1 4Name1 14Iexplorer0.exe119Any startup section0 41Added as a result of the THREADSYS VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.threadsys.html0
1 5Natal1 9Natal.scr119Any startup section0 42Added as a result of the OPASERV.AE VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.ae.worm.html0
1 3NAV1 12RuxDLL32.exe119Any startup section0 40Added as a result of the MAPSON.D VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.mapson.d.worm.html0
421NAV Agentor na vapw321 12navapw32.exe119Any startup section0211Introduced with Norton Anti-Virus 2002 to replace Norton Auto-Protect and Norton eMail Protect. Leaving "Auto-Protect", "E-mail Scanning" and "Script Blocking" enabled doesn't seem to slow the system down. 72http://securityresponse.symantec.com/avcenter/venc/data/w97m.riosys.html0
115NAV Auto Update1 17Navautoupdate.exe119Any startup section0 38Added as a result of the SPYBOT VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w97m.riosys.html0
238NAV CfgWizor NA V Configuration Wizard1 10cfgwiz.exe119Any startup section0126Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it72http://securityresponse.symantec.com/avcenter/venc/data/w97m.riosys.html0
312NAV DefAlert1 12DefAlert.exe119Any startup section0162Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis72http://securityresponse.symantec.com/avcenter/venc/data/w97m.riosys.html0
115NAV Live Update1 8filename119Any startup section0158Added as a result of the DEBORMS.C VIRUS! filename represents the path to the worm. Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec66http://www.symantec.com/avcenter/venc/data/w32.hllw.deborms.c.html0
110NavAgent321 11lasvr32.exe119Any startup section0 39Added as a result of the FEMOT.D VIRUS!64http://www.symantec.com/avcenter/venc/data/w32.femot.d.worm.html0
110NavAgent321 14SCardSvr32.Exe119Any startup section0 39Added as a result of the MOFEI.B VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MOFEI.B0
3 9Naviscope1 13naviscope.exe119Any startup section0190Naviscope i s a multipurpose browser enha ncement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more21http://naviscope.com/0
1 9navman_201 12sysnav32.exe119Any startup section0 43Hijacker, possibly a CoolWebSearch v ariant40http://www.merijn.org/cwschronicles.html0
1 7NavPass1 11NavPass.exe119Any startup section0 78Free system for gaining access to and downloading from adult content web-sites40http://www.merijn.org/cwschronicles.html0
1 7NavScan1 8filename119Any startup section0 38Added as a result of the OBSORB VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.obsorb.html0
1 6NAVUpd1 32rundll32.exe navupd.dll, Startup219Any startup section0 36Added as a result of the NAVU VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.navu.html0
229NB Common Dialog Enhancements1 12COMDLGEX.EXE119Any startup section0106Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.navu.html0
213NB Start Menu1 10STARTM.EXE119Any startup section0114Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.navu.html0
219NB Windows Patterns1 13WINDBKGND.EXE119Any startup section0122Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.navu.html0
3 3NBJ1 7NBJ.exe119Any startup section0 86Ahead Nero BackItUp b ackup program. Only required for if you have schedul ed back-ups43http://www.nero.com/en/631898241464531.html0
3 7NbkCtrl1 11NbkCtrl.exe119Any startup section0108Scheduling engine of NovaSTOR Backup S ervice. Only required if scheduling is enabled and wanted - see here66http://www.no-panic.com/backup/tech_supt/nbackup7_commandline.html0
2 3NCD1 7ncd.exe119Any startup section0136Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path66http://www.no-panic.com/backup/tech_supt/nbackup7_commandline.html0
110NDplDeamon1 25nstask32.exe winlogin.exe219Any startup section0 40Added as a result of the RANDEX.E VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.e.html0
3 4NDPS1 10DPMW32.EXE119Any startup section0139Novell Distributed Printer Services - part of Novell's Netware C lient and Groupwise p roducts. Not required if you don't use this featur e42http://www.novell.com/products /groupwise/0
2 6Necbar1 10Necbar.exe119Any startup section0 71Nec Assistant; Ark's Navigator, a graphical interface for NEC computers42http://www.novell.com/products /groupwise/0
3 8Necutray1 12Necutray.exe119Any startup section0 70Driver for external USB storage devices (hard drives, flsh disks, etc)42http://www.novell.com/products /groupwise/0
1 7Nero.ma1 10digits.exe119Any startup section0 78Added as a result of the JONBARR.D VIRUS! where digits is 2 or 3 random digits77http://securityresponse.symantec.com/avcenter/venc/data/w32.jonbarr.d@mm.html0
3 9NeroCheck1 13nerocheck.exe119Any startup section0 80Associated with "Nero Burning Rom" CD writing software. Checks for driver issues77http://securityresponse.symantec.com/avcenter/venc/data/w32.jonbarr.d@mm.html0
1 9NeroCheck1 11regedit.exe119Any startup section0314Added as a result of the DOOMJUICE.B VIRUS! Note - this is not the valid Ahead Nero CD burning program. Also it is not the va lid Windows registry editor which resides in C:\Windows or C:\Winnt wheras this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K) or C:\Windows\System32 (WinXP)81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.doomjuice.b.html0
315NeroFilterCheck1 13NeroCheck.exe119Any startup section0 80Associated with "Nero Burning Rom" CD writing software. Checks for driver issues81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.doomjuice.b.html0
1 3Net1 10WINREG.EXE119Any startup section0 41Added as a result of the ASSASIN.D VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.assasin.d.html0
320Net Activity Diagram1 7nad.exe119Any startup section0114Net Activity Diagram f rom MetaProducts. Monitors your computer internet activ ity. Available via Start - Programs58http://www.metaproducts.com/mp/mpProducts_Detail.asp?id=200
215Net-It Launcher1 12NILaunch.exe119Any startup section0 33Net-It - web publishing software22http://www.net-it.com/0
314NetAccelerator1 12NetAccel.exe119Any startup section0251NetAccelerator i s a "software utility that optimi zes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance30http://www.netaccelerator.net/0
1 6Netapi1 10Netapi.exe119Any startup section0 59Added as a result of the NETDEVIL.14 ( NetDevil 1.4) VIRUS!63http://www.megasecurity.org/trojans/n/netdevil/Netdevil1.4.html0
1 6NetApp1 11winserv.exe119Any startup section0 43Added as a result of the SHADOWTHIEF VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SHADOWTHIEF0
1 9netconfig1 13netconfig.exe119Any startup section0 39Added as a result of the NETCONF VIRUS!60http://www.pestpatrol.com/PestInfo/n/netware_trojan_v1_0.asp0
317NetCruiser Dialer1 12NCDialer.exe119Any startup section0240NetCruiser Dialer f rom NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"48http://www.netcruiser-software.com/products.html0
310Netlimiter1 14Netlimiter.exe119Any startup section0346Netlimiter - "An internet traffic control too l to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."26http://www.netlimiter.com/0
212Netline User1 10netchk.exe119Any startup section0169Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example26http://www.netlimiter.com/0
117NetManagerService1 8ntss.exe119Any startup section0 42Added as a result of the BESTPICS.A VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_BESTPICS.A0
1 6NetMon1 10netmon.exe119Any startup section0 40Added as a result of the MIMAIL.M VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.m@mm.html0
3 9NetPatrol1 13winclient.exe119Any startup section0 38NetPatrol n etwork monitoring software39http://www.digitalweb.com.br/netpatrol/0
2 9NetPerSec1 13NetPerSec.exe119Any startup section0 70NetPerSec - measures the real-time speed of your Internet connectio n48http://www.pcmag.com/article2/0,4149,1735,00.asp0
1 8NetReach1 11nrcheck.exe119Any startup section0 43Added as a result of an unidentified VIRUS!25http://www.netpumper.com/0
125Netropa Internet Receiver1 11Netropa.exe119Any startup section0105Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware25http://www.netpumper.com/0
3 6NetRun1 10NetRun.exe119Any startup section0146NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost33http://www.czarsoft.shorturl.com/0
218Netscape Messenger1 12NETSCAPE.EXE119Any startup section0456In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed33http://www.czarsoft.shorturl.com/0
325NetShow Powerpoint Helper1 12NSPPTHLP.EXE119Any startup section0 71If disabled, user created fonts can no longer be seen by other programs33http://www.czarsoft.shorturl.com/0
212NetStat Live1 7Nsl.exe119Any startup section0130AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data56http://www.analogx.com/contents/download/network/nsl.htm0
3 7NetTime1 11NETTIME.EXE119Any startup section0276From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."56http://www.analogx.com/contents/download/network/nsl.htm0
3 8NetTurbo1 12netturbo.exe119Any startup section0146NetTurbo f rom SharewareOnline.com. "Acceler ate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled24http://www.netturbo.com/0
110NetWatch321 12netwatch.exe119Any startup section0 40Added as a result of the MIMAIL.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.c@mm.html0
213Netword Agent1 11nwant33.exe119Any startup section0329An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start - Programs76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.c@mm.html0
122Network Administration1 7NAS.exe119Any startup section0 44Added as a result of the ANTILAM.20.Q VIRUS!82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.antilam.20.q.html0
342Network Associates Error Reporting Service1 9TBMon.exe119Any startup section0134Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.antilam.20.q.html0
321NetWork Device Switch1 12NetDevSW.exe119Any startup section0280Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.antilam.20.q.html0
113NetworkClient1 17NetworkClient.exe119Any startup section0 37Added as a result of the LEMUR VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lemur.html0
212NetworkSetup1 9dlink.exe119Any startup section0 24D-Link S ystem Tray icon44http://www.dlink.com/tech/faq/dlink-icon.htm0
213NetZIPFolders1 11nzfprop.exe119Any startup section0 32Netzip Classic z ip file manager78http://www.netzip.com/products/info_netzip_win.html?src=site,netzip,plugin,nzc0
121NeuroMedia(IESpeaker)1 14NeuroMedia.exe119Any startup section0202Part of an older freeware version of IESpeaker - a program that allows you to lis ten to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available25http://www.iespeaker.com/0
221NeuroSpeech OESpeaker1 13OEMonitor.exe119Any startup section0164Part of OESpeaker - a program that allows you to lis ten to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not25http://www.iespeaker.com/0
119New.netor NE WDOT~11 42rundll32.exe NewDotNetStartup Newdot~2.exe219Any startup section0175Advertising spyware, see here f or details on how to remo ve as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop b undle for example43http://www.kazaa.com/en/privacy/bundles.htm0
2 8Newsalrt1 12NEWSALRT.EXE119Any startup section0 55MSNBC News system tray utility to alert you to new news43http://www.kazaa.com/en/privacy/bundles.htm0
136Newsgroup lptt01or Ne wsgroup ml097e1 13newsgroup.exe119Any startup section0179Variant of the RapidBlaster p arasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
2 7NewsUpd1 11newsupd.exe119Any startup section0149For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start - Programs. Also spyware - see here.27http://cexx.org/newsupd.htm0
114NewtonKnowsUpd1 36NewtKnow.exe ...NewtnUpd.dll, runkey219Any startup section0 20NewtonKnow h ijacker48http://www.doxdesk.com/parasite/NewtonKnows.html0
311NFM Service1 11NPDOR9x.exe119Any startup section0157Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the su rvey to work correctly. Otherwise not required21http://www.npdor.com/0
219nForce Tray Options1 10sstray.exe119Any startup section0108nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys21http://www.npdor.com/0
3 8NGClient1 11ngctw32.exe119Any startup section0130Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually21http://www.npdor.com/0
218Nielsen NetRatings1 11insight.exe119Any startup section0259Nielsen NetRatings - "Provides real-time research and analysis abo ut Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web siteÆs audience and your customers". Is it required?53http://www.nielsen-netratings.com/mktg.jsp?section=ps0
1 7nikLaus1 11nikLaus.exe119Any startup section0 38Added as a result of the NIKLAS VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.niklas.html0
2 5NInit1 9NInit.exe119Any startup section0157Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start - Programs for manual logging - not required76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.niklas.html0
4 7nisserv1 11NISSERV.EXE119Any startup section0 24Norton Personal Firewall76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.niklas.html0
4 5Nisum1 9NISUM.EXE119Any startup section0 24Norton Personal Firewall76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.niklas.html0
1 5NJG401 9NJG40.EXE119Any startup section0 40Added as a result of the BANCOS.D VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.d.html0
210NkvMon.exe1 10NkvMon.exe119Any startup section0 67Nikon View 5 - for transferring pictures from Nikon digital cameras77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.d.html0
211NkVwMon.exe1 11NkVwMon.exe119Any startup section0 65Nikon View - for transferring pictures from Nikon digital cameras77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.d.html0
4 5NMSVC1 9nmSvc.exe119Any startup section0258Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it37http://www.covenanteyes.com/about.php0
3 5NNSvc1 9nnsvc.exe119Any startup section0 25NetNanny i nternet filter53http://www.netnanny.com/products/netnanny5/index.html0
3 9No-IP DUC1 9DUC20.exe119Any startup section0245Part of http://www.no-ip.com/&n bsp;provided serv ice. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available21http://www.no-ip.com/0
3 5NoAds1 9NoAds.exe119Any startup section0 49Blocks advertisement banners in Internet Explorer21http://www.no-ip.com/0
3 7Nod32CC1 11nod32cc.exe119Any startup section0141Control Center part of Eset's NOD32 v irus-scanner. Leave this enabled if you want t o update your virus data files via the click of a button34http://www.nod32.com/home/home.htm0
411NOD32kernel1 12Nod32krn.exe119Any startup section0 26Nod32 A ntivirus Version 234http://www.nod32.com/home/home.htm0
4 8nod32kui1 12nod32kui.exe119Any startup section0 26Nod32 A ntivirus Version 234http://www.nod32.com/home/home.htm0
4 9NOD32POP31 12Pop3scan.exe119Any startup section0 47POP3 E-mail part of Eset's NOD32 v irus-scanner34http://www.nod32.com/home/home.htm0
1 8nodriver1 11AUEKXRZ.EXE119Any startup section0 51Added as a result of a variant of the SPYBOT VIRUS!34http://www.nod32.com/home/home.htm0
224Nokia Connection Monitor1 11NclConf.exe119Any startup section0423Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start - Programs - not required34http://www.nod32.com/home/home.htm0
314NOMAD Detector1 11ctmnrun.exe119Any startup section0270Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected34http://www.nod32.com/home/home.htm0
2 9NomdCheck1 12nomdchek.exe119Any startup section0 28Part of Intel's Native Audio34http://www.nod32.com/home/home.htm0
312Norman ZANDA1 7ZLH.EXE119Any startup section0 37System Tray icon for Norman Antivirus22http://www.norman.com/0
419Norton Auto-Protect1 12navapw32.exe119Any startup section0315Norton Anti-Virus's background scanning process. Can be inconvenient because it scans files when Run/Opened or Downloaded/Created and you can scan files manually via right-click after downloading/copying. However, in light of some of the viruses around these days it's probably best to put up with the inconvenience22http://www.norman.com/0
225Norton Crashguard Monitor1 10cgmenu.exe119Any startup section0100Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 200122http://www.norman.com/0
218Norton Disk Doctor1 9Ndd32.exe119Any startup section0239Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start - Programs. Delete the shortcut in the Start - Programs - Startup folder as well22http://www.norman.com/0
420Norton eMail Protect1 11POPROXY.EXE119Any startup section0300Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it22http://www.norman.com/0
125Norton Live Update Server1 9cpsdv.exe119Any startup section0 41Added as a result of the AGOBOT.EW VIRUS!22http://www.norman.com/0
119Norton Live Updater1 12Cavapsvc.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
119Norton Live Updater1 11Sochost.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
223Norton Navigator Loader1 12nnloader.exe119Any startup section0 83An older Norton utility for file management under Windows 95. More information here58http://www.mg.co.za/mg/pc/history/dec10-nortnavigator.html0
324Norton Program Scheduler1 23nsched32.exe NPSsvc.exe219Any startup section0179Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans58http://www.mg.co.za/mg/pc/history/dec10-nortnavigator.html0
220Norton System Doctor1 12Sysdoc32.exe119Any startup section0210Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start - Programs. Delete the shortcut in the Start - Programs - Startup folder as well58http://www.mg.co.za/mg/pc/history/dec10-nortnavigator.html0
132Notepad lptt01or No tepad ml097e1 11notepad.exe119Any startup section0247Variant of the RapidBlaster p arasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
318NovastorSchedulerd1 11SCHENGD.EXE119Any startup section0113NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 8NPROTECT1 12nprotect.exe119Any startup section0182Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here 01
1 7NSCheck1 11NSCHECK.EXE119Any startup section0423Nettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start - Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe 01
1 8nsdriver1 11nssys32.exe119Any startup section0 43Added as a result of an unidentified VIRUS! 01
3 8Nsengine1 12Nsengine.exe119Any startup section0108Scheduling engine of NovaSTOR Backup S ervice. Only required if scheduling is enabled and wanted - see here66http://www.no-panic.com/backup/tech_supt/nbackup7_commandline.html0
3 8NSHelper1 22aexnsinstallhelper.exe119Any startup section0 91Altiris Express Notification Server Install helper - monitors integrity of the installation66http://www.no-panic.com/backup/tech_supt/nbackup7_commandline.html0
214NSystemMonitor1 10Symmon.exe119Any startup section0143Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start - Programs for manual logging66http://www.no-panic.com/backup/tech_supt/nbackup7_commandline.html0
118NT Logging Service1 12Syslog32.exe119Any startup section0 57Added as a result of the DONK.B o r DONK.C VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.donk. c.html0
1 5ntdll1 9ntdll.exe119Any startup section0 42Added as a result of the BIONET.404 VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.bionet.404.html0
1 5NTDLM1 9csrss.exe119Any startup section0234Added as a result of the HALE VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling as this resides in c:\winnt\system32\qossrv70http://www .liutilities.com/products/wintaskspro/processlibrary/csrss/0
4 8NTFSCLUP1 12NTFSCLUP.EXE119Any startup section0208Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting"70http://www .liutilities.com/products/wintaskspro/processlibrary/csrss/0
2 5NTrtc1 9ntrtc.exe119Any startup section0129Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here68http://www.euro.dell.com/countries/ae/enu/bsd/topics/y2k_rtctest.htm0
1 8NTsocket1 12NoeWinnt.exe119Any startup section0 39Added as a result of the ATAKA-E VIRUS!56http://www.sophos.com/virusinfo/analyses/trojatakae.html0
3 5NTVDM1 9NTVDM.EXE119Any startup section0224Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here63http://support.microsoft.com/default.aspx?scid=kb;en-us;Q2643200
1 7ntvdscm1 11ntvdscm.exe119Any startup section0 50Added as a result of the TR/SCKEYLOG.SPY.20 VIRUS!99http://support.centralcommand.com/cgi-bin/command.cfg/php/enduser/std_adp.php?p_refno=021023-0000160
416NuTCSetupEnviron1 11ncoeenv.exe119Any startup section0300Used by the MKS Toolkit for Enterprise Developers p roduct. NuTCracker is a Unix run time environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone52http://www.mkssoftware.com/products/tk/ds_tkedev.asp0
320NvCplor Nv CplDaemon1 33rundll32.exe NvCpl.dll, NvStartup219Any startup section0106Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card52http://www.mkssoftware.com/products/tk/ds_tkedev.asp0
1 8NvCplDmn1 10NAVSVC.EXE119Any startup section0 43Added as a result of an unidentified VIRUS!52http://www.mkssoftware.com/products/tk/ds_tkedev.asp0
128nvd32 lptt01or nv d32 ml097e1 9nvd32.exe119Any startup section0175Variant of the RapidBlaster p arasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 4Nvid1 208 random charachters219Any startup section0 19Unidentified adware60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 6Nvid321 10Nvid32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Nvidex321 12Nvidex32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Nvidia321 12nvidia32.exe119Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
232NvidiaQuickTweakor NV QuickTweak1 38rundll32.exe NvQtwk.dll, NvTaskbarInit219Any startup section0187System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties40http://www.merijn.org/cwschronicles.html0
3 5NVIEW1 37rundll32.exe nview.dll, nViewLoadHook219Any startup section0128This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers40http://www.merijn.org/cwschronicles.html0
212NvInitialize1 33rundll32.exe NvQtwk.dll, NvXTInit219Any startup section0117Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled40http://www.merijn.org/cwschronicles.html0
4 5NVmax1 9NVmax.exe119Any startup section0122NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card40http://www.merijn.org/cwschronicles.html0
313NvMediaCenter1 40RunDLL32.exe NvMCTray.dll, NvTaskbarInit219Any startup section0246System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties40http://www.merijn.org/cwschronicles.html0
2 4NVRT1 8nvrt.exe119Any startup section0128NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports40http://www.merijn.org/cwschronicles.html0
2 5NvSvc1 9nvsvc.exe119Any startup section0346NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that40http://www.merijn.org/cwschronicles.html0
111NvXplDeamon1 11xstyles.exe119Any startup section0 40Added as a result of the SMALL.AJ VIRUS!40http://www.merijn.org/cwschronicles.html0
2 4nwiz1 8nwiz.exe119Any startup section0233Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system40http://www.merijn.org/cwschronicles.html0
4 7Nwpopup1 11Nwpopup.exe119Any startup section0132Broadcast message handler part of Novell Netware t hat displays server, printer and other mes sages. Older version of nwrecmsg below39http://www.novell.com/products/netware/0
3 8nwrecmsg1 12nwrecmsg.exe119Any startup section0153Broadcast message handler part of Novell Netware t hat displays server, printer and other mes sages. Newer version of Nwpopup above and can cause crashes39http://www.novell.com/products/netware/0
4 6NWTRAY1 10nwtray.exe119Any startup section0132Novell Netware. Displays the red "N" tray icon which can b e disabled (by right-click on the icon) but is also needed by the client39http://www.novell.com/products/netware/0
4 8oahstifr1 12oahstifr.exe119Any startup section0307Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."31http://www.hypertextstudio.com/0
3 8OAKSTART1 12OAKSTART.EXE119Any startup section0 94Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.31http://www.hypertextstudio.com/0
2 7OAKTASK1 11OAKTASK.EXE119Any startup section0 49Taskbar utility for a "control panel" for a CD-RW31http://www.hypertextstudio.com/0
419Object Store Server1 12osserver.exe119Any startup section0307Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."31http://www.hypertextstudio.com/0
210OCAudioIni1 14OCAudioIni.exe119Any startup section0111One-click Audio Converter - allows you to convert files of mul tiple audio formats right from Windows Explorer43http://www.streamware-dev.com/products.html0
2 8ocraware1 12ocraware.exe119Any startup section0227O pt ical C ha racter R ec ognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start - Programs43http://www.streamware-dev.com/products.html0
1 5ocx321 9ocx32.exe119Any startup section0 50Added as a result of the ASTEF o r RESPAN VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
1 9od-matrxx1 13od-matrxx.exe119Any startup section0 36Adult dialler - xx can be any number76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
1 9od-stndxx1 13od-stndxx.exe119Any startup section0 36Adult dialler - xx can be any number76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
1 9od-teenxx1 13od-teenxx.exe119Any startup section0 36Adult dialler - xx can be any number76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
222OEMCLEANUPor OE MRESET1 12oemreset.exe119Any startup section0 82Resets OEM installation settings at bootup. Not required unless you're new to PC's44http://www.doxdesk.com/parasite/Xupiter.html0
2 8OEXCheck1 12EA2Check.exe119Any startup section0120Express Assist f rom AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others37http://www.ajsystems.com/oexhome.html0
125Offer Companionor Of fers1 10offers.exe119Any startup section0 19Advertising spyware37http://www.ajsystems.com/oexhome.html0
114Office Startup1 16Osa.exe Osa9.exe219Any startup section0238Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants37http://www.ajsystems.com/oexhome.html0
114Office Startup1 11Exploer.exe119Any startup section0104Added as a result of the GAOBOT.BV VIRUS! Note the different filename to the valid MS Office entry above79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bv.html0
422OfficeGuard RegChecker1 8ogrc.exe119Any startup section0 26Kaspersky Labs a nti-virus25http://www.kaspersky.com/0
222OfotoNow USB Detection1 52Rundll32.exe OFUSBS.DLL, WatchForConnection OfotoNow219Any startup section0129Autodetects when a digital camera is attached to a USB port and launches OfotoNow i mage software. Available via Start - Programs89http://www.ofoto.com/DownloadClient30.jsp?UV=673857175481_20140377403&US=0&c=f_on0
4 4ogrc1 8ogrc.exe119Any startup section0 26Kaspersky Labs a nti-virus25http://www.kaspersky.com/0
210Oil Change1 12OCTray32.exe119Any startup section0119From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start - Programs25http://www.kaspersky.com/0
1 3OLE1 8filename119Any startup section0 38Added as a result of the STAWIN VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/keylogger.stawin.html0
1 7Olehelp1 11Olehelp.exe119Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
1 4Omf41 8OMF4.EXE119Any startup section0 40Added as a result of the FREEMEGA VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.freemega.html0
210OmgStartup1 14omgstartup.exe119Any startup section0 63Sony program called OpenMG Jukebox - player and music organizer77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.freemega.html0
3 9OmniHTTPd1 10ohttpd.exe119Any startup section0 35OmniHTTPd w eb server from Omnicron29http://www.omnicron.ca/httpd/0
2 8OmniPage1 12Opware32.exe119Any startup section0440Part of OmniPage Pro f rom Scansoft (was Caere) - "the fastest, easiest way to turn paper documents into digital files you can edit." Opware32.exe links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start - Programs33http://www.scansoft.com/omnipage/0
3 8OmniPass1 12scureapp.exe119Any startup section0 65OmniPass from Softex Inc. - secure password management sof tware25http://www.softexinc.com/0
217On Screen Display1 7OSD.EXE119Any startup section0263By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume, etc. Nice but not required if you don't adjust things regularly - can also freeze25http://www.softexinc.com/0
248OneTouchMonitoror On e Touch Monitoror ON ETOU~21 43OneTouchMonitor.exe 1tou~2.exe ONETOU~2.EXE219Any startup section0 88For Visioneer OneTouch scanners. System tray access to the control panel for the scanner25http://www.softexinc.com/0
1 6Onflow1 10onflow.exe119Any startup section0 96Onflow is a internet company that offers an online advertising program. Not required - uninstall25http://www.softexinc.com/0
114Online Service1 11svchost.exe119Any startup section0178Added as a result of the HOSTIDEL.B o r TARNO.B VIRUSES! This is not the valid svchost.exe as described here. Located in a Windows\Tasks directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
324OnlinePCfix SmoothSurfer1 6SS.exe119Any startup section0 83Smooth-Surfer - blocks banners, ads, popups, and cleans MRU and Recent file lists29http://www.smooth-surfer.com/0
210OnlineTime1 14onlinetime.exe119Any startup section0119OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulti ng costs90http://www.freedownloadscenter.com/Network_and_Internet/Online_Timers/OnlineTimer_Pro.html0
213OP12 Reminder1 8Ereg.exe119Any startup section0 56Registration reminder for OmniPage Pro 12 f rom ScanSoft33http://www.scansoft.com/omnipage/0
1 9Open Site1 10opnste.exe119Any startup section0 17Adware - see here76http://securityresponse.symantec.com/avcenter/venc/data/adware.opensite.html0
216OpenOffice.org x1 12QUICKS~1.EXE119Any startup section0348Displays OpenOffice q uick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start - Programs. Will automatically be started when any OpenOffice component is started from Start - Programs. A resource hog (takes 16 MB of memory). "x" represents the version number26http://www.openoffice.org/0
3 8Operator1 9xtmop.exe119Any startup section0124Fax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported26http://www.openoffice.org/0
2 7OpiStat1 11OPISTAT.EXE119Any startup section0105OpiStat i s a European Research Institute whose goal is to understand consumer needs and opinions better36http://www.opistat.com/mp/index.html0
1 7OPQFile1 30regedit.exe /s ...rad03FA6.tmp219Any startup section0122Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit36http://www.opistat.com/mp/index.html0
214Optimum Online1 11Netsurf.exe119Any startup section0 95Optimum Online I SP software. Not required, just window dressing & advertising from Optimum98http://www.optimumonline.com/index.jhtml;jsessionid=5LMI3XSXKRAYYCQLARQCF3QKBMCGCI5G?pageType=what0
2 8Opware121 12Opware12.exe119Any startup section0 30OmniPage Pro 12 f rom ScanSoft33http://www.scansoft.com/omnipage/0
111OrbitUpdate1 10update.exe119Any startup section0 50Xupiter OrbitExplorer t oolbar, drive-by foistware44http://www.doxdesk.com/parasite/Xupiter.html0
318OrigRage128Tweaker1 16RAGE128TWEAK.EXE119Any startup section0 85Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com/31http://www.rageunderground.com/0
3 7ORiNOCO1 9Cmluc.exe119Any startup section0 57Client Manager software for an ORiNOCO w ireless LAN card31http://www.orinocowireless.com/0
1 5Osa321 11NTOSA32.exe119Any startup section0 36Added as a result of the ANIG VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.anig.html0
1 8OSSProxy1 12OSSPROXY.EXE119Any startup section0431Part of Nettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start - Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.anig.html0
314OStivityInvAgt1 12ostivity.exe119Any startup section0366OStivity - "a desktop and server hardware and software asset/ inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system"42http://www.somix.com/products/ostivity.php0
416Outpost Firewall1 11outpost.exe119Any startup section0 26Outpost p ersonal firewall40http://www.agnitum.com/products/outpost/0
314OWCCardbusTray1 11ocbtray.exe119Any startup section0142Icon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface23http://www.overnet.com/0
311OWCWebCamDV1 12wcdvtray.exe119Any startup section0106WebCamDV f rom Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam40http://www.orangemicro.com/webcamdv.html0
1 6OWMngr1 10OWMngr.exe119Any startup section0 73OnWebMedia advertising foistware - see here f or exactly what to look for45http://www.f-secure.com/v-descs/checkin.shtml0
214P2P NETWORKING1 35P2P Networking.exe p2pautostart.exe219Any startup section0 51Peer to Peer (P2P) sharing of files on the internet45http://www.f-secure.com/v-descs/checkin.shtml0
1 7P3p4chk1 11P3p4chk.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
334Pagekeeper Jobsor Pa gekeeper Lite1 10pkjobs.exe119Any startup section0237PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 6PAgent1 10PAgent.exe119Any startup section0299Scans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found. See here f or more info49http://and.doxdesk.com/parasite/DownloadWare.html0
215Pagis Scheduler1 11Monitor.exe119Any startup section0 60Scheduler for the Pagis s canning suite from Scansoft. 30http://www.scansoft.com/pagis/0
2 5Pagoo1 9PAGOO.EXE119Any startup section0181Pagoo - internet call waiting. Intercepts tele phone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem27http://www.pagoo.com/cc.asp0
2 8Palm.exe1 8Palm.exe119Any startup section0 90Palm Desktop Software f or use with Palm handheld devices. Available via S tart - Programs54http://www.palm.com/support/downloads/win_desktop.html0
219PaltalkNetaware.exe1 14PALNETAW~1.EXE119Any startup section0335Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start - Programs. Delete the shortcut in Start - Programs - StartUp as well otherwise it will be reinstated54http://www.palm.com/support/downloads/win_desktop.html0
315Panda Scheduler1 12pavsched.exe119Any startup section0227Panda Antivirus s can scheduler. Required if this is your virus scanner program and you have scans scheduled on a regular basis. I recommend that you scan manually so you don't need this but if you tend to forget then leave it29http://www.pandasoftware.com/0
2 9Paperport1 12runppdrv.exe119Any startup section0128Loads the drivers associated with monitoring scanner status associated with PaperPort software. Can be a resource hog - see here 01
227PaperQuote System Tray Icon1 10PQTRAY.EXE119Any startup section0 99PaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation 01
1 5Patch1 9patch.exe119Any startup section0 38Added as a result of the NETBUS VIRUS!49http://www.norman.com/virus_info/w32_netbus.shtml0
1 7PAV.EXE1 8%Number%119Any startup section0 82Added as a result of the KITRO.D ( or ARGEN.A) VIRUS!. %Number% can be any number89http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ARGEN. A&VSect=T0
312PC Alert III1 9alert.exe119Any startup section0119MSI PC Alert III - allows you to view your system and cpu temperature, fan rpm and more. Only required if you overclock29http://www.pandasoftware.com/0
310PC Booster1 13pcbooster.exe119Any startup section0209PC Booster f rom inKline Global - "easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"52http://www.inklineglobal.net/products/pcb/index.html0
111PC-Config321 10corona.exe119Any startup section0 41Added as a result of the CORONEX.A VIRUS!57http://www.sophos.com/virusinfo/analyses/w32coronexa.html0
419PCBODYGUARDor PC BG1 15PCBODYGUARD.EXE119Any startup section0 98PC Bodyguard f rom Calluna - protects system files and settings from being deleted, modified, etc34http://www.calluna.com/pcbody.html0
412PCCIOMON.EXE1 12PCCIOMON.EXE119Any startup section0 67PC-Cillin 2000 antivirus software. This is the actual virus-scanner34http://www.calluna.com/pcbody.html0
4 6PccPfw1 10PccPfw.exe119Any startup section0 32PC Cillin 2003 personal firewall34http://www.calluna.com/pcbody.html0
2 9PCHbutton1 13PCHbutton.exe119Any startup section0 26Used by HP Instant Support34http://www.calluna.com/pcbody.html0
2 8PCHealth1 11pchschd.exe119Any startup section0 86This is a "scheduler" and does not turn off PC Health. For more information refer here 01
113PCHEasySearch1 12STUpdate.exe119Any startup section0 18PCH EasySearch bar 01
3 7PCLEPCI1 7ppe.exe119Any startup section0131Pinnacle Systems PCI Performance Enhancer. "This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards." 01
2 7PCStart1 9Pcm25.exe119Any startup section0200Runs as part of PCMonitor w hich is a program for monitor ing your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big21http://pcmonitor.com/0
2 4Pcsv1 9pcsvc.exe119Any startup section0 67Delfin Promulgate - adware based media viewer by The Delfin Project43http://www.delfinproject.com/services.shtml0
2 6PcSync1 10PcSync.exe119Any startup section0251If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start - Programs43http://www.delfinproject.com/services.shtml0
3 6pctspk1 10pctspk.exe119Any startup section0210Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions43http://www.delfinproject.com/services.shtml0
3 8PCTVOICE1 12pctvoice.exe119Any startup section0193The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. ItÆs better to leave it43http://www.delfinproject.com/services.shtml0
3 8PDEngine1 12PDEngine.exe119Any startup section0105PerfectDisk f rom Raxco - disk defragmenter. Only required if yo u schedule disk defragmenting at re-boot44http://www.raxco.com/products/perfectdisk2k/0
2 7pdexplo1 11PDEXPLO.EXE119Any startup section0 93PowerDesk Pro b y Ontrack. Enhanced des ktop and file manager. Available via Start - Programs33http://www.ontrack.com/powerdesk/0
228pdfFactory Pro Dispatcher v11 11fppdis1.exe119Any startup section0155"With pdfFactory y ou can create PDF documents from any program printi ng to the virtual PDF printer". Available via a desktop shortcut or Start - Programs44http://www.fineprint.com/software/index.html0
2 7PDirect1 11PDirect.exe119Any startup section0 34IBM Presentation Director software44http://www.fineprint.com/software/index.html0
310pdp Server1 13ctpdpsrvr.exe119Any startup section0173Included and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network44http://www.fineprint.com/software/index.html0
211Pe2ckfnt SE1 11chkfont.exe119Any startup section0165Used to check whether the fonts are installed properly on your computer or not for a scanner. If you don't want to execute it, you can uncheck it in the startup menu44http://www.fineprint.com/software/index.html0
314Pent@VALUE 3.21 14Pent@VALUE.exe119Any startup section0 49Pent@VALUE Digital Satellite Internet PC Receiver44http://www.fineprint.com/software/index.html0
212PerfectPrint1 12pfppop70.exe119Any startup section0 60Print engine used by Corel WordPerfect 7 and Presentations 739http://www.perantivirus.com/antivir.htm0
4 6PersFw1 10PersFw.exe119Any startup section0 33Kerio o r Tiny P ersonal Firewall45http://www.tinysoftware.com/home/tiny2 ?la=EN0
330Pervasive.SQL Workgroup Engine1 12W3dbsmgr.exe119Any startup section0241Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup45http://www.tinysoftware.com/home/tiny2 ?la=EN0
