Startups - All

Start-Up Applications - All

Last update :- 31st July, 2005
10247 items listed

Introduction

This page presents a searchable, comprehensive list of the programs you may find that run when you switch on your PC as typically identified by MSCONFIG or the registry "Run" keys - and whether you need them.

Close Program/Task Manager

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences

A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Random startup entry/filename viruses

There are viruses and other pests that can add any number of different entries to the startups. They make additional entries under the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\ Run and RunOnce keys, allowing them to run at startup. In all cases below, %system% is a variable - by default this is C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP):

PE_BISTRO - adds "XXXX"="C:\WINDOWS\XXXX.EXE" - where XXXX is the randomly chosen filename of the dropped file
MAGISTR.A - adds "[Virus file name]"="[Virus Path and file name].EXE"
BUGBEAR.A or BUGBEAR.C or BUGBEAR.E - adds ""=%System%\"[random filename].EXE"
OPTIXPRO.11 - adds "%Registry entry%"="%Path%\%Filename%"
Lop.com homepage hijacker - adds multiple and random startup entries
FreeScratchAndWin - adds multiple and random startup entries as it includes LOP above
nCase (or n-Case) parasite - adds multiple and random startup entries
LORAC - adds "[four random characters]"="%Sysdir%\abcdef.exe"
MOSUCK - random name and filename in C:\Windows or C:\Winnt
DEBORMS.D - adds one of a number of valid Name/Startup Item entries but points to the path of the worm file dropped
GIBE.C - adds random name and filename in C:\Windows or C:\Winnt
SWEN.A - adds random name and filename
ZOMBAM.B - adds random name and filename
WANADO or REUR - adds "XXXXXXXX"="%Sysdir%\XXXXXXXX.exe" where X can be any random hexadecimal (0-9, A-F) number
SINCOM - adds random name and filename in C:\Windows or C:\Winnt with "Run:Auto" appended to the command/data column entry
SOBER family - adds "[random string]"="%system%\[random filename.exe]"
BRANCOS.C - adds "win_[4 random characters][4 random numbers 0-9]"="%System%\SYS_386X\[4 random characters][4 random numbers 0-9].exe"
IRC.BOT.B - adds random name and filename
COREFLOO-C - adds "[random filename]"="rundll32 %SYSTEM% [random filename].dll,Init 1"
[random digits].exe = [random digits].exe - 8 random digits, example: 77231997.exe = 77231997.exe. Winpup.exe adult content downloader
DRAGONQQ - "[Trojan's filename]"="[Path to the Trojan]", "[Random name]"="C:\WINNT\[Random name].exe", "[Random name]"="C:\Program Files\[Random name].exe" or "[Random name]"="C:\WINDOWS\[Random name].exe"
FORMADOR - adds "[executed file name]"="%System%\[executed file name].exe"
NETTRASH - adds "[file name]"="[path to filename].exe"
OPTIXPRO.13B - adds "[registry value name]"="[path to trojan].exe"
MYDOOM.F or MYDOOM.G or MYDOOM.H - adds "[4 to 8 random, lowercase letters]"="[worm filename]"
ANNIL - adds random name and filename
ANTINNY.G and ANTINNY.K - adds "[random name]"="[path to worm]"
KILLAV.D - adds "[Trojan filename]"="%Windir%\[Trojan file name]" where %Windir% is C:\Windows or C:\Winnt
MYPOO - adds "[value name]"="[Trojan file name]" where [value name] is configurable
BLACKMAL or BLACKMAL.B - adds "[random_file_name1].exe"="%System%\[random_file_name1].exe"
ERKEX.A - adds "[random_file_name]"="%System%\[random_file_name].exe"
OPASA - adds "[random_file_name]"="%System%\[random_file_name].exe"
GAOBOT.ADN - adds random name and filename
ADWAHECK - adds "[trojan name]"="%System%\[trojan filename]"
GOBOT.A - adds random name and filename in C:\Windows or C:\Winnt
Sandboxer adware - adds random name and filename
AGENT.B - adds "[1-5 random characters]"="RUNDLL32 %System%\[DLL filename].dll,StreamingDeviceSetup"
EXRUNTEL - adds "[original filename]"="%System%\[original filename]"
Margoc adware - adds random name and filename
Winpup adware - adds random name and filename in %System%
KETCH - adds "[word]"="%System%\[word][number].exe"
DARBY.B - adds "[random worm filename]"="%System%\[random worm filename]"
VUNDO - adds "*[trojan name]"="[trojan path]"
BEAKER.A - adds "[5 random lower-case char]"="[5 random lower-case char].exe" in the System, system32, Temp and Fonts sub-directories of %Windir%
LIFEFORENOW - adds "[random filename]"="%System%\[random filename].exe"
DIMI - adds "[random value name]"="%System%\[random filename].exe"
ABEBOT - adds "[random service name]"="[random filename].exe -services"
OMEGA - adds "[random value]" = "%Windir%\[random file name].exe"
NAMSHARE - adds "[Random service name]" = "[Random file name]"
REANET.B - adds "[file name]" = "[path to file name]"
BANCOS.Q - adds "[filename prefix]" = "[path to filename]"
SPYBOTER.GEN - adds "[key name]" = "[file name of Trojan]"
BOTUK - adds "[random characters]Srv32" = "[random characters]srv.exe"

Spyware/Adware/Malware/Foistware & Hijackers

Check CastleCops for information about these types of program. They have very active forums. You may also want to try SpywareInfo for their forums and a list of startup program managers

o-----------------------------o

This search works with IE4+, NS4 and Mozilla/NS7+ but not NS6. Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown

	Name/Startup Item	Command	Comments
X		system32.exe	Added by the AGOBOT-KU WORM! Note - has a blank entry under the Startup Item/Name field
X		pathex.exe	Added by the MKMOOSE-A WORM!
X	SystemBoot	services.exe	Added by the SOBER-Q TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X	WinStart	services.exe	Added by the SOBER.O WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X	winsystem.sys	smss.exe	Added by the SOBER.K WORM! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
Y	!1_pgaccount	pgaccount.exe	DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks. You will see one instant of pgaccount.exe for every active account on your system, and this is essential for PG to work properly
Y	!1_ProcessGuard_Startup	procguard.exe	DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks
N	!NoLoad	winrecon.exe	WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
?	$EnterNet	Enternet.exe	Connection manager for the EnterNet ISP. You can also use RASPPOE
X	$WindowsRegKey%update	IEXPLORE.EXE	Added by the RBOT-EZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually!
N	%cmpmixtitle%	%cmpmixstr%	Possibly related to C-Media Mixer Control panel?
?	%FP%012-L2TP fts.exe	fts.exe	012.Net ISP software - what does it do and is it required?
?	%FP%012-L2TP FWPortal.exe	FWPortal.exe	012.Net ISP software - what does it do and is it required?
?	%FP%1776 Internet fts.exe	fts.exe	1776 Internet ISP software - what does it do and is it required?
?	%FP%1776 Internet FWPortal.exe	FWPortal.exe	1776 Internet ISP software - what does it do and is it required?
?	%FP%Barak013 fts.exe	fts.exe	Barak013 ISP software - what does it do and is it required?
?	%FP%Barak013 FWPortal.exe	FWPortal.exe	Barak013 ISP software - what does it do and is it required?
?	%FP%Friendly fts.exe	fts.exe	Friendly ISP software - what does it do and is it required?
X	(*)API Machine	winSOCKS.exe	Homepage hijacker, see here (* = any digit)
X	(*)Run	win32API.exe	Homepage hijacker, see here (* = any digit)
X	(default)	[random filename].exe	Added by the BLACKMAL WORM!
X	(L4r1$$4) (4nt1) (V1ruz)	SP00Lsv32.pif	Added by the ASSIRAL.B WORM!
X	*JanisRuckenbrodII	janis.com	Added by the POPS WORM!
X	*Microsoft Update	ctxma.exe	Added by the STMU TROJAN!
X	*Microsoft Update	cxma.exe	Added by the STMU TROJAN!
X	*Microsoft Update	wstcl.exe	Added by the STMU TROJAN!
X	*Microsoft Update	wucxt.exe	Added by the STMU TROJAN!
X	*Microsoft Update	wuytc.exe	Added by the STMU TROJAN!
X	*MS Setup	[random filename]	Virtumondo adware, also known as the VUNDO TROJAN!
X	*Security Center	secctr.exe	Added by the SDBOT.BRO WORM!
Y	*StateMgr	statemgr.exe	Windows ME default for System Restore. Do NOT disable!
X	*windows update	wrauclt.exe	Added by the RBOT-QU WORM!
X	*windows update	wuanclt.exe	Added by the RBOT-PG WORM!
X	*windows update	wuaucrlt.exe	Added by the SPYBOT.HUR WORM!
X	*windows update	wuraclt.exe	Added by the RBOT-PO WORM!
X	*windows update	wurauclt.exe	Added by the RBOT-SY WORM!
X	*windows update	wsctl.exe	Added by the SPYBOT.PR WORM!
X	*windows update	wkmst.exe	Added by the SDBOT.AVD WORM!
X	*windows update	wscxt.exe	Added by the RBOT.AOS WORM!
X	*windows update	waurclt.exe	Added by a variant of the RBOT WORM!
X	*WinLogon	[trojan path] ren time:[random number]	Added by the VUNDO TROJAN!
X	*wuauclt.exe	wxmct.exe	Added by an unidentified WORM or TROJAN!
X	*wuauclt.exe	w***.exe [ = random char]	Added by a variant of the RBOT-UG WORM! Note - * in the filename represents a random char; variants spotted: wxmct.exe, wtmsv.exe, wxmst.exe, wmsvc.exe and so on...
X	,main drive Loader	wininfo.exe	Suspected malware as it appears in 3 different registry locations - see here
X	.mscdr	lassa.exe	Added by the WEBUS.C TROJAN!
X	.mscdr	lsvchost.exe	Added by the WEBUS.D TROJAN!
X	.mscdsr	lsvchost.exe	Added by the CR TROJAN!
X	.mscsbl	svhost.exe	Added by the CMQ TROJAN!
X	.msfupdate	msveup.exe	Added by the ALLOCUP.A WORM!
X	.mssecure	mssecure.exe	Added by the DDOS_BOXED.X TROJAN!
?	.NET config	sysmon32.exe	??
X	.norton	rchost.exe	Added by a variant of the BOXED-A TROJAN!
X	.Prog	services.exe	Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X	.Prog	winlogon.exe	Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
X	.svchost	CSRSS.EXE	Added by the WEBUS.F TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	.TEXTCONV	csrss.exe	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	.TEXTCONV	lsass.exe	Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
X	.WMAudio	csrss.exe	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	.WMAudio	lsass.exe	Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
N	/l:eng	N/A	Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function
U	000	pit.exe	Added by the PrivateEye surveillance software! Note - If you did not intentionally install this remove it
X	000hpdllhos	hpdllhost.exe	LZIO.com adware downloader
U	000StTHK	000StTHK.exe	Toshiba Hot key functionality for the function keys (Fn-Esc, Fn-F1 (lock), Fn-F2, Fn-F3, Fn-F4, Fn-F5 (switching between laptop and CRT display output), etc...)
U	00THotkey	00THotKey.exe	For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
U	0190 Warner	WARN0190.EXE	Anti-dialer program (Germany)
U	0900 Warner	WARN0900.EXE	Anti-dialer program (Germany)
X	0utlook Express	****.exe [ = random char]	Added by the RBOT-CC WORM! Note the first letter is actually the digit "0" and not a capital "o"
X	1	1.exe	Added by the ESTEEMS TROJAN!
X	1111swapmgr.exe	1111swapmgr.exe	Added by the IC TROJAN!
X	123456	rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl	Added by the KITRO.C (or DANDI.A) WORM! 123456 can be any random 3 to 6 digit number
U	12Ghosts Popup-Killer	12popup.exe	12Ghosts Popup-Killer
?	17779Proj2002	N/A	??
X	180adsolution	180adsolution.exe	180Solutions/N-Case adware variant
X	180ax	180ax.exe	180Solutions/N-Case adware variant
X	180ClientStubInstall	stubinstaller***.exe [ = digit]	180Solutions adware related
X	180ClientStubInstall	[path to trojan]	180Solutions adware related
N	1:	hpdrv.exe	HP utility for monitoring when and how many recoveries have been done
N	1A:MacVisionTrayMonitor	TrayMonitor.exe	Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y	1A:Stardock MCP	mcpserver.exe	Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications
Y	1A:Stardock TrayMonitor	TrayServer.exe	For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
?	1CmailS	NETMAIL.EXE	??
X	1on1	1on1.exe	Adult content dialler
U	1Srv32	SpyAgent4.exe	SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."
U	1Win32Cfg	SpyBuddy.exe	SpyBuddy monitoring software
U	1Win32Cfg	Keyloggerpro.exe	KeyloggerPro - monitoring software
X	1WinCfg32	WebMailSpy.exe	WebMailSpy spyware
X	2020Downloader	mssvr.exe	2020Search Toolbar related. Reported to be auto-installed
X	27	slsorve.exe	Added by the SLSORVE-A TROJAN!
X	2thousandbuck	[path to file]	Added by the RANKY.L TROJAN!
U	2wSysTray	2portalmon.exe	2Wire Homeportal user interface
X	32-bit Thunking service	thunk32.exe	Added by the DERDERO.A WORM!
?	39ELTFH25Z8SKF	Ezg1q5.exe	Seems to be associated with software by Resplendence SP ?
Y	3c1807pd	3cmlink.exe 3cpipe-3c1807pd	3Com WinModem driver. See here for more WinModem information
Y	3capplnk	3capplnk.exe	US Robotics Modem driver
N	3cdminic	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y	3CM Link	3cmcnkw.exe	Required for a US Robotics WinModem as it provides the link to Windows - won't work without it
Y	3Cmlink	3CmlinkW.exe	For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
N	3ComDMIAgent	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y	3cpipe-USRpdA	USRmlnkA.exe	Modem driver files from US Robotics
X	3D Text	3D Text.scr	Added by the JERMY.A WORM!
U	3Deep Control Panel	3DeepCTL.EXE	From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X	3Dfx Acc	GFXACC.EXE	Added by the GIBE WORM!
N	3dfx Task Manager	3dfxMan.exe	System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y	3dfx Tools	3dfxCmn.dll	Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
Y	3dfxv2ps.dll	3dfxv2ps.dll	Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
?	3Dlabs Taskbar Display Manager	3DLman.exe	3DLabs graphics driver related. System Tray access to display settings?
U	3DLabsHelperDemon	3dldemon.exe	Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled
Y	3DMouse.EXE	3DMouse.EXE	Dritek System Inc. 3D Mouse driver
U	3qdctl.exe	3qdctl.exe	Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
Y	3ware 3DM	3dm.exe	Monitors status of the disk array on 3ware IDE RAID controllers
X	4wd!!!	Natal!.pif	Added by the OPASERV.AI WORM!
X	5-1-61-96	members-area.exe	Adult content dialler
X	5-2-46-112	5-2-46-112.exe	Adult content pop-up dialler. Removal instructions here
X	55278	grepclient1.exe	Added by the LINEAGE-S TROJAN!
X	666	Ska.exe	Added by the PIPES TROJAN!
X	678	lsas32.exe	Added by the SLSORVE-B TROJAN!
Y	9xadiras	9xadiras.exe	Allied Telesyn AT series router/modem related - apparently required
X	9xHtProtect	AVprotect9x.exe	Added by the NETSKY.M WORM!
X	;Rundll	[filename]	Added by the PWSLEGMIR.E TROJAN!
X	@	regedit -s ..win.dll	Added by the SEEKER.K TROJAN!
N	@Hoc Toolbar	AtHoc.exe	One-click activated browsing toolbar used by various web-sites. See here for more info
N	@loha	reminder.exe	Registration reminder for @loha@home E-mail utility
X	@tour_ww	@tour_ww[1].exe	Adult content dialler
X	a	a.exe	Commercials file that registers itself in the system registry and redirects IE to a certain commercial website
X	A New Windows Updater	w32NTupdt.exe	Added by MYTOB.BM WORM!
U	a-squared	a2guard.exe	a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a² 'Background Guard' real time protection feature
Y	a-winpoet-service	winpppoverethernet.exe	WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
U	A1000 Settings Utility	cpqa1000.exe	Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
U	A4Proxy	A4Proxy.exe	Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
?	AAACLEAN	AAACLEAN.INF	??
?	AAAKeyboard	??	??
N	AAATraySaver	TraySaver.exe	System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
U	AAK	aak.exe	Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere"
X	Aaou	amee.exe	PurityScan/Clickspring adware
X	Aapp	adprot.exe	AdBlaster adware
?	aauclient	ACNUpdater.exe	Appears to be related to software from Accenture.comF1527
?	ab EazyScheduler	ezsched.exe	??
N	ABBYY Community Agent	CAGENT.EXE	Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software
X	ABC	keylogger.exe	Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
U	ABIT uGuru	uGuru.exe	Provides quick access to several Abit motherboard utilities - such as monitoring cpu temperature, fan speeds, overclocking, flashing of BIOS
N	ABITEQ	abiteq.exe	Monitoring utility for ABIT Motherboards. Displays system voltages, temperatures and fan speeds
U	Absolute Shield	dseraser.exe	Absolute Shield/Evidence Eliminator - iternet history eraser
U	Absolute StartUp monitor	ASMon.exe	Absolute Startup - startup monitor from F-Group Software
X	ABsr	absr.exe	Added by the AUTOUPDER TROJAN!
X	absr	mwsvm.exe	SeekSeek search hijacker related - as seen here
X	abtu	mp3serch.exe	Loads the executable for Lop.com. mp3serch.exe is the final version
X	abtu	lopsearch.exe	Loads the executable for Lop.com. lopsearch.exe is the beta version
U	AbyssWebServer	abyssws.exe	Abyss web server
Y	AcBtnMgr_Xxx	AcBtnMgr_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
U	acc	acc.exe	Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"
X	ACCDEFRAGINFO	[path to worm]	Added by the DARBY-O WORM!
U	Accelerate	accelerate.exe	Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N	Access Ramp Monitor	armon32.exe	Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
X	Access WebControl	[path to file]	Added by the PPDOOR-M TROJAN!
U	AccessManager	AccessMgr.exe	Part of SmartPipes SecureSite software. "SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management, access control management, and key management"
X	AccessMedia P2P Loader	amp2pl.exe	My AccessMedia toolbar related, stealth installed!
N	AccessRamp Monitor01	ARMon32a.exe	From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."
N	AccessRampLAN01	ARUpld32.exe	Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
U	AcctMgr	AcctMgr.exe	Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities—all from the safety of your own PC
N	AccuWeather.com® Desktop	??	Desktop weather from AccuWeather.com
?	Ace bows	Ace bows.exe	??
N	AceGain LiveUpdate	LiveUpdate.exe	AceGain_LiveUpdate. "AceGain LiveUpdate provides a fully managed and customizable LiveUpdate platform that seamlessly integrates with a game. As soon as an update is made available, AceGain manages the alert, download and installation as well as version control and user network preferences."
U	AcerNotebookManager	almxptray.exe	System Tray access on some Acer Notebooks to give faster access to system settings
U	AcerPowerkey	Powerkey.exe	PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
N	Acme.PCHButton	pchbutton.exe	Used by HP Instant Support
Y	ACMonitor_Xxx	ACMonitor_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
X	acocash	fastdown.exe	Adult content dialler
X	acocash	fastdown.exe	Adult content dialler
U	Acombo3dmouse	Acombo3d.exe	Mouse driver - required if you use non-standard Windows driver features
X	Aconti	aconti.exe	Adult content dialler
U	acoustic	acoustic.exe	Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
N	acpart	agpart11.exe	Program for finding trucks on-line
U	Acrobat Assistant .	ACROTRAY.EXE	Used to create PDF files with Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation. . represents the version
U	Acronis Scheduler2 Service	schedhlp.exe	Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images
N	Acronis TrueImage Monitor	TrueImageMonitor.exe	Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N	AcronisTrueImage Monitor	TrueImageMonitor.exe	Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N	Acronis True Image Monitor	TrueImageMonitor.exe	Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N	Action Manager 32	am32.exe	Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
?	ActionAgent	actionagent.exe	"A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required?
