NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

Page 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77

78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

• "Y" - Normally leave to run at start-up
• "N" - Not required - typically infrequently used tasks that can be started manually if necessary
• "U" - User's choice - depends whether a user deems it necessary
• "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
• "?" - Unknown

	Startup Name	Process Name	Details
Y	#NAME?	ZkRunOnceR.exe	Internet Security Suite used by ISPs to protect customers against many attacks
X	$sys$crash	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	$sys$momomomochin	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	$sys$umaiyo	$sys$sonyTimer.exe	"Added by the WELOMOCH TROJAN!"
X	(Default)	media_driver.exe	"Added by the TUPEG VIRUS! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X	*Security Center	secctr.exe	"Added by the SDBOT.BRO WORM!"
Y	*StateMgr	statemgr.exe	Windows ME default for System Restore. Do NOT disable!
X	.NET.	msnmgnr.exe	"Added by the DELF.AYF WORM!"
?	00DSKSVR00	desksaver.exe saskda	"Part of Advanced Desktop Shield
U	00DSKSVR01	desksaver.exe tray	"System Tray access to Advanced Desktop Shield
U	00ERSRRRNKY	eraser.exe	"Part of Evidence Exterminator
?	00notify33	NetBrowser.exe	"Part of Best Network Security
X	1	mrcmgr.exe	"Added by the BANKER.RQK TROJAN!"
X	1111swapmgr.exe	1111swapmgr.exe	"Added by the BDOOR-IC BACKDOOR!"
X	123Monitor	SpywareFreeMonitor.exe	"1-2-3 Spyware Free rogue spyware remover - not recommended
U	12Ghosts SetColor	12color.exe	"12Ghosts SetColor - ""Change your desktop icon text colors
U	12Ghosts Tower	12tower.exe	"12Ghosts Tower - ""Quickly access and manage all Ghosts (included in all packages)"""
U	1A:MacVisionTrayMonitor	TrayMonitor.exe	"Part of MacVision by Jeff Bargmann - an discontinued program that makes your PC's desktop look and feel incredibly like that of a Macintosh OS8 computer. Handler that puts the icons that are in your system tray into the MacVision taskbar
Y	1A:Stardock MCP	mcpserver.exe	"Master Control Program for Stardock apps
Y	1A:Stardock TrayMonitor	TrayServer.exe	For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
X	2020Downloader	mssvr.exe	"2020Search Toolbar"
X	252	winmgr.exe	"Added by the LEGMIR-AT TROJAN!"
?	3Com Launcher	Launcher.exe	"Related to networking products from 3Com Corporation. What does it do and is it required?"
X	4-gusdur	gusdur.exe	"Added by the BRONTOK-CR WORM!"
X	456655	explorer.exe	"Added by the BIFROSE-DE TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
U	802.11g Wireless Adatper	Monitor.exe	"Related to wireless card (802.11) adapter/standard. System Tray icon that provides a shortcut to ""Wireless Connection Status"" and allows to turn WL on and off. Supplier unknown. Adapter is miss-spelled"
N	@loha	reminder.exe	"Registration reminder for
N	AAATraySaver	TraySaver.exe	"System Tray management utility from Mike Lin which allows you to hide
X	Aaep	opar.exe	"PurityScan/Clickspring adware"
?	aauclient	ACNUpdater.exe	"Appears to be related to software from Accenture.com"
U	ABC	keylogger.exe	Keystroke logger/monitoring program - remove unless you installed it yourself!
U	Absolute Shield	dseraser.exe	"Absolute Shield Evidence Eliminator - internet history eraser"
U	AbsoluteShield Internet Eraser	cseraser.exe	"AbsoluteShield Internet Eraser - ""protects your privacy by cleaning up all the tracks of your Internet and computer activities"""
X	ABsr	absr.exe	"Added by the AUTOUPDER TROJAN!"
U	AccessManager	AccessMgr.exe	"Part of SmartPipes SecureSite software. ""SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management
U	AcctMgr	AcctMgr.exe	"Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information
U	Acer Assist Launcher	launcher.exe	"Acer Assist - program that provides information about new updates or notices from Acer"
?	Acer Empowering Technology Monitor	SysMonitor.exe	"Part of Acer Empowering Technology. What does it do and is it required?"
U	Acer ePower Management	ePowerTrayLauncher.exe	Launcher for the Acer® PowerSmart Manager power management utility included on some models in the Aspire range of notebooks
N	Acer Tour Reminder	Reminder.exe	Popup reminder to take the tour of your new Acer laptop
U	AClntUsr	AClntUsr.exe	"Altiris AClient Service Windows Tray Icon"
U	Acronis True Image	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
N	Acronis True Image Monitor	TrueImageMonitor.exe	"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
N	Acronis TrueImage Monitor	TrueImageMonitor.exe	"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
N	Acronis*True*Image Monitor	TrueImageMonitor.exe	"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
U	AcronisTimounterMonitor	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
N	AcronisTrueImage Monitor	TrueImageMonitor.exe	"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
N	ActiveWords	AWMonitor.exe	"ActiveWords from ActiveWord Systems
U	Actual Window Manager	ActualWindowManagerCenter.exe	"Actual Window Manager from Actual Tools - ""an innovative desktop organization application which introduces unconventional window controls and also automatic general window operations making your work more productive
U	Actual Window Minimizer	ActualWindowMinimizerCenter.exe	"Actual Window Minimizer - ""allows minimizing any window to task tray notification area or to the edge of the screen"""
U	Ad Blocker	blocker.exe	"Ad Blocker - blocks popups
X	Ad-Eliminator	ad-eliminator.exe	"Ad-Eliminator rogue spyware remover - not recommended
X	AdDestroyer	AdDestroyer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	AdKiller	AD Defender.exe	"Part of the Advanced Spyware Remover rogue spyware remover - not recommended
U	Adobe Gamma Loader	Adobe Gamma Loader.exe	"Adjusts monitor colours across all programs
U	Adobe Gamma Loader.exe	Adobe Gamma Loader.exe	"Adjusts monitor colours across all programs
X	adobemgr	adobemgr.exe	"Added by the ADCLICKER TROJAN!"
X	AdobeReaderPro	rvdjlefr.exe	"Added by the RBOT-CQZ WORM!"
N	AdobeUpdater	AdobeUpdater.exe	Automatic updater for Adobe software - run manually
X	adodemaster	adodemaster.exe	"Downloader of Korean origin
X	ADS Adware Remover	ADS Adware Remover.exe	"ADS Adware Remover
U	AdsCleaner	AdsCleaner.exe	"""AdsCleaner is a powerful ad blocking software designed to stop ads (block banners ad
U	aDSProcMngr	aDSProcMngr.exe	"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
X	Advanced Spyware Remover	Asr.exe	"Advanced Spyware Remover rogue spyware remover - not recommended
X	Advanced Spyware Remover Pro	Asr.exe	"Advanced Spyware Remover rogue spyware remover - not recommended
U	Advanced Uninstaller PRO Installation Monitor	monitor.exe	"Innovative Solutions Advanced Uninstaller PRO - ""easy-to-use suite for uninstalling applications and keeping your computer fast
X	advanceddefender	advanceddefender.exe	"Advanced Defender rogue security software - not recommended
U	Advertising Killer	Akiller.exe	"Advertising Killer - popup stopper"
X	Adware Punisher	AdwarePunisher.exe	"Adware Punisher rogue spyware remover - not recommended
X	Adware Punisher Monitor	AdwarePunisher_monitor.exe	"Adware Punisher rogue spyware remover - not recommended
X	AdwareProtector	AdwareProtector.exe	"Part of rogue security tools
U	AEFltrs Application	AESTFltr.exe	"Part of the XP installation of the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
U	AESTFltr	AESTFltr.exe	"Part of the XP installation of the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
?	AeXSWDUsr	AeXSWDUsr.exe	"Altiris Express NS Client Manager software. Is it required?"
X	agentsvr	agentsvr.exe	"Detected by Kaspersky as Monker.A adware. Note - do not confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the Windows\Msagent folder"
N	AIM Logger	AIMLogger.exe	"AIM Logger - saves AIM (AOL Instant Messenger) conversations to log files. Can be started when you are using AIM"
X	AIM reminder	AIM reminder.exe	"Added by the BUDDY.E TROJAN!"
U	AimMonitor	AimMonitor.exe	"AIM Monitor Sniffer surveillance software for the AIM instant messenger. Uninstall this software unless you put it there yourself"
U	AKiller	akiller.exe	"Advertising Killer - popup stopper"
?	AlarmWatcher	AlarmWatcher.exe	"Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?"
N	Album Fast Start	ABMTSR.EXE	"Scanner software
U	Alcmtr	ALCMTR.EXE	"Realtek Azalia Audio - Event Monitor
X	Alcmtr	Malware Doctor.exe	"MalwareDoc rogue security software - not recommended
U	AlcxMonitor	Alcxmntr.exe	"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
X	alerter	alerter.exe	"MAHA.F spyware"
X	Alevir	Alevir.exe	"Added by the OPASERV-A WORM!"
X	AlfaCleaner	AlfaCleaner.exe	"AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware"
X	Altnet	points manager.exe	"Altnet TopSearch adware"
X	AltnetPointsManager	points manager.exe	"Altnet TopSearch adware"
N	Aluria Security Center	SecurityCenter.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	"Always On Top Maker - utilty to enable an application to always be displayed ""on top"" of others on the desktop"
U	AMO_Taskplaner.exe	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U	AMO_TA~1	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
N	Anapod Manager	anamgr.exe	"Anapod Explorer from Red Chair Software ""is the most advanced Windows iPod® software available
?	ANIWZCSService	WZCSLDR.exe	D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
Y	ANONYMIZER_SPYWAREKILLER	SpyWareKiller.exe	"Anonymizer Spyware Killer
U	antidialer.co.uk	Dialer_Watcher.exe	"Dialer_Watcher is an application that allows you to detect dialers on your computer"
X	antihost	ahr.exe	"Added by the BANCBAN-QJ TROJAN!"
X	Antimalware Doctor.exe	Antimalware Doctor.exe	"Antimalware Doctor rogue security software - not recommended
X	antispy	ANTIVIR.exe	"IE AntiVirus rogue security software - not recommended
X	antispysoldier	antispysoldier.exe	"AntiSpyware Soldier rogue spyware remover - not recommended
X	AntispySpider	antispyspider.exe	"AntiSpySpider rogue spyware remover - not recommended
X	AntiVerminser	AntiVerminser.exe	"Variant of the Antivermins rogue security software - not recommended
X	AntivirusBEST	Installer.exe	"Installer for the AntivirusBEST rogue security software - not recommended. Removal instructions here"
U	AnVir	AnVir.exe	"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Security Suite	AnVir.exe	"AnVir Security Suite - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Task Manager	AnVir.exe	"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Task Manager Free	AnVir.exe	"AnVir Task Manager Free - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
U	AnVir Task Manager Pro	AnVir.exe	"AnVir Task Manager Pro - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
X	AnvTrgr	AnvTrgr.exe	"AntivirusTrigger rogue security software - not recommended
?	anycom bluetooth	ftflauncher.exe	"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
X	AOL Instant Messenger	aimsgr.exe	"Added by the IRCBOT.N TROJAN!"
X	AOL Messenger	aolmsngr.exe	"Added by the SDBOT-JF WORM!"
U	AOL Spyware Protection	AOLSP Scheduler.exe	AOL's spyware protection program
X	aolupdater.exe	aolupdater.exe	"Added by a variant of the IRCBOT TROJAN!"
X	APcDefender	APcDefender.exe	"APcDefender rogue security software - not recommended
X	apmanager.exe	apmanager.exe	"AP Manager ransomware download manager - not recommended
N	AppleSyncNotifier	AppleSyncNotifier.exe	"From WinPatrol PLUS by BillP Studios - ""This file installs with iTunes and is used when syncing your iPhone
X	Application Explorer	appexplr.exe	"Added by the AGENT-NMO TROJAN!"
N	Application Launcher	Application Launcher.exe	"System Tray access to the Sony Ericsson PC Suite and HTC Sync mobile phone management utilities. Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
X	ARCHIVE CONTROL	fixupdattr.exe	"Added by the MYTOB.GU WORM!"
X	ArmorDefender	ArmorDefender.exe	"ArmorDefender rogue security software - not recommended
X	ASC-AntiSpyware	WinCleaner.exe	"WinCleaner 2009 rogue security software - not recommended
X	ASDPLUGIN	100176br.exe	"AsdPlug premium rate adult content dialer"
N	ASE Scheduler	ASE Scheduler.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
U	Ashampoo Magical Optimizer Taskplaner	AMO_Taskplaner.exe	"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
U	Ashampoo PopUpBlocker	PopUpKiller.exe	"Ashampoo popup blocker
N	ashampoo UnInstaller Watcher	UIWatcher.exe	"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
U	ASM	ASMonitor.exe	"Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses
U	Asmw Soft Popups Burner	popups burner.exe	"Popup blocker
?	AsusACPIServer	AsAcpiSvr.exe	"Part of the ACPI driver for the Asus Eee PC range. What does it do and is it required?"
X	atidriver	reaIplayer.exe	"Added by the WARPIGS-E WORM! Note the uppercase ""I"" in the filename
N	aTuner	atuner.exe	"aTuner - tweak tool for GeForce based graphics cards"
X	AtxBrw	Iexplor.exe	"""Pop Marketing"" adware"
X	Audcntr	audcntr.exe	"Added by the GEMA TROJAN!"
N	AudioCommander	AudioCommander.exe	"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
N	AudioCommander Application	AudioCommander.exe	"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
N	AudioCommanderVista	AudioCommander.exe	"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
Y	Authentic-ID Toolbar	wintmr.exe	"System Tray access to Child Control parental control software by Salfield"
U	Auto Run Software for Photo Frame	PhotoManager.exe	"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
U	Auto Switch	TASKBAR.exe	Related to 2-port Bitronics AutoSwitch kit from Belkin
N	Auto T Bar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
U	Autobar	autobar.exe	"Connect buttons on the keyboard for internet direct access
X	Autoloaderaproposclient	Apropos_Client_Loader.exe	"AproposMedia adware"
X	Autoloaderaproposclient	cxtpls_loader.exe	"AproposMedia adware"
X	AutoLoaderEnvoloAutoUpdater	auto_update_loader.exe	"Envolo/AproposMedia adware updater"
U	AutoSizer	AUTOSIZER.EXE	"AutoSizer - utility that automatically maximizes windows when they're opened"
N	autotbar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
X	AV	Antivir.exe	"Antivir rogue security software - not recommended
X	AveoAttune	atmdlusr.exe	"Aveo Attune automated helpdesk software - adware/spyware"
X	AVG Grisoft Updater	updater.exe	"Added by the AGOBOT-OT WORM!"
Y	AVG7_AMSVR	AVGAMSVR.EXE	"This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher"
Y	avgamsvr.exe	Avgamsvr.exe	"This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher"
Y	avgmsvr.exe	avgmsvr.exe	"AVG Anti-Virus 7.0 related"
X	Avira Anti-Virus Pro 2008	explorear.exe	Added by an unidentified WORM or TROJAN!
X	AvirTr	AvirTr.exe	"AntivirusTrigger rogue security software - not recommended
Y	AVKBar	AVKBar.exe	"GData AntiVirusKit Anti-virus"
X	Avpr	avpr.exe	"Added by the MYDOOM.AF WORM!"
X	avptask	expl0rer.exe	"Added by the AGENT.JJO TROJAN!"
Y	avx communicator	xcommsur.exe	"Anti-virus part of BitDefender virus scanner/firewall"
U	AWMON	Ad-Monitor.exe	"F-Secure Anti-Spyware"
U	AXIS Print System DriverScanner	DriverScanner.exe	"Part of AXIS Print System from AXIS Communications - ""adds printer discovery
U	AXIS Print System DriverServer	DriverServer.exe	"Part of AXIS Print System from AXIS Communications - ""adds printer discovery
X	AXPDefender	AXPDefender.exe	"Advanced XP Defender rogue security software - not recommended
X	AXPFixer	AXPFixer.exe	"AdvancedXPFixer rogue security software - not recommended
U	BackgroundSwitcher	BackgroundSwitcher.exe	"John's Background Switcher (or JBS for short) periodically changes the background image on your computer (like every hour or every day) to something interesting"
X	Badx	HELLRAIDER.EXE	"Added by the MINDCTRL.A BACKDOOR!"
U	Battery Scope	batmgr.exe	Monitors battery levels on a notebook/laptop PC
U	BatteryBar	batterybar.exe	"BatteryBar - displays battery usage
Y	batterymiser	batterymiser.exe	"Battery Miser power management utility for LG Notebooks"
U	Bayden SlickRun	sr.exe	"""SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords)
N	BBLauncher.exe	BBLauncher.exe	"BounceBack Professional - back-up software"
U	BellSouthAlertManager.exe	BellSouthAlertManager.exe	"Related to BellSouth Alert Manager"
X	BestPopUpKiller	BestPopupKiller.exe	"Popup killer by Swanksoft - not recommended
U	BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}	NMBgMonitor.exe	"Associated with Nero Scout
U	BHR	BHR.exe	"Browser Hijack Retaliator - recovers your browser after it has been hijacked by spyware
U	BioniXWallpaper	BioniX Wallper.exe	"BioniX Wallpaper Changer - ""the most advanced wallpaper changer/wallpaper manager software in the world"""
Y	BitDefender Communicator	xcommsvr.exe	"BitDefender antivirus"
N	BJ Printer Status Monitor	Cjstsr.exe	Canon BJ printer status monitor
X	blah service	msnmsgrr.exe	"Added by the RBOT.PZ WORM!"
X	blah service	tazkmgr.exe	"Added by the RBOT.UA WORM!"
N	BlazeChanger	FBZPaper.exe	"Ember graphic file viewer
?	BlazeServoTool	MediaDetector.exe	"Related to BlazeDVD from BlazeVideo - which ""is leading powerful and easy-to-use DVD player software."" What does it do and is it required?"
X	BlockChecker	Block-checker.exe	"BlockChecker adware"
X	BlockKeeper	BlockKeeper.exe	"BlockKeeper rogue security software - not recommended
X	BlockProtector.exe	BlockProtector.exe	"BlockProtector rogue security software - not recommended
X	BlockScanner	BlockScanner.exe	"BlockScanner rogue security software - not recommended. A member of the WiniGuard family"
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
X	BlockWatcher	BlockWatcher.exe	"BlockWatcher rogue security software - not recommended
U	blsloader	blsloader.exe	"BellSouth ISP Internet Tools"
N	Blubster	Blubster.exe	"Related to Blubster Music sharing service"
U	BO1HelperStartUp	Bo1helper.exe	"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	BOINC Manager	boincmgr.exe	"BOINC manager - ""controls the use of your computer's disk
X	boler.exe	syser.exe	"Added by the RBOT-AYS WORM!"
N	BookmarkCentral	BMLauncher.exe	"Bookmark Express - "offers a more flexible way to manage Web site bookmarks
X	Boot Server	bootserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	BootLoader	BootLoader.exe.vbs	"Added by the WATERWORKS WORM!"
N	Bose Wave/PC Monitor	wavepcmonitor.exe	"System Tray access for this system (more info on the system here). Available via Start -> Programs"
X	Bouncer RunStartup	bouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
U	Break_Reminder	BREAK REMINDER.exe	"Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here"
Y	Bredbandsbolaget	servicecenter.exe	"Related to the Brebband Swedish Broadband provider"
Y	Browser Hijack Blaster	bhblaster.exe	"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	BS Mediaplayer	bsplyr.exe	"Added by the RBOT-OU WORM!"
N	BS Player	bsplayer.exe	"BSplayer - A video player used to play avi
N	bsplayer	bsplayer.exe	"BSplayer - a video player used to play avi
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U	bugwatcher service	bugwatcher.exe	"
N	BulletProof FTP Server	bpftpserver.exe	"BulletProof FTP Server"
Y	BullGuard XComm	XCOMMSVR.EXE	"Part of Bullguard antivirus"
X	buohxqtfswb	gcjydr.exe	"Added by the AGENT-NRC TROJAN!"
X	ByteDefender	ByteDefender.exe	"ByteDefender rogue security software - not recommended
?	BZEnvironmentVariableCollector	BZEnvironmentVariableCollector.exe	"Part of BlazentAgent from Blazent who provide ""outsourcing governance automation for IT Outsourcing (ITO) relationships"". What does it do and is it required?"
?	BZUtilizationCollector	BZUtilizationCollector.exe	"Part of BlazentAgent from Blazent who provide ""outsourcing governance automation for IT Outsourcing (ITO) relationships"". What does it do and is it required?"
N	C-Media Mixer	Mixer.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	C:Program FilesNetMeterNetMeter.exe	NetMeter.exe	"""Net Meter is a small
X	C:WINDOWSIEXPLOR.EXE	IEXPLOR.EXE	"""Pop Marketing"" adware"
Y	CacheMgr	CacheMgr.exe	"Sophos Antivirus Remote Update"
U	Calendar	Calendar.exe	"This entry can be added by PlainSight Desktop Calendar and older versions of Desktop iCalendar from Desksware and the older Calendar 200X - which is no longer supported by or available from the author"
?	Calendar 200X Monitor	calmonitor.exe	"Background task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one"
N	Calendar 200X Reminder	calendar.exe	"Part of Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. Displays reminders for holidays
X	Call Function System32	sddriver.exe	"Added by a variant of the SDBOT TROJAN!"
?	calmonitor	calmonitor.exe	"Background task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one"
U	Camera Assistant Software	traybar.exe	Camera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam
?	CameraApplicationLauncher	CameraApplicationLaunchpadLauncher.exe	"Supports the integrated webcam on IBM/Lenovo Thinkpad notebooks. What does it do and is it required?"
X	CaptionMgr32	crssr.exe	"Added by the ZAR.A WORM!"
X	CARPserver	CARPserver.exe	"Added by the BANKER-AN TROJAN!"
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	"Cashsurfers CashBar Navigator - ""The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"""
X	ccAppr	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
Y	CCDoctorLogonTesting	ccdoctor.exe	"Checks your system to make sure it's configured properly for running IBM Rational ClearCase
Y	ccenter	CCenter.exe	"RAV AntiVirus"
Y	CcEvtMgr	ccEvtMgr.exe	"Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via ""ccApp"" and was not required as a seperate entry but a recent update changed this"
U	CCleaner	CCleaner.exe	"CCleaner from Piriform Ltd. - ""is a freeware system optimization
X	ccreg	explorer.exe	"Added by the ZCREW BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	ccRegVfY	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
Y	ccSetMgr	ccSetMgr.exe	"Part of Norton AntiVirus 2004. What does it do?"
U	ccUpdMgr	ccUpdMgr.exe	"In Loco Parentis remote surveillance software. Uninstall this software unless you put it there yourself!"
U	ccWasher	aolwasher.exe	"Webroot Cache & Cookie Washer - cleaning browser tracks
Y	CCWinTray	wintmr.exe	"System Tray access to Child Control parental control software by Salfield"
N	CD Storage Master	cdstorager.exe	"CD Storage Master - a program designed to catalog CD information
X	CentralProcessor	taskimgr.exe	"Added by the BANCOS.J TROJAN!"
N	CesarFTP FTP Server	server.exe	"CesarFTPd - FTP server"
N	cfFncEnabler.exe	cfFncEnabler.exe	"Toshiba ""Config Free"" wireless network manager on their range of laptops"
Y	cfgintpr	cfgintpr.exe	"Configuration Interpreter - part of Tiny Personal Firewall V4"
U	CGServer	cgserver.exe	"Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs"
N	Chcenter	chcenter.exe	"IMSI HiJaak - ""the easiest way to convert
U	ChicoSys	webtmr.exe	"Child Control parental control software"
U	ChikkaDefault	ChikkaLauncher.exe	"Chikka PC text messanger and IM client"
U	ChineseStar	cstar.exe	Chinese language support software
U	CHIPDRIVESmartcardManager	SCMgr.exe	"ChipDrive Smartcard software"
X	CHK Disker	chkdsker.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Ci Svr	cisvr.exe	"Added by the IRCBOT.AWN BACKDOOR!"
U	Cisco Systems VPN Client	ipsecdialer.exe	"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
N	CISrvr Program	CISRVR.EXE	Related to internet setup on Compaq PC's
X	Cleanator	Cleanator.exe	"Cleanator rogue privacy program - not recommended
N	Client Access Check Version	cwbckver.exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	Client Access Service	CwbSvStr.Exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	ClipTrakker	ClipTrakker.exe	"Cliptrakker - clipboard extender"
X	Clock Manager	amsngr.exe	"Added by the SDBOT-XM TROJAN!"
X	cms	iserver.exe	"Added by the DLOADER-WK TROJAN!"
X	COM+ EventSystem Services	ECSERVER.EXE	"Added by a variant of the SDBOT WORM!"
X	COM++ System	exploier.exe	"Added by the LOVGATE.Z WORM!"
U	com.codeode.cactusspamfilter	cactusspamfilter.exe	"Cactus Spam - free easy-to-use spam blocker"
N	CommCtr	commctr.exe	"""Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!"". Available via Start -> Programs"
Y	Communications_Helper	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
Y	Communications_Helper.exe	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
Y	COMMUNICATOR	Communicator.exe	"Part of Microsoft Office Communicator
N	Compaq Computer Corp SCCenter Module	SCCENTER.EXE	For Compaq PC's. Part of Backweb
X	Compaq Sound Drivers For WINDOWS	sounddr.exe	"Added by the SDBOT-XG WORM!"
X	ComStart	Trojan Guarder.exe	"TrojanGuarder rogue security software - not recommended"
X	Config Loadatiorin	I3Explorer.exe	"Added by the SDBOT.H TROJAN!"
X	Config Loader	SYSMGR.EXE	"Added by the AGOBOT.C WORM!"
X	Configuration Loader	confgldr.exe	"Added by the GAOBOT.GEN!POLY WORM!"