325PestPatrol Control Center1 13PPControl.exe119Any startup section0 96PestPatrol Control Terminal - launches PestPatrol f eatures such as PPMemCheck and CookiePatrol38http:// www.pestpatrol.com/default.asp0
1 8PgMonitr1 12PgMonitr.exe119Any startup section0 47Adware based media viewer by The Delfin Project43http://www.delfinproject.com/services.shtml0
4 9PGPSDKSVC1 14pgpsdkserv.exe119Any startup section0382PGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality43http://www.delfinproject.com/services.shtml0
310PGPSERVICE1 14pgpservice.exe119Any startup section0538PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a "fall-back" mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference43http://www.delfinproject.com/services.shtml0
2 7PGPtray1 11pgptray.exe119Any startup section0109PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start - Programs43http://www.delfinproject.com/services.shtml0
228Phime2002aor PH IME2002ASync1 12TINTSETP.EXE119Any startup section0108Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word43http://www.delfinproject.com/services.shtml0
321PhoneFree version 6.21 12PHONEF??.EXE119Any startup section0110An Internet telephony application. Complicated registration and ad banners tailored to your profile - see here25http://www.phonefree.com/0
233Photo Express Calendar Checker SE1 12CALCHECK.EXE119Any startup section0253If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper, Photo Express will replace the wallpaper automatically. Photo Express 2.0 has a calendar checker which checks the date on your system and updates your wallpaper accordingly25http://www.phonefree.com/0
224Photo Loader supervisory1 10Plauto.exe119Any startup section0129Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures25http://www.phonefree.com/0
219PhotoWise QuickLink1 12quicklnk.exe119Any startup section0267Agfa PhotoWise - "PhotoWise QuickLinkTM lets you drag and drop photos right from the camera into your document (applications must be OLE-compliant). Use PhotoWise to print contact sheets and photographic prints. Create slide shows, screen savers, wallpaper and more."25http://www.phonefree.com/0
221Picasa Media Detector1 23PicasaMediaDetector.exe119Any startup section0 54Media detector for Picasa's automatic photo organizer22http://www.picasa.net/0
2 8Pickatag1 12pickatag.exe119Any startup section0224Pick-a-tag - "Freeware utility for random selection of your ta glines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages"43http://home.wanadoo.nl/jeroen/software.html0
2 7PICPRTR1 11PICPRTR.EXE119Any startup section0 66Program for viewing and measuring a variety of 3D CAD data formats43http://home.wanadoo.nl/jeroen/software.html0
215pictureBUZZTray1 10swtray.exe119Any startup section0183System Tray access to PictureBUZZ o n-line printing software from Str eetwise Software. If you use the software set the page you use as a favourite in your browser and run it manually27http://www.picturebuzz.com/0
3 7PiDunHK1 11PIDUNHK.EXE119Any startup section0218Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens27http://www.picturebuzz.com/0
2 6Pinger1 10pinger.exe119Any startup section0197Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification50http://www.sunbelt-software.com/product.cfm?id=9300
419PinnacleDriverCheck1 14PSDrvCheck.exe119Any startup section0179Part of Pinnacle Systems I nstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled27http://www.pinnaclesys.com/0
213PivotSoftware1 10wpctrl.exe119Any startup section0150PivotPro from Portrait Studios - allows a screen to be ro tated to match rotated LCD screens, for example). Shortcut available via Display Properties24http://www.portrait.com/0
1 7Pixel321 11Pixel32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
110Pixelpwr321 14Pixelpwr32.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Pixelsvr1 12Pixelsvr.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
3 8pjWebCam1 12pjWebCam.exe119Any startup section0 96Webcam automation software that saves regular photos from webcam and can also act as HTTP server72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
311PLEAPCPUCPL1 10pleapu.exe119Any startup section0 48CPU Control Panel f or the Powerleap CPU upgrade41http://www.powerleap.com/Products/ccp.htm0
2 6Plguni1 10Plguni.exe119Any startup section0 72McAfee QuickClean 3.0 - removes internet clutter and unwanted p rograms44http://www.mcafee.com/myapps/qc3/default.asp0
1 4Plob1 10kernel.com119Any startup section0 43Added as a result of the OPTIXPRO.12 VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.120
3 8PLXSTART1 12PLXSTART.EXE119Any startup section0127Sets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW.80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.120
2 7PLXTASK1 11PLXTASK.EXE119Any startup section0203Taskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files)80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.120
1 6PMedia1 11winsrvc.exe119Any startup section0140Internet marketing sofware from PMedia a s used in E-Card FriendGreetings fo istware - see here. Treated by Trend as the FRIENDGRT.B VIRUS!81http://www.trendmicro. com/vinfo/virusencyclo/default5.asp?VName=WORM_FRIENDGRT.B0
2 8PMTSHOOT1 12pmtshoot.exe119Any startup section0 53MS tool for troubleshooting power management problems81http://www.trendmicro. com/vinfo/virusencyclo/default5.asp?VName=WORM_FRIENDGRT.B0
3 7PMXInit1 11pmxinit.exe119Any startup section0135Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma 81http://www.trendmicro. com/vinfo/virusencyclo/default5.asp?VName=WORM_FRIENDGRT.B0
2 7PNAgent1 11PNAgent.exe119Any startup section0 65PhatNoise Music Manager - manages WMA, MP3, WAV, etc music files60http://www.phatnoise.com/products/software/music_manager.php0
115PNtask Services1 10pntask.exe119Any startup section0 38Added as a result of the LALA.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lala.c.html0
1 7Pofatch1 10nstrue.exe119Any startup section0 40Added as a result of the RANDEX.Z VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w32.randexz.html0
318point32or PO INTER1 11point32.exe119Any startup section0130Microsoft Intellipoint s oftware for their Intellimouse se ries of mice - required if you use non-standard Windows driver features38http://www.microsoft.com/intellipoint/0
214Points Manager1 18points manager.exe219Any startup section0225Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required26http://www.altnet.com/faq/0
1 3POP1 13PopSrv***.exe119Any startup section0 75PeopleonPage f oistware, bundled with Grokster where *** are random digits48http://www.pchell.com/support/peopleonpage.shtml0
314Pop-Up Stopper1 9dpps2.exe119Any startup section0322Pop-Up Stopper C ompanion from Panicware. Pop-up blocker integrat ed into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group45http://www.popupstopper.net/product_dpps.html0
314Pop-Up_Blocker1 9Popup.exe119Any startup section0136A Tweak-XP c omponent, blocks advertisement p op-up windows in Internet Explorer. Can be enabled/disabled via Tweak-XP - Internet Tweaks23http://www.tweakxp.com/0
3 7Popopen1 11popopen.exe119Any startup section0 62PopOpen m akes your windows spring open with animation effects49http://www.jsmadeeasy.com/archive/shellutilities/0
4 7Poproxy1 11POPROXY.EXE119Any startup section0300Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it49http://www.jsmadeeasy.com/archive/shellutilities/0
1 9popsrv1461 13popsrv146.exe119Any startup section0125PeopleOnPage online dating browser enhancement - also adware and privacy issues, see here. For removal instructions see here49http://www.pchell.com/su pport/peopleonpage.shtml0
310PopUpWatch1 14PopUpWatch.exe119Any startup section0189Part of BPS Trace Remover - made by the folks who "developed" BPS Spyware Remover which reportedly uses an old, "borrowed" SpyBot database. Read this a nd this. Do not suppor t these guys!66http://www.lavasoftsupport.com/index.php?act=ST&f=1&t=39120
219Post-It(r) Software1 11Psnotes.exe119Any startup section0 63Pop-up "yellow" notes on screen. Available via Start - Programs66http://www.lavasoftsupport.com/index.php?act=ST&f=1&t=39120
110Power Scan1 13powerscan.exe119Any startup section0 84Foistware by Integrated Search Technologies - the people behind the ISTbar p arasite42http://217.115.153.73/parasite/ISTbar.html0
410PowerChute1 12Pwrchute.exe119Any startup section0379"During a power outage, if you're not available to save your files & close down Windows....PowerChute will do that for you. PowerChute will save your application files, close your applications and shut down your computer just like you would...otherwise, the APC UPS (Uninterruptible Power Supply) unit would go to battery until it wore down, then your computer would shutoff"42http://217.115.153.73/parasite/ISTbar.html0
316PowerDOCSAPIHost1 12papihost.exe119Any startup section0149Hummingbird PowerDOCS - "delivers powerful enterprise document managemen t functionality via a tightly integrated Microsoft WinNT/98/2K environment"53http://www.imageware.ch/tr/products/dms/powerdocs.jsp0
2 8PowerDVD1 12PowerDVD.exe119Any startup section0161Launches Cyberlink's PowerDVD software and creates a system tray icon. If enabled, PowerDVD will open automatically when a DVD movie is inserted. Launch manually53http://www.imageware.ch/tr/products/dms/powerdocs.jsp0
3 8PowerKey1 12PowerKey.exe119Any startup section0 87Part of Acer L aunch Manager - programmable keys on such laptops as the TravelMate 61023http://global.acer.com/0
115PowerManagement1 11Rundlll.exe119Any startup section0 38Added as a result of the SURDUX VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.surdux.html0
112PowerManager1 11Svchost.exe119Any startup section0 96Added as a result of the JEEFO VIRUS! Note - this is not the valid svchost.exe as described here68http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
410PowerPanel1 12POWPANEL.EXE119Any startup section0100Power management utility on notebooks/laptops - automatically switches modes when running on battery68http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
112PowerPrifile1 38rundl132 kenel.dll, PowerProfileEnable219Any startup section0 38Added as a result of the INMOTA VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.inmota.worm.html0
3 8PowerPro1 12powerpro.exe119Any startup section0158Part of the power professional program that loads the floating menu bar. Can be accessed from Start - Programs, but I'd leave it alone if you use this program76http://securityresponse.symantec.com/avcenter/venc/data/w32.inmota.worm.html0
226PowerQuest Startup Utility1 10PQINIT.EXE119Any startup section0302From a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems"76http://securityresponse.symantec.com/avcenter/venc/data/w32.inmota.worm.html0
218PowerReg Scheduler1 22PowerReg Scheduler.exe219Any startup section0114PowerREGISTER f rom Leadertech. Registration reminder as u sed by Iomega, Hasbro & Microprose - amongst others38http://www.leadertech.com/register.htm0
220PowerReg SchedulerV21 24PowerReg SchedulerV2.exe219Any startup section0114PowerREGISTER f rom Leadertech. Registration reminder as u sed by Iomega, Hasbro & Microprose - amongst others38http://www.leadertech.com/register.htm0
210PowerStrip1 25powerstrip.exe PSTRIP.EXE219Any startup section0 97PowerStrip i s a Video Mode Editor to allow special Re fresh Rates and Tweaking of Video Settings34http://www.entechtaiwan.com/ps.htm0
310Powertweak1 7PT2.EXE119Any startup section0322"Powertweak i s designed to configure your syst em in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Use predefined settings' is enabled in the programs options26http://www.powertweak.com/0
310Powertweak1 10PTCTRL.EXE119Any startup section0324"Powertweak i s designed to configure your syst em in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Configure system at logon' is enabled in the programs options26http://www.powertweak.com/0
2 9PP****usb1 12FBDirect.exe119Any startup section0282Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start - Programs26http://www.powertweak.com/0
318PP2000 Instaupdate1 12PPInupdt.exe119Any startup section0140Protector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually26http://www.powertweak.com/0
421PP2000 Real Time Scan1 11PPVstop.exe119Any startup section0 54Protector Plus anti-virus software - real time scanner26http://www.powertweak.com/0
422PP2000 Taskbar Control1 9PPTbc.exe119Any startup section0 55Protector Plus anti-virus software - system tray access26http://www.powertweak.com/0
2 7PP3100b1 11flatbed.exe119Any startup section0184Twain driver for the Visioneer PaperPort 3100b scanner that allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop26http://www.powertweak.com/0
3 5ppass1 11Antispy.exe119Any startup section0164AntiSpy f irewall - "program designed to combat against various types of intrus ion and monitoring programs currently in use or presently being developed worldwide"59http://www.antivirus-program.com/antivirus_program/antispy/0
3 9PPControl1 13PPControl.exe119Any startup section0 96PestPatrol Control Terminal - launches PestPatrol f eatures such as PPMemCheck and CookiePatrol38http:// www.pestpatrol.com/default.asp0
317PPK Setup(Server)1 11SEServe.exe119Any startup section0286Programmable Power Key on Sony Vaio laptops. "Using the Programmable Power Key (PPK) button, collect your e-mail automatically with one key stroke. You can also program your PPK to turn on your SuperSlim Notebook at a predetermined time and perform simple tasks - completely unattended"38http:// www.pestpatrol.com/default.asp0
310PPMemCheck1 14ppmemcheck.exe119Any startup section0171PPMemCheck - "extends PestPatrol's power so that the most dangerous Pests -- th ose that are about to execute -- are found, terminated, and cleaned from a user's system"38http://www.pestpatrol.com /default.asp0
2 8PProTray1 12pprotray.exe119Any startup section0 69Part of the power professional program. Loads the System Tray control38http://www.pestpatrol.com /default.asp0
3 8PPUpdate1 13ppupdater.exe119Any startup section0256PPUpdater - "is the update program that ships with PestPatrol. It is able to update licensed and evaluation versions, and presents a visual display of what it is doing". Run manually unless you think you'll forget to check for updates on a regular basis37http://www.pestpatrol.com/default.asp0
2 9PPWWebCap1 12PPWebCap.exe119Any startup section0 45"PaperPort" software associated with scanners37http://www.pestpatrol.com/default.asp0
1 8pqhelper1 12pqhelper.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
312PractiSearch1 11PSearch.exe119Any startup section0 33PractiSearch w eb search software28http://www.practisearch.com/0
316Praize Messenger1 10itLoad.exe119Any startup section0 43Praize IM C hristian chat instant messenger25http://www.praize.com/IM/0
228Precision Time Clock Checker1 17PrecisionTime.exe119Any startup section0128Precision Time 2.0. Checks your computer clock time against the Naval Obse rvatory or some other source to assure accurate time55http://www.ubr.com/clocks/timesw/prectime/prectime.html0
1 8Premeter1 17nrpr.exe prmt.exe219Any startup section0410NetRatings software by Opistat. "OpiStat measures Internet usage anonymously a nd surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!36http://www.opistat.com/mp/index.html0
212Price Patrol1 7neo.exe119Any startup section0 92Price Patrol b y Half.com - internet shopping companion for finding the best on-line prices39http://corp.half.ebay.com/20010612.html0
315Primax 3D Mouse1 123dmoused.exe119Any startup section0 56Enables the scroll button on the Primax 3-D Scroll mouse25http://www.primascan.com/0
227Print Master Event Reminder1 12PMremind.exe119Any startup section0 78Print Master Gold - calander feature that pops up reminders, such as birthdays25http://www.primascan.com/0
219Print Screen Deluxe1 12psdeluxe.exe119Any startup section0 94Utility allows "Print Scrn" or "Print Screen" key to capture, print or save the current window25http://www.primascan.com/0
113print sharing1 9start.bat119Any startup section0 37Added as a result of the ZCREW VIRUS!55http://www.sophos.com/virusinfo/analyses/trojzcrew.html0
113print sharing1 32hidden32.exe (path) explorer.exe219Any startup section0100Added as a result of the ZCREW.B VIRUS! Note - this is not the valid Windows Explorer (explorer.exe)81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.zcrew.b.html0
113Print Spooler1 11Spoolsv.exe119Any startup section0174Added as a result of the CIADOOR.B VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in Sys tem32, like the legitimate Spoolsv.exe system file79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ciadoor.b.html0
113Print Spooler1 14spoolsvc32.exe119Any startup section0 40Added as a result of the SDBOT.BB VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.BB0
1 7Printer1 14Spyassault.exe119Any startup section0 51Dubious "spyware killer" - see here. To be avoided80http://www.spywareinfo.com/yabbse/index.php?board=9;action=display;threadid=46960
112PrinterSpool1 29...\RESTORE.EXE ...\SPOOL.EXE219Any startup section0 41Added as a result of the ALADINZ.K VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.k.html0
212Printkey20001 16printkey2000.exe119Any startup section0108Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.k.html0
2 8printnow1 12printnow.exe119Any startup section0126PrintNow - a utility that primarily allows "Print Srceen" or "Alt+P rint Screen" screenshots to be sent directly to a printer48http://www.pcmag.com/article2/0,4149,8418,00.asp0
2 8PrinTray1 12Printray.exe119Any startup section0179Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray48http://www.pcmag.com/article2/0,4149,8418,00.asp0
211PrintScreen1 10UNWISE.EXE119Any startup section0 75Gadwin PrintScreen - utility to capture, print or save the c urrent window34http://www.gadwin.com/printscreen/0
214Printscreen 951 12PRT95MIN.EXE119Any startup section0 71Printscreen 95 - utility to capture, print or sa ve the current window29http://www.printscreen95.com/0
218Privacy Eraser Pro1 17PrivacyEraser.exe119Any startup section0125Privacy Eraser Pro - protects your Internet priv acy by cleaning up all Internet history tracks and past computer activities29http://www.privacyeraser.com/0
3 7Privoxy1 11privoxy.exe119Any startup section0217Privoxy - web proxy with advanced filterin g capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk23http://www.privoxy.org/0
111PrizeSurfer1 15prizesurfer.exe119Any startup section0159"PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware23http://www.privoxy.org/0
1 4prmt1 8prmt.exe119Any startup section0410NetRatings software by Opistat. "OpiStat measures Internet usage anonymously a nd surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!36http://www.opistat.com/mp/index.html0
322Pro PCL Status Monitor1 10PENGSS.EXE119Any startup section0 72Xerox printer/fax/copier status monitor (PCL = printer control language)36http://www.opistat.com/mp/index.html0
1 7procmon1 11procmon.exe119Any startup section0 42Added as a result of the BIONET.40A VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.bionet.40a.html0
2 6ProDsl1 10ProDsl.exe119Any startup section0 75Intel Pro/DSL 2100 modem connection manager. Available via Start - Programs80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.bionet.40a.html0
1 7Profile1 11Profile.vbs119Any startup section0 52Added as a result of the WHITEHO o r TRAPPY VIRUSES!75http://securityresponse.symantec.com/avce nter/venc/data/vbs.trappy@mm.html0
2 8Profiler1 12Profiler.exe119Any startup section0125Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start - Programs22http://www.saitek.com/0
112Program File1 11Progmon.exe119Any startup section0 38Added as a result of the PEEPER VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.peeper.html0
118Program In Windows1 12IEXPLORE.EXE119Any startup section0231Added as a result of the LOVGATE.F VIRUS! Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) wheras the valid "iexplore.exe" (IE) resides in C:\Program Files78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOVGATE.F0
210Promon.exe1 10promon.exe119Any startup section0 96System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOVGATE.F0
110PromulGate1 12PgMonitr.exe119Any startup section0 47Adware based media viewer by The Delfin Project43http://www.delfinproject.com/services.shtml0
212PRONoMgr.exe1 12PRONoMgr.exe119Any startup section0 96System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features43http://www.delfinproject.com/services.shtml0
318Propel Accelerator1 12PropelAC.exe119Any startup section0 28Propel I nternet Accelerator22http://www.propel.com/0
315ProPort Startup1 11ProPort.exe119Any startup section0166Proport i s a port monitor/protector. Monitors an i nfinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving31http://www.tdupage.com/main.htm0
311PRPCMonitor1 10PRPCUI.exe119Any startup section0226Intel« SpeedStepÖ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%31http://www.tdupage.com/main.htm0
3 3PS21 7ps2.exe119Any startup section0129Multimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost.31http://www.tdupage.com/main.htm0
117PSD Tools Channel1 13ChannelUp.exe119Any startup section0 18BuddyLinks a dware76http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=1010070
410PSDrvCheck1 14PSDrvCheck.exe119Any startup section0179Part of Pinnacle Systems I nstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled27http://www.pinnaclesys.com/0
3 6PSFree1 10PSFree.exe119Any startup section0317Pop-Up Stopper Free f rom Panicware. Pop-up blocker integrated i nto the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group44http://www.panicware.com/product_psfree.html0
227PSIWin2.3 Connection Server1 11Psconsv.exe119Any startup section0110Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start - Programs44http://www.panicware.com/product_psfree.html0
3 8PsMFCard1 12PsMFCard.exe119Any startup section0359Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use44http://www.panicware.com/product_psfree.html0
4 8PSNotify1 12psnotify.exe119Any startup section0163Pharos SignUp Vx - "PC reservation and management applicatio n that addresses the PC scheduling needs of public libraries and higher education labs and libraries"41http://www.pharos.com/Products/SignUp.asp0
3 8PspContr1 12pspcontr.exe119Any startup section0201Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver41http://www.pharos.com/Products/SignUp.asp0
3 7PsSound1 11PsSound.exe119Any startup section0118On a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay41http://www.pharos.com/Products/SignUp.asp0
2 4ptfb1 8ptfb.exe119Any startup section0156Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"41http://www.bobos.demon.co.uk/par/PTFB.htm0
3 6pttrun1 10pttrun.exe119Any startup section0109Transmeta Crusoe processor related. Reduces application launch times and makes the computer "more responsive"41http://www.bobos.demon.co.uk/par/PTFB.htm0
2 8PtUDFApp1 12PtUDFApp.exe119Any startup section0240Sony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start - Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar41http://www.bobos.demon.co.uk/par/PTFB.htm0
3 9Purgative1 16PURGATIVE100.EXE119Any startup section0 89AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack41http://www.bobos.demon.co.uk/par/PTFB.htm0
211Push Client1 8pull.exe119Any startup section0 62Client software from Interwise t hat MS use for their webcasts43http://www.interwise.com/products/iCast.asp0
224Push The Freakin' Button1 8ptfb.exe119Any startup section0156Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"41http://www.bobos.demon.co.uk/par/PTFB.htm0
2 8PUSH65991 12PUSH6599.EXE119Any startup section0119Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software41http://www.bobos.demon.co.uk/par/PTFB.htm0
1 6PutA!!1 10PutA!!.exe119Any startup section0 41Added as a result of the OPASERV.L VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.L0
1 6PutAS!1 10PutA!!.com119Any startup section0 41Added as a result of the OPASERV.Z VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.Z0
1 5putil1 8filename119Any startup section0 39Added as a result of the LDPINCH VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.ldpinch.html0
2 3PVR1 7PVR.exe119Any startup section0134Pocket Voice Recorder - freeware sound record er that records from microphone and any other input line available with your sound card26http://www.xemico.com/pvr/0
1 8Pwr32ctr1 12Pwr32ctr.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 9Pwr32ctrl1 13Pwr32ctrl.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Pwr32mgt1 12Pwr32mgt.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
4 8Pwrmonit1 21Rundll32 PwrMonit.dll219Any startup section0 79IBM's proprietary 'battery maximiser' and power monitoring software for laptops72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 6Pwroff1 10Pwroff.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
3 7Pwrsave1 11Pwrsave.exe119Any startup section0102Toshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
312PwrupTweakMe1 12PUPXPTWK.EXE119Any startup section0342"Ashampoo PowerUp XP i s a convenient tool for fine-tuning your Windows« NT4, 2000 and XP configurati on to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want." Boot-up options won't work if disabled 71http://www.ashampoo.com/frontend/products/php/product.php?idstring=01050
3 8PWS Tray1 11PwsTray.exe119Any startup section0219Microsoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start - Programs71http://www.ashampoo.com/frontend/products/php/product.php?idstring=01050
2 7Q1524041 22wsript.exe Q152404.VBS219Any startup section0 44Appears to run Scandisk at bootup on NEC PCs 01
2 6QAGENT1 10qagent.exe119Any startup section0320Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled, background downloading takes advantage of unused bandwidth to download current financial information anytime your computer is connected to the Internet 01
212QBCD autorun1 11autorun.exe119Any startup section0 14Quick Books CD 01
1 8qbkupdbs1 10mqbkup.exe119Any startup section0 41Added as a result of the OPASERV.K VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.k.worm.html0
1 5qbotd1 8filename119Any startup section0 38Added as a result of the BOTTEN VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/downloader.botten.html0
3 6QCTRAY1 10Qctray.exe119Any startup section0213System Tray icon providing access to the "IBM Access Connections" wizard on ThinkPad laptops and also allows to change the network environment. Not the same as QCWLIcon, which is pertinent only to the Wireless LAN78http://securityresponse.symantec.com/avcenter/venc/data/downloader.botten.html0
3 8QCWLICON1 12Qcwlicon.exe119Any startup section0173Used by IBM Thinkpad laptops with built-in wireless card (802.11). System Tray icon that provides a shortcut to "Wireless Connection Status" and allows to turn WL on and off78http://securityresponse.symantec.com/avcenter/venc/data/downloader.botten.html0
214QD FastAndSafe1 10QDCSFS.exe119Any startup section0182Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually78http://securityresponse.symantec.com/avcenter/venc/data/downloader.botten.html0
315QDMor QD MStart1 12QdmStart.exe119Any startup section0227QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc78http://securityresponse.symantec.com/avcenter/venc/data/downloader.botten.html0
2 6QNPlus1 10QNPlus.exe119Any startup section0 53Quick Notes Plus b y Conceptworld - sticky notes tool35http://www.conceptworld.com/qnp.asp0
3 9Qoeloader1 13Qoeloader.exe119Any startup section0143Qurb 2.0 a nti-spam tool for Outlook/Out look Express. Required when supporting OE but not for Outlook. Shortcut available via Start - Programs20http://www.qurb.com/0
1 2QQ1 12sendmess.exe119Any startup section0 37Added as a result of the SEMES VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.semes.html0
2 9QSort20001 9QSORT.EXE119Any startup section0162Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.semes.html0
3 7QT4HPOT1 12OneTouch.exe119Any startup section0 82Hewlett Packard One Touch keyboard driver. Required if you use the additional keys75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.semes.html0
312QTaskStartup1 9qtask.exe119Any startup section0196Feature of Quicken.com Brokerage to customize and display Desktop Alerts a nd icon. It is not required for the Quicken Program to run correctly, it is only r equired for the Desktop Alerts feature79http://www.quicken.com/support/investments/email/help/?desktop.q.howdoi&pop0
210QTSTUB.EXE1 10Qtstub.exe119Any startup section0119Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders79http://www.quicken.com/support/investments/email/help/?desktop.q.howdoi&pop0
2 6qttask1 10Qttask.exe119Any startup section0 72System Tray access to Apple's "Quick Time" viewer from version 5 onwards79http://www.quicken.com/support/investments/email/help/?desktop.q.howdoi&pop0
214Quick Shelf xx1 13qushelfxx.exe119Any startup section0139Places an icon in the system tray for launching MS Bookshelf. Available via Start - Programs"xx" represents the version number - ie, 98, 9933http://www.quickheal.com/qh95.htm0
413Quick Startup1 12Fquick32.exe119Any startup section0 93For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone31http://www.nisis.com/index.html0
215Quick View Plus1 9QVP32.EXE119Any startup section0 96Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start - Programs31http://www.nisis.com/index.html0
225QuickBooks Delivery Agent1 12QBDAGENT.EXE119Any startup section0 78As far QAGENT but for QuickBooks. Can also have the version number in the name31http://www.nisis.com/index.html0
223Quickbooks Update Agent1 12qbupdate.exe119Any startup section0189Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not31http://www.nisis.com/index.html0
311QuickCamPro1 15QuickCamPro.exe119Any startup section0124System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example, auto FTP Upload, etc31http://www.nisis.com/index.html0
1 7quicken1 31quicken.exe Waol.exe Winrar.exe219Any startup section0 99CoolWebSearch p arasite variant. Note! - this is not the fil e zipping utility also known as WinRAR22http://www.rarlab.com/0
221QuickFinder Scheduler1 25QFSCHD100.exe QFSched.exe219Any startup section0156Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)22http://www.rarlab.com/0
413QuickLaunchEr1 17QuickLaunchEr.Exe119Any startup section0 87QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray42http://www.rikster.co.uk/QuickLauncher.htm0
213Quicklink III1 6QL.EXE119Any startup section0219HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode, that is, to receive faxes after a certain number of rings. Available via Start - Programs42http://www.rikster.co.uk/QuickLauncher.htm0
2 9Quicknote1 13quicknote.exe119Any startup section0 38JC&MB Quicknote V irtual Scrapbook51http://www.metz-furniere.de/jens/jcmb/quicknen.html0
313QuickPassword1 12agquickp.exe119Any startup section0 69Smart card-based authentication and digital signature client software51http://www.metz-furniere.de/jens/jcmb/quicknen.html0
2 8QuickRes1 12QUICKRES.EXE119Any startup section0210Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel - Display. Not required unless you have to change resolutions on a regular basis51http://www.metz-furniere.de/jens/jcmb/quicknen.html0
2 8quickset1 12quickset.exe119Any startup section0 57Dell taskbar icon allowing you to quickly change settings51http://www.metz-furniere.de/jens/jcmb/quicknen.html0
117Quicktime Pro 3.01 12winuodps.exe119Any startup section0 41Added as a result of the GAOBOT.BH VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bh.html0
214QuickTime Task1 10Qttask.exe119Any startup section0 72System Tray access to Apple's "Quick Time" viewer from version 5 onwards79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.bh.html0
114QuickTime Task1 11qttasks.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
229QuickTime Update Completion x1 25quicktimeupdatehelper.exe119Any startup section0111Different numbers caused by number of launches. So if 3 updates are made separately, 3 would appear (in theory)40http://www.merijn.org/cwschronicles.html0
3 7QuickTV1 11QuickTV.exe119Any startup section0142Infra-red remote control driver for the AVerTV Studio T V tuner/personal video recoder from AVerMedia. Required if y ou use the remote control56http://www.aver.com/products/tvtuner_AVerTV_studio.shtml0
2 8QuikSync1 12QUIKSYNC.EXE119Any startup section0 53Used by Iomega drives. Available via Start - Programs99http://groups.google.com/groups?num=50&hl=en&lr=&ie=UTF-8&oe=UTF-8&q=quikshield0
1 9RA Server1 9Slave.exe119Any startup section0 34Added as a result of the RA VIRUS!46http://www.avp.ch/avpve/trojan/backdoor/ra.stm0
115RabbitWannaHome1 10rabbit.exe119Any startup section0 40Added as a result of the MIMAIL.S VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.s@mm.html0
3 7RadBoot1 11RadBoot.exe119Any startup section0110RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.s@mm.html0
3 7RAMASST1 11RAMASST.exe119Any startup section0290Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.s@mm.html0
3 6RAMDef1 10ramdef.exe119Any startup section0198Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. Some users swear by programs such as this but I suggest you read this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
3 7RamIdle1 11ramidle.exe119Any startup section0434RAM Idle - "A smart memory management program that wil l keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." Some users swear by programs such as this but I suggest you read this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
3 7RAMpage1 11RAMpage.exe119Any startup section0317Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source34http://www.aumha.org/a/memmgmt.htm0
4 6RapApp1 10RAPAPP.EXE119Any startup section0198Application protection component of BlackICE PC Protection ( was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch49http://blackice.iss.net/product_pc_protection.php0
112RapidBlaster1 8rb32.exe119Any startup section0 62Homepage hijacker (adult content) - see this n ewsgroup thread 01
413Raptor Mobile1 15vpnservices.exe119Any startup section0161Symantec V PN Client used to connect to corp orate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking24http://www.symantec.com/0
1 8rate.exe1 12i11r54n4.exe119Any startup section0 94Added as a result of the BEAGLE.E o r BEAGLE.F o r BEAGLE.G o r BEAGLE.H o r BEAGLE.I VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.i@mm.htm l0
4 8RAV8Tray1 12ravtray8.exe119Any startup section0 23RAV a nti-virus related37http://www.ravantivirus.com/index.php0
114RAVEN_VLZS.EXE1 14RAVEN_VLZS.EXE119Any startup section0 74Another eAcceleration program - spyware. Read their privacy statement here37http://www.eacceleration.com/privacy/0
1 7RavTime1 10Mstray.exe119Any startup section0 40Added as a result of the WUKILL.A VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_WUKILL.A0
218Ray Process Killer1 10Prkill.exe119Any startup section0178Ray Process Killer - clicking right mouse button pro duces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead33http://www.delphi32.com/vcl/4248/0
126rb32 lptt01or rb 32 ml097e1 8rb32.exe119Any startup section0182Variant of the RapidBlaster p arasite (in a "RapidBlaster" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
112rbenh ml***e1 9rbenh.exe119Any startup section0214Variant of the RapidBlaster p arasite (in a "RBEnhance" folder in Program Files) whe re *** represents random digits. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 6RCSync1 10RCSync.exe119Any startup section0180PrizeSurfer related. "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 4RDLL1 12RunDll16.exe119Any startup section0 39Added as a result of the SDBOT.F VIRUS!64http://www.symantec.com/avcenter/venc/data/backdoor.sdbot.f.html0
119Real player updater1 11realupd.exe119Any startup section0 38Added as a result of the PARLAY VIRUS!43http://vil.nai.com/vil/content/v_100830.htm0
1 9Real-Tens1 13Real-Tens.exe119Any startup section0 38DownloadWare b ased advetising spyware49http://www.doxdesk.com/parasite/DownloadWare.html0
212RealDownload1 12RealPlay.exe119Any startup section0 48Download manager. Available via Start - Programs49http://www.doxdesk.com/parasite/DownloadWare.html0
225Reality Fusion GameCam SE1 10RFTRay.exe119Any startup section0116System Tray access for Logitech's Reality Fusion GameCam. For more details see here. Available via Start - Programs49http://www.realityfusion.com/gamecam/bethere.html0
218RealJukeboxSystray1 12tsystray.exe119Any startup section0 32System Tray icon for RealJukebox49http://www.realityfusion.com/gamecam/bethere.html0
134realplay lptt01or re alplay ml097e1 12realplay.exe119Any startup section0250Variant of the RapidBlaster p arasite (in a "RealPlay" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not RealPlayer which can have the same executable name60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
2 9Realsched1 13realsched.exe119Any startup section0294Application Scheduler installed along with RealOne Player. Runs independently of R ealOne Player, to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. If it can't be disabled try deleting or renaming realsched.exe and then delete the entry in the registry20http://www.real.com/0
416Realtime Monitor1 11realmon.exe119Any startup section0104Realtime scanner part of eTrust Antivirus/InoculateIT v ersion 6 virus scanners from Computer Associates96http://www1.my-etrust.com/?CFID=6909348&CFTOKEN=43ce20d-0001f1aa-f6e5-1d77-be1e-2f0eac14303f0
2 8RealTray1 12RealPlay.exe119Any startup section0230System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling SmartCenter via Preferences96http://www1.my-etrust.com/?CFID=6909348&CFTOKEN=43ce20d-0001f1aa-f6e5-1d77-be1e-2f0eac14303f0
111RealUpdater1 11realupd.exe119Any startup section0 38Added as a result of the PARLAY VIRUS!43http://vil.nai.com/vil/content/v_100830.htm0
2 6Reboot1 10Reboot.exe119Any startup section0118MS-DOS/Win3.1 utility use to clean boot a system. Sometimes installed by default from some driver CDs for motherboards43http://vil.nai.com/vil/content/v_100830.htm0
4 8Recguard1 12recguard.exe119Any startup section0258On HP computers, Recguard prevents the deletion or corruption of the WinXP Recovery Partition. Without it enabled, it is possible to knock that completely out and force the customer to send the PC back to HP for a re-image, possibly at the customer's expense43http://vil.nai.com/vil/content/v_100830.htm0
2 6Reclip1 10reclip.exe119Any startup section0 31Reclip Popup Clipboard m anager36http://lockettefamily.com/reclip.htm0
159Recommended Hotfix - {0421701D-CF13-4E70-ADF0-45A953E7CB8B}1 6RH.DLL119Any startup section0 17SmartPops a dware54http://www.doxdesk.com/parasite/NetworkEssentials.html0
2 8Red Flag1 11redflag.exe119Any startup section0 74PMS prediction program with modes for guys and girls - no longer available54http://www.doxdesk.com/parasite/NetworkEssentials.html0
