Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

NEW HijackThis automated log analyzer! Get your logs analyzed INSTANTLY!

If you're not finding what you're looking for please go to this forum and submit a new startup entry.

Key:

  • "Y" - Normally leave to run at start-up
  • "N" - Not required - typically infrequently used tasks that can be started manually if necessary
  • "U" - User's choice - depends whether a user deems it necessary
  • "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
  • "?" - Unknown



Startup Name Process Name Details
Y#NAME?ZkRunOnceR.exeInternet Security Suite used by ISPs to protect customers against many attacks
X$sys$crash$sys$sonyTimer.exe"Added by the WELOMOCH TROJAN!"
X$sys$momomomochin$sys$sonyTimer.exe"Added by the WELOMOCH TROJAN!"
X$sys$umaiyo$sys$sonyTimer.exe"Added by the WELOMOCH TROJAN!"
X(Default)media_driver.exe"Added by the TUPEG VIRUS! Note - this malware actually changes the value data of the ""(Default)"" key in HKLM\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank"
X*Security Centersecctr.exe"Added by the SDBOT.BRO WORM!"
Y*StateMgrstatemgr.exeWindows ME default for System Restore. Do NOT disable!
X.NET.msnmgnr.exe"Added by the DELF.AYF WORM!"
?00DSKSVR00desksaver.exe saskda"Part of Advanced Desktop Shield
U00DSKSVR01desksaver.exe tray"System Tray access to Advanced Desktop Shield
U00ERSRRRNKYeraser.exe"Part of Evidence Exterminator
?00notify33NetBrowser.exe"Part of Best Network Security
X1mrcmgr.exe"Added by the BANKER.RQK TROJAN!"
X1111swapmgr.exe1111swapmgr.exe"Added by the BDOOR-IC BACKDOOR!"
X123MonitorSpywareFreeMonitor.exe"1-2-3 Spyware Free rogue spyware remover - not recommended
U12Ghosts SetColor12color.exe"12Ghosts SetColor - ""Change your desktop icon text colors
U12Ghosts Tower12tower.exe"12Ghosts Tower - ""Quickly access and manage all Ghosts (included in all packages)"""
U1A:MacVisionTrayMonitorTrayMonitor.exe"Part of MacVision by Jeff Bargmann - an discontinued program that makes your PC's desktop look and feel incredibly like that of a Macintosh OS8 computer. Handler that puts the icons that are in your system tray into the MacVision taskbar
Y1A:Stardock MCPmcpserver.exe"Master Control Program for Stardock apps
Y1A:Stardock TrayMonitorTrayServer.exeFor monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
X2020Downloadermssvr.exe"2020Search Toolbar"
X252winmgr.exe"Added by the LEGMIR-AT TROJAN!"
?3Com LauncherLauncher.exe"Related to networking products from 3Com Corporation. What does it do and is it required?"
X4-gusdurgusdur.exe"Added by the BRONTOK-CR WORM!"
X456655explorer.exe"Added by the BIFROSE-DE TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
U802.11g Wireless AdatperMonitor.exe"Related to wireless card (802.11) adapter/standard. System Tray icon that provides a shortcut to ""Wireless Connection Status"" and allows to turn WL on and off. Supplier unknown. Adapter is miss-spelled"
N@lohareminder.exe"Registration reminder for
NAAATraySaverTraySaver.exe"System Tray management utility from Mike Lin which allows you to hide
XAaepopar.exe"PurityScan/Clickspring adware"
?aauclientACNUpdater.exe"Appears to be related to software from Accenture.com"
UABCkeylogger.exeKeystroke logger/monitoring program - remove unless you installed it yourself!
UAbsolute Shielddseraser.exe"Absolute Shield Evidence Eliminator - internet history eraser"
UAbsoluteShield Internet Erasercseraser.exe"AbsoluteShield Internet Eraser - ""protects your privacy by cleaning up all the tracks of your Internet and computer activities"""
XABsrabsr.exe"Added by the AUTOUPDER TROJAN!"
UAccessManagerAccessMgr.exe"Part of SmartPipes SecureSite software. ""SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management
UAcctMgrAcctMgr.exe"Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information
UAcer Assist Launcherlauncher.exe"Acer Assist - program that provides information about new updates or notices from Acer"
?Acer Empowering Technology MonitorSysMonitor.exe"Part of Acer Empowering Technology. What does it do and is it required?"
UAcer ePower ManagementePowerTrayLauncher.exeLauncher for the Acer® PowerSmart Manager power management utility included on some models in the Aspire range of notebooks
NAcer Tour ReminderReminder.exePopup reminder to take the tour of your new Acer laptop
UAClntUsrAClntUsr.exe"Altiris AClient Service Windows Tray Icon"
UAcronis True ImageTimounterMonitor.exe"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
NAcronis True Image MonitorTrueImageMonitor.exe"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
NAcronis TrueImage MonitorTrueImageMonitor.exe"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
NAcronis*True*Image MonitorTrueImageMonitor.exe"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
UAcronisTimounterMonitorTimounterMonitor.exe"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
NAcronisTrueImage MonitorTrueImageMonitor.exe"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
NActiveWordsAWMonitor.exe"ActiveWords from ActiveWord Systems
UActual Window ManagerActualWindowManagerCenter.exe"Actual Window Manager from Actual Tools - ""an innovative desktop organization application which introduces unconventional window controls and also automatic general window operations making your work more productive
UActual Window MinimizerActualWindowMinimizerCenter.exe"Actual Window Minimizer - ""allows minimizing any window to task tray notification area or to the edge of the screen"""
UAd Blockerblocker.exe"Ad Blocker - blocks popups
XAd-Eliminatorad-eliminator.exe"Ad-Eliminator rogue spyware remover - not recommended
XAdDestroyerAdDestroyer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
XAdKillerAD Defender.exe"Part of the Advanced Spyware Remover rogue spyware remover - not recommended
UAdobe Gamma LoaderAdobe Gamma Loader.exe"Adjusts monitor colours across all programs
UAdobe Gamma Loader.exeAdobe Gamma Loader.exe"Adjusts monitor colours across all programs
Xadobemgradobemgr.exe"Added by the ADCLICKER TROJAN!"
XAdobeReaderProrvdjlefr.exe"Added by the RBOT-CQZ WORM!"
NAdobeUpdaterAdobeUpdater.exeAutomatic updater for Adobe software - run manually
Xadodemasteradodemaster.exe"Downloader of Korean origin
XADS Adware RemoverADS Adware Remover.exe"ADS Adware Remover
UAdsCleanerAdsCleaner.exe"""AdsCleaner is a powerful ad blocking software designed to stop ads (block banners ad
UaDSProcMngraDSProcMngr.exe"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
XAdvanced Spyware RemoverAsr.exe"Advanced Spyware Remover rogue spyware remover - not recommended
XAdvanced Spyware Remover ProAsr.exe"Advanced Spyware Remover rogue spyware remover - not recommended
UAdvanced Uninstaller PRO Installation Monitormonitor.exe"Innovative Solutions Advanced Uninstaller PRO - ""easy-to-use suite for uninstalling applications and keeping your computer fast
Xadvanceddefenderadvanceddefender.exe"Advanced Defender rogue security software - not recommended
UAdvertising KillerAkiller.exe"Advertising Killer - popup stopper"
XAdware PunisherAdwarePunisher.exe"Adware Punisher rogue spyware remover - not recommended
XAdware Punisher MonitorAdwarePunisher_monitor.exe"Adware Punisher rogue spyware remover - not recommended
XAdwareProtectorAdwareProtector.exe"Part of rogue security tools
UAEFltrs ApplicationAESTFltr.exe"Part of the XP installation of the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
UAESTFltrAESTFltr.exe"Part of the XP installation of the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
?AeXSWDUsrAeXSWDUsr.exe"Altiris Express NS Client Manager software. Is it required?"
Xagentsvragentsvr.exe"Detected by Kaspersky as Monker.A adware. Note - do not confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the Windows\Msagent folder"
NAIM LoggerAIMLogger.exe"AIM Logger - saves AIM (AOL Instant Messenger) conversations to log files. Can be started when you are using AIM"
XAIM reminderAIM reminder.exe"Added by the BUDDY.E TROJAN!"