N	Activation	Activation.exe	Part of Microsoft Money
U	Activboard	MMKeybd.exe	Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
X	Active Bit Station	abs.exe	Added by the MYTOB.BZ WORM!
U	Active shield	Activeshield.exe	Active Shield is "an heuristic screen that actively protects your computer from trojans, spyware, adware, trackware, dialers, keyloggers, and even some special kinds of viruses"
X	ActiveDesktop	systray32.exe	Added by the DABOOM WORM!
X	ACTIVEDS	ACTIVEDS.EXE	Added by the OPASERV.T WORM!
N	ActiveEyes	ActiveEyes.exe	ActiveEyes from TFI Technology
U	ActiveMenu	ActiveMenu.exe	WildTangent games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
U	ActivePlus	activeplus.exe	Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
Y	ActiveShield	MCVSSHLD.EXE	McAfee VirusScan On-line. See also the McAgentExe entry
U	ActiveSpeed	AS.exe	Ascentive ActiveSpeed Internet Optimizer
X	ActiveXUpdate	svcss.exe	Added by a variant of the DEDLER.C TROJAN!
U	Activity	actik.exe	ActivityKey Keystroke logger/monitoring program - remove unless you installed it yourself!
N	ActivSurf	backweb*****.exe	Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U	ActMaker	ActMak25.exe	"ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding, nor are you required to know a lot about the computer"
U	ACU	ACU.exe	Atheros wireless Client Utility For HP Compaq
U	Ad Blocker	blocker.exe	Ad Blocker - blocks popups, and also removes banners, image ads and flash ads
U	Ad Blocker Pro	Ad Blocker Pro.exe	Ad Away popup and banner remover
U	Ad Muncher	AdMunch.exe	Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
?	Ad Online Guide	adonlineguide.exe	??
N	Ad-aware	Ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
X	Ad-Aware	Ad-Aware.exe	Added by the RBOT-ADJ WORM! Note - this is not the popular Ad-aware spware/adware removal tool and is located in the WinntSystem32 or WindowsSystem32 directory
U	Ad-Muncher	ADMUNCH.EXE	Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
U	Ad-watch	Ad-watch.exe	Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
U	AD2KClient	AD2KClient.exe	Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N	Adaptec DirectCD	Directcd.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N	AdaptecDirectCD	Directcd.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X	AdAware	wini.exe	Added by the RBOT-XN WORM!
N	Adaware Bootup	ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
X	Adaware lptt01	adaware.exe	Variant of the RapidBlaster parasite (in a "Adaware" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware
X	Adaware ml097e	adaware.exe	Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	AddClass	AddClass.exe	CoolWebSearch parasite variant
X	AddClass	[Installation_Path]	Added by the Startpage.F hijacker
U	AdDelete	AdDelete.exe	Banner advertisment blocker
X	AdDestroyer	AdDestroyer.exe	Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code
?	ADG	ADG.exe	SoundBlaster Audigy related?
N	ADGJdet	ADGJDet.exe	Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
Y	Adiras	Adiras.exe	ADSL USB modem related
X	ADM Library Loader	admlib32.exe	Added by a variant of the SDBOT TROJAN!
X	Admanager Controller	AdManCtl.exe	Adware, probably a Windupdates variant
X	Admilli Service	AdmilliServ.exe	Windupdates adware variant
X	AdminSoft	sysfile.vbs	Added by the STARGRUB-A WORM!
X	Adobe	Adobe.exe	Added by an unidentified VIRUS, WORM or TROJAN!
X	Adobe	sysconfig.exe	Added by an unidentified WORM or TROJAN!
X	adobe	gam.exe	Added by an unidentified WORM or TROJAN!
X	Adobe	sysbat32.exe	Added by the LOWZONES.T TROJAN!
X	Adobe	zteam.exe	Added by an unidentified TROJAN!
X	Adobe Acrobat Distiller Application	acrotray.exe	Added by the RANDEX.DFJ WORM!
X	Adobe Filter Platform	afilterplatform.exe	Added by the RBOT-OP WORM!
U	Adobe Gamma Loader	Adobe Gamma Loader.exe	Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
N	Adobe Reader Speed Lauch	reader_sl.exe	Speeds up the launch of Adobe (Acrobat) Reader 7
N	Adobe Reader Speed Lauch	READER~1.EXE	Speeds up the launch of Adobe (Acrobat) Reader 7
N	Adobe Reader Speed Launch	reader_sl.exe	Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly
X	AdobeA	adobes.exe	Added by the FLOOD.BA TROJAN!
X	AdobeFonts	fonts.hta	Browser hijacker - redirecting to Hugesearch.net
N	AdobeVersionCue	VersionCueTray.exe	"An exclusive feature of the Adobe® Creative Suite, Version Cue™ helps you find files fast, track multiple versions of your files, and share your files for creative collaboration"
X	Adope File Manager	lsasv.exe	Added by an unidentified WORM or TROJAN!
X	adp	adp.exe	Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
X	adprot	adprot.exe	AdBlaster adware variant
N	ADQuickAccess	Adtray.exe	After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
X	AdRoarUpdate	ARUpdate.exe	AdRoar adware updater
X	AdRotator.Application	[path to csrss.exe]	Added by the SMALL-AQ TROJAN!
U	ADService	ADService.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
U	AdsGone	Adsgone.exe	AdsGone - pop-up stopper
N	ADSL Diagnostic Tools	mapiicon.exe	System tray access to ADSL modem diagnostic tools. Available via Start -> Programs
?	ADSLSYSTEMTRAY	SystemtrayV100B.exe	Apparently Annex A ADSL modem related. What does it do and is it required?
Y	AdslTaskBar	rundll32.exe stmctrl.dll, TaskBar	ISP software, initializes DSL modem
?	ADSL_A2	A2Installed	Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required?
Y	ADSS	ADSS.exe	ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
X	adstartup	automove.exe	Adlogix adware variant
X	adstartup	Adstartup.exe	Adlogix adware variant
X	AdStatus Service	AdStatServ.exe	WindUpdates AdStatus Service adware
U	AdSubtract	adsub.exe	AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
X	Adtools Service	AdTools.exe	Windupdates Adware
X	AdultX	AdultX.exe	Adult content dialler and hijacker
X	Adult_Chat	Adult_Chat.exe	Adult content dialler
X	Adult_Chat1	Adult_Chat1.exe	Adult content dialler
X	AdUpdater	sysupudt.exe	Unidentified adware downloader/updater
U	ADUserMon	ADUserMon.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
X	Advanced Internet Protocol	cerf.exe	Added by a variant of the SPYBOT WORM!
X	Advanced Protection System	advpsys.exe	Added by a variant of the RBOT WORM!
X	Advanced Tool Checks	advchks.exe	Added by a variant of the RBOT WORM!
N	Advanced Tools Check	ADVCHK.EXE	Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
U	Advanced Uninstaller PRO Installation Monitor	monitor.exe	Innovative Solutions Advanced Uninstaller PRO - "easy-to-use suite for uninstalling applications and keeping your computer fast, clean, and in its best shape"
X	Advapi	Advapi.exe	Added by the NETDEVIL.12 WORM!
N	ADVCHK	ADVCHK.EXE	Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
U	Advertising Killer	Akiller.exe	AKiller - pop-up stopper
X	advmon32	advmon32.exe	Added by a variant of the CRYPTER.C TROJAN!
U	Adware Agent	adware agent.exe	Adware Agent popup blocker
N	Adware Spy	AdwareSpy.exe	Adware remover - not recommended, see here
X	AdwareAlert	AdwareAlert.Exe	Adware remover - not recommended, see here
X	AdwareDelete	adwaredelete.exe	Adware remover - not recommended, see here
?	Aeiwlsta.exe	Aeiwlsta.exe	IBM High Rate Wireless LAN Adapter driver. Is it required?
N	AELaunch	AELaunch.exe	Audio Applications Launcher for the Philips Acoustic Edge soundcard
X	AERVICESN	AERVICESN.exe	Added by the RANDON-AO WORM!
?	AeXSWDUsr	AeXSWDUsr.exe	Altiris Express NS Client Manager software. Is it required?
U	AEZBProc	aptezbp.exe	IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
U	AFAFilter	windefault.exe	AFAFilter - internet filter software
N	Agent	Agent.exe	Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
X	Agent Browser	[random filename]	Added by the PPdoor.M-bdr backdoor TROJAN!
X	Agent Explorer	[random filename]	Unidentified adware
?	Agente	Remupd.exe	Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar?
U	AgfaCLnk	AgfaCLnk.exe	For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
X	agp	agp32.exe	Added by the GAOBOT.SY WORM!
Y	AGRSMMSG	AGRSMMSG.exe	IBM AMR modem driver
N	AGSatellite	AGSatellite.exe	Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U	ahfp	ahfp.exe	Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U	ahfprog	ahfp.exe	Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U	AHNSD	AhnSD.exe	AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
?	AHNUE	AHNUE.exe	??
N	AHQInit	ahqinit.exe	Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
X	Ahst	iebs.exe	PurityScan/Clickspring adware
X	AHU	[path to worm]	Added by the ANACON-B WORM!
X	Aica	tuaa.exe	PurityScan/Clickspring adware
X	Aida	ttuh.exe	PurityScan/Clickspring adware
U	aiepk	aiepk2.exe	Another IE Popup Killer - pop-up stopper
N	AIM	aim.exe	AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
X	AIM Instant Message Cookies	[random filename]	Added by the RBOT-AFV WORM!
X	AIM reminder	AIM reminder.exe	Added by the BUDDY TROJAN!
X	AIM95 Startup	aim95.exe	Added by the AGOBOT.AEE WORM!
X	aimaol lptt01	aimaol.exe	Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	aimaol ml097e	aimaol.exe	Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	aimb.exe	aimb.exe	IMSufSentinel is a spy program which can record IM conversations, log keystrokes, record URLs visited, and take screenshots. If you didn't install this yourself remove it
N	AimingClick	AimingClick.exe	AimingClick from AimingTech. Web searching tool. Available via Start -> Programs
N	AIMster	??	Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N	AIMWDInstall	AIMWDInstall.exe	Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	aircity	aircity.exe	Related to "Prutect" malware from e2Give
X	AKEYNAME	WinServ.exe	Added by the EVILBOT.C TROJAN!
U	AKiller	akiller.exe	BuyPin Advertising Killer - popup killer
X	ala.exe	ala.exe	Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer
U	Alarm Manager	Alarm.app.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?	AlarmWatcher	AlarmWatcher.exe	Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?
N	Album Fast Start	ABMTSR.EXE	Scanner software, not required for scanner to work
X	Alchem	Alchem.exe	Transponder parasite updater/installer
X	alcmtr	ALCMTR.EXE	Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers
U	Alcohol	Alcohol.exe	Alcohol 120% - CD/DVD emulation/writing/copying software
U	Alcohol Autorun	Alcohol.exe	Alcohol 120% - CD/DVD emulation/writing/copying software
?	Alcom PCL Capture	FMW_PCAP.EXE	??
N	AlcWzrd	ALCWZRD.EXE	RealTek High Definition audio driver related - detects new devices when plugged in, then pops up a dialog box. If everything works as expected you should be able to disable this one
X	AlcxMonitor	Alcxmntr.exe	Realtek AC97 Audio - Event Monitor. Sypware file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but is being used by Realtek to gather data about customers
X	Alevir	Alevir.exe	Added by the OPASERV.A or OPASERV.F or OPASERV.G WORMS!
X	AlevirOld	[worm filename]	Added by the OPASERV.G WORM!
N	Alexa	Alexa.exe?	Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs
?	ALFY Accellerator	AlfyAC~1.exe	??
X	ALG32	ALG32.EXE	Added by the Startpage.K hijacker
X	ALGU	ALGU.EXE	Added by the CWS-I TROJAN!
N	Alias SketchBook Snapshot	ALIASS~2.EXE	Screen-capture utility for Alias Sketchbook
N	AlienAutopsy	Test_BS.exe	Alienware computer technical support software
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
?	AliUSBfix	GREENMK.exe	May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?
X	alkasr	ÎäÒíÑ.exe	Added by the BALKART TROJAN!
U	All Aboard Status	stswin.exe	All Aboard! Internet Connection Sharing status icon
X	All Sea screen saver	TaskTray.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
X	All Sea web link	FWLink.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
N	AllerCalc	AllerCalc.exe	AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually
U	allSnap	allSnap.exe	"allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"
X	Alogrithm Link Queue	alq.exe	Added by a variant of the SDBOT WORM!
U	Alogserv	Alogserv.exe	From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
U	ALPass	ALPass.exe	ALPass password manager
Y	Alps Electric USB Server	Monserv.exe	Alps Electric USB Server - required according to this article
U	AlpsPoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?	ALServ	ALServ.exe	Altec Lansing AMS speaker related. What does it do and is it required?
N	Altnet	points manager.exe	Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
N	AltnetPointsManager	points manager.exe	Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
U	AltoMB_service	AltoMBsrv.exe	Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
U	ALUAlert	ALUNotify.exe	Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
N	Aluria Security Center	SecurityCenter.exe	Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here
U	Aluria's Pop-Up Stopper	eps.exe	Aluria Pop-Stopper
N	Aluria's Spyware Eliminator	ASE.exe	Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop
X	AmazingTens	AmazingTens.exe	Premium rate adult content dialler
N	America Online . Tray Icon	aoltray.exe	Puts AOL icon in System Tray (. denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N	AME_CSA	rundll32 amecsa.cpl, RUN_DLL	Loads ADSL modem Control Panel applet
U	AModemLockDown	ModemLockDown.exe	ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc
Y	Amon	AMON.EXE	Monitoring part of Eset's NOD32 virus-scanner
Y	Amonitor	amon.exe	Tiny Personal Firewall
U	AMSN	amsn.exe	aMSN P2P client - can be started manually
X	anbv32	nabv32.exe	Added by the TITOG.C WORM!
Y	ANIWZCS2Service	WZCSLDR2.exe	ALPHA Networks wireless driver
?	ANIWZCSService	WZCSLDR.exe	D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
?	AnnotateCheck	AnnCheck.exe	Genius Wizard Pen Tablet driver related. Is it required?
N	Announcements	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N	Anntext	Anntext.exe	Caere Pagekeeper text annotation server
U	ANONYMIZER_SPYWAREKILLER	SpyWareKiller.exe	Anonymizer Spyware Killer
U	Another Internet Explorer Popup Killer	aiepk.exe	Another IE Popup Killer - pop-up stopper
X	ansjava	[path to worm]	Added by the RANDON-AN WORM!
X	Anskya	PYSKY.NET.exe	Added by the DLOADER-MW TROJAN!
X	Answer Problem	dSAFsqs.exe	Added by the SDBOT-SC WORM!
X	Anti Spam Service	spamsvc.exe	Added by the MYTOB-BK WORM!
U	Anti-keylogger check	antikey.exe	Anti-keylogger - protects against keylogger programs monitoring your keystrokes
U	Anti-Trojan-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
X	Anti-Virus Product Sync	[unprintable character][3 characters]log.exe	Added by the KEDEBE.D WORM!
X	Anti-Virus Update Scheduler	[various filenames]	Added by a variant of the HEPLANE or STAPREW.B TROJANS!
X	Anti-Virus Update Scheduler V1.39.12R	[various filenames]	Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe, kaspersky.exe, nrton.exe, wins.exe, gah32.exe, 1.tmp, syste.exe, alg.exe, socks.exe, winxpsp2.exe, tek9.exe, sks.exe, hihi.exe, s.exe, xps2.exe, dns2.exe, ikav32.exe and more...
U	AntiPopUp	AntiPopUp.exe	AntiPopUp for IE - pop-up stopper
Y	AntiVir XP	AVwin.exe	AntiVir antivirus
X	Antivirus	av.exe	Added by the SINKIN TROJAN! Resets IE start page to realphx.com
X	Antivirus	maja.exe	Added by the NETSKY.H WORM!
X	Antivirus	iexpl0res.exe	Added by an unidentified WORM or TROJAN!
X	AntiVirus	kaspery.exe	Added by a variant of the RBOT WORM!
X	Antivirus Installer	[path to trojan]	Added by the BADGENT-A TROJAN!
X	antivirus32	antivirus.exe	Added by the SPYBOT.KAI WORM!
X	AntivirusGold	AntivirusGold.exe	Malware masquerading as an antivirus - also installs the Winnook TROJAN!
?	AntiVirusProtection	qumk.exe	??
X	antiware	elite*32.exe [* = random char]	Added by the DLOADER-HW TROJAN!
U	AntiWindowsMessenger	AntiMsMsg.exe	Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory
Y	AnVir	AnVir.exe	AnVir Task Manager - protects computer against viruses and manages running processes and startup files
Y	AnVir Task Manager	AnVir.exe	AnVir Task Manager - protects computer against viruses and manages running processes and startup files
U	anvshell	anvshell.exe	System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
?	anycom bluetooth	ftflauncher.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
N	AnyDVD	AnyDVD.exe	"AnyDVD is a driver, which descrambles DVD-Movies automatically in the background. This DVD appears unprotected and region code free for all applications and the Windows operating system as well"
N	AO Tray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
X	AOL 9.0 Optimized	AOLClient.exe	Added by the SPYBOTER.A TROJAN!
U	AOL Broadband Check-Up	matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide
N	AOL Companion	companion.exe	Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process, and is installed for ease of use
X	Aol Configuration Loader	aimsng.exe	Added by the SDBOT-XE WORM!
?	AOL Fast Start	AOL.exe	AOL ISP software related. What does it do and is it required?
X	AOL Instant Messanger	aim.exe	Added by the SDBOT-YT WORM!
X	AOL Instant Messengar	aol.exe	Added by the AGOBOT-FN WORM!
?	AOL Instant Messenger	AlM.EXE	That is an L between the A and M, the start up location is wrong for AIM. What does this relate to?
X	Aol Instant Messenger	aolmsg.exe	Added by KELVIR.AL WORM!
X	AOL Instant Messenger 7.213	aim9283.exe	Added by the SDBOT-ZF WORM!
X	AOL Messenger	[random filename]	Added by an unidentified VIRUS, WORM or TROJAN!
X	AOL Messenger	aolmsngr.exe	Added by the SDBOT-JF WORM!
U	AOL Spyware Protection	AOLSP Scheduler.exe	AOL's spyware protection program
Y	AolAcsDaemon1	Acsd.exe	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
Y	AolAcsDaemon1	AOLACSD.EXE	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
?	AOLCC	ACCAgnt.exe	AOL ISP software related, file located in a "AOL Computer Check-Up" folder. What does it do and is it required?
X	AolCon	config.com	Added by the TAPLAK WORM!
N	AOLDialer	AOLDial.exe	AOL ISP software dialer - can be activated through a desktop shortcut
N	AolFix	AolFix.exe	Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once
X	Aornum	aornum.exe	Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
N	AOTray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	APC UPS Status	Display.exe	APC PowerChute Personal Edition status icon
U	APC_SERVICE	mainserv.exe	PowerChute® Personal Edition - "safe system shutdown software with sophisticated power management functions"
Y	apc_tray	apc_tray.exe	Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
X	API32	api32.exe	Added by the IRCBOT-B TROJAN!
X	APIMon	apimonx.exe	Added by the TIBSER.A downloader TROJAN!
X	APIMon	winapix.exe	Added by a variant of the TIBSER.A downloader TROJAN!
?	Apmsrv9x	APMSRV9X.EXE	Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
U	Apoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
X	App.EXEName	[path to worm].exe	Added by the BODIRU WORM!
U	Appcon	vAppCon.exe	Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established
X	appconn	appconn.exe	Added by the CARGAO WORM!