X	Configuration Loader	WinHelper.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Configuration Loader	DVD-Player.exe	"Added by a variant of the SDBOT WORM!"
X	Configuration Loader	configldr.exe	"Added by the AGOBOT-PP TROJAN!"
X	Configuration Loader	msnmsgr.exe	"Added by the SDBOT-SO WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Configuration Loader 2	confuldr.exe	"Added by the AGOBOT-FC WORM!"
X	Configuration Loading	configldr.exe	"Added by the AGOBOT-EC WORM!"
X	Configuration Manager	Cnfgldr.exe	"Added by the SDBOT TROJAN!"
N	Conmgr	conmgr.exe	Starts Winfax pro at startup
U	ConMgr.exe	conmgr.exe	Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
N	CONNECTAuto Update	CONNECTScheduler.exe	"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
N	Connection Manager	CManager.exe	SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
N	CONNECTScheduler	CONNECTScheduler.exe	"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
X	conscorr	conscorr.exe	"VX2.Transponder parasite updater/installer related"
U	ContentTransferWMDetector.exe	ContentTransferWMDetector.exe	"Part of Sony's Content Transfer Software which ""provides an easy way to transfer music
U	Control Center	Center.exe	"Associated with Hawking Technologies
Y	ControlCenter	ctlcntr.exe	"Part of Lenovo's (IBM) ThinkVantage Fingerprint Software - used on laptops and keyboards with integrated fingerprint readers"
U	CookieJar	Cookiejar.exe	"Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return. No longer being actively supported"
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
U	Copy handler	Copy Handler.exe	"Copy Handler lets you copy between hard disks
U	CoreCenter	CoreCenter.exe	"MSI Core Center - motherboard utility for monitoring CPU speed
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBrowser.exe	Registration reminder for CorelDRAW 10
N	CorelMedia FoldersIndexer8	MFindexer.exe	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
?	CP	CopyProtectionNotifier.exe	"Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition"
X	CPU Manager	cpumgr.exe	"Added by the PANDEM.B WORM!"
U	CPU Power Monitor	CpuPowerMonitor.exe	"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme). Associated with the ""Energy Saving"" feature of AI Gear - which ""is a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features."" Part of AI Suite"
U	Creata Mail	JMSrvr.exe	"Creata_Mail. Smileys
X	Create A Monster	createAMonster.exe	"Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related"
N	CreateCD_Reminder	reminder.exe	Reminder to create system recovery CD/DVDs on a Sony Vaio laptop or desktop
N	Creative Launcher	CTLauncher.exe	For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
U	Creative Live! Cam Manager	CTLCMgr.exe	"Creative Live! Cam Manager"
N	Creative PCI Audio Configuration Utility	starter.exe	"System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer"
X	CsimPlayer	CsimPlayer.exe	"Added by the KOOBFACE-AD WORM!"
U	CSS Server	CSSServer.exe	"ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself"
U	CTCMonitor	CTCMonitor.exe	"Click-to-Convert - document-to-HTML or doc-to-PDF converter. Only required if you are going to use the File -> Print method of using Click-to-Convert. If converting directly from MS Office
X	ctfmon	msnmsgr.exe	"Added by the BDOOR-JV BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	ctfmoon	microsoftconfigurator.exe	"Added by the DELF-ALS TROJAN!"
U	CTHELPER	CTHELPER.EXE	"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
X	CTHelper	cthelper.exe	"Added by the RBOT-XB WORM! Note - do not confuse with the Creative application of the same name described here"
N	cursor	Screendragon_VS_Taskbar.exe	"ScreenDragon video player"
X	cvmonitor.exe	cvmonitor.exe	"Added by the SDBOT.BV WORM!"
N	cwbckver	cwbckver.exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
N	cwbsvstr	cwbsvstr.exe	"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
X	cwriter	cwriter.exe	"Part of PcRaiser
N	CXMon	Hpi_Monitor.exe	Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
U	Cyber-Defender 2003	uwcdsvr.exe	"
N	Cyber-shot Viewer Media Check Tool	SPUVolumeWatcher.exe	"Part of the Sony Picture Uility software supplied with Sony Cyber-shot digital cameras. Automatically invokes an import process if the camera is connected and has media on it"
U	CyberLat Ram Cleaner	CLRamCleaner.exe	"CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	Daily Weather Forecast	weather.exe	"Added by the DLOADER-IP TROJAN!"
X	Data Layer 2	datalayer.exe	"Added by the RBOT-BNF WORM! Note - do not confuse with the legitimate Nokia file sharing the same filename - this one is located in %System%"
X	DataHealer	DataHealer.exe	"DataHealer rogue security software - not recommended
U	DataKeeper	DataKeeper.exe	"PowerQuest DataKeeper (now owned by Symantec) backup software"
Y	DataLayer	DataLayer.exe	"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
N	DataViz Inc Messenger	DvzIncMsgr.exe	"Installed with DataViz ""Documents to Go"" software"
N	DataViz Messenger	DvzMsgr.exe	"DataViz Documents to Go - "allows you to use your Word
X	Date Manager	datemanager.exe	"Date Manager - calender program. Spyware/adware based provided by The Gator Corporation. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	DateMngr	DATEMNGR.EXE	"Added by the SPYBOT-BR BACKDOOR!"
X	dbar_starter	starter.exe	"Deskbar adware - adds a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com.com"
U	DC300 Monitor	cmonitor.exe	Monitor for a Acer DC300 digital camera
X	DCE Manager	dcemgr.exe	"Added by the TUMAG TROJAN!"
X	DDialler	DDialler.exe	Adult content dialler
X	DealHelperBrwsr	dhbrwsr.exe	"DealHelper adware"
X	DebugMonitor	debugmonitor.exe	"Added by the MYDOOM.BG WORM!"
U	Default Manager	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
U	DefMgr	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
U	DefragTaskBar	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	defragTaskBar.exe	defragTaskBar.exe	"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
U	Dell AIO Printer A920	dlbkbmgr.exe	System Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A940	dlbabmgr.exe	System Tray application for the Dell Photo AIO Printer 940 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell AIO Printer A960	dlbfbmgr.exe	System Tray application for the Dell Photo AIO Printer 960 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell DataSafe Scheduler	DataSafeOnlineScheduler.exe	"Scheduler for Dell DataSafe™ Online which ""helps protect your music
U	Dell PanelMgr	SSMMgr.exe	"Monitors ink levels
U	Dell Photo AIO Printer 922	dlbtbmgr.exe	System Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons
U	Dell Photo AIO Printer 942	dlbubmgr.exe	System Tray application for the Dell Photo AIO Printer 942 that enables scan or fax functions to run directly from the printer via the buttons
N	DELL Webcam Manager	DellWMgr.exe	Dell Webcam Manager - Webcam management software provided on Dell PCs
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
U	desksaver	desksaver.exe	"Part of Advanced Desktop Shield
U	DeskSaver	DeskSaver.exe	"DeskSaver from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". The Pro version also includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
U	DeskSaver Pro	DeskSaver.exe	"DeskSaver Pro from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". Includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
U	desksaver.exe	desksaver.exe	"Part of Advanced Desktop Shield
Y	Desktop Armor	DesktopArmor.exe	"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
U	Desktop Calendar	Desktop Calendar.exe	"Desktop Calendar - ""Desktop Calendar is a highly customizable calendar program that turns your desktop into a traditional wall calendar
U	Desktop iCalendar	Calendar.exe	"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
U	Desktop iCalendar	Desktop iCalendar.exe	"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
U	Desktop iCalendar.exe	Desktop iCalendar.exe	"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
Y	DesktopArmor	DesktopArmor.exe	"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
N	desktopmgr	desktopmgr.exe	"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds
N	Detector	detector.exe	"USB port detector for LG scanners. Sits in the System Tray
X	Deus Cleaner	DCleaner.exe	"Deus Cleaner rogue system cleaner utility - not recommended"
X	Device Manager	wfxmgr.exe	"Added by the RBOT.AJU WORM!"
U	Devices	olesvr.exe	"Salfeld Child Control - parental control software"
X	DHCP Server	regsvr.exe	"Added by the RBOT-PR WORM!"
U	Dialgo SDK	PhoneAnswer.exe	"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID
U	Digisoft AntiDialer	AntiDialer.exe	"Digisoft AntiDialer"
?	DISCover	DISCover.exe	"Related to DISCover Drop from Digital Interactive Systems Corporation. What does it do and is it required?"
U	DiscUpdateManager	DiscUpdMgr.exe	"Disc Update Manager for Digital interactive's DISCover Console. Provider of on-demand video games"
N	DiscUpdateManager	DiscUpdateMgr.exe	"DISCover from Digital Interactive Systems Corporation Inc. ""The company's patented Drop 'n' Play technology provides a simple
U	DiscWizardMonitor.exe	DiscWizardMonitor.exe	"Seagate DiscWizard - hard disk utility for Seagate's SATA and PATA (IDE) drives"
U	Disk Cleaner	DiskCleaner.Exe	"Hard disk management part of TuneUp Utilities from TuneUp Distribution GmbH"
X	Disk Defragmentation Loader	pmsvcr.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Disk Manager	diskver.exe	"Added by the RBOT.AQT WORM!"
U	DiskSuite	aDSProcMngr.exe	"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
U	Disk_Monitor	Disk_Monitor.exe	"Multi-media
X	Dispatcher	dispatcher.exe	"Added by the DLOADR-AS TROJAN!"
X	dispenter	dispenter.exe	"Added by the AGENT-MKK TROJAN!"
X	DivX Player	DivXPlayer.exe	"Added by a variant of the RBOT WORM!"
X	DIVX Video Player	DIVXPloyer.exe	Added by an unidentified WORM or TROJAN!
X	dlder	dlder.exe	"Dlder spyware. Also creates a fake ""explorer.exe"" file and can be installed via versions of Grokster
X	Dlite	dllmanager.exe	"Added by the WOOTBOT.DN WORM!"
X	Dlload	killer.exe	"Added by the KILLAV-FK TROJAN!"
N	dlmMgr	AdobeDownloadManager.exe	"Adobe Download Manager - ""can prevent you from having to start from the beginning should your download process be interrupted
X	DM mgr	dm_mgr.exe	"Added by the JITTAR TROJAN!"
N	DMAScheduler	DMAScheduler.exe	"Related to DigitalMedia Plus Archiver. This program is non-essential process to the running of the program
U	DMHotKey	DMLoader.exe	HotKey access to the Samsung Display Manager on laptops and ultra-mobiles that support it - such as the M55 and Q1
N	DMILDR	dmildr.exe	"Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
X	dmloader	dmloader.exe	"Added by a variant of the RBOT WORM!"
U	DMXLauncher	DMXLauncher.exe	"Part of Dell's Media Experience
X	DM_server	dmserver.exe	"Comet Cursor adware"
N	Dnar	Dnar.exe	"Installed on some Dell workstations and DMI related. Tries to access the internet and is known to not be required - but what does it do?"
X	DNS Service	dnsresolver.exe	"Added by the RBOT-PQ WORM!"
X	dnscleaner	dnscleaner.exe	"CoolWebSearch parasite variant"
X	DocTor	Doctor.exe	"Added by the DOTOR.A WORM!"
X	Doctor Antivirus 2008	antvr.exe	"Doctor Antivirus 2008 rogue security software - not recommended
U	Document Manager	docmgr.exe	"Wave Systems Corp. Document Manager - ""provides secure storage and management capabilities for file and folder level encryption"""
X	Domain Name Resolve Service	dnsresolver.exe	"Added by the KIMAN.A WORM!"
N	DoroServer	DoroServer.exe	"Doro PDF Writer from The SZ Development. All what you need for creating pdf files"
N	Download Wonder	DownloadWonder.exe	"Download Wonder from Forty Software. Download manager for resuming downloads
N	dptracker	dptracker.exe	"CamTrack webcam software that enhances the way people video chat"
X	DRam rar proc	winupdaterar.exe	"Added by a variant of the IRCBOT TROJAN!"
X	dreams	server.exe	"Added by a variant of the SDBOT WORM!"
?	dregfix	ph_finder.exe	"??"
?	DrvListnr	DrvListnr.exe	"Analog Devices SoundMAX soundcard related. What does it do and is it required?"
U	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
X	drvsyskit	hidr.exe	"Added by the BAGLE.HR WORM!"
X	drvsyskit	hldrrr.exe	"Added by the BAGLE.QU TROJAN!"
U	DT 11Mbps WLAN PC Card Station	DTCARDMonitor.exe	11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
U	DT 11Mbps WLAN USB Station	DTUSBMonitor.exe	11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
N	DU Meter	DUMETER.EXE	"Hagel Technologies internet bandwidth monitor"
U	DualCoreCenter	StartUpDualCoreCenter.exe	"Unified control center for overclocking both the graphics card and the CPU
N	Dulux WeatherShield WeatherDesk	weather.exe	"Dulux WeatherShield WeatherDesk - latest weather information from across Australia"
X	Dumeter Services	dumeter.exe	"Added by the SDBOT-AEQ WORM!"
N	DVDLauncher	DVDLauncher.exe	"Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion"
N	DW4	Weather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature
N	DW4	DesktopWeather.exe	"Desktop Weather 4 by The Weather Channel - provides current temperature
N	DW6	DesktopWeather.exe	"Desktop Weather 6 by The Weather Channel - provides current temperature
U	DWHeartbeatMonitor	DWHeartbeatMonitor.exe	DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
X	DxLoad	DX3DRndr.exe	"Added by the GIBE.B WORM!"
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
N	EarthLink ToolBar 5.0	etoolbar.exe	"EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar
U	EasyKeyboardLogger	EasyKeyboardLogger.exe	"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	easyServ	Server.exe	"Added by the EASYSERV TROJAN!"
X	EasySpywareCleaner	EasySpywareCleaner.exe	"EasySpywareCleaner rogue spyware remover - not recommended
X	eBay Toolbar	EBAYTBAR.EXE	"eBay Toolbar - reportes as spyware as it "phones home""
N	ECenter	EULALauncher.exe	End User License Agreement (EULA) launcher - related to Dell E-Center/Google Toolbar
U	eDataSecurity Loader	eDSloader.exe	"Part of Acer Empowering Technology. ""Acer eDataSecurity Management is a handy file encryption utility that protects files from being accessed by unauthorized persons
N	edexter	edexter.exe	"eDexter supplements internet filtering by substituting local images for filtered images in order to prevent browser stalls and other annoyances. Can be activated manually when starting the browser"
N	EDLoader	DTLoader.exe	Effective Desktop from MiniStars Software - desktop management software no longer being supported
X	Eech	hoor.exe	"PurityScan adware"
N	EEventManager	EEventManager.exe	"Part of the Epson Creativity Suite supplied with their multi-function printer/scanners
X	EliteProtector	EliteProtector.exe	"EliteProtector rogue spyware remover - not recommended
U	EMMeter	EMMeter.exe	"""Express Meter lets you track and manage software usage so you can avoid purchasing and supporting applications that aren't being used
?	Empowering Technology Launcher	eAPLauncher.exe	"Part of Acer Empowering Technology. What does it do and is it required?"
?	EmpoweringTechnology	Framework.Launcher.exe	"Part of Acer Empowering Technology. What does it do and is it required?"
N	ENCMONITOR	monitor.exe	The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it
U	Encompass_ENCMONTR	ENCMONTR.EXE	Optional simple browser from Yahoo (Encompass)
N	Energizer FileSaver	Energizer FileSaver.exe	"Energizer FileSaver - UPS back-up utility for Energizer UPS products. From their Tech Support staff this is known to have a memory leak since it's release - with no fix planned! It will grab 2-5 handles per second and crash the average system in less than 3 days - therefore not recommended"
?	ENSApServer2_0	APSERVER.EXE	"Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required?"
U	EnsoniqMixer	starter.exe	"Puts the Ensoniq mixer in system tray. From Ensoniq Technologies ""Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used"". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility"
U	Enterra Icon Keeper	IcnKeepr.exe	"Icon Keeper - ""tool to save and restore icon positions on the desktop"""
U	ePrompter	ePrompter.exe	"ePrompter - E-mail notification software"
U	EpsonPhotoStarter	EPSON_PhotoStarter.exe	Only needed if you want to make full use of the capabilities of an Epson printer that included this
U	Eraser	eraser.exe	"Eraser - ""an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns"". This entry starts the Scheduler with Windows and provides a System Tray icon for on-demand access. Located in %ProgramFiles%\Eraser"
U	eraser	eraser.exe	"Part of Evidence Exterminator
U	eraser.exe	eraser.exe	"Part of Evidence Exterminator
U	eRecoveryService	Monitor.exe	"Part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
N	Error Nuker	ErrorNuker.exe	"ErrorNuker registry cleaner - only required if you want the application to run a scan at startup. The program can be launched manually if required"
X	errorhandler	errorhandler.exe	"ErrorHandler adware"
X	EScorcher	escorcher.exe	"Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead"
X	ethernet	msnger.exe	"Added by a variant of the SDBOT WORM!"
U	EVENTLISTENER	EvLstnr.exe	Used with a Nikon digital camera to recognize when the camera is plugged in
N	eventmgr	eventmgr.exe	Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
X	eventwvr	eventwvr.exe	"Added by the COSIAM_G TROJAN!"
U	Evidence Cleaner	ecleaner.exe	"Evidence Cleaner cleans up tracks left by your PC and Internet activities"
X	ewupdater	ewupdater.exe	"EasyWebSearch adware updater"
X	ExecUser	ExecUser.exe	"Added by a variant of the RBOT WORM!"
U	Exif Launcher	Exiflaquickdcr.exe	USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
U	ExitKiller	Ekiller.exe	"Exit Killer - automatically closes pop-up windows in your browser"
?	exmon	hpimoniter.exe	"Some kind of hp digital camera maybe or a photo smart connection probe?"
X	exp1orer.exe	exp1orer.exe	"Added by the DLOAD-FG TROJAN! Notice the digit ""1"" used in both the startup entry and filename
X	Explore	Explorer.exe	"Added by the IRC.FLOOD.G BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
U	explorer	explorer.exe	"Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL"
X	EXPLORER	EXPL0RER.EXE	"Added by the BEASTDO-Y TROJAN! Note the ""0"" in the filename rather than upper case ""o"""
X	explorer	explorer.exe	"Added by the KEYLOG-AK TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\service"
X	EXPLORER	EXPLORER.exe	"Added by the NETHIEF-P TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\ShellExt"
X	explorer	explorer.exe	"Added by the BLOCKEY-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\config"
X	Explorer	Windows Explorer.exe	"Added by the SILLYFDC-I WORM!"
X	Explorer lptt01	explorer.exe	"RapidBlaster variant (in a ""explorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here.Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually!"
X	Explorer ml097e	explorer.exe	"RapidBlaster variant (in a ""explorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here.Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually!"
X	explorer.exe	explorer.exe	"Added by the AGENT-EW or PWS-CY TROJANS! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	explorer.exe	explorer.exe	"Added by the DELF-ACL TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the Program Files folder"
X	Explorer.exe	csrss.exe	"Added by the JUEGO-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%\Microsoft"
X	Explorer6.1.EXE	Explorer.exe	Added by the MYDOOM.B WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!
X	ExplorerTask	explorer.exe	"Added by the ZCREW-B BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the ""Fonts"" sub-folder"
N	ezHelper	ezHelper.exe	"Part of the ezPeer+ ezHelper music sharing program."
U	Fatpipe Dialer	fpdialer.exe	Dailler for Fatpipe - software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U	FaxCtrl.exe	ASMediaProxyServer.exe	"Part of Avaya's Contact Center Express - ""a multi-channel
X	Fdaemon security	fsecur.exe	"Added by the SDBOT.KXO WORM!"
U	feedreader.exe	feedreader.exe	"""Feedreader is a freeware Windows application that reads and displays Internet newsfeeds aka ATOM and RSS feeds based on XML"""
X	Fhzepgyi	HELLRAIDER.EXE	"Added by the MINDCTRL.A BACKDOOR!"
X	File System	taskmqr.exe	"Added by the RBOT.BWQ WORM!"
N	filehippo.com	UpdateChecker.exe	"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
N	FileHippo.com Update Checker	UpdateChecker.exe	"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
N	FineReader7NewsReaderPro	AbbyyNewsReader.exe	"ABBYY FineReader OCR software - version 7"
U	Firefox Preloader	FirefoxPreloader.exe	"Firefox Preloader - ""a utility that is designed to load parts of Mozilla Firefox into memory before it is used to improve the its startup time"". Even on fast machines Firefox can take a while to load"
X	FirewallSvr	FirewallSvr.exe	"Added by the NETSKY.X or NETSKY.Y WORMS!"
X	FKS v2.0	msngr.exe	Added by an unidentified WORM or TROJAN!
X	FLooDNeT	FLooDeR.exe	"Added by the ENDOOL TROJAN!"
X	Font Viewer	fontviewer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	FooBar 1.0	FooBar.exe	"FooBar - ""combines fifteen high-quality productivity tools in a single toolbar that floats on your desktop or runs in the Windows task bar"""
Y	FoolProof	fpwinldr.exe	"FoolProof Security PC security software from SmartStuff"
U	Free Key Logger	freekeylogger.exe	"Free Key Logger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	freexstyle	lockbar.exe	"Added by the LOXBOT.D WORM!"
X	freexstyle	lockbr.exe	"Added by the LOXBOT.C WORM!"
?	FridaysInHellInstaller	FridaysInHellInstaller.exe	"??"
?	FRITZ!DSL Startcenter	StCenter.exe	"FRITZ! ISP software ""StartCenter"" User interface that allows you to manage
X	FTPGraber	FTPGraber.exe	"Added by the DLOADER-DT TROJAN!"
?	FtpServer.exe	FtpServer.exe	"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
X	FUKLBAR	bar.exe	"PurityScan adware"
N	FullAudio	WMPImporter.exe	Used to import settings from Windows Media Player into Music Now software (from www.musicnow.com - which is no longer available) and possibly others
X	Fwr Command Module	fwr.exe	"Added by the SDBOT-PP WORM!"
X	FX	ieloader.exe	Added by the SMALL.RR TROJAN!
U	fxredir	fxredir.exe	Canon MultiPASS fax redirector
X	Gator	gator.exe	"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	Gator eWallet	gator.exe	"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	GDMgr.exe	gdmgr.exe	"GuardMon is a commercial surveillance software program designed to monitor all forms of user activity on a computer"
N	GDrive	GDriver.exe	Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
N	Gearbox	confsvr.exe	"NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here"
X	General Antivirus	GenAvir.exe	"General Antivirus rogue security software - not recommended
Y	Genie USB Monitor	USBmonitor.exe	Port monitor for an external USB hard drive. Required to enable access to the drive
U	Giganews Accelerator	GiganewsAccelerator.exe	"Giganews Accelerator from Giganews
X	GLF Network Lan Monitor	NPFMNTOR.exe	"Added by the RBOT-AGY WORM!"
X	GlobalFlagACER	ACER.exe	"Added by the VB.BL WORM!"
X	go	cvir.exe	"Added by the SILOV-A WORM!"
X	goidr	goidr.exe	"Goidr adware"
U	Goldensoft_MndlSvr	MndlSvr.exe	"Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive
X	good	badvir.exe	"Added by the SILOV-B WORM!"
N	Google Updater	GoogleUpdater.exe	"Downloads and installs updates for Google applications (Google Earth
U	GoogleToolbarNotifier	GoogleToolbarNotifier.exe	"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
X	GoogleUpdater3	GoogleMapper.exe	"Added by the ROUTROBOT WORM!"
X	GP Updater	gpupdater.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
U	Gravis Appawareloader	dbserver.exe	"Looks like it's associated with Gravis game controllers and the Keyset Manager
X	GreatDefender	GreatDefender.exe	"GreatDefender rogue security software - not recommended
X	GreatDefender.exe	GreatDefender.exe	"GreatDefender rogue security software - not recommended
N	Grokster	Grokster.exe	"Grokster Peer-To-Peer File Sharing program"
U	GrooveMonitor	GrooveMonitor.exe	"Part of MS Office Groove - a stand-alone product or included with the Enterprise/Ultimate versions of MS Office 2007. ""A collaboration software program that helps teams work together dynamically and effectively
U	GrooveMonitor Utility	GrooveMonitor.exe	"Part of MS Office Groove - a stand-alone product or included with the Enterprise/Ultimate versions of MS Office 2007. ""A collaboration software program that helps teams work together dynamically and effectively
N	GSOrganizer	GSOrganizer.exe	"GoldenSection Organizer (now WinOrganizer - personal information manager)"
X	GuardCenter	GuardCenter.exe	"GuardCenter rogue security software - not recommended"
N	GWInkMonitor	GWInkMonitor.exe	"Gateway ink monitor - makes an annoying popup that says your printer may be running out of ink
X	G_Server.exe	G_Server.exe	"Added by the FEUTEL-C TROJAN!"
X	Hard drive Controller	hdcontroller.exe	"Added by the KIMAN.B WORM!"
U	Hardware Doctor	Hwdoctor.exe	"Winbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds
U	Hardware Sensors Monitor	hmonitor.exe	Utility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
U	hcenter	hcenter.exe	"Bellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
U	HControlUser	HControlUser.exe	Hotkeys on an ASUS Notebook. Only required if you use the additional keys
X	HDriveSweeper	HDriveSweeper.exe	"HDriveSweeper rogue privacy program - not recommended
X	helpmanager	spoler.exe	"Added by the RANDEX.J WORM!"
X	Hewlett Packard Manager	hpmanager.exe	"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
U	Hitman Pro SurfRight Helper	srhelper.exe	"Hitman Pro - a utility to start a number of Security Protection software. They can be started individualy"
X	HKCU	server.exe	"Added by the AGENT-NLT TROJAN!"
X	HKLM	server.exe	"Added by the AGENT-NLT TROJAN!"
X	hldrrr	hldrrr.exe	"Added by the BAGLE-KF WORM!"