121Red Swoosh EDN Client1 15RSEDNClient.exe119Any startup section0270Red Swoosh - mechanism used by web sites to allow you to download files from those sites quicker and more efficiently. Note from the license agreement t hey automatically update the software and share non-personally identifiable information with others in the network47http://www.redswoosh.com/rsednclient_eula.phtml0
1 8redirect1 13redirect*.exe119Any startup section0 72Dotcomtoolbar/Linksummary hijacker installer - where * is a random digit47http://www.redswoosh.com/rsednclient_eula.phtml0
215Redline Taskbar1 11taskbar.exe119Any startup section0103Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards47http://www.redswoosh.com/rsednclient_eula.phtml0
3 7Referee1 11referee.exe119Any startup section0143MediaComm's m onitor for file association c hanges. Stop rogue programs from screwing your settings either on installation or whenever they run23http://www.mc1soft.com/0
2 7Refresh1 11Refresh.exe119Any startup section0 60(Iomega) Refresh - loads the Iomega desktop icons at startup23http://www.mc1soft.com/0
1 5Reg321 9Reg32.exe119Any startup section0 42Hijacker - redirecting to only-virgins.com43http://wizardscc.com/passthison_warning.asp0
1 8Regcheck1 11~CAB001.EXE119Any startup section0 40Added as a result of the CYBERSPY VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_CYBRSPY.13A0
110RegCleaner1 11SYSio32.exe119Any startup section0131Added as a result of an unidentified virus VIRUS!. Note - do not confuse this with the popular RegCleaner registry cleaner freeware80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_CYBRSPY.13A0
110RegCompres1 12Regcpm32.exe119Any startup section0 39Added as a result of the POLDO.B VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.poldo.b.html0
1 7regedit1 11regedit.exe119Any startup section0232Added as a result of the BRID.A VIRUS! Note - resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), o r C:\Windows\System32 (WinXP). The valid "regedit.exe" resides in C:\Windows (Win9x/Me/XP) or C:\Winnt (WinNT/2K)74http://securityresponse.symantec.com/avcenter/venc/data/w32.brid.a@mm.html0
1 7REGEDIT1 12Regsrv32.com119Any startup section0 42Added as a result of the SOUTHGHOST VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.southghost.html0
223Register MediaRing Talk1 12register.exe119Any startup section0 88If you don't want to register MediaRing and be reminded about it every bootup disable it80http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.southghost.html0
319RegisterDropHandler1 12REGIST~1.EXE119Any startup section0646Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation 39http://www.nvdi.com/whertra/w950812.htm0
221Registration-Studio 81 11RegTool.exe119Any startup section0 85Registration for Pinnacle Studio Version 8 h ome video software from Pinnacle Systems75http://www.pinnaclesys.com/ProductPage_n.asp?Product_ID=577&Langue_ID=20
1 8Registry1 11wscript.exe119Any startup section0 37Added as a result of the VBSWG VIRUS!75http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_VBSWG.AQ0
115Registry Loader1 12regloadr.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
116Registry Scanner1 12regscanr.exe119Any startup section0 58Added as a result of the OPTIX LITE FIREWALL BYPASS VIRUS!73http://www.megasecurity.org/trojans/o/optix/Optixlite_firewallbypass.html0
117Registry Services1 12Registry.exe119Any startup section0 47Added as a result of the DOWNLOADER.CILE VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/trojan.downloader.cile.html0
111RegistryChk1 13winbackup.exe119Any startup section0 39Added as a result of the MERTIAN VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mertian.worm.html0
4 7RegProt1 11Regprot.exe119Any startup section0 91RegistryProt f rom Diamond Computer Systems - protects the system r egistry against changes47http://www.diamondcs.com.au/web/htm/regprot.htm0
4 7Regrun21 12WatchDog.exe119Any startup section0169Greatis Software's RegRun 3 S ecurity Suite which amongst other things re places MSCONFIG. The WatchDog check for registry changes caused by trojan's, viruses, etc 34http://www.greatis.com/regrun3.htm0
2 8RegShave1 12regshave.exe119Any startup section0236Part of the USB driver for your Fuji digital cameras - used when uninstalling the USB drivers, erasing all entries from the registry. Only required BEFORE attempting to uninstall the Fuji software or the uninstall may not work correctly34http://www.greatis.com/regrun3.htm0
1 6regsrv1 10regsrv.exe119Any startup section0 43Added as a result of the OPTIXPRO.11 VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.110
1 8regsvc321 12regsvc32.exe119Any startup section0 69Homepage hijacker that changes your homepage to an adult content site80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.110
3 8REGSVR321 23regsvr32.exe ctasio.dll219Any startup section0165ASIO ( Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality69http://www.soundblaster.com/resources/read.asp?articleid=60&cat=20
3 8RegTweak1 10RegTwk.exe119Any startup section0172Rage3d Tweak - ATI Radeon tweaker which allows acc ess to registry tweak options, custom display modes, refresh rates and overclocking all through an easy to use interface31http://www.rage3d.com/r3dtweak/0
1 6RegVer1 10REGVER.EXE119Any startup section0 42Added as a result of the LATINUS.16 VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_LATINUS.160
1 8RegWrite1 9csrss.exe119Any startup section0193Added as a result of the SOKACAPS VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling70http://www .liutilities.com/products/wintaskspro/processlibrary/csrss/0
1 7Reg_WFT1 11Regsysw.com119Any startup section0 38Added as a result of the WILSEF VIRUS!71http://securityresponse.symantec.com/avcenter/venc/data/w32.wilsef.html0
310ReleaseRAM1 8RRAM.exe119Any startup section0202"Release RAM a llows your computer to run faste r and uses your computer's RAM more efficiently". Some users swear by programs such as this but I suggest you read this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
1 6reload1 10reload.vbs119Any startup section0 45Added as a result of the LOVELETTER.AS VIRUS!42http://vil.nai.com/vil/content/v_98684.htm0
238reminder-ScanSoft Product Registration1 12remind32.exe119Any startup section0 61Registration reminder for ScanSoft products such as PaperPort42http://vil.nai.com/vil/content/v_98684.htm0
313Remote Access1 10rnaapp.exe119Any startup section0200Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie, analogue 56K modem) and terminates after the connection is closed32http://www.beiley.com/remind-me/0
119Remote Access Slave1 12Synchost.exe119Any startup section0 38Added as a result of the RIPJAC VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ripjac.html0
323Remote Management Agent1 11zenrc32.exe119Any startup section0224Part of Novell's ZENworks - "Complete End-to-End Directory-enabled Network M anagement". Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation40http://www.novell.com/products/zenworks/0
313remote master1 17remote master.exe219Any startup section0 92Required if you want your ASUS Remote control to work at all. Available via Start - Programs40http://www.novell.com/products/zenworks/0
129Remote Procedure Call Locator1 33RUNDLL32.EXE reg678.dll ondll_reg219Any startup section0 41Added as a result of the LOVGATE.F VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOVGATE.F0
312RemoteCenter1 9RcMan.exe119Any startup section0112Remote control for Creative MediaSource - plays back music in DVD-Audio, MP3, WMA, WAV and other media formats40http://www.soundblaster.com/mediasource/0
313RemoteControl1 10rmctrl.exe119Any startup section0242Remote Control background application for CyberLink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one40http://www.soundblaster.com/mediasource/0
212Remote_Agent1 15RemoteAgent.exe119Any startup section0175Cyberlink Power VCR II 3.0 i s a TV tuner rec ording utility. If you want to schedule recordings, you will need this, otherwise can be disabled. Available via Start - Programs25http://www.cyberlink.com/0
2 9Removecpl1 13Removecpl.exe119Any startup section0 64Related to a Belkin 54Mbps Wireless Utility Control Panel applet25http://www.cyberlink.com/0
317RepliGo Assistant1 14RepliGoMon.exe119Any startup section0105Cerience RepliGo s oftware - "any document you have on your PC can be transf erred to your mobile device"47http://www.cerience.com/docs/ppc/docs/index.htm0
220Resolution Assistant1 10matcli.exe119Any startup section0559Dell Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Resolution Assistant is required to run with the Help and Support program. If you uncheck Resolution Assistant and and then run Help and Support it will add another Resolution Assistant in the startup menu. If you remove the Resolution Assistant in the add/remove program some help menus in help and support will not be available. You decide47http://www.cerience.com/docs/ppc/docs/index.htm0
214Resource Meter1 11rsrcmtr.exe119Any startup section0152Windows Resource Meter. Available via Start - Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes47http://www.cerience.com/docs/ppc/docs/index.htm0
410RestoreIT!1 11VBPTASK.EXE119Any startup section0189RestoreIT! f rom FarStone "allows you to recover instantly your files, s ystem configuration, and even your operating system, to any point in time prior to the data loss or system failure."52http://www.farstone.com/home/en/html/productsvbp.htm0
1 7restory1 11restory.exe119Any startup section0 38Added as a result of the RETSAM VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.retsam.html0
311Resume Copy1 12copyfstq.exe119Any startup section0233Part of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut down. Not required if your not using the program or don't care about that function28http://ranvik.net/totalcopy/0
315ResumeFixClocks1 13resumefix.exe119Any startup section0 78Part of the RadeonTweaker u tility for overclocking ATI Radeon graphi cs cards37http://radeontweaker.sourceforge.net/0
318RetrieverScheduler1 22retrieverscheduler.exe119Any startup section028580-20 Retriever f rom 80-20 - "80-20 Retriever is a powerful personal sear ch tool that encompasses email folders, archived email, and local or network file systems, giving users one point of fast, accurate search for all personal information". Real-time scheduler - shortcut available54http://www.80-20.com/products/one-search/retriever.asp0
2 8RexSyMon1 12rexsymon.exe119Any startup section0116Intellisync for REX sychronization software for Xircom REX MicroPDAs f or sharing information between the PDA and PC52http://support.intel.com/support/peripherals/xc/pda/0
1 6RFTray1 10RFTRay.exe119Any startup section0220Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start - Programs52http://support.intel.com/support/peripherals/xc/pda/0
216RFX_auto_upgrade1 25rundll32.exe npvpg005.dll219Any startup section0118A browser plugin called the RichFX player. Here i s a link to download RichFX's solution to remo ving the auto upgrade47http://download.richfx.com/player/uninstall.exe0
3 2RH1 8rh32.exe119Any startup section0 51EuroFonts - adds Euro symbols to pre-Euro computers47http://download.richfx.com/player/uninstall.exe0
2 8RHSI SHS1 7SHS.exe119Any startup section0234Rogers Hi-Speed Internet s oftware. "Should you ever lose access to your Rogers Hi-Speed Intern et connection or e-mail, the Self-Healing Software (SHS.exe) will automatically repair your settings to get you up and running in a flash"75http://www.rogershelp.com/help/content/download/software/softwareinfo.shtml0
316Ring Central Fax1 14rcenterrll.exe119Any startup section0 58Only needed if you want a PC to answer faxes automatically75http://www.rogershelp.com/help/content/download/software/softwareinfo.shtml0
1 9rIOphosIs1 13rIOPHosIs.vBS119Any startup section0 38Added as a result of the RIOSYS VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w97m.riosys.html0
335RivaTuneror Ri vaTunerStartupDaemon1 13RivaTuner.exe119Any startup section0 80RivaTuner f or tweaking nVidia graphics cards. R equired if you make any changes28http://guru3d.com/rivatuner/0
3 6rmctrl1 10rmctrl.exe119Any startup section0242Remote Control background application for CyberLink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one28http://guru3d.com/rivatuner/0
2 5rmmon1 11mprmmon.exe119Any startup section0 81Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card28http://guru3d.com/rivatuner/0
3 9RNBOStart1 12sentstrt.exe119Any startup section0317Program used to initialise the VxD virtual driver for Sentinel drivers associated with Rainbow H/W keys that plug-in to the parallel port. These are usually supplied with workplace design tools and restrict the use of the software only to the machine to which the H/W key is connected. Required if you have such tools46http://www.sigmadesigns.com/products/xcard.htm0
2 8RoboForm1 19RoboTaskBarIcon.exe119Any startup section0162Roboform - password manager and web form filler. Will work without this startup entry, as the "active" component is an integrated Internet Explorer browser plugin77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ranky.c.html0
215RoboFormWatcher1 19RoboFormWatcher.exe119Any startup section0 99AI Roboform f rom Siber Systems. Automatically com pletes web forms. Available via Start - Programs30http://www.siber.com/roboform/0
311Rocket.Time1 14RocketTime.exe119Any startup section0 50Time synchronization software from Rocket Software51http://www.rocketsoftware.com/products/download.htm0
217RoxioAudioCentral1 9RxMon.exe119Any startup section0233Part of Roxio EasyCD Creator 6.0 - places the Roxio AudioCentral icon in you system tray. "Includes a player, media manager, ripper, tag and sound editor - integrated in a single application". Not required for Roxio to work properly.78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_WOMANIZ.A0
215RoxioDragToDisc1 12DrgToDsc.exe119Any startup section0239Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_WOMANIZ.A0
418RoxioEngineUtility1 11EngUtil.exe119Any startup section0110Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_WOMANIZ.A0
3 4RP321 8rp32.exe119Any startup section0116ControlIT ( was Remotely Pos sible) from Enterprise International for remote control and access to Win9x/NT systems. 01
4 9RPCSS.exe1 9rpcss.exe119Any startup section0463Remote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se, a program may need it to communicate with other components of itself. You could delete the program but if any abnormalities occur soon after then reinstall. Under NT, deleting this critical system component will disable the OS. For a more detailed explanation see here27http://www.cexx.org/rpc.htm0
1 7RRMedic1 11rrmedic.exe119Any startup section0227Troubleshooting utility for the RoadRunner c able internet service. Not requ ired and you are advised to completely uninstall it. Provides a lot of false alarms and gets a lot of people panicking about there internet connection24http://www.rr.com/rdrun/0
3 6rscmpt1 10rscmpt.exe119Any startup section0196Required on the GeFroce 64 meg MX card to show the full 64 meg memory and appears to be a software memory emulator running under the Win2K - see here. High CPU useage results - hence the U status56http://www.guru3d.com/comments.php?category=1&id=6730
3 6rsMenu1 10rsMenu.exe119Any startup section0 40Synchronizes a Casio PDA with MS Outlook56http://www.guru3d.com/comments.php?category=1&id=6730
3 8RuLaunch1 12RuLaunch.exe119Any startup section0194Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis56http://www.guru3d.com/comments.php?category=1&id=6730
112Run MSupdt321 20wscript MSupdt32.vbs219Any startup section0 37Added as a result of the CASER VIRUS!60http://www.symantec.com/avcenter/venc/data/vbs.caser@mm.html0
318Run StartupMonitor1 18StartupMonitor.exe119Any startup section0171Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu40http://www.mlin.net/StartupMonitor.shtml0
2 4run=1 9cmmpu.exe119Any startup section0212MIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as part of the software for a Guillemot Maxi Muse sound card (PCI)40http://www.mlin.net/StartupMonitor.shtml0
2 4run=1 8hpfsched119Any startup section0218HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature40http://www.mlin.net/StartupMonitor.shtml0
2 4run=1 12lxdboxcp.exe119Any startup section0102Lexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS40http://www.mlin.net/StartupMonitor.shtml0
4 4run=1 12smsrun16.exe119Any startup section0225Microsoft Systems Management Server (SMS) related - program that reads SMSRUN16.INI on clients running Win 3.1, Windows for Workgroups, Win95, or OS/2 to create program groups on the client and then launch SMS client programs40http://www.merijn.org/cwschronicles.html0
3 8RunAlert1 12AService.exe119Any startup section0114MSI MOtherboard PC Alert III - MSI motherboard monitoring software. Onl y required if you "overclock" your system52http://www.msi.com.tw/program/products/pro_index.php0
2 5runAP1 9runAP.exe119Any startup section0 29Not required but w hat is it?52http://www.msi.com.tw/program/products/pro_index.php0
1 8Runapp321 12Runapp32.exe119Any startup section0 39Added as a result of the NEODURK VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.neodurk.html0
1 8Rund1l321 13Winfi1e32.exe119Any startup section0 39Added as a result of the MERTIAN VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mertian.worm.html0
1 8rundl3321 22math.exe ...pluged.exe219Any startup section0 41Added as a result of the DOOMJUICE VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.doomjuice.html0
1 8rundli321 12rundli32.exe119Any startup section0 36Added as a result of the LADE VIRUS!69http://securityresponse.symantec.com/avcenter/venc/data/w32.lade.html0
1 9rundll###1 66die.exe and either ttg.exe or secure.exe or mdll.exe or secure.bat219Any startup section0 72Added as a result of the SUMTAX VIRUS! where ### is 134, 569, 777 or 94676http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sumtax.html0
1 8Rundll161 12Rundll16.exe119Any startup section0 43Added as a result of any number of VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sumtax.html0
1 8Rundll321 12Rundll32.exe119Any startup section0121Added as a result of the DVLDR VIRUS! Note - this is not the valid "Rundll32.exe" as it's in the Windows\Fonts director y75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html0
2 8RUNDLL321 32RUNDLL32.EXE NvQtwk, NvCplDaemon219Any startup section0287This loads the System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html0
2 8RunDLL321 40RunDLL32.exe NvMCTray.dll, NvTaskbarInit219Any startup section0187System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html0
1 8RunDLL321 13winupdate.exe119Any startup section0 47Unidentified VIRUS! - possibly a BMBOT v ariant62http://www.symantec.com/avcenter/venc/data/backdoor.bmbot.html0
1 8Rundll321 11Windows.exe119Any startup section0 40Added as a result of the QQPASS.E VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html0
1 8Rundll321 37Rundll32.exe ptipbm.dll, SetWriteBack219Any startup section0136Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. If used is it requ ired?80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html0
1 8rundll321 12path_to_worm119Any startup section0 37Added as a result of the AUTEX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.autex.worm.html0
1 8rundll321 9csrss.exe119Any startup section0190Added as a result of the GUTTA VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling70http://w ww.liutilities.com/products/wintaskspro/processlibrary/csrss/0
216Rundll32 cmicnfg1 32Rundll32 cmicnfg.cpl, CMICtrlWnd219Any startup section0163System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start - Settings - Control Panel70http://w ww.liutilities.com/products/wintaskspro/processlibrary/csrss/0
112Rundll32.exe1 22Proyecto1.exe Root.exe219Any startup section0 37Added as a result of the GRUEL VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.gruel@mm.html0
110Rundll32_81 38rundll32.exe inetp60.dll, DllRunServer219Any startup section0 28BrowserAid p arasite variant47http://www.doxdesk.com/parasite/BrowserAid.html0
1 8rundll641 12path_to_worm119Any startup section0 37Added as a result of the AUTEX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.autex.worm.html0
114Rundllsystem321 18Rundllsystem32.exe119Any startup section0 42Added as a result of the NETDEVIL.B VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_NETDEVIL.B0
3 7RunOnce1 11RUNONCE.EXE119Any startup section0 66Part of MS Data Access Components - only required if you use these79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_NETDEVIL.B0
1 7RunProg1 10Server.exe119Any startup section0 42Added as a result of the OPTIX.04.A VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIX.04.A0
1 7RunProg1 8wini.exe119Any startup section0 42Added as a result of the OPTIX.04.D VIRUS!67http://www.symantec.com/avcenter/venc/data/backdoor.optix.04.d.html0
3 9RunSysd321 13RunSysd32.exe119Any startup section0223DesktopShield2000 by Stephane Groleau. Locks the desktop at bootup so that users cannot bypass the Windows screensaver password. Only essential if using the program and is an optional setting. It can be disabled from within67http://www.symantec.com/avcenter/venc/data/backdoor.optix.04.d.html0
116RunWindowsUpdate1 12uptodate.exe119Any startup section0 32BrowserAid/BrowserPal f oistware47http://www.doxdesk.com/parasite/BrowserAid.html0
1 6Run[0]1 11syscnfg.exe119Any startup section0158Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside47http://www.doxdesk.com/parasite/BrowserAid.html0
1 6Run_cd1 10Run_cd.exe119Any startup section0 40Added as a result of the GHOST.23 VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_GHOST.230
1 3RVP1 7bpc.exe119Any startup section0 67Spyware included with the latest version of Grokster. Also see here89http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=4585;start=00
2 6S3TRAY1 10S3Tray.exe119Any startup section0135S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start- Settings - Control Panel - Display44http://www.antivirus.com.au/radmin/info.html0
3 3S4F1 7S4F.exe119Any startup section0 32S4F i nternet filtering software43http://www.s4f.com/home/filterpak/index.asp0
1 8s4helper1 12s4helper.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
2 7Sa3dsrv1 11Sa3dsrv.exe119Any startup section0 303D sound extension for Windows54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
211Sabreserver1 11SABSERV.EXE119Any startup section0 71Airline reservation software from Sabre. Available via Start - Programs54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
2 8SAClient1 10RegCon.exe119Any startup section0273AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
215SafeInstall.exe1 12SAFEIN~1.EXE119Any startup section0 89Monitors a download and ensures an newer version of a file isn't replaced by an older one54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
2 7SafeOFF1 11SafeOff.exe119Any startup section0108Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
110SafeSearch1 14safesearch.exe119Any startup section0 28AutoSearch p arasite variant47http://www.doxdesk.com/parasite/AutoSearch.html0
117SafeSurfingUpdate1 12SSUpdate.exe119Any startup section0 34DyFuCa/MoneyTree p arasite variant54http://www.doxdesk.com/parasite/InternetOptimizer.html0
3 9Safeworld1 11Freedom.exe119Any startup section0 27SafeWorld Internet Security72http://www.safeworldsoftware.com/products/is2003_features.html/SafeWorld0
214SAgent2ExePath1 11SAgent2.exe119Any startup section0 70Seiko Epson printer status agent. Disable if printer is not used often72http://www.safeworldsoftware.com/products/is2003_features.html/SafeWorld0
1 5sagnt1 9sagnt.exe119Any startup section0 21Adware web downloader72http://www.safeworldsoftware.com/products/is2003_features.html/SafeWorld0
2 8SandIcon1 12SandIcon.exe119Any startup section0394SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources50http://home.houston.rr.com/samware/samcal_body.htm0
3 8SAUpdate1 12SAUpdate.exe119Any startup section0 61Big Brother f rom Quest Software. S ystem and network monitor15http://bb4.com/0
4 8SAVAgent1 12SAVAgent.exe119Any startup section0181Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users15http://bb4.com/0
1 4Save1 8Save.exe119Any startup section0 48Rebranded version of SaveNow advertising spyware15http://bb4.com/0
1 7Savenow1 11SaveNow.exe119Any startup section0 85Advertising spyware. Installed as part of the Kazaa Media Desktop b undle for example43http://www.kazaa.com/en/privacy/bundles.htm0
316Say The Time 5.01 11SAYTIME.EXE119Any startup section0172This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.spreda.b.html0
224SB Audigy 2 Startup Menu1 3eng119Any startup section0169Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.spreda.b.html0
111SB Watchdog1 14SBWatchdog.exe119Any startup section0199Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here f or more information51http://trek.thesteveco.com/slashnot.cgi?article=3290
3 8SBDrvDet1 9SBDrv.exe119Any startup section0156Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one51http://trek.thesteveco.com/slashnot.cgi?article=3290
1 4SBHC1 8sbhc.exe119Any startup section0 45SuperBar p arasite - uninstall available here55http://www.giga techsoftware.com/superbaruninstall.html0
2 4SBMX1 8sbmx.exe119Any startup section0 79SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)55http://www.giga techsoftware.com/superbaruninstall.html0
2 2sc1 11scrubxp.exe119Any startup section0 85ScrubXP - utility that deletes safe to remove files, cookies, b rowsing history, etc44http://www.bartdart.com/modules/mydownloads/0
1 4scan1 10mscman.exe119Any startup section0204Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"56http://www.rhombustechnologies.com/watchdog_software.htm0
1 8ScanDisk1 12ScanDisk.exe119Any startup section0117Added as a result of the GANDA.A VIRUS! Note - this is not the valid "ScanDisk" Win9x/Me standard disk err or checker62http://www.symantec.com/avcenter/venc/data/w32.ganda.a@mm.html0
216Scanner Detector1 11SDetect.exe119Any startup section0287ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button29http://www.pandasoftware.com/0
1 7Scanreg1 8filename119Any startup section0 40Added as a result of the QQPASS.E VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html0
112ScanRegistry1 10nsrvnt.exe119Any startup section0187Added as a result of the NERTE VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows f ile. This version has the executable as nsrvnt.exe not scanregw.exe75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.nerte.html0
112ScanRegistry1 12scanregv.exe119Any startup section0194Added as a result of the MASTERLOCK VIRUS!. Not to be confused with the real ScanRegis try below - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe42http://vil.nai.com/vil/content/v_98023.htm0
412ScanRegistry1 12Scanregw.exe119Any startup section0223Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:\Windows or C:\Winnt)42http://vil.nai.com/vil/content/v_98023.htm0
2 8SCardSvr1 12scardsvr.exe119Any startup section0 72Related to SmartCard readers and sometimes uses lots of system resources74http://securityresponse.symantec.com/avcenter/venc/data/w32.stator@mm.html0
1 8SCardSvr1 14SCardSvr32.Exe119Any startup section0 39Added as a result of the MOFEI.B VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MOFEI.B0
1 6scheck1 12scheck**.exe119Any startup section0 66Added as a result of the KETCH VIRUS! where ** represents a number75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ketch.html0
221Scheduled Maintenance1 25Scheduled_Maintenance.exe119Any startup section0163Scheduler for Iolo System Mechanic t weaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start - Programs20http://www.iolo.com/0
116Scheduling Agent1 13Scheduler.exe119Any startup section0120Added as a result of the SUBWOOFER VIRUS! Note - this is not the real MS Scheduling agent as the executable is incorrect79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.subwoofer.html0
115SchedulingAgant1 10MMTASK.EXE119Any startup section0 98Added as a result of the YAB.A VIRUS! Not the valid MusicMatch Jukebox which has the same filename74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_YAB.A0
315SchedulingAgent1 22mstask.exe mstinit.exe219Any startup section0235MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_YAB.A0
3 8Schmaili1 12Schmaili.exe119Any startup section0 52Schmaili - insert animated smilies into your e-mail33http://www.schmaili.com/index.htm0
4 8SCHWIZEX1 12SCHWIZEX.EXE119Any startup section0265Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot47http://www.imaginelan.com/configsafe/index.html0
262Scotia OnLine Recoveryor Sc otia OnLine Security v*.* Recovery1 12etdirrcv.exe119Any startup section0232Scotia OnLine Security Software provided by Entrust f or Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web s ites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process53http://www.scotiabank.com/cda/ index/0,,LIDen,00.html0
1 3Scr1 7scr.scr119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
2 8ScrapPad1 12Scrappad.exe119Any startup section0143ScrapPad a llows you to quickly and easily record notes, t houghts, messages, and just about anything you want. Use it like you use scrap paper38http://www.jackcreations.com/scrappad/0
312Screen Guard1 10launch.exe119Any startup section0 53Part of Access Denied s ecurity and privacy softwa re22http://www.johnru.com/0
220Screen Saver Control1 12FSScrCtl.exe119Any startup section0151Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon22http://www.johnru.com/0
414ScriptBlocking1 10SBServ.exe119Any startup section0355Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here f or more information31http://www.symantec.com/search/0
412ScriptSentry1 16Scriptsentry.exe119Any startup section0206Script Sentry f rom Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly46http://www.jasons-toolbox.com/scriptsentry.asp0
320Scroll-In-Mouse V2.01 10SCROLL.EXE119Any startup section0 97Toolkit for the Lynx-3D Net s croll mouse from QTronix. Required if you u se the special features37http://www.qtronix.com/Lynx3dnet.html0
1 6ScrSvr1 10ScrSvr.exe119Any startup section0 41Added as a result of the OPASOFT.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASOFT.A0
3 7SDaemon1 11sdaemon.exe119Any startup section0351PC Security from Tropical Software. 'PC SecurityÖ 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'77http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.worm.html0
2 7SDetect1 11SDetect.exe119Any startup section0287ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button77http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.worm.html0
110Search-Exe1 6SE.exe119Any startup section0 40Hijacker - redirecting to Search-exe.com77http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.worm.html0
114SearchSquire331 18SearchUpdate33.exe119Any startup section0 22SearchSquire p arasite49http://www.doxdesk.com/parasite/SearchSquire.html0
312SecondChance1 10sctray.exe119Any startup section0138Power Quest Second Chance. Sets checkpoints for saving a backup copy of the regi stry to a disk so you can restore it if you have a crash61http://www.pcug-colorado.org/newsletter/pcoc0200/2ndchanc.htm0
112Secret-Crush1 9start.exe119Any startup section0 99Hijacker that may reset your browser's home page and/or search settings to point to undesired sites61http://www.pcug-colorado.org/newsletter/pcoc0200/2ndchanc.htm0
3 6Secsys1 10Secsys.exe119Any startup section0157Key Interceptor - surveillance software that creates r ecords of everything people do on a computer, ie, spying or monitoring depending upon how you call it35http://www.ultrasoft.ro/page_ky.htm0
218SecureCleanIEClean1 13SCIEClean.exe119Any startup section0115SecureClean - scans your system for hidden temporary files, deleted email message s, Internet histories and caches62http://www.accessdata.com/Product05_Overview.htm?ProductNum=050
311SecureItPro1 19Secureitpro470p.exe119Any startup section0110SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop62http://homepages.ihug.com.au/~ipex/secureitpro/secureitpro.htm0
111SecureLogin1 10Mslg32.exe119Any startup section0 38Added as a result of the REDZED VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.redzed@mm.html0
4 8SECWIZ981 12SECWIZ98.EXE119Any startup section0147Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here59http://www.zdnet.com/downloads/stories/info/0,,000T5S,.html0
3 4SeMS1 8SeMS.exe119Any startup section0 93PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone22htt p://www.pcsms.net/0
1 6SENTRY1 10SENTRY.exe119Any startup section0265From IP Insight. Allows website owners "to instantly determi ne the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it 36http://www.ipinsight.com/default.asp0
1 7Serials1 11serials.exe119Any startup section0 41Any one of a variety of worms and trojans36http://www.ipinsight.com/default.asp0
412serrdctl.exe1 12serrdctl.exe119Any startup section0164"Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems36http://www.ipinsight.com/default.asp0
1 6Serv-U1 10wssdsu.exe119Any startup section0 40Added as a result of the MANIFEST VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.manifest.trojan.html0
1 6server1 10server.exe119Any startup section0 40Added as a result of the DELTAD.A VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DELTAD.A0
110SERVER.EXE1 10SERVER.EXE119Any startup section0 58Added as a result of the BUSHTRO122 o r SMOKODOOR VIRUSES!80http://securityresponse.symantec.com/avcenter/venc/data/ backdoor.smokodoor.html0
1 8serverex1 14Server.txt.vbs119Any startup section0 40Added as a result of the DELTAD.A VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DELTAD.A0
3 7Service1 11service.exe119Any startup section0 41Added as a result of the ALADINZ.H VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.h.html0
1 7Service1 12services.exe119Any startup section0269Added as the result of the NETSKY o r NETSKY.B VIRUSES! Note - not to be confused with the valid Windows "services.exe" which resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K) or C:\Windows\System32 (WinXP) as this resides in C:\Windows or C:\Winnt77http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.b@mm.ht ml0
1 7Service1 15trojan filename219Any startup section0 40Added as a result of the KAITEX.E VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.kaitex.e.html0
218Service Connection1 23sccenter.exe bwtray.exe219Any startup section0 32For Compaq PC's. Part of Backweb78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.kaitex.e.html0
118Service Controller1 9Csrrs.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
112Service Host1 11spoolos.exe119Any startup section0 38Added as a result of the TORVEL VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.torvel@mm.html0
119Service Host Driver1 11svchost.exe119Any startup section0153Added as a result of the HITON VIRUS! This is not the valid svchost.exe as described here. Located in a Windows directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
215Service Manager1 12sqlmangr.exe119Any startup section0133SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start - Programs69http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
115Service Process1 11SVCHOST.EXE119Any startup section0124Added as a result of the DARKER VIRUS! Note - not the valid svchost.exe as described here. Located in %Windir% not %Sysdir%69http://support.microsoft.c om/default.aspx?scid=KB;EN-US;Q250320&0
313ServiceConfig1 10ispbeg.exe119Any startup section0229Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation69http://support.microsoft.c om/default.aspx?scid=KB;EN-US;Q250320&0
1 8services1 9start.bat119Any startup section0 37Added as a result of the ZCREW VIRUS!55http://www.sophos.com/virusinfo/analyses/trojzcrew.html0
1 8Services1 25back32.exe ...service.exe219Any startup section0126Added as a result of an unidentified VIRUS! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.meteorshell. html0
119Services Controller1 10lsassa.exe119Any startup section0 43Added as a result of the CIADOOR.122 VIRUS!78http://www.megasecurity.org/trojans/c/cruelintentionz/Cruelintentionz1.22.html0
113Services Host1 11Scchost.exe119Any startup section0 95Added as a result of the DONK VIRUS! Note - this is not the valid svchost.exe as described here69http: //support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
112Services.EXE1 12services.exe119Any startup section0119Added as a result of the KAZPING VIRUS! Note - this is not the valid Windows Service Controller (services.exe) process73ht tp://www.liutilities.com/products/wintaskspro/processlibrary/services/0
313SetecCertUtil1 12Certutil.exe119Any startup section0196Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV75http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbros@mm.html0
110setFTPBack1 12createsw.exe119Any startup section0 41Added as a result of the FTP_BMAIL VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp_bmail.html0
2 7SetHook1 11SetHook.exe119Any startup section0130Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp_bmail.html0
223seticlientor SE TI@home1 13SETI@home.exe119Any startup section0226SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp_bmail.html0
2 7SetIcon1 11SetIcon.exe119Any startup section0180Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp_bmail.html0
2 9SetiQueue1 12Setiqu~1.exe119Any startup section0 79Provides work unit buffering for Seti@Home clients - see here f or more details39http://www.reneris.com/seti/default.asp0
2 7SetiSpy1 11SetiSpy.exe119Any startup section0194From the site - 'SETI Spy i s a little program I wrote to "spy" on the pr ogress and performance of the SETI@home client. I call it a "spy" because I tried to make it as unobtrusive as possible'36http://pages.tca.net/roelof/setispy/0
1 7Setting1 10sysweb.exe119Any startup section0 41Added as a result of the SDBOT.GEN VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.GEN0
2 5setup1 25hphprld.exe ....setup.exe219Any startup section0 56HP DeskJet Setup - printers function normally without it78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.GEN0
215SetupICWDesktop1 12icwconn1.exe119Any startup section0234Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start - Programs - Accessories - Communication (or similar) anyway78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.GEN0
1 9setupuser1 25regedit.exe setupuser.log219Any startup section0 61Regfile in disguise - another CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
1 6SetVrc1 10setvrc.exe119Any startup section0 39Added as a result of the HUNTOCX VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.huntocx.html0
1 9Sex Teris1 9st01b.exe119Any startup section0 37Added as a result of the REPAD VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.repad.worm.html0