UAimMonitorAimMonitor.exe"AIM Monitor Sniffer surveillance software for the AIM instant messenger. Uninstall this software unless you put it there yourself"
UAKillerakiller.exe"Advertising Killer - popup stopper"
?AlarmWatcherAlarmWatcher.exe"Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?"
NAlbum Fast StartABMTSR.EXE"Scanner software
UAlcmtrALCMTR.EXE"Realtek Azalia Audio - Event Monitor
XAlcmtrMalware Doctor.exe"MalwareDoc rogue security software - not recommended
UAlcxMonitorAlcxmntr.exe"Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the ""U"" recommendation"
Xalerteralerter.exe"MAHA.F spyware"
XAlevirAlevir.exe"Added by the OPASERV-A WORM!"
XAlfaCleanerAlfaCleaner.exe"AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware"
XAltnetpoints manager.exe"Altnet TopSearch adware"
XAltnetPointsManagerpoints manager.exe"Altnet TopSearch adware"
NAluria Security CenterSecurityCenter.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
UAlwaysOnTopMakerAlwaysOnTopMaker.exe"Always On Top Maker - utilty to enable an application to always be displayed ""on top"" of others on the desktop"
UAMO_Taskplaner.exeAMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
UAMO_TA~1AMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
NAnapod Manageranamgr.exe"Anapod Explorer from Red Chair Software ""is the most advanced Windows iPod® software available
?ANIWZCSServiceWZCSLDR.exeD-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity
YANONYMIZER_SPYWAREKILLERSpyWareKiller.exe"Anonymizer Spyware Killer
Uantidialer.co.ukDialer_Watcher.exe"Dialer_Watcher is an application that allows you to detect dialers on your computer"
Xantihostahr.exe"Added by the BANCBAN-QJ TROJAN!"
XAntimalware Doctor.exeAntimalware Doctor.exe"Antimalware Doctor rogue security software - not recommended
XantispyANTIVIR.exe"IE AntiVirus rogue security software - not recommended
Xantispysoldierantispysoldier.exe"AntiSpyware Soldier rogue spyware remover - not recommended
XAntispySpiderantispyspider.exe"AntiSpySpider rogue spyware remover - not recommended
XAntiVerminserAntiVerminser.exe"Variant of the Antivermins rogue security software - not recommended
XAntivirusBESTInstaller.exe"Installer for the AntivirusBEST rogue security software - not recommended. Removal instructions here"
UAnVirAnVir.exe"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Security SuiteAnVir.exe"AnVir Security Suite - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Task ManagerAnVir.exe"AnVir Task Manager - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Task Manager FreeAnVir.exe"AnVir Task Manager Free - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
UAnVir Task Manager ProAnVir.exe"AnVir Task Manager Pro - ""is a tool that controls everything running on computer and provides Windows enhancements that help in every-day work"". Monitors and manages startup programs
XAnvTrgrAnvTrgr.exe"AntivirusTrigger rogue security software - not recommended
?anycom bluetoothftflauncher.exe"Associated with an Anycom bluetooth wireless card. What does it do and is it required?"
XAOL Instant Messengeraimsgr.exe"Added by the IRCBOT.N TROJAN!"
XAOL Messengeraolmsngr.exe"Added by the SDBOT-JF WORM!"
UAOL Spyware ProtectionAOLSP Scheduler.exeAOL's spyware protection program
Xaolupdater.exeaolupdater.exe"Added by a variant of the IRCBOT TROJAN!"
XAPcDefenderAPcDefender.exe"APcDefender rogue security software - not recommended
Xapmanager.exeapmanager.exe"AP Manager ransomware download manager - not recommended
NAppleSyncNotifierAppleSyncNotifier.exe"From WinPatrol PLUS by BillP Studios - ""This file installs with iTunes and is used when syncing your iPhone
XApplication Explorerappexplr.exe"Added by the AGENT-NMO TROJAN!"
NApplication LauncherApplication Launcher.exe"System Tray access to the Sony Ericsson PC Suite and HTC Sync mobile phone management utilities. Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
XARCHIVE CONTROLfixupdattr.exe"Added by the MYTOB.GU WORM!"
XArmorDefenderArmorDefender.exe"ArmorDefender rogue security software - not recommended
XASC-AntiSpywareWinCleaner.exe"WinCleaner 2009 rogue security software - not recommended
XASDPLUGIN100176br.exe"AsdPlug premium rate adult content dialer"
NASE SchedulerASE Scheduler.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
UAshampoo Magical Optimizer TaskplanerAMO_Taskplaner.exe"Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files
UAshampoo PopUpBlockerPopUpKiller.exe"Ashampoo popup blocker
Nashampoo UnInstaller WatcherUIWatcher.exe"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
UASMASMonitor.exe"Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses
UAsmw Soft Popups Burnerpopups burner.exe"Popup blocker
?AsusACPIServerAsAcpiSvr.exe"Part of the ACPI driver for the Asus Eee PC range. What does it do and is it required?"
XatidriverreaIplayer.exe"Added by the WARPIGS-E WORM! Note the uppercase ""I"" in the filename
NaTuneratuner.exe"aTuner - tweak tool for GeForce based graphics cards"
XAtxBrwIexplor.exe"""Pop Marketing"" adware"
XAudcntraudcntr.exe"Added by the GEMA TROJAN!"
NAudioCommanderAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
NAudioCommander ApplicationAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
NAudioCommanderVistaAudioCommander.exe"System Tray access to the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation
YAuthentic-ID Toolbarwintmr.exe"System Tray access to Child Control parental control software by Salfield"
UAuto Run Software for Photo FramePhotoManager.exe"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
UAuto SwitchTASKBAR.exeRelated to 2-port Bitronics AutoSwitch kit from Belkin
NAuto T Barautotbar.exeIf you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
UAutobarautobar.exe"Connect buttons on the keyboard for internet direct access
XAutoloaderaproposclientApropos_Client_Loader.exe"AproposMedia adware"
XAutoloaderaproposclientcxtpls_loader.exe"AproposMedia adware"
XAutoLoaderEnvoloAutoUpdaterauto_update_loader.exe"Envolo/AproposMedia adware updater"
UAutoSizerAUTOSIZER.EXE"AutoSizer - utility that automatically maximizes windows when they're opened"
Nautotbarautotbar.exeIf you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled
XAVAntivir.exe"Antivir rogue security software - not recommended
XAveoAttuneatmdlusr.exe"Aveo Attune automated helpdesk software - adware/spyware"
XAVG Grisoft Updaterupdater.exe"Added by the AGOBOT-OT WORM!"
YAVG7_AMSVRAVGAMSVR.EXE"This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher"
Yavgamsvr.exeAvgamsvr.exe"This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher"
Yavgmsvr.exeavgmsvr.exe"AVG Anti-Virus 7.0 related"
XAvira Anti-Virus Pro 2008explorear.exeAdded by an unidentified WORM or TROJAN!
XAvirTrAvirTr.exe"AntivirusTrigger rogue security software - not recommended
YAVKBarAVKBar.exe"GData AntiVirusKit Anti-virus"
XAvpravpr.exe"Added by the MYDOOM.AF WORM!"
Xavptaskexpl0rer.exe"Added by the AGENT.JJO TROJAN!"
Yavx communicatorxcommsur.exe"Anti-virus part of BitDefender virus scanner/firewall"
UAWMONAd-Monitor.exe"F-Secure Anti-Spyware"
UAXIS Print System DriverScannerDriverScanner.exe"Part of AXIS Print System from AXIS Communications - ""adds printer discovery
UAXIS Print System DriverServerDriverServer.exe"Part of AXIS Print System from AXIS Communications - ""adds printer discovery
XAXPDefenderAXPDefender.exe"Advanced XP Defender rogue security software - not recommended
XAXPFixerAXPFixer.exe"AdvancedXPFixer rogue security software - not recommended
UBackgroundSwitcherBackgroundSwitcher.exe"John's Background Switcher (or JBS for short) periodically changes the background image on your computer (like every hour or every day) to something interesting"
XBadxHELLRAIDER.EXE"Added by the MINDCTRL.A BACKDOOR!"