U	AppExtender	AppExtCB.exe	Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
X	appis.exe	appis.exe	Added by the AGENT-BC TROJAN!
Y	Application	mdmsetsp.exe	Aztech Labs modem driver
U	Application Explorer	Naldesk.exe	Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."
X	Application Layer Gateway Service	algs.exe	Added by the LINKBOT.M WORM!
U	AppPlus	AppPlus.exe	AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"
Y	Apvxd	APVXDWIN.EXE	Part of Panda Anti-Virus. Required to enable permanent virus protection
Y	Apvxdwin	APVXDWIN.EXE	Part of Panda Anti-Virus. Required to enable permanent virus protection
Y	Apwheel	Apwheel.exe	Wheel support for an Alps mouse
X	aqadcup.exe	aqadcup.exe	Added by the AGENT.BG WORM!
X	Aqujyjax	[path to file]	Added by the RANCK-CQ TROJAN!
X	Aqujyjax	aqujyjax.exe	Added by the SDBOT-YC WORM!
X	ara-key	[random filename]	Added by the ANTINNY WORM!
X	Archive	archive.exe	Adware, recognized by Kaspersky antivirus as Trojan-Downloader.Centim.a
X	ARCHIVE CONTROL	fixupdattr.exe	Added by the MYTOB.GU WORM!
N	ARCSolo Recovery	N/A	Backup software by Computer Associates - no longer supported
N	ares	ares.exe	Ares is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download"
N	areslite	AresLite.exe	Ares Lite Edition is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download"
X	Aritima	aritima.exe	Added by the ARITIM WORM!
U	Artera	arteraui.exe	Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance
?	AS00 Gear511	Gear511.exe	Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?
X	ASDPLUGIN	dsldbaccess.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	canada.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	france.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	fullgames.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	100171be.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	100176br.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	adult1.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	Austria.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	belgium nm.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	czech.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	dbaccess.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	dslgeaccess.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	Finland.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	geaccess.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	mexico.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	netherlands.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	turkey.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	uk nm.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	Xadult1.exe	AsdPlug premium rate adult content dialer variant
X	ASDPLUGIN	temp532.exe	AsdPlug premium rate adult content dialer variant
X	asdx	xwinrpc32.exe	Added by the AGOBOT.VO WORM!
N	ASE Scheduler	ASE Scheduler.exe	Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here
U	Ashampoo PopUpBlocker	PopUpKiller.exe	Ashampoo popup blocker, part of Privacy Protector Plus - see here
Y	ashAvast	ashAvast.exe	Part of Avast antivirus
X	ASHLT	Ashlt.exe	Ashlt adware
Y	ashMaiSv	ashmaisv.exe	Part of Avast! anti-virus software - E-mail scanner
U	AsioReg	regsvr32.exe ctasio.dll	ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
X	asl	Aslru.exe	Added by the BANCOS-CU TROJAN!
U	Asmw Soft Popups Burner	popups burner.exe	Popup blocker, part of Asmw Soft PC Optimizer
X	ASP.NET State Service	csrss.exe	Added by the DLOADER-QI TROJAN! Note - this file is placed in the Winnt or Windows folder and is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup and is always located in the WinntSystem32 or WindowsSystem32 folder
N	asp4tray	asp4tray.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	AspireTimeMachine	acertmb.exe	System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
X	assistse	ASSISTSE.EXE	CnsMin (Chinese_Keywords) related
X	AST	AST	Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
X	AST	AST	Added by the VB.AH TROJAN!
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	AStart	AStart	Added by the VB.AH TROJAN!
N	asTray	Astray.exe	Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
N	Astro	Astro.exe	Checks for updates to Quicken on a system reboot
N	ASUS Live Update	ALU.exe	ASUS Live Update utility for their motherboards
N	ASUS Probe	AsusProb.exe	ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U	ASUS SmartDoctor	VGAProbe.exe	ASUS video card fan/thermal monitor
U	ASUS TweakEnable	astart.exe	Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N	ASUSKey	V38SHELL.EXE	System tray Icon for quickly changing video modes
N	ASWDP	ASWDP.exe	MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
X	ASWnk	aswnk.exe	Adult content dialler
U	AT-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
X	atapidrv	atapidrv.exe	Added by the AGOBOT-SL WORM!
U	Athan	Athan.exe	Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world
N	ATI CATALYST System Tray	CLI.exe SystemTray	System Tray access to ATI's CATALYST™ CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop
N	ATI DeviceDetect	ATIDtct.EXE	Utility meant for future use of the ATI TV WONDER™ USB 2.0 video driver and can be disabled
N	ATI GART Set-up Utility	Atigart.exe	Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
U	ATI Launchpad	launchpd.exe	Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
X	ATI Rage3d Pro	AtiRage4dPro.exe	Added by the AGOBOT-OG WORM!
Y	ATI Remote Control	ATIRW.exe	Driver for the ATI REMOTE WONDER™ RF remote control for ATI's All-In-Wonder graphic cards and other products. Required if you use it
N	ATI Scheduler	Atisched.exe	Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N	ATI Task Application	Atitkad.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
N	ATI Task Application (Atikey)	Atitask.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
X	ATI Technology Startup	techstart.exe	Added by the RBOT-AEU WORM!
X	ATI VIDEO REGKEY	ati2vid.exe	Added by the SDBOT.UR WORM!
?	Ati2cwxx	Ati2cwxx.exe	For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it
N	Ati2mdxx	Ati2mdxx.exe	For ATI video cards. System Tray access to display mode changing
N	ATICCC	cli.exe runtime	ATI's CATALYST™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. Recommend that start the program manually via Start -> Programs -> ATI Catalyst Control Center -> Advanced -> Restart Runtime as it can casue problems when starting Windows
X	aticpaxx.exe	aticpaxx.exe	Added by the RBOT-XP WORM!
U	AtiCwd	AtiCwd.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U	AtiCwd	AtiCwd32.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U	AtiCwd	Ati2cwad.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U	AtiCwd32	AtiCwd.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U	AtiCwd32	AtiCwd32.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
U	AtiCwd32	Ati2cwad.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
X	AtiDisplayDrv	atidrvxx.exe	Added by the RBOT-VZ WORM!
N	AtiKey	AtiKey32.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
?	AtiKey	atiptkad.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
U	ATIModeChange	Ati2mdxx.exe	System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
X	atipatxx	atipatxx.exe	Added by the SMALL-ED TROJAN!
U	ATIPOLAB	ati2evxx.exe	ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U	ATIPOLAB	ati2evae.exe	ATI Polling Program - part of the ATI graphics driver e.g. on some Fujitsu-Siemens Notebooks
U	ATIPOLL	ati2evxx.exe	ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U	AtiPTA	Ati2ptxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	AtiPTA	Atiptaxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	AtiPTAAA	Ati2ptxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	AtiPTAAA	Atiptaxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	atiptaxx	Ati2ptxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	atiptaxx	Atiptaxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
X	atiptext	atiptext.exe	Added by the COSIAM-A TROJAN!
U	AtiQiPcl	AtiQiPcl.exe	Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
U	ATISmart	ati2s9ag.exe	ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
X	atisrc2	windfind.exe	Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
U	atitray	atitray.exe	ATI Tray Tools - allows quick access to ATI graphics card settings
U	AtiTrayTools	atitray.exe	ATI Tray Tools - allows quick access to ATI graphics card settings
X	atiupdate	ATIUPDATE5.EXE	Added by the DEBESKI.A TROJAN!
X	atiupdate	msshed32.exe	Added by the DELF.EP downloader TROJAN!
X	ATIUpdater	atiupdxx.exe	Added by the RBOT-ABX WORM!
X	Atiupdpl	atiupdpl.exe	Added by the SMALL.AOS TROJAN!
X	ativopen	ativopen.exe	Premium rate adult content dialler
U	ATIX10	atix10.exe	ATI Remote Wonder - PC wireless remote control
X	ATM Control	adpn.exe	Added by the MMS.A WORM!
N	ATnotes	atnotes.exe	Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
U	Atomic.exe	Atomic.exe	Atomic Clock Sync - synchronizes your computer's time with the NIST time server
N	Atomica	atomica.exe	Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
U	AtomicTime	ATOMICTIME.EXE	AtomicTime - utility that synchronizes your PC clock to an atomic clock
U	Atrack	atrack.exe	New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
U	Atray	Atray.exe	Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons
U	ATSpooler	AppsTraka.exe	AppsTraka keystroke logger/monitoring program - remove unless you installed it yourself!
U	ATTBroadbandUpdate	SAUpdate.exe	Big Brother from Quest Software. System and network monitor
U	ATTRedUpdate	AutoUpdate.exe	Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X	AttuneClientEngine	attune_ce.exe	Spyware - part of an automated helpdesk software called Aveo Attune
X	AttuneContentUpdater	attune_cu.exe	Spyware - part of an automated helpdesk software called Aveo Attune
X	AttuneDiscovery	attune_di.exe	Spyware - part of an automated helpdesk software called Aveo Attune
X	Attunel	Attunel.exe	Spyware - part of an automated helpdesk software called Aveo Attune
X	AttuneSystray	attune_st.exe	Spyware - part of an automated helpdesk software called Aveo Attune
N	aTuner	atuner.exe	aTuner - tweak tool for GeForce based graphics cards
Y	atwtusb	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	AtxBrw	Iexplor.exe	"Pop Marketing" adware
U	AU Agent	AUagent.exe	Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
X	au.exe	au.exe	Added by the BEAGLE.B WORM!
Y	AUCBPNP	aucbnpn.exe	Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
X	Aucompat	Aucompat.exe	Added by the GEMA TROJAN!
?	AudCtrl	RunDll32 AudCtrl.dll, RCMonitor	Audio control panel?
X	AUDIO	SOUND.exe	Added by the PLOYB-A TROJAN!
X	Audiocntl	audiocntl.exe	Added by a variant of the CRYPTER.C TROJAN!
X	Audiodrv	audiodrv.exe	Added by the CRYPTER-C TROJAN!
N	AudioHQ	Ahqtb.exe	For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
X	audioinf	audioinf.exe	Added by a variant of the CRYPTER.C TROJAN!
X	AUNPS2	RUNDLL32 AUNPS2.DLL, _Run@16	AlwaysUpdatedNews.com parasite related - see here
Y	Aureal A3D Interactive Audio	sa3dsrv.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y	Aureal A3D Interactive Audio Init	A3dInit.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
X	ausvc	ausvc.exe	Added by the AUTOUPDER TROJAN!
X	Auth Starter Ident	startauth.exe	Added by the RBOT-WP WORM!
X	authz	authz.exe	Added by an unidentified VIRUS, WORM or TROJAN!
X	auto repair system	qualityx.exe	Added by an unidentified WORM or TROJAN - probably a SPYBOT variant
N	Auto T Bar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
X	Auto updat	crsrs.exe	Added by the FORBOT-AK WORM!
X	Auto Updat	WindowsSys32.exe	Added by a variant of the FORBOT WORM!
X	Auto updat	crcss.exe	Added by the SDBOT.AAG WORM!
X	Auto Update	AUP.exe	Added by an unididentified WORM or TROJAN!
X	Auto Updates	svchost.exe	Added by the CHEUKO-A TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X	Auto WinUpdate	taskmrg.exe	Added by the RBOT-AFA WORM!
U	Autobar	autobar.exe	Connect buttons on the keyboard for internet direct access, etc. on HP computers
U	AutoCAD Startup Accelerator	acstart16.exe	Preloads some libraries that are used by AutoCAD in order to make the software load faster
U	autoclk	autoclk.exe	Autoclik is a Windows utility "that allows you to perform all mouse activity with absolutely no clicking"
N	AutoEA	Ahqrun.exe	For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
X	AUTOEXE	AUTOEXE.exe	Added by the SEMAPI-A WORM!
X	Autoloaderaproposclient	Apropos_Client_Loader.exe	AproposMedia adware
X	Autoloaderaproposclient	cxtpls_loader.exe	AproposMedia adware
X	AutoLoaderEnvoloAutoUpdater	auto_update_loader.exe	Envolo/AproposMedia adware updater
N	AutoMate Task Service	automate.exe	Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
X	Automatic Microsoft Windows Updater	suchost.exe	Added by the RBOT-EQ WORM!
X	Automatic Windows Updater	Update.exe	Added by the GAOBOT.AO WORM!
N	Automatically launches the United Devices Agent when you start your computer	UD.EXE	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
X	Autopdate	Autopdate.exe	Added by the RBOT-AGL WORM!
N	AUTOPROP	REGPROP.EXE WMPADDIN.DLL	Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
X	AUTOPROTECTU	navapq32.exe	Added by an unidentified WORM or TROJAN!
X	autorepair	dexs.exe	Added by a variant of the SDBOT WORM!
?	AutoShutdown	pssvc.exe	Utility to fix vCard Export in MS Outlook 2000 - although why are these together?
U	AutoSizer	AUTOSIZER.EXE	AutoSizer - utility that automatically maximizes windows when they're opened
N	AutoSpell	autospel.exe	AutoSpell - spell checker (version 6.*)
N	AutoSpell 5	ASWATC32.EXE	AutoSpell - spell checker
N	autotbar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
N	AutoTKit	AUTOTKIT.EXE	On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N	autoupd	autoupd.exe	Raxco Software Auto Update utility."Used to keep your software up-to-date"
X	autoupd	autoupd.exe	Added by an unidentified VIRUS, WORM or TROJAN! - found in a folder of the same name
X	autoupdate	WINUP2DATE.DLL, SHStart	Unidentified adware - detected by Panda antivirus as the CLICKER.CY TROJAN!
X	AutoUpdater	aupdate.exe	Aupdate, Tinybar variant. Spyware
X	AutoUpdater	AutoUpdate.exe	PeopleonPage foistware
X	AutoVirusProtection	ciscv.exe	Added by a variant of the RBOT WORM!
X	aux.exe	aux.exe	Added by the ZINS TROJAN!
X	auxAudioDevice	aux32.exe	Added by the AIZU WORM!
N	AUXXTRAY	au30setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
X	AV	UPDATE-28062004.exe[25 blank spaces].vbs	Added by the MIDFIN WORM!
X	AV Client	patch31345.exe	Added by the MYDOOM.AD WORM!
X	AV Industry	patch31345.exe	Added by the MYDOOM.AD WORM!
X	AV UpDate	Update.exe	Added by the FUROOT-A TROJAN!
Y	Avast!	ashserv.exe	Avast! anti-virus software
Y	avast!	ashDisp.exe	Part of Avast! anti-virus software
Y	avast! Web Scanner	Ashwebsv.exe	Avast! antivirus
Y	Avast32	Astart32.exe	Part of Avast! anti-virus software
X	avc	avmon.exe	Added by an unidentified TROJAN!
U	AvconsoleEXE	Avconsol.exe	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X	AveoAttune	atmdlusr.exe	Spyware - part of an automated helpdesk software
X	AvG	svchost323.exe	Added by the RBOT-ZA WORM!
X	AVG Grisoft Updater	updater.exe	Added by the AGOBOT-OT WORM!
Y	AVG7_AMSVR	Avgamsvr.exe	AVG antivirus related
Y	AVG7_CC	AVGCC.exe	AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Y	AVG7_EMC	AVGEMC.exe	AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y	AVG7_Run	avgw.exe	AVG Anti-Virus 7.0 related
Y	avgamsvr.exe	Avgamsvr.exe	AVG antivirus related
Y	avgcc32	avgcc32.exe	AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y	AVGCtrl	AVGCTRL.EXE	Background task of the AntiVir antivirus program which scans files transparently in the background
Y	avgmsvr.exe	avgmsvr.exe	AVG Anti-Virus 7.0 related
Y	Avgserv9.exe	Avgserv9.exe	AVG antivirus background monitoring
Y	AVGuard	AVGNT.EXE	Background task of the AntiVir antivirus program which scans files transparently in the background
Y	AVG_CC	avgcc32.exe	AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y	AVG_EMC	AVGEMC.exe	AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y	AVG_RegCleaner	AVGREGCL.exe	AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
X	Avimgt	Avimgt.exe	Added by the GEMA TROJAN!
X	Avimgt32	Avimgt32.exe	Added by the GEMA TROJAN!
Y	avinit	AVINIT9X.EXE	Command antivirus related
Y	AVK Mail Checker	AVKPop.exe	eXtendia AVK AntiVirus email checker
Y	AvMaiSrv	Avmaisrv.exe	Part of Avast! anti-virus software - E-mail scanner
X	avnort	formatsys.exe	Added by the SERFLOG.A WORM!
X	avnort	msmbw.exe	Added by the SERFLOG.A WORM!
X	avnort	serbw.exe	Added by the SERFLOG.A WORM!
Y	avpcc	avpcc.exe	Kaspersky Labs anti-virus
Y	avpm	avpm.exe	Kaspersky antivirus
X	Avpr	avpr.exe	Added by the MYDOOM.AF WORM!
X	Avril Lavigne - Muse	[random filename]	Added by the AVRIL-A WORM!
Y	AVSCHED32	AVSched32.exe	AntiVir anti-virus from H+BDEV
Y	AVSchedScan	SCHSC9X.EXE	Command antivirus related
X	AvSer	dsm.exe	Added by the SERFLOG.B WORM!
X	AvSer	msmpatch.exe	Added by the SERFLOG.B WORM!
X	AvSer	svosm.exe	Added by the SERFLOG.B WORM!
X	AvSer	sysup.exe	Added by the SERFLOG.B WORM!
X	avserve.exe	avserve.exe	Added by the SASSER WORM!
X	avserve2.exe	avserve2.exe	Added by the SASSER.B or SASSER.C WORMS!
X	avserve3.exe	avserve3.exe	Added by the SASSER.G WORM!
N	Avtray	Avtray.exe	Command Antivirus tray icon
?	AVWLPSTA	AVWLPSTA.exe	PRISM Status Tray Applet - but what is it for and is it required?
U	AVWUpd32	AVWUPD32.EXE	AntiVir updater. Useful, but can be run manually
Y	avx communicator	xcommsur.exe	Anti-virus part of BitDefender virus scanner/firewall
Y	Avxlive	avxlive.exe	Bullguard or BitDefender antivirus
Y	avxlni	avxinit.exe	Anti-virus part of BitDefender virus scanner/firewall
?	Avxnews	??	??
U	Awatch	Awatch.exe	Diagnosis tool that monitors DSL connections, installed alongside DSL drivers from AVM Fritz's range of modem products
N	awhost32	awhost32.exe	Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
U	AWMON	Ad-Watch.exe	Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
U	AWMON	Ad-Monitor.exe	F-Secure Anti-Spyware
U	awxDTools	awxDTools.dll, awxRegisterDll	AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: .cue, .iso, *.ccd ...)
?	AxFilter	Rundll32 AXFILTER.DLL, Rundll32	??
Y	azmodem	azexe.exe	Aztech Labs modem driver
?	a_vpd	vpd.exe	Located in the IBMTOOLSVPD sub-directory. What does it do and is it required?"
U	a²	a2guard.exe	a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a² 'Background Guard' real time protection feature
N	B'sCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
N	B.Reader	remin.exe	Birthday Reminder 5.0 - as the name implies
X	b3d	BDEsecureinstall.exe	B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
X	b3dUpdate	Zupdate.exe	B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
U	b9	B9.exe	FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run"
X	b99	msmm.exe	ClientMan parasite variant
X	babeie	rundll32 cnbabe.dll, dllstartup	CommonName Toolbar spyware. To uninstall see here
N	Babylon Client	Babylon.exe	Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"
N	Babylon Translator	Babylon.exe	"Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"
X	Back Updates	Uninstall.log.vbs	Added by the YPSAN.D WORM!
X	Backdoor.NuAgent	agent.exe	Added by the AGENT-DP TROJAN!
X	Background Intelligent Transfer Service	rundll32.exe	Added by the VB-ZD TROJAN! Note - this file is located in the C:Windowshelp folder, and is not to be confused with the legitimate rundll32.exe file!