113SFtrb Service1 11cftrb32.exe119Any startup section0 39Added as a result of the SOBIG.D VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.sobig.d@mm.html0
314SfWinStartInfo1 20sfWinStartupInfo.exe119Any startup section0 32SFIRM32 Onli ne Banking software62http://www.symantec.com/avcenter/venc/data/w32.sobig.d@mm.html0
3 8Sgecrypt1 12Sgecrypt.exe119Any startup section0268SafeGuard Easy - "provides total company-wide protect ion for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"34http://www.ediport.hu/_sgeasy.html0
3 6sgtray1 10sgtray.exe119Any startup section0331StorageGuard f rom Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop ), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups83http://www.veritas.com/products/category/ProductDetail.jhtml?productId=storageguard0
1 8shambl3r1 7cnf.bat119Any startup section0 38Added as a result of the REMABL VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.remabl.worm.html0
1 9shambl3r*1 12shambl3r.exe119Any startup section0 57Added as a result of the REMABL VIRUS! where * is 2 to 1176http://securityresponse.symantec.com/avcenter/venc/data/w32.remabl.worm.html0
229Share-to-Web Namespace Daemon1 12hpgs2wnd.exe119Any startup section0267"HP's exclusive Share-to-Web s oftware makes it easy to share content with others through our affiliat e Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start - Programs66http://www.hp.com/peripherals2/scanjet_info/share-to-web/index.htm0
110sharedprem1 14sharedprem.exe119Any startup section0 40Added as a result of the MAKECALL VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.makecall.trojan.html0
428Sharing and Mapping Software1 10DShmap.exe119Any startup section0 41Intel AnyPoint i nternet sharing software61http://www.intel.com/products/desk_lap/hm_sm_office/index.htm0
210SharkEject1 11AEJCT32.exe119Any startup section0136Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required61http://www.intel.com/products/desk_lap/hm_sm_office/index.htm0
1 5Shell1 11Shell32.exe119Any startup section0 41Added as a result of the BADSECTOR VIRUS!44http://www.f-secure.com/v-descs/badsec.shtml0
1 8ShellApi1 12SHELLMSN.EXE119Any startup section0 40Added as a result of the NETDEV.B VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_NETDEV.B0
110Shellapi321 14Shellapi32.exe119Any startup section0 53Added as a result of the NETDEVIL ( or NERTE) VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_NERTE. 76.B0
1 7ShellEx1 11ShellEx.exe119Any startup section0 38Added as a result of the ANAKHA VIRUS!63http://www.symantec.com/avcenter/venc/data/backdoor.anakha.html0
2 7shicoxp1 11shicoxp.exe119Any startup section0 61Driver for a MultiCard slot ImageMate 6-in-1 Combo cardreader63http://www.symantec.com/avcenter/venc/data/backdoor.anakha.html0
1 5Shine1 9Shine.exe119Any startup section0 56Added as a result of the HAPPYLOW ( or NISH E-A) VIRUS!55http://www.sophos.com/virusinfo/analyses/w32nishea.html0
112Shmgrate.exe1 9ibot4.exe119Any startup section0 38Added as a result of the GASTER VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.gaster.html0
221shockmachine reminder1 14SmReminder.exe119Any startup section0219Shockmachine i s an entertainment playback device that lets you sa ve your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registr ation reminder for the trial version60http://www.shockwave.com/sw/downloads/collections/favorites/0
214Shockwave Init1 10SWINIT.EXE119Any startup section0216Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs60http://www.shockwave.com/sw/downloads/collections/favorites/0
212ShortKeys 991 12SHORTKEY.EXE119Any startup section0 90ShortKeys f rom Insight Software Solutions - allows you to program keys with text strings25http://www.shortkeys.com/0
110Showbehind1 14SHOWBEHIND.EXE119Any startup section0 47Advertisement display which can be stopped here38http://www.showbehind.com/adremove.exe0
3 6SHPC321 10SHPC32.exe119Any startup section0157Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled38http://www.showbehind.com/adremove.exe0
4 9ShStatEXE1 10SHSTAT.EXE119Any startup section0171From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start - Programs38http://www.showbehind.com/adremove.exe0
313Shutdownaware1 17shutdownaware.exe119Any startup section0113Loaded by the SWEEX 6-in-1 Media Card Reader t o properly manage the reader whi le it is connected to your system45http://www.sweexeurope.com/product.asp?pid=980
311ShutDownPro1 15ShutDownPro.exe119Any startup section0 72ShutDownPro - shutdown, reboot, logoff your System with one mouse click55http://home.tiscali.de/kurtzimmermann/shutdownpro_e.htm0
1 5Sicom1 9Sicom.exe119Any startup section0 38Added as a result of the NETLIP VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netlip.worm.html0
3 7SideACT1 11SideACT.exe119Any startup section0 27SideACT o rganizer software47http://www.actaddons.com/products/jm_getorg.asp0
1 7Sidebar1 11Sidebar.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
228SideWinderTrayV4or SW TrayV41 12SWTrayV4.exe119Any startup section0125MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start - Programs54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
312SimpLite-MSN1 16SimpLite-MSN.exe119Any startup section0116Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
1 9Singapore1 13singapore.exe119Any startup section0290Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here f or more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself 01
211SiS KHooker1 11khooker.exe119Any startup section0156SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required 01
319SiS Trayor si stray1 11sistray.exe119Any startup section0 81System Tray icon for SiS based graphics. Note - this resides in C:\Windows\System 01
2 8SiSAudio1 9MP_S3.exe119Any startup section0 84WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems 01
3 8siscolor1 9color.exe119Any startup section0206Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board 01
111sistrai.exe1 11sistrai.exe119Any startup section0 37Added as a result of the PROVA VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/trojan.prova.html0
1 7sistray1 11sistray.exe119Any startup section0 79Added as a result of the PROVA VIRUS! Note - this resides in C:\Windows\Command73http://securityresponse.symantec.com/avcenter/venc/data/trojan.prova.html0
1 6sistry1 10sistry.exe119Any startup section0 36Added as a result of the CEBE VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cebe.html0
3 8SK9910DM1 12SK9910DM.EXE119Any startup section0131Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cebe.html0
3 8SKDAEMON1 12SKDAEMON.EXE119Any startup section0137Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys 74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cebe.html0
2 8skinkers1 12skinkers.exe119Any startup section0142Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here36http://www.skinkers.com/clients.html0
420SkyBlaster Scheduler1 10SSFSch.exe119Any startup section0120For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system36http://www.skinkers.com/clients.html0
2 5Skype1 9Skype.exe119Any startup section0110"Skype i s free and simple software that w ill enable you to make free calls anywhere in the world in minutes"21http://www.skype.com/0
428SkySurfer Management Service1 11SmaServ.exe119Any startup section0120For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system21http://www.skype.com/0
212SleepManager1 12SleepMgr.exe119Any startup section0184This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode21http://www.skype.com/0
3 8SlickRun1 6sr.exe119Any startup section0250"SlickRun i s a floating command line utility for Wi ndows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:\Program Files\Outlook Express\msimn.exe becomes MAIL"31http://www.bayden.com/SlickRun/0
1 5slide1 12Iexplore.exe119Any startup section0106Added as a result of the GASLIDE VIRUS! Note - this is not the valid Internet Explorer file "iexplore.exe"75http://securityresponse.symantec.com/avcenter/venc/data/trojan.gaslide.html0
2 6slimp31 17SliMP3 Server.exe219Any startup section0223Slimp3 Server - "presents an entirely new way of accessing a nd enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"41http://www.macupdate.com/info.php/id/89730
2 9Slingshot1 12SLINGS~1.EXE119Any startup section0150Atomica Slingshot - "reference tool with access to dictionary and enc yclopedia terms, bios, technical terms, history, geography, and much more"55http://www.atomica.com/us/products/slingshot/index.html0
1 5slmss1 9slmss.exe119Any startup section0 47SeekSeek search hijacker related - as seen here 01
2 7Sm56acl1 12sm56hlpr.exe119Any startup section0 83Helper utility for Motorola based SM56 software modems - resides in the System Tray 01
2 5Smapp1 10smtray.exe119Any startup section0 82System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller 01
218Smart Card Service1 12ScardSvr.exe119Any startup section0156For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly90http://support.microsoft.com/support/kb/articles/Q293/5/07.ASP?LN=EN-GB&SD=gn&FR=00
321Smart Connect Monitor1 9SCMon.exe119Any startup section0270Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio90http://support.microsoft.com/support/kb/articles/Q293/5/07.ASP?LN=EN-GB&SD=gn&FR=00
319Smart Connect Setup1 11SCSetup.exe119Any startup section0270Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio90http://support.microsoft.com/support/kb/articles/Q293/5/07.ASP?LN=EN-GB&SD=gn&FR=00
220Smart Label O Server1 12ssloserv.exe119Any startup section0 94Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely90http://support.microsoft.com/support/kb/articles/Q293/5/07.ASP?LN=EN-GB&SD=gn&FR=00
220Smart Label RFViewer1 12SSLFVIEW.EXE119Any startup section0 94Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely90http://support.microsoft.com/support/kb/articles/Q293/5/07.ASP?LN=EN-GB&SD=gn&FR=00
220Smart Type Assistant1 7sta.exe119Any startup section0102Smart Type Assistant - a complex typing automation tool , intended to make your work faster and safer36http://www.blazingtools.com/sta.html0
3 9Smartalec1 11pcaccel.exe119Any startup section0 55Smartalec PC Accelerator - system optimization utility49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
2 9sMaRTcaPs1 12SMARTC~1.EXE119Any startup section0120sMaRTcaPs f rom Phoebus LLC - enables you to configure the time needed t o depress Caps Lock, Num Lock & Insert keys52http://www.phoebusllc.com/index.htm#SC%20Description0
3 9SmartPCXL1 11pcaccel.exe119Any startup section0 55Smartalec PC Accelerator - system optimization utility49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
2 5SMax41 9SMax4.exe119Any startup section0120System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
3 8SMax4PNP1 12SMax4PNP.exe119Any startup section0112SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
433smcor SM C Serviceor Sm cServices1 18smc.exe spfsmc.exe219Any startup section0 15Sygate Firewall49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
215Smith Micro try1 12smiptray.exe119Any startup section0 51Smith Micro shared files. Comes with D-Link web cam49http://www.smartalec2000.com/pcxl4000deluxe.shtml0
324SMS Application Launcher1 12LAUNCH32.EXE119Any startup section0 86Microsoft Systems Management Server - used to manage computers on a networ k remotely45http://www.microsoft.com/smserver/default.asp0
318SMS Client Service1 12clisvc95.exe119Any startup section0492When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)45http://www.microsoft.com/smserver/default.asp0
4 8Smserial1 12sm56hlpr.exe119Any startup section0 27Motorola based modem driver45http://www.microsoft.com/smserver/default.asp0
1 4SMSS1 8smss.exe119Any startup section0143Added as a result of the FLOOD.F VIRUS! Note - this is not the legitimate Smss.exe s ystem file should normally NOT figure in Msconfig/Startup!69http://www.liutilities.com/products/wintas kspro/processlibrary/smss/0
1 5smsys1 12Explorer.exe119Any startup section0198Added as a result of the CLICKER-C VIRUS! Note - the valid "explorer.exe" is located in C:\Windows or C:\Winnt whereas this one is located in a C:\Windows\Template or C:\Winnt\Template subdirectory58http://www.sophos.com/virusinfo/analyses/trojclickerc.html0
1 9Sndcompat1 13Sndcompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 8Sndsaver1 12Sndsaver.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
2 7Snsicon1 11Snsicon.exe119Any startup section0 49Launches a screensaver program from Second Nature72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 6Sock321 10sock32.exe119Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
412SoDA Startup1 15SodaStartup.exe119Any startup section0148Used by the Rational SoDA p roject management tool. Unsure of it's actual purpo se but it's recommended you leave it enabled if you use the software47http://www.rational.com/products/soda/index.jsp0
2 7soffice1 11SOFFICE.EXE119Any startup section0318Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start - Programs. Automatically started when any StarOffice 6.0 component is started from the Start - Programs. A resource hog (it eats 16 MB of memory).47http://www.rational.com/products/soda/index.jsp0
312SoloSchedule1 11Solocfg.exe119Any startup section0 89Scheduler for Solo Antivirus. Leave enabled unless you sc an manually on a regular basis24http://www.srnmicro.com/0
1 7somatic1 11somatic.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
217Sonic A3D Control1 12vrtxctrl.exe119Any startup section0 21Sound related options54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
217SoniqueQuickStart1 11sqstart.exe119Any startup section0 69Quickstart for Sonique a udio player. Available via Start - Programs23http://www.sonique.com/0
112Sound Loader1 13sndloader.exe119Any startup section0 41Added as a result of the AGOBOT-BV VIRUS!57http://www.sophos.com/virusinfo/analyses/w32agobotbv.html0
2 8soundman1 12soundman.exe119Any startup section0127System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start - Settings- Control Panel57http://www.sophos.com/virusinfo/analyses/w32agobotbv.html0
1 7Soundmx1 11Soundmx.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
210SourcePath1 9gwreg.exe119Any startup section0 91Used to update Gateway registry settings for System Restoration Kit and Web update programs40http://www.merijn.org/cwschronicles.html0
1 2sp1 6sp.reg119Any startup section0 80IE search hijacker - changes the default search to http://www.gocybersearch.com/40http://www.merijn.org/cwschronicles.html0
1 2sp1 21regedit-s .... sp.dll219Any startup section0144Malicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here f or more and a fix 01
1 7SP00LSV1 11Sp00lsv.exe119Any startup section0 42Added as a result of the GRAYBIRD.E VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.e.html0
2 8Spdstart1 12Spdstart.exe119Any startup section0124Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel."26http://www.spampal.org.uk/0
321Speaking Clock Deluxe1 11SpClDlx.exe119Any startup section0221Speaking Clock Deluxe - turns your computer into a s peaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly33http://www.lux-aeterna.com/clock/0
124Special Firewall Service1 11avguard.exe119Any startup section0 40Added as a result of the NETSKY.G VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.g@mm.html0
211Speed racer1 11CTSRReg.exe119Any startup section0 34Software for a Creative sound card76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.g@mm.html0
3 9Speed Tec1 12speedtec.exe119Any startup section0250Accel SpeedTec f rom Montana Software speeds up your modem. Speed Tec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled45http://www.montanasoft.com/speedtec/index.asp0
3 8Speedkey1 12SPEEDKEY.EXE119Any startup section0 57Additional keyboard shortcuts on MS programmable keyboard81http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.a.d.worm.html0
310SpeedMeter1 14SpeedMeter.exe119Any startup section0 47Application measuring upload and download speed81http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.a.d.worm.html0
326Speedtouch USB Diagnostics1 12Dragdiag.exe119Any startup section0307For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)81http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.a.d.worm.html0
1 6Spees11 10speedy.scr119Any startup section0 41Added as a result of the OPASERV.Y VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.Y0
1 6Spees21 10Speedy.bat119Any startup section0 42Added as a result of the OPASERV.AD VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.a.d.worm.html0
1 6Spees31 10SPEEDY.PIF119Any startup section0 42Added as a result of the OPASERV.AD VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.AD0
216Spellex Anywhere1 6sa.exe119Any startup section0142Spellex-Anywhere - adds spell checking functionality to almost any Win dow program. Create a shortcut and run manually before it's to be used51http://www.spellex.com/Spellex-Anywhere/default.htm0
410SpIDerMail1 12spiderml.exe119Any startup section0 43DrWeb antivirus S pider Mail e-mail scanner38http://www.drweb-online.de/index_e.htm0
212Spinner Plus1 11spinner.exe119Any startup section0341"Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness". Available via Start - Programs38http://www.drweb-online.de/index_e.htm0
128Spool lptt01or Sp ool ml097e1 9spool.exe119Any startup section0175Variant of the RapidBlaster p arasite (in a "spool" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
115Spooler Service1 12Spoolsrv.exe119Any startup section0 41Added as a result of the JOINER.C1 VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_JOINER.C10
126Spooler Sub System Process1 11SPOOL32.EXE119Any startup section0 37Added as a result of the YAB.A VIRUS!74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_YAB.A0
120Spooler Subsytem App1 12spoolsvc.exe119Any startup section0 43Added as a result of an unidentified VIRUS!74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_YAB.A0
123SpoolerSubSystemProcess1 11SpooI32.exe119Any startup section0116Added as a result of the SPY.EHKS.21 VIRUS! Note - the "I" between "o" and "3" is a captial "i" not a lower case "L"75http://www.ntsecurity.net/Panda/Index.cfm?FuseAction=Virus&VirusID=13060
1 7Spoolsv1 11Spoolsv.exe119Any startup section0175Added as a result of the CIADOOR.121 VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file75http://www.ntsecurity.net/Panda/Index.cfm?FuseAction=Virus&VirusID=13060
1 8spoolsvv1 12spoolsvv.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
1 3spp1 18regedit -s spp.reg219Any startup section0 82IE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
3 8SPSTEALT1 21SmartProtectorPro.exe119Any startup section0 80Smart Protector Pro - internet privacy tool that erases track s, MRU lists, etc42http://smartprotector.com/eraser/index.htm0
311Spy Blocker1 14spyblocker.exe119Any startup section0323SpyBlocker b locks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware t hat some applications containing spyware subsyste ms may not run correctly or at all40http://www.lavasoft.de/software/adaware/0
1 8SpyBlast1 12SpyBlast.exe119Any startup section0 90Spyware killer that is in effect autoinstalled foistware, targeted by SpyBot, among others40http://www.lavasoft.de/software/adaware/0
3 9SpyBotSnD1 12Spybotsd.exe119Any startup section0 84Spybot - Search & Destroy - free multi-spyware re moval tool from Patrick Kolla34http://spybot.safer-networking.de/0
132Spybott lptt01or Sp ybott ml097e1 11spybott.exe119Any startup section0177Variant of the RapidBlaster p arasite (in a "Spybott" folder in Program Files). It i s not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
316SpyCop ScanCheck1 8MAIN.EXE119Any startup section0147SpyCop s urveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan22http://www.spycop.com/0
3 9Spykiller1 13Spykiller.exe119Any startup section0119Shareware "Spyware remover" of questionable quality and repute. There are better alternatives that are freeware to boot60http://www.enigmasoftwaregroup.com/more_info_spyhunter.shtml0
1 8SpyNuker1 12Spynuker.exe119Any startup section0314A "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers æTrekDataÆ and æBlue Haven MediaÆ, who distribute spyware through ActiveX drive-by-download on web pages60http://www.enigmasoftwaregroup.com/more_info_spyhunter.shtml0
310SpyStopper1 14spystopper.exe119Any startup section0140SpyStopper - blocks intrusive spyware, Web bugs, worms, scripts, advertisements, and cookies. Protects you from being profiled and tracked36http://www.itcompany.com/Privacy.htm0
1 7Spyware1 11Spyware.exe119Any startup section0124BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this a nd this. Do not suppor t these guys!66http://www.lavasoftsupport.com/index.php?act=ST&f=1&t=39120
327Spyware Guard Control Panel1 12spywar~1.exe119Any startup section0 73"SpywareGuard p rovides a real-time protection solution against spywar e"49ht tp://www.wilderssecurity.net/spywareguard.html0
123Spyware Nuker Installer1 25SpywareNukerInstaller.exe119Any startup section0315A "spyware r emoval program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers æTrekDataÆ and æBlue Haven MediaÆ, who distribute spyware through ActiveX drive-by-download on web pages49ht tp://www.wilderssecurity.net/spywareguard.html0
312SpywareGuard1 10sgmain.exe119Any startup section0 73"SpywareGuard p rovides a real-time protection solution against spywar e"49ht tp://www.wilderssecurity.net/spywareguard.html0
142Spywareguard lptt01or Sp ywareguard ml097e1 16Spywareguard.exe119Any startup section0178Variant of the RapidBlaster p arasite (in a "Spyguard" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 8SPYWATCH1 12SpyWatch.exe119Any startup section0124BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this a nd this. Do not suppor t these guys!66http://www.lavasoftsupport.com/index.php?act=ST&f=1&t=39120
115SQConfigChecker1 6cc.exe119Any startup section0147Xupiter S QWire variant - adware and homepage hijacker. Note - c annot be removed via the Xupiter website in the same way as other Xupiter variants44http://www.doxdesk.com/parasite/Xupiter.html0
111SQInstaller1 15SQInstaller.exe119Any startup section0 17Xupiter h ijacker40http://doxdesk.com/parasite/Xupiter.html0
210SQL Server1 7scm.exe119Any startup section0 66SQL Server Service Control Manager. Available via Start - Programs40http://doxdesk.com/parasite/Xupiter.html0
116SQUpdatesChecker1 6uc.exe119Any startup section0147Xupiter S QWire variant - adware and homepage hijacker. Note - c annot be removed via the Xupiter website in the same way as other Xupiter variants44http://www.doxdesk.com/parasite/Xupiter.html0
3 8Srmclean1 12srmclean.exe119Any startup section0262Srmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. According to Compaq - "If you disable the entry from loading into startup, then you will not be able to use the features of the sound card"44http://www.doxdesk.com/parasite/Xupiter.html0
1 4SRNG1 8srng.exe119Any startup section0 26Search hijacker - see here41http://www.doxdesk.com/parasite/Srng.html0
311SRP Startup1 10srrpro.exe119Any startup section0274System Restore Remover Pro a llows you to safely and ea sily remove System Restore and various other Windows Millennium "features." This is enabled if you tick the "Remove unnecessary System Restore information on startup" box. Available via Start - Settings - Control Panel35http://www.definition-software.com/0
410SRS Applet1 11SrsTray.Exe119Any startup section0 63S3 Sonic Vibes sound card drivers - if disabled you loose sound35http://www.definition-software.com/0
1 5Srv321 9Srv32.exe119Any startup section0 41Added as a result of the OPASERV.J VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.j.worm.html0
3 8Srv32Win1 13SpyAgent4.exe119Any startup section0148SpyAgent - monitoring software that creates records of every thing people do on a computer, ie, spying or monitoring depending upon how you call it41http://www.spytech-web.com/spyagent.shtml0
3 8Srv32Win1 11Svchost.exe119Any startup section0181Realtime-Spy k eylogger (monitoring program). Gi ven a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove28http://www.realtime-spy.com/0
1 9ssate.exe1 9irun4.exe119Any startup section0 40Added as a result of the BEAGLE.J VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.j@mm.html0
1 9ssate.exe1 10winsys.exe119Any startup section0 40Added as a result of the BEAGLE.K VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.k@mm.html0
4 3Ssd1 7Std.exe119Any startup section0 54Stealthdisk - file and folder hiding/locking u tility27http://www.stealthdisk.com/0
2 7SSDPSRV1 11ssdpsrv.exe119Any startup section0412Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. Used by Universal Plug and Play (for network device discovery). To remove this program, open Add/Remove Programs, select either Communications (Me) or Networking Services (XP), and remove the checkmark next to Universal Plug and Play40http://www.equinox.com/Utilities147.html0
111ssgrate.exe1 10system.exe119Any startup section0 44Added as a result of the MITGLIEDER.C VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.mitglieder.c.html0
111SSK Service1 12winssk32.exe119Any startup section0 39Added as a result of the SOBIG.E VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.sobig.e@mm.html0
1 3SSL1 11svchost.exe119Any startup section0 43Added as a result of an unidentified VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.sobig.e@mm.html0
2 6sstray1 10sstray.exe119Any startup section0108nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys62http://www.symantec.com/avcenter/venc/data/w32.sobig.e@mm.html0
1 8SSUpdate1 12SSUpdate.exe119Any startup section0 34DyFuCa/MoneyTree p arasite variant54http://www.doxdesk.com/parasite/InternetOptimizer.html0
1 8ssvchost1 12ssvchost.exe119Any startup section0 40Added as a result of the HELIOS.B VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.helios.b.html0
4 5Start1 11Quick95.exe119Any startup section0 93For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone31http://www.nisis.com/index.html0
222Start Wingman Profiler1 39lwtest.exe lwemon.exe 219Any startup section0149Logitech Wingman software required to operate Logitech joysticks and gamepads. Unless you're a hard-core gamer, it's best to leave it unchecked50http://www.pcmag.com/article2/0,4149,897438,00.asp0
3 8Startacc1 12startacc.exe119Any startup section0160Launches Webroot's Accelerate 2 000 software that "speeds up your Internet connection by up to 300%". Leave enabled if you find it improves internet connection55http://www.webroot.com/wb/products/accelerate/index.php0
4 8StartEAK1 12StartEAK.exe119Any startup section0 69Easy Access B utton Support for Compaq PCs. Required if you use these75http://h18000.www1.hp.com/support/techpubs/whitepapers/13W1-1200a-wwen.html0
210startl.exe1 10startl.exe119Any startup section0 68Lingocom LingoWare - translates any application into your language33http://www.lingoware.com/english/0
3 9StartStop1 13STARTSTOP.EXE119Any startup section0 48StartStop f rom TFI Technology - startup manager51http://www.tfi-technology.com/startstop/default.htm0
312StartSurfing1 10STARTS.exe119Any startup section0338Start Surfing a llows you to protect your privac y while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start - Programs28http://www.startsurfing.com/0
114Startup Update1 11Cvshost.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
314StartupMonitor1 18StartupMonitor.exe119Any startup section0171Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu40http://www.mlin.net/StartupMonitor.shtml0
119startwindowskeyuser1 11rundle2.exe119Any startup section0 42Added as a result of the JAVAKILLER VIRUS!82http://securityresponse.symantec.com/avcenter/venc/data/w32.javakiller.trojan.html0
213Stat 'n' Perf1 13StatnPerf.exe119Any startup section0104Stat 'n' Perf mo nitors your internet connection and displ ays information about sent and received bytes38http://www.soft4ever.com/StatnPerf/En/0
1 7StatBar1 11STATBAR.exe119Any startup section0252StatBar&n bsp;(system status bar) allows y ou to quickly get an overview of your system's condition (memory, CPU, uptime, and much more). Due to the sheer number of resources (over 60%) consumed by this program, it is unsuitable for Windows 95/98/SE/Me22http://www.statbar.nl/0
217Status Monitor XE1 9ENGSS.EXE119Any startup section0258The Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start - Programs22http://www.statbar.nl/0
215Stay Connected!1 11StayCon.exe119Any startup section0173More than just a pinger, actually simulates online activity. Supports AOL, NetZero, MSN, ATT WorldNet, CompuServe and many other ISPs as well. Available via Start - Programs22http://www.statbar.nl/0
3 9StayAlive1 6sa.exe119Any startup section0153StayAlive f rom TFI Technology. "This top-notch tool inter cepts crashes when they happen, keeping your programs running so you can save your work."43http://www.tfi-technology.com/stayalive.htm0
2 8STBWEBTV1 12STBWEBTV.EXE119Any startup section0 29Used to display TV on your PC43http://www.tfi-technology.com/stayalive.htm0
121stcloaderor ST CLOA~11 26stcloader.exe STCLOA~1.exe219Any startup section0 35Popup adware by 2ndThought software43http://www.tfi-technology.com/stayalive.htm0
322Stealth Anonymizer 2.51 13stealth25.exe119Any startup section0106Now named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy50http://www.photono-software.de/Stealther/main.php30
2 5Steam1 9Steam.exe119Any startup section0157Program used for the game Half-Life. Valve (Half-Life creator) made it to test update and patches of the game as well as other games. Can be started manually50http://www.photono-software.de/Stealther/main.php30
2 8Stickies1 12STICKIES.EXE119Any startup section0155Stickies - utility that allows you to put yellow "Post-It " type messages on your desktop and can be used to set reminders. Available via Start - Programs38http://www.btinternet.com/~tom.revell/0
210StickyNote1 14StickyNote.exe119Any startup section0109Utility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start - Programs38http://www.btinternet.com/~tom.revell/0
317StillImageMonitor1 10Stimon.exe119Any startup section0418Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners and some of their SCSI scanners38http://www.btinternet.com/~tom.revell/0
1 8stlbupdt1 37rundll32.exe stlbupdt.DLL, DllRunMain219Any startup section0 29BrowserAid/Startium p arasite47http://www.doxdesk.com/parasite/BrowserAid.html0
312StorageGuard1 10sgtray.exe119Any startup section0337StorageGuard f rom Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop ), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups 83http://www.veritas.com/products/category/ProductDetail.jhtml?productId=storageguard0
1 7Strng321 12strngbox.exe119Any startup section0 38Added as a result of the STRANO VIRUS!71http://securityresponse.symantec.com/avcenter/venc/data/w32.strano.html0
3 7StyleXP1 11StyleXP.exe119Any startup section0153StyleXP a llows you customize the way WinXP looks. If d isabled via msconfig it re-instates itself at reboot, therefore uninstall it if you don't want it35http://www.tgtsoft.com/product.html0
216Subtract the Ads1 9AdSub.exe119Any startup section0 62Removes adverts from web pages. Although useful - not required35http://www.tgtsoft.com/product.html0
111SULFNBJ.EXE1 11SULFNBJ.EXE119Any startup section0303Left as the result of being infected by the PE_MAGISTR.DAM v irus. This virus infects system files and renames them (changing one letter) bef ore adding them to the Run keys in the registry. Once the virus is removed via anti-virus software, delete the infected file and remove the key from the registry77http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_MAGISTR.DAM0
218SunJavaUpdateSched1 11jusched.exe119Any startup section0152Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com/ o r just run the Ja va Plug-In Control Panel20http://java.sun.com/0
3 7Sunkist1 13shwicon98.exe119Any startup section0 54Card reader for memory cards from digital cameras, etc20http://java.sun.com/0
3 9Sunkist2k1 13shwicon2k.exe119Any startup section0 54Card reader for memory cards from digital cameras, etc20http://java.sun.com/0
210Supastatus1 10status.exe119Any startup section0 21Supanet I SP software23http://www.supanet.com/0
312Supercleaner1 16Supercleaner.exe119Any startup section0 57Supercleaner - all in one disk cleaner for your computer96http://www.softandco.com/redir.html?u=http://www.SouthBayPC.com/SuperCleaner&pn=SuperCleaner0
325SuperCool Compress Backup1 8Main.exe119Any startup section0 91"SuperCool Zip Backup s oftware is a data backup,r estore and file synchronization program"43http://www.supercoolbookmark.com/zipbackup/0
1 9superslut1 12msslut32.exe119Any startup section0 40Added as a result of the SLUTER-A VIRUS!56http://www.sophos.com/virusinfo/analyses/w32slutera.html0
110supporter51 14supporter5.exe119Any startup section0218Part of eScorcher a nti-virus software- responsible f or updates of new virus bases each time you logon to the web. Used to collect information about the user and therefore treated as spyware - now the web-site is dead25http://www.escorcher.com/0
319Sureshotpopupkiller1 14Stopthepop.exe119Any startup section0 30Stop-the-Pop-Up p opup blocker41http://www.bysoft.se/sureshot/stopthepop/0
310SurfChoice1 9SCMan.exe119Any startup section0242SCMan is a utility that can control services on WinNT from the command line. This utility can create, start, pause, stop, delete services. Furthermore it can retrieve a service's current state, get the displayname for a service and vice versa41http://www.bysoft.se/sureshot/stopthepop/0
130Surfer lptt01or Su rfer ml097e1 10surfer.exe119Any startup section0178Variant of the RapidBlaster p arasite (in a "mssurfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
315SurfinGuard Pro1 11winsfcm.exe119Any startup section0 47SurfinGuard Pro - internet protection software46http://www.finjan.com/products/surfinguard.cfm0
310SurfSecret1 12ss2-full.exe119Any startup section0359"House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray, eliminating tell-tale files at a regular interval of your choosing. You can set it to clear your Internet cache files, cookies, history, temp folder, etc. It can also clear the history of your Run and Find menus, in addition to the AOL cache"46http://www.finjan.com/products/surfinguard.cfm0
1 4Susp1 8Susp.exe119Any startup section0 49Transponder b ased malware by abetterinternet.com48http://www.doxdesk.com/parasite/Transponder.html0
110SVA Player1 13SVAplayer.exe119Any startup section0109QuickFlicks Streaming Player - regarded as spyware. See here f or details of how to disable or uninstall it36http://www.quickflicks.com/help.html0
1 3Svc1 7svc.exe119Any startup section0112Hijacker, Clientman p arasite variant, redirecting to madfinder.com. Detecte d by Symantec as the MADFIND VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.madfind.html0
111SVC Service1 11svcinit.exe119Any startup section0 37Added as a result of the SINIT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sinit.html0
111SVC Service1 23svcinit.exe svcpack.exe219Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
1 5Svced1 9Svced.exe119Any startup section0 38Added as a result of the DELF.F VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.f.html0
1 7svchost1 11Svch0st.exe119Any startup section0178Added as a result of the GAYBIRD.B VIRUS!. Note - there is a number "0" in the executable filename, not a lower /upper case O. This is not the valid svchost.exe as described here68http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
1 7SVCHOST1 11svchost.exe119Any startup section0129System1060 homepage hi-jacker. Found in a WindowsSystem1060 directory. Note - this is not the valid svchost.exe as described here68http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
1 7SVCHOST1 13mrowyekdc.exe119Any startup section0 91Added as a result of the GOTORM VIRUS!. This is not the valid svchost.exe as described here69http://support.microsoft .com/default.aspx?scid=KB;EN-US;Q250320&0
1 7svchost1 11ADMAGIC.EXE119Any startup section0 91Added as a result of the SMIBAG VIRUS!. This is not the valid svchost.exe as described here69http://support.microsoft .com/default.aspx?scid=KB;EN-US;Q250320&0
1 7Svchost1 11winhost.exe119Any startup section0 94Added as a result of the LOLAWEB.A VIRUS!. This is not the valid svchost.exe as described here69http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
111svchost.exe1 13svchost32.exe119Any startup section0 92CoolWebSearch p arasite related. Note - this is not the vali d svchost.exe as described here68http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q250320&0
1 9SvcHost321 13svchost32.exe119Any startup section0 55Added as a result of the MIMAIL.I o r MIMAIL.J VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.j@mm.ht ml0
1 7svshost1 11svshost.exe119Any startup section0 43Added as a result of an unidentified VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.upering.worm.html0
2 8Swap Nut1 9javaw.exe119Any startup section0233SwapNut is a peer-to-peer file sharing and searching utility developed and marketed by File Metrics, Inc. Users can search for and find almost any type of digital file (audio, video, photos etc.) through a secure peer-to-peer network77http://securityresponse.symantec.com/avcenter/venc/data/w32.upering.worm.html0
2 3SWd1 9winwd.exe119Any startup section0 72PC Security f rom Tropical Software - lock files, password prote ct, etc44http://www.tropsoft.com/pcsecurity/index.htm0
4 7Sweep951 12ICLOAD95.EXE119Any startup section0 33Part of Sophos a nt-virus sofware40http://www.sophos.com/products/software/0
1 5Swf321 12AVupdate.exe119Any startup section0 38Added as a result of the MERKUR VIRUS!68http://www.symantec.com/avcenter/venc/data/w32.hllw.merkur.e@mm.html0
1 5Swf321 11_backup.exe119Any startup section0 38Added as a result of the SYMTEN VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.hllw.symten@mm.html0
310Switch Off1 9swoff.exe119Any startup section0211Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer, disconnect your current dialup connection, lock workstation, etc24http://yasoft.km.ru/eng/0
223Switchboard.com Toolbar1 9AtHoc.exe119Any startup section0 75Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com27http://www.switchboard.com/0
2 6SwTray1 10SWTRAY.EXE119Any startup section0116MS SideWinder game controller system tray icon. Available via Start - Programs. May have the version number after it74http://securityresponse.symantec.com/avcenter/venc/data/dialer.haldex.html0
1 6SYDNEY1 9file path219Any startup section0 37Added as a result of the SYNEY VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.syney@mm.html0
313SyGateService1 12sgserv95.exe119Any startup section0205SyGate i s a useful little program that le ts you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start - Programs22http://www.sygate.com/0
129Symantec Configuration Loader1 11ccApp32.exe119Any startup section0 55Added as a result of a variant of the GAOBOT.GEN VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.hllw.gaobot.gen.html0