UBattery Scopebatmgr.exeMonitors battery levels on a notebook/laptop PC
UBatteryBarbatterybar.exe"BatteryBar - displays battery usage
Ybatterymiserbatterymiser.exe"Battery Miser power management utility for LG Notebooks"
UBayden SlickRunsr.exe"""SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords)
NBBLauncher.exeBBLauncher.exe"BounceBack Professional - back-up software"
UBellSouthAlertManager.exeBellSouthAlertManager.exe"Related to BellSouth Alert Manager"
XBestPopUpKillerBestPopupKiller.exe"Popup killer by Swanksoft - not recommended
UBgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}NMBgMonitor.exe"Associated with Nero Scout
UBHRBHR.exe"Browser Hijack Retaliator - recovers your browser after it has been hijacked by spyware
UBioniXWallpaperBioniX Wallper.exe"BioniX Wallpaper Changer - ""the most advanced wallpaper changer/wallpaper manager software in the world"""
YBitDefender Communicatorxcommsvr.exe"BitDefender antivirus"
NBJ Printer Status MonitorCjstsr.exeCanon BJ printer status monitor
Xblah servicemsnmsgrr.exe"Added by the RBOT.PZ WORM!"
Xblah servicetazkmgr.exe"Added by the RBOT.UA WORM!"
NBlazeChangerFBZPaper.exe"Ember graphic file viewer
?BlazeServoToolMediaDetector.exe"Related to BlazeDVD from BlazeVideo - which ""is leading powerful and easy-to-use DVD player software."" What does it do and is it required?"
XBlockCheckerBlock-checker.exe"BlockChecker adware"
XBlockKeeperBlockKeeper.exe"BlockKeeper rogue security software - not recommended
XBlockProtector.exeBlockProtector.exe"BlockProtector rogue security software - not recommended
XBlockScannerBlockScanner.exe"BlockScanner rogue security software - not recommended. A member of the WiniGuard family"
NBlockTrackerBlockTracker.exeIf present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
XBlockWatcherBlockWatcher.exe"BlockWatcher rogue security software - not recommended
Ublsloaderblsloader.exe"BellSouth ISP Internet Tools"
NBlubsterBlubster.exe"Related to Blubster Music sharing service"
UBO1HelperStartUpBo1helper.exe"ScreenScenes ""Butterfly Oasis"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
UBOINC Managerboincmgr.exe"BOINC manager - ""controls the use of your computer's disk
Xboler.exesyser.exe"Added by the RBOT-AYS WORM!"
NBookmarkCentralBMLauncher.exe"Bookmark Express - "offers a more flexible way to manage Web site bookmarks
XBoot Serverbootserver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XBootLoaderBootLoader.exe.vbs"Added by the WATERWORKS WORM!"
NBose Wave/PC Monitorwavepcmonitor.exe"System Tray access for this system (more info on the system here). Available via Start -> Programs"
XBouncer RunStartupbouncer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
UBreak_ReminderBREAK REMINDER.exe"Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here"
YBredbandsbolagetservicecenter.exe"Related to the Brebband Swedish Broadband provider"
YBrowser Hijack Blasterbhblaster.exe"Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard"
UBrowser LauncherCommandr.exeLogitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
XBS Mediaplayerbsplyr.exe"Added by the RBOT-OU WORM!"
NBS Playerbsplayer.exe"BSplayer - A video player used to play avi
Nbsplayerbsplayer.exe"BSplayer - a video player used to play avi
NBuddyizerBuddyizer.exePart of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
Ubugwatcher servicebugwatcher.exe"
NBulletProof FTP Serverbpftpserver.exe"BulletProof FTP Server"
YBullGuard XCommXCOMMSVR.EXE"Part of Bullguard antivirus"
Xbuohxqtfswbgcjydr.exe"Added by the AGENT-NRC TROJAN!"
XByteDefenderByteDefender.exe"ByteDefender rogue security software - not recommended
?BZEnvironmentVariableCollectorBZEnvironmentVariableCollector.exe"Part of BlazentAgent from Blazent who provide ""outsourcing governance automation for IT Outsourcing (ITO) relationships"". What does it do and is it required?"
?BZUtilizationCollectorBZUtilizationCollector.exe"Part of BlazentAgent from Blazent who provide ""outsourcing governance automation for IT Outsourcing (ITO) relationships"". What does it do and is it required?"
NC-Media MixerMixer.exeC-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
UC:Program FilesNetMeterNetMeter.exeNetMeter.exe"""Net Meter is a small
XC:WINDOWSIEXPLOR.EXEIEXPLOR.EXE"""Pop Marketing"" adware"
YCacheMgrCacheMgr.exe"Sophos Antivirus Remote Update"
UCalendarCalendar.exe"This entry can be added by PlainSight Desktop Calendar and older versions of Desktop iCalendar from Desksware and the older Calendar 200X - which is no longer supported by or available from the author"
?Calendar 200X Monitorcalmonitor.exe"Background task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one"
NCalendar 200X Remindercalendar.exe"Part of Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. Displays reminders for holidays
XCall Function System32sddriver.exe"Added by a variant of the SDBOT TROJAN!"
?calmonitorcalmonitor.exe"Background task for Calendar 200X by Joel Graffman - which is no longer supported or available from it's author. The exact purpose of this startup entry is unknown at present but it appears to be related to the Calendar 200X Reminder entry - as disabling that entry via the program also disables this one"
UCamera Assistant Softwaretraybar.exeCamera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam
?CameraApplicationLauncherCameraApplicationLaunchpadLauncher.exe"Supports the integrated webcam on IBM/Lenovo Thinkpad notebooks. What does it do and is it required?"
XCaptionMgr32crssr.exe"Added by the ZAR.A WORM!"
XCARPserverCARPserver.exe"Added by the BANKER-AN TROJAN!"
NCashsurfers Cashbar NavigatorCashbar.Exe"Cashsurfers CashBar Navigator - ""The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"""
XccApprexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
YCCDoctorLogonTestingccdoctor.exe"Checks your system to make sure it's configured properly for running IBM Rational ClearCase
YccenterCCenter.exe"RAV AntiVirus"
YCcEvtMgrccEvtMgr.exe"Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via ""ccApp"" and was not required as a seperate entry but a recent update changed this"
UCCleanerCCleaner.exe"CCleaner from Piriform Ltd. - ""is a freeware system optimization
Xccregexplorer.exe"Added by the ZCREW BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XccRegVfYexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
YccSetMgrccSetMgr.exe"Part of Norton AntiVirus 2004. What does it do?"
UccUpdMgrccUpdMgr.exe"In Loco Parentis remote surveillance software. Uninstall this software unless you put it there yourself!"
UccWasheraolwasher.exe"Webroot Cache & Cookie Washer - cleaning browser tracks
YCCWinTraywintmr.exe"System Tray access to Child Control parental control software by Salfield"
NCD Storage Mastercdstorager.exe"CD Storage Master - a program designed to catalog CD information
XCentralProcessortaskimgr.exe"Added by the BANCOS.J TROJAN!"
NCesarFTP FTP Serverserver.exe"CesarFTPd - FTP server"
NcfFncEnabler.execfFncEnabler.exe"Toshiba ""Config Free"" wireless network manager on their range of laptops"
Ycfgintprcfgintpr.exe"Configuration Interpreter - part of Tiny Personal Firewall V4"
UCGServercgserver.exe"Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs"
NChcenterchcenter.exe"IMSI HiJaak - ""the easiest way to convert
UChicoSyswebtmr.exe"Child Control parental control software"
UChikkaDefaultChikkaLauncher.exe"Chikka PC text messanger and IM client"
UChineseStarcstar.exeChinese language support software
UCHIPDRIVESmartcardManagerSCMgr.exe"ChipDrive Smartcard software"
XCHK Diskerchkdsker.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XCi Svrcisvr.exe"Added by the IRCBOT.AWN BACKDOOR!"