U	BackgroundSwitcher	bgswitch.exe	Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here
N	Backpack UDF	bpudfmon.exe	Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk
X	Backup Service	backup.svc	Unidentified adware
U	BackupExecScheduler	besch.exe	Veritas "Back Up My PC" software
?	BackupNotify	backupnotify.exe	HP Digital Imaging related. What does it do and is it required?
N	BackWeb	backweb.exe	Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
N	Backwork	Backwork.exe	Backwork trojan detector
U	BACPI10	bacpi10a.exe	Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
N	BacsTray	BacsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	BADDATE	BADDATE.EXE	Added by an unidentified VIRUS, WORM or TROJAN!
X	BagleAV	csrss.exe	Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should not appear in Msconfig/Startup!
X	Bakra	IEHost.EXE	IEDriver adware variant
X	Band-Aid	[path to file]	Added by the RANKY.O TROJAN!
U	Banpopup by Pratik	Banpopup.exe	Banpopup - popup killer
X	Bar Ding lolt	Analiz.exe	Added by the RBOT-RP WORM!
X	bargains	bargains.exe	BargainBuddy foistware
X	bargains	bargainbuddy.exe	BargainBuddy foistware
?	Bart Station	station.sbrt	Related to PeoplePC ISP. May be a dialler for dial-up accounts?
N	bascstray	BascsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	Bat	secure2.bat	Added by the ZCREW.C TROJAN!
N	Batchreg1	N/A	Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here
U	BatInfEx	rundll32.exe	Displays battery status information on an IBM Thinkpad
U	Battery Scope	batmgr.exe	Monitors battery levels on a notebook/laptop PC
U	BatteryBar	batterybar.exe	BatteryBar - displays battery usage, and the current percentage of battery power left
X	BatzBack	BatzBack.scr	Added by the BACKZAT WORM!
U	BAUSB	BAUSB.exe	Boston Acoustics Audio, USB driver
X	bawindo	bawindo.exe	Added by the BEAGLE.AR or BEAGLE.AU WORMS!
U	BayMgr	DockApp.exe	Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap	bayswap.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	BBC News alerts	skinkers.exe	BBC News Desktop Alerts service - see here. Desktop alert and breaking news e-mail services let you find out about all the latest news as it happens
?	BBDial	BT Broadband.exe	Part of BT Broandband - is it required?
N	bbSysTray	bbSysTray.exe	Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"
U	bbui	bbui.exe	AOL DSL status monitor displaying a red/green icon indicating if you have a connection
U	bca	bca.exe	BeClean Agent - registry, history, temp files, etc cleaner
U	BCDetect	bcdetect.exe	Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
Y	BCMDMMSG	bcmdmmsg.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
U	BCMHal	rundll32.exe bcmhal9x.dll, bcinit	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
?	bcmwltry	bcmwltry.exe	Broadcom Corporation Wireless Network Tray Applet. Is it required?
N	BCNT	bcnt.exe	AWS Weatherbug related. What does it do?
X	BCPC	bcpc.exe	BroadcastPC adware variant
X	bcpc_c	bcpc_c.exe	BroadcastPC adware variant
U	BCTweak	bctweak.exe	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
N	Bcvsrv32	bcvsrv32.exe	Added by the GAOBOT.BQJ WORM!
N	BCWipeTM	bcwipetm.exe	BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed
Y	BDMCon	Bdmcon.exe	BitDefender antivirus
Y	BDNewsAgent	bdnagent.exe	BitDefender antivirus - updater
Y	BDOESRV	bdoesrv.exe	Bitdefender 8 antivirus and firewall
Y	BDSwitchAgent	bdswitch.exe	Bitdefender 8 antivirus and firewall
N	BearShare	bearshare.exe	BearShare file sharing client. Versions known to include spyware - see here
?	BEEI	beei.exe	??
U	BeFaster	befaster3.exe	BeFaster internet connection optimization tool
?	BEHL	BEHL.exe	??
?	BEHLO	BEHLO.exe	??
N	Belkin PCMCIA WLAN Monitor	monitorbk.exe	Belkin USB Network Adapter Management utility - can be started manually
U	BelNotify	[path] NPBelv32.dll, RunDll32_BelNotify	"BelTech enables licensees to offer automated, Web-based problem resolution to their end-users. BelTech allows the end-user to simply go to a web page and automatically resolve their problem or point them to the right solution. BelTech Manager allows non-programmers to rapidly and easily deploy and maintain this service"
?	BELORVBI	BELORVBI.exe	??
?	Belsta.exe	Belsta.exe	Configuration tool for Belkin wireless network cards. Required to change the card’s configuration. Is it required for correct operation once the confuiguration is changed?
X	Belt	Belt.exe	Transponder parasite updater/installer
X	Benadril Alert Tool	benadrilalert.exe	Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
N	BestPopUpKiller	BestPopupKiller.exe	Popup killer by Swanksoft - not recommended, see here
X	BeSys	[path to file]	Added by BeSys ADWARE!
Y	bg	bullguard.exe	Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster
U	BGInfo	Bginfo.exe	BGinfo automatically displays relevant information about a Windows computer on the desktop's background, such as the computer name, IP address, service pack version, and more
Y	BGNewsAgent	bgnewsag.exe	BullGuard antivirus updater
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
N	BHOCop	BHOCop.exe	ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware
U	BHODemon 2.0	BHODemon.exe	BHODemon "protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. When running, it also monitors your Registry and alerts you when a BHO is installed. Best of all, BHODemon knows about the most common BHOs - the good ones, and the not-so-good ones!". If you prefer forgoing resident protection, the application can also be run on demand
U	BI1HelperStartUp	BI1HEL~1.EXE	Beach Islands screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30...
X	BIE	Rundll32.exe BDSrHook.dll, Rundll32	BDplugin parasite
N	bigfix	BIGFIX.EXE	BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet® Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog
U	BigPond Toolbar	bpumTray.exe	Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier"
N	BigPondCable	bpcable.exe	Telstra Bigpond Cable login software - can be started manually
N	Billminder	Billmind.exe	Can be setup in Quicken to remind user of due payments. Available via Start -> Programs
X	bin32hpu	ppstub.exe	PrecisionPop adware
X	bingdian	Bingdian.vbs	Added by the BINGD WORM!
?	Bingo Charm	charms.exe	Some kind of screen icon kind of like desk flag, but it gives you a choice of icons?
X	Bios	Bios32.exe	Added by an unidentified VIRUS, WORM or TROJAN!
X	BIOS1	BIOS1.EXE	Added by the OPASERV.T WORM!
?	BIOVCIP	BIOVCIP.exe	??
N	BitComet	BitComet.exe	BitComet P2P client - can be launched from Start -> Programs
X	BitDefender Antivirus	BITDEFENDERX.EXE	Added by a variant of the SPYBOT WORM!
Y	BitDefender Communicator	xcommsvr.exe	BitDefender antivirus
U	BitDefender for MSN Messenger	msnmon.exe	Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually
U	BitDefender for Yahoo! Messenger	yahmon.exe	BitDefender Antivirus for Yahoo! Messenger - free AV add-on for Yahoo! Messenger
Y	BitDefender Live! Init	bdinit.exe	BitDefender antivirus
Y	BitDefender Scan Server	bdss.exe	BitDefender antivirus
Y	BitDefender Virus Shield	vsserv.exe	BitDefender antivirus
Y	bitdefenderlive	avxlive.exe	Main program of BitDefender virus scanner/firewall
U	BitDefender_P2P_Startup	BitDefender_P2P_Startup.exe	Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually
N	BitWare Print Monitor	bwprnmon.exe	FaxServe network fax software
N	BJ Printer Status Monitor	Cjstsr.exe	Canon BJ printer status monitor
N	BJ Status Monitor 5xx	CJSTRxx.EXE	Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
N	bjcfd	cdf.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
N	BlackICE PC Protection	blackice.exe	Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
N	BlackIce Utility	blackice.exe	Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
U	blads	blads.exe	A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
X	blah service	winupdate.exe	Added by the GAOBOT.BIA WORM!
X	blah service	winsysengine.exe	Added by the RBOT-KI WORM!
X	blah service	internet.exe	Added by a variant of the RBOT WORM!
X	blah service	smnp.exe	Added by the RBOT.IZ WORM!
X	blah service	msnmsgrr.exe	Added by the RBOT.PZ WORM!
X	blah service	tazkmgr.exe	Added by the RBOT.UA WORM!
X	blah service	FaLeH.exe	Added by the RBOT-AES WORM!
X	blah service	microsoft.exe	Added by a variant of the RBOT WORM!
X	blahh service	msengine.exe	Added by a variant of the RBOT WORM!
X	blahx service	msnjompa.exe	Added by the SDBOT.AML WORM!
N	BlazeChanger	FBZPaper.exe	Ember graphic file viewer, manager, and touch-up system
N	bldbubg	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
U	blinkx	blinkx.exe	Blinkx Desktop "Smart Folders" software
X	BLMessagingIntegration	blengine.exe	BuddyLinks adware
U	BlockAds	blads.exe	A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
X	Blocker System611 Monitoring	PopUpBlocker611.exe	Added by the RBOT.BLJ WORM!
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
X	blss	blss.exe	Added by the BLARUL TROJAN!
N	BLSTAPP	blstapp.exe	Puts access to Creative's BlasterControl in the System Tray
U	BlueToothAuthentication Agent	RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent	Associated with BlueTooth software, designed to allow bluetooth mobile devices to authenticate to the computer, when connecting a PDA to your computer - necessary for the computer and the PDA to communicate. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup
U	Blueyonder Instant Support Tool	matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Blueyonder Instant Support is required to run with the Help and Support program. If you uncheck it and and then run Help and Support it will add another Blueyonder Instant Support in the startup menu. If you remove Blueyonder Instant Support in add/remove programs some help menus in help and support will not be available. You decide
N	BMail Installation	FTP_back.exe	Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not
X	Bman	BMan1.exe	Abcsearch.com/DealHelper adware variant
U	BMMGAG	Rundll32 PWRMONIT.DLL, StartPwrMonitor	Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
U	BMMLREF	BMMLREF.EXE	Battery Manager for IBM ThinkPad laptops
?	BMMMONWND	rundll32.exe [path] BatInfEx.dll, BMMAutonomicMonitor	IBM Thinkpad related. What does it do and is it required?
U	BMO MasterCard Wallet	EWALLET.EXE	The wallet conveniently stores billing, shipping and payment information on your PC
N	BMupdate	BMupdate.exe	Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install
X	BMZ	bmz.exe	nCase adware
X	Bndt32	Bndt32.exe	Added by the LACON WORM!
X	Bnexe	[random filename]	Added by the KITRO.D (or ARGEN.A) WORM!
U	BO1HelperStartUp	BO1HEL~1.EXE	ScreenScenes Butterfly Oasis screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30...
X	Boarddata	[path] repcale.exe [path] palsp.exe	Added by a variant of the RANDON.AN WORM!
Y	BOC412	BOC412.exe	Version 4.12 of NSClean's BOClean anti-trojan software
Y	BOCleanautostart	Boclean.exe	NSClean's BOClean anti-trojan software
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	Spyware - read here for information and here for removal instructions
X	boo	boo.exe	Adware downloader - detected by Kaspersky antivirus as the FAVADD.O TROJAN!
X	BookedSpace	bs2.dll,DllRun	Adware, related to the Remanent parasite
N	BookmarkCentral	BMLauncher.exe	Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use"
N	BookMarkSink	syncit.exe	Bookmark synchronization utility
N	BookMarkSync	syncit.exe	Bookmark synchronization utility
N	BookMarkSync2It	sync2it.exe	Sync2IT BookMarkSync - "real-time automatic synchronization service that allows you to access your bookmarks, favorites and favorite files from any computer or any browser"
U	Boost XP Service	bxservice.exe	Boost XP from Systweak - WinXP tweaking utility
X	boot	boot.exe	Added by the PUPPET-A TROJAN!
X	Boot Manager	Njgal.exe	Added by the KILO TROJAN!
X	Boot Manager	bootmng.exe	Added by a variant of the SPYBOT WORM!
X	BootCfg	Install.log.vbs	Added by the YPSAN.D WORM!
X	BootCTRL	bootctrl.exe	Added by an unidentified WORM or TROJAN!
X	BootLoader	BootLoader.exe.vbs	Added by the WATERWORKS WORM!
X	bootpd.exe	bootpd.exe	Added by the AGENT-DT TROJAN!
X	BootsCfg	Date.POP.vbs	Added by the KUULLIO WORM!
X	BootsCfg	wscript.exe [path] All Users.vbe	Added by the SPILTRON WORM!
X	BootsCfg	wscript.exe [path] All Users.vbs	Added by the SPILTRON WORM!
X	BootsCfg	wscript.exe [path] Install.log.vbs	Added by the YPSAN.E WORM!
U	BootStatus	BOOTST~1.EXE	Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources
U	BootWarn	BootWarn.exe	From here: "Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from “Start Programs Norton AntiVirus”. If Norton AntiVirus comes up without problems, then fix this entry from the Msconfig Startup tab – it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages"
X	boot_reg	[path to file]	Added by the BANCBAN-CA TROJAN!
N	Bose Wave/PC Monitor	wavepcmonitor.exe	System Tray access for this system (more info on the system here). Available via Start -> Programs
X	BossIdea	winlogin.exe	Added by the LINEAGE-I TROJAN!
?	Boston	Boston.exe	Part of the Boston Acoustics USB speaker systems. What does it do and is it required?
X	Bot Loader	svchostt.exe	Added by the GAOBOT.ALV WORM!
X	Bouncer RunStartup	bouncer.exe	VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs
X	Bouncer RunStartup	LiveUpdate.exe	VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	BPCv2 re	bpc2 re inst.exe	BroadcastPC adware variant
U	BPK	bpk.exe	Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
N	BPServer	G6FTPSrv.exe	BulletProof FTP Server
U	BQTray.exe	BQTray.exe	System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
X	Brasil	Brasil.exe	Added by the OPASERV.E WORM!
X	Brasil	BRASIL.PIF	Added by the OPASERV.E WORM!
X	BrasilOld	[worm filename]	Added by the OPASERV.P WORM!
U	Break_Reminder	BREAK REMINDER.exe	Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here
X	Breg	bcre.exe	BroadcastPC adware variant
X	Breg	bptre.exe	BroadcastPC adware variant
X	Breg	breg.exe	BroadcastPC adware variant
X	Bridge	rundll32.exe ...Bridge.dll	Flingstone.com browser hijacker
Y	Brindys BriTray	BRITRAY.EXE	Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired
U	BrmfRmPA	BrmfRmPA.exe	Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate
N	Broadband Wizard	bbwiz.exe	Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs
N	BrowseProxy	FindService.exe	Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you"
X	browser	msgaol.exe	Added by the TACTSLAY.C TROJAN!
X	browser	s menu.exe	Added by the TACTSLAY.C TROJAN!
X	browser aid	browseraid.exe	BrowserAid/BrowserPal foistware
Y	Browser Hijack Blaster	bhblaster.exe	Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	BrowserAid/BrowserPal foistware
U	Browser Sentinel	BrowserSentinel.exe	Browser Sentinel. Notifies you if a program wants to penetrate into Internet explorer, add itself to the Windows auto-run list or change your home page. See here
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
N	BS Player	bsplayer.exe	BSplayer - A video player used to play avi, mpg, wmv and other multimedia files
N	BsCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
X	Bsoft lppt01	Bsoft.exe	New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N	bsplayer	bsplayer.exe	BSplayer - a video player used to play avi, mpg, wmv and other multimedia files
X	Bsx3	Rundll32.exe bs3.dll, DllRun	BookedSpace parasite variant
U	BT Broadband Help	matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide
?	btinst	btinst.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
?	BTSETBOOTKEY	BTSetBootKey.exe	Related to a USB Bluetooth adaptor. What does it do and is it required?
U	BtStart	btstart.exe	Broadcorp (formerly WIDCOMM) Bluetooth Connectivity Software
U	bttray	bttray.exe	System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device
Y	BTUSRBDG	BtUsrBdg.exe	Used with a Mitsumi USB Bluetooth adaptor (and maybe others)
Y	BTUSRBDGF	BtUsrBdg.exe	Used with a Mitsumi USB Bluetooth adaptor (and maybe others)
X	BTV	btv.exe	BroadcastPC adware variant
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U	bugwatcher service	bugwatcher.exe	Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures
N	BuildBU	bldbubg.exe	Part of Dell Alerts which provides customers with an update on latest updates for his/her system
X	BuildLab	services.exe	Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X	BuildLab	winlogon.exe	Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
X	BuildLabs	csrss.exe	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
Y	BullGuard	mgui.exe	Part of Bullguard antivirus
U	BullGuard Update	avxlive.exe	Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions
Y	BullGuard XComm	XCOMMSVR.EXE	Part of Bullguard antivirus
Y	BullGuardInit	AVXINIT.EXE	Part of Bullguard antivirus
Y	BullguardoptIn	bulldownload.exe	Part of Bullguard antivirus
X	BullsEye Network	bargains.exe	BargainBuddy foistware
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
N	BurnQuick Queue	BQTray.exe	System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
U	Button Server	bttnserv.exe	Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required
N	ButtonKey	ButtonKey.exe	CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut
N	Buzme	Bmui.exe	Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
U	Buzof.exe	buzof.exe	Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes"
X	bxsx5	RunDLL32.EXE bsx5.dll	BookedSpace parasite variant
X	bxxs5	RunDLL32.EXE bxxs5.dll, dllrun	BookedSpace parasite
X	Bymer.Scanner	Wininit.exe	Added by the BYMER WORM!
X	Bymer.Scanner	Msinit.exe	Added by the BYMER WORM!
X	c	c:archiv~1win.com	Added by the CUYDOC TROJAN!
U	C-Media Echo Control	EchoCtrl.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer
N	C-Media Mixer	Mixer.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	C2K	CYB2K.EXE	CYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
X	C7	[path to worm]	Added by the MEDIAKILL.A WORM!
X	C:\WINDOWS\IEXPLOR.EXE	IEXPLOR.EXE	"Pop Marketing" adware
X	C:\WINDOWS\VCMnet11.exe	VCMnet11.exe	Windows AFA Internet Enhancement - a browser hijacker, redirecting to adsourcecorp.com. See here
X	C:\WINDOWS\WinTask.exe	WinTask.exe	"Pop Marketing" adware
U	CA-AMAgent	amagent.exe	Unicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery, hardware inventory, network inventory, software inventory, configuration management, software usage monitoring, license management and extensive cross-platform reporting
Y	CaAvTray	CAVTray.exe	eTrust™ EZ Antivirus system tray application from Computer Associates
X	Cabchk	Cabchk.exe	Added by the GEMA TROJAN!
X	Cabchk32	Cabchk32.exe	Added by the GEMA TROJAN!
X	CABCInstall	CABCInstall.exe	CABC content delivery software
U	CacheBoost	trayicon.exe	CacheBoost "optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers, resulting in a performance boost"
X	CacheLoader	[path to trojan]	Added by the DLOADER-NZ TROJAN!
N	Cacheman	Cacheman.exe	Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
Y	CacheMgr	CacheMgr.exe	Sophos Antivirus Remote Update
N	CACStarter	cacstart.exe	Cash A Check - check writing software
U	Caddais BackupOnDemand	BODMon.exe	Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"
U	Cadenza	CdzSvc.exe	Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices
U	CADS	cads.exe	Cyber Sentinel internet filtering software
N	CAgent	CAgent.exe	Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
X	cAgOu	[filename].hta	Added by the KAKWORM WORM!
N	CahootWebcard	CahootWebcard.exe	"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed
Y	CAISafe	isafe.exe	Part of Computer Associates eTrus EZ Antivirus
N	Cal Reminder Shortcut	calrem.exe	Produces a pop-up reminder of events scheduled using the MS Office Calendar
X	Calc Microsoft Windows	wincalc.exe	Added by an unidentied WORM or TROJAN!