416Symantec Core LC1 12symlcsvc.exe119Any startup section0 47Part of Norton AntiVirus 2004. What does it do?83http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.hllw.gaobot.gen.html0
233Symantec Fax Starter Edition Port1 12OLFSNT40.EXE119Any startup section0 76Offers a virtual printer as a fax machine. Can be run via a desktop shortcut83http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.hllw.gaobot.gen.html0
312SymKeepAlive1 7CKA.exe119Any startup section0 74Part of Norton SystemWorks 2003 - keeps a dial-up modem connection aliv e44http://www.symantec.com/sabu/sysworks/basic/0
228SymTray - Norton SystemWorks1 11SYMTRAY.EXE119Any startup section0264Keeps all System Tray icons for Norton SystemWorks together to reduce clutter. SystemWorks includes Norton Anti-Virus, Norton Utilities and Norton CleanSweep - mentioned elsewhere here. Personally I only have Norton eMail Protect running which doesn't need SymTray44http://www.symantec.com/sabu/sysworks/basic/0
3 9Sync Data1 11Hndsync.exe119Any startup section0 52Pocket Real Estate - mobile synchronization manager47http://www.pocketrealestate.com/PREWireless.asp0
3 7Sync-It1 10Syncit.exe119Any startup section0 75Sync-It - synchronizes the system clock with time servers on the internet31http://www.tolvanen.com/syncit/0
3 9SyncAgent1 13syncagent.exe119Any startup section0174Ghost Keylogger ( monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove25http://www.keylogger.net/0
223Synchronization Manager1 11mobsync.exe119Any startup section0 40Find more information about its use here62http://support.microsoft.com/default.aspx?scid=kb;en-us;2561390
3 8SynTPEnh1 12syntpenh.exe119Any startup section0273Synaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll62http://support.microsoft.com/default.aspx?scid=kb;en-us;2561390
4 8SynTPLpr1 12syntplpr.exe119Any startup section0 72Synaptics touchpad driver helper. Required for touchpad features to work62http://support.microsoft.com/default.aspx?scid=kb;en-us;2561390
3 8SysAgent1 12SysAgent.exe119Any startup section0160SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of37http://www.netsizzle.net/sysagent.asp0
1 5SysAI1 9SysAI.exe119Any startup section0102AproposMedia a dware - also creates SysAI folder in Program Files where the SysAI.exe is also located45http://doxdesk.com/parasite/AproposMedia.html0
3 6Sysbot1 10sysbot.exe119Any startup section0 70Spector - spying (or monitoring) software to record internet activity62http://www.spectorsoft.com/products/Spector_Windows/index.html0
1 6syscfg1 12syscfg32.exe119Any startup section0 39Added as a result of the KWBOT.S VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.s.worm@mm.html0
112syscfg34.exe1 12syscfg34.exe119Any startup section0 40Added as a result of the ELECTRON VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.electron.html0
1 5syscm1 9Syscm.exe119Any startup section0 14Vanish a dware53http://sarc.com/avcenter/venc/data/adware.vanish.html0
130syscon lptt01or sy scon ml097e1 10syscon.exe119Any startup section0176Variant of the RapidBlaster p arasite (in a "Syscon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 9sysconfig1 13iexplorer.exe119Any startup section0122Added as a result of the CULT.C VIRUS!. Note - iexplorer.exe is not to be confused with Interrnet Explorer (ie xplore.exe)66http://www.symantec.com/avcenter/venc/data/w32.hllw.cult.c@mm.html0
1 9SysConfig1 12syscfg35.exe119Any startup section0 40Added as a result of the KAZMOR.C VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazmor.c.html0
1 6Syscpy1 10Syscpy.exe119Any startup section0 82Firewall-bypassing, proxied spam relayer. Detected by Symantec as the HOGLE VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hogle.html0
1 6SysCtl1 10sysctl.exe119Any startup section0 35Added as a result of the AOK VIRUS!42http://vil.nai.com/vil/content/v_99942.htm0
1 8Sysctrls1 11procdll.exe119Any startup section0 43Added as a result of the WEEDBOTZ.14 VIRUS!92http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_WEEDBOTZ.14&VSect=T0
1 6sysdir1 10winrun.exe119Any startup section0 40Added as a result of the WINBUR.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.winur.b.html0
1 8sysfiler1 12sysfiler.exe119Any startup section0 38Added as a result of the RETSAM VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.retsam.html0
1 7syshelp1 11syshelp.exe119Any startup section0 39Added as a result of the LOVGATE VIRUS!67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
1 7sysinfo1 11sysinfo.exe119Any startup section0 39Added as a result of the BEDRILL VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.bedrill.html0
1 7SysInit1 13wininit32.exe119Any startup section0 37Added as a result of the XABOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.xabot.worm.html0
1 6Syslib1 10Syslib.exe119Any startup section0 39Adult content related downloader trojan75http://securityresponse.symantec.com/avcenter/venc/data/w32.xabot.worm.html0
130Syslog lptt01or Sy slog ml097e1 10Syslog.exe119Any startup section0176Variant of the RapidBlaster p arasite (in a "Syslog" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 9SysMetrix1 13SysMetrix.exe119Any startup section0111SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics34http://www.xymantix.com/sysmetrix/0
1 6sysmon1 10sysmon.exe119Any startup section0 37Added as a result of the BIZEX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.bizex.worm.html0
1 6SysOps1 6SysOps119Any startup section0 42Added as a result of the MSNCORRUPT VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/backdoor.msncorrupt.html0
1 7syspath1 7drv.exe119Any startup section0 37Added as a result of the SOBER VIRUS!45http://www.avp.ch/avpve/worms/email/sober.stm0
1 6sysPnP1 12bootconf.exe119Any startup section0 73Homepage hijacker, redirecting to coolwwwsearch.com; see for example here48http://boards.cexx.org/viewtopic.php?p=2464#24640
1 6SysPnP1 55rundll32 setupapi, InstallHinfSection.... oemsyspnp.inf219Any startup section0 26Search hijacker - see here 01
4 7SysPool1 9Mssvc.exe119Any startup section0 99StealthDisk - hides folders, files and applications. Will also encrypt them for better protection34http://www.invisicom.com/index.asp0
110SysProtect1 10System.exe119Any startup section0 38Added as a result of the NETSPY VIRUS!75http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NETSPY0
1 4SysR1 9sysmd.exe119Any startup section0 71Adult content based "foistware" (adds hidden components to your system)75http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NETSPY0
1 6SysReg1 10SysReg.exe119Any startup section0 42Added as a result of the CCINVADER2 VIRUS!73http://www.ntsecurity.net/Panda/Index.cfm?FuseAction=Virus&VirusID=270
1 6Sysres1 10Sysres.exe119Any startup section0 38Added as a result of the LOGMOD VIRUS!52http://www.viruslist.com/eng/viruslist.html?id=514650
1 7SysScan1 7bvt.exe119Any startup section0 41Added as a result of the AUTOUPDER VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.autoupder.html0
110SysService1 14SysService.exe119Any startup section0 49Added as a result of the DELF f amily of VIRUSES!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.family.html0
112SysService321 26SysService32.exe ln32k.dll219Any startup section0 38Added as a result of the KINDAL VIRUS!43http://vil.nai.com/vil/content/v_100207.htm0
113SysService32l1 14systask32l.exe119Any startup section0 37Added as a result of the THEUG VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.theug.html0
1 6System1 10run322.exe119Any startup section0 39Added as a result of the LANFILT VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lanfilt.html0
1 6System1 9dcomx.exe119Any startup section0 39Added as a result of the CIREBOT VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.cirebot.html0
1 6system1 12Explorer.exe119Any startup section0259Added as a result of the GRAYBIRD VIRUS! Note - this is located in this is located in C:\Windows\System (Win9x/Me), C:\Win nt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) rather than the valid Windows Explorer which is located in C:\Windows or C:\Winnt78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.html0
1 6System1 10YPager.exe119Any startup section0 79Added as a result of the JUNTADOR.K VIRUS! Note! - this is not Yahoo! Messenger79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_JUNTADOR.K0
1 6system1 11outlook.exe119Any startup section0164Added as a result of the MIMAIL.Q VIRUS! Note that Microsoft's outlook.exe resides in the Program Files sub-directory wh eras this resides in C:\Windows or C:\Winnt76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.q@mm.html0
126System 64 Driver for Games1 12sys64dvr.exe119Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
312System Check1 38Rundll32.exe SysDll32.dll, SystemCheck219Any startup section0 60XPCSpy Pro k eylogger, surveillance and moni toring software24http://www.x-pcsoft.com/0
120System Configuration1 12iexplore.exe119Any startup section0122Added as a result of the RANDEX.AD VIRUS! Note that the real "iexplore.exe" is located in Program Files\Internet Explo rer74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.ad.html0
118System Diagnostics1 13sysdiag32.exe119Any startup section0 41Added as a result of the SDBOT.GEN VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.GEN0
210System DLF1 12cpqdiaga.exe119Any startup section0165Compaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via Start - Programs78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.GEN0
125System Efficiency Monitor1 13mscedit32.exe119Any startup section0 39Added as a result of the SDBOT.P VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.p.html0
125System Efficiency Monitor1 13mscommand.exe119Any startup section0 39Added as a result of the KWBOT.P VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.p.worm.html0
129System Executable DLL Library1 13EXECDLL32.exe119Any startup section0 41Added as a result of the RANDEX.AZ VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.az.html0
121System Initialization1 25msmsgri32.exe payload.dat219Any startup section0 62Added as a result of the RANDEX.D o r ROXY o r ROXY.B VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.roxy.b.html0
326System LifeGuard Scheduler1 11Slsched.exe119Any startup section0 27System LifeGuard s cheduler56http://www.bmtmicro.com/BMTCatalog/win/syslifeguard.html0
314System Monitor1 10SYSMON.EXE119Any startup section0106Comes with some Aopen motherboards. Monitors CPU temp, voltage and fan speed. Warns if any become abnormal56http://www.bmtmicro.com/BMTCatalog/win/syslifeguard.html0
114System Monitor1 12Sysmon16.exe119Any startup section0 37Added as a result of the SDBOT VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html0
112System MScvb1 11mscvb32.exe119Any startup section0 39Added as a result of the SOBIG.C VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.sobig.c@mm.html0
114System Profile1 10Regsrv.exe119Any startup section0 47Added as a result of the BDS/OPTIXPRO.12 VIRUS!57http://www.e-secure-db.us/dscgi/ds.py/ViewProps/URL-213210
114System Service1 10MSREXE.EXE119Any startup section0 35Added as a result of the AML VIRUS!42http://vil.nai.com/vil/content/v_99793.htm0
114system service1 12spoolcrv.cpl119Any startup section0 41Added as a result of the INSPIR.11 VIRUS!42http://vil.nai.com/vil/content/v_99793.htm0
115System Soap Pro1 8soap.exe119Any startup section0104System Soap Pro i nternet cleaning software. B undles foistware like HTTPER a nd Zipclix - best avoided45http://www.doxdesk.com/parasite/Zipclix.ht ml0
314System startup1 12charmapx.exe119Any startup section0 43Only required if using an oriental language45http://www.doxdesk.com/parasite/Zipclix.ht ml0
119System time updator1 12CSysTime.exe119Any startup section0 40Added as a result of the RANDEX.S VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.s.html0
114System Toolkit1 12Systools.exe119Any startup section0 41Added as a result of the RONOPER-G VIRUS!57http://www.sophos.com/virusinfo/analyses/w32ronoperg.html0
111System Tray1 11msccn32.exe119Any startup section0202Added as a result of the PALYH.A VIRUS! Warning - spreading via infected E-mail attachm ents with the sender address faked as support@microsoft.com. Note - do not confuse with the valid SystemTray above43http://vil.nai.com/vil/content/v_100307.htm0
113System Tray321 13SysTray32.exe119Any startup section0 37Added as a result of the REPAD VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.repad.worm.html0
114System-Service1 12EXPLORER.SCR119Any startup section0 73Added as a result of the BENJAMIN VIRUS! KaZaA file-sharing users beware!90http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BENJAMIN.A&VSect=T0
1 7system.1 11system..exe119Any startup section0 45Added as a result of the OPTIXPRO.13.C VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optixpro.13.c.html0
1 9system...1 12system...exe119Any startup section0 45Added as a result of the OPTIXPRO.13.C VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optixpro.13.c.html0
1 8System321 10system.exe119Any startup section0 42Added as a result of the BUSHTRO122 VIRUS!60http://www.sophos.com/virusinfo/analyses/trojbushtro122.html0
1 8System321 12System32.exe119Any startup section0 58Added as a result of the MARI, SYSXXX a nd other VIRUSES!77http://securityresponse.symantec.com/avcenter/ve nc/data/backdoor.sysxxx.html0
1 8System331 10FB_PNU.EXE119Any startup section0 42Added as a result of the NICHELLO-A VIRUS!59http://www.sophos.com/virusinfo/analyses/w32nicehelloa.html0
120SystemAdministration1 12Wincmp32.exe119Any startup section0 38Added as a result of the ASYLUM VIRUS!63http://www.symantec.com/avcenter/venc/data/backdoor.asylum.html0
311SystemAgent1 8Sage.exe119Any startup section0182"Microsoft Plus! System Agent automatically tunes your system, performing tasks such as disk optimization and error correction. It can also run any application at prescheduled times"63http://www.symantec.com/avcenter/venc/data/backdoor.asylum.html0
112SystemBackup1 7mtx.exe119Any startup section0 35Added as a result of the MTX VIRUS!55http://www.symantec.com/avcenter/venc/data/w95.mtx.html0
112SystemBackup1 12MicroLog.exe119Any startup section0 42Added as a result of the MICROLOG.A VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MICROLOG.A0
111SystemCheck1 15Systemcheck.exe119Any startup section0 38Added as a result of the LAVITS VIRUS!63http://www.symantec.com/avcenter/venc/data/w32.hllw.lavits.html0
113SystemChecker1 10Syschk.exe119Any startup section0 38Added as a result of the GAIL.F VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.galil.f@mm.html0
113SystemCONF98i1 17SystemCONF98i.exe119Any startup section0 42Added as a result of the FROZEN BOT VIRUS!41http://golcor.tripod.com/gtbot.htm#frozen0
111SystemDebug1 12Sysdeb32.exe119Any startup section0 38Added as a result of the SYSBUG VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysbug.html0
1 9SystemDll1 13SystemDll.exe119Any startup section0 40Added as a result of the LOXOSCAM VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.loxoscam.html0
1 9systemdrv1 11ms32sys.exe119Any startup section0 34VIRUS related - most likely GAOBOT76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.html0
115SystemEmergency1 17various filenames219Any startup section0 45SmartSearch a CoolWebSearch parasite variant52http://www.merijn.org/cwschronicles.html#smartsearch0
114SystemExplorer1 11explore.exe119Any startup section0 73Homepage hijacker - file located in the "Services" folder in Common Files52http://www.merijn.org/cwschronicles.html#smartsearch0
1 9SystemFTP1 10VSENMB.exe119Any startup section0159Malware (ie, m alic ious softw are). Also changes the system.ini Shell line to read Shell=Explorer.exe VSENMB.exe, and it hacks the Winstart.bat as well52http://www.merijn.org/cwschronicles.html#smartsearch0
110SystemInit1 10iservc.exe119Any startup section0 38Added as a result of the FIZZER VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.fizzer@mm.html0
112SystemLoad321 13sysload32.exe119Any startup section0 40Added as a result of the MIMAIL.E VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.e@mm.html0
113SystemManager1 12Sysman32.exe119Any startup section0 47Added as a result of the DOWNLOADER-BW.B VIRUS!43http://vil.nai.com/vil/content/v_100164.htm0
111SystemMap321 12Netisp32.vbs119Any startup section0 40Added as a result of the REDIST.C VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
113SystemNetwork1 11NETSERV.EXE119Any startup section0 42Added as a result of the NETCONTROL VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.redist.c@mm.html0
1 9SystemReg1 11svchost.exe119Any startup section0 98Added as a result of the DEWIN.E VIRUS! Note - this is not the valid svchost.exe as described here69http://support.mi crosoft.com/default.aspx?scid=KB;EN-US;Q250320&0
1 9SystemReg1 10WINREG.EXE119Any startup section0 39Added as a result of the DEWIN.A VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_DEWIN.A0
311Systems.exe1 11Systems.exe119Any startup section0158Keyboard Spectator - monitoring software that create s records of everything people do on a computer, ie, spying or monitoring depending upon how you call it33http://www.refog.com/download.htm0
310SystemSafe1 11Syssafe.exe119Any startup section0 88System Safety Monitor - system monitoring tool with additional app lication firewalling47http://www.webattack.com/get/systemsafety.shtml0
112SYSTEMSars321 9csrss.exe119Any startup section0192Added as a result of the AHLEM.A VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling69http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/0
1 9SystemSAS1 12System32.exe119Any startup section0 39Added as a result of the KWBOT.C VIRUS!90http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BENJAMIN.A&VSect=T0
114SystemSettingf1 8TRUG.vbs119Any startup section0 38Added as a result of the TRUG.B VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/w97m.trug.b.html0
324SystemSuite Task Manager1 10MXTASK.EXE119Any startup section0185vcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program' s configuration options to enable only the parts you want running all the time - such as Virusscanner Pro40http://www.v-com.com/product/ss_ind.html0
110SystemTray1 14SystemTray.exe119Any startup section0 85Added as a result of the BIGFOOT VIRUS! Note - this is not the valid SystemTray above64http://www.symantec.com/avcenter/venc/data/backdoor.bigfoot.html0
321SystemTrayor Sy sTray1 11SysTray.Exe119Any startup section0372SYSTRAY.EXE - System Tray Services. Provides the Volume Control, PC Card Status, Power Management and other icons that reside in the System Tray (see here). SYSTRAY.EXE may be disabled if none of these services are required. It wil l launch as and when required if you later enable the icons. If you need these items they're available via Start - Settings - Control Panel62http://support.microsoft.com/default.aspx?scid=kb;en-us;1281290
2 9SystemUpd1 13SystemUpd.exe119Any startup section0 51Updater for Swapoo.com, a kind of Napster for games62http://support.microsoft.com/default.aspx?scid=kb;en-us;1281290
320SystemWizard Sniffer1 11Sniffer.exe119Any startup section0105SystemWizard f or Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC59http://www.systemsoft.com/l-2/l-3/products-systemwizard.htm0
315System_Messages1 10pprsen.exe119Any startup section0171TerminatorX - "offers an easy and effective me thod of stopping users running predetermined file sharing programs like KaZaA, messenger programs, chat rooms and the like"27http://www.plevna.f9.co.uk/0
2 7Systest1 11Systest.exe119Any startup section0 31Clean Space t emp files cleaner35http://www.teosoft.com/en/index.htm0
1 9systhread1 13winkernal.exe119Any startup section0 38Added as a result of the LIAMED VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.liamed@mm.html0
1 9Systoan321 11systoan.exe119Any startup section0 45Added as the result of an unidentified VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.liamed@mm.html0
1 7Systray1 12Systray_.Exe119Any startup section0 40Added as a result of the KERGEZ.A VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.kergez.a@mm.html0
1 4sysu1 8sysu.exe119Any startup section0 39Dynamic Desktop Media adware - see here69http://www.symantec.com/avcenter/venc/data/adware.dynamicupdater.html0
3 5SysW81 8csta.exe119Any startup section0 46Clean Space - privacy and perfomance enhancer35http://www.teosoft.com/en/index.htm0
3 6SYSWB61 10SYSWB6.exe119Any startup section0188We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content26http://www.we-blocker.com/0
1 9Syswindow1 13Syswindow.exe119Any startup section0 35Added as a result of the COW VIRUS!60http://www.symantec.com/avcenter/venc/data/backdoor.cow.html0
1 9SYS_CLEAN1 11Service.exe119Any startup section0 40Added as a result of the FLOPCOPY VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.flopcopy.html0
2 6Tablet1 10Tablet.exe119Any startup section0636Loads the tablet drivers for the Wacom Graphics Tablet. This can be unchecked in msconfig without problems if you don't need the tablet functional all the time. Create your own shortcut if you need to run it ad hoc. If you forget to run it before running Paint Shop Pro & Adobe Photo Shop) you may find the following: (1) Paint Shop Pro (version 7.04) - (a) Browse function will NOT work (program freezes) (b) On program exit, PSP does not terminate (you have to CTRL+ALT+DEL to close it) (2) Photo Shop (version 6.01) - (a) Program functions slowdown (d) On program exit it takes noticeably longer to shut down (like 30-45 seconds) 01
2 3Tad1 7tad.exe119Any startup section0143From Turtle Beach's Santa Cruz on a Dell WinME system. Not required - works fine without it including keyboard hot controls for volume and mute 01
214Tahni Deskmate1 9Tahni.exe119Any startup section0 85Tahni Deskmate - "Interactive cartoon ch aracter that lives on your Windows desktop"21http://www.tahni.com/0
215TalkingReminder1 19TALKINGREMINDER.EXE119Any startup section0 75Talking Reminder f rom Software River Solutions - talking calendar reminder55http://www.softwareriver.com/html/talking_reminder.html0
1 7Tapicfg1 11Tapicfg.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
3 7TapiTNA1 11TapiTNA.exe119Any startup section0109Telephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys86http://www.microsoft.com/windows95/downloads/contents/WUToys/W95PwrToysSet/Default.asp0
3 6Tardis1 10Tardis.exe119Any startup section0 39Tardis - time synchronization software29http://www.kaska.demon.co.uk/0
1 8Task Bar1 11TASKBAR.EXE119Any startup section0 41Added as a result of the FRETHEM.J VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_FRETHEM.J0
123Task Monitoring Service1 11svchost.exe119Any startup section0160Added as a result of the CONE.D VIRUS! This is not the valid svchost.exe as described here. Located in a Windows\Tasks directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
2 7Taskbar1 11Taskbar.exe119Any startup section0103Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards69http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
224Taskbar Display Controls1 41RunDLL deskcp16.dll, QUICKRES_RUNDLLENTRY219Any startup section0273Only appears in MSCONFIG if you have a Display Settings icon in the System Tray allowing resolution changes on the fly. Can also be disabled under Control Panel - Display - Settings - Advanced - General. Also appears if you have Win95 with the QuickRes "Powertoy" installed69http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
1 7TaskMan1 12rundll32.exe119Any startup section0121Added as a result of the DVLDR VIRUS! Note - this is not the valid "rundll32.exe" as it's in the Windows\Fonts director y75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dvldr.html0
111taskmanager1 11taskmgr.com119Any startup section0 37Added as a result of the BEREB VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.bereb.html0
1 7Taskmgr1 11Taskmgr.exe119Any startup section0110System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.bereb.html0
211taskmgr.exe1 11taskmgr.exe119Any startup section0233Windows Task Manager in Windows XP. If run from the Startup folder, the tray icon will be put to the system tray after boot. Useful to check if XP has finished running the delayed services after boot. Available via a desktop shortcut75http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.bereb.html0
134taskmngr lptt01or ta skmngr ml097e1 12taskmngr.exe119Any startup section0178Variant of the RapidBlaster p arasite (in a "Taskmngr" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 7TaskMon1 11taskmon.exe119Any startup section0285Added as a result of the MYDOOM.A VIRUS! Note - this is not the valid Win98/Me file of the same name which resides in C: \Windows as this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). It is not normally on a WinXP system76http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.a@mm.html0
311TaskMonitor1 11taskmon.exe119Any startup section0549The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase)76http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.a@mm.html0
2 8TaskPlus1 26TASKPLUS0.EXE TASKPL~1.EXE219Any startup section0113Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN76http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.a@mm.html0
1 8Taskschd1 11TRAYWND.EXE119Any startup section0 42Added as a result of the LITMUS.002 VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_LITMUS.0020
210taskswitch1 14taskswitch.exe119Any startup section0138ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_LITMUS.0020
1 7tasksys1 11tasksys.vbs119Any startup section0 37Added as a result of the BYRON VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/vbs.bryon@mm.html0
2 8Tasktray1 11CTLTray.exe119Any startup section0337Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon. Also allows you to launch the Taskbar via right-click - Show Taskbar. The tasktray can be accessed via Start - Programs - Creative - Sound Blaster Audigy - Taskbar73http://securityresponse.symantec.com/avcenter/venc/data/vbs.bryon@mm.html0
1 3tat1 9tatss.exe119Any startup section0 47Adware based media viewer by The Delfin Project43http://www.delfinproject.com/services.shtml0
411Tau monitor1 10Taumon.exe119Any startup section0147"Tauscan i s a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system."44http://www.agnitum.com/download/tauscan.html0
3 7TBC Pro1 10tbcpro.exe119Any startup section0179TitleBarClock Pro - displays Day, Time, Date, Month, Yea r, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus37http://www.wfcravener.com/tbcpro.html0
2 7tbctray1 11tbctray.exe119Any startup section0180Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start - Settings - Control Panel37http://www.wfcravener.com/tbcpro.html0
4 7TBLFUNC1 12tblmouse.exe119Any startup section0 23Aiptek HyperPen d river49http://www.aiptek.de/de/pr_grafiktabletts_01.html0
3 7TBPanel1 11TBPanel.exe119Any startup section0147Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start - Settings - Control Panel49http://www.aiptek.de/de/pr_grafiktabletts_01.html0
2 6TBTray1 10tbtray.exe119Any startup section0157VLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start - Settings - Control Panel49http://www.aiptek.de/de/pr_grafiktabletts_01.html0
1 8TB_setup1 12tb_setup.exe119Any startup section0 35HuntBar p arasite toolbar installer44http://www.doxdesk.com/parasite/HuntBar.html0
4 8tcactive1 7tca.exe119Any startup section0 86Part of The Cleaner f rom MooSoft - stops virus trojans before they can do any damage34http://www.moosoft.com/thecleaner/0
227TCAUDIAG -offor TC ASUTIEXE1 12tcaudiag.exe119Any startup section0103Associated with the 3COM diagnostic module (3COM NIC Doctor). No further information is available34http://www.moosoft.com/thecleaner/0
3 6TClock1 10TCLOCK.EXE119Any startup section0139Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start - Programs34http://www.moosoft.com/thecleaner/0
3 8TClockEx1 12TCLOCKEX.EXE119Any startup section0126Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden a nd is popular on cover disks35http://users.iafrica.com/d/da/dalen0
3 9tcmonitor1 7tcm.exe119Any startup section0 69Part of The Cleaner f rom MooSoft - warns of changes to the re gistry34http://www.moosoft.com/thecleaner/0
3 8TDKSTART1 12TDKSTART.EXE119Any startup section0 94Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.34http://www.moosoft.com/thecleaner/0
2 7TDKTASK1 11TDKTASK.EXE119Any startup section0 49Taskbar utility for a "control panel" for a CD-RW34http://www.moosoft.com/thecleaner/0
212Teach In Box1 12teachbox.exe119Any startup section0 52Tutoring program that comes with a SystemAX Computer34http://www.moosoft.com/thecleaner/0
413Tech-In-A-Box1 11techbox.exe119Any startup section0184Tech-in-a-Box " provides easy-to-use tools for various system ma intenance tasks. From backup and restore to diagnostics and repairs, Tech-in-a-Box is your tool to stay up and running"43http://tools.supportforyourpc.com/tiab.html0
213Telemeter 3.01 14telemeter3.exe119Any startup section0 51Internet connection bandwidth meter from a user ISP43http://tools.supportforyourpc.com/tiab.html0
4 8Telepath1 12telepath.exe119Any startup section0275Drivers for the WinModem versions of the US Robotics "Telepath" series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
110Tencent QQ1 29Rund1132.exe qq.dll, Rundll32219Any startup section0 42Added as the result of the QQPASS.F VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.f.html0
115Terminate Popup1 16FPUK.exe ZPU.exe219Any startup section0101Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker. Also see here81http://www.spywareinfo.com/yabbse/index.php?board=21;action=display;threadid=24110
3 7TEscKey1 11TEscKey.exe119Any startup section0115Toshiba Escape Key handler. Enables you to program and use the FNEsc key combination to perform a specific function81http://www.spywareinfo.com/yabbse/index.php?board=21;action=display;threadid=24110
2 9TextAloud1 16TextAloudMP3.exe119Any startup section0 56TextAloud MP3 - convert text into spoken words and MP3s46http://www.nextuptech.com/TextAloud/index.html0
229Textbridge Instant Access OCR1 12telepath.exe119Any startup section0161TextBridge f rom Scansoft. OCR (optical character recog nition) software for scanning documents into popular editing applications. Available via Start - Programs35http://www.scansoft.com/textbridge/0
3 6TFncKy1 10TFncky.exe119Any startup section0 65Deals with the Fn - Function key combinations on a Toshiba laptop35http://www.scansoft.com/textbridge/0
3 5TFNF51 9TFNF5.exe119Any startup section0147Toshiba Hotkey Utility for Display Devices. By pressing FN + F5, a window appears showing the displays that can be chosen û LCD, LCD + CRT, CRT, TV35http://www.scansoft.com/textbridge/0
4 8tfswctrl1 12tfswctrl.exe119Any startup section0376Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"35http://www.scansoft.com/textbridge/0
1 7TFTP###1 7tftp###119Any startup section0 64Added as a result of the SPYBOT VIRUS! where # can be any number76http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html0
3 8TFunckey1 12TFuncKey.exe119Any startup section0 65Deals with the Fn - Function key combinations on a Toshiba laptop76http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html0
325Tgcmdor tg cmdprovidersbc1 9tgcmd.exe119Any startup section0396See above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some a s it has the ability to retrieve user information. Whether it does so depe nds upon the provider. "tgcmdprovidersbc" is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation61http://www.answe rsthatwork.com/Tasklist_pages/tasklist_t.htm0
1 6tgkill1 10tgkill.exe119Any startup section0296Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start - Settings - Add/Remove Programs48http://www.spywareguide.com/spydet_424_tgdc.html0
3 9Tgsetsite1 9tgfix.exe119Any startup section0138See TgAddserver and Tgcmd above. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation48http://www.spywareguide.com/spydet_424_tgdc.html0
2 7Thdetrf1 12thdetr32.exe119Any startup section0 43Appears to be rela ted to Lycos advertising48http://www.spywareguide.com/spydet_424_tgdc.html0
320The Easy Bee\'s Hive1 12ATCEgSvr.exe119Any startup section0183The Easy Bee is a software that allows you to record Internet navigation sequences, which can include form filling and button clicking and to attach a replay schedule to each sequence48http://www.spywareguide.com/spydet_424_tgdc.html0
3 7THGuard1 12TH_Guard.exe119Any startup section0 41Resident memory scanning for TrojanHunter43http://www.mischel.dhs.org/trojanhunter.jsp0
133This is a virus, please delete it1 15bigbadvirus.exe119Any startup section0 40Added as a result of the RANDEX.F VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.f.html0
3 7THOTKEY1 11THotkey.exe119Any startup section0215Associated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked, like the one that regulates the volume of the system beep, but others didn't, like the one that immediately blackens your screen73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.f.html0
3 9ThrustTSR1 11TMTMTSR.exe119Any startup section0174Thrustmaster Thrustmapper. "The Thrustmapper - t-mapper - icon sits on your taskbar and automatically dete cts when the joystick is plugged in and configures it accordingly"74http://us.thrustmaster.com/news/read.php3?newsid=159&skin=Thrustmaster0
3 6TiADSL1 12tidslmon.exe119Any startup section0143Actiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start - Programs74http://us.thrustmaster.com/news/read.php3?newsid=159&skin=Thrustmaster0
1 5Tiger1 9Shine.exe119Any startup section0 56Added as a result of the HAPPYLOW ( or NISH E-A) VIRUS!55http://www.sophos.com/virusinfo/analyses/w32nishea.html0
125Time Zone Synchronization1 17wscript zshell.js219Any startup section0 40Added as a result of the NETDEX-A VIRUS!57http://www.sophos.com/virusinfo/analyses/trojnetdexa.html0
215Timemanager.exe1 15Timemanager.exe119Any startup section0107Easy to use program for recording how you spend your time, designed to help you in billing multiple clients26http://www.backupplus.net/0
210TimeOnline1 14TIMEONLINE.EXE119Any startup section0120Lightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start - Programs26http://www.backupplus.net/0
2 6TimeUp1 10Timeup.exe119Any startup section0 31TimeUp - internet online timer50http://www.timeupsoft.com/English/timeup/index.htm0
2 8TINTSETP1 12TINTSETP.EXE119Any startup section0108Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word50http://www.timeupsoft.com/English/timeup/index.htm0
1 7Tiny AV1 11fooding.exe119Any startup section0 40Added as a result of the NETSKY.I VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.i@mm.html0
422Tiny Personal Firewall1 10persfw.exe119Any startup section0 22Tiny Personal Firewall44http://www.tinysoftware.com/home/tiny2?la=EN0
3 9tinySpell1 13tinyspell.exe119Any startup section0251Tinyspell - "allows you to easily and quickly check the spellin g of words in any Windows application. Monitors your typing on the fly, alerts you whenever it detects a misspelled word, and checks the spelling of every word you copy to the clipboard"44http://www.megspace.com/computers/tinyspell/0
3 9TiomanExe1 10Tioman.Exe119Any startup section0 79Agate Tioman - warm and hot swap removable bay dev ice manager for IBM laptops25http://www.agatetech.com/0
2 4Tips1 13mousetips.exe119Any startup section0 33Suggests tips on using your mouse25http://www.agatetech.com/0
313TiTleBarClock1 17TiTleBarClock.exe119Any startup section0150TitleBarClock d isplays the day/month/time and free ph ysical RAM on the right hand side of an open window, replacing the system tray clock at startup34http://www.wfcravener.com/TBC.html0
2 6Tivoli1 9LCFEP.EXE119Any startup section0221Tivoli æTMEÆ System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"34http://www.wfcravener.com/TBC.html0
223TkBellExeor Tk Bell.Exe1 36evntsvc.exe realsched.exe tkbell.exe219Any startup section0452Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here f or more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools - Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK46http://www.mikescomputerinfo.com/TkBellExe.htm0
2 8tkonnect1 12TKONNECT.EXE119Any startup section0 83Dialer for the Tiscali i nternet service provider. Available as a desktop shortcut25http://www.tiscali.co.uk/0
317TM Outbreak Agent1 12TMOAgent.exe119Any startup section0141Trend Micro Internet Security anti-virus software virus outbreak warnings. Notifies users of virus outbreaks and offers to update the scanner25http://www.tiscali.co.uk/0
316TMA distribution1 10cfinst.exe119Any startup section0143Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients25http://www.tiscali.co.uk/0
1 7tmchook1 11tmchook.exe119Any startup section0 64Detected by Kaspersky as the TrojanDownloader.Win32.VB.aa VIRUS!25http://www.tiscali.co.uk/0
3 6TMESBS1 12TMESBS21.exe119Any startup section0137Toshiba Mobile Extension Selectable Bay Service for WinXP - support for docking stations. Not required if you don't use a docking station25http://www.tiscali.co.uk/0
3 9TMExLogon1 10TMESRV.EXE119Any startup section0130Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station25http://www.tiscali.co.uk/0
3 6TMOUSE1 10tmouse.exe119Any startup section0367Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects, except disabling the scroll/zoom features of the AccuPoint25http://www.tiscali.co.uk/0
2 7TMTMTSR1 11TMTMTST.exe119Any startup section0155Installed with Thrustmaster game controllers. It launches the Thrustmapper utility. Not required if you install the "driver only" from Thrustmaster website28http://www.thrustmaster.com/0
3 6TNTClk1 10TNTCLK.exe119Any startup section0398Overclocking program for TNT, TNT2, and other graphics cards. This program can overclock the graphics card manually after startup when needed, especially before starting a gaming session. However, for simplicity, it can be left checked to let it run once at startup to automatically overclock the graphics card. In this case, it doesn't even run in the background after doing its job28http://www.thrustmaster.com/0
115ToPicks Starter1 10Idhost.exe119Any startup section0 25ToPicks p arasite related44http://www.doxdesk.com/parasite/TOPicks.html0
1 8topmoxie1 11JavaRun.exe119Any startup section0 32Marketing software from TopMoxie24http://www.etraffic.com/0
411Toshiba Fan1 7fan.exe119Any startup section0 97Toshiba untilty to keep the fan on a laptop running if they fail to detect there is too much heat24http://www.etraffic.com/0
317Toshiba Key State1 12KEYSTATE.EXE119Any startup section0196Displays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g., Toshiba) laptops which do not have a Caps Lock indicator light. Available via Start - Programs24http://www.etraffic.com/0