UCisco Systems VPN Clientipsecdialer.exe"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
NCISrvr ProgramCISRVR.EXERelated to internet setup on Compaq PC's
XCleanatorCleanator.exe"Cleanator rogue privacy program - not recommended
NClient Access Check Versioncwbckver.exe"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
NClient Access ServiceCwbSvStr.Exe"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
NClipTrakkerClipTrakker.exe"Cliptrakker - clipboard extender"
XClock Manageramsngr.exe"Added by the SDBOT-XM TROJAN!"
Xcmsiserver.exe"Added by the DLOADER-WK TROJAN!"
XCOM+ EventSystem ServicesECSERVER.EXE"Added by a variant of the SDBOT WORM!"
XCOM++ Systemexploier.exe"Added by the LOVGATE.Z WORM!"
Ucom.codeode.cactusspamfiltercactusspamfilter.exe"Cactus Spam - free easy-to-use spam blocker"
NCommCtrcommctr.exe"""Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!"". Available via Start -> Programs"
YCommunications_HelperCommunications_Helper.exe"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
YCommunications_Helper.exeCommunications_Helper.exe"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
YCOMMUNICATORCommunicator.exe"Part of Microsoft Office Communicator
NCompaq Computer Corp SCCenter ModuleSCCENTER.EXEFor Compaq PC's. Part of Backweb
XCompaq Sound Drivers For WINDOWSsounddr.exe"Added by the SDBOT-XG WORM!"
XComStartTrojan Guarder.exe"TrojanGuarder rogue security software - not recommended"
XConfig LoadatiorinI3Explorer.exe"Added by the SDBOT.H TROJAN!"
XConfig LoaderSYSMGR.EXE"Added by the AGOBOT.C WORM!"
XConfiguration Loaderconfgldr.exe"Added by the GAOBOT.GEN!POLY WORM!"
XConfiguration LoaderWinHelper.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XConfiguration LoaderDVD-Player.exe"Added by a variant of the SDBOT WORM!"
XConfiguration Loaderconfigldr.exe"Added by the AGOBOT-PP TROJAN!"
XConfiguration Loadermsnmsgr.exe"Added by the SDBOT-SO WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XConfiguration Loader 2confuldr.exe"Added by the AGOBOT-FC WORM!"
XConfiguration Loadingconfigldr.exe"Added by the AGOBOT-EC WORM!"
XConfiguration ManagerCnfgldr.exe"Added by the SDBOT TROJAN!"
NConmgrconmgr.exeStarts Winfax pro at startup
UConMgr.execonmgr.exeConnection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
NCONNECTAuto UpdateCONNECTScheduler.exe"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
NConnection ManagerCManager.exeSBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
NCONNECTSchedulerCONNECTScheduler.exe"Automatic update scheduler for the Sony CONNECT Player originally supplied with their range of USB or hard disk based MP3 players and used in conjunction with the CONNECT Music store download service - now replaced by SonicStage CP"
Xconscorrconscorr.exe"VX2.Transponder parasite updater/installer related"
UContentTransferWMDetector.exeContentTransferWMDetector.exe"Part of Sony's Content Transfer Software which ""provides an easy way to transfer music
UControl CenterCenter.exe"Associated with Hawking Technologies
YControlCenterctlcntr.exe"Part of Lenovo's (IBM) ThinkVantage Fingerprint Software - used on laptops and keyboards with integrated fingerprint readers"
UCookieJarCookiejar.exe"Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add ""cookies"" related to their sites for the next time you return. No longer being actively supported"
UCopernicPerUserTaskMgrCopernicPerUserTaskMgr.exeAutomatic tasking feature of Copernic Pro multi-search engine tool
UCopy handlerCopy Handler.exe"Copy Handler lets you copy between hard disks
UCoreCenterCoreCenter.exe"MSI Core Center - motherboard utility for monitoring CPU speed
NCorel ReminderNAVBROWSER.EXEIf you don't want to register Corel products and be reminded about it every 2 weeks disable it
NCorel ReminderNAVBrowser.exeRegistration reminder for CorelDRAW 10
NCorelMedia FoldersIndexer8MFindexer.exePart of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
?CPCopyProtectionNotifier.exe"Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition"
XCPU Managercpumgr.exe"Added by the PANDEM.B WORM!"
UCPU Power MonitorCpuPowerMonitor.exe"Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme). Associated with the ""Energy Saving"" feature of AI Gear - which ""is a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features."" Part of AI Suite"
UCreata MailJMSrvr.exe"Creata_Mail. Smileys
XCreate A MonstercreateAMonster.exe"Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related"
NCreateCD_Reminderreminder.exeReminder to create system recovery CD/DVDs on a Sony Vaio laptop or desktop
NCreative LauncherCTLauncher.exeFor Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
UCreative Live! Cam ManagerCTLCMgr.exe"Creative Live! Cam Manager"
NCreative PCI Audio Configuration Utilitystarter.exe"System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer"
XCsimPlayerCsimPlayer.exe"Added by the KOOBFACE-AD WORM!"
UCSS ServerCSSServer.exe"ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself"
UCTCMonitorCTCMonitor.exe"Click-to-Convert - document-to-HTML or doc-to-PDF converter. Only required if you are going to use the File -> Print method of using Click-to-Convert. If converting directly from MS Office
Xctfmonmsnmsgr.exe"Added by the BDOOR-JV BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
Xctfmoonmicrosoftconfigurator.exe"Added by the DELF-ALS TROJAN!"
UCTHELPERCTHELPER.EXE"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
XCTHelpercthelper.exe"Added by the RBOT-XB WORM! Note - do not confuse with the Creative application of the same name described here"
NcursorScreendragon_VS_Taskbar.exe"ScreenDragon video player"
Xcvmonitor.execvmonitor.exe"Added by the SDBOT.BV WORM!"
Ncwbckvercwbckver.exe"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
Ncwbsvstrcwbsvstr.exe"Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop
Xcwritercwriter.exe"Part of PcRaiser
NCXMonHpi_Monitor.exeAutodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
UCyber-Defender 2003uwcdsvr.exe"
NCyber-shot Viewer Media Check ToolSPUVolumeWatcher.exe"Part of the Sony Picture Uility software supplied with Sony Cyber-shot digital cameras. Automatically invokes an import process if the camera is connected and has media on it"
UCyberLat Ram CleanerCLRamCleaner.exe"CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
XDaily Weather Forecastweather.exe"Added by the DLOADER-IP TROJAN!"
XData Layer 2datalayer.exe"Added by the RBOT-BNF WORM! Note - do not confuse with the legitimate Nokia file sharing the same filename - this one is located in %System%"
XDataHealerDataHealer.exe"DataHealer rogue security software - not recommended
UDataKeeperDataKeeper.exe"PowerQuest DataKeeper (now owned by Symantec) backup software"
YDataLayerDataLayer.exe"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
NDataViz Inc MessengerDvzIncMsgr.exe"Installed with DataViz ""Documents to Go"" software"
NDataViz MessengerDvzMsgr.exe"DataViz Documents to Go - "allows you to use your Word
XDate Managerdatemanager.exe"Date Manager - calender program. Spyware/adware based provided by The Gator Corporation. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
XDateMngrDATEMNGR.EXE"Added by the SPYBOT-BR BACKDOOR!"
Xdbar_starterstarter.exe"Deskbar adware - adds a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com.com"
UDC300 Monitorcmonitor.exeMonitor for a Acer DC300 digital camera
XDCE Managerdcemgr.exe"Added by the TUMAG TROJAN!"
XDDiallerDDialler.exeAdult content dialler
XDealHelperBrwsrdhbrwsr.exe"DealHelper adware"
XDebugMonitordebugmonitor.exe"Added by the MYDOOM.BG WORM!"