N	Calendar 200X Reminder	calendar.exe	Calendar 200X - shows holidays, reminders of various anniversaries,tasks etc
U	Calendarscope	cs.exe	Calendarscope calendar software
X	calk	calk.exe	Added by the STARTPA-FH TROJAN!
?	CallBumping	cbpopw.exe	??
U	CallCenter Main Application	V3calmcp.exe	"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Main application
U	CallCenter Printer Interface	V3faxecp.exe	"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Fax printer
N	CallControl	ftctrl32.exe	FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
N	CamCheck	CamCheck.exe	NuCam camera software related
U	Cameno	Cameno.exe	Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above
N	Camera Detector	CAMDET~*.EXE	ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
N	Camera Detector	Camdetect.exe	ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
N	Camera Detector	DEVDET~*.EXE	ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically
N	Camio Viewer x	IXApplet.exe	Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
?	CamMonitor	hpqcmon.exe	From HP and related to digital imaging
N	Canada	Canada.exe	Known to be a dialler - but is it maliscous or clean?
N	Canary	canary-std.exe	Canary monitoring program. Keylogger, monitors all computer activity
X	candy	command32.exe	Added by the RBOT-LV WORM!
X	candynet	Taskmsg.exe	Added by the RBOT-NA WORM!
N	Canon PC1200 iC D600 iR1200G Status Window	CAPM1LAK.EXE	Canon P1200 printer status
N	Canon Printer Monitor BJCxxx	Cjstlst.exe	Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
?	CAP3ON	CAP3ONN.EXE	Canon driver, purpose unknown. Is it required in startup?
N	Capfax	capfax.exe	PhoneTools fax software
Y	Capon	Capon.exe	Canon printer driver
X	CaptionMgr32	crssr.exe	Added by the ZAR.A WORM!
N	Capture Express 2000	capexp.exe	Capture Express - screen capture utility
N	Card Monitor	REGCNT09.exe	For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
X	Care20	Care20.exe	TopMoxie adware
U	Care2GTU	Care2GTU.exe	Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is, thanks to over 200 company profiles from Coop America. Saves 1 square foot of rainforest every day you use it. If it works and you like it, keep it
X	CARPserver	CARPserver.exe	Added by the BANKER-AN TROJAN!
U	CARPservice	carpserv.exe	Associated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example
X	cartao	[path to file]	Added by the DLOADER-QD TROJAN!
X	CAS Client	casclient.exe	CasinoClient adware
U	CasAgnt	CasAgnt.exe	Program by Extended Systems which allows you to sync your Casio PDA with your PC
X	Casdvqwa	bmqnzkg.exe	Added by the RANDEX.BE WORM!
X	caseyvideo	CaseyVideo.exe	Malware causing p0rn popups
X	caseyvideo	caseyvideo[].exe [ = digit]	Malware causing p0rn popups
X	CashBack	cashback.exe	Part of eXact Advertising Software, consisting of "CashBack by BargainBuddy", BullsEye Network and NaviSearch
X	CashFiesta	Cashfiesta.exe	CASHFIESTA.A pay-per-surf adware
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"
X	CashToolbar	CD_Load.exe	CashToolbar Downloader-MY adware
X	CashToolbar	svchost.exe	CashToolbar Downloader-MY adware. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X	Cassandra	[10 to 14 random char]THD.EXE	Added by the KREPPER-AI TROJAN!
X	Cassandra	cassandra.exe	Melkosoft_Cassandra adware - also detected as a variant of the KREPPER TROJAN!
X	CasStub	casstub.exe	Added by the CASS-A TROJAN!
Y	CAVRID	CAVRID.exe	eTrust™ EZ Antivirus Real Time Infection Report from Computer Associates
Y	CAVS	CAVS.exe	Cheyenne (now eTrust) antivirus
X	CAZNOVAS	CAZNOVAS.exe	Added by the CAZNO TROJAN!
X	CBACK.EXE	CBACK.EXE	Added by the PENTA-A TROJAN!
U	CBWAttn	CBWAttn.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
U	CBWHost	CBWHost.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
?	CBWUser	CBWDial.exe	Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop
X	CC2KUI	comet.exe	Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more information and for the uninstall procedure
Y	ccApp	ccApp.exe	Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this
X	ccApp	[random filename]	Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus
X	ccApp	WMADZ.EXE	Added by the RBOT-LJ WORM!
X	ccApp	.EXE	Added by the RBOT-LJ WORM!
X	ccApp	gcasServ.exe	Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name
X	ccAppr	svcrhost.exe	Added by the TACTSLAY.A TROJAN!
X	ccAppr	expIorer.exe	Added by the TACTSLAY.A TROJAN!
X	ccAppr	outIook.exe	Added by the TACTSLAY.A TROJAN!
X	ccAppr	svcshost.exe	Added by the TACTSLAY.A TROJAN!
X	ccApps	services.exe	Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
X	ccApps	winlogon.exe	Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
X	ccApps	N/A	Added by the KANGAROO-A TROJAN!
U	CCD Manager	DDS.EXE	Project Labs Century CD manager for their CD/DVD storage device
N	Ccdecode	rundll32.exe streamci, StreamingDeviceSetup	Part of the closed caption decdoder/MS VBI codec. Should only run once
Y	CCDoctorLogonTesting	ccdoctor.exe	Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product
Y	ccenter	CCenter.exe	RAV AntiVirus
Y	CcEvtMgr	ccEvtMgr.exe	Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this
X	ccEvtMrg.exe	ccEvtMrg.exe	Added by the RBOT.GZ WORM!
X	ccExecute	bootcfg1.exe	Added by the NEMSI-B VIRUS!
X	ccHelp	ccHelp.hta	"Searchq" adware
X	ccpApps	csrss.exe	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	ccpApps	lsass.exe	Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!
U	ccProxy	CCPROXY.EXE	Part of Norton Internet Security, proxy server that is used to support the parental controls. If you turn parental controls off at user level the process is not loaded. Reported to cause excessive CPU usage
Y	CcPxySvc	CCPXYSVC.exe	Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall
X	ccreg	explorer.exe	Added by the ZCREW TROJAN! Note - the valid "explorer.exe" is located in C:Windows or C:Winnt whereas this one is located in a C:WindowsSystem or C:WinntSystem subdirectory
Y	CcRegVfy	ccRegVfy.exe	Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"
X	ccRegVfY	expIorer.exe	Added by the TACTSLAY.A TROJAN!
X	ccRegVfY	svcrhost.exe	Added by the TACTSLAY.A TROJAN!
X	ccRegVfY	svcshost.exe	Added by the TACTSLAY.A TROJAN!
Y	ccSetMgr	ccSetMgr.exe	Part of Norton AntiVirus 2004. What does it do?
X	ccUpdate	ccUpdate.exe	Added by the AGOBOT.YS WORM!
U	ccWasher	aolwasher.exe	Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL
U	CCWC7a	ac.exe	Moleculesoft Cache, Cookie & Windows Cleaner Ver. 7 - auto clean
U	CCWC7I	idxl.exe	Moleculesoft Cache, Cookie & Windows Cleaner Ver. 7 - auto clean
U	CCWC7s	stealth.exe	Moleculesoft Cache, Cookie & Windows Cleaner Ver. 7
N	CD Storage Master	cdstorager.exe	CD Storage Master - a program designed to catalog CD information, boasts a number of handy features for organizing your collection
X	cd1	cd1.exe	Premium rate adult content dialler
N	CDANTSRV	CDANTSRV.exe	C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually
X	Cdcompat	Cdcompat.exe	Added by the GEMA TROJAN!
X	cddrv32	cddrv32.exe	Added by a variant of the CRYPTER.C TROJAN!
N	CDInterceptor	cdi.exe	CD indexer for measuring the speed of CD players
X	Cdrom Controller	cdromcntrl.exe	Added by the BATTRY-A TROJAN!
N	CDTray	CDTray.exe	On HP PCs, this is the small CD icon next to the time
U	CeEKEY	CeEKey.exe	Hot Key utility included on Toshiba Satellite laptops
U	CeEPOWER	cepmtray.exe	Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed, Monitor Shut Off, Hard Drive Shut-Off, Monitor Brightness, System Stand-by and System Hibernate times
?	Ceic	Ceic.exe	??
X	Cekirge	[path to worm]	Added by the KERGEZ.A WORM!
X	center	[random name]32.exe	Added by the BOFRA.A WORM!
X	CentralProcessor	taskimgr.exe	Added by the BANCOS.J TROJAN!
?	CEPA	wsot.exe	??
N	CesarFTP FTP Server	server.exe	CesarFTPd - FTP server
X	cesmain.dll	cmail.dll, Rundll32	CnsMin "Chinese Keywords" hijacker related
N	CFD	CFD.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
X	CFDStart	WinMuschi.exe	WINMUSCHI dialler
Y	cfgintpr	cfgintpr.exe	Configuration Interpreter - part of Tiny Personal Firewall V4
X	cfgmgr51	RunDLL32.EXE [path] cfgmgr51.dll, DllRun	BookedSpace adware variant
X	cfgmgr52	RunDLL32.EXE [path] cfgmgr52.dll,DllRun	BookedSpace adware variant
N	cfgwiz	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
?	cFosDNT	cFosDNT.exe	cFos DSL Modem driver related. What does it do and is it required?
?	cFosInst_Check	cfosinst.exe	cFos DSL Modem driver related. What does it do and is it required?
X	cftmon32	taskmgr.exe [ = number]	Added by the SOWSAT.C and SOWSAT.J WORMS!
U	CGServer	cgserver.exe	Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs
X	Cgtask Services	cgtask.exe	Added by the LALA.B TROJAN!
X	Cgywin	cgywin32.exe	Added by the RBOT-AEI WORM!
U	ChamClock	ChamClock.exe	Chameleon Clock - system tray clock replacement
X	change-me-now	msgfix1.exe	Added by the SDBOT.ZD WORM!
?	ChangeLines	chngline.exe	??
N	Chatango	Chatango.exe	Chatango - "allows people to be connected in real time through their Web browsers. Include your Chatango contact link or button when you create eBay auctions, blogs, personal websites, Friendster profiles, and your visitors will be able to contact you instantly, without downloading anything, or registering. Alo use it to send email to your friends, allowing them to respond to you in real time!." The 'MessageCatcher' icon in the System Tray notifies you when you get a message. When you get a message, a little alert pops up, which you can click on and start chatting immediately
N	Chcenter	chcenter.exe	IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"
X	Cheatle	GigaByte.exe	Added by the SHODI.B VIRUS!
N	Check for One Touch Update	wiseupdt.exe	Checks for updates for Visioneer OneTouch scanners
N	Check for TWS Updates	WiseUpdt.exe	Interactive Brokers - check for update to their standalone Java-based trading platform
U	Check Messenger	cmesseng.exe	Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account
N	CheckCustomWorksUpdate	CheckCWupdate.exe	Update checker, part of CustomWorks - "customize any embroidery designs to design your own unique creations"
U	CheckIt	ToolBox.exe	CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify
Y	CheckMsgPlus	MsgPlusH.dll, VerifyInstallation	Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.
X	checkrun	elite**32.exe [ = random char]	EliteBar adware
X	CheckScan32	regload16.exe	Added by the AEBOT.K WORM!
?	checktime	ct.exe	Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?
U	CherryKeyMan	KeyMan.exe	Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys
X	china11msn	CHINA11MSN.EXE	Added by the ENVID.O WORM!
U	ChineseStar	cstar.exe	Chinese language support software
U	CHIPDRIVEPinManager	sokscmpn.exe	ChipDrive Smartcard software
U	CHIPDRIVESmartcardManager	SCMgr.exe	ChipDrive Smartcard software
N	CHKADMIN	CHKADMIN.EXE	Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"
X	chkdsk	c:autoexec.bat	Added by the ANPES WORM!
X	Choke	Choke.exe-blahh	Added by the CHOKE WORM!
X	chostsv	chostsv.exe	Added by the BANPAES.C TROJAN!
U	CHotKey	mhotkey.exe	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
U	CHotKey	MK9805.EXE	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
U	CHotKey	zHotkey.exe	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol , vol-, mute, etc. Only required for extended features
N	Christmas Music Player	TTEST6.EXE	"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
?	ChromeMark	keysh.exe	Related to this. Don't know what keysh.exe does though and if it's required
?	ChronitelInitTV	CHTVINIT.EXE	??
X	CiaBackdoor	msldr.com	Added by a VIRUS!
X	cihost.exe	cihost.exe	Added by the LINST TROJAN!
N	CIJxP2PSERVER	CIJxP2PS.EXE	Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7
U	Cisco Systems VPN Client	ipsecdialer.exe	Cisco VPN Client - lets local users gain Administrator privileges on the operating system
N	Cisco Systems VPN Client	vpngui.exe	Sets up IPSec communications for Cisco's VPN Client
N	CISrvr Program	CISRVR.EXE	Related to internet setup on Compaq PC's
X	Cissi	Cissi.exe	Added by the CISSI.A WORM!
N	CitiVAN	CitiVAN.exe	Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again
X	CJET	CJet.exe	Added by the Adware.FFToolBar adware toolbar
Y	Cjstcom	Cjstcom.exe	Canon printer BJ status language monitor
Y	ClamWin	ClamTray.exe	ClamWin antivirus
X	Classes	int1.exe	"Switch" adult content dialler
X	Classes	intl.exe	"Switch" adult content dialler
X	Classes	run_21.exe	"Switch" adult content dialler
X	Classes	srv.exe	"Switch" adult content dialler
X	Classes	srv2.exe	"Switch" adult content dialler
X	Classes	MSTAR2.EXE	"Switch" adult content dialler
X	Classes	mstart.exe	"Switch" adult content dialler
U	CLCLSet	CLCL.exe	CLCL clipboard caching utility
?	CleanEasyImg	cleanall.exe	??
?	CleanRegPath	CleanReg.exe	Apparently Annex A ADSL modem related. What does it do and is it required?
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	CleanSweep Useage Watch	CSUSEM32.EXE	Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
U	CleanTemp	CLEANT~1.EXEB	CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory
U	CleanTemp	CleanTemp.exe	CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory
N	Cleanup	ONICTASK.EXE	Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet
?	CleanupProgram	cleanup.exe	In a C:Sonysys folder - Sony Vaio related?
X	clean_service	clean_service.cmd	Added by the REFAZ WORM!
X	clfmon.exe	clfmon.exe	Added by the AGENT-BJ TROJAN!
N	Click Radio Tuner	clickr~1.exe	ClickRadio - subscription service playing radio music via the internet
N	Click Tray Calendar	ClickT~1.EXE	ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc
N	ClickMe	ClickMe.exe	ClickM "JOKE" program
U	Clickoff	Clickoff.exe	Clickoff automatically dismisses annoying dialog boxes
X	ClickTheButton	CTB.EXE	ClickTheButton Downloader-MY adware
X	ClickTheButton	csrss.exe	ClickTheButton Downloader-MY adware. Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	ClickTheButton	MSCStat.exe	ClickTheButton Downloader-MY adware
X	CLICONFG	CLICONFG.EXE	Added by the OPASERV.T WORM!
N	Client Access Check Version	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
?	Client Access Express Welcome	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
N	Client Access Help Update	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	Client Access Service	CwbSvStr.Exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	Client agent for ARCserve	W95AGENT.EXE	Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?
X	Client for Microsoft Networks	msclient32.exe	Added by the SDBOT-BXQ WORM!
X	Client Server Runtime Process	csrsss.exe	Added by the SDBOT-LD WORM!
X	Client Server Runtime Process	csrs.exe	Added by the LINKBOT.M WORM!
X	Client Update	wup.exe	Added by a variant of the OPANKI-A WORM!
X	ClientMan1	mscman.exe	Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
N	Clik Status Monitor	toolsclickstat.exe	Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
N	Clipbook Service	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipMate5x	ClipMt5x.exe	Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipmate6	CLIPMT60.EXE	Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipomatic	Clipomatic.exe	Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data
N	Clipsrv	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipTrak	ClipTrak.exe	ClipTrak - clipboard extender
N	ClipTrakker	ClipTrakker.exe	Cliptrakker - clipboard extender
U	CLMFrontPanel	clmpanel.exe	System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost
?	clnwall	rundll.exe setupx.dll, InstallHinfSection ..delwall.inf	??
X	clock	[various filenames]	LiveChat Adware - known file names include: mssetup.exe, kstatus.exe, spoolsv.exe, sptsupd.exe, osk.exe, msswchx.exe, netdde.exe, msbkup.exe
X	Clock Manager	amsngr.exe	Added by the SDBOT-XM TROJAN!
X	ClockSync	Sync.exe	ClockSync - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available
U	ClockWise	CLOCKWISE.EXE	ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync
U	CloneCD	CloneCDTray.exe	System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions
U	CloneCDElbyCDFL	ElbyCheck.exe	From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
U	CloneCDTray	CloneCDTray.exe	System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions
?	Clotusorgreg0	prtStart.exe Orgprt.exe	Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?
X	ClrSchLoader	Loader.exe	Clearsearch variant of IGetNet
X	CLSID	com.exe	Adult content dialler
X	CLSID	dll.exe	Adult content dialler
X	CLSID	msgplus.exe	Adult content dialler
X	CLSID	plugin.exe	Adult content dialler
X	CLSID	sed.exe	Adult content dialler
X	CLSID	msgplus.exe	Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension
?	CM-SmWizard	SmWizard.exe	SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?
U	cma	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
N	Cmaudio	Rundll32 cmicnfg.cpl, CMICtrlWnd	System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel
X	Cmd	cmd32.exe	Added by the TANKED WORM!
X	cmd32	configs.exe	Hijacker, also detected as the QURL-2 TROJAN!
X	cmdcon	cmdcon.exe	Added by the CRYPTER.A TROJAN!
X	CME	cme.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeSYS	CMEsys.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeUPD	CMEupd.exe	Part of Gator advertising spyware - see here for removal instructions
?	CMGrdian	CMGrdian.exe	One of the McAfee shared components. What does it do and is it required?
X	Cmmon32Sys	cmmon32.exe	Added by the SMALL.CL TROJAN!
U	CMPDPSRV	CMPDPSRV.EXE	Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more." Installed with some Compaq and Lexmark printers
X	Cmpnt	Devices2.exe	Added by the TOMPAI-D TROJAN!
X	cmrss	cmrss.exe	Added by the DELF.DU TROJAN!
X	cmrss	crmss.exe	Added by the DLOADER-EK TROJAN!
X	cmrst	cmrst.exe	Added by the BANCOS.S TROJAN!
X	cmsound	vcpdll.exe	Added by the TCXMEDI-D downloader TROJAN!
X	cmsound	vcsystem.exe	Added by the TCXMEDI-D downloader TROJAN!
X	cmssapp	iexplore_.exe	Added by the BANCBAN-CQ TROJAN!
X	cmssSystemProcess	csmss.exe	Added by the AGENT-CO TROJAN!
X	cmssSystemProcess	mcsmss.exe	Added by a variant of the AGENT.EI TROJAN!
X	cmssSystemProcess	csms.exe	Added by the AGENT-Y TROJAN!
X	cmt101	cmt101.exe	Added by a variant of the CRYPTER.C TROJAN!
X	cmx32	cmx32.exe	Added by the GEMA.D TROJAN!
X	Cn323	cnfrm33.exe	Added by the MIMAIL.G WORM!
X	CNBABE	CNBABE.EXE	Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
N	cnet	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
X	Cnfrm32	cnfrm.exe	Added by the MIMAIL.D WORM!
X	CnsMax	Internat.exe	Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%
X	CnsMin	Rundll32.exe CNSMIN.DLL, Rundll32	CnsMin "Chinese Keywords" hijacker related
Y	CnxAdslL	CnxAdslL.exe	DLink, Zoom, or Conexant modem driver
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
U	Codename Dashboard	dashboard.exe	Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"
X	Coldlife -icmp	Systray.exe	Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process
U	coloreal	coloreal.exe	Makes colours sharper and brighter, but will only work with coloreal capable monitors
N	Colorific Control Panel	Hgcctl95.exe	From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor
X	COM Service	mscom32.com	Added by the BEASTY.H TROJAN!