213ToshibaPinger1 10pinger.exe119Any startup section0227Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification. Disabling instructions here81http://www.spywareinfo.com/yabbse/index.php?board=18;action=display;threadid=26730
3 8TOSHIBSU1 12Toshibsu.exe119Any startup section0256Reduces the power consumption when the laptop isn't being used to preserve battery power. Hibernate function doesn't work if this is disabled. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run off battery regularly81http://www.spywareinfo.com/yabbse/index.php?board=18;action=display;threadid=26730
3 7TosHKCW1 11TosHKCW.exe119Any startup section0158Toshiba Hot Key Change/Control Wireless. Permits you to use a hot key to activate/deactivate built-in 802.11b wireless transmission on a laptop (if installed)81http://www.spywareinfo.com/yabbse/index.php?board=18;action=display;threadid=26730
4 6TosMem1 10tosmem.exe119Any startup section0285Toshiba laptop related. Win98/Me ACPI system can not hibernate or go on standby if all of the physical memory lower than 640KB is locked. This utility allocates and locks three pages on boot and then releases them on standby/hibernation for ACPI.SYS in order to solve the above problem81http://www.spywareinfo.com/yabbse/index.php?board=18;action=display;threadid=26730
311TotRecSched1 15TotRecSched.exe119Any startup section0145Scheduler for Total Recorder - allows automatic recording of a show at a given time for later playback or you can use the scheduler as an alarm40http://www.highcriteria.com/products.htm0
313Touch Manager1 10WinLED.exe119Any startup section0 97Dell keyboard utility. Disabling can result in loss of screen saver and power saver functionality40http://www.highcriteria.com/products.htm0
3 7TouchED1 11TouchED.exe119Any startup section0 43TouchPad On/Off Utility on a Toshiba laptop40http://www.highcriteria.com/products.htm0
2 4tour1 18regedit ..tour.reg219Any startup section0 62Edits registry values to keep the WinMe tour in Task Scheduler40http://www.highcriteria.com/products.htm0
2 4Tour1 11wincool.exe119Any startup section0703Component of WinME that's annoying as hell. Pop's up a prompt to play the C:\WINDOWS\Application Data\Microsoft\INTROCONTENT.HTA that plays a full screen version of the WinME product preview Windows Media video file that cannot be stopped to my knowledge until it finishes. That prompt will keep popping up after an install/reinstall of WinME until you give in and watch the thing. It also puts a task scheduler entry to run that annoying thing every 30 minutes, and don't bother deleting that entry, Windows puts it right back. Not only should you disable it from running, you should delete the thing altogether, as it, somehow can re-enable itself. Apparently you can try setting the file to read only40http://www.highcriteria.com/products.htm0
3 5TP4EX1 9tp4ex.exe119Any startup section0 48Adds accessibility options for an IBM TrackPoint40http://www.highcriteria.com/products.htm0
3 7tp4serv1 11tp4serv.exe119Any startup section0129Supports the "pointer stick" on Thinkpads in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work40http://www.highcriteria.com/products.htm0
3 8TpHotKey1 11TPHKMGR.EXE119Any startup section0178Activates "ThinkPad Help" when the "Thinkpad key" is pressed on an IBM ThinkPad laptop. Also activates the audio buttons (volume up/down, mute) on models such as the Thinkpad T3040http://www.highcriteria.com/products.htm0
3 8TpKmapMn1 12TpKmapMn.exe119Any startup section0206Create Keyboard combinations for special Thinkpad buttons when using an external keyboard, e.g. "Ctrl-arrow up" for "volume up". Only required when using an external keyboard. Available via Start - Programs40http://www.highcriteria.com/products.htm0
315TPP Auto Loader1 11Tppaldr.exe119Any startup section0225Installed with DataStor's ( and some other manufacturers) USB 2.0 based external DVD, CD-ROM and CD-RW drives. System tray icon allowing the user to disconnect the external drive without an error message being displayed27http://www.datastor.com.tw/0
3 7Tprtray1 11Tprtray.exe119Any startup section0 62Displays the Power icon in the System Tray on a Toshiba laptop27http://www.datastor.com.tw/0
2 6TPTray1 10TPTray.exe119Any startup section0100Touchpad configuration tray icon for Toshiba laptops. Available via Start - Settings - Control Panel27http://www.datastor.com.tw/0
4 8TPWRTRAY1 12Tpwrtray.exe119Any startup section0158Toshiba laptop's own Advanced Power Management system which disables Windows APM (greyed-out in Control Panel). You can't choose which of the 2 systems to use27http://www.datastor.com.tw/0
2 9Traceless1 10launch.exe119Any startup section0176Traceless 2003 - clear your cookies, temp directories and browser history w ith a click of a button. It also clears the recent documents and the IE drop down auto complete box56http://users.bigpond.com/pvantarakis/traceless/index.htm0
313TrackpointSrv1 22daemon.exe tp4serv.exe219Any startup section0116Supports the "pointer stick" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work56http://users.bigpond.com/pvantarakis/traceless/index.htm0
334Tracks Eraseror Tr acks Eraser Pro1 6te.exe119Any startup section0 86Tracks Eraser Pro f rom Acesoft - "Erases a ll tracks of your internet activity" 23http://www.acesoft.net/0
311Transparent1 50TransparentW.exe TransparentD.exe TransparentB.exe219Any startup section0156Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here45http://home.attbi.com/~jguerette/transparent/0
328TransparentIconsor tr anicon1 12tranicon.exe119Any startup section0216A Tweak-XP c omponent (only in the registered version), makes Desktop icons transparent. Can be enabled/disabled via Tweak-XP - System + File Tweaks - Windows Tweaks - Desktop Tweaks - Make Desktop Icons Transparent23http://www.tweakxp.com/0
3 8Trashgrd1 12TRASHGRD.EXE119Any startup section0163Part of McAfee Nuts & Bolts. Protects all the files you delete, even files deleted in DOS or in 16-bit Windows applications, by sending them to the Recycle Bin23http://www.tweakxp.com/0
216Tray Temperature1 14Weatherbug.exe119Any startup section0119Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start - Programs23http://www.tweakxp.com/0
312traydate.exe1 12TRAYDATE.EXE119Any startup section0 79Displays the date as well as the time in the System Tray. Available from TUCOWS73http://download.tucows.com/perl/PDA.html?Target=/wince/preview/32627.html0
311TrayManager1 11Trayman.exe119Any startup section0 81TrayManager h ides system tray icons (FreeCell won't work when TrayMan is loaded)63http://www.zdnet.com/pcmag/pctech/content/18/04/ut1804.001.html0
3 7Traymon1 11traymon.exe119Any startup section0121Netropa Internet Receiver traymonitor. Will only launch the bar if you are connected to the internet and there's new news63http://www.zdnet.com/pcmag/pctech/content/18/04/ut1804.001.html0
213TraySantaCruz1 11tbctray.exe119Any startup section0180Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start - Settings - Control Panel63http://www.zdnet.com/pcmag/pctech/content/18/04/ut1804.001.html0
1 5TrayX1 12winppr32.exe119Any startup section0 39Added as a result of the SOBIG.F VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html0
211tray_helper1 15tray_helper.exe119Any startup section0142Tray Helper i s an Email checker with additional tools, including a popup window killer, pinger module to monitor hosts and an event reminder48http://www.republika.pl/trayhelper/indexeng.html0
313TrojanScanner1 11Trjscan.exe119Any startup section0139Trojan Remover f rom Simply Super Software. Scans for an removes t rojan viruses where anti-virus software may have not detected or removed46http://www.simplysup.com/tremover/details.html0
324True Internet Color Icon1 17internetcolor.exe119Any startup section0262Part of Colorific & 3Deep from LightSurf Technologies ( nee E-Color). "With True Inte rnet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"34http://www.colorific.com/index.htm0
217TrueSync Launcher1 10tstool.exe119Any startup section0114Starfish TrueSync - for synchronization between Windows platforms and popula r devices, applications and services48http://www.starfish.com/solutions/data/data.html0
410TrueVector1 9VSMON.EXE119Any startup section0 82Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this48http://www.starfish.com/solutions/data/data.html0
1 6tskdbg1 10tskdbg.exe119Any startup section0 39Added as a result of the FLOOD.E VIRUS!68http://www.symantec.com/avcenter/venc/data/backdoor.irc.flood.e.html0
2 7TSMsger1 11TSMsger.exe119Any startup section0 86Epson scannner software - required for "one-touch" operation. Can be launched manually68http://www.symantec.com/avcenter/venc/data/backdoor.irc.flood.e.html0
319TuneUp MemOptimizer1 16memoptimizer.exe119Any startup section0178Part of "TuneUp Utilities", specifically 2003 version. "Monitors and optimizes free memory in the background." Basically, it cleans RAM and also allows you to clear the clipboard30http://www.tukati.com/vno.html0
313TurboExplorer1 6TE.exe119Any startup section0242Web accelerator - "TurboExplorer« 2 .x is a real-time web surfing accelerator spe cifically designed for Internet Explorer« 4/5 to achieve a faster and more effective approach to the internet". Only needed if you find it improves web browsing42http://www.downlinx.com/proghtml/9/969.htm0
318TurboMemoryCharger1 22turbomemorycharger.exe119Any startup section0198Some users swear by memory management utilities such as Turbo Memory Charger b ut others say you don't need th em - especially if you have Win98 or WinME. See this a rticle and make up your own mind34http://www.aumha.org/a/memmgmt.htm0
2 9TurboNote1 10tbnote.exe119Any startup section0 57Post-It's on your desktop. Available via Start - Programs34http://www.aumha.org/a/memmgmt.htm0
3 8TurboTop1 12TurboTop.exe119Any startup section0 43TurboTop - make any window "Always on top"39http://www.savardsoftware.com/turbotop/0
1 8TV Media1 7Tvm.exe119Any startup section0 32CleverIEHooker h ijacker variant53http://www.pestpatrol.com/mscleveriehookersupport.asp0
1 4TVMD1 8tvmd.exe119Any startup section0190Total Velocity - "Secure commerce company that e nables the æcheckoutÆ process for our customers in order to safely and securely purchase our award winning software". Autointsalling spyware29http://www.totalvelocity.com/0
2 8TVWakeup1 12tvwakeup.exe119Any startup section0163MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it29http://www.totalvelocity.com/0
3 8TWarnMsg1 12twarnmsg.exe119Any startup section0114Toshiba System Warning Function for Windows 98, Me, 2000 - provides notification dialog when the cooling fan stops29http://www.totalvelocity.com/0
3 8Tweak UI1 35rundll32.exe tweakui.cpl, tweakmeup219Any startup section0 94Restores settings that can't be retained if you have Microsoft's Tweak UI "powertoy" installed31http://www.winguides.com/tweak/0
3 8Tweak UI1 36rundll32.exe tweakui.cpl, tweaklogon219Any startup section0 79Automatically logs you on if you have Microsoft's Tweak UI "powertoy" installed31http://www.winguides.com/tweak/0
3 8Tweak UI1 40RunDLL32 tweakUI.DLL, TWEAKUI /tweakmeup219Any startup section0122Added as a result of the SUBWOOFER VIRUS! Note - the real Tweak UI entry for this is "rundll32.exe tweakui.cpl, tweakmeup"79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.subwoofer.html0
3 8Tweak-Me1 12TWEAK-ME.exe119Any startup section02043rd party version of Miscrosoft'sTweak UI "powertoy" with many more options and controls (plus full support), designed specifically to take advantage of features in WinMe/2K and above, available from here23http://www.tweak-me.de/0
3 8Tweak-xp1 12Tweak-xp.exe119Any startup section0 53Main program for Tweak-XP - a WinXP tweaking utility23http://www.tweakxp.com/0
3 8TweakDUN1 12tweakdun.exe119Any startup section0171Utility to optimize your Internet Browser Software. TweakDUN promotes faster Internet data transfer rates and faster downloads by eliminating fragmentation of data packets23http://www.tweakxp.com/0
211TwkSCardSrv1 12SCardS32.Exe119Any startup section0 57Used with Towitoko SmartCard Readers for card recognition23http://www.tweakxp.com/0
1 8Twunk_641 12twunk_64.exe119Any startup section0110System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory23http://www.tweakxp.com/0
2 6type321 10type32.exe119Any startup section0243For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings. Not required unless you have changed them23http://www.tweakxp.com/0
215TypingSatellite1 10KBOOST.exe119Any startup section0154Typing Master 2002 b ackground utility that coll ects typing errors and builds up customised typing lessons for your needs. Available via Start - Programs28http://www.typingmaster.com/0
3 8UBSShell1 12UBSShell.exe119Any startup section0 49UBS (United Bank of Switzerland) banking software28http://www.typingmaster.com/0
2 6UC_SMB1 11ucstart.exe119Any startup section0171Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed28http://www.typingmaster.com/0
2 8uc_start1 13ucstartup.exe119Any startup section0119Auto updater feature for IBM machines that tries to connect to IBM to see if there are any new drivers, patches and etc28http://www.typingmaster.com/0
3 8UD Agent1 6UD.EXE119Any startup section0253The United Devices Agent c an recycle your PC's unused resou rces and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start - Programs36http://members.ud.com/download/gold/0
3 8Ueproc321 12UEPROC32.exe119Any startup section0 91Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions36http://members.ud.com/download/gold/0
2 6Uidler1 10Uidler.exe119Any startup section0 49Uniloc Titlewave Browser used with some shareware36http://members.ud.com/download/gold/0
2 9UIWatcher1 13UIWatcher.exe119Any startup section0 82Ashampoo Uninstaller Suite - installation watcher. Available via Start - Programs92http://www.ashampoo.com/frontend/products/php/product.php?idstring=0103&session_langid=20
232Ulead Photo Express x.0 Calendar1 12calcheck.exe119Any startup section0282Ulead Calendar Checker - part of Ulead Photo Express, where "x" represents the versio n number. Automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually. See here f or disabling instructions42http://support.ulead.com/kb/0008/KB603.htm0
231Ultra Hal Assistant 4.5 Startup1 11HalAsst.exe119Any startup section0140Zabaware Ultra Hal Assistant - artificial intelligenc e conversation simulator. It is capable of being your digital secretary and companion34http://www.zabaware.com/assistant/0
1 8Ulubione1 11sys****.exe119Any startup section0 83Search Hijacker, redirecting to maxxxhosters.com - where **** are random characters34http://www.zabaware.com/assistant/0
216UMAX VistaAccess1 12vsaccess.exe119Any startup section0 89VistaAccess gives you quick and easy access to scanning functions right from your desktop34http://www.zabaware.com/assistant/0
3 6UMonit1 10umonit.exe119Any startup section0 36Alerts when USB device is plugged in34http://www.zabaware.com/assistant/0
4 8umxagent1 12umxagent.exe119Any startup section0 40Tiny Personal Firewall V 4 - main engine44http://www.tinysoftware.com/home/tiny2?la=EN0
4 7umxldra1 11umxldra.exe119Any startup section0 74User mode executive module DLL loader - part of Tiny Personal Firewall V 444http://www.tinysoftware.com/home/tiny2?la=EN0
4 7UMXLDRW1 11UMXLDRW.exe119Any startup section0 32Tiny Personal Firewall ( pre V4)44http://www.tinysoftware.com/home/tiny2?la=EN0
113Uninstall####1 7upd.exe119Any startup section0 61Adult content based screen saver where #### can be any number44http://www.tinysoftware.com/home/tiny2?la=EN0
216UninstallAbility1 12uability.exe119Any startup section0 29UninstallAbility u ninstaller43http://www.aurelitec.com/software/uability/0
1 6Update1 18original file path219Any startup section0 39Added as a result of the LYNDEGG VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lyndegg.html0
1 6Update1 10Sysupd.exe119Any startup section0 40Added as a result of the SLACKBOT VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32nhllw.lyndegg.html0
215Update Grokster1 12WiseUpdt.exe119Any startup section0158Automatically updates the Grokster file sharing software. Beware of adware and spyware when using this type of program, for instance, Grokster contains CyDoor77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.lyndegg.html0
114Update Install1 10Schost.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
414Update Service1 10Update.exe119Any startup section0167Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is r un so best to leave it enabled. Prevent it dialling out via a firewall39http://www.handybits.com/easycrypto.htm0
115UpdateComponent1 11CNF UPD.EXE219Any startup section0 42Added as a result of the SPYBOT.GEN VIRUS!39http://www.handybits.com/easycrypto.htm0
111UpdateMedia1 15UpdateMedia.exe119Any startup section0 22MediaUpdate f oistware48http://www.doxdesk.com/parasite/MediaUpdate.html0
225updatemgr.exeor UP DATE~11 26updatemgr.exe UPDATE~1.EXE219Any startup section0322Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Can go to http://www.earthlink.net and download the updates manually48http://www.doxdesk.com/parasite/MediaUpdate.html0
1 7updater1 12wupdater.exe119Any startup section0 37eUniverse KeenValue p arasite related46http://www.doxdesk.com/parasite/KeenValue.html0
1 9updater321 13winload32.exe119Any startup section0111Added as the result of the CULT.M VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cult.m@mm.html0
1 7Updates1 12msupdate.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
215Updates from HP1 16backweb*****.exe119Any startup section0100Automatically detects an internet connection and downloads any available updates - * is random digit40http://www.merijn.org/cwschronicles.html0
211Updatestats1 15Updatestats.exe119Any startup section0254Statblaster - "Get officially liscensed MLB pi tch-by-pitch real time updates from every stadium around the league. StatBlaster provides live streaming statistics for each fantasy matchup you want tracked either in one league or across all your leagues"27http://www.statblaster.com/0
1 6Updmgr1 10updmgr.exe119Any startup section0 35eUniverse/KeenValue a dware variant42http://doxdesk.com/parasite/KeenValue.html0
423UPSentry 2000or UP Slim1 8upsd.exe119Any startup section0 98Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss 53http://hq.mcafeeasap.com/dispVirus.asp?virus_k=1000570
1 6UPSUtl1 7web.exe119Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
3 8Uptimer41 12Uptimer4.exe119Any startup section0213Uptimer4 is an appbar which displays time, date, uptime, free ram, free pagefile, cpu usage, disk free space, battery power, IP addresses, TCP throughput, list of running processes, netstat and several more things40http://www.merijn.org/cwschronicles.html0
1 8UpToDate1 12uptodate.exe119Any startup section0 32BrowserAid/BrowserPal f oistware47http://www.doxdesk.com/parasite/BrowserAid.html0
2 6URLMAP1 10Urlmap.exe119Any startup section0184Installed by MS Money, and runs whenever you start IE. All it does is bring up an annoying sidebar (kind of like the search window) with 'financial links' when the web page supports it47http://www.doxdesk.com/parasite/BrowserAid.html0
4 9UrtSvcExe1 12Urt95Svc.exe119Any startup section0217"Cisco Secure URT is a virtual LAN (VLAN) assignment service that enhances LAN security by actively identifying and authenticating users and then associating them only to their specific network services and resources"47http://www.doxdesk.com/parasite/BrowserAid.html0
311USBDetector1 15USBDetector.exe119Any startup section0118USBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware47http://www.doxdesk.com/parasite/BrowserAid.html0
3 8USBMMKBD1 12usbmmkbd.exe119Any startup section0243USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version (available here) no longer pings a server when on-line wheras the older version did but did not transmit any user information 01
2 5USBTA1 12usbtapnp.exe119Any startup section0 60System Tray access for the BeWAN Gazel 128 USB I SDN adapter56http://www.bewan.com/bewan/products/isdn/gazel128usb.php0
110User23.exe1 8DIAL.exe119Any startup section0 56This is a trojan trying to disguise itself as User32.dll56http://www.bewan.com/bewan/products/isdn/gazel128usb.php0
1 6User321 8filename119Any startup section0 40Added as a result of the NETTRASH VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.nettrash.html0
1 5ushli1 12sscbltqu.exe119Any startup section0 80Obtained from an MP3 search list site. Also generates random processes on reboot78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.nettrash.html0
2 8USSShReg1 12USSSHREG.EXE119Any startup section0 90Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers78http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.nettrash.html0
210UtilityPro1 14UtilityPro.exe119Any startup section0119IE search toolbars as supplied by people such as Yellow Internet and SearchBoss and written by Rawhide Search Solutions35http://www.buildyourowntoolbar.com/0
212Utopia Angel1 9Angel.exe119Any startup section0 38Calculator for the online Utopia g ame31http://games.swirve.com/utopia/0
318V.92 Modem On Hold1 9Ltmoh.exe119Any startup section0122Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet31http://games.swirve.com/utopia/0
4 7V128IID1 40Rundll32.exe v128iitw.dll, STB_InitTweak219Any startup section0142Loads drivers for some STB graphics cards such as the STB nVIDIA TNT 16MB. Required if you don't want to experience lock-ups or error messages31http://games.swirve.com/utopia/0
3 7va10key1 11va10key.exe119Any startup section0 68Only required if you use the 10 kay bay unit with a Sony Vaio laptop31http://games.swirve.com/utopia/0
4 7VAGCtrl1 11VAGCTRL.EXE119Any startup section0 54Vexira Antivirus - virus scanner from Central Command51http://www.centralcommand.com/windows_products.html0
4 7VAGuard1 9VAGNT.exe119Any startup section0 54Vexira Antivirus - virus scanner from Central Command51http://www.centralcommand.com/windows_products.html0
326VAIO Action Setup (Server)1 10VAServ.exe119Any startup section0154Sony Vaio utility that auto-launches selected applications when you plug in a digital video camera, digital still camera, etc. via iLink (FireWire) or USB51http://www.centralcommand.com/windows_products.html0
110VbouncerDL1 21VBouncerInnerxxxx.exe119Any startup section0438Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here a nd here. "xxxx" represents 4 ran dom numbers81http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=37890
1 6VB_run1 13comctl_32.exe119Any startup section0 36Dubious downloader from densmail.com81http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=37890
2 7VC5Play1 11VC5Play.exe119Any startup section0 71Virtual CD d rive emulator - version 5. Available vi a Start - Programs32http://www.virtualcd-online.com/0
114VCatch Premium1 13VCatchpre.exe119Any startup section0 54VCatch antivirus. Considered spyware itself - see here64http://research.pestpatrol.com/PestInfo/Pest_Detail.asp?id=576840
2 9VCDPlayer1 13VCDPlayer.exe119Any startup section0 63Virtual CD d rive emulator. Available via Start -> ; Programs32http://www.virtualcd-online.com/0
2 8vcdplayx1 12vcdplayx.exe119Any startup section0137CD emulation part of GameDrive & amp; VirtualDrive f rom Farstone. Not required as starting these programs load th is automatically 56http://www.farstone.com/home/en/shtml/vdpoverview .shtml0
3 8VCDTower1 12VCDTower.exe119Any startup section0216Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking56http://www.farstone.com/home/en/shtml/vdpoverview .shtml0
2 9VCSPlayer1 11vcsplay.exe119Any startup section0 63Virtual CD d rive emulator. Available via Start -> ; Programs32http://www.virtualcd-online.com/0
2 6vdtask1 10vdtask.exe119Any startup section0132Program part of GameDrive & amp; VirtualDrive f rom Farstone. Not required as starting these programs load th is automatically 56http://www.farstone.com/home/en/shtml/vdpoverview .shtml0
219Verizon Control Pad1 8cpad.exe119Any startup section0102Control Pad - installed with Verizon DSL accounts. Tool designed to streaml ine the online experience56http://www.verizon.net/pands/dsl/benefits/controlpad.asp0
329Verizon Online Support Center1 10matcli.exe119Any startup section0568"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Verizon Online Support Center is required to run with the Help and Support program. If you uncheck Verizon Online Support Center and and then run help and Support it will add another Verizon Online Support Center in the startup menu. If you remove the Verizon Online Support Center in the add/remove program some help menus in help and support will not be available. You decide56http://www.verizon.net/pands/dsl/benefits/controlpad.asp0
3 7versato1 11versato.exe119Any startup section0144"Hot" button (such as volume and browser control) management and a CD player as supplied with QTronix (as possibly Micro Innovations) keyboards59http://www.mic-innovations.com/keyboards_keypads_notes.html0
1 7Version1 22Version.exe manage.exe219Any startup section0 21JRAUN a dware variant73http://securityresponse.symantec.com/avcenter/venc/data/adware.jraun.html0
4 9Vet Alert1 12vetmsg9x.exe119Any startup section0 69Computer Associates "InnoculateIT" and Vet Anti-Virus v irus software22http://www.vet.com.au/0
412Vet Start Up1 19vet98.exe vet32.exe219Any startup section0236Computer Associates "InnoculateIT" and Vet Anti-Virus v irus software. This optio n will slow down your system, if set too aggressively. There is no need to scan every file when opened, closed, etc. Check in InoculateIT PE options22http://www.vet.com.au/0
3 7VetTray1 11vettray.exe119Any startup section0162Computer Associates "InnoculateIT" and Vet Anti-Virus v irus software. System Tra y quicklaunch access, not really necessary but only occupies 36k resources22http://www.vet.com.au/0
1 9Vidcompat1 13Vidcompat.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
113Video Manager1 12videomgr.exe119Any startup section0 40Added as a result of the PANDEM.C VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.pandem.c.worm.html0
111VideoDriver1 8filename119Any startup section0 41Added as a result of the GSPOT20.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_GSPOT20.A0
111VideoDriver1 12videodrv.exe119Any startup section0 40Added as a result of the MIMAIL.A VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.a@mm.html0
111VideoDriver1 12gspotbot.exe119Any startup section0 40Added as a result of the SPIGOT.C VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.spigot.c.html0
2 6VidSvr1 10vidsvr.exe119Any startup section0177MS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.spigot.c.html0
324Virtual Access Scheduler1 12VASCHD32.EXE119Any startup section0 38The scheduler for mail and usenet tool78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.spigot.c.html0
115Virtual Bouncer1 18VirtualBouncer.exe119Any startup section0400Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here a nd here81http://www.spywareinfo.com/yabbse/index.php?board=11;action=display;threadid=37890
212VirtualDrive1 10VDTask.exe119Any startup section0 88VirtualDrive f rom Farstone - virtual CD drive emulator. Available via S tart - Programs52http://www.farstone.com/home/en/html/productsvdp.htm0
110Virus Scan1 12virscana.exe119Any startup section0 29Added as a result of a VIRUS!52http://www.farstone.com/home/en/html/productsvdp.htm0
112VirusCheckII1 11AVIRCHK.EXE119Any startup section0 38Added as a result of the DASMIN VIRUS!62http://www.esecurityplanet.com/alerts/article.php/1031_15721610
416VirusScan Online1 12mcvsshld.exe119Any startup section0 45McAfee VirusScan On-line. See also McAgentExe62http://www.esecurityplanet.com/alerts/article.php/1031_15721610
113Virus_Scanner1 17Virus_Cleaner.exe119Any startup section0 37Added as a result of the PANOL VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.panol@mm.html0
2 8visionGS1 12VISIONGS.EXE119Any startup section0 25visionGS w ebcam software24http://www.visiongs.com/0
2 9Vistascan1 13vistascan.exe119Any startup section0260Included in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users, you'll see a scanner icon in the Windows Tray of the Taskbar. Click this icon and a menu opens24http://www.visiongs.com/0
110VividGalut1 14VividGalut.exe119Any startup section0 36Adult content related web downloader24http://www.visiongs.com/0
4 5VMDFW1 9vmdfw.exe119Any startup section0 25VirusMD Personal Firewall44http://www.virusmd.com/products/firewall.php0
111VnCplUpdate1 8msdm.exe119Any startup section0146Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory72http://www.dslreports.com/forum/remark,8021632~root=security,1~mode=flat0
3 5VOBID1 16InstantDrive.exe119Any startup section0142Pinnacle Systems ( ex VOB) InstantDrive - creat es a virtual CD-ROM drive on the computerÆs hard drive. Part of InstantCD/DVD burning software27http://www.pinnaclesys.com/0
411VOBRegCheck1 15VOBRegCheck.exe119Any startup section0179Part of Pinnacle Systems I nstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled27http://www.pinnaclesys.com/0
313VoodooBanshee1 44rundll32.exe 3DBBps.dll, BansheeLoadSettings219Any startup section0186Loads the configuration settings for a 3dfx Voodoo Banshee chipset based graphics card. If you change some of the settings from default you probably need this - otherwise maybe not 27http://www.pinnaclesys.com/0
211Vortex Tray1 12asp4setp.exe119Any startup section0116System Tray application for Aureal Vortex based soundcards. Can be run manually via Start - Settings - Control Panel27http://www.pinnaclesys.com/0
211VoyetraTray1 9vtray.exe119Any startup section0128This provides an abbreviated Control Group for the Turtle Beach Montego II sound functions/associated with AudioStation 3 and 3227http://www.pinnaclesys.com/0
317Vpop3 Mail Server1 9vpop3.exe119Any startup section0166Mail server from Paul Smith Computer Services. Runs in syst em tray to collect mail. Can be run from a shortcut and if it isn't running then it won't get your email!23http://www.vpop3.co.uk/0
3 6vptray1 10vptray.exe119Any startup section0162System Tray icon for Norton Anti-Virus Corporate Edition. Gives access to the options available and may not be required. Some users may have problems - refer here13http://groups0
4 6VS.VSN1 6VS.VSN119Any startup section0 88Part of eSafe a ntivirus "SmartScan" - alerts the user if files have bee n changed/added44http://www.esafe.com/esafe/default.asp?cf=tl0
1 8vscanner1 12spooll32.exe119Any startup section0 40Added as a result of the OPTIXPRO VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.100
210VsEcomrEXE1 11VSECOMR.EXE119Any startup section0105From McAfee VirusScan up to version 4.x. This executable is responsible for the periodic "update" prompts80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.100
411Vshwin32EXE1 12VSHWIN32.EXE119Any startup section0198From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start - Programs80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.100
2 3VSN1 7VSN.exe119Any startup section0 49Software to share photographs across the internet80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_OPTIXPRO.100
412VSOCheckTask1 12MCMNHDLR.EXE119Any startup section0 92Part of McAfee's SecurityCenter a nd Virusscan Online. Must be enabled for scanning to w ork51http://us.mcafee.com/root/product.asp?productid=msc0
214vspdfprsrv.exe1 14vspdfprsrv.exe119Any startup section0 18Visage PDF Printer37http://www.visagesoft.com/pdfprinter/0
4 9VsStatEXE1 10VSSTAT.EXE119Any startup section0198From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start - Programs37http://www.visagesoft.com/pdfprinter/0
2 6vTPass1 12vtpassld.exe119Any startup section0189Part of vTrails - a live media delivery solution. vTPass is the driver enabling the system to work. If unavailable via Start - Programs, create your own shortcut for the "vtpass.exe" file37http://www.vtrails.com/about/FAQ.html0
213vTunerStartUp1 10vTuner.exe119Any startup section0 88vTuner - "an easy way to find and listen to radio and TV broadcasts over the Internet"22http://www.vtuner.com/0
1 9w32alanis1 8mope.scr119Any startup section0 38Added as a result of the SINALA VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.sinala@mm.html0
1 5W32Tc1 9WTC32.scr119Any startup section0 51Added as a result of the VOTE.D o r VOTE.K VIRUSES!75http://securityresponse.symantec.com/avcenter/venc/data/w32.v ote.k@mm.html0
110W3KNetwork1 35rundll32.exe w3knet.dll, dllinitrun219Any startup section0 69Advertising spyware. Check here f or more info on this particular one45http://www.safersite.com/PestInfo/Web3000.asp0
412W75P2PSERVER1 11W75P2PS.EXE119Any startup section0 77Printer utility which is required in order to make the printer work correctly45http://www.safersite.com/PestInfo/Web3000.asp0
4 8WanMPSvc1 12WanMPSvc.exe119Any startup section0166An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling AOL doesnÆt help45http://www.safersite.com/PestInfo/Web3000.asp0
212war-ftpd.exe1 12WAR-FTPD.EXE119Any startup section0 49War FTP Daemon f rom JGAA's Internet - FTP client38http://www.jgaa.com/index.php?menu=1540
1 5Wardo1 13syslaunch.exe119Any startup section0 43Added as a result of the ADLCICKER.G VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/w32.adclicker.g.trojan.html0
3 6Warner1 10warner.exe119Any startup section0120Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files83http://securityresponse.symantec.com/avcenter/venc/data/w32.adclicker.g.trojan.html0
3 6Warnet1 10warnet.exe119Any startup section0 33Warnet - system cleanup software35http://www.warnet.com/download.html0
326Warning: do not remove it!1 11fpplock.exe119Any startup section0141Part of Folder Password Expert by ZQS Software Team - "a software program to restrict access to the folders that contain your sensitive data"35http://www.warnet.com/download.html0
2 6WARSVR1 12war-ftpd.exe119Any startup section0 60"War FTP Daemon - the original free FTP server for windows"85http://www.jgaa.com/index.php?menu=154&PHPSESSID=5e40946a3f777b0446aa51537bf27f9f0
338WashAndGo - Cleanup of old Backupfiles1 11checker.exe119Any startup section0 30WashAndGo - temp file cleaner38http://www.abelssoft.com/washandgo.htm0
2 6Washer1 10washer.exe119Any startup section0234Windows Washer f rom Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start - Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG33http://www.webroot.com/washer.htm0
212Washerie.exe1 12washerie.exe119Any startup section0170Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available via Start - Programs33http://www.webroot.com/washer.htm0
2 9washindex1 11washidx.exe119Any startup section0229Windows Washer f rom Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via Start - Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG33http://www.webroot.com/washer.htm0
2 5Watch1 9watch.exe119Any startup section0102Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted33http://www.webroot.com/washer.htm0
217Watch Dog Program1 12watchdog.exe119Any startup section0155For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do33http://www.webroot.com/washer.htm0
2 8Watchdog1 12Watchdog.exe119Any startup section0225Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, but not required as they give instructions on removing it on their webpage33http://www.webroot.com/washer.htm0
216WaveTop Launcher1 11WaveTop.exe119Any startup section0158WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win9855http://www.zdnet.com/pcmag/firstlooks/9804/f980406a.htm0
2 5Wbiff1 9Wbiff.exe119Any startup section0111Wbiff! E -mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received58http://shareware.lycos.com/tucows/winnt/preview/6187.shtml0
2 8WCESCOMM1 12WCESCOMM.EXE119Any startup section0 49Active sync for use with Windows CE based palm PC58http://shareware.lycos.com/tucows/winnt/preview/6187.shtml0
211wcmdmgr.exe1 11wcmdmgr.exe119Any startup section0346It will periodically contact Wild Tangent servers to see if an update is available for your system and allows us to make the product exceptionally reliable. You can control its behavior, or disable it completely, inside your Windows Control Panel. Note that Wild Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
3 8wcmdmgrl1 12wcmdmgrl.exe119Any startup section0201Checks for periodic updates of Wild Tangent Web Driver o ver the web. A multimedia extension/plug-in. Note that Wil d Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
3 9WCOLOREAL1 12coloreal.exe119Any startup section0 85Makes colours sharper and brighter, but will only work with coloreal capable monitors81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
1 7wdwctrl1 11wdwctrl.exe119Any startup section0 39Added as a result of the DLUCA.R VIRUS!81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
2 7WEATHER1 11WEATHER.EXE119Any startup section0119Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start - Programs81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
211WeatherCast1 11Weather.exe119Any startup section0 92Weather reporting in the System Tray. Available via Start - Programs. Installed via Radlight81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
214WeatherWatcher1 6ww.exe119Any startup section0 54WeatherWatcher - weather reporting in the System Tray56http://www.singerscreations.com/AboutWeatherWatcher.html0
212WebcamRT.exe1 12WEBCAMRT.exe119Any startup section0 66For Logitech Web Cams. Not required - camera works fine without it99http://www.americas.creative.com/products/product.asp?maincategory=6&category=61&product=560
112Webcelerator1 10webcel.exe119Any startup section0219Webcelerator f rom eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Spyware and troublesome - see here45http://www.sacrelicious.org/webcelerator.html0
1 8WebCheck1 12WebCheck.pif119Any startup section0 38Added as a result of the CONE.C VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.cone.d@mm.html0
110Webdav.exe1 10webdav.exe119Any startup section0 65IRC DDoS bot which gives the hacker full control over your system74http://securityresponse.symantec.com/avcenter/venc/data/w32.cone.d@mm.html0
115WebHancer Agent1 11whagent.exe119Any startup section0164System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here30http://www.cexx.org/adware.htm0
126webHancer Survey Companion1 12whSurvey.exe119Any startup section0244WebHancer f oistware - traffic measurement service that uses a client agent that is stealth installed on user machines, gathering detailed data about sites visited, their performance and, most important, what the user actually does while there42http://doxdesk.com/parasite/webHancer.html0
111WebInstall21 11INS????.TMP119Any startup section0 81Left over from a failed install of Movie Networks, ie, if it is already installed42http://doxdesk.com/parasite/webHancer.html0
2 6WebKey1 10WebKey.exe119Any startup section0 99WebKey f rom JB Utilities. Utility to k eep track of login data required when browsing the internet33http://variagate.com/webkeydl.htm0
