| N | ClipMate5x | ClipMt5x.exe | "Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs"
|
| U | ClocX | ClocX.exe | "ClocX - places a clock on the desktop that can be moved and then changed into a calendar plus you can set alarms etc?"
|
| X | Configuration Loader | windex.exe | "Added by the GAOBOT.BZ WORM!"
|
| X | Configuration Loader | msgfix.exe | "Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS!"
|
| X | Configuration Loader | winfix.exe | "Added by the SDBOT-MA WORM!"
|
| N | Corel Desktop Application Director | dadx.exe | The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
|
| Y | CPQSTUTFIX | stutfix.exe | "For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton"
|
| Y | CSScheduleCheck | SCHWIZEX.EXE | "Part of ConfigSafe - lets you identify changes to the registry |
| N | CuteMX | CuteMX.EXE | File sharing utility
|
| U | DesktopX | DESKTOPX.EXE | "A program that replaces the regular Desktop and Taskbar |
| N | Dialog Box Assistant | OSDEx.exe | "Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders"
|
| X | directx | Directx.exe | "Added by the SDBOT.D TROJAN!"
|
| X | DirectX | DirectX.exe | "Added by the BLAXE or LOGPOLE WORMS!"
|
| X | DirecX | DirecX.exe | "Added by the AGOBOT-HU BACKDOOR!"
|
| X | DivX MediaPlayer 7.0 | Dr.DivX.exe | "Added by the ALADINZ.G TROJAN!"
|
| X | DivX Updater | DivX.Exe | "Added by the NALDEM TROJAN or MASTAK VIRUS!"
|
| X | dlsp2mx | dlsp2mx.exe | "Added by the MPB-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""dlsp2mx"""
|
| Y | dvpapi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me
|
| X | dwqblwppx.exe | [random].exe | "Okcashbackmall adware"
|
| X | ErrorFix | ErrorFix.exe | "ErorrFix rogue system error and cleaning utility - not recommended |
| Y | eScan Monitor | AVKWCTL9X.EXE | "MicroWorld eScan antivirus"
|
| Y | ezPS_Px | ezSP_Px.exe | "Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
|
| Y | ezShieldProtector for Px | ezSP_Px.exe | "Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings"
|
| Y | F-Secure 2006 | fspex.exe | "F-Secure Anti-Virus automatic updater"
|
| ? | FireBox Control Panel | FireBox.exe | "Control panel for the Presonus FireBox firewire based music recording system. Is it required?"
|
| X | FireFox | firefox.exe | "Added by the RBOT-ATP WORM! Note - this is not the popular FireFox web browser and is located in %System%"
|
| X | firefox.exe | firefox.exe | "Added by the BANKER-EBO TROJAN! Note - this is not the popular FireFox web browser and is located in %System%"
|
| X | FireWire Driver | samx.exe | "Added by the SDBOT.AE WORM!"
|
| X | FontFix | fontfix.exe | "Added by an unidentified VIRUS |
| U | Foul PX | FoulPX.exe | "Foul PX |
| X | freestyle | lockx.exe | "Added by the RBOT-ATH WORM!"
|
| X | gdimx | gdimx.exe | "MPB-D dialer. Note - provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""gdimx"""
|
| U | Google Quick Search Box | GoogleQuickSearchBox.exe | "Part of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the ""Start"" button and Quick Launch toolbar and ""lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"""
|
| U | GoogleQuickSearchBox | GoogleQuickSearchBox.exe | "Part of Google Toolbar (from version 6 onwards) for IE. The Quick Search Box sits between the ""Start"" button and Quick Launch toolbar and ""lets you easily search both your computer and the Web from a slick-looking search box that comes up only when you need it"""
|
| X | Graphic Update | openglx.exe | "Added by the IRCBOT.AMU WORM!"
|
| Y | H2O | cledx.exe | "Related to copyright protection products by SyncroSoft"
|
| X | HostSrv | sachostx.exe | "Added by the LOOKSKY.H WORM! Drops multiple files in %System%"
|
| X | HostSrv | sachostx.exe | "Added by the LOOKSKY.A or LOOKSKY.F or LOOKSKY.G WORMS!"
|
| X | HostSrv | sachostx.exe... | "Added by the LOOKSKY.E WORM!"