UDefault ManagerDefMgr.exe"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
UDefMgrDefMgr.exe"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
UDefragTaskBardefragTaskBar.exe"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
UdefragTaskBar.exedefragTaskBar.exe"System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which ""works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk"""
UDell AIO Printer A920dlbkbmgr.exeSystem Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons
UDell AIO Printer A940dlbabmgr.exeSystem Tray application for the Dell Photo AIO Printer 940 that enables scan or fax functions to run directly from the printer via the buttons
UDell AIO Printer A960dlbfbmgr.exeSystem Tray application for the Dell Photo AIO Printer 960 that enables scan or fax functions to run directly from the printer via the buttons
UDell DataSafe SchedulerDataSafeOnlineScheduler.exe"Scheduler for Dell DataSafe™ Online which ""helps protect your music
UDell PanelMgrSSMMgr.exe"Monitors ink levels
UDell Photo AIO Printer 922dlbtbmgr.exeSystem Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons
UDell Photo AIO Printer 942dlbubmgr.exeSystem Tray application for the Dell Photo AIO Printer 942 that enables scan or fax functions to run directly from the printer via the buttons
NDELL Webcam ManagerDellWMgr.exeDell Webcam Manager - Webcam management software provided on Dell PCs
NDeskColorDESKCOLOR.EXEProvides transparent icon text backgrounds and coloured icon text
Udesksaverdesksaver.exe"Part of Advanced Desktop Shield
UDeskSaverDeskSaver.exe"DeskSaver from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". The Pro version also includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
UDeskSaver ProDeskSaver.exe"DeskSaver Pro from Headway Creative - utility that allows you ""to backup and to restore the icons position easily on the Windows desktop"". Includes a ""Taskbar Economizer"" which minimizes an open window to the System Tray instead of the taskbar. Located in %ProgramFiles%\Headway Creative\DeskSaver"
Udesksaver.exedesksaver.exe"Part of Advanced Desktop Shield
YDesktop ArmorDesktopArmor.exe"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
UDesktop CalendarDesktop Calendar.exe"Desktop Calendar - ""Desktop Calendar is a highly customizable calendar program that turns your desktop into a traditional wall calendar
UDesktop iCalendarCalendar.exe"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
UDesktop iCalendarDesktop iCalendar.exe"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
UDesktop iCalendar.exeDesktop iCalendar.exe"Desktop iCalendar by Desksware - ""is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar
YDesktopArmorDesktopArmor.exe"Desktop Armor from Headlight Software - ""watches dozens and dozens of important settings on your computer and warns you if any program has changed them"" including those made by malware"
Ndesktopmgrdesktopmgr.exe"Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds
NDetectordetector.exe"USB port detector for LG scanners. Sits in the System Tray
XDeus CleanerDCleaner.exe"Deus Cleaner rogue system cleaner utility - not recommended"
XDevice Managerwfxmgr.exe"Added by the RBOT.AJU WORM!"
UDevicesolesvr.exe"Salfeld Child Control - parental control software"
XDHCP Serverregsvr.exe"Added by the RBOT-PR WORM!"
UDialgo SDKPhoneAnswer.exe"Dialgo Wave Modem ActiveX - ""Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID
UDigisoft AntiDialerAntiDialer.exe"Digisoft AntiDialer"
?DISCoverDISCover.exe"Related to DISCover Drop from Digital Interactive Systems Corporation. What does it do and is it required?"
UDiscUpdateManagerDiscUpdMgr.exe"Disc Update Manager for Digital interactive's DISCover Console. Provider of on-demand video games"
NDiscUpdateManagerDiscUpdateMgr.exe"DISCover from Digital Interactive Systems Corporation Inc. ""The company's patented Drop 'n' Play technology provides a simple
UDiscWizardMonitor.exeDiscWizardMonitor.exe"Seagate DiscWizard - hard disk utility for Seagate's SATA and PATA (IDE) drives"
UDisk CleanerDiskCleaner.Exe"Hard disk management part of TuneUp Utilities from TuneUp Distribution GmbH"
XDisk Defragmentation Loaderpmsvcr.exe"Added by a variant of the IRCBOT TROJAN!"
XDisk Managerdiskver.exe"Added by the RBOT.AQT WORM!"
UDiskSuiteaDSProcMngr.exe"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
UDisk_MonitorDisk_Monitor.exe"Multi-media
XDispatcherdispatcher.exe"Added by the DLOADR-AS TROJAN!"
Xdispenterdispenter.exe"Added by the AGENT-MKK TROJAN!"
XDivX PlayerDivXPlayer.exe"Added by a variant of the RBOT WORM!"
XDIVX Video PlayerDIVXPloyer.exeAdded by an unidentified WORM or TROJAN!
Xdlderdlder.exe"Dlder spyware. Also creates a fake ""explorer.exe"" file and can be installed via versions of Grokster
XDlitedllmanager.exe"Added by the WOOTBOT.DN WORM!"
XDlloadkiller.exe"Added by the KILLAV-FK TROJAN!"
NdlmMgrAdobeDownloadManager.exe"Adobe Download Manager - ""can prevent you from having to start from the beginning should your download process be interrupted
XDM mgrdm_mgr.exe"Added by the JITTAR TROJAN!"
NDMASchedulerDMAScheduler.exe"Related to DigitalMedia Plus Archiver. This program is non-essential process to the running of the program
UDMHotKeyDMLoader.exeHotKey access to the Samsung Display Manager on laptops and ultra-mobiles that support it - such as the M55 and Q1
NDMILDRdmildr.exe"Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about
Xdmloaderdmloader.exe"Added by a variant of the RBOT WORM!"
UDMXLauncherDMXLauncher.exe"Part of Dell's Media Experience
XDM_serverdmserver.exe"Comet Cursor adware"
NDnarDnar.exe"Installed on some Dell workstations and DMI related. Tries to access the internet and is known to not be required - but what does it do?"
XDNS Servicednsresolver.exe"Added by the RBOT-PQ WORM!"
Xdnscleanerdnscleaner.exe"CoolWebSearch parasite variant"
XDocTorDoctor.exe"Added by the DOTOR.A WORM!"
XDoctor Antivirus 2008antvr.exe"Doctor Antivirus 2008 rogue security software - not recommended
UDocument Managerdocmgr.exe"Wave Systems Corp. Document Manager - ""provides secure storage and management capabilities for file and folder level encryption"""
XDomain Name Resolve Servicednsresolver.exe"Added by the KIMAN.A WORM!"
NDoroServerDoroServer.exe"Doro PDF Writer from The SZ Development. All what you need for creating pdf files"
NDownload WonderDownloadWonder.exe"Download Wonder from Forty Software. Download manager for resuming downloads
Ndptrackerdptracker.exe"CamTrack webcam software that enhances the way people video chat"
XDRam rar procwinupdaterar.exe"Added by a variant of the IRCBOT TROJAN!"
Xdreamsserver.exe"Added by a variant of the SDBOT WORM!"
?dregfixph_finder.exe"??"
?DrvListnrDrvListnr.exe"Analog Devices SoundMAX soundcard related. What does it do and is it required?"
Udrvlsnrdrvlsnr.exeCompaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly
Xdrvsyskithidr.exe"Added by the BAGLE.HR WORM!"
Xdrvsyskithldrrr.exe"Added by the BAGLE.QU TROJAN!"
UDT 11Mbps WLAN PC Card StationDTCARDMonitor.exe11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom
UDT 11Mbps WLAN USB StationDTUSBMonitor.exe11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom
NDU MeterDUMETER.EXE"Hagel Technologies internet bandwidth monitor"
UDualCoreCenterStartUpDualCoreCenter.exe"Unified control center for overclocking both the graphics card and the CPU
NDulux WeatherShield WeatherDeskweather.exe"Dulux WeatherShield WeatherDesk - latest weather information from across Australia"
XDumeter Servicesdumeter.exe"Added by the SDBOT-AEQ WORM!"
NDVDLauncherDVDLauncher.exe"Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion"
NDW4Weather.exe"Desktop Weather 4 by The Weather Channel - provides current temperature
NDW4DesktopWeather.exe"Desktop Weather 4 by The Weather Channel - provides current temperature
NDW6DesktopWeather.exe"Desktop Weather 6 by The Weather Channel - provides current temperature
UDWHeartbeatMonitorDWHeartbeatMonitor.exeDWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference
XDxLoadDX3DRndr.exe"Added by the GIBE.B WORM!"