216WebOutfitterTray1 10sttray.exe119Any startup section0 44Intel WebOutfitter s ervice System Tray icon60http://www.intel.com/pressroom/archive/releases/cn032699.htm0
218Webposition Gold 21 12wpsche~1.exe119Any startup section0104Scheduler for Web Position Gold - utility to help optimize the po sition of web-sites in search engines32http://www.web-positiongold.com/0
312websaverlive1 16websaverlive.exe119Any startup section0168WebSaver Live! i s a companion program to Websaver that re trieves information from the Internet on a schedule and displays it on your screen when your computer is idle38http://12.47.194.20/help/channels.html0
1 7WebScan1 14DEFSCANGUI.EXE119Any startup section0152Stop-Sign f rom eAccelerration. Detects spywa re, malware, viruses and keyloggers and stops popups. Spyware in itself - see their privacy statement here37http://www.eacceleration.com/privacy/0
4 8WebScanX1 12WebScanX.exe119Any startup section0192From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc37http://www.eacceleration.com/privacy/0
1 9websearch1 23wjview ...websearch.exe219Any startup section0 77"Web Savings" From Ebates Software, a shopping tool that opens pop-up windows37http://www.eacceleration.com/privacy/0
2 8Webshots1 30Webshots Tray.exe websho~1.exe219Any startup section0 75Screensaver program that automatically downloads from the webshots web site37http://www.eacceleration.com/privacy/0
4 7Webtrap1 11webtrap.exe119Any startup section0164Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating37http://www.eacceleration.com/privacy/0
3 9WebWasher1 11wwasher.exe119Any startup section0159Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will n ot be protected but will still work. Available via Start - Programs25http://www.webwasher.com/0
2 7Welcome1 11Welcome.exe119Any startup section0 51Launches the Welcome to Windows tutorial on boot up25http://www.webwasher.com/0
2 7WetSock1 11wetsock.exe119Any startup section0 58RoboMagic Wetsock - weather reporting in the System Tra y36http://www.robomagic.com/wetsock.htm0
210WFGStartup1 14WFGStartup.exe119Any startup section0154World Weather. "This midlet displays the current weather conditions for major cities around t he world. This version is for memory limited mobile phones"74http://asia.cnet.com/downloads/handheld/swinfo/0,39001949,39022960s,00.htm0
3 5wfips1 11iphider.exe119Any startup section0241ICQ (messaging/chat program) anti-bomb software. "WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed." For more information about ICQ bombs see here50http://www.arcwebserv.com/jumpsite/icqprotect.html0
212WFXCTL32.EXE1 12WFXCTL32.EXE119Any startup section0212From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start - Programs50http://www.arcwebserv.com/jumpsite/icqprotect.html0
4 8wfxsnt401 12wfxsnt40.exe119Any startup section0151WinFax 10.0 and maybe earlier versions. The program that opens the port for WinFax and not normally in the start menu. Needed if you want to run WinFax50http://www.arcwebserv.com/jumpsite/icqprotect.html0
315WGWLocalManager1 19WGWLocalManager.exe119Any startup section0617Part of Flash-Networks NettGain2000 p roduct. NettGain 2000 is a combined hardware/software networki ng solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so. It could be started by creating a shortcut, running it only when connecting to the internet. If internet is used often, it's recommended to leave it in startup so it starts with the system57http://www.flash-networks.com/Product.asp?table=Providers0
1 7whagent1 11whagent.exe119Any startup section0164System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here30http://www.cexx.org/adware.htm0
310WheelMouse1 104DMAIN.EXE119Any startup section0154Mouse software for "Fellowes" Wheelman mouse. Has caused some users problems but shouldn't be needed if you don't use any enhanced features it may provide30http://www.cexx.org/adware.htm0
310WheelMouse1 12AMOUMAIN.EXE119Any startup section0101A4Tech w ireless mouse driver and utility - required if you use no n-standard Windows driver features46http://www.a4tech.com/a4techenglish/index.html0
1 9WhenUSave1 8Save.exe119Any startup section0 48Rebranded version of SaveNow advertising spyware46http://www.a4tech.com/a4techenglish/index.html0
111WhenUSearch1 10Search.exe119Any startup section0 19WhenUSearch a dware68http://www.kephyr.com/spywarescanner/library/whenusearch/index.phtml0
1 6Whvlxd1 10Whvlxd.exe119Any startup section0 44Added as a result of the W32.LXD.Mirc VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.lxd.mirc.html0
213WIAWizardMenu1 44RUNDLL32.EXE sti_ci.dll, WiaCreateWizardMenu219Any startup section0 53Still Image Class Installer - installed with a webcam73http://securityresponse.symantec.com/avcenter/venc/data/w32.lxd.mirc.html0
330WildTangent Web Driver updater1 12wcmdmgrl.exe119Any startup section0201Checks for periodic updates of Wild Tangent Web Driver o ver the web. A multimedia extension/plug-in. Note that Wil d Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
216Wildwire Monitor1 9WWMon.exe119Any startup section0143This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
1 3win1 20regedit -s ..win.dll219Any startup section0 40Added as a result of the SEEKER.K VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/js.seeker.k.html0
310Win Chimes1 12winchi~1.exe119Any startup section0 83WinChimes - enhancement software for the system clock that runs in the system tray64http://www.ddd.communitech.net/software/winchimes/winchimes.html0
116WIN HOST PROCESS1 20WIN HOST PROCESS.EXE219Any startup section0 47Added as a result of the KEYLOGGER.CLONE VIRUS!82http://securityresponse.symantec.com/avcenter/venc/data/keylogger.cone.trojan.html0
112Win l5oahder1 11winampa.exe119Any startup section0188Added as a result of an unidentified VIRUS! Not the valid Winamp Agent which uses the same filename. This resides in the System32 sub-folder wheras real one is located in the winamp folder82http://securityresponse.symantec.com/avcenter/venc/data/keylogger.cone.trojan.html0
110Win Server1 11winserv.exe119Any startup section0 39Added as a result of the IMISERV VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_IMISERV.A0
115Win Server Updt1 9wupdt.exe119Any startup section0 078http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_IMISERV.A0
111WIN-BUGSFIX1 15WIN-BUGSFIX.EXE119Any startup section0 56Added as a result of the LOVELETTER ( I LOVE YOU) VIRUS!77http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_LOVELETTER0
1 5WIN321 9WIN32.EXE119Any startup section0 38Added as a result of the RATEGA VIRUS!63http://www.symantec.com/avcenter/venc/data/backdoor.ratega.html0
1 5win321 30Shakira_1997_Part_1_.Mpeg_.scr119Any startup section0 40Added as a result of the MYLIFE.N VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mylife.n@mm.html0
1 5win321 25Setup_32.exe WinSetup.exe219Any startup section0 41Added as a result of the EVILBOT.B VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/backdoor.evilbot.b.html0
1 5win321 12winsrv32.exe119Any startup section0111Added as a result of the ADUENT VIRUS! Acts as a hi-jacker redirecting to Surferbar.com and adult content sites74http://securityresponse.symantec.com/avcenter/venc/data/trojan.aduent.html0
127Win32 Kernel core component1 12Kernel32.pif119Any startup section0 36Added as a result of the MOKS VIRUS!69http://securityresponse.symantec.com/avcenter/venc/data/w32.moks.html0
119Win32 Rundll Loader1 12Rundll32.exe119Any startup section0237Added as a result of the SDBOT.A VIRUS! Note: Rundll32.exe is a valid Windows application called "Run a DLL as an App" and stored in the C:\Windows directory. The version created by this virus is saved in the C:\Windows\System directory75http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SDBOT.A0
1 8win32app1 12winpup32.exe119Any startup section0 41Added as a result of the ADCLICKER VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/trojan.adclicker.html0
119Win32BaseServiceMOD1 11Wintask.exe119Any startup section0 39Added as a result of the NAVIDAD VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.navidad.16896.html0
1 8win32clf1 12win32clf.exe119Any startup section0 43Added as a result of an unidentified VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/w32.navidad.16896.html0
1 8Win32DLL1 12Win32DLL.vbs119Any startup section0 56Added as a result of the LOVELETTER ( I LOVE YOU) VIRUS!77http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_LOVELETTER0
1 8Win32dll1 12Win32dll.exe119Any startup section0 39Added as a result of the BANPAES VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.banpaes.html0
1 6Win32G1 25Kernel32.comSc andisk.com219Any startup section0 40Added as a result of the ESTRELLA VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.estrella.html0
1 8win32ini1 11systroy.exe119Any startup section0 45Added as a result of the IRC.ALADINZ.C VIRUS!70http://www.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.c.html0
1 6Win32R1 10Server.com119Any startup section0 40Added as a result of the ESTRELLA VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.estrella.html0
4 7WIN32SL1 11Win32sl.exe119Any startup section0463Part of Dell OpenManage Client Instrumentation - software that allows remote management applica tion programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. The specific function of this is to load MIF's in order for Dell OpenManage Client to work68http://docs.us.dell.com/docs/software/smcliins/cli60/en/ug/intro.htm0
111Win32system1 8filename119Any startup section0 37Added as a result of the DDV.B VIRUS!70http://securityresponse.symantec.com/avcenter/venc/data/vbs.ddv.b.html0
132win32_i lptt01or wi n32_i ml097e1 11win32_i.exe119Any startup section0177Variant of the RapidBlaster p arasite (in a "win32_i" folder in Program Files). It i s not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
1 6Win3861 10Win386.exe119Any startup section0 39Added as a result of the GOSUSUB VIRUS!75http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_GOSUSUB.A0
1 6Win3861 8sp32.dll119Any startup section0 54Homepage hijacker. Not a dll but a regfile in disguise75http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_GOSUSUB.A0
1 9winactive1 13WINACTIVE.EXE119Any startup section0 45Active variant of LOP.com hijacker - see here40http://www.doxdesk.com/parasite/lop.html0
110WinActiveJ1 14WinActiveJ.exe119Any startup section0 40Added as a result of the ROTARRAN VIRUS!40http://www.doxdesk.com/parasite/lop.html0
111Winahlp.exe1 11Winahlp.exe119Any startup section0 55Added as a result of a variant of the VAGRNOCKER VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_VAGRNOCK.120
1 8winallap1 12winallap.exe119Any startup section0 38Added as a result of the DELF.E VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.e.html0
1 9winallapu1 13winallapu.exe119Any startup section0 38Added as a result of the DELF.E VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.e.html0
1 6Winamp1 10winamp.hta119Any startup section0 87Hijacker - re-directing to adult content sites. Note - this isn't the real Winamp below76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.e.html0
322WinampAgentor Wi nampa1 11WINAMPa.exe119Any startup section0228Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start - Programs76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.delf.e.html0
1 8WinApp321 9msapp.exe119Any startup section0 37Added as a result of the RSBOT VIRUS!62http://www.symantec.com/avcenter/venc/data/backdoor.rsbot.html0
1 7WinAuth1 12winlogon.exe119Any startup section0 97Added as a result of an unidentified VIRUS!. This is not the valid winlogon.exe as described here72http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/0
3 6WinBar1 10WinBar.exe119Any startup section0127"WinBar i s a free and compact program tha t lets you monitor your system and provides easy access to frequently used controls"21http://www.winbar.nl/0
1 8WinCheck1 12WinCheck.exe119Any startup section0 38Added as a result of the PWS-CY VIRUS!42http://vil.nai.com/vil/content/v_98807.htm0
2 8WinDates1 12windates.exe119Any startup section0 87WinDates is a calendar, date organizer and event reminder program from Rockin' Software42http://vil.nai.com/vil/content/v_98807.htm0
1 5Winde1 9winde.exe119Any startup section0 37Added as a result of the DLUCA VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/downloader.dluca.html0
1 6windir1 10winrun.exe119Any startup section0 40Added as a result of the WINBUR.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.winur.b.html0
1 6Windll1 10Windll.exe119Any startup section0 39Added as a result of the TRYNOMA VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.trynoma.html0
3 6WINDLL1 8WSYS.EXE119Any startup section0244STARR key logger. "It logs almost everything that goes through the box. It logs all key strokes, all passwords transacted even if they weren't keyed in, all web sites visited, every program launched including the path to that program, and more"77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.trynoma.html0
1 6windll1 12windll32.exe119Any startup section0 50Added as a result of the ASTEF o r RESPAN VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
110Windll.exe1 10Windll.exe119Any startup section0 39Added as a result of the STEALER VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.stealer.html0
1 8Windll321 12Windll32.exe119Any startup section0 38Added as a result of the MSNPWS VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/msnpws.trojan.html0
114Windoes Kernel1 12kernel32.exe119Any startup section0 55Added as a result of the KICKIN.A ( or CYDOG.C) VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=W ORM_CYDOG.C0
113Window Loader1 9Dos32.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
313Window Washer1 10wwDisp.exe119Any startup section0140Webroot Window Washer - "Wash away online and offline traces of PC and Internet activity to protect your privacy and improve PC performance"79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
312WindowBlinds1 10wbload.exe119Any startup section0264WindowBlinds f rom Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object Desktop. Required to restore settings if you use it. Available via right-click on the Desktop - Properties - Skins28http://www.windowblinds.net/0
114WindowEnhancer1 9Winex.exe119Any startup section0 24SCbar f oistware variant42http://www.doxdesk.com/parasite/SCBar.html0
3 8WindowFX1 11wfxload.exe119Any startup section0 95Stardock WindowFX - "Allows you to add an unprecedented number of spec ial effects to windows"42http://www.stardock.com/products/windowfx/0
1 7Windows1 12Kernel32.exe119Any startup section0 40Added as a result of the TENDOOLF VIRUS!78http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_TENDOOLF.A0
1 7Windows1 11msdos98.exe119Any startup section0 39Added as a result of the PWSTEAL VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.trojan.html0
1 7Windows1 11Windows.exe119Any startup section0 67Added as a result of the KAZMOR, BOBBINS & amp; ALADINZ.D VIRUSES!84http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.d .html0
1 7Windows1 12explorer.exe119Any startup section0230Added as a result of an unidentified VIRUS! Note - this is not the valid Windows Explorer (explorer.exe). It was found in the C:\Windows directory on a WinNT machine and the wheras the valid explorer.exe would be found in C:\Winnt84http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.aladinz.d .html0
320Windows Accelerators1 9setup.exe119Any startup section0175KeySpy k eylogger (monitoring program). Gi ven a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove22http://www.keyspy.net/0
119windows auto update1 11penis32.exe119Any startup section0 56Added as a result of the BLASTER ( or MSBLAST.A) VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAS T.A0
119windows auto update1 11msblast.exe119Any startup section0 41Added as a result of the BLASTER.B VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.b.worm.html0
118windows automation1 11mslaugh.exe119Any startup section0 41Added as a result of the BLASTER.E VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.e.worm.html0
128Windows Backup Configuration1 13IEXPLORER.exe119Any startup section0123Added as a result of the GAOBOT.AZ VIRUS!. Note - this is not the valid Windows Explorer which has the same executable name79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.az.html0
125Windows Ba?langyc Dosyasy1 10sistem.exe119Any startup section0 36Added as a result of the MUZK VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.muzk.irc.html0
121Windows Config Loader1 12Wincfg32.exe119Any startup section0 41Added as a result of the SILVERFTP VIRUS!66http://www.symantec.com/avcenter/venc/data/backdoor.silverftp.html0
121Windows Configuration1 10wsys32.exe119Any startup section0 41Added as a result of the GAOBOT.FB VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.fb.html0
115Windows Control1 11Control.exe119Any startup section0218Browser hijacker. NOTE - On Win9x systems it will overwrite the Windows file of the same name in the Windows directory, so therefore it will be necessary to extract a fresh copy of the file from the Windows setup cabs!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.fb.html0
118Windows DLL Loader1 12RUNDLL16.EXE119Any startup section0 38Added as a result of the DOMWIS VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/backdoor.domwis.html0
116Windows Explorer1 8Lsas.exe119Any startup section0160Added as a result of the GAOBOT.AO VIRUS! Note - this is not the valid Windows Explorer (explorer.exe) which would only be in startups if you added it manually79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
122Windows Explorer Shell1 13Winexec32.exe119Any startup section0 40Added as a result of the REDIST.B VIRUS!68http://www.symantec.com/avcenter/venc/data/w32.hllw.redist.b@mm.html0
134Windows Explorer Update Build 11421 14EXPLORER32.EXE119Any startup section0 63Added as a result of the KaZaA based KWBOT o r KWBOT.Y VIRUSES!77http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.y.worm.html0
316Windows Guardian1 32thehel1iawgrd32.exe Fawgrd32.exe219Any startup section0158Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes77http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.y.worm.html0
125Windows Internet Protocol1 13winproc32.exe119Any startup section0 31CoolWebSearch p arasite related40http://www.merijn.org/cwschronicles.html0
114Windows Loader1 12wstart32.exe119Any startup section0 41Added as a result of the GAOBOT.CA VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ca.html0
134Windows Management Instrumentation1 7mwd.exe119Any startup section0 37Added as a result of the GRAPS VIRUS!51https://www.europe.f-secure.com/v-descs/graps.shtml0
115Windows Manager1 12winmants.exe119Any startup section0 38Added as a result of the MANTAS VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mantas.html0
117Windows mangement1 13winlogonn.exe119Any startup section0 41Added as a result of the RANDEX.FC VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.fc.html0
231Windows Media Powerpoint Helper1 12NSPPTHLP.EXE119Any startup section0151German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start - Programs74http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.fc.html0
121Windows Media SP.2.371 15random filename219Any startup section0 39Added as a result of the LEMIR.C VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.c.html0
125Windows MeTaLRoCk service1 13metalrock.exe119Any startup section0 40Added as a result of the TASTYRED VIRUS!82http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.tastyred.html0
118Windows Networking1 12winsys32.exe119Any startup section0 41Added as a result of the GAOBOT.FL VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.fl.html0
121Windows Print Spooler1 14NavAgent32.exe119Any startup section0 43Added as a result of an unidentified VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.fl.html0
121Windows Print Spooler1 11SVEHOST.EXE119Any startup section0 40Added as a result of the SPYBOT.H VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SPYBOT.H0
120Windows Runtime Help1 27win32hlp.exe WinRunHelp.wrh219Any startup section0 54Added as a result of a variant of the AIMVISION VIRUS!66http://www.megasecurity.org/trojans/a/aimvision/Aimvision_all.html0
126Windows Security Assistant1 12rundll32.vbe119Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
120Windows Service Host1 11scvhost.exe119Any startup section0 39Added as a result of the SDBOT.N VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.n.html0
120Windows Service Host1 11svchost.exe119Any startup section0160Added as a result of the CONE.B VIRUS! This is not the valid svchost.exe as described here. Located in a Windows\Tasks directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
116Windows Services1 11service.exe119Any startup section0 40Added as a result of the RANDEX.R VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.r.html0
121Windows Services Host1 11svchost.exe119Any startup section0155Added as a result of the CONE VIRUS!. This is not the valid svchost.exe as described here. Located in the Windows directory, and n ot i n Windows\System3269http://support.microso ft.com/default.aspx?scid=KB;EN-US;Q250320&0
119windows shellext.321 11mschost.exe119Any startup section0 41Added as a result of the BLASTER.K VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.k.worm.html0
115Windows Spooler1 12SPOOLSRV.EXE119Any startup section0 40Added as a result of the SPYBOT.P VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SPYBOT.P0
115Windows Startup1 27winsta~1.exe winstartup.exe219Any startup section0165Added by browser enhancement some people find annoying called "Go Hip". See here f or details of what "Go Hip" is and the page also includes a lin k for removing it.50http://www.gohip.com/browserenhancement/index.html0
115Windows Startup1 11Wdrun32.exe119Any startup section0 41Added as a result of the GAOBOT.AO VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ao.html0
123Windows System Restorer1 18SystemRestorer.exe119Any startup section0 40Added as a result of the DULOAD.C VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DULOAD.C0
319Windows System Tray1 8msni.exe119Any startup section0 34Iambigbrother m onitoring software29http://www.iambigbrother.com/0
120Windows Task Manager1 23ACCOUNT_DETAILS.DOC.exe119Any startup section0 41Added as a result of the QUATERS.A VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.quaters.a@mm.html0
114Windows Update1 8filename119Any startup section0 92Added as a result of the NORIO VIRUS! Acts as a hi-jacker redirecting to adult content sites73http://securityresponse.symantec.com/avcenter/venc/data/trojan.norio.html0
114Windows Update1 14iexplorere.exe119Any startup section0 41Added as a result of the GAOBOT.AP VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.ap.html0
114windows update1 11uddater.exe119Any startup section0 36Added as a result of the LEOX VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.leox.html0
114Windows Update1 10wudate.exe119Any startup section0 45Added as a resuklt of the AGOBOT.3.GEN VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.leox.html0
114Windows Update1 11wupdate.exe119Any startup section0 13Wengs a dware73http://securityresponse.symantec.com/avcenter/venc/data/adware.wengs.html0
120Windows Update Files1 9dnetc.exe119Any startup section0 65Unidentified VIRUS! Note - wupdmgr.exe is the real Windows Update73http://securityresponse.symantec.com/avcenter/venc/data/adware.wengs.html0
118Windows Update.exe1 18Windows Update.exe219Any startup section0 27Homepage hijacker, see here 01
115Windows Updater1 13wupdmgr32.exe119Any startup section0 56Added as a result of a variant of the DOS.AUTOCAT VIRUS!59http://www.symantec.com/avcenter/venc/data/dos.autocat.html0
221Windows Version Check1 11ver_chk.exe119Any startup section0 98Version checker for CyberAudioLibrary ( "A new way to exchange informatio n through the Internet")33http://www.cyberaudiolibrary.com/0
114Windows-System1 12System32.exe119Any startup section0 41Added as a result of the LOGPOLE.C VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html0
112WindowsAgent1 16WindowsAgent.exe119Any startup section0 37Added as a result of the GOP.G VIRUS!65http://www.symantec.com/avcenter/venc/data/w32.hllw.gop.g@mm.html0
114WindowsAPI.DLL1 11Server5.exe119Any startup section0 48Added as a result of the "Fear and Hope" t rojan54http://www.pestpatrol.com/pestinfo/f/fear_and_hope.asp0
121WindowsCriticalUpdate1 27windows_critical_update.exe119Any startup section0 50Added as a result of the ASTEF o r RESPAN VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.repsan.html0
110WindowsMGM1 12Winmgm32.exe119Any startup section0 51Added as a result of the SOBIG a nd LALA.C VIRUSES!77http://securityresponse.symantec.com/avcenter/ven c/data/backdoor.lala.c.html0
110WindowsUpd1 15WindowsUpd4.exe119Any startup section0 18VirtuMonde a dware81http://securityresponse.symantec.com/avcenter/venc/data/pf/adware.virtumonde.html0
113WindowsUpdate1 18windows_update.exe119Any startup section0 40Added as a result of the LOHACK.B VIRUS!65http://www.symantec.com/avcenter/venc/data/w32.lohack.b.worm.html0
113WindowsUpdate1 11svchost.exe119Any startup section0109Added as a result of the ASTEF o r RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here69http://support.mi crosoft.com/default.aspx?scid=KB;EN-US;Q250320&0
113windowsupdate1 12RPCX1sQ3.exe119Any startup section0 40Added as a result of the IRCBOT.B VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.ircbot.b.html0
111Windows_VXD1 10user32.exe119Any startup section0 45Added as a result of the PWSTEAL.PPORT VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.pport.html0
119Windowz Update V2.01 12Explorer.exe119Any startup section0164Added as a result of the YODO VIRUS! Note - the valid "explorer.exe" is located in C:\Windows or C:\Winnt whereas this one is located in the System32 sub-directory74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.yodo.html0
1 6windrv1 12windrv32.exe119Any startup section0 60Unidentified VIRUS - possibly a strain of OBLIVION or BIONET74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.yodo.html0
1 7WinDSNX1 11Win????.exe119Any startup section0 36Added as a result of the DNSX VIRUS!61http://www.symantec.com/avcenter/venc/data/backdoor.dsnx.html0
211WINDVDpatch1 12CTHELPER.EXE119Any startup section0509CTHELPER is a backgr ound task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with CreativeÆs sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled61http://www.symantec.com/avcenter/venc/data/backdoor.dsnx.html0
213WinDVR SchSvr1 10SchSvr.exe119Any startup section0191WinScheduler i s installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start - Programs26http://www.intervideo.com/0
210WinDVRCtrl1 14WinDVRCtrl.exe119Any startup section0 57Control center software for an AOpen VA1000 TV tuner card26http://www.intervideo.com/0
127Windws Configuration Loader1 12LEXPLORE.exe119Any startup section0 39Added as a result of the SODABOT VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.sodabot.html0
112WinEssential1 11Keyhost.exe119Any startup section0 33Hijacker - hailing from jraun.com77http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.sodabot.html0
112WinEssential1 11keyword.exe119Any startup section0 19Jraun.com h ijacker73http://securityresponse.symantec.com/avcenter/venc/data/adware.jraun.html0
1 9WinExec321 13WinExec32.exe119Any startup section0 38Added as a result of the KAZWIN VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
316WinFast Schedule1 9Wfwiz.exe119Any startup section0 34Leadtek WinFast TV tuner scheduler76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
310Winfast_2K1 8WF2k.exe119Any startup section0272System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start - Settings - Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
313WinFast_Gamma1 48Rundll32.exe wfcpl.dll, DllLoadGammaRampSettings219Any startup section0 72Loads if you change the gamma settings on Leadtek WinFast graphics cards76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
221WinFax PRO Controller1 12WFXCTL32.EXE119Any startup section0212From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start - Programs76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
420WinFaxAppPortStarter1 12wfxsnt40.exe119Any startup section0148WinFax 10.0 and maybe earlier versions. Used to initiate the WinFax port to enable printing to the WinFax printer (send a fax) from any application.76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
3 8WinFoxV21 8WF2k.exe119Any startup section0272System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start - Settings - Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kazwin.html0
1 5WinFX1 9cssrs.exe119Any startup section0 46Added as a result of the WORM_AGOBOT.FX VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.FX0
1 7WinGate1 11WinGate.exe119Any startup section0 41Added as a result of the LOVGATE.G VIRUS!69http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate.g@mm.html0
118WinGate initialize1 11WinGate.exe119Any startup section0 39Added as a result of the LOVGATE VIRUS!67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
212WinGuage Pro1 11WGPRO32.EXE119Any startup section0247Part of McAfee Nuts & Bolts. "WinGauge is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start - Programs67http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate@mm.html0
2 9WinHacker1 29rundll32.exe wh95.dll, HackMe219Any startup section0114Tweaking utility by Wedge Software. There are far better&nb sp;tweakers and, unlike WinHacker, most are free25http://www.winhacker.com/0
1 7Winhelp1 11winhelp.exe119Any startup section0 41Added as a result of the LOVGATE.G VIRUS!69http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate.g@mm.html0
1 7Winhelp1 11winhe1p.exe119Any startup section0 40Added as a result of the QQPASS.E VIRUS!80http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.e.html0
1 8Winhlp321 26Wscript.exe ..Msexec32.vbs219Any startup section0 38Added as a result of the GANT.B VIRUS!75http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_GANT.B0
1 7Winhost1 9wintt.exe119Any startup section0 41Added as a result of the LOLAWEB.B VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_LOLAWEB.B0
1 8wininetd1 12wininetd.exe119Any startup section0 37Added as a result of the WINET VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winet.html0
1 7wininit1 11wininit.exe119Any startup section0 40Added as a result of the WOLLF.16 VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.wollf.16.html0
1 9Wink*.exe1 9Wink*.exe119Any startup section0 84Added as a result of a version of the KLEZ VIRUS! * represents any random characters74http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html0
3 6Winkb61 10winkb6.exe119Any startup section0128Part of We-Blocker, works in tandem wit h syswb6. Both files are needed to run WeBlocker. Required i f We-Blocker is installed53http://www.vtoy.fi/jv16/shtml/powertools.shtml#SYSWB60
1 9WinKernel1 10WinKer.exe119Any startup section0 52Added as a result of the MIRAB o r SERVIDOR VIRUSES!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_SERVIDO R.C0
111winkernel321 10wWin32.com119Any startup section0 40Added as the result of the BANSAP VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.bansap.html0
3 6WinKey1 10winkey.exe119Any startup section0175Loads Copernic's WinKey. Used to map out Windows key hot key combinations. Not required for the system, but is necessary for this to be running if you use these hotkey combos31http://www.copernic.com/winkey/0
112WinLibUpdate1 13libupdate.exe119Any startup section0 82Added as a result of the BIONET series of VIRUSES such as BIONET.31 o r BIONET.31080http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_BIONET .3100
114WinLibUpdate321 15libupdate32.exe119Any startup section0 42Added as a result of the BIONET.405 VIRUS!80http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_BIONET .3100
111WinLibUpdte1 12libupdte.exe119Any startup section0 42Added as a result of the BIONET.318 VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_BIONET.3180
1 6Winlme1 10windll.exe119Any startup section0 37Added as a result of the GOP.F VIRUS!74http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_GOP.F0
1 9WinLoader1 15random filename219Any startup section0 52Added as a result of versions of the SUBSEVEN VIRUS!79http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SUB7.213.B0
4 8winlogon1 12winlogon.exe119Any startup section0 58Windows Logon Process - handles user logons described here72http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/0
1 8winlogon1 12winlogin.exe119Any startup section0 94Added as a result of the RANDEX.E VIRUS!. This is not the valid winlogon.exe as described here73http://www.liutili ties.com/products/wintaskspro/processlibrary/winlogon/0
112Winlogon.exe1 12Winlogon.exe119Any startup section0 77CoolWebSearch p arasite related - resets home page to an adu lt material site40http://www.merijn.org/cwschronicles.html0
1 7Winmain1 11winmain.exe119Any startup section0509One of the first of a new breed of malware. When run it immediately loads MSHTA.EXE from the Windows folder, placing it on "hot standby", ready to accept HTA scripting within a web page and then EXECUTE what is embedded IN the page as a program! In other words, it's possible for a "rogue" website to actually embed trojans, worms and/or viruses directly into a web page. BOClean's HTA Stop o ffers an easy way to toggle this capabiltity, or rather vulnerability, on and off. I suggest you leave it disabled!36http://www.nsclean.com/freebies.html0
313winmatrix.exe1 15WinMatrixXP.exe119Any startup section0147WinMatrix XP - wallpaper replacement that shows differe nt matrix effects (including flowing matrix codes from 'The Matrix' movie) on your desktop36http://www.emotionrays.com/wmxp.php40
111WinMenssage1 10winmax.exe119Any startup section0 40Added as a result of the BANCOS.B VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.bancos.b.html0
2 7WinMgmt1 11WinMgmt.exe119Any startup section0152Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth "scheduler" - refer here 01
1 8WinMgr321 12winmgr32.exe119Any startup section0 40Added as a result of the MIMAIL.P VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.p@mm.html0
1 7WinMine1 9D4NG3.vbs119Any startup section0 41Added as a result of the BISCUIT.A VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/vbs.biscuit.a@mm.html0
4 8winmodem1 9wmexe.exe119Any startup section0236Software for software based modems. Required if you have one of these. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
235winmysqladminor Wi nMySQLadmin Tool1 17winmysqladmin.exe119Any startup section0 36Starts the MySQL database admin tool34http://808hi.com/56k/winmodems.asp0
1 6winnet1 10winnet.exe119Any startup section0 50CommonName Toolbar s pyware. To uninstall see here66http://www.commonname.com/e nglish/ug/toolbar/default.asp?idx=10#40
1 7WinNtBB1 11WinntBB.exe119Any startup section0 40Added as a result of the DULOAD.C VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DULOAD.C0
3 9WinPatrol1 13WinPatrol.exe119Any startup section0165WinPatrol - "Manage Startup programs, tasks, cookies; will sniff out Worms, Trojan horses, Cookies, Adware, Spyware, Klez, Assumption and other malicious programs"25http://www.winpatrol.com/0
4 7WinPoet1 22WinPPPoverEthernet.exe119Any startup section0393WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking52http://www.finepoint.com/products/winpoet/index.html0
2 8WinPopup1 12WINPOPUP.EXE119Any startup section0256Intranet chat software provided by windows for chat on small networks. Handy little LAN messaging utility. Has been included in Windows since 95, and maybe in WFWG 3.11. Normally it won't set itself up to run unless the user specifically adds it to startup52http://www.finepoint.com/products/winpoet/index.html0
1 8winpopup1 11winupie.exe119Any startup section0 23Adware by Tradeexit.com52http://www.finepoint.com/products/winpoet/index.html0
110WinProfile1 11Command.exe119Any startup section0 37Added as a result of the BUDDY VIRUS!76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BUDDY.E0
1 7WinProt1 22Winprot.exe server.exe219Any startup section0 42Added as a result of the CHUPACABRA VIRUS!62http://www.dark-e.com/archive/trojans/chupacabra/10/index.shtm0
3 8WinProxy1 12WinProxy.EXE119Any startup section0119"WinProxy i s the world-first proxy server an d a firewall with integrated mail server for Windows 95/98/ME/NT/2000/XP"24http://www.winproxy.net/0
1 8winpup321 12Winpup32.exe119Any startup section0 41Added as a result of the ADCLICKER VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/trojan.adclicker.html0
1 6winrar1 10winrar.exe119Any startup section0144CoolWebSearch p arasite variant. Note! - this is not the fil e zipping utility also known as WinRAR a nd it's located in C:\Winnt or C: \Windows22http://www.rarlab.com/0
111winrarshell1 17winrarshell32.exe119Any startup section0 38Added as a result of the SALIRA VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.salira.html0
1 6winReg1 10winReg.exe119Any startup section0 51Added as a result of the YAHA.H o r YAHA.J VIRUSES!74http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.j@mm.html0
1 9winregsrv1 13winregsrv.exe119Any startup section0 37Added as a result of the SYNRG VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/backdoor.synrg.html0
2 8winroute1 12winroute.exe119Any startup section0315Win-Route 4.27. WinRoute Tray Icon for starting and stopping the WrCtrl.exe process, also to log in to the console to view logs and change settings. Can be unchecked and the engine still runs and functions normally. Can then use provided shortcuts for administration of the program. Loaded in SERVICES on Windows 2k76http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_THRAX.A0
1 6winrun1 12msconfig.exe119Any startup section0 78Added as a result of the WINUR VIRUS! Note - this is not the real msconfig.exe77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DULOAD.C0
110WinRunners1 14WinDrivers.exe119Any startup section0 40Added as a result of the DULOAD.C VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DULOAD.C0
1 9winserver1 14Server.txt.vbs119Any startup section0 40Added as a result of the DELTAD.A VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DELTAD.A0
111WinServices1 15WinServices.exe119Any startup section0 51Added as a result of the YAHA.K o r YAHA.M VIRUSES!74http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.m@mm.html0
112WinSetBrowse1 19BasicUpdate.dll.vbs119Any startup section0 41Added as a result of the BISCUIT.A VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/vbs.biscuit.a@mm.html0
113WinShowUpdate1 11winshow.dll119Any startup section0 98Winshow p arasiate related - from the "RunOnce" keys it replaces "winshow.dll" with a new version44http://www.doxdesk.com/parasite/Winshow.html0