|
| X | HotPix | hotpix.exe | Adult content dialler
|
| N | HP Precision Scan | hpmdlbwx.exe | HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
|
| U | HP ScanPatch | HPScanFix.exe | "Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used |
| U | IBM TrackPoint Accessibility Features | tp4ex.exe | "Supports accessibility features for the TrackPoint stick and associated buttons on IBM/Lenovo ThinkPad notebooks. If features such as ""Click Sound"" |
| X | icrosoft Visual | plscx.exe | "Added by the RBOT-AYO WORM!"
|
| X | icrosoftf Avpx Control | avpx.exe | "Added by the RBOT-AYN WORM!"
|
| X | igsex2x | igsex2x.exe | "NewDial premium rate adult content dialler"
|
| X | iiuyvyu | uzcx.exe | "Added by the AGENT-EOF TROJAN!"
|
| U | Imagefox | imagefox.exe | "ImageFox 2.0 (formerly available from ACDSee) is an ""add-on"" graphics previewer for most Windows Open/Save As dialog boxes"
|
| U | Index Washer | WashIdx.exe | "Window Washer from Webroot Software. Useful utility that deletes safe to remove files |
| X | Info32x | Info32x.exe | "Added by the GEMA TROJAN!"
|
| Y | InoRT | InoRT9x.exe | "Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage"
|
| X | InstantPleasureXXX | instantpleasurexxx.exe | Adult content dialler
|
| X | Internet2 Optimizer | wkfix.exe | "Added by a variant of the RBOT WORM!"
|
| X | iut75 | uzcx.exe | "Added by the DLOADER-AXV TROJAN!"
|
| X | KTAX Auto Loader | ktax.exe | "Added by the SDBOT-MZ WORM!"
|
| X | KV_HOST | cxjx.exe | "Added by the LEGMIR-BB TROJAN!"
|
| X | load32 | l32x.exe | "Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM!"
|
| Y | LoadDvpApi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me
|
| X | loadfax | loadfax.exe | "Added by the WINFLUX-C TROJAN!"
|
| U | Logitech QuickCam | LVComSX.exe | Entry added when you install versions of the Logitech QuickCam webcam software - allows the full camera features (such as face tracking) to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required
|
| U | Logitech Utility | Logi_MwX.exe | "Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as ""SmartMove"". If you disable it and find you don't need it leave it disabled"
|
| U | Logi_MwX | Logi_MwX.exe | "Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as ""SmartMove"". If you disable it and find you don't need it leave it disabled"
|
| U | LVCOMSX | LVComSX.exe | Entry added when you install versions of the Logitech QuickCam webcam software - allows the full camera features (such as face tracking) to be accessed by both the Logitech software and (amongst others) NetMeeting and Windows Movie Maker. If you don't use the camera on a daily basis create your own shortcut and run it manually when required
|
| X | mainviewex | mainviewex.exe | "Added by the GEMA.D TROJAN!"
|
| U | Matrix Screen Locker | matrix.exe | "Matrix Screen Locker is a system tray application that allows for quick and secure PC lock when you wish. The screen does a ""matrix style"" scrolling characters effect when the lock is running"
|
| X | MaxAlerts | max.exe | Bonzi MaxALERT - spyware
|
| Y | McAfeeWebscanX | WebScanX.exe | "From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs |
| Y | McShld9x | mcshld9x.exe | "Window 9x/Me on-access scanner for older McAfee's internet security products such as VirusScan and VirusScan Online which scans files in real-time for malware as you access |
| X | Media X Services | MSNGRx.exe | "Added by the RBOT.AUL WORM!"
|
| X | Media-XP-Service-Pack3 | msnzx.exe | "Added by the SDBOT-ACW WORM!"
|
| X | Micr0s0ft Ms D0s | msdx.exe | "Added by the RBOT-AON WORM!"
|
| X | Micrcoft Updat | spoolsaex.exe | "Added by the RBOT-AJM WORM!"
|
| X | Microft Update 32 | winssx.exe | "Added by the RBOT-AQS WORM!"
|
| X | Microsoft | firefox.exe | "Added by the RBOT-GVJ TROJAN! Note - this is not the popular FireFox web browser and is located in %System%"
|
| X | Microsoft DNSx | mdnex.exe | "Added by the DELBOT-AI WORM!"