UE-colorIconMgr.ExeSets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
Ueabconfg.cplEabServr.exeEasy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
NEarthLink ToolBar 5.0etoolbar.exe"EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar
UEasyKeyboardLoggerEasyKeyboardLogger.exe"EasyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
XeasyServServer.exe"Added by the EASYSERV TROJAN!"
XEasySpywareCleanerEasySpywareCleaner.exe"EasySpywareCleaner rogue spyware remover - not recommended
XeBay ToolbarEBAYTBAR.EXE"eBay Toolbar - reportes as spyware as it "phones home""
NECenterEULALauncher.exeEnd User License Agreement (EULA) launcher - related to Dell E-Center/Google Toolbar
UeDataSecurity LoadereDSloader.exe"Part of Acer Empowering Technology. ""Acer eDataSecurity Management is a handy file encryption utility that protects files from being accessed by unauthorized persons
Nedexteredexter.exe"eDexter supplements internet filtering by substituting local images for filtered images in order to prevent browser stalls and other annoyances. Can be activated manually when starting the browser"
NEDLoaderDTLoader.exeEffective Desktop from MiniStars Software - desktop management software no longer being supported
XEechhoor.exe"PurityScan adware"
NEEventManagerEEventManager.exe"Part of the Epson Creativity Suite supplied with their multi-function printer/scanners
XEliteProtectorEliteProtector.exe"EliteProtector rogue spyware remover - not recommended
UEMMeterEMMeter.exe"""Express Meter lets you track and manage software usage so you can avoid purchasing and supporting applications that aren't being used
?Empowering Technology LaunchereAPLauncher.exe"Part of Acer Empowering Technology. What does it do and is it required?"
?EmpoweringTechnologyFramework.Launcher.exe"Part of Acer Empowering Technology. What does it do and is it required?"
NENCMONITORmonitor.exeThe Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it
UEncompass_ENCMONTRENCMONTR.EXEOptional simple browser from Yahoo (Encompass)
NEnergizer FileSaverEnergizer FileSaver.exe"Energizer FileSaver - UPS back-up utility for Energizer UPS products. From their Tech Support staff this is known to have a memory leak since it's release - with no fix planned! It will grab 2-5 handles per second and crash the average system in less than 3 days - therefore not recommended"
?ENSApServer2_0APSERVER.EXE"Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required?"
UEnsoniqMixerstarter.exe"Puts the Ensoniq mixer in system tray. From Ensoniq Technologies ""Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used"". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility"
UEnterra Icon KeeperIcnKeepr.exe"Icon Keeper - ""tool to save and restore icon positions on the desktop"""
UePrompterePrompter.exe"ePrompter - E-mail notification software"
UEpsonPhotoStarterEPSON_PhotoStarter.exeOnly needed if you want to make full use of the capabilities of an Epson printer that included this
UErasereraser.exe"Eraser - ""an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns"". This entry starts the Scheduler with Windows and provides a System Tray icon for on-demand access. Located in %ProgramFiles%\Eraser"
Uerasereraser.exe"Part of Evidence Exterminator
Ueraser.exeeraser.exe"Part of Evidence Exterminator
UeRecoveryServiceMonitor.exe"Part of Acer Empowering Technology. ""Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer
NError NukerErrorNuker.exe"ErrorNuker registry cleaner - only required if you want the application to run a scan at startup. The program can be launched manually if required"
Xerrorhandlererrorhandler.exe"ErrorHandler adware"
XEScorcherescorcher.exe"Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead"
Xethernetmsnger.exe"Added by a variant of the SDBOT WORM!"
UEVENTLISTENEREvLstnr.exeUsed with a Nikon digital camera to recognize when the camera is plugged in
Neventmgreventmgr.exeUsed with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
Xeventwvreventwvr.exe"Added by the COSIAM_G TROJAN!"
UEvidence Cleanerecleaner.exe"Evidence Cleaner cleans up tracks left by your PC and Internet activities"
Xewupdaterewupdater.exe"EasyWebSearch adware updater"
XExecUserExecUser.exe"Added by a variant of the RBOT WORM!"
UExif LauncherExiflaquickdcr.exeUSB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
UExitKillerEkiller.exe"Exit Killer - automatically closes pop-up windows in your browser"
?exmonhpimoniter.exe"Some kind of hp digital camera maybe or a photo smart connection probe?"
Xexp1orer.exeexp1orer.exe"Added by the DLOAD-FG TROJAN! Notice the digit ""1"" used in both the startup entry and filename
XExploreExplorer.exe"Added by the IRC.FLOOD.G BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Uexplorerexplorer.exe"Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL"
XEXPLOREREXPL0RER.EXE"Added by the BEASTDO-Y TROJAN! Note the ""0"" in the filename rather than upper case ""o"""
Xexplorerexplorer.exe"Added by the KEYLOG-AK TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\service"
XEXPLOREREXPLORER.exe"Added by the NETHIEF-P TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\ShellExt"
Xexplorerexplorer.exe"Added by the BLOCKEY-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%\config"
XExplorerWindows Explorer.exe"Added by the SILLYFDC-I WORM!"
XExplorer lptt01explorer.exe"RapidBlaster variant (in a ""explorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here.Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually!"
XExplorer ml097eexplorer.exe"RapidBlaster variant (in a ""explorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here.Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually!"
Xexplorer.exeexplorer.exe"Added by the AGENT-EW or PWS-CY TROJANS! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xexplorer.exeexplorer.exe"Added by the DELF-ACL TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the Program Files folder"
XExplorer.execsrss.exe"Added by the JUEGO-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%\Microsoft"
XExplorer6.1.EXEExplorer.exeAdded by the MYDOOM.B WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!
XExplorerTaskexplorer.exe"Added by the ZCREW-B BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the ""Fonts"" sub-folder"
NezHelperezHelper.exe"Part of the ezPeer+ ezHelper music sharing program."
UFatpipe Dialerfpdialer.exeDailler for Fatpipe - software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
UFaxCtrl.exeASMediaProxyServer.exe"Part of Avaya's Contact Center Express - ""a multi-channel
XFdaemon securityfsecur.exe"Added by the SDBOT.KXO WORM!"
Ufeedreader.exefeedreader.exe"""Feedreader is a freeware Windows application that reads and displays Internet newsfeeds aka ATOM and RSS feeds based on XML"""
XFhzepgyiHELLRAIDER.EXE"Added by the MINDCTRL.A BACKDOOR!"
XFile Systemtaskmqr.exe"Added by the RBOT.BWQ WORM!"
Nfilehippo.comUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
NFileHippo.com Update CheckerUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
NFineReader7NewsReaderProAbbyyNewsReader.exe"ABBYY FineReader OCR software - version 7"
UFirefox PreloaderFirefoxPreloader.exe"Firefox Preloader - ""a utility that is designed to load parts of Mozilla Firefox into memory before it is used to improve the its startup time"". Even on fast machines Firefox can take a while to load"
XFirewallSvrFirewallSvr.exe"Added by the NETSKY.X or NETSKY.Y WORMS!"
XFKS v2.0msngr.exeAdded by an unidentified WORM or TROJAN!
XFLooDNeTFLooDeR.exe"Added by the ENDOOL TROJAN!"
XFont Viewerfontviewer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
UFooBar 1.0FooBar.exe"FooBar - ""combines fifteen high-quality productivity tools in a single toolbar that floats on your desktop or runs in the Windows task bar"""
YFoolProoffpwinldr.exe"FoolProof Security PC security software from SmartStuff"
UFree Key Loggerfreekeylogger.exe"Free Key Logger keystroke logger/monitoring program - remove unless you installed it yourself!"
Xfreexstylelockbar.exe"Added by the LOXBOT.D WORM!"
Xfreexstylelockbr.exe"Added by the LOXBOT.C WORM!"
?FridaysInHellInstallerFridaysInHellInstaller.exe"??"
?FRITZ!DSL StartcenterStCenter.exe"FRITZ! ISP software ""StartCenter"" User interface that allows you to manage
XFTPGraberFTPGraber.exe"Added by the DLOADER-DT TROJAN!"