U	Hmonitor	Hmonitor.exe	Hardware sensor monitoring program. Only required if you overclock your system and want to check on the status
N	Home Theater SchSvr	SchSvr.exe	"WinScheduler is installed with Home Theater Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
U	HomeKeyLogger	KeyLogger.exe	"SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself"
X	homepage.monitor.exe	isamonitor.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
U	HondaHelper	HondaHelper.exe	"Part of Honda Music Link which allows you to use your Honda's audio system's controls to play and search for music on your iPod® in you car"
?	Honor	honor.exe	"??"
U	HostManager	AOLHostManager.exe	"Manages a component essential to the operation of most current AOL software. If you remove it from startup it will load when IE is launched
X	Hot Inside	Hottest Story Ever.exe	"Added by the BHARAT.A WORM!"
X	HotAction_hr	hotaction_hr.exe	"Added by the SITEICON-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""HotAction_hr"""
X	hotfix	msnnmaneger.exe	"Added by the WOOTBOT.AF WORM!"
U	HP AutoIndexer	hppautoindexer.exe	"Installed by HP multi-function printer driver software
N	hp center UI	ShadowBar.exe	"User Interface for HP Center - see here"
N	HP Component Manager	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
U	HP Health Check Schedule	HPHC_Scheduler.exe	HP Health Check Scheduler from Hewlett-Packard
U	HP Laser Jet Director	hppdirector.exe	"System Tray icon that opens various functions such as copy
X	HP Photo Manager	HPPhotoManager.exe	"Added by the SDBOT.AXU WORM!"
U	HP SchedIndexer	hppschedindexer.exe	"Installed by HP multi-function printer driver software
U	HPADVISOR	HPAdvisor.exe	HP Total Care Advisor - a suite of help and hardware check programs to help you check the health of your PCs
N	hpcmpmgr	hpcmpmgr.exe	"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
U	HPLogiFinder	hp_finder.exe	HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
X	HpPrinter	hpserver.exe	"Added by the CMJSPY-W TROJAN!"
N	hpsjbmgr	hpsjbmgr.exe	"HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup
U	HR	Hr.exe	"HiddenRecorder periodically takes screenshots of the computer. If you didn't install this yourself remove it"
X	hsim	toolbar.exe	Unidentified malware
U	HSLAB Logger	logger.exe	"HSLABLogger logs user activity and Internet activity. The gathered information can be sent to a predetermined email address. If you didn't install this yourself uninstall it"
U	Hti	npdor.exe	"Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required"
X	http://www.lienvandekelder.be	LienVandeKelder.exe	"Added by the MYTOB-AZ WORM!"
X	http://www.lienvandekelder.be	Lien Van de Kelder.exe	"Added by the MYTOB-AP WORM and variants!"
X	http://www.lienvandekelder.be	Lien Vande Kelder.exe	"Added by the MYTOB-AQ WORM!"
X	http://www.lienvandekelder.be	Lien vd Kelder.exe	"Added by the MYTOB-M WORM!"
X	http://www.lienvandekelder.be	We Love Lien Van de Kelder.exe	"Added by the MYTOB-CV WORM!"
X	http://www.lienvandekelder.com	Lien Van de Kelder.exe	"Added by the MYTOB-EQ WORM!"
X	http://www.lienvandekelder.com/	LienVandeKelder.exe	"Added by the MYTOB-EO WORM!"
?	huhdir	huhdir.exe	"??"
X	huigezi	HgzServer.exe	"Added by the GRAYBIRD.C TROJAN!"
X	IASHLPR	IASHLPR.EXE	"Added by the OPASERV.T WORM!"
Y	IBM Password Manager	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
Y	IBM_PWMGR	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
U	IBWin Monitor	IBMonitor.exe	"IBackup for Windows"
Y	IcaBar	icabar.exe	Related to Citrix MetaFrame
U	iCalendar	Calendar.exe	"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
N	Iconsaver	Iconsaver.exe	"IconSaver is a desktop icon manager"
U	ICQMonitor	ICQMonitor.exe	"ICQ Monitor Sniffer surveillance software for the ICQ instant messenger. Uninstall this software unless you put it there yourself"
N	ICServer	Icserver.exe	Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
Y	ICSMGR	ICSMGR.EXE	Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers
X	IE configure	explorer.exe	"Added by the LINEAGE-C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
U	IE Doctor	IEDoctor.exe	"IE Doctor Toolbar - ""IE Doctor can help you to Repair IE easily
U	IE New Window Maximizer	iemaximizer.exe	"IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows"
X	IE-Bar	iebar.exe	"DesktopMedia adware"
X	IEDriver	IEDriver.exe	"IEDriver adware. Can be installed as part of peer-to-peer file sharing software called URLBlaze"
X	Iesar	Iesar.exe	Browser hijacker - redirecting to an adult web page
U	IEServer	IEServer.exe	"HB Screen Spy surveillance software. Uninstall this software unless you put it there yourself"
X	iestart	iexp1orer.exe	"Added by the NEMOG.C TROJAN!"
N	ietsr	ietsr.exe	"IEClean by Kevin McAleavy - cookie manager
X	IEXPL0RER	IEXPL0RER.EXE	"Added by the AGOBOT-QL WORM!
X	iexplo	iexplor.exe	"Added by the SIDEA TROJAN!"
X	iexplor.exe	iexplor.exe	"Added by an unidentified WORM or TROJAN! See here"
X	IExplorer	IExplorer.EXE	"Added by the BANCOS-CH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Iexplorer	explorer.exe	"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	iexplorer lptt01	iexplorer.exe	"RapidBlaster variant (in a ""iexplorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	iexplorer ml097e	iexplorer.exe	"RapidBlaster variant (in a ""iexplorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Iexplorer.exe	Iexplorer.exe	"Added by the BANCBAN-EN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Iexplorerr.exe	Iexplorerr.exe	"Added by the BANKER-EUT TROJAN! The file is located in %Windir%\Sun\Java\Deployment\logs"
X	Iexplorerr.exe	Iexplorerr.exe	"Added by the BANKER.AOVZ TROJAN! The file is located in %Windir%\msagent\gf"
X	iExpresser	iexpresser.exe	"Added by the SLENFBOT.AP WORM!"
X	igamatu	ekor.exe	"Added by the SDBOT.AQ TROJAN!"
N	iIWiper	Systemwiper.exe	"System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis"
N	iLike	ilikesidebar.exe	"iLike Sidebar for iTunes and Windows Media Player"
X	iLLeGaL	Mplayer.exe	"Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename"
X	iLLeGaL.exe	Mplayer.exe	"Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename"
X	ImagePath	taskbarmngr.exe	"Added by the SDBOT-XB WORM!"
X	IMEvtMgr.exe	IMEvtMgr.exe	"Added by the KEYLOG-AR TROJAN!"
X	IMprocess	IM-svr.EXE	"IMNames adware"
?	Indexer	Indexer.exe	"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
X	Indexindicator	Indexindicator.exe	"Added by the LAZAR TROJAN!"
U	IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}	NMIndexStoreSvr.exe	"Indexing service that catalogs all the media on your computer so that the files are available to all of the programs in the Nero suite of applications"
X	inetmgr	inetmgr.exe	"Actual Names (AdvSearch) Internet Keywords parasite"
X	infamous.exe	wmplayer.exe	Added by unknown malware. WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
X	InfeStop	InfeStopRemover.exe	"InfeStop rogue spyware remover - not recommended
U	Infuzer	Infuzer.exe	"Infuzer - ""is a service that copies dates from the web or an email straight to your electronic calendar"". Beware of the following adware trait - ""Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them
N	Ink Monitor	InkMonitor.exe	Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
X	Insider	Insider.exe	"Added by the AGENT.KMC TROJAN!"
X	Instafinder	instafinder.exe	"TopSearch.D adware"
X	InstallCleaner	InstallCleaner.exe	"Added by the ANYHOMB.F TROJAN!"
X	instant messengers	instantmsgtr.exe	"Added by the AGOBOT-PC BACKDOOR!"
N	Instant Update Center	reminder.exe	"Event reminder for calendar dates
?	InstUtlR.exe	InstUtlR.exe	"??"
U	Intel File Transfer	xfr.exe	Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U	IntelProcNumUtility	cpunumber.exe	"Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here"
X	Internet Antivirus	IAvir.exe	"Internet Antivirus rogue security software - not recommended
X	Internet Application Driver	expIorer.exe	"Added by the IRCBOT-WK TROJAN!"
X	Internet Explorer	iexplorer.exe	"Added by the LORSIS WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer	IExplorer.exe	"Added by the NETHIEF-O BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer Agent	iexplorer.exe	"Added by the AGENT-BH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Internet Explorer Updater	iexplorer.exe	"Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
U	Internet History Eraser	HERASER.exe	"Internet History Eraser - deletes your browsing tracks"
X	Internet Security Service	expllorer.exe	"Added by the REFROSO.AFF TROJAN!"
Y	Internet Sharing Server	iss_srvr.exe	"Intel AnyPoint internet sharing software. Now discontinued"
N	Internet Sweeper	Sweeper.exe	"Internet Sweeper - removes unnecessart left over files after browsing the internet"
U	Internet Timer	ITIMER.exe	"Shareware dial-up connection call cost calculator from Ratsoft"
X	Internet_Explorer.exe	Internet_Explorer.exe	"Added by the BANKER-END TROJAN!"
X	Intersoft Msngr	intersoftmsngr.exe	"Added by the AGOBOT-NW WORM!"
N	Intervideo Win Cinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinCinema Manager	WinCinemaMgr.exe	"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
N	Intervideo WinScheduler	WinScheduler.exe	"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
N	Intervideo WinScheduler	SchSvr.exe	"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
X	Intmgr	Intmgr.exe	"Added by the GEMA TROJAN!"
Y	Intuit SyncManager	IntuitSyncManager.exe	"Synchronizes local Intuit Quickbooks data with online data - ""Use the Intuit Sync Manager to find the status of your latest QuickBooks data sync
X	Ioadqm	Media Player.exe	"Added by the HAWAWI WORM!"
N	iolo Utility Bar	SMUtilityBar.exe	"Iolo System Mechanic Utility Bar - can be launched manually"
N	IomegaWare	COMMANDER.EXE	"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
X	Iomega_loader	Iomega_loader.exe	"Added by the ANTINNY.F WORM!"
U	IP Changer 2.0	IPChanger.exe	"IP Changer 2.0 from Plustech Inc - network configuration management tool"
N	iPodder	iPodder.exe	"iPodder (now known as Juice) - a free utility that ""allows you to select and download audio files from anywhere on the Internet to your desktop"". This entry is present if you choose the option to add it to the startup group during installation"
U	iPodManager	iPodManager.exe	"Apple iPod® management software for the iPod® player - updates
?	iPodWatcher	iPodWatcher.exe	"Associated with Apple's iPod® player. Detects when the iPod® is connected?"
U	ipsecdialer	ipsecdialer.exe	"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
X	iqmanager.exe	iqmanager.exe	"IQ-Manager ransomware copyright scanner - not recommended
X	irc session	sessionmgr.exe	"Added by the SDBOT-ACE WORM!"
N	iRiver Updater	Updater.exe	"Updates for the iRiver Music Manager - used with their digital music players"
X	irwftp	iexplorer.exe	"Added by the BANKER-AN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
U	IrXfer	IrXfer.exe	Microsoft Infrared Transfer application
X	isamini.exe	isamonitor.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	isamonitor.exe	isamonitor.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
U	ISBMgr.exe	ISBMgr.exe	Related to Sony ISB Utility
X	istinstall zazzer.exe	istinstall zazzer.exe	Unidentified adware downloader/installer
N	iSysCleaner	iSysCleaner.exe	"iSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user"
Y	iTunes Helper	iTunesHelper.exe	Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
Y	iTunesHelper	iTunesHelper.exe	Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
X	ivHost	taskManager.exe	"Added by a variant of the SPYBOT WORM! See here"
N	IVPServiceMgr	ivpsvmgr.exe	"Toshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as
U	Jammer	jammer.exe	"Jammer by Agnitum - ""Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"""
X	Java Update	keeper.exe	"Added by the AGENT-DIS TROJAN!"
X	Java32 Configuration Loader	msnmesgr.exe	"Added by a variant of the RBOT WORM!"
X	JavaTray	traymgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
N	JB	Jiffybar.exe	"Get Paid As You surf" application
X	JW Manager	jwmngr.exe	"Added by the DELBOT-G WORM!"
U	Kalender	Kalender.exe	"UK's Kalender ""helps you organizing your dates and tasks and reminds you of upcoming events"""
N	Kana Reminder	Reminder.exe	"Kana Reminder is a program which can be used to set a reminder to be triggered at a specified time"
X	kavir	kavir.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
U	KBD MediaCenter	MEDIACTR.EXE	Multimedia keyboard manager. Required if you use the multimedia keys
X	Kcrner	Kcrner.exe	"Added by the LINEAG-AIL TROJAN!"
X	kell	liser.exe	"Added by the AGENT.AUTP TROJAN!"
U	Kernel and Hardware Abstraction Layer	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
X	Kernel Manager	krnlmgr.exe	"Added by the JUNY.A TROJAN!"
X	kernel system daemon	ACTIVAT0R.exe	"Added by the RANDEX.AW WORM!"
X	kernel32sys.dll	IEXPLORER.exe	"Added by the RBOT-MK WORM!"
X	KernelCheck	winser.exe	"Added by the TSPY_LMIR.SL TROJAN!"
U	KHALMNPR	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
N	khooker	khooker.exe	SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
X	Kinofilmoff.Net	Reklamer.exe	"Added by the AGENT-NGX TROJAN!"
U	klp	explorer.exe	"ComSurveilSys keystroke logger/monitoring program - remove unless you installed it yourself!"
N	KODAK Software Updater	Kodak Software Updater.exe	"Software updater for Kodak Easyshare digital cameras"
U	Kryptel Component Start	Kicker.exe	"Kryptel encryption software"
X	kvasoft	kva8wr.exe	"Added by the ONLINEG.ICC WORM!"
N	kX Mixer	kxmixer.exe	Provides Mixer and Control functionality to KxProject Audio driver for EMU10k based soundcards
?	Later	later.exe	"??"
U	Launch Manager	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
X	Launcher	launcher.exe	Spyware component related to DownloadWare and found in %ProgramFiles%\KFH
U	Launcher	launcher.exe	"PC Angel recovery program from SoftThinks. Located in a ""SMINST"" sub-folder of the Windows or Winnt directory"
U	Launcher	Launcher.exe	"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
Y	LCDPlayer	LCDPlyer.exe	"Related to SuperAdBlocker"
N	LDM	LogitechDesktopMessenger.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
X	ldriver	ldriver.exe	"Added by the CHORUS-A TROJAN! Searchforfree browser hijacker"
U	LELA	Linksys EasyLink Advisor.exe	"System Tray access to Linksys EaasyLink Advisor - which ""is designed to set up your home network. LELA can locate computers
U	LENOVO.TPFNF6R	TPFNF6R.exe	Supports the Fn+F6 hotkey combination on IBM/Lenovo Thinkpad notebooks which mutes the microphone
U	Lexmark 1200 Series	lxczbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 1200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark 2200 Series	lxbvbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 2200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark 3100 Series	lxbrbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 3100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark 4200 Series	lxbmbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 4200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark 5200 series	lxbtbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 5200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X1100 Series	lxbkbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X1100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X5100 Series	lxbabmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X5100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X6100 Series	lxbfbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X6100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
U	Lexmark X74-X75	lxbbbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark X74-X75 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
X	License Manager	license_manager.exe	"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
N	LifeDrive Manager	LifeDriveMgr.exe	"Keeps the Palm LifeDrive Manager utility in the systray. Shortcut available via Start -> Programs"
N	LifeScape Media Detector	PicasaMediaDetector.exe	"Media detector for Picasa's automatic photo organizer"
X	liibr	liibr.exe	Added by a variant of the Storm/Nuwar/Zhelatin WORM!
N	Line Speed Meter V3.0	LineSpeedMeter.exe	"LineSpeedMeter - detect the download and upload speed of your internet connection"
U	LingvoTraining	Tutor.exe	"ABBYY Lingvo Electronic Dictionaries"
X	Linker	LinkMaker.exe	"Links adware"
X	Live Messanger	livemsgr.exe	"Added by the RBOT.BXX WORM!"
X	Live Messanger	wllmsngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Live-Messenger.exe	Live-Messenger.exe	"Added by the SILLYP2P WORM!"
N	LiveMonitor	LMonitor.exe	MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
N	LiveUpdate	Copyer.exe	"Samsung PC Studio is a Windows-based PC program package that you can use easily to manage personal data and multimedia files by connecting a Samsung Electronics Mobile phone (GSM/GPRS/UMTS) to your PC. You can launch the update manually - see the instructions
X	LMA Manager	lmamanager.exe	"Added by the TILEBOT-AD WORM!"
U	LManager	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	LManager	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	Lmanager	LManager.exe	"Acer Launch Manager - manages configuration of the multimedia keys on their range of notebooks
N	LMonitor	LMonitor.exe	MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
X	lnternet Explorer	AMSNDMGR.EXE	"Added by the KWBOT.R WORM! Note that the ""l"" is a lower case ""L"" and not an upper case ""I"""
X	load	explorer.exe	"Added by the LINEAGE-OZ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	load	WinExplorer.exe	"Added by the VB.EIW WORM!"
X	load=	msater.exe	"Added by the RETSAM TROJAN!"
X	load=	shambl3r.exe	"Added by the REMABL WORM!"
X	Loadab1	explorer.exe	"Added by the LINEAGE-AJ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	loader	loader.exe	"Homepage hijacker
X	loader	WMPLAYER.EXE	Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
X	loadMecq0	explorer.exe	"Added by the MUMUBOY.C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	loadMect1	explorer.exe	"Added by the LINEAGE-L TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	LoadPFW	wmimgr.exe	"Added by the QEDS-B WORM!"
X	LoadWatcher	watcher.exe	"Watcher spyware"
Y	Logitech	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
N	Logitech Desktop Messenger	LogitechDesktopMessenger.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
U	Logitech Hardware Abstraction Layer	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
U	Logitech SetPoint	KHALMNPR.EXE	"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
Y	LogitechCommunicationsManager	Communications_Helper.exe	"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
N	LogitechDesktopMessenger	LogitechDesktopMessenger.exe	"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
Y	LogitechRegisterVideoApplications	InstallHelper.exe	Entry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software
U	LogitechVideo[inspector]	InstallHelper.exe	Entry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications
U	Logon Loader	LogonLoader.exe	"Logon Loader - customize boot & login screens"
U	Logon Loader Random	LogonLoader.exe	"Logon Loader - customize boot & login screens"
N	Lotus QuickStart	smartctr.exe	"Lotus central application
U	LPManager	LPMGR.exe	"Part of Lenovo's (was IBM) ThinkVantage Productivity Center - ""guides you to a host of information and tools to help you set up
X	LSA	wfdmgr.exe	"Added by the MYTOB.C WORM!"
X	LsaManager	lsamgr.exe	"Added by the BEAGLE.DR WORM!"
Y	lsburnwatcher	lsburnwatcher.exe	"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
Y	LSBWatcher	lsburnwatcher.exe	"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
U	LSPFix	LSPmonitor.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
U	LSPmonitor	LSPmonitor.exe	"eAcceleration Stop-Sign security software related. Previously not recommended
X	LSvr	LSvr.exe	"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
X	LTDMgr	LTDMgr.exe	"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
Y	Lto Manager	DesktopLtoManager.exe	"Related to Global Positioning System (GPS) found on HP iPAQ hw6500 unit and others"
?	LXbbmgr	LXbbmgr.exe	"Lexmark printer button manager? Is it required?"
U	lxbrbmgr	lxbrbmgr.exe	"""Lexmark Scan & Copy Control Program"" for the Lexmark 3100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
X	LzioMediaUpdater	LzioMediaUpdater.exe	"LZIO.com adware downloader"
X	M3Development_WhenUSave_Installer	M3Development_WhenUSave_Installer.exe	"WhenU.Save adware"
X	Macromedia 8	Flash Player.exe	"Added by the JAMBU-A WORM!"
U	MailCleaner	MAILCLEANER.EXE	"MailCleaner ""protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all incoming files downloaded by Internet Explorer
X	MailSkinner	mailskinner.exe	"MailSkinner - an application by Electronic Group
X	Malware Catcher 2009	MCatcher.exe	"Malware Catcher 2009 rogue security software - not recommended
X	Malware Scanner	MalScr.exe	"Malware Scanner rogue security software - not recommended
X	MalwareMonitor	MalwareMonitor.exe	"MalwareMonitor rogue security software - not recommended"
X	MalwareStopper	MalwareStopper.exe	"Malware Stopper rogue security software - not recommended"
X	MalwareWiper	MalwareWiper.exe	"MalwareWipe rogue security software variant - not recommended
X	MalWarrior	MalWarrior.exe	"MalWarrior rogue security software - not recommended
X	manager	manager.exe	"Detected by Kaspersky as the SMALL.CVT TROJAN!"
U	Manager Monitor	monitor.exe	"MindStorm AnalyzerPro from Secure Associates. ""A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"""
U	MaxBlastMonitor	MaxBlastMonitor.exe	"Maxblast hard drive utility for Maxtor (Seagate) drives"
Y	McAfee VirusScan	mcmnhdlr.exe	"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
Y	McAfeeVirusScanService	Avsynmgr.exe	"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
N	MChanger	MChanger.exe	"Media Changer - utility that allows you to change wallpapers
Y	mcmnhdlr	mcmnhdlr.exe	"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
X	Mcrosoftr Update	Mcrosoftr.exe	"Added by a variant of the RBOT WORM!"
U	Media Card Companion Monitor	MCC Monitor.exe	"Monitor for Media Card Companion from ArcSoft. ""Automates the tedious processes associated with downloading and sharing files from digital cameras
X	Media Player	wmplayer.exe	"Added by a variant of the AGOBOT.BM WORM! Note - this is not the valid Windows Media Player as the file is located in %System% rather than %ProgramFiles%\Windows Media Player"
X	Media service	msnmsgxr.exe	"Added by the SDBOT.TF WORM!"
X	mediamotor.exe	mmups.exe	"Added by the AGENT-BY TROJAN!"
X	mediaplayer.exe	mediaplayer.exe	"Added by the BANKER-EUT TROJAN! The file is located in %Windir%\Sun\Java\Deployment\logs"
X	mediaplayer.exe	mediaplayer.exe	"Added by the BANKER.AOVZ TROJAN! The file is located in %Windir%\msagent\gf"
U	MemMonster	memmnstr.exe	"MemMonster - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	Memory Watcher	MemoryWatcher.exe	"MemoryWatcher spyware"
U	Memory+	tfimemsr.exe	"Memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	MemoryMeter	MemoryMeter.exe	"MemoryMeter - bundled with TVMedia adware"
X	memreader.exe	memreader.exe	"Added by the AGOBOT-TY WORM!"
X	MemScanner	MemScanner.exe	"Part of Enigma SpyHunter - not recommended
N	MessagerStarter Freeserve	StartMessager.exe	Freeserve Messenger
X	Messenger	messenger.exe	"Added by the KUTEX TROJAN!"
X	Messenger	Wmsngr.exe	"Added by a variant of the RBOT WORM!"
N	Messenger	MsnMsgr.exe	"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → General → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 8.*"
X	Messenger	msnmsgrr.exe	"Added by the RBOT-GYK WORM!"
N	Messenger (Yahoo!)	YahooMessenger.exe	"System Tray access to the Yahoo! Messenger instant messenger"
X	Messenger Protocol	netsender.exe	"Added by the SDBOT-ACC WORM!"
X	messengerskinner	MessengerSkinner.exe	"Messenger Skinner malware - uses a rootkit to hide executable files"
U	MFP PanelMgr	SSMMgr.exe	"Monitors ink levels
X	Micr Update	soundblaster.exe	"Added by the SDBOT.NP WORM!"
N	Microangelo Desktop	Muamgr.exe	"Using MicroAngelo On Display
N	microAttuneDownload	atmdlusr.exe	"Application Launcher
X	MicroCQ0	explorer.exe	"Added by the LINEAGE-AK TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	Microsoft	msmsger.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft	taskbar.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft	updater.exe	"Added by the RBOT-GHP WORM!"
X	Microsoft	Explorerr.exe	"Added by the IRCBOT-WG TROJAN!"
X	Microsoft	wplayer.exe	"Added by the IRCBOT-ABP TROJAN!"
X	Microsoft	Explorer.exe	"Added by a variant of the RBOT WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft	ntsvr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Automatic Updater	Explorer.exe	"Added by the RBOT-SG WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft Buffer App	msbuffer.exe	"Added by the SLINBOT.NQ BACKDOOR!"
X	Microsoft Corp SQL Certificates	sqlcer.exe	"Added by the ZYBOT-C WORM!"
X	Microsoft Corporaticn SQL Handler	sqlhandler.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Debug Service	dbgbgr.exe	"Added by a variant of the RBOT WORM!"
U	Microsoft Default Manager	DefMgr.exe	"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
X	Microsoft DirectX	rasmngr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft dll Host Service	wkssr.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft DLL Manager	dllmgr.exe	"Added by the SDBOT-KJ WORM!"
X	Microsoft DLL Monitor	dllmonitor.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Explorer	explorer.exe	"Added by the POEBOT-LY WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft FixUp	pevblbvr.exe	"Added by the RBOT.DWK WORM!"
X	Microsoft Games	gamemanager.exe	"Added by the SPYBOT.AHQ WORM!"
X	Microsoft Help SVC	msnmngr.exe	"Added by the SDBOT-PQ WORM!"
X	Microsoft Inc.	iexplorer.exe	"Added by the LOVGATE.E WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Inc.	iexplorer.exe...	"Added by the LOVGATE.AO WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Internet	expl0rer.exe	"Added by a variant of the SPYBOT WORM!"
X	Microsoft Internet Exp	iiexplorer.exe	"Added by the RBOT-KX WORM!"