|
| X | MicroSoft OneCare | FreeS3x.exe | "Added by the SDBOT-DJT WORM!"
|
| X | Microsoft Security Hot Fix Update | mshotfix.exe | "Affilred adware"
|
| X | Microsoft Security Management | sp2fix.exe | "Added by the RBOT.UB WORM!"
|
| X | Microsoft Synchronization Manager | xXx.exe | "Added by the SDBOT-KZ WORM!"
|
| X | MICROSOFT UNPACK SYSTEM | winrarx.exe | "Added by a variant of the RBOT WORM!"
|
| X | Microsoft Update | Microsoftx.exe | "Added by a variant of the RBOT WORM!"
|
| X | Microsoft Update | wkfix.exe | "Added by the RBOT-ABZ WORM!"
|
| X | Microsoft Update | wuamgrdx.exe | "Added by a variant of the SPYBOT WORM! See here"
|
| X | Microsoft Update 32 | winssx.exe | "Added by the RBOT-ARW WORM!"
|
| X | Microsoft Update Machine | wuawx.exe | "Added by the RBOT-CE WORM!"
|
| X | Microsoft Update Machine | wupdt32x.exe | "Added by a variant of the SDBOT WORM!"
|
| X | Microsoft Update Machine | linux.exe | "Added by the RBOT-IM WORM!"
|
| X | Microsoft Update v2.6 | lxxex.exe | "Added by a variant of the RBOT WORM!"
|
| X | Microsoft Update Win32x | winupdate32x.exe | "Added by the RBOT-AJN WORM!"
|
| X | Microsoft Windows Update | mnswinsx.exe | "Added by the RBOT-AWH WORM!"
|
| X | Microsoft Windows Updater | winfix.exe | "Added by the RBOT-CM WORM!"
|
| X | Microsoft Windows updaterD | log32zx.exe | "Added by the MYDOOM.W WORM!"
|
| X | Microsoft Winedows WinServ | iPodFix.exe | "Added by a variant of the RBOT WORM!"
|
| X | Microsoft WinUpdate | spfix.exe | "Added by a variant of the RBOT WORM!"
|
| X | Microsoft XML Service | msxmlx.exe | "Added by the RBOT.KS WORM!"
|
| X | Microsoft© PID Lex | PIDLex.exe | "Added by the NIOVADOOR TROJAN!"
|
| X | Mismo | win32x.exe | "Added by the RBOT-JP WORM!"
|
| X | mmxrun | mswinindex.exe | "TwoSeven spyware"
|
| X | Motherboard Config | Ati2xxx.exe | "Added by the RBOT-AIK WORM!"
|
| U | MouseWare | Logi_MwX.exe | "Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as ""SmartMove"". If you disable it and find you don't need it leave it disabled"
|
| X | Mozila Firefox | firebox.exe | "Added by the RBOT-AIP WORM!"
|
| X | Mozilla Firefox | F1REF0X.EXE | "Added by the SDBOT-UP BACKDOOR! Note that the filename has the numbers ""1"" and ""0"" in place of upper case ""i"" and ""o"" respectively"
|
| X | Mozilla Firefox | firefox.exe | "Added by the AUTOTUN.POM WORM! Note - this is not the popular FireFox web browser and is located in %System%"
|
| N | MPTBox | MPTBOX.EXE | Cannon Multi-Pass toolbox - a button bar
|
| X | MS DirectX Sound Drivers | msdrvdx.exe | "Added by the RBOT.BCX WORM!"
|
| X | MS DVD DirectX Sound Drivers | msdrvdx.exe | "Added by the SDBOT-XJ WORM!"
|
| X | MS Internet Explore | MSIEx.exe | "Added by a variant of the RBOT WORM!"
|
| X | MSCommX | mscommx.exe | "Added by a variant of the RBOT WORM!"
|
| X | Msconfig | icpldrvx.exe | "Added by the BANLOAD.BFT TROJAN!"
|
| X | MSMSGNER | fgozmox.exe | "Added by the AGENT-EBJ BACKDOOR!"
|
| X | MSN | msnmsgx.exe | "Added by the RBOT-PZ WORM!"