?FtpServer.exeFtpServer.exe"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
XFUKLBARbar.exe"PurityScan adware"
NFullAudioWMPImporter.exeUsed to import settings from Windows Media Player into Music Now software (from www.musicnow.com - which is no longer available) and possibly others
XFwr Command Modulefwr.exe"Added by the SDBOT-PP WORM!"
XFXieloader.exeAdded by the SMALL.RR TROJAN!
Ufxredirfxredir.exeCanon MultiPASS fax redirector
XGatorgator.exe"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
XGator eWalletgator.exe"Gator eWallet adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
UGDMgr.exegdmgr.exe"GuardMon is a commercial surveillance software program designed to monitor all forms of user activity on a computer"
NGDriveGDriver.exeFound on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
NGearboxconfsvr.exe"NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here"
XGeneral AntivirusGenAvir.exe"General Antivirus rogue security software - not recommended
YGenie USB MonitorUSBmonitor.exePort monitor for an external USB hard drive. Required to enable access to the drive
UGiganews AcceleratorGiganewsAccelerator.exe"Giganews Accelerator from Giganews
XGLF Network Lan MonitorNPFMNTOR.exe"Added by the RBOT-AGY WORM!"
XGlobalFlagACERACER.exe"Added by the VB.BL WORM!"
Xgocvir.exe"Added by the SILOV-A WORM!"
Xgoidrgoidr.exe"Goidr adware"
UGoldensoft_MndlSvrMndlSvr.exe"Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive
Xgoodbadvir.exe"Added by the SILOV-B WORM!"
NGoogle UpdaterGoogleUpdater.exe"Downloads and installs updates for Google applications (Google Earth
UGoogleToolbarNotifierGoogleToolbarNotifier.exe"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
XGoogleUpdater3GoogleMapper.exe"Added by the ROUTROBOT WORM!"
XGP Updatergpupdater.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
UGravis Appawareloaderdbserver.exe"Looks like it's associated with Gravis game controllers and the Keyset Manager
XGreatDefenderGreatDefender.exe"GreatDefender rogue security software - not recommended
XGreatDefender.exeGreatDefender.exe"GreatDefender rogue security software - not recommended
NGroksterGrokster.exe"Grokster Peer-To-Peer File Sharing program"
UGrooveMonitorGrooveMonitor.exe"Part of MS Office Groove - a stand-alone product or included with the Enterprise/Ultimate versions of MS Office 2007. ""A collaboration software program that helps teams work together dynamically and effectively
UGrooveMonitor UtilityGrooveMonitor.exe"Part of MS Office Groove - a stand-alone product or included with the Enterprise/Ultimate versions of MS Office 2007. ""A collaboration software program that helps teams work together dynamically and effectively
NGSOrganizerGSOrganizer.exe"GoldenSection Organizer (now WinOrganizer - personal information manager)"
XGuardCenterGuardCenter.exe"GuardCenter rogue security software - not recommended"
NGWInkMonitorGWInkMonitor.exe"Gateway ink monitor - makes an annoying popup that says your printer may be running out of ink
XG_Server.exeG_Server.exe"Added by the FEUTEL-C TROJAN!"
XHard drive Controllerhdcontroller.exe"Added by the KIMAN.B WORM!"
UHardware DoctorHwdoctor.exe"Winbond Hardware Doctor - as included on some motherboard using Winbond's hardware monitoring chips. Displays fan speeds
UHardware Sensors Monitorhmonitor.exeUtility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
Uhcenterhcenter.exe"Bellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
UHControlUserHControlUser.exeHotkeys on an ASUS Notebook. Only required if you use the additional keys
XHDriveSweeperHDriveSweeper.exe"HDriveSweeper rogue privacy program - not recommended
Xhelpmanagerspoler.exe"Added by the RANDEX.J WORM!"
XHewlett Packard Managerhpmanager.exe"Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program"
UHitman Pro SurfRight Helpersrhelper.exe"Hitman Pro - a utility to start a number of Security Protection software. They can be started individualy"
XHKCUserver.exe"Added by the AGENT-NLT TROJAN!"
XHKLMserver.exe"Added by the AGENT-NLT TROJAN!"
Xhldrrrhldrrr.exe"Added by the BAGLE-KF WORM!"
UHmonitorHmonitor.exeHardware sensor monitoring program. Only required if you overclock your system and want to check on the status
NHome Theater SchSvrSchSvr.exe"WinScheduler is installed with Home Theater Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
UHomeKeyLoggerKeyLogger.exe"SpyKeySpy surveillance software. Uninstall this software unless you put it there yourself"
Xhomepage.monitor.exeisamonitor.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
UHondaHelperHondaHelper.exe"Part of Honda Music Link which allows you to use your Honda's audio system's controls to play and search for music on your iPod® in you car"
?Honorhonor.exe"??"
UHostManagerAOLHostManager.exe"Manages a component essential to the operation of most current AOL software. If you remove it from startup it will load when IE is launched
XHot InsideHottest Story Ever.exe"Added by the BHARAT.A WORM!"
XHotAction_hrhotaction_hr.exe"Added by the SITEICON-B DIALER! An uninstall option can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as ""HotAction_hr"""
Xhotfixmsnnmaneger.exe"Added by the WOOTBOT.AF WORM!"
UHP AutoIndexerhppautoindexer.exe"Installed by HP multi-function printer driver software
Nhp center UIShadowBar.exe"User Interface for HP Center - see here"
NHP Component Managerhpcmpmgr.exe"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
UHP Health Check ScheduleHPHC_Scheduler.exeHP Health Check Scheduler from Hewlett-Packard
UHP Laser Jet Directorhppdirector.exe"System Tray icon that opens various functions such as copy
XHP Photo ManagerHPPhotoManager.exe"Added by the SDBOT.AXU WORM!"
UHP SchedIndexerhppschedindexer.exe"Installed by HP multi-function printer driver software
UHPADVISORHPAdvisor.exeHP Total Care Advisor - a suite of help and hardware check programs to help you check the health of your PCs
Nhpcmpmgrhpcmpmgr.exe"Checks the internet for updated drivers/utilities for your HP product - update manually. Disabling will remove the error ""Windows can't shutdown the computer because hpcmpmgr.exe can't be ended"""
UHPLogiFinderhp_finder.exeHP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
XHpPrinterhpserver.exe"Added by the CMJSPY-W TROJAN!"
Nhpsjbmgrhpsjbmgr.exe"HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup
UHRHr.exe"HiddenRecorder periodically takes screenshots of the computer. If you didn't install this yourself remove it"
Xhsimtoolbar.exeUnidentified malware
UHSLAB Loggerlogger.exe"HSLABLogger logs user activity and Internet activity. The gathered information can be sent to a predetermined email address. If you didn't install this yourself uninstall it"
UHtinpdor.exe"Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required"
Xhttp://www.lienvandekelder.beLienVandeKelder.exe"Added by the MYTOB-AZ WORM!"
Xhttp://www.lienvandekelder.beLien Van de Kelder.exe"Added by the MYTOB-AP WORM and variants!"
Xhttp://www.lienvandekelder.beLien Vande Kelder.exe"Added by the MYTOB-AQ WORM!"
Xhttp://www.lienvandekelder.beLien vd Kelder.exe"Added by the MYTOB-M WORM!"
Xhttp://www.lienvandekelder.beWe Love Lien Van de Kelder.exe"Added by the MYTOB-CV WORM!"
Xhttp://www.lienvandekelder.comLien Van de Kelder.exe"Added by the MYTOB-EQ WORM!"
Xhttp://www.lienvandekelder.com/LienVandeKelder.exe"Added by the MYTOB-EO WORM!"
?huhdirhuhdir.exe"??"
XhuigeziHgzServer.exe"Added by the GRAYBIRD.C TROJAN!"
XIASHLPRIASHLPR.EXE"Added by the OPASERV.T WORM!"