X	Microsoft Internet Explorer	iexplorer.exe	"Added by the SDBOT-XN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Internet Firewall Update	updater.exe	"Added by a variant of the IRCBOT TROJAN!"
U	Microsoft Location Finder	LocationFinder.exe	"Microsoft Location Finder ""is a client-side application that turns a regular WiFi enabled laptop
X	Microsoft machine	arcpack.scr.exe	"Added by the RBOT.ADF BACKDOOR!"
X	Microsoft Manager	msmanager.exe	"Added by the MYTOB.LF WORM!"
X	Microsoft media services	winmplayer.exe	"Added by the RBOT.ZO WORM!"
X	Microsoft Movie Maker	Mmaker.exe	"Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program"
X	Microsoft MSN 7 Services	msnmsger.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoft MSN Messenger	msnmnsgr.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft Office	MSMSGR.exe	"Added by the GAOBOT.BB WORM!"
X	Microsoft Office	nxcxtpr.exe	"Added by the RBOT-YG WORM!"
X	Microsoft Office	msmsgr.exe	"Added by the GAOBOT.BB WORM!"
X	Microsoft QMGR	msnqmgr.exe	"Added by the IRCBOT-S TROJAN!"
X	Microsoft Router Manager	router.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Microsoft sddcE Contol	taskmnegr.exe	"Added by the RBOT-AUM WORM!"
X	Microsoft Security Monitor Process	kar.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Security Monitor Process	lindicracker.exe	"Added by the BIFROSE.GR BACKDOOR!"
X	Microsoft startup	wmpIayer.exe	Added by the IRCBOT.ACI TROJAN!
X	Microsoft Svchost local services	msnserver.exe	"Added by the RBOT-GPM WORM!"
X	Microsoft Syn Manager	Manager.exe	"Added by the SDBOT.BEF WORM!"
X	Microsoft Synchronization Manager	___synmgr.exe	"Added by the MASLAN.A or MASLAN.C WORMS!"
X	Microsoft Synchronization Manager	explorer.exe	"Added by the SDBOT-AEA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft System Checkup	Keymgr.exe	"Added by the DONK.M WORM!"
X	Microsoft System Checkup	ntsysmgr.exe	"Added by the DONK.S WORM!"
X	Microsoft System Checkup	libsysmgr.exe	"Added by the SDBOT-CAF WORM!"
X	Microsoft System Checkup	sysmgr.exe	"Added by the SDBOT-OO TROJAN!"
X	Microsoft System Checkup	wnetmgr.exe	"Added by the DONK.Q WORM!"
X	Microsoft System Firewall 2006.2	msmsgr.exe	"Added by a variant of the SDBOT WORM!"
X	Microsoft System Firewall 2006.2	msnmsgr.exe	"Added by a variant of the SDBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Microsoft System Services	msnmgsr.exe	"Added by the KELVIR.K WORM!"
X	Microsoft System Services	msmsgr.exe	"Added by the RBOT-ZH WORM!"
X	Microsoft Task Messenger Config	taskmgsr.exe	"Added by the SDBOT-JK WORM!"
X	Microsoft Time Manager	dveldr.exe	"Added by the RBOT-HQ WORM!"
X	Microsoft Update	wssvr.exe	"Added by the RBOT-OD WORM!"
X	Microsoft Update	Msnmsngr.exe	"Added by the RBOT.BQS WORM!"
X	Microsoft Update	winupdater.exe	"Added by the RBOT.BIN WORM!"
X	Microsoft Update	mixer.exe	"Added by the RBOT-AIR WORM!"
X	Microsoft Update	explorer.exe	"Added by the RBOT.AEU BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft Update	wutr.exe	"Added by the SPYBOT.AAR WORM!"
X	Microsoft Update 32	explorer.exe	"Added by the RBOT-ARF WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Microsoft Update 32	om4r.exe	"Added by the RBOT-AQP WORM!"
X	Microsoft Update 32	taskMangr.exe	"Added by the RBOT.AIE BACKDOOR!"
X	Microsoft Update Machine	expl0rer.exe	"Added by the SDBOT.OK WORM!"
X	Microsoft Update Machine	winmgr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Update Machine	TMEMSER.EXE	"Added by the RBOT-NQ WORM!"
X	Microsoft Update Machine	winmngr.exe	"Added by the RBOT.GKQ BACKDOOR!"
X	Microsoft Update Machine	wuamgdr.exe	"Added by the RBOT-IO BACKDOOR!"
X	Microsoft Updaters	tskmgr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Updates	wkssvr.exe	"Added by the RBOT.R WORM!"
X	Microsoft Updates 2 USB	wgafixer.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Updates 5 USB	sp3fixer.exe	"Added by the RBOT-ADS WORM!"
X	Microsoft Updating	syswr.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft USB Windows2 Driver	usbautotuner.exe	"Added by the SILLYFDC.BCL WORM!"
X	Microsoft Video Controls	tskmsgr.exe	"Added by a variant of the SPYBOT WORM!"
X	MicroSoft Wind0ws Updater	winsupdater.exe	"Added by a variant of the RBOT WORM!"
X	MicroSoft Window Updater	winsupdater.exe	"Added by the RBOT-ZZ WORM!"
X	Microsoft Windows	explorar.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows DHCP	___r.exe	"Added by the MASLAN.A or MASLAN.C WORMS!"
X	Microsoft Windows DLL Services Configuration	poker.exe	"Added by the SDBOT-ZY WORM!"
X	Microsoft Windows DVR	windvr.exe	"Added by the RBOT-AXD WORM!"
X	Microsoft Windows Expl0rer	expl0rer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft Windows Explorer	iexplorer.exe	"Added by a variant of the RBOT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Microsoft Windows Loader	wloader.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft Windows Media Player	mediaplayer.exe	"Added by a variant of the RBOT WORM!"
X	Microsoft Windows Securety	wurguar.exe	"Added by the RBOT-KY WORM!"
X	Microsoft Windows Security	spvsper.exe	"Added by a variant of the SDBOT WORM!"
U	Microsoft Windows Sidebar	Sidebar.exe	"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
X	Microsoft Windows Update	msnmessenger.exe	"Added by the SDBOT.AJ WORM!"
X	Microsoft Windows Update	MSNMSGR.EXE	"Added by the SDBOT-WM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Microsoft Windows XP/2K Explorer	winexplorer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Microsoft WinRaR	winrar.exe	"Added by the RBOT-AEC WORM!"
X	Microsoft winsupdater	WINSUPDATER.EXE	"Added by the SPYBOTER.FB BACKDOOR!"
X	Microsoft Word	BootSector.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	Microsoft(R) System Manager	sysmgr.exe	"Added by the AGENT.QTR TROJAN!"
Y	MicrosoftAntiSpywareCleaner	gcASCleaner.exe	"Microsoft Antipsyware - now superseded by Microsoft's Windows Defender"
X	MicrosoftCorp	flashsplayer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MicrosoftCorp	traymgr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsoftf DDEs Control	FEnR.exe	"Added by the RBOT-AIM WORM!"
X	MicrosoftNAPC	flashsplayer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MicrosoftNAPC	traymgr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Microsofts Help Services	msnmngr.exe	"Added by the SDBOT-PJ WORM!"
X	Microsofts Updatez	cmsssr.exe	"Added by an unidentified VIRUS
X	MicrosoftUpdate	syshelper.exe	"Added by the WOOTBOT.AC WORM!"
X	MicrosoftUpdate	RBuilder.exe	"Added by the DLOADR-BMV TROJAN!"
U	MicrosoftŽ WindowsŽ Operating System	Sidebar.exe	"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
U	Microtek Scanner Finder	ScannerFinder.exe	Monitors whether a scanner is present. Provided with Microtek scanners
X	Micrsoft Driver	msdriver.exe	"Added by the SDBOT-XD WORM!"
X	Micsoft-Published-Software	explrer.exe	"Added by the RBOT-GFL WORM!"
U	MilShieldSlave	ShieldWorker.exe	"Mil Shield from Mil Incorporated. It protects your privacy by removing all tracks from your online or offline computer activities"
X	Mincer	Mincer.exe	"Added by the MINCEME-A VIRUS!"
U	MiniReminder	MiniReminder.exe	"""MiniReminder is a small
X	MiniServer.exe	MiniServer.exe	"Added by the LITTLEW-E TROJAN!"
X	Mirsoft sdcE	taskmegr.exe	"Added by the RBOT-AWY WORM!"
X	Miscrosoft Windows Explorer	IEEXPLORER.exe	Reported as the SDBOT.YX WORM!
N	Mixer	Mixer.exe	C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	ML1HelperStartUp	ML1Helper.exe	"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
X	MMB2	explorer.exe	Added by an unidentified WORM or TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
X	mmcndmgr	mmcndmgr.exe	"Added by an unidentified VIRUS
X	Mmessenger	messenger.exe	"Added by the AGOBOT.GM WORM!"
?	mmsys	recover.exe	"??"
U	mm_server	mm_server.exe	"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
N	Mobile Connectivity Suite	Application Launcher.exe	"System Tray access to the HTC Sync mobile phone management utility for models including the Hero
N	MOD	muamgr.exe	"Using MicroAngelo On Display
U	MODEMBTR	MODEMBTR.EXE	"Modem Booster from inKline Global to improve ISP connections"
N	MoneyAgent	mnyexpr.exe	Microsoft Money
X	monitor	monitor.exe	"Browser hijacker
U	Monitor	SD Monitor.exe	"""Transfer data quickly between your memory card and your computer with SanDisk's Readers
X	Monitor	explor.exe	"Added by the AGOBOT-EF BACKDOOR!"
?	Monitor	Monitor.exe	"Related to the Philips SPC610NC & PixArt PAC207 webcams (and possibly others) and Leapfrog Connect Application. What does it do and is it required?"
U	Monitor Apache Servers	ApacheMonitor.exe	Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
U	Monitor Helper	monitor.exe	"MyLittleSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
U	MonitorSD	SDMonitor.exe	"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
N	Motive SmartBridge	BTHelpNotifier.exe	"System tray icon for help from BT Broadband
N	MP3 CD Extractor	CD-Extractor.exe	"""MP3 CD Extractor is an audio CD to MP3 ripper which can extract Digital Audio tracks from Audio CDs into files on the hard disk"""
X	MP4 Player	mp4Player.exe	"MP4 Player allows you to view MP4 videos. Marked as undesirable due to the fact that it changes your homepage to a custom Google search engine
U	MPower	MPower.exe	"MPower from MindBeat. ""Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load"". MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	mprocessor	mprocessor.exe	InstallDollars.com foistware
X	mrsvctr	mrsvctr.exe	"Added by a variant of the SDBOT WORM!"
N	mrtMngr	mrtMngr.exe	Maintenance Release Task Manager for Intuit's QuickBooks or Quicken
U	MRU-Blaster Scheduler	scheduler.exe	"Scheduler for MRU-Blaster - ""a program made to do one large task - detect and clean MRU (most recently used) lists on your computer"""
N	MRU-Blaster Silent Clean	mrublaster.exe	"MRU-Blaster - performs silent cleaning of MRU lists at boot"
U	MRUBlaster	indexcleaner.exe	"MRU-Blaster related - runs once in order to delete the index.dat file in the Temporary Internet Files and/or Cookies folder"
X	MS Configuration	MSFramer.exe	"Added by the RANDEX.OL WORM!"
X	MS Java Service Wrapper Windows NT & XP	wrapper.exe	"Added by the VANEBOT-D WORM!"
X	MS Paint	mspainter.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MS Real Player	RealPlyr.exe	"Added by the RBOT.MR WORM!"
X	Ms sock for Windows NT	winser.exe	"Added by a variant of the SDBOT WORM!"
X	ms spool service	msspooler.exe	"Added by a variant of the RBOT WORM!"
X	Ms task manager	tskmgr.exe	"Added by the SDBOT.CCD WORM!"
X	MS taskbar	crssr.exe	"Added by the RBOT-AGO WORM!"
X	MS taskmanager	tskmgr.exe	"Added by the RBOT-AKA WORM!"
X	MS Unix Binary	msnq3insller.exe	"Added by the RBOT.GXH BACKDOOR!"
X	MS Updating Utility	msupdater.exe	"Added by the RBOT-XR WORM!"
X	MS Win32 Network Services	windriver.exe	"Added by the AGOBOT.ADH WORM!"
X	MS-Connect	arr.exe	"Adult content dialler - see here"
X	MS-RunKey	arr.exe	MS-Connect dialler/hijacker
X	MsAudio	explorer.exe	"Added by the LEGMIR-BY TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	MsBootMgr.exe	MsBootMgr.exe	"Added by the VERIFY TROJAN!"
X	Mscolour	mscolour.exe	"Added by the GEMA TROJAN!"
?	MSCRMStartup	Microsoft.Crm.Application.Hoster.exe	"Related to Microsoft Dynamics CRM integrated solutions for Financial
X	msdefender	msdefender.exe	"Identified as a variant of the PAKES.CMD TROJAN! See here for an example"
X	msdefender.exe	msdefender.exe	"Added by the PAKES.ZL TROJAN!"
X	MSDRV	NetFilter.exe	"Added by the INTERRUPDATE TROJAN!"
X	msennger	l4m3r.exe	"Added by the PROGENT-AF TROJAN!"
N	MsgCenterExe	RealOneMessageCenter.exe	"RealNetworks RealPlayer related - disabling this application will not affect Real Player in any way"
U	MSKExe	spamkiller.exe	"McAfee Spamkiller"
U	MSKServerExe	MSKSrvr.exe	"Part of McAfee Spamkiller"
?	msmgr	msmgr.exe	"??"
X	msmsngr	msmsngr.exe	"Added by the DOPBOT-B WORM!"
X	MSN	msnmsgr.exe	"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN	msnsgr.exe	Added by an unidentified WORM or TROJAN!
X	MSN	wkssvr.exe	"Added by the PUSHBOT.S WORM!"
X	MSN	Fixdriver.exe	"Added by the SILLYFDC.BBY WORM!"
X	MSN	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN	wksvr.exe	"Added by the IRCBOT-XU WORM!"
X	MSN	kys7r.exe	"Added by the AUTORUN-AR WORM!"
X	MSN Auto-Updater	msnaupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	MSN Booster	msnbooster.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Checker	msnchecker.exe	"Added by the SDBOT-AGB WORM!"
X	MSN Client Manager	msnclimgr.exe	"Added by the AUTORUN-FV WORM!"
X	MSN CNF Manager	msncnfmgr.exe	"Added by the VUNDO TROJAN!"
X	MSN Communication Manager	msncommgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN CST Manager	mancstmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Explorer	msnexplorer.exe	"Added by the AGENT-CAX TROJAN!"
X	MSN File Sharing	msnusr.exe	"Added by the SLENFBOT.AM WORM!"
X	MSN File Sharing!	msnuser.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Funny Images	imsngsr.exe	"Added by the AGOBOT-TT WORM!"
X	MSN Manager	mscmgr.exe	Unidentified malware - causes multiple browser windows to open
X	Msn Messager	msnmsgr.exe	"Added by the DOWNLOADER.19456.C TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN Messager	msnmgr.exe	"Added by the IRCBOT-ACD WORM!"
X	Msn Messenge	IExplorer.exe	"Added by the DELF-LL TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	MSN messenger	messenger.exe	Added by an unidentified TROJAN! Note - this is not the real MSN Messenger
X	MSN Messenger	Reosmsngr.exe	"Added by a variant of the SPYBOT WORM!"
X	MSN MESSENGER	msmmsgr.exe	"Added by the KELVIR.Q WORM!"
X	MSN Messenger	msnmsgr.exe	"Added by the AGOBOT.AOQ WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	MSN Messenger	msnmsngr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger	IExplorer.exe	"Added by the BANKER-EU TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Msn Messenger	msnmsnr.exe	"Added by the BANKER-GG TROJAN!"
X	Msn Messenger	msnmgr.exe	"Added by the AGOBOT.HA WORM!"
N	MSN Messenger	MsnMsgr.exe	"MSN Messenger utility (now replaced by Windows Live Messenger) - available via the Start menu. Disable by clicking on Tools → Options → General → deselect ""Automatically run Messenger when I log on to Windows"""
X	MSN MESSENGER 9.0	messengerr.exe	"Added by a variant of the RBOT WORM!"
X	MSN Messenger Service Starter	msnmgsr.exe	"Added by the RBOT-AOS WORM!"
X	MSN Messenger Services	msnmgr.exe	"Added by the RBOT.ADF TROJAN!"
X	MSN Messenger Services	msnmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN Messenger User Controls	msmsgr.exe	"Added by the KELVIR.HI WORM!"
X	Msn Messengers	MSNMSGR.EXE	"Added by the RBOT.KX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Msn Messsenger	regsvr.exe	"Added by the AGENT-GXM TROJAN!"
X	MSN MMISSENGER	mssmmspgr.exe	"Added by the KELVIR.AJ WORM!"
X	MSN P2P Manager	msnp2pmgr.exe	"Added by the SLENFBOT.YH WORM!"
X	Msn Patches	msndr.exe	"Added by a variant of the SDBOT WORM!"
X	MSN Router	msnrouter.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	MSN RPC Manager	msnrpcmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Rx Manager	msnrxmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	MSN Server	msmsnserver.exe	"Added by the IRCBOT.AUS BACKDOOR!"
X	MSN Servicer	msnservicer.exe	"Added by the SLENFBOT.PQ WORM!"
X	MSN Tray Monitor	msnmsgr.exe	"Added by the SDBOT.FKX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%\inetsrv"
X	MSN Update Client	msnupdater.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Msn Updater	windatemanager.exe	"Added by the SDBOT.TS WORM!"
X	msn upddate	mesenger.exe	"Added by the RBOT-AVZ WORM!"
X	MSN User	mymsnusr.exe	"Added by the IRCBOT.AVD BACKDOOR!"
X	MSN User Server	msnserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Msnarrator	msnarrator.exe	"Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware"
X	MSNGrabber	MSNgrabber.exe	"Added by the ENVID.A WORM!"
X	msnmessenger	msnmessenger.exe	"Added by the BANCBAN-KJ TROJAN!"
X	MsnMessengerSvc	msnmsgr.exe	"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	msnmgnr	msnmgnr.exe	"Added by the KOLAB.TC WORM!"
X	msnmgr	msnmgr.exe	"Added by the BIFROSE-K WORM!"
U	MsnMonitor	MsnMonitor.exe	"MSN Messenger Monitor Sniffer surveillance software for the MSN instant messenger. Uninstall this software unless you put it there yourself"
N	msnmsgr	msnmsgr.exe	"Windows Live Messenger or the older MSN Messenger utility - available via the Start menu. For Windows Live Messenger
X	MsnMsgr	msnmsgr.exe	"Added by the ANNEW-FAM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Msnmsgr.exe	lsass.exe	"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root directory (i.e. C:\ or D:\)"
X	msnscr.exe	msnscr.exe	"Added by the CERTIF-P TROJAN!"
X	msnsmgr	MsnMsr.exe	"Added by the LOONY-N TROJAN!"
X	MSOfficeCfg	ssvr.exe	Premium rate adult content dialer
X	msoupdater	msoupdater.exe	"Added by the DLOADER.GBD TROJAN!"
X	MSPP System Update 64	wiaadmgr.exe	"Detected by Kaspersky as the RANKY.GEN TROJAN!"
X	msqssr	msqssr.exe	"Detected by Kaspersky as the DLUCA.GEN TROJAN!"
X	MSR	msr.exe	"Added by the AGOBOT.RT WORM!"
X	MSSQL Manager	mssqlmgr.exe	"Added by the RBOT-BWU WORM!"
X	mssurfer lptt01	mssurfer.exe	"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	mssurfer ml097e	mssurfer.exe	"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Msupdate	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	msupdater	msupdater.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X	MSupdater.exe	N/A	"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
X	msupdater25	lsasser.exe	"Added by the RBOT-ATS WORM!"
X	msvupdater	msvupdater.exe	"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
X	MSWinlogon	SynCor.exe	"Added by the AGENT-FZL TROJAN!"
X	MsWinVgr	msvgr.exe	"Added by the MYTOB.LE WORM!"
X	mswspl	vnmispoisn downloader.exe	SearchBarCash adware variant
X	MS_Update Check	wdfmgr.exe	"Added by the AGOBOT-TB WORM!"
N	muamgr	muamgr.exe	"Using MicroAngelo On Display
X	muBlinder	muBlinder.exe	Program that bypasses Microsoft Update's Genuine Windows Validation
N	Music01 Server	Music01 Server.exe	"J River Media Jukebox"
?	Mustek MDC 3000	Mounter.exe	"Related to software for the Mustek MDC 3000 digital camera - what does it do and is it required?"
U	MW1HelperStartUp	Mw1helper.exe	"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
U	MXO Auto Loader	MXOaldr.exe	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MXOBG	MXOALDR.EXE	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
?	mxomssmenu	maxmenumgr.exe	"Related to Maxtor's One Touch series of external hard drives. What does it do and is it required?"
U	MxRunner	MxRunner.exe	EasyUninstall from Aladdin Systems (formerly by Ontrack)
U	MyRegistryCleaner	MyRegistryCleaner.exe	"MyRegistryCleaner from PCSecurityShield - who's reputation is poor"
X	mysoft	winexplor.exe	"Browser hijacker
N	Naggerrunkey	nagger.exe	Packard Bell Free Internet Signup screen
U	Narrator	Narrator.exe	Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
X	Navegate	iiexplorer.exe	"Added by the BANCBAN-OP TROJAN!"
U	NaverPCGreen	NPCGreenUpgrader.exe	"Related to Naver_Anti-virus Realtime Monitor From NHNCorp"
N	NavLoad	NAVBrowser.exe	Registration reminder for CorelDRAW 10
X	NAVWatch	NAVWatcher.exe	"VX2.Transponder parasite updater/installer related"
N	Necbar	Necbar.exe	"Nec Assistant; Ark's Navigator
N	Nero PhotoShow Media Manager	mssysmgr.exe	"Nero rebranded version of Simple Star's PhotoShow photo editing and organizing software
X	NeroLoader	NeroLoader.exe	"Added by the BANCBAN-EJ TROJAN!"
U	Net Accelerator	NetAccelerator.exe	"Rizal NetAccelerator - ""Optimizing Dial-Up
X	net64	svhoster.exe	"Added by the AGENT.JVF TROJAN!"
?	NetBrowser	NetBrowser.exe	"Part of Best Network Security
?	NetBrowser.exe	NetBrowser.exe	"Part of Best Network Security
U	NetCruiser Dialer	NCDialer.exe	"NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected
U	Netlimiter	Netlimiter.exe	"Netlimiter - ""An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."""
U	NetMeter	NetMeter.exe	"""Net Meter is a small
U	NetMeter	HooNetMeter.exe	"""Net Meter is a powerful and easy-to-use bandwidth meter. It monitors traffic of all network connections and displays real-time graphical and numerical data transfer rates. Net Meter can display details of multiple network connections at the same time. It records all network traffic and includes extensive logging (daily
U	NetOnHold	FTNOHMgr.EXE	"""FaxTalk NetOnHold 1.5 works with the Modem-On-Hold capabilities found in V.92 modems to provide the ability to place an Internet connection ""on hold"" and receive incoming calls or place outgoing calls"""
U	NetPanel	Starter.exe	"Gemius surveillance software. Uninstall this software unless you put it there yourself"
Y	NettGain2000	WgwMngr.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
Y	NettGain2000 Verifier	NettGain2000 Verifier.exe	Part of the Starband satellite client that attempts to optimize your satellite connection to increase speed
N	NeuroSpeech OESpeaker	OEMonitor.exe	"Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not"
U	NexusServer	PNXSERVR.exe	"Related to ProCoder 2.0 from Canopus. ""ProCoder 2.0 software combines speed and flexibility into a streamlined video conversion tool for professionals. Featuring
N	NGServer	ngserver.exe	Symantec/Norton Ghost Console service
U	nHancer	nHancer.exe	"System Tray access to nHancer which is an advanced control panel and profile editor for NVIDIA graphic cards - offering enhanced features above those available via the standard NVIDIA control panel such as additional Anti-Aliasing and Anisotropic Filtering modes"
X	NI.UWA6P_0001_N56M1001	WinAntiVirusPro2006Installer.exe	"Installer for the WinAntiVirus Pro 2006 rogue security software"
X	NI.UWAS5LP_0001_0811	UWAS5LP_0001_0811NetInstaller.exe	"Installer for the WinAntiSpyware 2005 rogue spyware remover - not recommended
X	NI.UWAS6_0001_N68M2301	UWAS6_0001_N68M2301NetInstaller.exe	"Installer for the WinAntiSpyware 2006 rogue spyware remover - not recommended
X	NI.UWFX5	UWFX5NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX5LP_0001_0614	UWFX5LP_0001_0614NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX5LP_0001_0715	UWFX5LP_0001_0715NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX5LP_0001_0802	UWFX5LP_0001_0802NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX5LP_0001_0803	UWFX5LP_0001_0803NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX5T	UWFX5TNetInstaller.exe	"Added by the DOWNLDR-BO TROJAN!"
X	NI.UWFX5V_0001_0802	UWFX5V_0001_0802NetInstaller.exe	"WinFixer 2005 web installer - ""foistware""
X	NI.UWFX6_0001_N68M2301	UWFX6_0001_N68M2301NetInstaller.exe	"WinFixer 2006 web installer - ""foistware""
N	Nikon Monitor	nkmonitor.exe	Monitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC
U	Nitro PDF Printer Monitor	NitroPDFPrinterMonitor.exe	"Printer monitor for Nitro PDF Professional from Nitro PDF
N	NkbMonitor.exe	NkbMonitor.exe	"Part of Nikon PictureProject - image management for Nikon digital cameras"
U	NMBgMonitor	NMBgMonitor.exe	"Associated with Nero Scout
X	nmgr	nnmgr.exe	"FFToolBar adware toolbar"
X	Nod29 Service	nodwr.exe	"Added by a variant of the RBOT WORM!"