|
| X | MSN Messenger Inbox Loader | msninbox.exe | "Added by the SLENFBOT.YG WORM!"
|
| X | Msn Update Service | userx.exe | "Added by the MYTOB.JF WORM!"
|
| X | MSN32 X Service | MSN32x.EXE | Added by an unidentified WORM!
|
| X | Mspatch89 | cnqmax.exe | "Added by the RANDEX.P WORM!"
|
| X | MSVsmt | rpcxctx.exe | Added by an unidentified WORM or TROJAN!
|
| X | msword | docx.exe | "Added by the CODOX-A WORM!"
|
| X | ms_anti_spywarebxp | mwfirebpx.exe | "Added by the SURILA-D TROJAN!"
|
| X | ms_anti_spywarebxp | mwfibpx.exe | "Added by the SURILA-J TROJAN!"
|
| ? | Mufix | mufix.exe | "Part of INFOConnect |
| X | Mustafx | mustafx.exe | Added by a variant of the VIRANTIX.B TROJAN!
|
| X | NAV Auto Updates | navupdaterx.exe | "Added by a variant of the RBOT WORM!"
|
| N | NB Common Dialog Enhancements | COMDLGEX.EXE | "Part of McAfee Nuts & Bolts. With Common Dialog Enhancements |
| X | netdllex | netdllex.Exe | "Added by the CRYPTER.A TROJAN!"
|
| X | netx | svx.exe | "Detected by Bitdefender as a variant of DROPPER.LDPINCH.Q malware"
|
| X | Nex | nex.exe | "Added by the AGENT-FPQ TROJAN!"
|
| U | NFM Service | NPDOR9x.exe | "Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required"
|
| X | Norton AV Protection Startup | Ati2xxx.exe | "Added by a variant of the RBOT WORM!"
|
| X | notepad.exe | upx.exe | Added by a variant of the AGENT.AH TROJAN!
|
| Y | NVmax | NVmax.exe | NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
|
| ? | objtjprx | objtjprx.exe | "??"
|
| X | od-matrxx | od-matrxx.exe | Adult dialler - xx can be any number
|
| X | od-stndxx | od-stndxx.exe | Adult dialler - xx can be any number
|
| X | od-teenxx | od-teenxx.exe | Adult dialler - xx can be any number
|
| Y | Pavkre9x | pavkre9x.exe | "Part of the 2005 & 2006 versions of Panda Antivirus and Internet Security"
|
| Y | PavProc | PavPrS9x.exe | "Part of Panda Antivirus and Internet Security"
|
| Y | PgIndex | PgIndex.exe | "Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Index.dat"" option is selected for IE under ""Browsers"" when the users selects ""Clean Your Computer"". Index.dat files keep a track of pages |
| X | PIC SYSTEM | picx.exe | "Added by the MYTOB.LL WORM!"
|
| X | PrevX | prevx.exe | "Added by the IRCBOT-TF WORM! Note - this worm is located in the System (Win9x/Me) or System32 (XP/WinNT/2K) directory and is not the PrevX Home intrusion prevention software"
|
| Y | Privacy Guardian | PgIndex.exe | "Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Index.dat"" option is selected for IE under ""Browsers"" when the users selects ""Clean Your Computer"". Index.dat files keep a track of pages |
| Y | PrivacyGuardianIndex | PgIndex.exe | "Part of Privacy Guardian from PC Tools - which ""is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer"". This startup entry runs only on the next reboot if the ""Index.dat"" option is selected for IE under ""Browsers"" when the users selects ""Clean Your Computer"". Index.dat files keep a track of pages |
| U | Qchex Tray Icon | Qchex.exe | "Related to G7 Productivity Systems Check Software"
|
| X | Qffecdas | vvzxx.exe | "Added by the MULTIDRP.AA TROJAN!"
|
| X | QnX | qnx.exe | "Added by the ACKANTTA WORM!"
|
| U | QtVprMtx | QTVPRMTX.EXE | "Multimedia keyboard driver from Dritek System Inc"
|
| N | Quick Shelf xx | qushelfxx.exe | "Places an icon in the system tray for launching MS Bookshelf. Available via Start -> Programs"xx" represents the version number - ie |
| N | REAL | realjbox.exe | "Real Jukebox - MP3 and music files player"
|
| X | Realtek Sound Manager | Tecompntwx.exe | "Added by a variant of the IRCBOT BACKDOOR!"