X	COM Service	msynvr.com	Added by the BEASTY.G TROJAN!
X	COM Service	msjclh.com	Added by the PLUX TROJAN!
X	COM Service	msdrce.com	Added by the BEASTY.I TROJAN!
X	COM+ Event System	DRWTSN16.EXE	Added by a variant of the LOVGATE WORM!
X	COM+ EventSystem Services	ECSERVER.EXE	Added by a variant of the SDBOT WORM!
X	Com+ Sys	csrs.exe	Added by the FORBOT-BT WORM!
X	COM+ System Applications	lsas.exe	Added by the AGOBOT.SE WORM!
X	COM++ System	exploier.exe	Added by a variant of the LOVGATE WORM!
X	COM++ System	suchost.exe	Added by a variant of the LOVGATE WORM!
X	COM++ System	svchost.exe...	Added by a variant of the LOVGATE WORM!
N	COM-IP	COMIP.EXE	COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
U	ComAgent	ComAgent.exe	ComAgent - MDaemon's instant messaging client
X	combo.exe	combo.exe	Added by the CHIMO-C TROJAN!
X	combop.exe	combop.exe	Added by the BOWFEED-A TROJAN!
X	Comcast Network	ribiva.exe	Added by an IRC TROJAN variant!
X	ComcastSUPPORT	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
X	COMCFG	comcfg.exe	Added by the TOADCOM.A TROJAN!
X	comctl32	comctl32.exe	Adware - recognized by Kaspersky antivirus and others as TrojanDownloader.Win32.Agent.am
U	COMDRV32	svdhost.exe	Orvell Monitoring 2003 - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/
U	Comm Driver	commh32.exe	G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself!
X	Command	system.exe	Added by the GATECRASH.A or GATECRASH.B TROJANS!
X	Command	Gotit.exe	Added by the TITOG WORM!
X	COMMAND	command.exe	Added by the QQPASS.E TROJAN!
X	Command Prompt32	CmdPrompt32.pif	Added by the ASSIRAL.B WORM!
N	CommCtr	commctr.exe	"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs
U	Compaq Alerter	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	Compaq Computer Corp SCCenter Module	SCCENTER.EXE	For Compaq PC's. Part of Backweb
?	Compaq Computer Security	Rundll32.exe SECURE32.CPL, Service	??
N	Compaq DMI	cpqdmi.exe	Compaq version of the Desktop Management Interface
X	Compaq Drivers	F1rewalls.exe	Added by the SDBOT-WD WORM!
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
X	Compaq Jes Drivers	winjes.exe	Added by the SDBOT-XR WORM!
U	Compaq Knowledge Center	silent.exe & matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide
N	Compaq Message Server	COMPAQ-RBA.EXE	Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems
U	Compaq PK Daemon	cpqkl.exe	For Compaq laptops for programming user configurable keys. Not required unless you use them
X	Compaq Print Fax	cpqa1000.exe	Added by the SDBOT-WL WORM!
X	Compaq Service Drivers	systeminfos.exe	Added by the SDBOT-XC WORM!
X	Compaq Service Drivers	compq.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	navapqwa.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	amsn.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	compqs.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	msnt.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	NtKernelSystem.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	wincmd.exe	Added by the RBOT.ATV WORM!
X	Compaq Service Drivers	wind32.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers	winmsn.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivers 32	compq32.exe	Added by a variant of the SDBOT WORM!
X	Compaq Service Drivrs	copq.exe	Added by a variant of the RBOT WORM!
X	Compaq Sound Drivers For WINDOWS	sounddr.exe	Added by the SDBOT-XG WORM!
N	Compaq Video CD Watcher	??	For Compaq PC's. MPEG viewer
X	Compaq32 Service Drivers	ms32.exe	Added by the SDBOT.BWH WORM!
X	Compaq32 Service Drivers	msconfig32.exe	Added by a variant of the RBOT WORM!
X	Compaq32 Service Drivers	msnt32.exe	Added by a variant of the RBOT WORM!
?	CompaqHW Comp Manager	cpqhcm.exe	Running on a Compaq laptop - any ideas?
N	CompaqPrinTray	printray.exe	Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
N	CompaqSystray	cpqpscp.exe	Compaq System Tray icon
X	Compatibility Service Process	regsvs.exe	Added by the GAOBOT.YN WORM!
X	Compd Service Drivrs	codq.exe	Added by a variant of the SDBOT WORM!
X	Computing Technologie Firewall	lsauth.exe	Added by the SDBOT-WX WORM!
N	COMSMDEXE	comsmd.exe	3Com tray icon
X	ComTry Web Searcher	wstray.exe	Comtry MP3 Downloader related - spyware
X	comxt	comxt.exe	Added by the COMXT TROJAN!
X	Config	service.exe	Added by the ISRAZ.B WORM!
X	Config Loadation	iEEexplore.exe	Added by the SDBOT.H TROJAN!
X	Config Loadatiorin	I3Explorer.exe	Added by the SDBOT.H TROJAN!
X	Config Loader	svchosl.exe	Added by the GAOBOT.P WORM!
X	Config Loader	sysldr32.exe	Added by the GAOBOT WORM!
X	Config Loader	scvhost.exe	Added by the GAOBOT.AE or GAOBOT.AO WORMS!
X	Config Loader for Microsoft Windows	mwincfg32.exe	Added by the AGOBOT.BD WORM!
X	Config Loader2	explores.exe	Added by the GAOBOT.BT WORM!
X	Config Loadr	winsys32.exe	Added by the AGOBOT-HN WORM!
X	Config33.exe	Config33.exe	Added by the SDBOT.T TROJAN!
X	ConfiggLoader	cart322.exe	Added by the GAOBOT.DJ WORM!
U	ConfigSafe	CFGSAFE.EXE	ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
U	ConfigSafe	AUTOCHK.EXE	ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
N	ConfigServices	Config.exe	Part of initial setup on a Compaq PC
X	Configuration	[filename]	Added by the SDBOT-ML WORM!
X	configuration	apphost.exe	Added by the SDBOT-VP WORM!
X	Configuration	ntsys32.exe	Added by the SDBOT-LN WORM!
X	Configuration Default	Wuxat.exe	Added by the SPYBOT-CA WORM!
X	Configuration File	Winset32.exe	Added by the FLUX.101 TROJAN!
X	Configuration Loaded	wupdated.exe	Added by the MOEGA or MOEGA.AG or MOEGA.AP WORMS!
X	Configuration Loaded	lssas.exe	Added by a variant of the SDBOT WORM!
X	Configuration Loader	aim95.exe	Added by the LOADCFG or SDBOT TROJANS!
X	Configuration Loader	cmd32.exe	Added by the LOADCFG or SDBOT TROJANS!
X	Configuration Loader	service5.exe	Added by the GAOBOT.AF WORM!
?	Configuration Loader	lfass.exe	??
X	Configuration Loader	sycfg34.exe	Added by the GAOBOT.AN WORM!
X	Configuration Loader	wincrt32.exe	Added by the GAOBOT.BF WORM!
X	Configuration Loader	windex.exe	Added by the GAOBOT.BZ WORM!
X	Configuration Loader	dosrun32.exe	Added by the GAOBOT.AO WORM!
X	Configuration Loader	Service.exe	Added by the GAOBOT.AO WORM!
X	Configuration Loader	Servicess.exe	Added by the GAOBOT.AO WORM!
X	Configuration Loader	sw32.exe	Added by the AGOBOT.BQ WORM!
X	Configuration Loader	System.exe	Added by the GAOBOT.AO WORM!
X	Configuration Loader	Winreg.exe	Added by the GAOBOT.AO WORM!
X	Configuration Loader	sysinfo.exe	Added by the GAOBOT.FQ WORM!
X	Configuration Loader	microsoft.exe	Added by the GAOBOT.JB WORM!
X	Configuration Loader	confgldr.exe	Added by the POLYBOT WORM!
X	configuration loader	winicfg32.exe	Added by the GAOBOT.GEN!POLY WORM!
X	Configuration Loader	svhst.exe	Added by the GAOBOT.YC WORM!
X	Configuration Loader	msgfix.exe	Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS!
X	Configuration Loader	msnss.exe	Added by the GAOBOT.AUS WORM!
X	Configuration Loader	IEXPL0RE.EXE	Added by the LOADCFG or SDBOT TROJANS!
X	Configuration Loader	loadcfg32.exe	Added by the LOADCFG or SDBOT TROJANS!
X	Configuration Loader	MSTasks.exe	Added by the LOADCFG or SDBOT TROJANS!
X	Configuration Loader	systemry.exe	Added by a variant of the AGOBOT/GAOBOT WORM!
X	Configuration Loader	ccSort.exe	Added by the AGOBOT.SR WORM!
X	Configuration Loader	smss32.exe	Added by the AGOBOT.MB WORM!
X	Configuration Loader	wincffg.exe	Added by the AGOBOT.A3 WORM!
X	Configuration Loader	seru32.exe	Added by the SDBOT-VR WORM!
X	Configuration Loader	botss.exe	Added by the SDBOT-XS WORM!
X	Configuration Loader	ldasp.exe	Added by the AGOBOT.BH WORM!
X	Configuration Loader	msgcfgsrv.exe	Added by a variant of the AGOBOT/GAOBOT WORM!
X	Configuration Loader	smsai.exe	Added by the SDBOT-YE WORM!
X	Configuration Loader	svupdate.exe	Added by the RANDEX.DXP WORM!
X	Configuration Loader	crcss.exe	Added by the AGOBOT.ADG WORM!
X	Configuration Loader	lexplore.exe	Added by the RBOT-AGX WORM!
X	Configuration Loader	scvhost.exe	Added by the AGOBOT-AAE and SDBOT.AR WORMS!
X	Configuration Loader	svchost.exe	Added by the PARADROP-A WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!
X	Configuration Loader	svchost2.exe	Added by the AGOBOT.JR WORM!
X	Configuration Loader	syscfg32.exe	Added by the SDBOT.B TROJAN!
X	Configuration Loader Service	Winsys32.exe	Added by the RBOT-YV WORM!
X	Configuration Loader Service	devl32.exe	Added by the SDBOT-XY WORM!
X	Configuration Loader10	ip7.exe	Added by the AGOBOT-ANZ WORM!
X	Configuration Loading	svchos1.exe	Added by the GAOBOT.DK WORM!
X	Configuration Loading	configldr.exe	Added by the AGOBOT-EC WORM!
X	Configuration Loading Service	wscel.exe	Added by the SDBOT-WJ WORM!
X	Configuration Manager	CNFGLD32.EXE	Added by the SDBOT TROJAN!
X	Configuration Manager	Cnfgldr.exe	Added by the SDBOT TROJAN!
X	Configuration Service	suchost.exe	Added by the TREB TROJAN!
X	Configuration Services	mswords.exe	Added by the SDBOT-YM WORM!
N	Configuration Utility	CONFIG.EXE	Controls linksys wireless connection. Available from the Desktop
U	Configuration Utility	wlanutil.exe	NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)
X	Configuration Wizard	Cfgwiz32.exe	Added by a variant of the HACKTACK TROJAN! Not to be confused with the legitimate MS "ISDN Configuration Wizard" (Cfgwiz32.exe)
X	Configuration32 Loader32	winamp32.exe	Added by the SDBOT-BIC WORM!
X	ConfLoader	sysconf16.exe	Added by the SDBOT-FB TROJAN!
N	Conmgr	conmgr.exe	Starts Winfax pro at startup
U	ConMgr.exe	conmgr.exe	Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
X	Connect2Party	connect2party.exe	Adult content dialler
N	Connection Manager	CManager.exe	SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
X	Connector	SYS.EXE	Added by the dialer.Nunci premium dialer
X	Cons	consol32.exe	Hijacker - redirects to a p0rn portal, where foistware like ISTBar gets stealth installed
X	conscorr	conscorr.exe	Transponder parasite updater/installer
?	Contacte	contacte.exe	Some kind of driver?
X	ContentDownload	rundll32.exe MSA64CHK.dll, DllMostrar	MatrixDialer related
X	ContentService	winservn.exe	Homepage hijacker
X	ContinueInstall	bpsinstall.exe	BrowserAid parasite
X	Control	rundll32.exe ctrlpan.dll, Restore ControlPanel	CoolWebSearch parasite variant
X	Control handler	**********.exe [ = random char]	CoolWebSearch parasite variant
X	Control handler	ahjinst.exe	CoolWebSearch parasite variant
X	Control handler	[10 to 14 random char]THD.EXE	Added by the KREPPER-AI TROJAN!
N	control panel	smctrlw.exe	System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X	Control Panel	System.exe	Added by the DANI TROJAN!
X	Controladores	[path to trojan]	Added by the TELEFO-A TROJAN!
N	ControlCenter2.0	brctrcen.exe	Brother scanner 'Control Center' application - can be started manually
N	ControlCentreTray	XWCTray.exe	System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc
X	Controlled Resource System Service	crss.exe	Added by the AGOBOT.GH WORM!
N	Controller	WFXCTL32.EXE	From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
X	ControlPanel	rundll32 internat.dll, LoadKeyboardProfile	CoolWebSearch parasite variant
X	ControlPanel	host32.exe internat.dll, LoadKeyboardProfile	Added by a vairant of the DELF.DW TROJAN!
X	ControlPanel	[path] cmd32.exe internat.dll, LoadKeyboardProfile	Awmcash.biz foistware
X	ControlPanel	systemctrl.exe internet.dll, LoadNetworkProfile	Browser hijacker, also detected as STARTPA-FX
X	ControlPanel	internat.dll, LoadKeyboardProfile	Added by the BIZVES-A TROJAN!
X	ControlPanel	popcorn.exe internat.dll, LoadKeyboardProfile	Added by the BIZVES-B TROJAN!
X	ControlPanel	popcorn64.exe	Browser hijacker, redirecting to loadcash.biz
X	ControlPanel	popcorn64.exe rundll.dll, LoadMouseProfile	Added by the DLOADER-OI TROJAN!
U	Cookie Cop 2	CookieCop.exe	Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cookie Pal	CPBRWTCH.EXE	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookieJar	Cookiejar.exe	Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookiePatrol	CookiePatrol.exe	CookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
U	CookieWall	cookie.exe	CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cool Desk	cdesk.exe	Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you
X	CoolDownloads	rundll32.exe MSA64CHK.dll, DllMostrar	MatrixDialer related
X	CoolMP3	rundll32.exe MSA64CHK.dll, DllMostrar	MatrixDialer related
U	CoolSwitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
N	Coolwallpaper	cwm_tray.exe	Cool Wallpaper software allows you to manage high quality photos as desktop wallpaper and screen savers
X	coolwebprogram	clrssn.exe	CoolWebSearch parasite variant
N	Copernic Desktop Search	DesktopSearch.exe	Copernic Desktop Search - "Easily search your entire hard drive in less than a second to pinpoint the right file, e-mail, music or pictures"
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
U	Copy handler	Copy Handler.exe	Copy Handler lets you copy between hard disks, floppies, local networks, CDs, and many other storage media. Copy Handler gives you the power to pause, resume, restart, and cancel during the copying and moving processes
N	Copyright	mwcpyrt.exe	Displays copyright information on IBM ThinkPads
U	CoreCenter	CoreCenter.exe	MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking
U	CoreCenter	CORECE~1.EXE	MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking
N	Corel Colleagues & Contacts Reminders	cffrem.exe	Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office
N	Corel Desktop Application Director	dadx.exe	The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
N	Corel Family & Friends reminders	CFFREM.EXE	Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic
N	Corel Registration	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Registration Reminder	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	CorelCENTRAL 10	I_26dadCC.exe	CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs
X	CorelDraw Toolbox	CorelDraw.exe	Added by the SDBOT-VZ WORM!
N	CorelMedia FoldersIndexer8	MFindexer.exe	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
N	CorelMedia FoldersIndexer8	MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
X	CoreSrv	coresrv.exe	Some IRC trojans/worms use this - see here for more information
?	CORESYS	coresys.exe	??
N	CorrectConnect	CConnect.exe	Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
X	cosine	cosine.exe	Added by the RBOT-SW WORM!
U	CostAware	niIPCApp.exe	NetInternals CostAware - download quota measuring tool
N	Country Select	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
N	CountrySelection	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
?	Coupon Offers	??	??
X	couponica	couponica.exe	Adware - see here
?	CP	CopyProtectionNotifier.exe	Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition
U	CP32NOT	CP32BTN.EXE	For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
U	CP4HPOT	OneTouch.EXE	One Touch keyboard driver. Required if you use the additional keys
?	CPA9P2PSERVER	CPA9P2PS.exe	Found on a Compaq Presario but what is it?
U	CPATR10	CPATR10.EXE	Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast
U	CPBrWtch	CPBrWtch.exe	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
Y	CPD_EXE	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*
X	cpl	deamon.exe	Added by the TACTSLAY.C TROJAN!
X	cpl	msgaol.exe	Added by the TACTSLAY.C TROJAN!
X	cpl	s menu.exe	Added by the TACTSLAY.C TROJAN!
N	CplBTQ00	CplBTQ00.EXE	Related to EZbutton
N	CPLDBL10	CPLDBL10.exe	Related to the EZbutton quick launcher
X	cpntmgc	wincomp.exe	MagicControl downloader trojan variant
X	cpntmgc	simcss.exe	MagicControl downloader trojan variant
X	cpntmgc	navpmc.exe	MagicControl downloader trojan variant
X	cpntmgc	winmgts.exe	MagicControl downloader trojan variant
?	CPortPatch	cppatch.exe	CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?
Y	CPQAcDc	CPQAcDc.exe	Compaq PowerCon power management software for laptops
U	CPQAlert	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See the entry for Compaq Message Server
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
U	CPQEASYACC	cpqeadm.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqeaui	cpqeaui.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqek	kcpqek.exe	For Compaq PC's. Easy Access button support for the keyboard
U	CPQInet Runtime Service	CpqInet.exe	For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers
N	CPQINKAGENT	cpqinkag.exe	That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Cpqset	Cpqset.exe	Default settings software in Hewlett Packard notebook
Y	CPQSTUTFIX	stutfix.exe	For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton
X	cpr	cpr	Adroar.com adware downloader
X	CPU Manager	cpumgr.exe	Added by the PANDEM.B WORM!
X	CPU Temp Control	wuitgurd.exe	Added by the RBOT-AHV WORM!
X	CPU Watcher	rundll32.exe [path] cpu.dll,load	Added by the DLOADER-LO TROJAN!
X	CPU Windows Status	cpustats.exe	Added by a variant of the RBOT WORM!
U	CPUcool	Cpucool.exe	Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
X	Cpusave	Cpusave.exe	Added by the GEMA TROJAN!
X	Cpusave32	Cpusave32.exe	Added by the GEMA TROJAN!
X	cpyt	hidep.exe	Added by the MIRJACK-A TROJAN!
X	cqlyg	world_cup_.bat	Added by the WCUP.A WORM!
?	CQSCP2P SERVER	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
?	CQSCP2PS	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
U	cracked_windows1	cracked_windows1.exe	Cracked Windows popup killer
N	CrazyTalk Serve	rundll32.exe CrazyTalk.dll, DIIServeMediaFile	CrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS
X	CRC Value Verifier	crsss32.exe	Added by a variant of the RBOT WORM!
X	CRC Value Verifier	Crsss64.exe	Added by the RBOT-NY WORM!
X	CRC Value Verifier	svchost32.exe	Added by the RBOT-OA WORM!
X	CRC Value Verifier	crsss.exe	Added by the SPYBOT.UK WORM!
X	Crc32stats Dependencies	Crc32stats.exe	Added by the MYTOB.GT WORM!