?	NodeMnger	Nodemngr.exe	"Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?"
U	Nokia M Platform	NokiaMServer.exe	"Part of the Nokia Music music manager
Y	Nokia PC Suite	DataLayer.exe	"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
U	NokiaMServer	NokiaMServer.exe	"Part of the Nokia Music music manager
X	none	pmsngr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	Norton Antiviral Scanner	navscnr.exe	"Added by the DELBOT-K WORM!"
N	Norton Navigator Loader	nnloader.exe	"An older Norton utility for file management under Windows 95. More information here"
X	Norton Updater	navupdtr.exe	"Added by the SDBOT.AXV WORM!"
X	nortonsantivirus	ccEvtMngr.exe	"Added by the HZDOOR-A TROJAN!"
X	notepad2.exe	popuper.exe	"Added by the PUPER-E TROJAN!"
X	Notn	Eber.exe	"PurityScan adware"
X	NPF Value	NPFMONTR.exe	"Added by the RBOT-AWD WORM!"
?	NPFMonitor	NPFMntor.exe	"Norton AntiVirus Firewall Install Monitor. What does it do and is it required?"
U	NSHelper	aexnsinstallhelper.exe	Altiris Express Notification Server Install helper - monitors integrity of the installation
X	Nsvdr	nsvdr.exe	Adult content dialler
X	Ntcheck	mapserver.exe	"Added by the TOMPAI-B WORM!"
X	ntdll.dll	TrustCleaner.exe	"Smitfraud variant"
X	ntldr	ntldr.exe	"Browser hijacker re-directing to search-control.com. In addition to the registry changes found by HijackThis it also creates the following system files: %System%\ntldr.exe
X	ntuser	ntuser.exe	"Added by an unidentified TROJAN! See here"
X	NvCplDaemon	Xplorer.exe	"Added by the ORBINA-A WORM!"
X	NvCplScan	dllmanager.exe	"Added by the FORBOT.R WORM!"
X	NvCpTDaemon	wuauqmr.exe	"Added by the CULT-B WORM!"
X	NVIDIA Display	DisplayMonitor.exe	"Added by the ABI.C WORM! Note - this is not a legitimate nVidia entry"
U	NVIDIA System Monitor	NVMonitor.exe	"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
U	NVMonitor	NVMonitor.exe	"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
X	nvsv32.exe	cstr.exe	"Added by a variant of the SDBOT WORM!"
Y	oahstifr	oahstifr.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
Y	Object Store Server	osserver.exe	"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
?	obsver	obsver.exe	"Part of LingoWare translating software - what does it do and is it required?"
X	OD	SYSCNTR.EXE	HotVideo dialler
N	Odometer	Odometer.EXE	Mouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
X	Oeloader	Oeloader.exe	"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
U	Office Mail Alerter	om_Alerter.exe	"Office Mail Alerter - ""alert Office Mail users when they receive new emails"" via a System Tray icon"
X	Office Monitors	GoogleUpdater.exe	"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
X	Office Startup	Exploer.exe	"Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries"
X	OfficeAgent	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
X	OfficeDeamon	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
U	OKI LPR Utility	okilpr.exe	OKI printer utility
X	OKMaster	OKMaster.exe	"OKToolbar adware"
U	olesvr	olesvr.exe	"Salfeld Child Control - parental control software"
X	olpr	olpr.exe	"Added by the DWNLDR-GWQ TROJAN!"
N	OM2_Monitor	MMonitor.exe	"Olympus Master 2 - digital camera management tools"
N	OM_Monitor	Monitor.exe	"Olympus Master 1 - digital camera management tools"
N	One Touch Monitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	OneTouchMonitor	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
N	ONETOU~2	OneTouchMonitor.exe	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X	OnSrvr	OnSrvr.exe	OnWebMedia adware
X	Open Service Drivers	opiater.exe	"Added by a variant of the RBOT WORM!"
U	OpenDNS Update	OpenDNS Updater.exe	"Updater for OpenDNS which ""is a free service that works for networks of all sizes
X	opr	opr.exe	"MediaMotor adware"
U	OpScheduler	OpScheduler.exe	"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
U	Optus Cable Data Monitor	datamonitor.exe	"Allows Optus customers to monitor their actual data usage against Optus' ""data allowance limits"""
U	OptusNetUsage	OptusNet Usage Meter.exe	"Designed specifically for OptusNet users who wish to have their connection monitored on a frequent basis. It can also estimate when you are going to hit your usage limit
N	OrangeShark	OSharkUpdater.exe	"Orange Shark updater - online games for all ages"
N	OrderReminder	OrderReminder.exe	The HP Order Reminder utility is installed with the HP LaserJet printer software and allows you to set specific times for reminders to check the current level of toner in the print cartridge - it also contains an Order Now link to a Web page that helps you order supplies online from a reseller of your choice
X	OWMngr	OWMngr.exe	"OnWebMedia/SearchSeekFind advertising foistware"
U	PAC7302_Monitor	Monitor.exe	"Related to PixArt CMOS image sensors from PixArt Imaging Inc"
U	Pagis Schedule Monitor	Monitor.exe	Scheduler for the Pagis scanning suite from Scansoft (now Nuance)
N	Pagis Scheduler	Monitor.exe	Scheduler for the Pagis scanning suite from Scansoft (now Nuance)
N	PAL Evidence Eliminator	Cleaner.exe	"PAL Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis"
N	palmOne Registration	register.exe	"Registration reminder for Palm products"
Y	Panda Cleaner	pavdr.exe	"Panda internet security software related. Possibly the ActiveScan on-line scanner?"
Y	PassLocker	PassLocker.exe	"""PassLocker is a complete password manager helping you to manage and safely store your passwords"""
U	Password Door Loader	PDMonitor.exe	"Password Door - password protection software"
U	Password Tracker Deluxe	PwTrkr.exe	"""Password Tracker Deluxe stores passwords and usernames neatly and securely (encrypted) on your computer"""
N	PasteLister	plister.exe	"PasteLister - clipboard extender. Start manually when required"
X	Pausedell	weyer.exe	"Added by the SDBOT.BEX WORM!"
Y	PAVFNSVR	PavFnSvr.exe	"Part of Panda Antivirus and Internet Security"
U	PBKScheduler	PBKScheduler.exe	"Scheduler for CyberLink PowerBackup - archiving/backup utility"
U	PC Booster	pcbooster.exe	"PC Booster from inKline Global - ""easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"""
N	PC Pitstop Optimize Reminder	Reminder.exe	"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
U	PC Spy Keylogger	ToolKeylogger.exe	"PCSpyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
N	PC Suite for Smartphones	Application Launcher.exe	"System Tray access to the Sony Ericsson PC Suite mobile phone management utility for some models
U	PC Tools Disk Suite	aDSProcMngr.exe	"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
X	PC-Cleaner	PC-Cleaner.exe	"PC-Cleaner rogue security software - not recommended"
X	pcc	explcrer.exe	"Added by the AGENT-FW BACKDOOR!"
X	PCCleaner	SysCleaner.exe	"PCCleaner rogue cleaning utility - not recommended
U	PCDrProfiler	RunProfiler.exe	Part of PC Doctor software installed for some machines. Disabling or enabling it is down to your preference
N	PCPitstop Registration Reminder	Reminder.exe	"Registration reminder for the Exterminate antimalware package from PC Pitstop"
X	PCprotectar.exe	PCprotectar.exe	"PCprotectar rogue security software - not recommended. A member of the AntiAID family"
X	pcServer	server.exe	"Ssppyy spyware"
X	PcsProtector	PcsProtector.exe	"PcsProtector rogue security software - not recommended
U	PDAsync	SyncLauncher.exe	"Laplink PDASync - PDA synchronisation utility"
?	PDF Converter Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 2 from Scansoft (now Nuance). what does it do and is it required?"
?	PDF4 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 4 from Scansoft (now Nuance). what does it do and is it required?"
?	PDF5 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional and PDF Create (both version 5) - from Nuance. what does it do and is it required?"
?	PDF6 Registry Controller	RegistryController.exe	"Part of PDF Converter Professional version 6 from Nuance. what does it do and is it required?"
U	pdp Server	ctpdpsrvr.exe	Included and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network
U	PDUiP6000DTskbr	PDUiP6000DTskbr.exe	"Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
?	PeachtreePrefetcher	PeachtreePrefetcher.exe	"Related to Peachtree accounting software by Sage Software. What does it do and is it required?"
?	PeachtreePrefetcher.exe	PeachtreePrefetcher.exe	"Related to Peachtree accounting software by Sage Software. What does it do and is it required?"
X	Perfect Defender 2009	pdfndr.exe	"Perfect Defender 2009 rogue security software - not recommended
X	PermissionResearch	prmrsr.exe	"Marketscore/RelevantKnowledge adware"
X	Personal Antivirus	PerAvir.exe	"Personal Antivirus rogue security software - not recommended
X	Personal Defender 2009	pdefendr.exe	"Personal Defender 2009 rogue security software - not recommended
X	personalprotector	personalprotector.exe	"Personal Protector rogue security software - not recommended
U	Pervasive.SQL Workgroup Engine	W3dbsmgr.exe	Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup
X	pestsweeper	pestsweeper.exe	"PestSweeper rogue security software - not recommended
X	PgMonitr	PgMonitr.exe	"Delfin Promulgate adware variant"
N	PhilipsDM	DeviceManager.exe	Device manager for Philips portable media players such as the GoGear
U	Phone Connection Monitor	audevicemgr.exe	"Connection monitor part of the Sony Ericsson PC Suite mobile phone management utility for some models
U	PhotoManager	PhotoManager.exe	"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
N	PhotoShow Deluxe Media Manager	mssysmgr.exe	"Simple Star PhotoShow Deluxe photo editing and organizing software
N	Picasa Media Detector	PicasaMediaDetector.exe	"Media detector for Picasa's automatic photo organizer"
N	PICPRTR	PICPRTR.EXE	Program for viewing and measuring a variety of 3D CAD data formats
X	picsvr	picsvr.exe	"Delfin Promulgate adware"
N	Picture Motion Browser Media Check Tool	SPUVolumeWatcher.exe	"Part of the Sony Picture Uility software supplied with Sony camera/camcorder products. Automatically invokes an import process if the camera/camcorder is connected and has media on it"
X	picview	msnmsgr.exe	"Added by the BANLOA-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %Windir%"
N	Pinger	pinger.exe	"Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any
N	PitFrame Module	Reminder.exe	"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
X	Pixelsvr	Pixelsvr.exe	"Added by the GEMA TROJAN!"
U	PlainSight Desktop Calendar	Calendar.exe	"PlainSight Desktop Calendar by Desksware - ""It can display Microsoft® Outlook® data
N	PluckSvr	PluckUpdater.exe	"Pluck Toolbar updater"
?	PMHandler	PMHandler.exe	"Related to IBM/Lenovo Thinkpad notebooks - possibly related to power management features? What does it do and is it required?"
X	pmr	pmr.exe	"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
X	pmsngr.exe	pmsngr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	Points Manager	points manager.exe	"Altnet TopSearch adware"
X	Policies	server.exe	"Added by the SPYRAT WORM!"
X	Policies	server.exe	"Added by the AGENT-NLT TROJAN!"
X	pool manager	popsvr.exe	"Added by the AGENT-S BACKDOOR!"
X	POP Manager	popmgr.exe	"Added by the BCKDR-PYV BACKDOOR!"
U	POP Peeper	POPPeeper.exe	"POP_Peeper from Mortal Universe Software Entertainment ""is an email notifier that runs in your Windows task bar and alerts you when you have new email on your POP3
U	Pop-Up Smasher	PopupSmasher.exe	"Pop-Up Smasher - pop-up killer"
X	PopeSvr	PopeSvr.exe	"Added by the LEGMIR-AJ TROJAN!"
U	Popup Ad Filter	PopFilter.exe	"Popup Ad Filter - pop-up killer"
X	Popup Blocker System	PopUpBlocker.exe	"Added by a variant of the RBOT WORM!"
U	PopUp Buster+	popupbuster.exe	PopUp Buster - free Pop-up blocker
U	Popup Terminator	GLADManager.exe	"Popup Terminator - pop-up killer"
U	PopupEliminator	Popup Eliminator.exe	"Popup Eliminator - pop-up killer"
U	PopUpKiller	PopUpKiller.exe	"PopUpKiller - pop-up killer"
U	PopUpWasher	PopUpWasher.exe	"PopUpWasher pop-up killer"
N	PowerArchiver Tray	PASTARTER.EXE	"System Tray access to PowerArchiver from ConeXware
N	PowerBar	Powerbar.exe	"Part of Cyberlink's PowerDVD software. Not sure what exactly it does
U	PowerPanel Personal Edition User Interaction	pppeuser.exe	"CyberPower PowerPanel Personal Edition UPS Monitoring & Control Software - ""is included with CyberPower's products. This exclusive software allows control and monitoring of your UPS to provide protection for your computer system
N	PowerReg Scheduler	PowerReg Scheduler.exe	"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
?	PPScheduler	PPScheduler.exe	"Part of Nuance (ScanSoft) PaperPort - ""scan
U	PPUpdate	ppupdater.exe	"PPUpdater - updater that used to be part of PestPatrol before CA's acquisition"
X	pqhelper	pqhelper.exe	"Searchcentrix hijacker"
X	PrdMgr.exe	PrdMgr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	precpop2	starter.exe	"PrecisionPop adware"
X	Premeter	nrpr.exe	"NetRatings Premeter spyware"
?	PrimaLauncher	Launcher.exe	"Associated with PrimaScan scanners. Is it required?"
X	Print Driver Helper Service	crsrr.exe	"Added by the AGENT-BC TROJAN!"
X	print sharing	[path] hidden32.exe [path] explorer.exe	"Added by the ZCREW.B BACKDOOR! Note - the legitimate Windows Explorer (explorer.exe) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
X	printer	SpyAssaultScanner.exe	"SpyAssault spyware remover - not recommended
X	printer	printer.exe	"WinIFixer rogue security software - not recommended
X	printer	sysprinter.exe	"Added by the SMALL.ZY TROJAN!"
X	Printer Monitor	webprinter.exe	"Added by the IRCBOT-Z TROJAN!"
X	Printer Spool	updater.exe	"Added by a variant of the RBOT WORM!"
X	Printer Spooler	spooler.exe	"Added by the DELF-JJ TROJAN!"
U	PRISMSVR	PRISMSVR.EXE	Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
U	PRISMSVR.EXE	PRISMSVR.EXE	Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
N	Privacy Eraser Pro	PrivacyEraser.exe	"Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities"
X	Privacy Guarantor	PrivacyGuarantor.exe	"Privacy Guarantor rogue privacy program - not recommended
X	Privacy Protector	Privacy Protector.exe	"PrivacyProtector rogue privacy tool - not recommended
X	Privacy Watcher	Privacy Watcher.exe	"Privacy Watcher rogue privacy program - not recommended
X	PrizeSurfer	prizesurfer.exe	"""PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!"" Stealth installed malware"
U	ProcessGovernor	processgovernor.exe	"Core engine for Process Lasso from Bitsum Technologies - ""a state-of-the-art
U	ProcessSupervisorGUI	ProcessSupervisor.exe	"Graphical user interface (GUI) for Process Lasso from Bitsum Technologies - ""a state-of-the-art
N	Profiler	Profiler.exe	"Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
U	Progressive Touch	SynTPLpr.exe	"Synaptics TouchPad driver helper - included with drivers for Synaptics based TouchPads
N	projselector	projselector.exe	Roxio Project Selector - can be started manually
X	PromulGate	PgMonitr.exe	"Delfin Promulgate adware variant"
N	PRONoMgr.exe	PRONoMgr.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U	PRONoMgrWired	PRONoMgr.exe	Intel's Pro 100 Ethernet card manager
X	Proof Defender 2009	pdfndr.exe	"Proof Defender 2009 rogue security software - not recommended
X	ProSiteFinder	prositefinder.exe	"ProSiteFinder adware"
X	ProtectDefender	ProtectDefender.exe	"ProtectDefender rogue security software - not recommended
X	ProtectSoldier	ProtectSoldier.exe	"ProtectSoldier rogue security software - not recommended
X	PSCastor	PSCastor.exe	"Added by the PSCASTOR TROJAN!"
X	pshower	pshwr.exe	"SafeSurfing adware variant"
X	PSLister	PSLister.exe	"PurityScan C adware"
U	PspContr	pspcontr.exe	Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
Y	PSQLLauncher	launcher.exe	"IBM ThinkVantage Fingerprint Software"
U	PSwitch	ProxySwitcher.exe	"""Proxy Switcher offers full featured connection management solution"" as different internet connections often require completely different proxy server settings and it's a real pain to change them manually"
U	PTHOSTTR	PTHOSTTR.EXE	"System Tray access to HP ProtectTools Security Manager - ""can be configured to prevent unauthorized access using Smart Cards
N	PVR	PVR.exe	"Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card"
Y	pwmgr	pwmgr.exe	"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
X	Pwr32ctr	Pwr32ctr.exe	"Added by the GEMA TROJAN!"
N	QBReminderFlash	QBReminder.exe	"Upgrade reminder for Intuit's QuickBooks"
X	QBRSR	QuickBrowser.exe	top-banners.com adware
X	qktier	qktier.exe	"Added by the VBNA.ISU WORM!"
U	Qoeloader	Qoeloader.exe	"Qurb 2.0 anti-spam tool for Outlook/Outlook Express. Required when supporting OE but not for Outlook. Shortcut available via Start -> Programs"
X	QTSvc	ssvr.exe	Premium rate adult content dialler
U	QtZgAcer	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	QtZpAcer	QtZpAcer.exe	Acer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
U	QuickBooks Database Server Manager	QBServerUtilityMgr.exe	"Part of QuickBooks Pro/Premier from Intuit - ""QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access."" See here for further information"
X	quicken	Winrar.exe	"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
X	QuickHealCleaner	QuickHealCleaner.exe	"QuickHealCleaner rogue spyware remover - not recommended
Y	QuickLaunchEr	QuickLaunchEr.Exe	QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
X	Quicktime Mediaplayr	wnmplyr.exe	"Added by a variant of the RBOT WORM!"
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	"Different numbers caused by number of launches. So if 3 updates are made separately
X	QuicktimeMngr	QUICKTIMEMNGR.EXE	"Added by the WOOTBOT.AW WORM!"
N	QuickTour	QuickTour.exe	"Runs the QuickTour on the first reboot after installing Logitech's SetPoint software for their range of wired and wireless keyboards and pointing devices (mice
U	Qwest 11n Wireless WPS Tool	WpsCenter.exe	Wireless configuration utility for the Qwest 11N 150MB USB wireless adapter
U	RadioSvr	RadioSvr.EXE	Used to configure wire less networks. Windows automatically detects the Wireless network and it configures the network
U	Rainlendar	Rainlendar.exe	"Rainlendar is a customizable calendar that displays the current month"
N	Rainmeter	Rainmeter.exe	"Rainmeter is a customizable performance meter
?	RAMConnectionChecker	RAMConnChecker.exe	"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
?	RAMGINAConnWatch	RAMConnWatcher.exe	"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
X	Rapdatae	rabseuser.exe	"Added by the QQPASS-S TROJAN!"
X	Raptelnet	ravspeger.exe	"Added by the QQPASS-AA TROJAN!"
X	RasCon Remote Access Service Manager	rasmngr.exe	"Added by the SPYBOT.EM WORM!"
X	RavAv	AdobeR.exe	"Added by the RJUMP.D WORM!"
X	ravshell	expl0rer.exe	"Added by the DLOADER.MAR TROJAN!"
X	Ravshell	IEXPLORER.EXE	"Added by the AGENT.URZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
Y	RavTimer	RavTimer.exe	"RAV AntiVirus"
X	RavUptpe	ravsesur.exe	"Added by the QQPASS-T TROJAN!"
X	RDListener	RDListener.exe	"RegDefense rogue registry cleaner - not recommended"
X	realone_nt2003	moniker.exe	"Added by the SNONE.A WORM!"
X	Realplayer.exe	Realplayer.exe	"Added by the DELF.CNV TROJAN!"
U	Realtek AC97 Audio - Event Monitor	ALCMTR.EXE	"Realtek Azalia Audio - Event Monitor
X	Recycle Bin Handler	recycler.exe	"Added by the SHUCKBOT-A TROJAN!"
N	Redline Taskbar	taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
U	RegClean Expert Scheduler	RCHelper.exe	"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
U	RegClean Expert Scheduler	RCScheduler.exe	"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
N	Register MediaRing Talk	register.exe	If you don't want to register MediaRing and be reminded about it every bootup disable it
X	Registration Service	toker.exe	"Added by the SDBOT-BB WORM!"
X	Registry Loader	regloadr.exe	"Added by the GAOBOT.AO WORM!"
X	Registry Scanner	regscanr.exe	"Added by a variant of the OPTIX TROJAN!"
X	Registry Serv	regsvr.exe	"Added by the WEBMONEY-G TROJAN!"
N	RegistryBooster	RegistryBooster.exe	"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
X	RegistryDoctor2008	registrydoctor.exe	"RegistryDoctor2008 rogue registry cleaner - not recommended
X	REGRUN	dialer.exe	"Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!"
X	Regscan	regscanr.exe	"Added by the OPTIX-SE TROJAN!"
X	regsvr	regsvr.exe	"Added by the WEBMONEY-G TROJAN!"
X	RegVer	REGVER.EXE	"Added by the LATINUS.16 TROJAN!"
X	reg_key	FUKULAMER.exe	"Added by the BEAGLE.AH WORM!"
N	Reminder	reminder.exe	From MS Money. Reminds you of your bills
N	Reminder	Reminder.exe	"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
X	Reminder	Reminder.exe	"Registration reminder for the Secure Expert Cleaner rogue privacy program - see here. Located in %ProgramFiles%\SecureExpertCleaner"
X	Remote Access Service Manager	rasmngr.exe	"Added by the AGOBOT.KU WORM!"
N	Remote Controller	TVRMVCR.EXE	"ProLink PlayTVpro TV tuner software"
U	remote master	remote master.exe	Required if you want your ASUS Remote control to work at all. Available via Start -> Programs
Y	Remote Update Monitor	imonitor.exe	"Sophos Antivirus Remote Update utility - provides an easy way for remote workers to keep up to date with their virus protection via a website or network connection provided by their employer"
U	Replicator	PTReplicator.exe	"Replicator from Karen's powertools. ""Automatically backup files
N	Resource Meter	rsrcmtr.exe	Windows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes
U	RetrieverScheduler	retrieverscheduler.exe	"80-20 Retriever from 80-20 - ""80-20 Retriever is a powerful personal search tool that encompasses email folders
X	rforce	EXP1ORER.EXE	"Added by the DROPPER.KN TROJAN! Note the number ""1"" in the filename rather than letter ""L"". It also drops another file named DEVICEMAP.SYS which is the ROOTKIT.O TROJAN!"
U	RhinoBlocker	RhinoBlocker.exe	"RhinoBlocker - pop-up stopper"
N	Riorad Manager	riomgr.exe	"""Riorad Explorer is hands-down the most advanced Windows software companion for your Rio MP3 player"""
U	RivaTuner	RivaTuner.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for XP and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTuner	RivaTunerWrapper.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTuner Application	RivaTuner.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for XP and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTunerStartupDaemon	RivaTuner.exe	"Part of RivaTuner - a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This entry is for XP and applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTunerStartupDaemon	RivaTunerWrapper.exe	"Part of RivaTuner - a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This entry is for Vista and loads the main application (RivaTuner.exe) to apply overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RivaTunerWrapper Application	RivaTunerWrapper.exe	"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
U	RK Launcher	RKLauncher.exe	"RK Launcher by RaduKing - ""is a free application that will allow the user to have a visually pleasing bar at the side of the screen that is used to quickly launch shortcuts"""
X	Rnudll32	tadxtr.exe	"Added by the QQPASS-O TROJAN!"
N	RoboFormWatcher	RoboFormWatcher.exe	"Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs"
X	Router	Router.exe	"Added by the AGENT.FJN TROJAN!"
X	RpcLocator	explorer.exe	"Added by the RBOT-GSA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	RPCserv32g	MSDEFR.EXE	"Added by the BOBAX.AD WORM!"
U	RssReader	RssReader.exe	"RssReader - a free RSS reader able to display any RSS and Atom news feed (XML)"
Y	RTMonitor	RTMonitor.exe	"Cheyenne (now eTrust) antivirus"
X	Run	Manager.exe	"Added by the DELF.EUN TROJAN! The file is found in %AppData%\Roaming\Adobe - see the link for more information"
X	Run Msn Messenger	msnmgr.exe	"Added by the AGOBOT.HA WORM!"
U	Run StartupMonitor	StartupMonitor.exe	"Mike Lin's StartupMonitor
X	run=	fntldr.exe	"CoolWebSearch Tapicfg parasite variant"
X	run=	RegistryReminder.exe	"Added by the APSTROJAN.OB TROJAN!"
X	run=	wmplayer.exe	"CoolWebSearch Smartsearch parasite variant"
U	RunNarrator	Narrator.exe	Associated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
X	runner1	updater.exe	Added by the CRYPT.ULPM.GEN TROJAN!
X	RunProg	Server.exe	"Added by the OPTIX.04.A TROJAN!"
X	runreper	viewer.exe	"Added by the REPER.A VIRUS!"