|
| X | RegistryCleanFixMFC | registrycleanfix.exe | "RegistryCleanFix rogue registry cleaner - not recommended"
|
| X | RegistryFix.exe | registryfix.exe | "RegistryFix rogue registry cleaner - not recommended |
| X | RegRun | mActiveX.exe | "Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!"
|
| X | REMOVE ME | tbbzxzxcxxcx.exe | "Added by the SDBOT-TA WORM!"
|
| U | ResumeFixClocks | resumefix.exe | "Part of the RadeonTweaker utility for overclocking ATI Radeon graphics cards"
|
| X | Roam04 | ActiveX.exe | "Added by the ROAMER-A TROJAN!"
|
| X | RPC DCOM Vulnerability Patch | msgfix.exe | "Added by the RBOT.S WORM!"
|
| X | RpcxWindows Extensions | rpcxwinex.exe | "Added by the RBOT.ACP WORM!"
|
| X | RUNHYPER | hyperx.exe | "PurityScan/Clickspring adware"
|
| N | RxMon | rxmon9x.exe | "Part of Dell Resolution Assistant - ""a diagnostic program that allows you to contact Dell. When factory-installed by Dell |
| N | SBMX | sbmx.exe | SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
|
| X | scandskx.exe | scandskx.exe | "Added by the DLOADR-ARM TROJAN!"
|
| Y | SCHWIZEX | SCHWIZEX.EXE | "Part of ConfigSafe - lets you identify changes to the registry |
| X | SERV PacK2 | nerx.exe | "Added by the SDBOT-ACP WORM!"
|
| X | Serverx | Serverx.exe | "Added by the MADANGEL VIRUS!"
|
| X | Service Host | spoolxx.exe | "Added by the TORVEL WORM!"
|
| X | Service Monitor | WinOcx.exe | "Added by the RBOT-AQJ WORM!"
|
| ? | SGTBox | SGTBox.exe | "Canon scanner driver. Is it required?"
|
| X | ShellEx | ShellEx.exe | "Added by the ANAKHA TROJAN!"
|
| U | SigX | sigx.exe | "SigX is a ""dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3 |
| U | SigXC | SigX.exe | "SigX is a ""dynamic signature image generated based on whatever data your computer sends it though our SigX program. It can display your current Mp3 |
| X | sixtysix | sixtypopsix.exe | "Medload adware"
|
| X | SoundMAX | SoundMAX.exe | "Added by the RIZON-A WORM! Note - this file is placed in the Startup folder itself |
| N | SoundMAX | soundmax.exe | "System Tray icon for Analog Devices SoundMax integrated soundcards. Sound properties can be accessed through the Start Menu or Control Panel"
|
| X | SoundMax Audio Drivers | SndMAX.exe | "Added by a variant of the SDBOT WORM!"
|
| X | soundmix | soundmix.exe | "Added by the AGENT.PGV WORM!"
|
| X | Soundmx | Soundmx.exe | "CoolWebSearch Tapicfg parasite variant"
|
| U | Speaking Clock Deluxe | SpClDlx.exe | "Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date |
| U | SpeedItUpEX | SpeedItUpEx.exe | """Speed-It-Up Extreme is designed to speed of your computer up to 3 times faster and boost your PC available memory"""
|
| X | SpyLax | SpyLax.exe | "SpyLax spyware remover - not recommended |
| X | SpyMaxx | SpyMaxx.exe | "SpyMaxx spyware remover - not recommended |
| Y | Spyware X-terminator | SpywareX.exe | "Spyware X-terminator antispyware from StompSoft |
| X | StdAFX | stdafx.exe | "Added by the DELBOT-AF WORM!"
|
| X | stratas | lockx.exe | "Added by the SDBOT-ADD WORM!"
|
| X | Strng32 | strngbox.exe | "Added by the STRANO WORM!"
|
| X | strtas | lockx.exe | "Added by the SDBOT-AEB WORM!"
|
| X | Sun Java Updater v7.4 | javawx.exe | "Added by the ACKANTTA.B WORM!"
|
| X | SunJavaSched Updater | avamx.exe | "Added by the RBOT-ABJ WORM!"