U	Creata Mail	JMSrvr.exe	Creata_Mail. Smileys, stationary and more for you email. Required if you want to access the program from Outlook or Outlook Express
X	Create A Monster	createAMonster.exe	Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related
N	CreateCD	Createcd.exe	Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
N	CreateCD50	Createcd50.exe	Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
N	Creative AGP Wizard	agpwiz.exe	Part of Creative's BlasterControl
N	Creative Launcher	CTLauncher.exe	For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
N	Creative MediaSource Go	CTCMSGo.exe	"Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats"
N	Creative PCI Audio Configuration Utility	starter.exe	System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer
N	Creative Service for CDROM Access	Ctsvccda.exe	Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
N	Creative WebCam Tray	Camtray.exe	Creative WebCam tray control - can be started manually
X	Creative.exe	Creative.exe	Added by the PROLIN WORM!
N	CreativeDiscNotifier	CTNOTIFY.EXE	For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel
U	CreativeMixer	CTMIX32.EXE	Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon
N	CriticalUpdate	Wucrtupd.exe	MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site
X	Crnsava	scrnsave.pif	Added by the SDBOT-ZV WORM!
X	cronos	MARCO!.SCR	Added by the OPASERV.G WORM!
X	CrossMenu	CrossMenu	Toshiba CrossMenu Utility - allows the user to create their own menus
X	Crusty	dmcpl.exe	Added by the RUSTY WORM!
X	Cryptographic Service	*****.exe [ = random char]	Added by the KORGO.W or KORGO.X or KORGO.AB WORMS!
?	Crystal 3D Audio Control	CWD3DSND.EXE	Crystal 3D Audio sound driver. Is it required?
N	csaRem	spqmdmui.exe	Compaq modem country selection
Y	CSAV_CheckViruses	vchk.exe	Part of Command AntiVirus
U	csc	csc.exe	Command line compiler for Microsoft C# it gets installed with the .NET SDK
X	CSCRS Value	cscrs.exe	Added by the RBOT-AAA WORM!
X	CSCRS Value Check	MsPMSPSd.exe	Added by a variant of the SDBOT WORM!
U	CSINJECT.EXE	CSINJECT.EXE	Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes."
X	csoftok	softok.exe	Added by the QQPASS.G TROJAN!
X	csrsc	csrsc.exe	Added by an unidentified VIRUS, WORM or TROJAN!
X	CSRSS	CSRSS.EXE	Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	Csrss	csrss.exe	Added by the CHOD WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup and the executeable resides in a random folder name
X	CSRSS Loader	csrsss.exe	Added by the AGOBOT.TX WORM!
X	csrssLevel4	csrss.exe	Unidentified malware. Note - this file is placed in a C:WindowsSystemLevel4 folder, and should NOT be confused with the legitimate csrss.exe process which is always located in the WinntSystem32 or WindowsSystem32 folder and should NOT figure in Msconfig/Startup!
X	CSRSSU	CSRSSU.exe	CoolWebSearch parasite related - hijacking to Slawsearch.com. Also see here
X	CSRSSW	CSRSSW.EXE	Added by the CWS-F TROJAN!
X	CSRSWIN	[trojan filename]	Added by the WINSHELL.50 TROJAN!
X	CSRSX	[trojan filename]	Added by the WINSHELL.50.B TROJAN!
Y	CSScheduleCheck	SCHWIZEX.EXE	Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
X	csss	Csss.exe	Added by the BALICK TROJAN!
U	CSS_Central	CSS_1631.EXE	CSS Communication Agent (95 Host) from Command Software Systems "CSS Central™ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console."
X	CSV10P70	CSv10P070.exe	ClearSearch adware related
X	CSV7P26	CSV7P26.exe	ClearSearch adware related
X	CSV7P70	CSV7P070.exe	ClearSearch adware related
X	CSV7P91	CSV7P91.exe	ClearSearch adware related
Y	ct	ct.exe	ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it
X	CT Control Settings	CTSVCCD.EXE	Added by the RBOT-YS WORM!
N	CTAVTray	CTAvTray.exe	For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ
U	CTCMonitor	CTCMonitor.exe	Click-to-Convert - document-to-HTML or doc-to-PDF converter. Only required if you are going to use the File -> Print method of using Click-to-Convert. If converting directly from MS Office, it is not required
N	CTDVDDet	CTDVDDet.exe	Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
N	CTDVDDet	CTDetect.exe	Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
X	ctflog manager	ctflog.exe	Added by the DONBOMB.A TROJAN!
X	CTFM0N.exe	CTFM0N.exe	Added by the STARTPAGE.P TROJAN!
U	ctfmon	ctfmon.exe	CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here
X	ctfmon	taskmgr32.exe [ = number]	Added by the SOWSAT.B WORM!
X	ctfmon	cftmon.exe	Added by the DELIVE-A TROJAN! Note - this file is found in C:Windows or C:Winnt and is not the valid MS Office file of the same name (see here)
X	ctfmon	mIRC.dll	Added by the DELBOT-E TROJAN!
X	ctfmon	WinConst.exe	Added by the ASSASIN-G TROJAN!
X	Ctfmon.exe	ctfmon32.exe	CoolWebSearch parasite related - hijacking to Slawsearch.com
X	ctfmon.exe	ctfmon.exe	Added by the RAIDYS TROJAN! Note - this should not be confused with the valid Office XP file, see here
X	CTFMON32	CTFMON32.EXE	CoolWebSearch parasite related - also detected as the CWS-E TROJAN!
X	CTFMONSS	CTFMONSS.EXE	Added by the CWS-F TROJAN!
X	ctfnom.exe	SVOHOST.exe	Added by the DIGIDOR-A TROJAN!
U	CTHELPER	CTHELPER.EXE	CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task. It also allows Creative speaker setup to be synchronized with Windows Control Panel speaker setting. Without it running that check box in Creative speaker setting is not functional (settings are not in sync). Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled unless you need it
X	CTHelper	cthelper.exe	Added by the RBOT-XB WORM! Note - do not confuse with the Creative application of the same name described here
X	CTime	[path to trojan]	Added by the HTTPDOS TROJAN!
X	CTin10	CTin10.exe	Added by the BANCOS.E TROJAN!
U	CTNMRUN	ctnmrun.exe	Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
?	CTPDPSRV	CTPDPSRV.EXE	Printer driver (in the WINDOWSSystem32spoolDRIVERSW32X86 folder). Is it required?
N	CTRegRun	CTRegRun.exe	For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative
U	CtrlVol	CtrlVol.exe	Volume control key on Acer, Fujitsu and other laptops
N	CTStartup	CTEaxSpl.exe	Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard
U	CTsysVol	CTSYSVOL.exe	Creative sound card volume controls
?	cttdpsrv	cttdpsrv.exe	??
X	CTUpdate	ctupdclt.exe	Added by the RBOT-ABG WORM!
Y	cuagentExe	Cuagent.exe	Command Antivirus related
X	cuo	cuo.exe	Added by the BUGBEAR.A WORM!
N	cursor	Screendragon_VS_Taskbar.exe	ScreenDragon video player
N	CursorXP	CursorXP.exe	CursorXP from Stardock - tool for creating mouse cursors
U	Customizer2000	logon.exe	Automatic logon feature of Customizer 2000 - "a special utility which is designed to optimize Win9x/ME performance. The program lets you explore the many hidden settings in Windows, and make changes"
N	CuteMX	CuteMX.EXE	File sharing utility
X	cvmonitor.exe	cvmonitor.exe	Added by the SDBOT.BV WORM!
Y	CVPND	cvpnd.exe	Sub-system used by Cisco VPN client for making a connection to a remote IPSec server
U	CW	cw4.exe	Chat Watch "is a monitoring and logging software for online chat and instant messaging programs"
U	CWatch	cw.exe	ChatWatch - chat monitoring tool
N	cwbckver	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
N	cwbinhlp	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	cwbsvstr	cwbsvstr.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	cwbwlwiz	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
?	Cwcdschk.exe	Cwcdschk.exe	IBM Thinkpad related?
U	cwupdate	cwupdate.exe	ContentProtect from ContentWatch - internet filter
N	CXMon	Hpi_Monitor.exe	Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
N	Cyber	cyberchk.exe	Part of Belkins "Multimedia Cleaning Kit" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after "x" amount of time has passed
U	Cyber Trio	showmode.exe	From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs
U	Cyber-Defender 2003	uwcdsvr.exe	Cyber Defender 2003
X	cyberfree.exe	***.dat [ = random char]	Unidentified adware
U	CyberLat Ram Cleaner	CLRamCleaner.exe	CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
N	CyberMedia Agent	CMAGENT.EXE	Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled
X	CyberWolf	CyberWolf.exe	Added by the KICKIN.A (or CYDOG.C) WORM!
X	CyDoor	CD_Load.exe	Adware. Check here for information about Cy-Door and here for a program that can remove it
X	CydoorUpdate	CD_Load.exe	Adware. Check here for information about Cy-Door and here for a program that can remove it
N	CyphTray	CyphTray.exe	Cypherus - encryption software
Y	D-Link Air USB Utility	AirCFG.exe	D-Link wireless PCI adapter related
Y	D-Link Air Utility	AirCFG.exe	D-Link wireless PCI adapter related
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
Y	D-Link AirPlus G	AirGCFG.exe	D-Link Airplus Wireless Router driver
N	D066UUtility	D066UUTY.EXE	TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software
X	d3dupdate.exe	bbeagle.exe	Added by the BEAGLE.A WORM!
U	D4	D4.exe	Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down
N	DACONFIGEXE	daconfig.exe	3Com NIC Diagnostics. Available via Start -> Programs
Y	DadApp	dadapp.exe	"DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell
N	Daemon	DAEMON32.EXE	Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
U	Daemon	Daemon.exe	Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
X	Daemon	daemon.exe c daemon2.exe	Added by the SELOTIMA.A WORM!
U	DAEMON Tools-1033	Daemon.exe	Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
N	Daily Planner	dayplan.exe	Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them
X	Daily Weather Forecast	weather.exe	Added by the DLOADER-IP TROJAN!
U	Dancer	DncLE.exe	Part of Microsoft Plus! Digital Media Edition - see here
X	Danton*	[random filename]	Added by the DANTON TROJAN! where * = random number
N	Dap	DAP.exe	Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based
X	dark	imgst.scr	Added by the BANCOS.U TROJAN!
X	DarkDevil.Grasiele.BR	Grasiele.VBS	Added by the LEMBRA WORM!
X	DarKNesS LsasS	LsasS23.exe	Added by an unidentified WORM or TROJAN!
?	DashIE	N/A	Could be related to "Dash Power Shopping" tool bar in IE?
X	dasxdads	fsdqd.exe	Added by the GAOBOT.BIQ WORM!
X	Data	System.dat.vbs	Added by the BISCUIT.A WORM!
X	data	msngs.exe	Added by the RBOT-ADQ WORM!
N	Data LifeGuard	BACKWE~1.EXE	Data LifeGuard diagnostic tools for Western Digital's series of hard drives
N	Data LifeGuard LifeLine Lite installer	DLGLI.EXE	Backweb installer - see here
X	Data Restore Service	prq8.exe	Added by the KELVIR.AI WORM!
X	Data789	Regedit.exe ....data789.tmp	Homepage hijacker
X	DATABASE MySql	[path] repcale.exe [path] beird.exe	Added by a variant of the RANDON.AN WORM!
N	DataCaching	FlashKsk.exe	SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon
U	DataLayer	DataLayer.exe	Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on
X	DataViz Inc Messenger	DvzIncMsgr.exe	Installed with DataViz "Documents to Go" software
N	DataViz Messenger	DvzMsgr.exe	DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts"
X	Datcheck	datcheck.exe	Added by the KEYPANIC TROJAN!
X	Date Manager	datemanager.exe	Date Manager - calender program. Spyware/adware based provided by The Gator Corporation
?	Datechecker	N/A	Could be related to this?
X	DateMakerIntl	DateMakerIntl.exe	Premium rate adult content dialler
X	DAupdate	DAupdate.exe	NavEnhance adware
?	DAW9532.exe	DAW9532.EXE	Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required?
U	DayToday	DAYTODAY.EXE	DayToday from RoboMagic Software Corp. Displays the date on the taskbar
U	DAZEL Delivery Agent	DcDaemon.exe	Control and send documents, etc, to any destination - see here
N	dbserv	dbserv.exe	Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
X	DCE Manager	dcemgr.exe	Added by the TUMAG TROJAN!
U	DCfssvc	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
U	dcfssve	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
X	Dcom System Patch	Microsoft.exe	Added by the RANDEX.MS WORM!
N	DDCActiveMenu	DDCActiveMenu.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCM	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case
N	DDCMan	DDCMan.exe	Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case
X	ddeproc	ddeproc.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
X	DDialler	DDialler.exe	Adult content dialler
?	DDT	N/A	??
X	de32gen	de32gen.exe	Added by a variant of the CRYPTER.C TROJAN!
N	DeadAIM	rundll32.exe DeadAIM.ocm, ExportedCheckODLs	DeadAIM - feature enhancing product for AOL's Instant Messenger program
X	DealHelperBrwsr	dhbrwsr.exe	DealHelper adware
X	DealHelperDown	download.exe	DealHelper adware
X	DealHelperUpdate	DHUpdt.exe	DealHelper adware
X	Debug	DebugW32.exe	Added by the GUBED TROJAN Note - this is not the legitimate csrss.exe process which should not appear in Msconfig/Startup!
X	DebugMonitor	debugmonitor.exe	Added by the MYDOOM.BG WORM!
X	deejay	forboo.exe	Added by the FORBOT-AY WORM!
X	Default	explore.vbs	Added by the ALLEM WORM!
X	Default	mtask.vbe	Added by the ALLEM WORM!
X	default	shell32.exe	Added by the BINGHE TROJAN!
X	Default System Research	vhchost.exe	Added by the TARNO.I TROJAN!
X	Default web browser	IexpIore.exe	Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L"
X	Default_Page_URL	http://find.naupoint.com	Naupoint browser hijacker
X	Default_Search_URL	http://find.naupoint.com	Naupoint browser hijacker
X	defragm_check	defragment.exe	CoolWebSearch parasite variant
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Delay	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
U	Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
?	delcab	deltreew.exe C:cabs	??
X	Delete Me	worm.exe	Added by the DOOMHUNTER WORM!
N	Dell AIO Printer A***	dlbabmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell AIO Printer A***	dlbfbmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell AIO Printer A***	dlbkbmgr.exe	Dell AIO Printer A* related (* = model). Not Required at Startup
N	Dell Alert	DAMon.exe	"Dell Alert" utility, that's supposed to make interaction with Support easier
N	Dell QuickSet	quickset.exe	Dell taskbar icon allowing you to quickly change settings
?	DellDMI	delldmi.exe	Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards?
U	DELLMMKB	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
U	DellTouch	MMKeybd.exe	Dell multimedia keyboard manager. Required if you use the additional keys
U	DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
X	delmsbb	delmsbb.exe	nCase adware
X	delsubmit	rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe	CoolWebSearch parasite variant
?	DelTmp	DelTemp.exe	Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?
N	DeltTray	deltray.exe	System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel
?	demon	demon.exe	Part of the French Wanadoo ADSL extense pack. What does it do and is it required?
X	Deneca	Virus salvado	Added by the DELUZ VIRUS!
U	DepFrez	frzstate.exe	Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example
?	Description of Shortcuts	*.exe	* seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search)
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	??
X	DeskAd Service	DeskAdServ.exe	DeskAd.Service adware
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	DeskFlag - animated USA flag on the desktop
X	DeskMateAutoUpdate	DeskMateAutoUpdate.exe	DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related
U	Desksite CMA	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
X	Desktop	rundll32.exe msconfd.dll, Restore ControlPanel	Added by the BOOKMARKER TROJAN!
X	desktop	desktop.exe	Added by the SDBOT.MD WORM!
N	Desktop Architect	DATRAY.EXE	Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc
N	Desktop Plant	AZARE10S.PLT	Vritual plant from here - this version is an Azalea, there are others so the filename may be different
X	Desktop Search	desktop.exe	iSearch "Desktop Search" hijacker
?	Desktop Service Centre	DSC.exe	OptusNet DSL or Dial-Up connection software - is it required?
N	Desktop Weather	THE WEATHER CHANNEL.exe	Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc
N	Desktop Weather 3	THE WEATHER CHANNEL.exe	Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc
N	Desktop Weather 3	THEWEA~1.EXE	Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc
N	desktopmgr	desktopmgr.exe	Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry"
U	DesktopX	DESKTOPX.EXE	A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
X	destroyb11	destroyb11.exe	Added by the DELF-KO TROJAN!
U	detect	idetect.exe	iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled
?	detect	turbodetect.exe	??
N	Detector	detector.exe	USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
X	Device Configuration Loader	msdvc32.exe	Added by a variant of the AGOBOT/GAOBOT WORM!
U	Device Detector	DevDetect.exe	Watches for external digital imaging products being connected from ACD Systems
N	Device Detector 2	DevDtct2.exe	Installed by various Olympus products, this program detects the active connection of a speech device (voice recorder, etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a "high" priority level which can negatively impact system resources
U	DeviceDiscovery	hpotdd01.exe	Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products. "This program is a non-essential process, but should not be terminated unless suspected to be causing problems"
X	DevicePath	Proyecto1.exe	Added by the GRUEL WORM!
X	DevicePath	Root.exe	Added by the GRUEL WORM!
U	Devices	olesvr.exe	Salfeld Child Control 2003 - parental control software
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
?	Devlog	??	??
?	Devlog	devlog.exe	Apparently mainboard/chipset related, by a French company called AS Media - what exactly is it, and is it required
?	DGJM	DGJM.exe	??
N	dguard	dguard.exe	eAcceleration Stop-Sign related - not recommended, see note
X	DHCP Server	regsvr.exe	Added by the RBOT-PR WORM!
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
?	DHNUXB	DHNUXB.exe	??
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Dial22	dlm.exe	Adult content dialler
X	Dial33	dlm.exe	Adult content dialler
X	Dialer	rundll32.exe msa32chk.dll	Unidentfied malware
U	Dialer Control	dc.exe	Dialer-Control. Detects and protects from premium rate p0rn diallers
U	Dialer Detect	dd.exe	DialerDetect detects stealth installed premium rate diallers, and sounds the alarm when such a connection is being installed without you knowing it
U	Dialgo SDK	PhoneAnswer.exe	Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis"
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders
N	Dialog Helper	PDDLGHLP.EXE	Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
X	DialUp Network Application	Rnaap.exe	Added by a variant of the SDBOT WORM!
X	DIECOX	csrss.exe	Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
X	Diesel	Recalculate.exe	Added by the LAZAR TROJAN!
U	DietK	DietK.exe	DietK - add-on for Kazaa Media Desktop; "removes all adware and popups, built in Download Accelerator, makes searches faster and helps produce more results"
U	DigiCell	DigiCell.exe	MSI DigiCell - "the most useful and powerful utility that MSI has spent much research and efforts to develop, helps users to monitor and configure all the integrated peripherals of the system, such as audio program, power management, MP3 files management and communication / 802.11g WLAN settings. Moreover, with this unique utility, you will be able to activate the MSI well-known features, Live Update and Core Center"
X	DigiD	DigitalSound.exe	Adware downloader
N	DigiGuide	CLIENT.EXE	TV guide and reminder
N	DigiGuide	client01.exe	TV guide and reminder
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
N	Digital River eBot	downlo~1.exe	Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here
X	DigitalNames	DigitalNamesStart.exe	DigitalNames spyware variant
N	DigitalWizard	ISWizard.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DigitalWizard Monitor	dwMon.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DIGStream	digstream.exe	DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically
U	Dimension	Dimension.exe	Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames, personal toast creator, war tools (login flooder), and allows viewing and interacting with the raw MSN protocol
U	Dimension4	d4.exe	Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down
X	Dino3	dino3.exe	Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X	Dir1	caKe	Added by the CAKE WORM!
X	Direct settings	sdchost.exe	Added by the DAEMONI-I TROJAN!