N	RxUser	RxUser.exe	"Part of Dell Resolution Assistant - ""a diagnostic program that allows you to contact Dell. When factory-installed by Dell
Y	R_server	r_server.exe	"Radmin - remote admistrator server. Note - the file is located in %ProgramFiles%\Radmin"
X	r_server	r_server.exe	"Added by the HACDEF-DR TROJAN! Note - do not confuse with the valid Radmin file with the same name which is located in %ProgramFiles%\Radmin. This one is located in %System%"
X	s4helper	s4helper.exe	"Searchcentrix hijacker"
X	SafeFighter	SafeFighter.exe	"SafeFighter rogue security software - not recommended
X	SafeStripReminder	SafeStripReminder.exe	"SafeStrip rogue security software - not recommended
X	SafetyCenter	protector.exe	"Safety Center rogue security software - not recommended
X	SafetyKeeper	SafetyKeeper.exe	"SafetyKeeper rogue security software - not recommended
U	Samsung PanelMgr	SSMMgr.exe	"Monitors ink levels
U	SamsungSM PanelMgr	SSMMgr.exe	"Monitors ink levels
X	SaveArmor	SaveArmor.exe	"SaveArmor rogue security software - not recommended
X	SaveDefender	SaveDefender.exe	"SaveDefender rogue security software - not recommended
X	SaveKeeper	SaveKeeper.exe	"SaveKeeper rogue security software - not recommended
X	SaveSoldier	SaveSoldier.exe	"SaveSoldier rogue security software - not recommended
X	SB	SpywareBomber.exe	"SpywareBomber rogue spyware remover - not recommended
N	SBC Yahoo! Connection Manager	ConnectionManager.exe	Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection
N	ScanSoft PaperPort 7 Registration Reminder	NAVBrowser.EXE	"Registration reminder for PaperPort 7 from Scansoft (now Nuance)"
X	ScanSpyware	Scanner.exe	"ScanSpyware rogue security software - not recommended
X	ScanSpyware v3.2	Scanner.exe	"ScanSpyware rogue security software - not recommended
X	ScanSpyware v3.5	Scanner.exe	"ScanSpyware rogue security software - not recommended
N	SCardSvr	scardsvr.exe	Related to SmartCard readers and sometimes uses lots of system resources
X	Scheduler	expIorer.exe	"Added by the TACTSLAY.A TROJAN!"
U	scheduler_monitor	init_scheduler.exe	"Scheduler for ReaConverter advanced image converter"
X	Scheduling Agent	Scheduler.exe	"Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect"
N	SchSvr	SchSvr.exe	"WinScheduler is installed with Home Theater or WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
N	sclauncher	sclauncher.exe	"SimpleCenter digital media player/manager that supports the iPod
N	ScreenHunter 4.0 Free	ScreenHunter.exe	"""ScreenHunter 4.0 Free is a completely free screen capture software for you to easily take screenshots"""
X	ScrSvr	ScrSvr.exe	"Added by the OPASERV WORM!"
X	scssrr.exe	Services.exe	"Added by the VB-EMX TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	sctrlmgr	sescmgr.exe	"Added by a variant of the DWNLDR-GAH TROJAN!"
?	SDClientMonitor	sdclientmonitor.exe	"Related to LANDesk Management Suite from LANDesk Software Ltd. What does it do and is it required?"
?	SDJobCheck	triggusr.exe	"Part of CA Unicenter Software Delivery - manage software across various systems
?	SDMSSplash	launcher.exe	"Part of HP's Smart Desktop Management System - ""Preloaded on select business desktops
N	SDPhotoBar.exe	SDPhotoBar.exe	"SmartDraw Photo (now FotoFinsh) - ""organize
X	SDR6V_Check	udcsdr.exe	"Part of the DriveCleaner rogue security software - not recommended
X	SDR6_Check	udcsdr.exe	"Part of the DriveCleaner rogue security software - not recommended
X	Search Bar	taskbar.exe	"Added by the OPANKI-F WORM!"
X	Search Defender	SearchDefender.exe	"Installed by SpeedItUp without permission
X	searchbar	vnmispoisn downloader.exe	SearchBarCash adware variant
X	SearchEnhancement	scbar.exe	"SCBar foistware"
X	SearchUpgrader	SearchUpgrader.exe	Hijacker
U	SECRETMAKER	secretmaker.exe	"Secretmaker is a combination of eight privacy-defending programs
X	Secure System	integitor.exe	"Added by the AGOBOT.ACI WORM!"
X	SecureCleaner	SecureCleaner.exe	"SecureCleaner spyware remover - not recommended
X	SecureFighter	SecureFighter.exe	"SecureFighter rogue security software - not recommended
X	SecureKeeper	SecureKeeper.exe	"SecureKeeper rogue security software - not recommended
X	SecureWarrior	SecureWarrior.exe	"SecureWarrior rogue security software - not recommended
X	Security Antivirus Xp 1	inetfor.exe	"Added by the SDBOT.BAV WORM!"
U	Security Manager	SecurityManager.exe	"A ComCast Internet software suite that provides a variety of features (firewall
X	Security Server DB	secserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	SecurityCenter	securitycenter.exe	"Desktop Security 2010 rogue security software - not recommended
X	SecurityFighter	SecurityFighter.exe	"SecurityFighter rogue security software - not recommended
X	SecuritySoldier	SecuritySoldier.exe	"SecuritySoldier rogue security software - not recommended
X	Select server	slcsvr.exe	"Added by the DLOADER-WD TROJAN!"
X	server	server.exe	"Added by the DELTAD.A WORM!"
X	server	server.exe	"Added by the SINGU-Q TROJAN!"
X	SERVER.EXE	SERVER.EXE	"Added by the BUSHTRO122 or SMOKODOOR TROJANS!"
U	Service Centre	launcher.exe	"Management tool for the Open Networks iConnect series of products - as used by Australian ISP's such as iiNet and Hotkey"
N	Service Connection	sccenter.exe	For Compaq PC's. Part of Backweb
X	Service Drivers	MSNMEssenger.exe	"Added by a variant of the RBOT WORM!"
N	Service Manager	sqlmangr.exe	"SQL Server Service Manager - provides tray access to SQL server
X	Service Manager	SERVICEMGR.EXE	"Added by the PASSMAIL-D VIRUS!"
X	Service Manager	serv3manager.exe	"Added by the SDBOT-AGO WORM!"
X	Service Monitor	winxpser.exe	"Added by the RBOT-BDF WORM!"
X	Service Scheduler	scheduler.exe	"Added by the AGOBOT-PH WORM!"
X	servicelayer	servicelayer.exe	"Added by the RENOS.FJ TROJAN! Note - do not confuse this with the Nokia service of the same name which resides in %ProgramFiles%\Common Files\PCSuite\Services or %Program Files%\PC Connectivity Solution. This one is located in %Windir%"
X	Servicer	servcr.exe	"Added by the SDBOT.BAH TROJAN!"
X	Services	iexplorer.exe	Added by an unidentified WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
X	Services	iexploler.exe	"Added by the RANCK-LT TROJAN!"
X	Services Manager	svsmanager.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Services Manager!	svmanager.exe	"Added by the IRCBOT.ATZ BACKDOOR!"
X	Services Managers	svcmanager.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
Y	SetDefaultPrinter	cloaker.exe	Used by HP and Compaq computers to hide the windows of programs passed as arguments to it
U	ShadowUser Pro Edition	ShadowUser.exe	"""StorageCraft™ ShadowUser™ provides easy to use desktop security and protection for Windows operating systems. ShadowUser is the best way to prevent unwanted changes to PCs and laptops"""
X	shambl3r*	shambl3r.exe	"Added by the REMABL WORM! where * is 2 to 11"
N	Shcenter	chcenter.exe	"IMSI HiJaak - ""the easiest way to convert
X	Shell	Explorer.exe sound_drive16.exe	"Added by the GP BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""sound_drive16.exe"" file is located in %System%"
X	Shell	"Explorer.exe	msmsgs.exe"
X	Shell	Explorer.exe svchost.exe	"Added by the DOYORG BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The legitimate svchost.exe process is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
X	shell	explorer.exe	"Added by the KAKKEYS TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Shell	Explorer.exe iexplore.exe	"Added by the KIPIS-U WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The legitimate Internet Explorer (iexplore.exe) is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\Microsoft"
X	Shell	Explorer.exe winupdate.exe	"Added by the AGENT-FD TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""winupdate.exe"" file is located in %System%"
X	Shell	Explorer.exe [path] ibm[RANDOM 5 DIGIT NUMBER].exe	"Added by the ANSERIN TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files"
X	Shell	Explorer.exe winsys32.exe	"Added by the DELF.CP BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""winsys32.exe"" file is located in %Windir%"
X	Shell	explorer.exe msbnc.exe	"Added by the AGENT-PL BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""msbnc.exe"" file is located in %System%"
X	Shell	Explorer.exe kbdsys.exe	"Added by the DAPROSY WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""kbdsys.exe"" file is located in %AppData%\Microsoft\Keyboard"
X	Shell	Explorer.exe init32m.exe	"Added by the DLSW-B TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""init32m.exe"" file is located in %System%"
X	Shell	Explorer.exe smssnt.exe	"Added by the AGOBOT.EE TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""smssnt.exe"" file is located in %System%"
X	Shell32	explorer.exe	"Added by the SDBOT-NF WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
N	ShockmachineReminder	SmReminder.exe	"""Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline"". Could be a registration reminder for the trial version"
X	Shockwave Support	FlashPlayer.exe	"Added by the DELF-DRA WORM!"
N	Si Meter	SIMETER.EXE	"
U	Sidebar	Sidebar.exe	"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
N	SIDEBAR	dsidebar.exe	"""Desktop Sidebar provides you with instant access to the information you most desire by grabbing data from your PC and the internet. The result is a dynamic visual display you configure and control"""
N	Simple Star PhotoShow Media Manager	mssysmgr.exe	"Simple Star PhotoShow photo editing and organizing software
N	SiS KHooker	khooker.exe	SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U	siscolor	color.exe	Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
N	SleepManager	SleepMgr.exe	"This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY
U	Slibe.com	Sliber.EXE	"Sliber - freeware screen capturing & online sharing tool"
U	SlickRun	sr.exe	"""SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords)
N	slimp3	SliMP3 Server.exe	"Slimp3 Server - ""presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards
N	SM56 Helper Win32 Utility	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
N	Sm56acl	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
N	Smart Card Service	ScardSvr.exe	"For Smart Card readers. Known to cause problems
X	Smartfixer	SmartFixer.exe	"SmartFixer rogue system error and cleaning utility - not recommended"
?	SmartLauncher	SmartLauncher.exe	"Related to SmartLauncher from Northstar Systems Corp. What does it do and is it required?"
X	smartprotector	smartprotector.exe	"Smart Protector rogue security software - not recommended
U	SmartRAM	MemCleaner.exe	"Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional"
X	SmcSVR	SmcSVR.exe	"Added by the LEGMIR.JU TROJAN!"
X	smgr	smgr.exe	Added by an unidentified WORM or TROJAN!
N	Smserial	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
N	SMSI Loader	SMLoader.exe	"Smith Micro HotFax - fax software"
X	smsys	Explorer.exe	"Added by the CLICKER-C BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a ""Template"" subfolder"
U	SMSystemAnalyzer	SMSystemAnalyzer.exe	"Part of the Iolo System Mechanic optimization tool"
N	SMToolbar	SMToolbar.exe	StartMake.com toolbar
X	SM_IAN	ian_monitor.exe	"AdvancedCleaner rogue security software - not recommended
X	SN Messenger	msnmsgr.exe	"Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
U	Snapfish Media Detector	SnapfishMediaDetector.exe	"Snapfish Media Detector - ""Upload your photos to Snapfish
U	SnapfishMediaDetector	SnapfishMediaDetector.exe	"Snapfish Media Detector - ""Upload your photos to Snapfish
?	snbr	snbr.exe	"??"
X	sncntr	sncntr.exe	"Added by the DLUCA-I TROJAN!"
X	Sndsaver	Sndsaver.exe	"Added by the GEMA TROJAN!"
?	SO5 Integrator Pass One	sointgr.exe	"StarOffice 5. See here for more details"
?	SO5 Integrator Pass Two	sointgr.exe	"StarOffice 5. See here for more details"
X	SoftBarrier	SoftBarrier.exe	"SoftBarrier rogue security software - not recommended
X	SoftSoldier	SoftSoldier.exe	"SoftSoldier rogue security software - not recommended
N	Sony Ericsson PC Suite	Application Launcher.exe	"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
U	SonyPowerCfg	SPMgr.exe	Related to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices
?	SoSyncMonitor	SoSyncMonitor.exe	"SuperOffice related. What does it do and is it required?"
X	Sound Loader	sndloader.exe	"Added by the AGOBOT-BV WORM!"
U	SP2 Connection Patcher	SP2ConnPatcher.exe	Changes limit of concurrent TCP connections of Windows Service Pack 2
X	sp2ctr	sp2ctr.exe	"Added by the DLUCA-M TROJAN!"
U	Spam Monitor	SpamMonitor.Exe	"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
U	spamihilator	spamihilator.exe	"Spamihilator - spam filter"
U	SpamMonitor	SpamMonitor.Exe	"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
U	SpamMonitor Application	SpamMonitor.Exe	"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
?	SPC610NC_Monitor	Monitor.exe	"Related to the Philips SPC610NC webcam. What does it do and is it required?"
N	SpeedBitVideoAccelerator	VideoAccelerator.exe	"""SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups"""
U	SpeedMeter	SpeedMeter.exe	Application measuring upload and download speed
X	SpeedRunner	SpeedRunner.exe	Identified as a variant of the TrojanDownloader.Matcash malware
N	Spinner Plus	spinner.exe	""Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed
X	spoolsv manager	SpoolMgr.exe	"Added by the ASSIRAL WORM!"
X	spoolsvr	SPOOLSVR.EXE	"Added by the RAYROB.A TROJAN!"
U	Spy Blocker	spyblocker.exe	"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important
U	Spy Protector	SpyProtector.exe	"Included in the full version of Security Task Manager
U	SpyBlocker	spyblocker.exe	"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important
Y	Spybot - Search & Destroy	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
Y	SpybotSD TeaTimer	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
X	SpyBurner	SpyBurner.exe	"SpyBurner rogue spyware remover - not recommended
X	SpyDevastator	SpyDevastator.exe	"SpyDevastator rogue security software - not recommended
X	SpyFighterMonitor	SpyFighter.exe	"SpyFighter spyware remover - not recommended
X	SpyGuarder	spyguarder.exe	"SpyGuarder rogue security software - not recommended
X	SpyHealer	SpyHealer.exe	"SpyHeal rogue spyware remover - not recommended"
X	SpyHunter	SpyHunter.exe	"Enigma SpyHunter - not recommended
X	Spyinator	Spyinator.exe	"Spyinator rogue spyware remover - not recommended"
U	Spykiller	Spykiller.exe	"Spyware remover - older versions are not recommended
X	SpyKiller.exe	SpyKiller.exe	"Super Spyware Killer rogue spyware remover - not recommended"
X	SpyNuker	Spynuker.exe	"A ""spyware removal program"" by TrekBlue
X	SpyOnThis Monitor	SpyOnThisMonitor.exe	"SpyOnThis rogue spyware remover - not recommended"
U	spyprodetector	spydetector.exe	Spyware Process Detector spyware remover
U	spyshelter	antikeylogger.exe	"SpyShelter - anti-keylogger protects against keylogger programs monitoring your keystrokes"
X	SpyShredder	SpyShredder.exe	"SpyShredder rogue spyware remover
X	spysoldier	spysoldier.exe	"SpySoldier rogue spyware remover - not recommended
X	SpySpotter	SpySpotter.exe	"SpySpotter rogue spyware remover - not recommended
X	SpySpotter System Defender	Defender.exe	"SpySpotter rogue spyware remover - not recommended
U	SpyStopper	spystopper.exe	"SpyStopper - blocks intrusive spyware
U	SpySweeper	SpySweeper.exe	"Spy Sweeper - detects and removes spyware"
X	SpyTrooper	SpyTrooper.exe	"SpyTrooper rogue spyware remover - not recommended
Y	Spyware Doctor	spydoctor.exe	"Older version of Spyware Doctor antispyware from PC Tools"
Y	Spyware Doctor	swdoctor.exe	"Older version of Spyware Doctor antispyware from PC Tools"
U	Spyware Nuker Installer	SpywareNukerInstaller.exe	"Spyware remover by TrekBlue. Previously not recommended but the latest version was delisted here"
N	Spyware Scanner	AseScanner.exe	"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
X	Spyware Slayer	SpywareSlayer.Exe	"Spyware Slayer spyware remover - not recommended
X	Spyware Stormer	SpywareStormer.Exe	"Spyware Stormer spyware remover - not recommended
X	Spyware Striker Pro	SpywareStriker.exe	"Ascentive Spyware Striker Pro rogue spyware remover - not recommended
X	Spyware Sweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
U	Spyware Vanisher	FreeScanner.exe	"Spyware Vanisher - spyware remover. Previously not recommended
U	Spyware Vanisher	SpywareVanisher.exe	"Spyware Vanisher - spyware remover. Previously not recommended
X	spywareisolator	spywareisolator.exe	"SpywareIsolator rogue spyware remover - not recommended
X	SpywareLocker	SpywareLocker.exe	"SpywareLocker rogue security software - not recommended
X	SpywareRemover	SpywareRemover.exe	"SpywareRemover spyware remover - not recommended
X	SpywareRemover2009	SR.exe	"SpywareRemover 2009 rogue spyware remover - not recommended
X	spywarescanner	spywarescanner.exe	"Spyware Scanner 2008 rogue security software - not recommended
X	SpywareSweeper	SpywareSweeper.exe	"SpywareSweeper rogue spyware remover - not recommended"
X	SQInstaller	SQInstaller.exe	"Xupiter SQWire toolbar related. Use Spybot S&D
X	SQL	server.exe	"Added by the PUNYA-B WORM!"
X	ssgrate.exe	sysdoor.exe	"Added by the MITGLIEDER.N TROJAN!"
X	ssgrate.exe	winerdir.exe	"Added by the MITGLIEDER.O TROJAN!"
U	SSMMgr	SSMMgr.exe	"Monitors ink levels
X	start	isfmntr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	start	sbmntr.exe	"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
X	Start Upping	taksmgr.exe	"Added by the RBOT-QK WORM!"
X	startkey	svcmgr.exe	"Added by the HIPPER-B TROJAN!"
X	startkey	RunWinRaR.exe	Added by a variant of the BIFROSE-LV TROJAN!
X	startkey	explorer.exe	"Added by the BCKDR-MLD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	startkey	server.exe	"Added by the BIFROSE-DB TROJAN!"
X	startkey	antivir.exe	"Added by the BIFROSE-TO TROJAN!"
U	Startup Manager Scanner	StartupMonitor.exe	"Startup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans
Y	Startup Scan	Sensor.EXE	"AntiVirus Quick Heal - scheduling agent"
U	StartupMonitor	StartupMonitor.exe	"Mike Lin's StartupMonitor
X	StatBar	STATBAR.exe	"StatBar (system status bar) allows you to quickly get an overview of your system's condition (memory
X	stcloader	stcloader.exe	"SecondThought adware"
X	stealth.injector.exe	stealth.injector.exe	"Added by the THEALS.A WORM!"
?	STPMGR	STPMGR.EXE	"Part of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs"
N	Streamload Uploader	StreamMgr.exe	"Uploader for MediaMax (was Streamload) - ""gives you a private and secure place to upload
X	SunJavaSched	ccEvtMngr.exe	"Added by the SDBOT-YP WORM!"
X	SunJavaUpdaterv13	javaupdater.exe	"Added by the ROUTROBOT WORM!"
Y	SunProtectionServer	SunProtectionServer.exe	"CounterSpy antispyware software"
Y	SunServer	SunServer.exe	"CounterSpy antispyware software"
X	super	super.exe	"Added by the AGOBOT-QT WORM!"
U	Supercleaner	Supercleaner.exe	"Supercleaner - all in one disk cleaner for your computer"
X	Supervisor.exe	Supervisor.exe	"Has been reported to be associated with various antitrojan software like ATS and PC Doorguard. If so it's required in Startup - any further information is welcome"
X	Surfer lptt01	surfer.exe	"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	Surfer ml097e	surfer.exe	"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
N	suScheduler	UCLauncher.exe	"Scheduler for versions of ThinkVantage System Update (for software updates) found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks"
X	Sustem	explorer.exe	"Added by an unidentified VIRUS
X	SustemUpdate	explorer.exe	"Added by an unidentified VIRUS
X	SVA Player	SVAplayer.exe	"SVAPlayer parasite"
X	SVCHOST	taskgmr.exe	"Added by the MYTOB.F or MYTOB.H WORMS!"
X	svchost	[path to explorer.exe]	"Added by the UNREAL-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
X	svchostr	svchostr.exe	Added by an unidentified WORM or TROJAN!
X	Svconr	Svconr.exe	"WaveRevenue-lBann adware"
X	Svhost Service Server	svhostser.exe	"Added by a variant of the RBOT WORM! See here"
X	svshost	messenger.exe	"Added by the LOONY-G TROJAN!"
X	SWCaller	SWcaller.exe	"Swporta homepage hijacker"
U	swg	GoogleToolbarNotifier.exe	"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
X	SwiftCleaner	SwiftCleanerScanner.exe	"SwiftCleaner rogue cleaning utility - not recommended
U	Switcher	Switcher.exe	"""On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
N	SxgTkBar	sxgtkbar.exe	Yamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration
X	Sygate Personal Firewall	syserror.exe	"Added by the RBOT.UC WORM!"
X	Symantec Antivirus professional	for.exe	"Added by a variant of the FORBOT WORM!"
X	Symantec Antivirus professional	xplrer.exe	"Added by a variant of the FORBOT WORM!"
X	SyncManager	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
U	SynTPLpr	SynTPLpr.exe	"Synaptics TouchPad driver helper - included with drivers for Synaptics based TouchPads
X	SYS1	explorar.exe	"Added by the SILLYFDC.BDJ WORM!"
X	syscheck	iexplorer.exe	Added by the AGENT.DM TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
X	SysCleaner	SysCleaner.exe	"SysCleaner rogue cleaning utility - not recommended
X	SysCom	msnmsgr.exe	"Added by the BANK-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%MSN Messenger or %ProgramFiles%Windows LiveMessenger. This one is located in %Windir%\system"
X	sysconfig	iexplorer.exe	"Added by the CULT.C WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	sysfiler	sysfiler.exe	"Added by the RETSAM TROJAN!"
X	SysManager	Manager.EXE	"Added by the DAGGER.140 TROJAN!"
X	sysMett1	explorer.exe	"Added by the LEGMIR-Y TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	sysmngr32	sys64mnger.exe	"Added by a variant of the RBOT WORM!"
X	Sysmon	SystemMonitor.exe	"Added by the NUJAMA-A WORM!"
X	sysPersonalFirewall	msnmssgr.exe	"Added by a variant of the RBOT WORM!"
X	sysPersonalFirewall	tskm0nitor.exe	"Added by the SDBOT.APC WORM!"
X	SysProtector	SysProtector.exe	"SysProtector rogue security software - not recommended
X	SysRes	TASKMANAGER.exe	"Added by the ELIPTER.A or ELIPTER.B WORMS!"
X	system	Explorer.exe	"Added by the GRAYBIRD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	System	YPager.exe	"Added by the JUNTADOR.K TROJAN! Note - this is not the older version of Yahoo! Messenger which shares the same filename and is located on %ProgramFiles%\Yahoo!\Messenger"
X	System	cber.exe	Added by an unidentified TROJAN!
X	system	messenger.exe	Added by an unidentified WORM or TROJAN!
X	SYSTEM	windmupdr.exe	"Added by a variant of the RBOT WORM!"
X	system	svcr.exe	"Added by the SPYONE TROJAN!"
X	System	Xsfr.exe	"Added by the CULLER-D WORM!"
X	System 64 Driver for Games	sys64dvr.exe	"Added by the SDBOT TROJAN!"
X	System CGI Manager	syscgmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	system check	updater.exe	Unidentified adware downloader
X	System Download Manager	SysMgr.exe	"Added by the RBOT.CIG WORM!"
X	System driver	Messenger.exe	"Added by the WOOTBOT.GI WORM!"
U	System Files Updater	System Files Updater.exe	"System Files Updater from Flyakiteosx ""will transform the look of an ordinary Windows XP system to resemble the look of Mac OS X"""
X	System Manager	sysmgr.exe	"Added by the IRCBOT.AGW BACKDOOR!"
X	System Manager	sysmngr.exe	"Added by the IRCBOT.BAQ BACKDOOR!"
U	System Mechanic Popup Blocker	PopupBlocker.exe	"Popup blocker part of Iolo System Mechanic utility suite"
U	System Mechanic Popup Stopper	Popupstopper.exe	"Popup stopper part of Iolo System Mechanic utility suite"
X	System Process	CSRSR.exe	"Added by the AGOBOT-SQ WORM!"
X	System Registry Manager	sysrgmgr.exe	"Added by an unidentified WORM or TROJAN! See here"
X	System Service	exp0lrer.exe	"Added by a variant of the RBOT WORM!"
X	System Service	teskmangr.exe	"Added by the RBOT-AUV WORM!"
X	SYSTEM service helper	svchelper.exe	"Added by the MONKBD-A WORM!"
X	System Services Monitor	server.exe	"Bifrost malware"
X	System Update	wupdmgr.exe	"Added by the SOROMO-A TROJAN!"
X	System Update Application	msbuffer.exe	"Added by the SDBOT.AFF WORM!"
X	System Update2	explorer.exe	"Added by the AUTOTROJ-C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	System Update2	wupdmgr.exe	"Added by the AUTOTROJ-C TROJAN!"
X	System51616	msnmsgesser.exe	"Added by a variant of the PUSHBOT WORM! A family of worms that spread using MSN Messenger"
X	SystemArmor	SystemArmor.exe	"SystemArmor rogue security software - not recommended
X	SystemB	MessengerStopper.exe	"MessStopper adware"
X	SystemBooster2009	sbr_updater.exe	"SystemBooster2009 rogue system suite - not recommended
X	Systemboot	msnsngr.exe	"Added by a variant of the RBOT WORM!"