|
| X | SunJavaUpdateSched | javamx.exe | "Added by the SDBOT-WI WORM!"
|
| X | super | fuckbx.exe | "Added by the LINEAGE-H TROJAN!"
|
| X | SuperHeissSex | SuperHeissSex.exe | "HeissSex premium rate adult content dialer!"
|
| X | svchost | windowsrx.exe | "Added by the AGOBOT-MZ WORM!"
|
| X | Sygate Personal Firewall | Win32x.exe | "Added by the RBOT-KZ WORM!"
|
| X | Symantec Antivirus professional | Symantex.exe | "Added by a variant of the FORBOT WORM!"
|
| X | SysDeskqqfx | qqfx.exe | "Added by the QQPASS.H TROJAN!"
|
| X | sysfrcx | sysfrcx.exe | "Added by the KEYLOG-SCLOG TROJAN!"
|
| U | SysMetrix | SysMetrix.exe | "SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics"
|
| X | Systam13 | resx.exe | "Added by a variant of the IRCBOT BACKDOOR! See here"
|
| X | System | dcomx.exe | "Added by the CIREBOT TROJAN!"
|
| X | System Efficiency Monitor | svchostx.exe | "Added by the KWBOT.E WORM!"
|
| U | System startup | charmapx.exe | Only required if using an oriental language
|
| X | System Updates 4 | mssysfix.exe | "Added by the RBOT-ADU WORM!"
|
| X | System32Ex | System32Ex.exe | "Added by the IRCCONTACT TROJAN!"
|
| X | SystemBackup | mtx.exe | "Added by the MTX VIRUS/WORM!"
|
| X | Systems Service | drivex.exe | "Added by a variant of the RBOT WORM!"
|
| ? | systrax | systrax.exe | "??"
|
| U | SYSTRAYX | SysTrayX.EXE | """SystrayX helps you hide some of the less used icons from the system tray (the hidden icons can still be seen and used in the special SysTrayX menu but will no longer permanently take precious space from your system tray)"""
|
| X | Sysvupex | Sysvupex.exe | "Added by the MEDIAS TROJAN!"
|
| U | TClockEx | TCLOCKEX.EXE | "Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks"
|
| N | Teach In Box | teachbox.exe | Tutoring program that comes with a SystemAX Computer
|
| Y | Tech-In-A-Box | techbox.exe | "Tech-in-a-Box ""provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs |
| X | tempx | tempx.exe | Added by the TEMPEX.A TROJAN!
|
| N | TgAddServer | tgfix.exe | "Software from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech)) and ISPs (such as Comcast |
| U | Tgsetsite | tgfix.exe | "See also TgAddServer. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the ""U"" recommendation"
|
| U | ToolBoxFX | HPTLBXFX.exe | "HP ToolBoxFX - ""provides desktop configuration |
| U | TP4EX | tp4ex.exe | "Supports accessibility features for the TrackPoint stick and associated buttons on IBM/Lenovo ThinkPad notebooks. If features such as ""Click Sound"" |
| U | Tpscrex | Tpscrex.exe | "Lenovo (IBM) ThinkPad hotkey related"
|
| U | TrackPoint Accessibility Features | tp4ex.exe | "Supports accessibility features for the TrackPoint stick and associated buttons on IBM/Lenovo ThinkPad notebooks. If features such as ""Click Sound"" |
| U | TRIXX | TRIXX.exe | "Sapphire TRIXX overclocking tool for the X800 GTO graphics card (and possiby others) - ""push default clock speeds to 560MHz or better"""
|
| X | UnVirex | UnVirex.exe | "UniVrex rogue security software - not recommended |
| X | update service | winx.exe | "Added by a variant of the RBOT WORM!"
|
| X | USB Fixes | wuafix.exe | "Added by the RBOT-ABV TROJAN!"
|
| X | USB Updates 2 | wugfixx.exe | "Added by a variant of the RBOT WORM!"
|
| X | UsrClassEx | UsrClassEx.exe | "Added by the AGENT-KPU TROJAN!"
|
| X | usrgtway.exe | syswrun4x.exe | "Added by the MITGLIEDER.E TROJAN!"
|
| X | uvnx | uvcx.exe | "Added by the DLOADR-AWF TROJAN!"