U	Direct Update	DUControl.exe	DirectUpdate dynamic DNS updater
X	Direct X Direct3D	dxd3d.exe	Added by a variant of the SDBOT WORM!
X	Direct X Opengl	dxopengl.exe	Added by a variant of the RBOT-CJ WORM!
X	direct3d.exe	direct3d.exe	Added by the CERTIF-F TROJAN!
N	DirectCD	DirectCD.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X	directs.exe	directs.exe	Added by the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T WORMS!
U	DIRECTVDSL	Directvdsl.exe	Starts DirectTV DSL modem at boot up. Can also be started manually
X	DirectX	ddhelp32.exe	Added by the BIONET.318 TROJAN! Note - not the DirectX helper which is ddhelp.exe
X	directx	Directx.exe	Added by the SDBOT.D TROJAN!
X	directx	Sqlexploit.exe	Added by the SDBOT.D TROJAN!
X	DirectX	DirectX.exe	Added by the BLAXE or LOGPOLE WORMS!
X	directx	NTCmd.exe	Added by the SDBOT.D TROJAN!
X	directx	PipeCmd.exe	Added by the SDBOT.D TROJAN!
X	DirectX 32	directx32.exe	Added by a variant of the AGOBOT/GAOBOT WORM!
X	DirectX For Microsoft Windows	dtxservice.exe	Added by the PROGENT TROJAN!
X	DirectX for Microsoft Windows	Fservice.exe	Added by the PRORAT TROJAN!
X	DirectX for Microsoft Windows	Sservice.exe	Added by the PRORAT TROJAN!
X	DirectX Video Driver	dxterm5.exe	Added by the WILAB-A TROJAN!
X	DirectX64	DirectXset.exe	Added by the BROWNEY.A WORM!
U	Dirkey	Dirkey.exe	Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders
?	Disable EHCI	nousb20.exe	??
N	Disc Detector	CtNotify.exe	For Creative sound cards. Detects when you insert a CD, DVD, etc
?	disc detector	qnetquestnotifty.exe	??
?	discoveg	discoveg.exe	??
N	DiscoverDeskshop	Deskshop.exe	Discover Deskshop - single use "virtual" credit card
X	Disk Keeper	keep.exe	Mslware - recognized by Kaspersky antivirus as Trojan-Dropper.Small.ve
X	Disk Keeper	SECURITY.EXE	Added by the WEBSEARCH TROJAN - a variant of DAOSER-A
X	Disk Manager	diskver.exe	Added by the RBOT.AQT WORM!
X	Disk Master	[trojan name]	Added by the DISTER TROJAN! - a spam relayer
X	DiskCheck	msdarkend.exe	Added by an unidentified WORM or TROJAN!
N	DiskeeperSystray	DkIcon.exe	DisKeeper defragmentation software - can be started manually
X	diskinf	diskinf.exe	Added by the CRYPTER.A TROJAN!
?	DISKMON.EXE	DISKMON.EXE	??
N	Disknag	disknag.exe	Dell program that reminds you to make your backup diskettes
X	Diskstart	Code.exe	Adult content dialler
X	Diskstart	cat.exe	MS-Connect dialler
X	Diskstart	hit.exe	Adult content dialler
X	Diskstart	Snt.exe	Adult content dialler
U	Disk_Monitor	Disk_Monitor.exe	Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader
X	Display Drivers	cssrs.exe	Added by the AGOBOT.FX WORM!
N	Display Settings	hptasks.exe	Allows for the adjustment of the display for LCD screen, CRT Monitor and TV output on HP computers
N	DisplayTrayIcon	TrayIcon.exe	System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display
U	Disspy	disspy.exe	Disspy spyware detection and removal software
N	Distiller Assistant 3.01	DISTASST.EXE	From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
X	Distributed File System	Dfsvc.exe	Added by the MYFIP.A or MYFIP.K WORMS!
X	Distributed File System	kernel32dll.exe	Added by the MYFIP-C or MYFIP.K WORMS!
X	Distributed File System	blade.exe	Added by the MYFIP.AC WORM!
U	Distributed File System	win.exe	Added by the MYFIP.AB WORM!
U	distributed.net client	DNETC.EXE	Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses
Y	Dit	dit.exe	"Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found
N	DiTask.exe	DiTask.exe	Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs
?	Divamon.exe	Divamon.exe	Associated with an Eicon Networks Diva ISDN or ADSL modem - what does it do and is it required?
X	divx	divxenc.exe	Added to the SPBOT.B TROJAN!
X	DivX MediaPlayer 7.0	Dr.DivX.exe	Added by the ALADINZ.G TROJAN!
X	DivX Player	DivXPlayer.exe	Added by a variant of the RBOT WORM!
X	DivX Updater	DivX.Exe	Added by the NALDEM TROJAN or MASTAK VIRUS!
X	Divx4 codec	devldr32.exe	Added by an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file
N	DJREGFIX	regedit /s c:hpdjregfix.reg	DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers
Y	DkService	DkService.exe	From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. It's recommended to leave this enabled, otherwise you could have problems starting it manually.
X	DKTime	dktime.exe	Added by the LUNII TROJAN!
X	Dkware lptt01	dkware.exe	Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Dkware ml097e	dkware.exe	Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
?	dkzzixm	dkzzixm.exe	??
Y	dla	tfswctrl.exe	Drive letter access to a UDF packet writer for CD-RW - from HP, Veritas an others. Similar to Roxio's DirectCD and does the same thing. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
N	DlaTray	Dlatray.exe	System Tray access to DLA - Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
X	dlder	dlder.exe	Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus
X	DlDir1	caKe	Added by the CAKE WORM!
?	DLForcerExe	DLForcerEXE.exe	??
N	DLF_00000B00	Vcdlf.exe	Known to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown
N	DLG	DLGCHBW.exe	Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
N	DLHelperEXE	WATCH.exe	Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
X	DLHelperEXE.exe	N/A	Downloader for Microgaming/Casino software - stealth installed
X	Dlite	dllmanager.exe	Added by the WOOTBOT.DN WORM!
X	Dll Boot Loader on Startup (do not remove this)	[various filenames]	Added by an unidentified TROJAN!
X	DLL Manager	dllmngr32.exe	Added by a variant of the RBOT WORM!
X	DLL Service Manager	[path to worm]	Added by the RPCBOT.F TROJAN!
X	DLL32	dllmem32.exe	Added by the KWBOT.E WORM!
X	DllCacherv2	dllcachev2.exe	Added by the LATEDA TROJAN!
X	dlldmt	dlldmt.exe	Added by a variant of the CRYPTER.C TROJAN!
X	DllExecutable	[path to file]	Added by the VB-SP WORM!
X	dllhelp	dllhelp.exe	Added by the STARTPAGE.DQ hijacker
X	dllhelp	dllhlp.exe	Added by the Downloader-HI TROJAN!
X	dllhostxp.exe	dllhostxp.exe	Browser hijacker and adware downloader
X	dllreg	dllreg.exe	Added by the CRYPTER.A TROJAN!
X	DLLService32	dllsvc32.exe	Added by the AGOBOT.VX WORM!
?	DLT	dlt.exe	??
X	dluca	dluca.exe	Adult content dialler - see here
X	dluca	dluca.exe	Added by the DLUCA.C TROJAN!
X	dluxde	dluxde.exe	All-In-One-Telcom (adult content dialler) variant
X	Dluxjp	cnfrm.exe	Added by the DLUCA.D TROJAN!
X	DM mgr	dm_mgr.exe	Added by the JITTAR TROJAN!
N	DMILDR	dmildr.exe	Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs
N	DMISL	DMISL.EXE	DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
N	DMISLAPP	DMISLAPP.exe	DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
X	Dmsvc32	Dmsvc32.exe	Added by the AGOBOT.ABU WORM!
X	dmtdll	dmtdll.exe	Added by a variant of the CRYPTER.C TROJAN!
U	DMXLauncher	DMXLauncher.exe	Part of Dell's Media Experience, a multimedia suite which offers the user functionality to organise and play music and digital video files
X	DM_server	dmserver.exe	Comet Cursor adware
X	dm_service	[path to file]	Added by the MITGLIEDER.P TROJAN!
X	Dnar	Dnar.exe	Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here
Y	DNE Binding Watchdog	rundll dnes.dll, DnDneCheckBindings	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
Y	DNE DUN Watchdog	rundll dnes.dll, DnDneCheckDUN13	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
X	DNS	mc-58-12-0000080.exe	"Shorty" adware component, also detected as the AGENT.FD TROJAN!
X	DNS	mc-58-12-0000093.exe	Nail/Aurora related malware
X	Dns Resolver	dnsrslve.exe	Added by the RBOT-WS WORM!
X	DNS Service	dnsresolver.exe	Added by the RBOT-PQ WORM!
?	DNS2GoClient	dns2goclient.exe	DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?
X	DNSCacheBoost	dnsping.exe	Added by the DNSBUST-A TROJAN!
X	dnscleaner	dnscleaner.exe	CoolWebSearch parasite related
?	DNXVC	dnxvc.exe	??
X	DocTor	Doctor.exe	Added by the DOTOR.A WORM!
N	DocuMagix Init	PWATCH.EXE	PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
X	Doggy Style	MsPMSPSd.exe	Added by the SDBOT-AAP WORM!
X	DOGStart	GSDOGST.EXE	Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS
?	Doing	doing.exe	??
X	doit.exe	doit.exe	Added by the FORBOT-EK WORM!
U	Don't Panic	dontpanicdemodp.exe	30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite."
U	Don't Panic Pop-Up Stopper	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
U	Dopus	dopus.exe	Directory Opus - a file manager from GPSoft
X	dos	dos64.exe	Adware downloader trojan
X	Dos Prompt Loader	cygwin.exe	Added by the SDBOT-VV WORM!
?	Dosbat	??	??
N	DoUWantIt	duwi.exe	DoUWantIt - online shopping assistant. Start it manually
X	down	hlp32.exe	Added by the DLOADER.BG TROJAN!
N	Download Accelerator Plus 5.0	DAP.exe	Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based
X	Download Plus	DownloadPlus.exe	DownloadPlus parasite - opens pop-up adverts
N	Download Wonder	DownloadWonder.exe	Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features
N	DownloadAccelerator	DAP.EXE	Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based
X	DownloadLegalMusic	rundll32.exe MSA64CHK.dll, DllMostrar	MatrixDialer related
X	DownloadWare	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
X	DownloadWare Engine	Dwe.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
X	Downxz	Downxz.bat	Added by the MYDOOM.W WORM
N	DPAgnt	DPAgnt.exe	digitalPersona fingerprint scanner
Y	Dpcnav	dpcnav.exe	DirecWay from DirectTV satellite based high-speed internet access
N	DPConfig	DPConfig.exe	Compuware DevPartner Studio Configuration Utility, a tool for software developers - System Tray access to configure the utility's analysis. Not required at startup, can be launched from the Start Menu programs group when needed
X	dpcproxy	dpcproxy.exe	Added by the GOLDENP-A TROJAN!
Y	DPCProxyLoadOnStartup	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access
Y	Dpcstart	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access. Proxy software
U	Dpcstart	dpcstart.exe	Startup program for Direcway 2-way satellite internet service. Loads DirecWay's Navigator, tray icon, etc
X	dpi	dpi.exe	Delfin Media Viewer or "Promulgate" adware
U	dpps2	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
X	dps	dps.exe	SmartestSearch parasite - poses as a foistware, bogus adware/spyware remover called "scumware-remover"
N	Drag'n'Drop_Autolaunch	Autolaunch.exe	Iomega HotBurn - CD-RW burning software
?	DragDrop	DragDrop.exe	??
N	DragnDrop_Autolaunch	Autolaunch.exe	Iomega HotBurn - CD-RW burning software
X	DrefIW	SysDrefIWv2.exe	Added by the DREF-C WORM!
?	dregfix	ph_finder.exe	??
N	DrgToDsc	DrgToDsc.exe	Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly
?	dried.exe	dried.exe	??
N	DriveLED	OODLed.exe	O&O DriveLED - displays your HDD LED on your monitor. Start manually
X	Driver	gbot.exe	Added by the JUNTADOR.K TROJAN!
X	Driver32	Scam32.exe	Added by the SIRCAM WORM!
X	DriverCheck	svchost.exe	Added by the DELF-KR TROJAN! Note - this file is placed in a C:DriverLoad folder, and should NOT be confused with the legitimate svchost.exe process, always located in the WinntSystem32 or WindowsSystem32 folder, and which should NOT figure in Msconfig/Startup!
X	DriverDB	svcmdx32.exe	Added by the BERPI TROJAN!
X	DriverLoad	svchost.exe	Added by the DELF-KR TROJAN! Note - this file is placed in a C:DriverLoad folder, and should NOT be confused with the legitimate svchost.exe process, always located in the WinntSystem32 or WindowsSystem32 folder, and which should NOT figure in Msconfig/Startup!
N	DriveSelect	driveselect.exe	DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs
U	dRMON SmartAgent	SmartAgt.exe	Part of the network monitoring program group for 3Com NIC cards. See here for more info
X	drmu	W95Mm.exe	Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread
X	drocher	d.exe	Adult content dialler
X	drvddll.exe	drvddll.exe	Added by the BEAGLE.AP WORM!
X	Drvddll_exe	drvddll.exe	Added by the BEAGLE.X WORM!
?	DrvListnr	DrvListnr.exe	Analog Devices SoundMAX soundcard related. What does it do and is it required?
U	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
X	drvr32h	drvr32h.exe	Added by an unidentified VIRUS, WORM or TROJAN!
X	drvrmanager	drvrquery32.exe	Added by the BOOHOO WORM!
X	drvsys.exe	drvsys.exe	Added by the BEAGLE.W WORM!
X	drvupd	rundll32 ..drvupd.inf	Hijacker - drvupd.inf file installs a "searchforge.com" hijack
X	DrWatson	drwatson_.exe	Added by the LOHAV-S TROJAN!
X	DrWatson	drwatson_32.exe	Added by the LOHAV-S TROJAN!
X	DrWeb Antivirus	DRWEBAV.EXE	Added by an unidentified WORM or TROJAN!
Y	Drwebscheduler	Drwebscd.exe	Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem
X	DR_S	DR_S.exe	AdShooter adware
U	DS Clock	dsclock.exe	Digital desktop clock including synchronization with atomic servers - see here
X	dsa	dsa.exe	Homepage hijacker - redirecting to downseek.com
X	DSAcass	[path to file]	Added by the RANKY.M TROJAN!
X	DSB	DSB.exe	EnergyPlugin adware
N	DSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
X	Dsi	dp-******.exe	Added by an unidentified adware where ****** are random characters
X	Dskcompat	Dskcompat.exe	Added by the GEMA TROJAN!
N	DSL Monitor	spdstrm.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y	DSLagentexe	DSLagent.exe	Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection
Y	dslmon	dslmon.exe	Sagem DSL modem related. Apparently needed to detect the modem
U	DSLSTATEXE	dslstat.exe	System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example)
X	DsmSer	dsm.exe	Added by the SERFLOG.B WORM!
X	DsmSer	msmpatch.exe	Added by the SERFLOG.B WORM!
X	DsmSer	svosm.exe	Added by the SERFLOG.B WORM!
X	DsmSer	sysup.exe	Added by the SERFLOG.B WORM!
X	DSS	dssagent.exe	DSSAgent by Brøderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info
X	DSS	[path to trojan]	Added by the DSSDOOR-C TROJAN!
X	DSService	dmrss.exe	Added by the AGOBOT-XX WORM!
?	DSSSGENS	dssagens.exe	??
N	DU Meter	DUMETER.EXE	Hagel Technologies internet bandwidth monitor
X	duck	duck.exe	Added by the AGOBOT-AVG WORM!
N	dumprep 0 -k	dumprep 0 -k	Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
N	dumprep 0 -u	dumprep 0 -u	Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
X	DUN_SERVICES3	dun3.exe	Added by the SOKIRON TROJAN!
N	dvd43	DVD43_Tray.exe	DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies"
X	dvd98	windvd98.exe	Added by the CULT.P WORM!
U	DVDBitSet	DVDBitSet.exe	DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
X	Dvdcompat	Dvdcompat.exe	Added by the GEMA TROJAN!
N	DVDLauncher	DVDLauncher.exe	A process belonging to the Cyberlink PowerCinema video viewing software which allows you to play DVDs upon insertion. Non-essential process - and is installed for ease of use
N	DVDSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
N	DVDTray	DVDTray.exe	HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware
?	DVDUpgrade	DVDUpgrd.exe	??
Y	Dvp95	Dvp95.exe	Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine
Y	dvpapi9x	DVPAPI9X.exe	Command AntiVirus for Windows 95/98/Me
Y	DvpInitExe	Dvpinit.exe	Command Antivirus related
Y	dvprpt	Dvprpt.exe	Command Antivirus real time protection
X	dvraudio	dvraudio.exe	Added by a variant of the CRYPTER.C TROJAN!
X	dvsfss	fbsfsdrs.exe	Added by the SDBOT-QA WORM!
U	DVSync	dvsync.exe	DVSync is the program that allows you to synchronize your daVinci’s PDA's data with your Personal Information Manager on the PC
X	Dvx	wsxsvc.exe	Delfin Media Viewer or "Promulgate" adware variant
X	dw	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
U	DWHeartbeatMonitor	DWHeartbeatMonitor.exe	DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
N	DwlClient	support.exe	Download manager for Dell support alerts
Y	dwStart	FireWall.exe	The Shield firewall
X	Dx	sys.exe [ = random number]	Added by the DEXTER.A WORM!
X	Dx8compat	Dx8compat.exe	Added by the GEMA TROJAN!
X	dxdll32	ntxdll.exe	Added by the GAOBOT.CPX WORM!
N	DXDllRegExe	dxdllreg.exe	Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it
X	DxLoad	DX3DRndr.exe	Added by the GIBE.B WORM!
N	DXM6Patch_981116	p_981116.exe	Win32 cabinet self extractor. More info here
X	dxmsrv	dxmsrv.exe	Added by an unidentified WORM or TROJAN!
X	Dxsty	Dxsty.exe	Added by the GEMA TROJAN!
X	Dxupdate.exe	Dxupdate.exe	Added by the MAFEG WORM!
X	DyFuCA	optimize.exe	Adult content dialler - see here
X	DyFuCA Active Alert	actalert.exe	Adult content dialler - see here
X	Dynamic Dns Binary	dynitora.exe	Added by the RBOT-WT WORM!
X	Dynamic Dns Binary	CMD16.EXE	Added by the RBOT-XM WORM!
X	Dynamic Dns Binary	winxp34.exe	Added by a variant of the RBOT WORM!
X	Dynamic Dns Binary	WinHelpcfn.exe	Added by a variant of the RBOT WORM!
X	Dynamic Link Library loader	Loader32.exe	Added by the KOL TROJAN!
N	DynDNS-Updater Traytool	ddutray.exe	DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually
X	DynHttp Dns Binary	dynizari.exe	Added by a variant of the RBOT WORM!
U	Dynu Basic Client	dynubas.exe	Dynu online dynamic IP update client. Useful when using a dial up modem
?	DZKillMe	DZSAVEME.EXE	??
X	E-Card	ecard.exe	Added by the YODI WORM!
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
N	E6TaskPanel	TaskPanl.exe	Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X	Eac Download	download.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
U	EACLEAN	eaclean.exe	For Compaq PC's. Easy Access button support for the keyboard
X	Eac_Cnry	canary.exe	Added by the CANARY TROJAN!
?	Eac_rnvdl	ANTIVIRUS_INSTALL.EXE	??
N	EanthologyApp	EANTHO~1.EXE	eAcceleration Stop-Sign related - not recommended, see note
N	EanthologyApp	eanthology.exe	eAcceleration Stop-Sign related - not recommended, see note
N	eanth_critical_update_alert	sys_alert.exe	eAcceleration Stop-Sign related - not recommended, see