X	SystemData	MBlocker.exe	"Messenger Blocker rogue security software - not recommended"
X	SystemDefender	SystemDefender.exe	"SystemDefender rogue spyware remover - not recommended
X	SystemFighter	SystemFighter.exe	"SystemFighter rogue security software - not recommended
?	SystemGuardAlerter	SystemGuardAlerter.exe	"Part of the Iolo System Mechanic maintenance software. What does it do?"
X	SystemGuardCenter	SystemGuardCenter.exe	"System Guard Center rogue security suite - not recommended
X	Systems	sescmgr.exe	"Added by the DWNLDR-GAH TROJAN!"
U	SystemService	nsserver.exe	"NiceSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
X	SystemTuner	SystemTuner.exe	"System Tuner rogue system suite - not recommended
X	SystemWarrior	SystemWarrior.exe	"SystemWarrior rogue security software - not recommended
U	SystemWizard Sniffer	Sniffer.exe	"SystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC"
X	systr	SYSERVER.exe	"Added by the VB-DQY WORM!"
X	Systray	w32explorer.exe	"Added by the RBOT-AJY WORM!"
X	sys_Runtt1	explorer.exe	"Added by the LINEAGE-M TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
X	Syzmy3	exp1orer.exe	"Added by the LINEAG-AIO TROJAN! Note the number ""1"" in the filename"
X	SyztMy	expiorer.exe	"Added by the LINEAG-AIN TROJAN!"
N	T-DSL SpeedMgr	speedmgr.exe	T-Online ISP SpeedManager - shows upload and download speed. Also checks for updates automatically
?	TAcelMgr	TAcelMgr.exe	"TOSHIBA Acceleration Utilities related. What does it do and is it required?"
X	TAKSMGN	taskmr.exe	"Added by the RBOT-AHS WORM!"
N	TalkingReminder	TALKINGREMINDER.EXE	"Talking Reminder from Software River Solutions - talking calendar reminder"
U	TallyGenicom PanelMgr	SSMMgr.exe	"Monitors ink levels
?	TangoManager	TangoManager.exe	"Tango Broadband access software. Is it required?"
X	Task	tasker.exe	"Added by the MYDOOM.R WORM!"
X	Task Bar	TASKBAR.EXE	"Added by the FRETHEM.J WORM!"
?	Task BarSvr	TaskBarSvr.exe	"Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?"
X	Task Manager	taskmngr.exe	"Added by the RBOT.Y WORM!"
X	Task manager	taskemngr.exe	"Added by the RBOT-AGA WORM!"
X	Task manager	taskmngr.exe	"Added by the RBOT-AYZ WORM!"
X	Task Manager	tskmngr.exe	"Added by the RBOT-GOU WORM!"
X	Task manager	taskmangr.exe	"Added by the SPYBOT-CH WORM!"
N	Taskbar	Taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
X	taskdir	taskdir.exe	"Added by the LAGER.AQ TROJAN!"
X	taskmanager	taskmanager.exe	"Added by the AGOBOT-TF WORM!"
X	taskmanger	taskmanger.exe	"Added by a variant of the RBOT WORM!"
X	Taskmgr	Taskmgr.exe	"System1060 homepage hi-jacker. Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1060"" sub-folder"
X	taskmgr	taskmgr.exe	"Added by the STARTPAGE.G hijacker. Note - this is NOT the Windows Task Manager file!"
X	taskmgr	explorer.exe	"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	taskmgr	taskmanager.exe	"Added by the BCKDR-QHT BACKDOOR!"
X	TaskMgr	keymayker.exe	"Added by the LDPINCH-EP TROJAN!"
N	taskmgr.exe	taskmgr.exe	"Windows Task Manager in Windows XP. If run from the Startup folder
X	taskmgr.exe	paint.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmgr.exe	mirc.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmgr.exe	paintms.exe	Added by a variant of the AGENT.AH TROJAN!
X	taskmngr lptt01	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	taskmngr ml097e	taskmngr.exe	"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	taskngr	taskngr.exe	"Added by the BANCOS-AWX TROJAN!"
U	tbbMeter	tbbmeter.exe	"tbbMeter - bandwidth meter developed by thinkbroadband.com ""to help you monitor your Internet usage. It allows you to see how much your computer is sending to and receiving from the Internet in real time. It also shows you how your Internet usage varies at different times of the day"""
U	tcomantidialerrun	T-Com Antidialer.exe	"T-Com Antidialer from T-Com internet provider. It's a small antidialer utility which monitors whether you're trying to dial a new connection. It basically asks you do you want to dial the shown number or not. Protects agains dialer malware"
X	TCPServer	TCPServer.exe	"Added by a variant of the SDBOT WORM!"
X	tcupdater	tcupdater.exe	Topconverting.com/180Search adware updater
Y	TeaTimer	TeaTimer.exe	"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
U	tgcmd	hcenter.exe	"Bellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
U	The Easy Bee's Hive	ATCEgSvr.exe	"The Easy Bee is a software that allows you to record Internet navigation sequences
X	The Spy Guard Monitor	spyguard_monitor.exe	"The SpyGuard rogue spyware remover - not recommended
X	TheLastDefender	LastDefender.exe	"The Last Defender rogue security software - not recommended
U	Thoosje Vista Sidebar	Thoosje Vista Sidebar.exe	"Thoosje's Vista Sidebar - sidebar and skins for microsoft Windows XP and Vista"
U	ThrustTSR	TMTMTSR.exe	"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
X	Time Manager	TimeManager.exe	"Added by the MYTOB-BV WORM!"
U	Timemanager.exe	Timemanager.exe	"Time Manager will let you track billable and non-billable time by customer
X	TIMER	TIMER.EXE	"Added by the TIMESE.AG WORM!"
U	TimounterMonitor	TimounterMonitor.exe	"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
N	Tiny Watcher Logon Time	Watcher.exe	"Tiny Watcher detects changes to your system. It will not prevent your system from being modified or corrupted. It will only tell you that something suspicious happened. Think of it as an early CAT scan against system tumors. Better to install a tool that will detect and remove bad items"
U	TivoServer	TiVoServer.exe	"Tivo Server - installed with the TiVo Home Media Option. It streams audio files to your television/home theater from your PC"
U	TivoTransfer	TivoTransfer.exe	"Tivo Transfer Service. TiVo Desktop is an easy-to-use application that lets you publish and share digital music
U	tlntsvr	tlntsvr.exe	"Microsoft program associated with Telnet"
?	Tmmkb	Tmmkysvr.exe	"Toshiba multi-media keyboard software - possibly including creating keyboard shortcuts?"
N	TMMonitor	tmmonitor.exe	"System Tray access and sync monitor for TotalMedia from Arcsoft - ""an all-in-one multimedia application that allows you to access and work with digital photos
U	TMTMTSR	TMTMTSR.exe	"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
U	Toggler	toggler.exe	"""Toggler allows you to gain control over your Caps Lock
X	Tok-Cirrhatus-1959sarc	sv711224030r.exe	"Added by the BRONTOK-R WORM!"
N	toolbar_eula_launcher	EULALauncher.exe	"Related to Google Desktop"
N	Tor	tor.exe	"Tor anonymous internet communication system. Shortcut available via Start -> Programs"
N	ToshibaPinger	pinger.exe	"Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any
X	Total PC Defender	Total PC Defender.exe	"Total PC Defender rogue security software - not recommended
X	Total Protect 2009	pcpc_starter.exe	"Total Protect 2009 rogue security software - not recommended
U	TotalMedia Backup Monitor	uBBMonitor.exe	"ArcSoft's TotalMedia Backup - ""Backing up your precious photos
U	TPHKMGR	TPHKMGR.exe	"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
U	TPHKMGR.exe	TPHKMGR.exe	"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
U	TPHOTKEY	TPHKMGR.exe	"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
U	TPP Auto Loader	Tppaldr.exe	"Installed with DataStor's (and some other manufacturers) USB 2.0 based external DVD
?	TPwrMgr	TPwrMgr.exe	"Found on a Toshiba laptop. Related to power management?"
X	tracesweeper	tracesweeper.exe	"Trace Sweeper rogue privacy tool - not recommended"
U	Track4WinMonitor	STMonitor.exe	"Track4Win Monitor surveillance software. Uninstall this software unless you put it there yourself"
?	Tracker	Tracker.exe	"Possibly associated with My Deluxe Invoices program"
U	Tray Folder	Tray Folder.exe	"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
U	TrayFolder	Tray Folder.exe	"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
N	TrayServer	TrayServer.exe	For monitoring tray icons
N	tray_helper	tray_helper.exe	"Tray Helper is an Email checker with additional tools
X	Trojan Guarder Gold Version	Trojan Guarder.exe	"TrojanGuarder rogue security software - not recommended"
U	True Internet Color Icon	internetcolor.exe	"Part of 3Deep® from E-Color (now superseded by 3DxWizzard™) - ""With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"""
N	TrueImageMonitor.exe	TrueImageMonitor.exe	"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
X	Trust Cleaner	TrustCleaner.exe	"Smitfraud variant"
X	TrustDoctor	TrustDoctor.exe	"TrustDoctor rogue security software - not recommended
X	TrustFighter	TrustFighter.exe	"TrustFighter rogue security software - not recommended
X	TrustSoldier	TrustSoldier.exe	"TrustSoldier rogue security software - not recommended
X	TrustWarrior	TrustWarrior.exe	"TrustWarrior rogue security software - not recommended
N	TSMsger	TSMsger.exe	"Epson scannner software - required for ""one-touch"" operation. Can be launched manually"
?	Tukati	TukatiRedistributor.exe	"Tukati Digital Content Distribution. Is it required?"
U	TuneUp MemOptimizer	memoptimizer.exe	"Part of ""TuneUp Utilities""
U	TurboMemoryCharger	turbomemorycharger.exe	"Turbo Memory Charger - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
?	Tweak Manager	WinManager.Exe	"WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed?"
U	twister	twister.exe	"Twister ""AntiTrojanVirus"""
?	TypeRegChecker	TypeRegChecker.exe	"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
U	typeteller	typeteller.exe	"TypeTeller keystroke logger/monitoring program - remove unless you installed it yourself!"
U	UberIcon	UberIcon Manager.exe	"Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders"
X	UCmd	fallfour.exe	"Added by the SDBOT-AZA WORM!"
N	Uidler	Uidler.exe	Uniloc Titlewave Browser used with some shareware
N	UIWatcher	UIWatcher.exe	"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
?	Ulead AutoDetector	Monitor.exe	"Related to Ulead Systems Inc. programs. What does it do and is it required?"
?	Ulead AutoDetector v2	monitor.exe	"Related to Ulead Systems Inc.. What does it do and is it required?"
U	Ulead Memory Card Detector	Monitor.exe	"Ulead Memory Card Detector - ""Automatically starts datadownload when your card is inserted into a memory card reader"""
X	Ultimate Cleaner	UltimateCleaner.exe	"Ultimate Cleaner rogue security software - not recommended
X	Ultimate Defender	UltimateDefender.exe	"Ultimate Defender rogue security software - not recommended
X	Ultimate Fixer	UltimateFixer.exe	"UltimateFixer rogue system error and cleaning utility - not recommended"
X	Undefined	winter.exe	"Added by the KILLAV.LW TROJAN!"
N	Uniblue Registry Booster	RegistryBooster.exe	"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
N	Uniblue RegistryBooster 2	RegistryBooster.exe	"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
N	Uniblue RegistryBooster 2009	RegistryBooster.exe	"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
U	Uniblue SpyEraser	spyeraser.exe	"SpyEraser from Uniblue. Spyware detection program"
U	UniblueSpeedUpMyPC	Launcher.exe	"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
X	Update	CDUpdater.exe	"""Carpe Diem"" adult premium rate dialler related"
N	Update Manager	UpdateManager.exe	"Searches for updates for the Rogers Yahoo! Browser - can be run manually"
X	update mon sys	updaterar.exe	"Added by a variant of the RBOT WORM!"
X	Update.exe	ravseuper.exe	"Added by the QQPASS-P TROJAN!"
N	UpdateChecker	UpdateChecker.exe	"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
X	UpdateManager	updmanager.exe	"Added by the ANYHOMB.F TROJAN!"
X	UpdateMgr	updmgr.exe	"SouthBeachTel premium rate adult content dialer"
N	updateMgr	AdobeUpdateManager.exe	Automatic updates for the Adobe Reader file viewer
N	updatemgr.exe	updatemgr.exe	"Once a month
X	updater	wupdater.exe	"KeenVal adware"
?	updater	updater.exe	"??"
N	UPDATE~1	updatemgr.exe	"Once a month
X	Updmgr	updmgr.exe	"KeenVal adware"
X	updmgr	rvupdmgr.exe	"KeenVal adware"
X	updtr.exe	updtr.exe	"Added by the AGENT-MXG TROJAN!"
X	USAR	USAR.exe	"Ultimate Spyware Adware Remover - not recommended
X	USB Device Server!	usbserver.exe	"Added by a variant of the IRCBOT TROJAN!"
X	USBConfigration2	wmmndir.exe	"Added by the AGOBOT-SV WORM!"
U	USBDetector	USBDetector.exe	USBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware
X	User Messenger Manager	usnmsgr.exe	"Added by a variant of the IRCBOT TROJAN! See here"
X	Userinit	cologsver.exe	"Added by the DROPPER.DJO TROJAN!"
X	Usrr	rncr.exe	"PurityScan adware"
?	v	WMPVer.EXE	"Dritek System Inc. 3D Mouse related. Is it required?"
X	VBouncer	VirtualBouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	VbouncerDL	VBouncerInner.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
X	VBundleOuterDL	BundleOuter.EXE	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
N	VCDPlayer	VCDPlayer.exe	"Virtual CD drive emulator. Available via Start -> Programs"
U	VCDTower	VCDTower.exe	"Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive
N	Vegas Palms - Launcher	Launcher.exe	"Vegas Palms on-line cassino"
?	Verizon Custom Uninstall Tracking	InstallHelper.exe	"Verizon related installation tracker. What does it do and is it required?"
X	Video Lan Player	VideoLanPlayer.exe	"Added by the RBOT-MY WORM!"
X	Video Manager	videomgr.exe	"Added by the PANDEM.C WORM!"
X	VideoDriverHook	vmdriver.exe	"Added by the BCKDR-PSS BACKDOOR!"
N	VidSvr	vidsvr.exe	MS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U	Viewbar	Viewbar.exe	"Agloco Viewbar is a small toolbar that rests on the bottom of your screen or browser window while you surf the Internet. The Viewbar software is what enables AGLOCO to collect the money you are earning while browsing the Internet"". Get paid for browsing but you must consent to them collecting your personal information"
N	ViewMgr	ViewMgr.exe	"Viewpoint Manager - automatic updates for ViewPoint products such as ViewPoint Media Player (as bundled with AOL
U	ViivMonitor	ViivMonitor.exe	"Related to Intel Media Share Software. ""Stream or download media files from your Intel® Core®2 Processor with Viiv® technology-based PC"""
X	Virtual Bouncer	VirtualBouncer.exe	"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
U	VirtualExpander	VirtualExpander.exe	"Micro Vault Virtual Expander from Sony for their range of USB memory sticks. This software will compress your data to virtually store about 3 times as much data"
U	VirtuaReminder	VirtuaReminder.exe	"VirtuaReminder is a tool allowing the user to create reminders for such things as important appointments
X	Virus Remover Profesional	virusremover.exe	"Virus Remover Profesional rogue security software - not recommended
X	VirusBurster	VirusBurster.exe	"VirusBursters rogue security software - not recommended
X	virusbye	virusbyeUpdater.exe	"VirusBye rogue security software - not recommended"
X	VirusIsolator.exe	VirusIsolator.exe	"VirusIsolator rogue security software - not recommended
U	VirusKeeper	VirusKeeper.exe	"VirusKeeper uses a powerful real-time threat detection engine"
X	VirusLocker	VirusLocker.exe	"VirusLocker rogue security software - not recommended
X	VirusRanger	VirusRanger.exe	"VirusRanger rogue security software - not recommended"
X	Virus_Scanner	Virus_Cleaner.exe	"Added by the PANOL WORM!"
X	VisualStudio	msorunner.exe	"Added by a variant of the TACTSLAY TROJAN!"
X	VITAL BOOT PROCESS	taskmngr.exe	"Added by a variant of the RBOT WORM!"
X	VITAL BOOT PROCESS	taskmnsgr.exe	"Added by the Rbot-VY WORM!"
X	Vital Load Process	Spoolsvr.exe	"Added by the RBOT.AIF WORM!"
X	vmsnGraber	VMSNGRABER.EXE	"Added by the ENVID.B WORM!"
X	VMware Tools	Xplorer.exe	"Added by the AUTOIT.K TROJAN!"
X	vnmispoisn downloader	vnmispoisn downloader.exe	SearchBarCash adware variant
N	VoipBuster	VoipBuster.exe	"VoipBuster - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
N	VoipRaider	VoipRaider.exe	"VoipRaider - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
?	voowsmcr	huhdir.exe	"??"
N	VsEcomrEXE	VSECOMR.EXE	From McAfee VirusScan up to version 4.x. This executable is responsible for the periodic "update" prompts
Y	VSOCheckTask	mcmnhdlr.exe	"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
X	vst	vstkmgr.exe	"Added by the AGOBOT.SK WORM!"
U	VTTimer	VTTimer.exe	Driver file for the on-board VIA/S3G KM400/KN400 graphics which enables TV in/out communication
N	vTunerStartUp	vTuner.exe	"vTuner - "an easy way to find and listen to radio and TV broadcasts over the Internet""
U	VZAccess Manager	VZAccess Manager.exe	Verizon Access manager for enterprises
U	VZRemoteCommander	AvRmtCtr.exe	Related to Sony's VAIO Zone Remote Commander
X	W32PluginsDownloaderXMLHTTPSelfClearing7520	wiper.exe	"Added by the PROXYSER-M TROJAN!"
U	wallchgr.exe wstart	Wallchgr.exe	"WallChanger - wallpaper changer from Blue Tree Software"
X	WallPaper	taskimgr.exe	"Added by the BANKER-GX TROJAN!"
U	WallpaperChanger	Wallpaper.exe	"A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version is 30-day trialware
N	Wanadoo Messenger.exe	Wanadoo Messenger.exe	Wanadoo ISP instant messenger client
U	Warner	warner.exe	Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
U	WashAndGo - Cleanup of old Backupfiles	checker.exe	"WashAndGo - temp file cleaner"
U	Washer	washer.exe	"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
U	WatcherHelper	WaHelper.exe	"Sierra Wireless Watcher™ - wireless configuration utility"
X	waumgr	waumgr.exe	"Added by a variant of the IRCBOT TROJAN!"
Y	WaveFramer	WaveFramer.exe	"Part of SafeSpace (from Artificial Dynamics) which ""protects computers from Internet malware infection without the need for signature updates or regular maintenance"""
Y	WavXMgr	WavXDocMgr.exe	"Part of Wave Systems Corp. Embassy Trust Suite. ""Document Manager uses the hardware security provided by the TPM to provide strong protection for data. Files encrypted by Document Manager cannot be located or viewed by others"""
X	Wbcmgr	wbcmgr.exe	"Added by the SLENFBOT.AW WORM!"
X	WCESMngr	WCEMNGR.EXE	"Added by the AGOBOT-QX WORM!"
N	wcmdmgr.exe	wcmdmgr.exe	"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
X	WCPT	wintsvtr.exe	"PurityScan adware"
U	WD Backup Monitor	uBBMonitor.exe	"WD Backup - customized version of ArcSoft's TotalMedia Backup for Western Digital external drives (see here)"
U	WD Button Manager	WDBtnMgr.exe	Button manager installed with a western digital external disk drive. Allows you to back up your system with one click
N	WEATHER	WEATHER.EXE	"Weatherbug provides current outdoor temperature in the System Tray
N	WeatherCast	Weather.exe	Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
U	Webshots	Launcher.exe	"Webshots - software that displays photos as your screensaver and wallpaper
U	WebWasher	wwasher.exe	"Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs"
U	wfips	iphider.exe	"ICQ (messaging/chat program) anti-bomb software. ""WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed."" For more information about ICQ bombs see here"
U	WGWLocalManager	WGWLocalManager.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
Y	WgwMngr	WgwMngr.exe	"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
X	wiascr	wiascr.exe	"Added by the AGENT.AM TROJAN! Note - example names include ""XviD""
X	Wifi Booter	wifibooter.exe	"Added by the IRCBOT.ATH BACKDOOR!"
X	Wifi Loader!	wifiloader.exe	"Added by the IRCBOT.XES BACKDOOR!"
X	Win Patch	ntldr.exe	"Added by the SDBOT-GS WORM!"
X	Win Server Updt	winserver.exe	"Added by a variant of the IMISERV TROJAN!"
X	Win TaskLoader	msgmr.exe	"Added by the MYTOB.L WORM!"
X	Win Update	msnmger.exe	"Added by the RBOT-GDP WORM!"
X	Win Updater	WINUPDATER.EXE	"Added by the RBOT.IP WORM!"
X	Win32 Configuration	mplayer.exe	"Added by the FORBOT-BZ WORM!"
X	Win32 Device Loader	Win32ldr.exe	"Added by a variant of the AGOBOT/GAOBOT WORM!"
X	win32 internet server	winserver.exe	"Added by the DERMON-D TROJAN!"
X	Win32 NT Adv Services	taskmngr.exe	"Added by the RBOT-ADE WORM!"
X	win32 security updates downloader	tskmngr.exe	"Added by a variant of the SDBOT WORM! See here"
X	Win32 Services	wuamngr.exe	"Added by the SDBOT-N WORM!"
X	win32 system server	winserver.exe	"Added by the DERMON-A TROJAN!"
X	Win32 USB2 Driver	updatemgr.exe	"Added by a variant of the FORBOT WORM!"
X	WIN32DS	clienttimer.exe	"Eziin adware"
X	Win32Host Process	webemir.exe	"Added by the TURGEN -A TROJAN!"
X	WIN32io	clienttimer.exe	"Eziin adware"
X	win32serv	devicer.exe	"Added by the CHECKOUT WORM!"
U	Winacsr	Winacsr.exe	"AceScreenSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
U	WinBar	WinBar.exe	""WinBar is a free and compact program that lets you monitor your system and provides easy access to frequently used controls""
X	WinButler	WinButler.exe	Identified as a variant of the Trojan-Dropper.Agent.DKN malware
N	WinCinemaMgr	WinCinemaMgr.exe	"WinCinema_Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
U	WinColorReminder	WinColorReminder.exe	"The Microsoft Color Control Panel Applet for Windows XP ""helps you manage Windows color settings in one place."" Part of the Pro Imaging Powertoys"
X	Wind Optimizer	WindOptimizer.exe	"Wind Optimizer rogue system optimization tool - not recommended
X	Wind0ws Sharing	ssprotecter.exe	"Added by the RBOT-AHW WORM!"
X	windefender	windefender.exe	"Added by the AGENT.BYH TROJAN!"
X	Windeows NetStart Service2	tesakrmger.exe	"Added by the RBOT-AMY WORM!"
X	WinDLL (smaprnter.exe)	"rundll32.exe smaprnter.exe	start"
X	WinDLL (tepmlayer.exe)	"rundll32.exe tepmlayer.exe	start"
X	WinDLL (Wseclayer.exe)	"rundll32.exe Wseclayer.exe	start"
X	Windowfdgfds DasdLL Verifier	winupdatr.exe	"Added by the AGOBOT.HZ WORM!"
X	Windows	explorer.exe	"Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	WINDOWS	ymssgr.exe	"Added by the BCKDR-PS BACKDOOR! Note - deactivates the Microsoft\Internet Connection Firewall (ICF)"
X	Windows	taskmngr.exe	"Added by a variant of the SDBOT WORM!"
X	Windows	Cfreer.exe	"Added by the CULLER-C WORM!"
X	Windows	Zser.exe	"Added by the CULLER-D WORM!"
U	Windows & Internet Cleaner Pro	WICleaner.exe	"Windows & Internet Cleaner Pro - ""Powerful and easy to use internet surfing privacy protection & PC security software"""
X	Windows Auto Update	winupdater.exe	"Added by the SDBOT.TF WORM!"
X	Windows Automatic Update	wuamgrder.exe	"Added by a variant of the RBOT WORM!"
X	Windows Automatic Updates	dvldr.exe	"Added by the RBOT.MF WORM!"
X	Windows Automation	msdspr.exe	"Added by the SOLAME.A WORM!"
X	Windows Backup Configuration	IEXPLORER.exe	"Added by the GAOBOT.AZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Windows Booter!	winbooter.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Bootup	task-mngr.exe	"Added by the RBOT-AWP WORM!"
X	Windows Config	ZANBOR.EXE	"Added by the SPYBOT-MH WORM!"
X	Windows Controls Center	winudmr.exe	"Added by the LAMER.AA BACKDOOR!"
X	Windows Download Manager	windlmngr.exe	Added by an unidentified TROJAN!
X	Windows Driver	winxpdriver.exe	"Added by the WOOTBOT.EE WORM!"
X	Windows Driver!	windriver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Enterprise Defender	WindowsEDefender.exe	"Windows Enterprise Defender rogue security software - not recommended
X	Windows Explorer	EEXPLORER.EXE	"Added by a variant of the SPYBOT WORM!"
X	Windows Explorer	explorer.exe	"Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Windows Explorer	Windows Explorer.EXE	"Added by the VB-EBA WORM!"
X	Windows Explorer Key	explorer.exe	"Added by the IRCBOT-YB WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Windows Explorer.exe	Explorer.exe	"Added by the FALTER-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Windows File XP Manager	wfdmgr.exe	"Added by the SDBOT.XD TROJAN!"
X	Windows Fix	integator.exe	"Added by the SDBOT.ZAB WORM!"
X	Windows Hijack Protection	comngr.exe	"Added by the AGENT-FYD TROJAN!"
X	Windows Hijack Protection System	commngr.exe	"Added by a variant of the AGENT-FYD TROJAN!"