|
| X | uvnx | uvnx.exe | "Added by the SMALL.CUL TROJAN!"
|
| N | vcdplayx | vcdplayx.exe | "CD emulation part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically"
|
| Y | Vet Alert | vetmsg9x.exe | "Computer Associates "InnoculateIT" and Vet Anti-Virus virus software"
|
| U | washindex | washidx.exe | "Window Washer from Webroot Software. Useful utility that deletes safe to remove files |
| X | WDNS SYSTEM | skybotx.exe | "Added by the MYTOB-BY WORM!"
|
| Y | WebScanX | WebScanX.exe | "From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs |
| X | wgeax | wgeax.exe | "Added by the IRCBOT-TM WORM!"
|
| X | What Frenz | FriendEQUALsuX.exe | "Added by the BHARAT.A WORM!"
|
| X | Whitechix | brightx.exe | "Added by a variant of the SDBOT WORM!"
|
| X | Win Sync montr | winsyncupx.exe | "Added by the RBOT.BYJ BACKDOOR!"
|
| X | WIN-BUGSFIX | WIN-BUGSFIX.EXE | "Added by the LOVELETTER (I LOVE YOU) VIRUS!"
|
| X | win32Kernel | findx.exe | "Added by the BANLOA-EY TROJAN!"
|
| X | WIn32S Java DLL | kavsvx.exe | "Added by the AGOBOT-RZ WORM!"
|
| X | WIN3S2SNDS | winiprtx.exe | "Added by the AGENT.DN TROJAN - known to BOClean as ""CWS/INDEX"" |
| X | WinApi | winapix.exe | Added by a variant of the TIBSER.A downloader TROJAN!
|
| X | WinAvX | WinAvX.exe | "Added by the VIRANTIX TROJAN!"
|
| X | WinAvX | WinAvXX.exe | "Malware installed by different rogue security software including SpyKillerPro. Also detected as the SPYWAD-AR TROJAN!"
|
| X | WinDLL (bix.exe) | "rundll32.exe bix.exe | start" |
| X | WinDLL (ProsFix.exe) | ProsFix.exe | "Added by a variant of the IRCBOT BACKDOOR! The ""ProsFix.exe"" file is found in %System%"
|
| X | WindoFix | WindoFix.exe | "WindoFix rogue system error utility"
|
| X | WindowEnhancer | Winex.exe | "SCBar foistware variant"
|
| X | Windows Configuration Loader | msgfix.exe | "Added by the SDBOT-NP WORM!"
|
| X | Windows DLL Loader | defragfatx.exe | "Added by the POEBOT-F WORM!"
|
| X | Windows DotFix live | msdotfix.exe | "Added by the IRCBOT.XGK BACKDOOR!"
|
| X | Windows Fixer | winfix.exe | "Added by the VIRUT-I VIRUS!"
|
| X | Windows Internet Explorer 6 | firefox.exe | "Added by the SPYBOT.ANA WORM! Note - this is not the Mozilla Firefox web browser which is always located in %ProgramFiles%\Mozilla Firefox. This file is found in %System%"
|
| X | Windows LoL Layer | winlolx.exe | "Added by the RBOT-FOR WORM!"
|
| X | Windows LoL Layer | azypbrx.exe | "Added by the RBOT-GMZ WORM!"
|
| X | Windows MSX drivers | winmsx.exe | "Added by the RBOT-AYG TROJAN!"
|
| X | Windows Network Controller | Win9x.exe | "Added by the WOOTBOT.I WORM!"
|
| X | Windows Networking Monitorin | xmdmx.exe | "Added by a variant of the IRCBOT BACKDOOR! See here"
|
| X | Windows Repair | toxikx.exe | "Added by the SDBOT-ADL WORM!"
|
| X | Windows Security Center Notification Applsee | sysecurex.exe | "Added by a variant of the RBOT-GKX WORM!"
|
| X | Windows svchost | svchostx.exe | "Added by the PUSHBOT.CC WORM!"
|
| X | WINDOWS SYSTEM | skybotx.exe | "Added by the MYTOB-BY WORM!"
|
| X | WINDOWS SYSTEM | xxx.exe | "Added by the MYTOB.CZ WORM!"