115Winsock2 driver1 11SDJOIJE.EXE119Any startup section0 41Added as a result of the SPYBOT.DR VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.dr.html0
112Winsock2.dll1 11WINLODR.SCR119Any startup section0 43Added as a result of an unidentified VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.dr.html0
116Winsock32 driver1 31Testing.exe lcd.exe Sdjoije.exe219Any startup section0 40Added as a result of the SPYBOT.B VIRUS!56http://www.sophos.com/virusinfo/analyses/w32spybotb.html0
115Winsock32driver1 15win32server.scr119Any startup section0 39Added as a result of the HACARMY VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hacarmy.html0
113winsockdriver1 9tskmg.exe119Any startup section0 57Added as a result of the SDBOT.GEN o r WARPIGS.C VIRUSES!80http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.warpigs.c. html0
113winsockdriver1 14winsock2.2.exe119Any startup section0 51Added as a result of a variant of the SPYBOT VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html0
118WinSocketComponent1 10nthost.exe119Any startup section0 43Added as a result of an unidentified VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html0
1 6WinSrv1 8kn0x.exe119Any startup section0 40Added as a result of the HOBBIT.F VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_HOBBIT.F0
1 6WinSrv1 11SHIZZLE.EXE119Any startup section0 40Added as a result of the HOBBIT.C VIRUS!77http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_HOBBIT.C0
1 6Winsrv1 10winsrv.exe119Any startup section0 41Added as a result of the OPASERV.T VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPASERV.T0
1 8WinStart1 12WinStart.exe119Any startup section0256From IGetNet - tur ns the IE address bar into a keyword en gine piped into IGetNet. In other words, with this installed, typing "car" in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge40http://w ww.igetnet.com/iGetNet_Home.asp0
1 8WinStart1 24Wscript.exe WinStart.vbs219Any startup section0 38Added as a result of the CIAN.C VIRUS!58http://www.symantec.com/avcenter/venc/data/vbs.cian.c.html0
1 8WinStart1 14winstart32.exe119Any startup section0 37Added as a result of the PUROL VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.hllw.purol.html0
130WinStart001or Wi nStart001.EXE1 15WinStart001.exe119Any startup section0256From IGetNet - tur ns the IE address bar into a keyword en gine piped into IGetNet. In other words, with this installed, typing "car" in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge40http://w ww.igetnet.com/iGetNet_Home.asp0
1 8Winsta~11 12winsta~1.exe119Any startup section0 16GoHip f oistware39http://accs-net.com/smallfish/gohip.htm0
1 8WinSth161 12WinSth16.exe119Any startup section0 36Added as a result of the CAKE VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.cake.html0
1 7winstro1 12RUN32DLL.exe119Any startup section0 39Added as a result of the FTP_ANA VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/backdoor.ftp_ana.html0
3 6Winsys1 10Winsys.exe119Any startup section0155Win-Spy - surveillance software that creates records of everyt hing people do on a computer, ie, spying or monitoring depending upon how you call it 43http://www.bc-technologies.com/products.htm0
1 8WinSys321 12Winsys32.exe119Any startup section0 52Added as a result of the CIGIVIP o r RECKUS VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.reckus.html0
116winsyslog lptt011 13winsyslog.exe119Any startup section0179Variant of the RapidBlaster p arasite (in a "Winsyslog" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
118WinSysStartUpWKbLw1 17TaskSystemDll.Exe119Any startup section0 41Added as a result of the BACKZAT.G VIRUS!66http://www.symantec.com/avcenter/venc/data/w32.hllw.backzat.g.html0
1 9WinSyst321 13winsyst32.exe119Any startup section0 36Added as a result of the MORB VIRUS!64http://www.symantec.com/avcenter/venc/data/w32.hllw.morb@mm.html0
1 9WinSystem1 13winsystem.exe119Any startup section0 41Added as a result of the WHITEBAIT VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.whitebait@mm.html0
1 7WinTask1 11Wintask.exe119Any startup section0 50Added as a result of the HIPO o r LEMIR.F VIRUSES!76http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.lemir.f.html0
316WinTasks Traybar1 12wintasks.exe119Any startup section0281WinTasks - "Efficient Resource and Task Management is absolutely cr itical if you want to achieve the highest system performance levels possible. WinTasks 4 will not only help you achieve this task, but will actually make your system run faster and more smoothly than ever before"48http://www.liutilities.com/products/wintasksstd/0
216Wintercooler Pro1 11WINCOOL.EXE119Any startup section0 99Wintercooler Pro - utility that monitors CPU usage, RAM consumpt ion and Internet connection speed45http://www.liveye.com/wintercooler/index.html0
2 7WinTidy1 11WinTidy.exe119Any startup section0 93Desktop icon manager from PC Magazine ( Ziff-Davis) for Win95. Available via Start - Programs65http://downloads-zdnet.com.com/3000-2094-5933571.html?tag=lst-0-10
216Wintime Wtxpload1 19Wxpload.exe Wintime219Any startup section0627Part of the software to support a Dexxa USB graphics tablet. From a visitor - "This gets started anyway when you plug in the USB connector for the graphics tablet, if it's not already running. It then starts an application which manages the tablet messages. Since I leave the tablet unplugged unless I need to use it, I don't need this running at startup. I suspect that this program monitors a number of windows messages, so that when it's loaded, my regular mouse slows down - it acts like it 'sticks' entering and leaving windows. Certainly my performance returned to what I expected when I removed this item using MSCONFIG"65http://downloads-zdnet.com.com/3000-2094-5933571.html?tag=lst-0-10
1 7WinTray1 11wintray.exe119Any startup section0 44Added as a result of the LEGUARDIEN.B VIRUS!69http://www.symantec.com/avcenter/venc/data/backdoor.leguardien.b.html0
1 9WinUpdate1 12RBSKQQBO.EXE119Any startup section0109Added as a result of the http://securityresponse.symantec.com/avcenter/venc/data/vbs.vbswg2b.a@mm.html VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/vbs.vbswg2b.a@mm.html0
113winupdate.exe1 13winupdate.exe119Any startup section0 36Added as a result of the RADO VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/backdoor.rado.html0
120Winux Piriax Service1 8PH32.EXE119Any startup section0 40Added as a result of the RANDEX.G VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.g.html0
3 6WinVNC1 10WinVNC.exe119Any startup section0110WinVNC i s an application that allows you to remote control your P C from another PC somewhere on the internet46http://www.uk.research.att.com/vnc/winvnc.html0
130winwan lptt01or wi nwan ml097e1 10winwan.exe119Any startup section0176Variant of the RapidBlaster p arasite (in a "Winwan" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
3 9WinXPLoad1 39Rundll32 LoadDll, LoadExe WinXPLoad.exe219Any startup section0 55Compaq hotkey related - required if you use the hotkeys60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
217WinZip Quick Pick1 12WZQKPICK.EXE119Any startup section0386Added with WinZip version 8.1. "The new WinZip Quick Pick taskbar tray icon gives you instant access to WinZip and your Zip files. Just left click the icon to open WinZip, or right click it to instantly reopen recently used Zip files, access your Favorite Zip Folders, open WinZip Help, or start WinZip itself.". You can right-click and close it - choosing to not re-load it at start-up60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
114Win_api_driver1 10system.exe119Any startup section0 38Added as a result of the REVIRD VIRUS!83http://securityresponse.symantec.com/avcenter/venc/data/trojan.download.revird.html0
111Win_Library1 10INISvc.exe119Any startup section0 38Added as a result of the ANARCH VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.anarch@mm.html0
1 9Win_vader1 13Win_vader.vbs119Any startup section0 42Added as a result of the INVASION.A VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=VBS_INVASION.A0
339Wireless PCI Card Configuration Utility1 12WMP11Cfg.exe119Any startup section0167Utility used by the LINKSYS w ireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration63http://www.linksy s.com/products/product.asp?prid=196&grid=0
335Wireless-G Notebook Adapter Utility1 12WPC54CFG.EXE119Any startup section0 65Utility used by the LINKSYS W ireless-G Notebook Adapter (WPC54G)48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 6wjview1 10wjview.exe119Any startup section0 73MS tool used to view window-based Java applications from the command line48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 8wkcalrem1 12wkcalrem.exe119Any startup section0 74Produces a pop-up reminder of events scheduled using the MS Works Calendar48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 8WkDetect1 12WkDetect.exe119Any startup section0 30Checks for updates to MS Works48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 5wkfud1 9wkfud.exe119Any startup section0 32A marketing program for MS Works48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 5WksSb1 9WksSb.exe119Any startup section0229The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file48http:// www.linksys.com/splash/wpc54g_splash.asp0
2 7WkUFind1 11WkUFind.exe119Any startup section0371MS Works Update Detection. MS Picture It! (versions 7 to current) use this automatic update feature during the log on process. It can also cause your system to automatically dial into your ISP as it tries to access the internet, if you have your system set to automatically dial when the internet is invoked. To manually update, go to Microsoft's Office/Works update site55http://www.officeupdate.com/ProductUpdates/default.aspx0
223WLAN Status Tray Applet1 11WLANSTA.EXE119Any startup section0 58System Tray icon for checking the status of a Wireless LAN55http://www.officeupdate.com/ProductUpdates/default.aspx0
310WMIEXE.exe1 10wmiexe.exe119Any startup section0368NT component, used by Windows Millennium to detect Plug and Play-compliant IEEE 1394 devices during the startup process. Since this is important for the computer to work properly if you have these, Windows Millennium protects wmiexe.exe and will restore the file even if it's deleted or renamed. Check here f or some details on what to do to stop it loading49http://www.bits.bris.ac.uk/mxcl/tweaks/wmiexe.php0
1 5Wminf1 9Wminf.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 6Wminfo1 10Wminfo.exe119Any startup section0 36Added as a result of the GEMA VIRUS!72http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html0
1 7wmsys321 11wmsys32.exe119Any startup section0 41Added as a result of the BANPAES.B VIRUS!78http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.banpaes.b.html0
1 4WNAD1 8WNAD.EXE119Any startup section0307Spyware added as a result of running a program called "Yo Mama Osama" (osama.exe). See here f or more and how to get rid of it. There ar e other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like29http://www.cexx.org/osama.htm0
2 8Woowatch1 9Watch.exe119Any startup section0 35Wanadoo ISP s oftware, not required50http://www.wanadoo.com/eng/profil.htm?rub_5162.htm0
2 7WordWeb1 10wweb32.exe119Any startup section0 58WordWeb - free theasaurus and dictionary. St art manually25http://wordweb.info/free/0
223Works Calendar Reminder1 12wkcalrem.exe119Any startup section0 74Produces a pop-up reminder of events scheduled using the MS Works Calendar25http://www.broadjump.com/0
2 8WorksFUD1 9wkfud.exe119Any startup section0 32A marketing program for MS Works25http://www.broadjump.com/0
321Workstation Scheduler1 8wm95.exe119Any startup section0177Desktop Management Scheduler. Part of Novell's Netware C lient. Schedueles NDS events. If events have been schedueled, it is required, otherwise, it is useless and a memory hog39http://www.novell.com/products/netware/0
313Worm Detector1 6wd.exe119Any startup section0 83Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam29http://www.kl-soft.com/wd.php0
1 7wormexe1 12winstart.exe119Any startup section0 41Added as a result of the EARLYBIRD VIRUS!77http://securityresponse.symantec.com/avcenter/venc/data/w32.earlybird@mm.html0
218Wpctrlor wp ctrl951 25wpctrlnt.exe wpctrl95.exe219Any startup section0174WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be ro tated to match rotated LCD screens, for example). Shortcut available via Display Properties24http://www.portrait.com/0
411WPCycle.exe1 14WpCycleWin.exe119Any startup section0157Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end, preventing instability of your CPU (freezing)24http://www.portrait.com/0
1 3WQK1 7WQK.exe119Any startup section0 49Added as a result of a version of the KLEZ VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html0
2 6WrCtrl1 10WrCtrl.exe119Any startup section0294Win-Route 4.27 NAT engine on Win2k Pro for connection sharing and security using Win-Route by Tiny Software. A connection sharing/Firewall Application. If service is disabled the program does not work, but you can manually start/stop the service with a shortcut the program installs at any time74http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html0
3 6wrexec1 10wrexec.exe119Any startup section0351Watch Right - monitoring program, part of the PowerTools a dd-on for AOL. Records instant messages, E-mail, c hat. Watch Right appears to be, and functions as an online clock updater which connects with the U.S. National Institute of Standards and Technology. It was designed for parents who wish to keep an eye on what their children are doing online43http://www.bpssoft.com/PowerTools/index.htm0
310WScheduler1 14WScheduler.exe119Any startup section0201Windows Scheduler - "schedule unattended running of applications, b atch files, scripts and much more. Also, you can schedule popup reminders so you'll never forget reminders, tasks and other events."48http://www.splinterware.com/products/wincron.htm0
3 8WService1 12WService.exe119Any startup section0 54Tablet client Driver for UC-Logic P en/Graphics Tablet24http://www.uc-logic.com/0
114Wstat32 driver1 11Wstat32.exe119Any startup section0 39Added as a result of the LOONBOT VIRUS!81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.loonbot.html0
4 7wstimeb1 11wstimeb.exe119Any startup section0123Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.loonbot.html0
4 5wswpd1 9wswpd.exe119Any startup section0143Used with some models of Panasonic, Epson and NEC printers. Some older drivers known to have a "memory leak". Needed for printing to work 81http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.loonbot.html0
233WT Game Channelor WT GameChannel1 33GameChannel.exe wtgamechannel.exe219Any startup section0210Wild Tangent GameChannel - notification of new games, quick access to games and fas t and easy game downloads. Note that Wild Tanget's privacy policy s tates they also collect and share individuals information81http://www.wildtangent.com/default.asp?pageID=company_art&artid=art20030925_A0
311WTIndicator1 12SchedInd.exe119Any startup section0 81WinTask - software that automates a variet y of routine tasks quickly and simply23http://www.wintask.com/0
411WUOLService1 17WUOLService9x.exe119Any startup section0127Remote wakeup status agent. Part of Novell's ZenWorks. Processes Wake-up on LAN requests (turn on a comp uter remotely on LAN)40http://www.novell.com/products/zenworks/0
1 4WUPD1 12iglmtray.exe119Any startup section0 36Added as a result of the TZET VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/w32.tzet.worm.html0
1 5wupdt1 9wupdt.exe119Any startup section0 39Added as a result of the IMISERV VIRUS!78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_IMISERV.A0
411WUSB11B.exe1 11WUSB11B.exe119Any startup section0 31Linksys WUSB11 WLAN USB adapter78http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_IMISERV.A0
116www.hidro.4t.com1 10enbiei.exe119Any startup section0 41Added as a result of the BLASTER.F VIRUS!79http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.f.worm.html0
216WXProcMgr Module1 13WXprocMgr.exe119Any startup section0156TVTonic f rom Wavexpress - "enjoy 3 full-sc reen, DVD-quality video channels for FREE". Allows data content to be downloaded and synchronized on your system23http://www.tvtonic.com/0
1 8wzhelper1 12wzhelper.exe119Any startup section0 23Searchcentrix h ijacker54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
3 8X Server1 5X.exe119Any startup section0271"XoftWare for Windows" enables you to run network-based UNIX programs ("X programs" or "clients") side-by-side with Windows applications on your personal computer. You can also share programs and computing resources with host computers connected to your PC over a network54http://www.pestpatrol.com/pestinfo/s/searchcentrix.asp0
3 7x3watch1 11x3watch.exe119Any startup section0497"program helping with online integrity. Whenever you browse the internet and accesses a site which may contain questionable material, the program will save the site name on your computer. Approximately every 30 days, a person of your choice (an accountabiltiy partner) will receive an e-mail containing all possible questionable sites you may have visited within the month. This information is meant to encourage an open and honest conversation between friends and help us all be more accountable"39http://www.lamantine.com/ssw/index.html0
2 6Xanadu1 10Xanadu.exe119Any startup section0 63Xanadu - free language and translation wizard from Foreignword43http://www.foreignword.biz/software/xanadu/0
315XE 8x LM Status1 10lmsxxe.exe119Any startup section0 45Xerox XE8 series laser printer status monitor43http://www.foreignword.biz/software/xanadu/0
111Xecuter.bat1 10psexec.bat119Any startup section0 38Added as a result of the BOOHOO VIRUS!76http://securityresponse.symantec.com/avcenter/venc/data/bat.boohoo.worm.html0
2 6XemiCo1 7ADC.EXE119Any startup section0 37XemiComputers Active Desktop Calendar36http://www.xemico.com/adc/index.html0
1 3XiD1 7mmx.exe119Any startup section0 39Added as a result of the ANALOGX VIRUS!75http://securityresponse.symantec.com/avcenter/venc/data/trojan.analogx.html0
413XircWinModem41 12ltcm000c.exe119Any startup section0183WinModem drivers. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here f or more WinModem information34http://808hi.com/56k/winmodems.asp0
3 6xitami1 11Xiwin32.exe119Any startup section0 45Xitami M ultiplatform Open Source web serv er22http://www.xitami.com/0
1 8xpsystem1 18y.exe services.exe219Any startup section0 31CoolWebSearch p arasite variant40http://www.merijn.org/cwschronicles.html0
3 7XStop951 11XStop95.exe119Any startup section0 24XStop - internet filter21http://www.xstop.com/0
2 5xswin1 9xswin.exe119Any startup section0 97Installed with a Xerox Work Centre Pro 555. Unchecking it removes an "out of system memory" error21http://www.xstop.com/0
323XTNDConnect PC - 3CmPlm1 11Autodet.exe119Any startup section0 89Component of EasySync Pro. Synchronisation between Palm PDAs and Microsoft Outlook 01
323XTNDConnect PC - ErPhn21 10ErPhn2.exe119Any startup section0100Component of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook 01
323XTNDConnect PC - ErTray1 10ErTray.exe119Any startup section0100Component of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook 01
323XTNDConnect PC - LtNts41 11NtsAgnt.exe119Any startup section0 25Component of EasySync Pro 01
325XtreamLok License Manager1 6xl.exe119Any startup section0 83License manager for xLok ( XtreamLok) - prevents so ftware being reverse engineered25http://www.xtreamlok.com/0
115Xupiter Startup1 18XupiterStartup.exe119Any startup section0123Xupiter - adware and homepage hijacker. To remove Xupiter go here a nd to prevent it re-installing in the future se e here61http://www.alanluber.com/pcfearfactor/officialxupiterpage.htm0
118xupiterstartup20031 22xupiterstartup2003.exe119Any startup section0123Xupiter - adware and homepage hijacker. To remove Xupiter go here a nd to prevent it re-installing in the future se e here61http://www.alanluber.com/pcfearfactor/officialxupiterpage.htm0
120XupiterToolbarLoader1 24XupiterToolbarLoader.exe119Any startup section0123Xupiter - adware and homepage hijacker. To remove Xupiter go here a nd to prevent it re-installing in the future se e here61http://www.alanluber.com/pcfearfactor/officialxupiterpage.htm0
3 7xv_ctrl1 10v_ctrl.exe119Any startup section0 873dfx Underground Tools - "Gives direct hardware control to your video graphics adapter"61http://www.alanluber.com/pcfearfactor/officialxupiterpage.htm0
222Yahoo! Pageror yp ager1 10ypager.exe119Any startup section0 84Yahoo! Messenger allows you to send instant messages. Available via Start - Programs61http://www.alanluber.com/pcfearfactor/officialxupiterpage.htm0
144yahoo_toolbar lptt01or ya hoo_toolbar ml097e1 17yahoo_toolbar.exe119Any startup section0183Variant of the RapidBlaster p arasite (in a "yahoo_toolbar" folder in Program Files) . It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
221YAMAHA DS-XG Launcher1 12dslaunch.exe119Any startup section0101System Tray access for the features of the Yamaha DS-XG soundcard unless you regularly change set-ups60http://www.wilderssecurity.net/specialinfo/rapidblaster.html0
218Yankee Clipper III1 12YankClip.exe119Any startup section0270Yankee Clipper III - 'A super powerful Windows clipboard e xtender/memory - now in its third generation. Handles Pictures, Richtext, URLS, etc - any size. Features printing, drag and drop, optional permanent storage of clippings. Familiar "Outlook" interface'. Freeware39http://www.yankee-clipper.net/index.htm0
3 3YPC1 7ypc.exe119Any startup section0102Yahoo Parental controls - "Let you decide what type of sites and Yahoo! services your kids can access"42http://help.yahoo.com/help/us/sbc/browser/0
417YTrayMagic Lite 11 14YTRAYMAGIC.EXE119Any startup section0231YTrayMagic f rom YoconSoft automatically restores your tray icons after an Explorer(the windows shell) crash. Leave to run at startup since only those icons that are in the taskbar after YTrayMagic has initialized will be restored55http://yoconsoft.hypermart.net/products.html#ytraymagic0
1 6yz.exe1 6yz.exe119Any startup section0 37Added as a result of the VARDO VIRUS!73http://securityresponse.symantec.com/avcenter/venc/data/trojan.vardo.html0
1 6Zacker1 10Zacker.exe119Any startup section0 37Added as a result of the GEMEL VIRUS!62http://www.symantec.com/avcenter/venc/data/w32.hllw.gemel.html0
4 5Zapro1 9Zapro.exe119Any startup section0 50Firewall program from Zonelabs - paid for version43http://www.zonelabs.com/download/index.html0
217zBrowser Launcher1 23iTouch.exe Commandr.exe219Any startup section0147For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys43http://www.zonelabs.com/download/index.html0
1 6zcproo1 12qssstiej.exe119Any startup section0103Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise. see this thread93http://www.lavasoft.nu/cgi-bin/forums/ikonboard.cgi?s=3d69d34f399dffff;act=ST;f=14;t=304;st=00
2 5zdnet1 11kontiki.exe119Any startup section0117Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktop s95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
2 5Zebus1 10msdc32.exe119Any startup section0 42Runs a HTML tutorial on the Zebus web-site95http://help.kontiki.com/enduser/group.jsp;jsessionid=2C47C896EA1784C5321FD3E6845E8157?node=28460
1 5Zenet1 31rundll32 CNBabe.dll, DllStartup219Any startup section0 50CommonName Toolbar s pyware. To uninstall see here66http://www.commonname.com/e nglish/ug/toolbar/default.asp?idx=10#40
4 5ZENRC1 11zenrc32.exe119Any startup section0122The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network M anagement". Leave well alone40http://www.novell.com/products/zenworks/0
415ZENRC Tray Icon1 11zentray.exe119Any startup section0107Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network M anagement". Best left alone40http://www.novell.com/products/zenworks/0
424ZENworks Imaging Service1 10ZISWin.exe119Any startup section0103Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network M anagement"40http://www.novell.com/products/zenworks/0
3 7ZeroAds1 11LAS0Ads.exe119Any startup section0 88ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work36http://zeroads.com/flash/default.asp0
1 7ZIBMACC1 24rundll.exe - ZIBMACC.INF219Any startup section0240ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435)36http://zeroads.com/flash/default.asp0
311ZingSpooler1 15ZingSpooler.exe119Any startup section0170Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums36http://zeroads.com/flash/default.asp0
2 9Zinio DLM1 8ZDLM.EXE119Any startup section0 68Zinio - used to read magazines in digital ra ther than paper format25http://www.zinio.com/main0
117Zip Driver Loader1 28ZipLoader32.exe msload32.exe219Any startup section0105Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.oblivion.html0
313ZipDisk Icons1 11IMGICON.EXE119Any startup section0354Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start - Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running78http://securityresponse.symantec.com/avcenter/venc/data/backdoor.oblivion.html0
215ZipGenius Clean1 6zg.exe119Any startup section0 35ZipGenius f ile compression utility37http://www.zipgenius.it/index_eng.htm0
2 8ZipMagic1 8zm32.exe119Any startup section0122Zip utility by Ontrack. Preloading ZipMagic allows you to access f iles within a zip archive without unzipping them first32http://www.ontrack.com/zipmagic/0
428zlclientor Zo ne Labs Client1 12zlclient.exe119Any startup section0 83Firewall program from Zonelabs. Pro version inlcudes other online security options43http://www.zonelabs.com/download/index.html0
3 3ZLH1 7ZLH.EXE119Any startup section0 37System Tray icon for Norman Antivirus22http://www.norman.com/0
1 9Zonavirus1 13Zonavirus.exe119Any startup section0 54Added as a result of the KITRO.D ( or ARGEN.A) VIRUS!89http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ARGEN. A&VSect=T0
119Zone Labs Client Ex1 11svchost.exe119Any startup section0156Added as a result of the NETSKY.F VIRUS! This is not the valid svchost.exe as described here. Located in a Windows directory, and n ot i n Windows\System3269http://support.microsof t.com/default.aspx?scid=KB;EN-US;Q250320&0
4 9ZoneAlarm1 13zonealarm.exe119Any startup section0 46Firewall program from Zonelabs - free version46http://www.zonelabs.com/store/content/home.jsp0
414ZoneAlarm Plus1 10zaplus.exe119Any startup section0 50Firewall program from Zonelabs - paid for version46http://www.zonelabs.com/store/content/home.jsp0
413ZoneAlarm Pro1 9Zapro.exe119Any startup section0 50Firewall program from Zonelabs - paid for version46http://www.zonelabs.com/store/content/home.jsp0
3 4Zoom1 8zoom.exe119Any startup section0 66Zoom - speeds up Windows startup and manages startup applications51http://www.foxpop.ndirect.co.uk/pc/dachshund_04.htm0
3 8zSPGuard1 11Spguard.exe119Any startup section0233"StartPage Guard ( SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'."38http://pjwalczak.com/spguard/index.php0
115ZtgServerSwitch1 10server.vbs119Any startup section0172ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware38http://pjwalczak.com/spguard/index.php0
1 7Zupdate1 11Zupdate.exe119Any startup section0316B3d Projector - periodically trys to access the internet. (1) Uninstall it via Start - Settings - Control Panel - Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents43http://www.kazaa.com/en/privacy/bundles.htm0
1 6zzgshp1 8gshp.vbs119Any startup section0 65Homepage hi-jacker that re-defines your IE or Netscape start page53http://sarc.com/avcenter/venc/data/adware.iagold.html0
111\\MSMcAfeee1 15Avsynmgr32e.exe119Any startup section0 38Added as a result of the FRAMAR VIRUS!74http://securityresponse.symantec.com/avcenter/venc/data/trojan.framar.html0
3 7_winadm1 10winadm.exe119Any startup section0314Parents Friend - "Log any activity and protect programs with a passw ord. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC"49http://people.freenet.de/winadm/anleitung_eng.htm0
1 9_x-Finder1 13_x-Finder.exe119Any startup section0 61Disconnects and redials an ISP modem to an adult content site49http://people.freenet.de/winadm/anleitung_eng.htm0
138{2CF0B992-5EEB-4143-99C0-5297EF71F444}1 37rundll32.exe stlbdist.dll, DllRunMain219Any startup section0 29BrowserAid/Startium p arasite47http://www.doxdesk.com/parasite/BrowserAid.html0
138{2CF0B992-5EEB-4143-99C2-5297EF71F44B}1 37rundll32.exe stlbupdt.DLL, DllRunMain219Any startup section0 29BrowserAid/Startium p arasite47http://www.doxdesk.com/parasite/BrowserAid.html0
114I-Worm.Bagle.J1 10winsys.exe1 9ssate.exe0361This worm spreads via the Internet as an attachment to infected messages, and also via file sharing networks. It is packed using UPX; the size of the compressed file is 12843 bytes, and the size of the uncompressed file is 49707 bytes. The worm may write nonsense to the end of the file, in which case the size of the file will differ from the size shown above.54http://www.viruslist.com/eng/viruslist.html?id=11259640
114I-Worm.Bagle.I1 9irun4.exe1 9ssate.exe0390Bagle.i is 12288 bytes in size, packed using UPX. The unpacked file is 49152 bytes in size. Like previous versions of Bagle, Bagle.i sometimes sends copies of itself in password protected ZIP format. In this case, the password is included in the body of the message. The zipped file is about 12KB in size. It also creates a key in the registry: [HKCU\SOFTWARE\DateTime] "<RANDOM value>"="1"54http://www.viruslist.com/eng/viruslist.html?id=11253960
118I-Worm.Netsky.C, E1 21winlogon.exe -stealth2 7ICQ Net0201This worm spreads via the Internet as a file attached to infected messages. The worm itself is a PE EXE file of approximately 23KB, packed using Petite. The unpacked file is approximately 39KB in size.54http://www.viruslist.com/eng/viruslist.html?id=10710430
114I-Worm.Bagle.E1 12i1ru74n4.exe1 8rate.exe0262This worm spreads via the Internet as a file attached to infected emails. The worm itself is a PE EXE file of approximately 17KB, packed using PEX. The unpacked file is approximately 27KB in size. The worm also creates the registry key: [HKCU\SOFTWARE\DateTime4]54http://www.viruslist.com/eng/viruslist.html?id=10706190
115I-Worm.Netsky.D1 12winlogon.exe1 8any name0249This worm spreads via the Internet as a file attached to infected messages. The worm is a Windows PE EXE file, of approximately 17424 bytes, written in Microsoft Visual C++. It is packed using Petite. The unpacked file is approximately 27KB in size.54http://www.viruslist.com/eng/viruslist.html?id=10700580
114I-Worm.Bagle.F1 12i1ru54n4.exe1 8rate.exe0313This worm spreads via the Internet as a file attached to infected messages. It also spreads via file-sharing networks. The worm is a PE EXE file of approximately 21KB, packed using PEX. The unpacked file is approximately 35KB in size. It also creates the following registry key: [HKCU\SOFTWARE\Winword] "frun"="1"54http://www.viruslist.com/eng/viruslist.html?id=10699120
310SystemTray1 11SysTray.Exe111HKEY_LM\Run0 89Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Systray .exe stub62http://support.microsoft.com/default.aspx?scid=kb;en-us;1281290
3 5NVIEW1 36rundll32.exe nview.dll,nViewLoadHook211HKEY_CU\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App 01
326Windows & Internet Cleaner1 24WICleaner.exe /ErIEIndex215HKEY_CU\RunOnce0 0 01
317wextract_cleanup01107rundll32.exe "C:\WINDOWS\System32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\Mehdi\LOCALS~1\Temp\IXP000.TMP\"215HKEY_LM\RunOnce0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App 01
314PHIME2002ASync1 18TINTSETP.EXE /SYNC211HKEY_LM\Run0108Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word 01
310MClipboard1 23MClipboard.exe /autorun211HKEY_LM\Run0 78MClipboard 2.1, F-Group Software. MClipboard is the quickest clipboard manager43http://fgroupsoft.com/Mclipboard/index.html0
316Microsoft Office1 13OSA.EXE -b -l222StartUp menu\All users0 83Microsoft Office XP 10.0.2609, Microsoft Corporation. Microsoft Office XP component 01
3 5Skype1 15Skype.exe /nosp211HKEY_LM\Run0105Skype is a P2P internet telephony program. it allow users to talk between each other using this software. 01
3 6RunDLL1 65rundll32.exe "C:\WINNT\Downloaded Program Files\bridge.dll",Load"211HKEY_LM\Run0126Sistema operativo Microsoft(R) Windows(R) 2000 5.00.2134.1, Microsoft Corporation. Ejecutar un archivo DLL como una aplicaci≤n 01
3 9Tray Safe1 12TraySafe.exe111HKEY_CU\Run0116Tray Safe 3.3, F-Group Software. Tray Safe is user-friendly password manager to encrypt your usernames and passwords24http://www.traysafe.com/0
313WinMySQLadmin1 17winmysqladmin.exe125StartUp menu\Current user0 61WinMySQLadmin 1.0.0.0, MySQL AB. Administrator Tool for Win3220http://www.mysql.com0
332Passwords Max for Groups Monitor1 10PMGMON.exe125StartUp menu\Current user0 77Passwords Max, the premier application for managing your password collection.22http://www.authord.com0
3 8The Bat!1 10thebat.exe111HKEY_LM\Run0 20The Bat email client22http://www.ritlabs.com0
323Network Service Manager1 10netsvc.exe111HKEY_LM\Run0 0 01
311NvCplDaemon1 52RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup211HKEY_LM\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App 01
313NvMediaCenter1 59RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit211HKEY_LM\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App 01
3 4nwiz1 17nwiz.exe /install211HKEY_LM\Run0 59NVIDIA nView Wizard, Version 52.16 6.14.10.5216, NVIDIA Co 01
311NvCplDaemon1 42RUNDLL32.EXE NvQTwk,NvCplDaemon initialize211HKEY_LM\Run0102Operativsystemet Microsoft« Windows« 5.1.2600.0, Microsoft Corporation. K÷r en DLL-fil som ett program 01
311NvCplDaemon1 86RUNDLL32.EXE c:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\nvcpl.dll,NvStartup211HKEY_LM\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App 01
323Synchronization Manager1 18mobsync.exe /logon211HKEY_LM\Run0106Microsoft Synchronization Manager 5.00.2195.6627, Microsoft Corporation. Microsoft Synchronization Manager39http://www.absolutestartup.com/startup/1
311NvCplDaemon1 50RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup211HKEY_LM\Run0102Microsoft(R) Windows (R) 2000 Operating System 5.00.2134.1, Microsoft Corporation. Run a DLL as an App39http://www.absolutestartup.com/startup/1
338{2CF0B992-5EEB-4143-99C0-5297EF71F444}1 56rundll32.exe C:\WINDOWS\System32\stlbdist.DLL,DllRunMain211HKEY_LM\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App39http://www.absolutestartup.com/startup/1
351CreataCard Plus 3 Forget Me Not Reminders Tray Icon1 12FMRemind.exe122StartUp menu\All users0 68CreataCard 3.0, Micrografx, Inc.. Forget Me Not Reminder Application39http://www.absolutestartup.com/startup/1
3 6RunDLL1 51rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load"211HKEY_LM\Run0 91Microsoft« Windows« Operating System 5.1.2600.0, Microsoft Corporation. Run a DLL as an App20http://www.absolutes0
3 7AvaFind1 22AvaFind.exe /minimized211HKEY_LM\Run0 57Ava Find 1.5.0.210, Think Less Do More Services. Ava Find39http://www.absolutestartup.com/startup/1
310100% Clock1 13AlfaClock.exe111HKEY_LM\Run0 56AlfaClock 1.60, AlfaSoft Research Labs. AlfaClock loader39http://www.absolutestartup.com/startup/1
3 8BlockAds1 13AdBlocker.exe111HKEY_CU\Run0 93Ad Blocker of Tweak-XP 3.00, Totalidea Software, Germany, New Zealand. Ad Blocker of Tweak-XP39http://www.absolutestartup.com/startup/1
324Norton Internet Security1 11NISPLUG.NSI1 7StartUp0 55Messenger Version 4.7, Microsoft Corporation. Messenger39http://www.absolutestartup.com/startup/1
312AEIWLSTA.EXE1 18AEIWLSTA.EXE START211HKEY_LM\Run0 85PRISM Wireless LAN 2.00.09.0103, Actiontec Electronics, Inc. PRISM Status Tray Applet39http://www.absolutestartup.com/startup/1
3 9AOLDialer1 11AOLDial.exe111HKEY_LM\Run0100AOL Connectivity Service 2.0.19.19.US.19 , America Online, Inc. AOL Connectivity Service Dialer39http://www.absolutestartup.com/startup/1
3 8BlockAds1 12BlockAds.exe111HKEY_CU\Run0106Absolute StartUp 4.1, F-Group Software. Absolute StartUp provides absolute control on autostartup programs39http://www.absolutestartup.com/startup/1
310Rundll32_71 58rundll32.exe C:\WINDOWS\system32\msiefr40.dll,DllRunServer211HKEY_LM\Run0102Microsoft(R) Windows (R) 2000 Operating System 5.00.2134.1, Microsoft Corporation. Run a DLL as an App39http://www.absolutestartup.com/startup/1
328BluetoothAuthenticationAgent1 54rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent211HKEY_LM\Run0117SystΦme d'exploitation Microsoft« Windows« 5.1.2600.0, Microsoft Corporation. ExΘcuter une DLL en tant qu'application 01
221TkBellExe Tk Bell.Exe0 32evntsvc.exe alsched.exe bell.exe219Any startup section0452Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here f or more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools - Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK46http://www.mikescomputerinfo.com/TkBellExe.htm0
3 8SiS Tray1 0111HKEY_LM\Run0106Absolute StartUp 4.1, F-Group Software. Absolute StartUp provides absolute control on autostartup programs 01
223TkBellExeor Tk Bell.Exe1 34evntsvc.exe alsched.exe tkbell.exe219Any startup section0452Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here f or more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools - Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK46http://www.mikescomputerinfo.com/TkBellExe.htm0
3 5IDMan1 17IDMan.exe /onboot211HKEY_CU\Run0133Internet Download Manager (IDM) 4, 0, 1, 6, Internet Download Manager Corp., Tonec Inc. . Internet Download Manager Application (IDM) 01
3 7CP32NOT1 12CP32NBTN.EXE111HKEY_LM\Run0107Dritek System Inc. CP32NBtn 2.14.2000 ( VC60 ), Dritek System Inc.. HP One-Touch Buttons ( Multi-Language ) 01
310helper.dll1 19helper.dll,Rundll32111HKEY_LM\Run0 94Microsoft(R) Windows(R) Operating System 4.10.1998, Microsoft Corporation. Run a DLL as an App 01
310UpConfgVer1 22UpgConf.exe /v:7.05.03211HKEY_LM\Run0 68Panda UpgConf 7, 7, 0, 1, Panda Software. UpgConf 7.05.07 to 7.07.01 01
311NvCplDaemon1 19NvCpl.dll,NvStartup111HKEY_LM\Run0102Microsoft(R) Windows (R) 2000 Operating System 5.00.2134.1, Microsoft Corporation. Run a DLL as an App 01
3 7kpmqzff1 12toyrnpfd.exe111HKEY_LM\Run1 86Calling Home 1, 0, 0, 1, callinghome.biz. Installation utility for www.callinghome.biz 01
314Instant Access1 48rundll32.exe EGCOMSERVICE_1039.dll,InstantAccess211HKEY_CU\Run1117Syst¿me d'exploitation MicrosoftR WindowsR 5.1.2600.0, Microsoft Corporation. Ex⌐cuter une DLL en tant qu'application 01
313NvMediaCenter1 26NVMCTRAY.DLL,NvTaskbarInit111HKEY_CU\Run0 98Operativsystemet Microsoft« Windows« 5.1.2600.0, Microsoft Corporation. Kj°r en DLL som et program 01
3 1R1 5R.exe111HKEY_LM\Run0 0 01
319AltnetPointsManager1 0111HKEY_LM\Run0106Absolute StartUp 4.1, F-Group Software. Absolute StartUp provides absolute control on autostartup programs 01
310BigDogPath1 22VM_STI.EXE Web Cam 320211HKEY_LM\Run0 31, VM.. Still Image (STI) Driver 01