X	Windows Host Booter	hostbooter.exe	"Added by an unidentified WORM or TROJAN! See here"
X	Windows Icons Manager	wicomgr.exe	"Added by the RBOT-AIF WORM!"
X	Windows Kernel System Service	wkssvr.exe	"Added by a variant of the RANDEX.GEL WORM!"
X	Windows Live Manager	winlivemgr.exe	"Added by the SHEUR.EB TROJAN!"
X	Windows Live Messenger	msnmsgr.exe	"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
N	Windows Live Messenger	msnmsgr.exe	"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → Sign In → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 14.*"
X	Windows Live Messenger Addon	wllivemsngr.exe	"Added by a variant of the SDBOT WORM! See here"
X	Windows Live Messenger!	livemsngr.exe	"Added by the IRCBOT.AWE BACKDOOR!"
X	Windows live Support	wlmsngr.exe	"Added by the RBOT-BKL WORM!"
X	Windows Local ISP	winthcr.exe	"Added by the SDBOT.ENZ BACKDOOR!"
X	Windows Login	msnmsgr.exe	"Added by the AGOBOT-UC WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Windows LoL Layer	gqwdcr.exe	"Added by the AGOBOT-AHS WORM!"
X	Windows Media Driver	msnger.exe	"Added by a variant of the RBOT WORM!"
X	Windows Media Loader	wmloader.exe	"Added by a variant of the GAOBOT WORM!"
X	Windows Media Player	wmediaplayer.exe	"Added by the AGOBOT-NQ WORM!"
X	Windows Media Player	MediaPIayer.exe	"Added by the SDBOT-QO TROJAN! Note - the lower case ""l"" in ""MediapIayer"" is a capital ""i"""
X	Windows Media Player	wmplayer.exe	"Added by the KELVIR.G WORM or variants! Note - this is not the valid Windows Media Player as the file is located in %System% rather than %ProgramFiles%\Windows Media Player"
X	Windows Media Server!	wmserver.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Memory Sharing	memoryshr.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Memory Sharing	memshr.exe	"Added by the IRCBOT.MC BACKDOOR!"
X	Windows Messenger Live MSN	winlivemsnmessenger.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Messenger Service	winsmsgr.exe	"Added by the RBOT-VW WORM!"
X	Windows modez Verifier	taskmngr.exe	"Added by a variant of the RBOT WORM!"
X	Windows Monitor Services	winmonitor.exe	"Added by the RBOT-XX WORM!"
X	Windows MS Update 32	sucker.exe	"Added by the FORBOT-GJ WORM!"
X	Windows Pc	winmgr.exe	"Added by the BIBOT-A WORM!"
X	Windows Printing Driver	WinSpooler.exe	"Added by the ARCHIVARIUS series of WORMS!"
X	Windows Rundll Center	msnsmgr.exe	"Added by the AGENT-LLB TROJAN!"
X	Windows Scheduler	wmscheduler.exe	"Added by a variant of the SDBOT WORM! See here"
X	Windows Scheduler!	scheduler.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Secure Fix	iPodFixer.exe	"Added by the WOOTBOT.BM BACKDOOR!"
X	Windows Secure Update	winupser.exe	"Added by the RBOT-GCG WORM!"
X	Windows Securety	wurger.exe	"Added by the AGOBOT-NC BACKDOOR!"
X	Windows Server!	winsvr.exe	"Added by the IRCBOT.AYC BACKDOOR!"
X	Windows Service	r.exe	"Added by a variant of the SMALL.VZ TROJAN!"
X	Windows service	iexpl0rer.exe	"Added by the SDBOT.RO WORM!"
X	Windows Service Agent	msnmagr.exe	"Added by a variant of the SLAPER TROJAN!"
X	Windows Service Agent	msngear.exe	"Added by the RBOT.AHW BACKDOOR!"
X	Windows Service Agent	msngerr.exe	"Added by the RBOT.EOZ WORM!"
X	Windows Service Agent	msnmsgr.exe	"Added by the RBOT.ABIK BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
X	Windows Service Controller Agent	taksmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Service Exec	ServiceLayer.exe	"Added by the SPYBOT-OI WORM! Note - do not confuse this with the Nokia service of the same name which resides in %ProgramFiles%\Common Files\PCSuite\Services or %Program Files%\PC Connectivity Solution. This one is located in %Windir%"
X	Windows Service Manager	taskmgr.exe	"Detected by Kaspersky as the IAMBIGBROTHER.91 TROJAN! Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""fonts\svc"" sub-folder"
X	Windows Services	Explorer.exe	"Added by the SDBOT-WT WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Windows Services B-Runner	svcbrunner.exe	"Added by the IRCBOT.BYV BACKDOOR!"
X	Windows Services Joger	svcjoger.exe	"Added by the RBOT.CAT WORM!"
X	Windows Servser	serviser.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Shell	taskgmr.exe	"Added by the MYTOB.BV WORM!"
X	Windows Spooler	winsplr.exe	"Added by the SHEUR.ANX TROJAN!"
X	Windows spoolservr Service	spoolservr.exe	"Added by the SDBOT-AAN WORM!"
X	Windows SSL Secondary Drivers	SSL32Dr.exe	"Added by the SDBOT.ASQ WORM!"
U	Windows Supervisor	winspvr.exe	"Windows Supervisor surveillance software. Uninstall this software unless you put it there yourself"
X	WINDOWS SYSTEM	dcomuser.exe	"Added by the MYTOB.EO WORM!"
X	WINDOWS SYSTEM	botzor.exe	"Added by the ZOTOB WORM!"
X	WINDOWS SYSTEM	per.exe	"Added by the ZOTOB.C WORM!"
X	WINDOWS SYSTEM	expI0rer.exe	"Added by the MYTOB-FI WORM! Note the upper case ""i"" and number ""0"" in the filename"
X	WINDOWS SYSTEM	Win32IMAPSVR.exe	"Added by the MYTOB-FQ or MYTOB-FU WORMS!"
X	Windows System Configuration	nether.exe	"Added by the OPANKI-AB WORM!"
X	Windows System Gateway	SPOOLER.EXE	"Added by a variant of the RBOT WORM!"
X	Windows System Manager	winsysmgr.exe	"Added by the IRCBOT.BJG BACKDOOR!"
X	WINDOWS SYSTEM MEMORY LOADER	memloader.exe	"Added by the MYTOB-IN WORM!"
X	Windows System Restorer	SystemRestorer.exe	"Added by the DULOAD.C WORM!"
X	Windows System32	explorer.exe	"Added by the OPANKI-V WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is also copied to %System%"
X	Windows SYSTEM32	Realplayer.exe	"Added by the SPYBOT.ZH WORM!"
X	Windows Systemnmg	stagmr.exe	"Added by the MYTOB.S WORM!"
X	Windows SYStry	spoolsvr.exe	"Added by the SDBOT.GN BACKDOOR!"
X	Windows Task Manager	taskgmr.exe	"Added by the MYTOB.BJ WORM!"
X	Windows Task Manager	taskmngr.exe	"Added by the RBOT-ANM WORM!"
X	Windows Task Manager Emulator	kennewr.exe	"Added by the SPYBOT-FA WORM!"
X	Windows Task Mgr!	mstasker.exe	"Added by the IRCBOT.OE BACKDOOR!"
X	Windows Taskmanager	iexplorer.exe	"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	Windows Taskmanager	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows Taskmanager	tskmngr.exe	"Added by the IRCBOT.DHR BACKDOOR!"
X	Windows Taskmanager	winpifviewer.exe	"Added by the PUSHBOT.BB WORM!"
X	Windows Time	winmgr.exe	"Added by the RBOT-XC WORM!"
X	Windows UDP Control Center	fxstaller.exe	"Added by the AGENT-IEE TROJAN!"
X	Windows UDP Control Center	installer.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows UDP Control Center	winudpmsgr.exe	"Added by the SDBOT.GAV WORM!"
X	Windows UDP Control Center	winupmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows UDP Control Center	winudpmgr.exe	"Added by the DLOADR-HQL TROJAN!"
X	Windows UDP Control Center	fxsteller.exe	"Added by the IRCBOT-J BACKDOOR!"
X	Windows UDP Control Manager	winudpmgr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	windows update	uddater.exe	"Added by the LEOX TROJAN!"
X	windows update	msnsever.exe	"Added by the RBOT-AHN WORM!"
X	Windows Update	taskmr.exe	"Added by the MYTOB-GZ WORM!"
X	Windows Update	wupdmgr.exe	"Added by the BANCBAN-FC TROJAN and variants!"
X	Windows Update	avkir.exe	"Added by the RBOT-GJP WORM!"
X	Windows Update	taskngr.exe	"Added by a variant of the IRCBOT BACKDOOR! See here"
X	Windows Update	smsscr.exe	"Added by the BANKER-DK TROJAN!"
X	Windows Update	tskmngr.exe	"Added by the AGENT.ALY BACKDOOR!"
X	Windows Update Auto Update	wuaumgr.exe	"Added by a variant of the SPYBOT WORM!"
X	Windows Update Check	syslodr.exe	"Added by the SMALL.LU TROJAN!"
X	Windows Update Manager	wupdmngr.exe	"Added by the RANDEX.BTB WORM!"
X	Windows Update Manager	WindowsUpdateManager.exe	"Added by a variant of the IRCBOT TROJAN!"
X	Windows Updated	updatr.exe	"Added by the RBOT-AYB WORM!"
X	Windows Updater Service Manager	winupdatr.exe	"Added by a variant of the IRCBOT BACKDOOR!"
X	Windows USB 2.0 Driver	usbtskmgr.exe	"Added by the RBOT-BKG WORM!"
X	Windows Workstation Start Service	mslanmgr.exe	"Added by a variant of the RBOT WORM!"
X	WindowsKeyUpdate	master.exe	"Added by the JOSAM WORM!"
X	Windowss Service Agent	mssngear.exe	"Added by the RBOT.KGU BACKDOOR!"
X	WindowsSystem32	asper.exe	"Added by the AGENT-EFP TROJAN!"
X	WindowsSystem32	msnmssgr.exe	"Added by the AGENT.ALY BACKDOOR!"
X	WindowsSystem32	msnmgaer.exe	"Added by the AGENT.ALY BACKDOOR!"
X	Windowz Update V2.0	Explorer.exe	"Added by the YODO WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	Windowz Update V2.0	updater.exe	"Added by the YODO-C WORM!"
U	WINDVDpatch	CTHELPER.EXE	"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
N	WinDVR SchSvr	SchSvr.exe	"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
X	WinFixer helper	wfxcwr.exe	"WinFixer web installer - ""foistware""
X	WiniFighter	WiniFighter.exe	"WiniFighter rogue security software - not recommended
X	WinIFixer	WinIFixer.exe	"WinIFixer rogue security software - not recommended
U	WinIRXHelper	WinIRXHelper.exe	"MSI Media Center Deluxe software - see here"
X	WinKernel	WinKer.exe	"Added by the MIRAB or SERVIDOR TROJANS!"
X	winlocatorupdate	updatewinlocator.exe	Locator adult content toolbar related
X	Winlogon	scssrr.exe	"Added by the AGENT-LXB TROJAN!"
X	Winlogon Shell	Explorer.exe svchost.exe	"Added by the KIPIS.M WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1032"" sub-folder"
X	winlogon.exe	helper.exe	"Added by the FAKESPY-A TROJAN!"
X	WINMGR	taskgmgr.exe	"Added by the MYTOB.AN WORM!"
X	Winmgr.exe	scvhost.exe	"Added by the AGOBOT.AFG WORM!"
X	winmngr.exe	[path to trojan]	"Added by the AGENT-ZB TROJAN!"
X	WinMsg	winmsgr.exe	"Added by the DLOADR-AS TROJAN!"
?	Winnov Remote	WnvRsvr.Exe	"Winnov Video Capture Card related. What does it do and is it required?"
X	winnt DNS ident	iexplorer.exe	"Added by a variant of the RBOT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
N	Winpower	Winpower.exe	"Part of InstallAnywhere from Zero G Software
X	winprocessor Update	winprocessor.exe	"Added by the RBOT.IO WORM!"
X	WinProt	server.exe	"Added by the CHUPACABRA TROJAN!"
X	WinProtector	WinProtector.exe	"WinProtector rogue security software - not recommended
X	WinPWD Manager	wpwdmgr.exe	"Added by the RBOT-AUT WORM!"
X	winrar	winrar.exe	"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
X	WinReanimator	WinReanimator.exe	"WinReanimator rogue security software - not recommended
X	WINRUN	taskgmr.exe	"Added by the MYTOB-BX WORM!"
X	WinSecured32	ssmr.exe	"Added by a variant of the FORBOT WORM!"
U	WinService32	ssmgr.exe	"007 Spy Software - ""stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"""
?	Winshoe	wuadfdqr.exe	"Probably an unidentified VIRUS! Adds itself to 3 registry ""Run"" keys and prevents Task Manager being displayed. This is not the Winshoe IRC Client as the visitor did not have it installed"
X	Winsock driver	tcpmngr.exe	"Added by the SPYBOT-CK WORM!"
X	winsock2	netsvr.exe	"Added by the AGOBOT.LY WORM!"
X	Winsock2 driver	WUAUMQR.EXE	"Added by the SPYBOT-DP WORM!"
X	Winsock2 driver	WWEUMQR.EXE	"Added by the SPYBOT-BY WORM!"
X	Winsock32driver	win32server.exe	"Added by the BACKDOOR-AZV TROJAN!"
X	Winsock32driver	win32server.exe	"Added by the HACARMY.F TROJAN!"
X	winsockdriver	iexplor.exe	"Added by the BLATIC.A WORM!"
X	Winsocks2 driver	mznmgr.exe	"Added by a variant of the SDBOT WORM!"
X	Winspool	spoolsvr.exe	"Added by a variant of the SDBOT WORM!"
X	WinSpyKiller	WinSpyKiller.exe	"WinSpyKiller rogue spyware remover - not recommended
X	WinStabilizer	WinStabilizer.exe	"Added by the AGOBOT-SW WORM!"
X	winsupdater	winsupdater.exe	"Added by the ALCRA-F WORM!"
X	winsupdatesysmngr64	winsys64mnger.exe	"Added by the RBOT-BAG WORM!"
X	Winsvr manager	DDEsvr.exe	"Added by the TIRBOT-C WORM!"
X	WINTASK	taskgmr.exe	"Added by the MYTOB.I WORM and variants!"
X	WINTASK	taskgamr.exe	"Added by the MYTOB.AU WORM!"
X	WINTASK	iexplorer.exe	"Added by the MYTOB-CH WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	WINTASK	t4skmgr.exe	"Added by the MYTOB-AK WORM!"
X	WINTASK	t4skgmr.exe	"Added by the MYTOB.CM WORM!"
X	WINTASK32	taskgmrr.exe	"Added by the MYTOB.FX WORM!"
X	WINTASKMANAGER	taskgmr.exe	"Added by the MYTOB-AF WORM!"
X	WINTASKS	taskgmr.exe	"Added by the MYTOB.BO WORM!"
X	WinUPD32	explorer.exe	"Added by an unidentified VIRUS
X	winupdateconn_	Explorer.EXE	"Added by the COMBRA-B WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
X	WinUsr	WinUsr.exe K1S2	"Added by the CLUNK.A WORM!"
U	WinUtilities Memory Optimizer	ToolMemoryOptimizer.exe	"""WinUtilities Memory Optimizer optimizes the memory management of your system and boost-up its performance amazingly!"" MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
X	WinVNC	iexplorer.exe	"Added by the EVIVINC BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
X	WinWorks	vstmgr.exe	"Added by the AGOBOT.ACJ WORM!"
X	WinX Security Center	WinX Security Center.exe	"WinX Security Center rogue security software - not recommended
X	WinXDefender	WinXDefender.exe	"WinXDefender rogue spyware remover - not recommended
X	WinXProtector	WinXProtector.exe	"WinXProtector rogue security software - not recommended
X	WinXPService	taksmgr.exe	Identified as a variant of the IRC/Flood.tool malware
X	WinXPService	taksmgr.exe	"Added by the KIRSUN.A BACKDOOR! The file is located in %System%"
X	WinXPService	taksmgr.exe	"Added by the KIRSUN.A BACKDOOR! The file is located in the root directory
N	Wireless Console	wcourier.exe	"ASUS Wireless Console - installed alongside ASUS wireless components and provides additional configuration options for these devices"
N	Wireless Console 2	wcourier.exe	"ASUS Wireless Console - installed alongside ASUS wireless components and provides additional configuration options for these devices"
N	Wireless Console 3	wcourier.exe	"ASUS Wireless Console - installed alongside ASUS wireless components and provides additional configuration options for these devices"
U	Wireless Presenter	Wireless Presenter.exe	"""Use your Nokia phone as a remote control for your PC with Nokia Wireless Presenter. Using Bluetooth wireless technology
X	Wireless Provider Server	wpsvr.exe	"Added by the FORBOT-AD WORM!"
U	Wireless Switching Setting Utility	Switcher.exe	"On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
X	WIZZ	dazzler.exe	"Detected by Kaspersky as the DIALER.IS TROJAN!"
X	WksSVC	EXPLORER.exe	"Added by the MYTOB-BW WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
U	WLAN Manager	WLANManager.exe	Wireless management utility for the T-Com Speedport W 100 Card WLAN PCMCIA card
N	WM VCR	WMVCR.exe	"WM Recorder allows you to record Windows Media(tm) streaming Video or Audio content. Can be accessed via Start Menu -> Programs"
X	wmplayer.exe	wmplayer.exe	"Added by the BANCBAN-CZ TROJAN! Note - this is not the valid Windows Media Player as the file is located in %Windir% rather than %ProgramFiles%\Windows Media Player"
X	word pair	bopotsvr.exe	"Added by the SHED-A TROJAN!"
X	wow	bar.exe	"PurityScan adware"
X	wow	Launcher.exe	"Added by the DELF-DOR TROJAN!"
X	WPlayer	WPlayer.exe	Identified as a variant of the LDPinch.A malware
?	wr	WR.EXE	"??"
?	WR Command	wr.exe	"??"
X	WRDialer	WrDialer.exe	WinPoet DSL dialler
U	WScheduler	WScheduler.exe	"Windows Scheduler - "schedule unattended running of applications
X	wscmgr	wscmgr.exe	"Added by the AUTORUN-AA WORM!"
X	wserver	wserver.exe	"Added by the NETSKY.AC or SASSER.G WORMS!"
X	WTST	wapisvtr.exe	"PurityScan adware"
X	wuviewer	wuviewer.exe	"Added by a Proxy Trojan variant"
N	WXProcMgr Module	WXprocMgr.exe	"TVTonic from Wavexpress - ""enjoy 3 full-screen
X	wzhelper	wzhelper.exe	"Searchcentrix hijacker"
U	X-Cleaner Deluxe	xcleaner.exe	"X-Cleaner Deluxe - privacy and anti-spy application"
U	X1FileMonitor.exe	X1FileMonitor.exe	"Part of X1's Enterprise Desktop Search Resource Center. An enterprise desktop search engine"
U	xbtl	bootldr.exe	"Active Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
U	XemiComputers Scheduler	Scheduler.exe	"Smooth Program Scheduler from XemiComputers ""will start any program you want at a scheduled time"""
U	Xerox PanelMgr	SSMMgr.exe	"Monitors ink levels
Y	XFILTER	xfilter.exe	"Filseclab Personal Firewall Professional Edition"
X	xftpGraber	Xftpgraber.exe	"Added by the ENVID.C WORM!"
X	XP Protection Center	XPProtectionCenter.exe	"XP Protection Center rogue security software - not recommended
X	XP SecurityCenter	XPSecurityCenter.exe	"XPSecurityCenter rogue security software - not recommended
N	Xpadder	Xpadder.exe	"""Xpadder simulates the keyboard and mouse using your gamepad"""
U	XPCMonitor	XPCMonitor.exe	"XPC Monitor Keylogger keystroke logger/monitoring program - remove unless you installed it yourself!"
X	XPdefender	XPdefender.exe	"XPdefender rogue spyware remover - not recommended
X	Xplorer	Xplorer.exe	"Added by the AUTOIT-BP WORM!"
X	XpyBurner	XpyBurner.exe	"XpyBurner rogue spyware remover - not recommended
?	XTCsgloader	XTCsgloader.exe	"Another Xupiter toolbar variant??"
X	XupiterCfgLoader	XTCfgLoader.exe	"Xupiter - adware and homepage hijacker. Use Spybot S&D
X	XupiterCfgLoader	BWCfgLoader.exe	"Xupiter - adware and homepage hijacker. Use Spybot S&D
X	XupiterToolbarLoader	XupiterToolbarLoader.exe	"Xupiter - adware and homepage hijacker. Use Spybot S&D
U	Y'z Toolbar	YzToolBar.exe	"Y'z Toolbar ""allows the user to change the toolbar icons in Explorer and Internet Explorer. The user can also create and add their own themes"""
X	y1959sar	sv711224030r.exe	"Added by the BRONTOK-AK WORM and variants!"
X	yahoo groups	upgrdmgr.exe	"Added by a variant of the RBOT WORM!"
?	Yahoo HP Reminder 1.1	yr.exe	"??"
X	Yahoo Instant Messengar	YahooMsgr.exe	"Added by the SDBOT.GEN TROJAN!"
X	Yahoo Messenger	YPager.exe	"Added by the RBOT-QO BACKDOOR! Note - this is not the older version of Yahoo! Messenger which shares the same filename and is located on %ProgramFiles%\Yahoo!\Messenger. This one is found in %System%"
X	Yahoo Messengger	regsvr.exe	"Added by the IMAUT.CN WORM!"
X	Yahoo Updater	Messenger.exe	"Added by the FORBOT-FE WORM!"
U	Yahoo! Mail	YMailAdvisor.exe	"Yahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e.
N	Yahoo! Messenger	ypager.exe	"System tray access to an older version of the Yahoo! Messenger instant messenger"
N	Yahoo! Pager	ypager.exe	"System tray access to an older version of the Yahoo! Messenger instant messenger"
N	Yahoo! Pager	YahooMessenger.exe	"System tray access to an older version of the Yahoo! Messenger instant messenger"
N	YahooMessenger	YahooMessenger.exe	"System Tray access to the Yahoo! Messenger instant messenger"
U	YahooMonitor	YahooMonitor.exe	"Yahoo Messenger Monitor Sniffer surveillance software for the Yahoo! instant messenger. Uninstall this software unless you put it there yourself"
X	yahoomsgr	Yahoomsngr.exe	"Added by the AGOBOT.AKZ WORM!"
X	yahoo_toolbar lptt01	yahoo_toolbar.exe	"RapidBlaster variant (in a ""yahoo_toolbar"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
X	yahoo_toolbar ml097e	yahoo_toolbar.exe	"RapidBlaster variant (in a ""yahoo_toolbar"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
?	YAMAHA AC-XG Power Utility	yacpower.exe	"YAMAHA AC-XG Power Utility. What does it do and is it required?"
U	YMailAdvisor	YMailAdvisor.exe	"Yahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e.
N	ypager	ypager.exe	"System tray access to an older version of the Yahoo! Messenger instant messenger"
N	Ypager.exe	ypager.exe	"System tray access to an older version of the Yahoo! Messenger instant messenger"
U	Yumgo's Homepage Protector V1	YumgoHomepageProtector.exe	"Yumgo's Homepage Protector"
U	z-WrDialer	WrDialer.exe	WinPoet DSL dialer
X	Zacker	Zacker.exe	"Added by the GEMEL WORM!"
X	Zango SiteFinder	ZangoSiteFinder.exe	"ZangoSearch adware variant"
U	zBrowser Launcher	Commandr.exe	"For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock
U	ZingSpooler	ZingSpooler.exe	Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums
N	Zinio DLM	ZinioDeliveryManager.exe	"Related to Zinio used to read magazines in digital rather than paper format"
X	Zolero Translator	ZoleroTranslator.exe	"Zolero Translator - added by Clickspring
N	Zune Launcher	ZuneLauncher.exe	"Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media
N	ZuneLauncher	ZuneLauncher.exe	"Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media
N	ZuneŽ	ZuneLauncher.exe	"Automatically launches the Zune software for Microsoft's Zune media players when they're connected to your PC. The software can be used to manage media
X	[12 random characters]	batmeter.exe	"IeDriver adware variant"
X	[12 random characters]	asferror.exe	"IeDriver adware variant"
X	[32 random hex numbers]	badware-protector.exe	"Badware Protector rogue security software - not recommended
X	[random name]	CXTPLS_LOADER.EXE	"AproposMedia adware"
X	[random name]	??plorer.exe	"PurityScan adware"
X	[random name]	t?skmgr.exe	"PurityScan adware"
X	[random name]	taskmngr.exe	"Added by the AGOBOT-CB WORM!"
X	[random number]	explorer.exe	"Added by the KEYLOG-AN TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\service"
X	[Randomly chosen existing folder name]	_loader.exe	"Added by the ANTINNY-L WORM!"
X	[various names]	sitebar.exe	Added by an unidentified TROJAN!
X	[various names]	ActionScr.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	AppMasterCenter.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	atl_helper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ATLIEHELPER.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	awinrar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	CToolBar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ExchangeMaster.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	expoler.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ftbar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	gabber.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	iehelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	KeywordFinder.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	moniter.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	MsNetHelper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	NSYSCPLSTR.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	SAPSTR.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	ssweeper.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	xxtoolbar.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	[various names]	JAguAr.exe	"Wareout - malware masquerading as a spyware and dialer remover"
X	_x-Finder	_x-Finder.exe	Disconnects and redials an ISP modem to an adult content site
U	{1290A33C-85F5-4164-A1BE-7DD299D4986A}	PBKScheduler.exe	"Scheduler for CyberLink PowerBackup - archiving/backup utility"
X	{DD651081-A909-45ad-BD71-2335B0ADE043}	sysabmpmfr.exe	"Added by the FAKEALERT-AH TROJAN!"