|
| X | Windows Taskmanager | lsassx.exe | "Added by the KELVIR.E WORM!"
|
| X | Windows Update | windowsx.exe | "Added by the BANCD-A TROJAN!"
|
| X | Windows Update | leak32x.exe | "Added by the AGENT.ALY BACKDOOR!"
|
| X | Windows Update Center | svthx.exe | "Added by the STUBBOT.A WORM!"
|
| X | Windows Updater Online | winupdatexx.exe | "Added by a variant of the RBOT WORM!"
|
| X | Windows Updates | lsassx.exe | "Added by a variant of the SDBOT WORM!"
|
| X | Windows WMF Fix | winfix.exe | "Added by the RBOT-FTQ WORM!"
|
| X | WindowsRegKey update | winupdatexx.exe | "Added by the RBOT.LW WORM!"
|
| X | windowsxxx | windowsxxx.exe | "Added by the DUBING-A TROJAN!"
|
| X | WinDrv | windrvx.exe | Added by a variant of the TIBSER.A downloader TROJAN!
|
| X | winlogin | win32x.exe | "Browser hijacker |
| X | winlogon service | urx.exe | "Added by the SPYBOT.EN WORM!"
|
| U | winmatrix.exe | WinMatrixXP.exe | "WinMatrix XP - wallpaper replacement that shows different matrix effects (including flowing matrix codes from 'The Matrix' movie) on your desktop"
|
| X | WinMenssage | winmax.exe | "Added by the BANCOS.B TROJAN!"
|
| N | WinMX | WinMX.exe | "WinMX file sharing application"
|
| Y | WinPatrol Explorer | WinPatrolEx.exe | "Part of WinPatrol"
|
| X | WinRPC | winrpcmx.exe | "Added by the BANKER-EEI TROJAN!"
|
| X | Winspl | winsplx.exe | "Added by a variant of the TROLL-A TROJAN!"
|
| X | WinSrv | kn0x.exe | "Added by the HOBBIT.F WORM!"
|
| X | WINTASKMGR | sp2winfix.exe | "Added by the MYTOB.KJ WORM!"
|
| X | Wintbpx.exe | wintbpx.exe | "Added by the ZOTOB.F WORM!"
|
| X | wintnpx.exe | wintnpx.exe | "Added by the ZOTOB.H WORM!"
|
| X | wovax | wovax.exe | "Added by the DAQA.A TROJAN!"
|
| X | WSAConfiguration | svchostx.exe | "Added by the AGOBOT-JV BACKDOOR!"
|
| Y | WUOLService | WUOLService9x.exe | "Remote wakeup status agent. Part of Novell's ZenWorks. Processes Wake-up on LAN requests (turn on a computer remotely on LAN)"
|
| U | WZCBDLService | WZCBDL9X.exe | WZCBDLService Launcher from D-Link - configuration/drivers
|
| U | X Server | X.exe | """XoftWare for Windows"" enables you to run network-based UNIX programs (""X programs"" or ""clients"") side-by-side with Windows applications on your personal computer. You can also share programs and computing resources with host computers connected to your PC over a network"
|
| X | xDRam rar procx | xwinupdaterarx.exe | "Added by the RILER-W TROJAN!"
|
| X | XiD | mmx.exe | "Added by the ANALOGX TROJAN!"
|
| X | XP HOT FIS | kbx.exe | "Added by the FORBOT-GS WORM!"
|
| U | Xtrem parental control | pcx.exe | ParentXtreme - surveillance software. Uninstall this software unless you put it there yourself
|
| U | ZMatrix | matrix.exe | "ZMatrix - ""an animated desktop background which displays streaming characters in a style similar to what was used in the movie 'The Matrix'"""
|
| X | [12 random characters] | blackbox.exe | "IeDriver adware variant"
|
| X | [random characters] | securewinload32x.exe | "Added by the OPTIXP-N TROJAN!"
|
| X | [random name] | ?ti2evxx.exe | "PurityScan adware"
|
| X | [random name] | wox.exe | "Nortel Antivirus rogue security software - not recommended"
|
| X | [various names] | hyandex.exe | "Added by a NTROOTKIT TROJAN variant!"
|
| X | [various names] | hyandex.exe | "Wareout - malware masquerading as a spyware and dialer remover"
|