YIBM Password Managerpwmgr.exe"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
YIBM_PWMGRpwmgr.exe"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
UIBWin MonitorIBMonitor.exe"IBackup for Windows"
YIcaBaricabar.exeRelated to Citrix MetaFrame
UiCalendarCalendar.exe"Older version of Desktop iCalendar/Desktop iCalendar Lite by Desksware which include support for Google Calendar and add weather
NIconsaverIconsaver.exe"IconSaver is a desktop icon manager"
UICQMonitorICQMonitor.exe"ICQ Monitor Sniffer surveillance software for the ICQ instant messenger. Uninstall this software unless you put it there yourself"
NICServerIcserver.exeIntel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
YICSMGRICSMGR.EXEMonitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers
XIE configureexplorer.exe"Added by the LINEAGE-C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
UIE DoctorIEDoctor.exe"IE Doctor Toolbar - ""IE Doctor can help you to Repair IE easily
UIE New Window Maximizeriemaximizer.exe"IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows"
XIE-Bariebar.exe"DesktopMedia adware"
XIEDriverIEDriver.exe"IEDriver adware. Can be installed as part of peer-to-peer file sharing software called URLBlaze"
XIesarIesar.exeBrowser hijacker - redirecting to an adult web page
UIEServerIEServer.exe"HB Screen Spy surveillance software. Uninstall this software unless you put it there yourself"
Xiestartiexp1orer.exe"Added by the NEMOG.C TROJAN!"
Nietsrietsr.exe"IEClean by Kevin McAleavy - cookie manager
XIEXPL0RERIEXPL0RER.EXE"Added by the AGOBOT-QL WORM!
Xiexploiexplor.exe"Added by the SIDEA TROJAN!"
Xiexplor.exeiexplor.exe"Added by an unidentified WORM or TROJAN! See here"
XIExplorerIExplorer.EXE"Added by the BANCOS-CH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XIexplorerexplorer.exe"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xiexplorer lptt01iexplorer.exe"RapidBlaster variant (in a ""iexplorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Xiexplorer ml097eiexplorer.exe"RapidBlaster variant (in a ""iexplorer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XIexplorer.exeIexplorer.exe"Added by the BANCBAN-EN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XIexplorerr.exeIexplorerr.exe"Added by the BANKER-EUT TROJAN! The file is located in %Windir%\Sun\Java\Deployment\logs"
XIexplorerr.exeIexplorerr.exe"Added by the BANKER.AOVZ TROJAN! The file is located in %Windir%\msagent\gf"
XiExpresseriexpresser.exe"Added by the SLENFBOT.AP WORM!"
Xigamatuekor.exe"Added by the SDBOT.AQ TROJAN!"
NiIWiperSystemwiper.exe"System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis"
NiLikeilikesidebar.exe"iLike Sidebar for iTunes and Windows Media Player"
XiLLeGaLMplayer.exe"Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename"
XiLLeGaL.exeMplayer.exe"Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename"
XImagePathtaskbarmngr.exe"Added by the SDBOT-XB WORM!"
XIMEvtMgr.exeIMEvtMgr.exe"Added by the KEYLOG-AR TROJAN!"
XIMprocessIM-svr.EXE"IMNames adware"
?IndexerIndexer.exe"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
XIndexindicatorIndexindicator.exe"Added by the LAZAR TROJAN!"
UIndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}NMIndexStoreSvr.exe"Indexing service that catalogs all the media on your computer so that the files are available to all of the programs in the Nero suite of applications"
Xinetmgrinetmgr.exe"Actual Names (AdvSearch) Internet Keywords parasite"
Xinfamous.exewmplayer.exeAdded by unknown malware. WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
XInfeStopInfeStopRemover.exe"InfeStop rogue spyware remover - not recommended
UInfuzerInfuzer.exe"Infuzer - ""is a service that copies dates from the web or an email straight to your electronic calendar"". Beware of the following adware trait - ""Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them
NInk MonitorInkMonitor.exeAssociated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
XInsiderInsider.exe"Added by the AGENT.KMC TROJAN!"
XInstafinderinstafinder.exe"TopSearch.D adware"
XInstallCleanerInstallCleaner.exe"Added by the ANYHOMB.F TROJAN!"
Xinstant messengersinstantmsgtr.exe"Added by the AGOBOT-PC BACKDOOR!"
NInstant Update Centerreminder.exe"Event reminder for calendar dates
?InstUtlR.exeInstUtlR.exe"??"
UIntel File Transferxfr.exePart of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
UIntelProcNumUtilitycpunumber.exe"Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here"
XInternet AntivirusIAvir.exe"Internet Antivirus rogue security software - not recommended
XInternet Application DriverexpIorer.exe"Added by the IRCBOT-WK TROJAN!"
XInternet Exploreriexplorer.exe"Added by the LORSIS WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XInternet ExplorerIExplorer.exe"Added by the NETHIEF-O BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XInternet Explorer Agentiexplorer.exe"Added by the AGENT-BH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XInternet Explorer Updateriexplorer.exe"Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
UInternet History EraserHERASER.exe"Internet History Eraser - deletes your browsing tracks"
XInternet Security Serviceexpllorer.exe"Added by the REFROSO.AFF TROJAN!"
YInternet Sharing Serveriss_srvr.exe"Intel AnyPoint internet sharing software. Now discontinued"
NInternet SweeperSweeper.exe"Internet Sweeper - removes unnecessart left over files after browsing the internet"
UInternet TimerITIMER.exe"Shareware dial-up connection call cost calculator from Ratsoft"
XInternet_Explorer.exeInternet_Explorer.exe"Added by the BANKER-END TROJAN!"
XIntersoft Msngrintersoftmsngr.exe"Added by the AGOBOT-NW WORM!"
NIntervideo Win Cinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinCinema ManagerWinCinemaMgr.exe"WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
NIntervideo WinSchedulerWinScheduler.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
NIntervideo WinSchedulerSchSvr.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
XIntmgrIntmgr.exe"Added by the GEMA TROJAN!"
YIntuit SyncManagerIntuitSyncManager.exe"Synchronizes local Intuit Quickbooks data with online data - ""Use the Intuit Sync Manager to find the status of your latest QuickBooks data sync
XIoadqmMedia Player.exe"Added by the HAWAWI WORM!"
Niolo Utility BarSMUtilityBar.exe"Iolo System Mechanic Utility Bar - can be launched manually"
NIomegaWareCOMMANDER.EXE"Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs"
XIomega_loaderIomega_loader.exe"Added by the ANTINNY.F WORM!"
UIP Changer 2.0IPChanger.exe"IP Changer 2.0 from Plustech Inc - network configuration management tool"
NiPodderiPodder.exe"iPodder (now known as Juice) - a free utility that ""allows you to select and download audio files from anywhere on the Internet to your desktop"". This entry is present if you choose the option to add it to the startup group during installation"
UiPodManageriPodManager.exe"Apple iPod® management software for the iPod® player - updates
?iPodWatcheriPodWatcher.exe"Associated with Apple's iPod® player. Detects when the iPod® is connected?"
Uipsecdialeripsecdialer.exe"Cisco VPN Client - lets local users gain Administrator privileges on the operating system"
Xiqmanager.exeiqmanager.exe"IQ-Manager ransomware copyright scanner - not recommended
Xirc sessionsessionmgr.exe"Added by the SDBOT-ACE WORM!"
NiRiver UpdaterUpdater.exe"Updates for the iRiver Music Manager - used with their digital music players"
Xirwftpiexplorer.exe"Added by the BANKER-AN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
UIrXferIrXfer.exeMicrosoft Infrared Transfer application
Xisamini.exeisamonitor.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
Xisamonitor.exeisamonitor.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
UISBMgr.exeISBMgr.exeRelated to Sony ISB Utility
Xistinstall zazzer.exeistinstall zazzer.exeUnidentified adware downloader/installer
NiSysCleaneriSysCleaner.exe"iSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user"
YiTunes HelperiTunesHelper.exeInstalled with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
YiTunesHelperiTunesHelper.exeInstalled with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
XivHosttaskManager.exe"Added by a variant of the SPYBOT WORM! See here"
NIVPServiceMgrivpsvmgr.exe"Toshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as
UJammerjammer.exe"Jammer by Agnitum - ""Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"""
XJava Updatekeeper.exe"Added by the AGENT-DIS TROJAN!"
XJava32 Configuration Loadermsnmesgr.exe"Added by a variant of the RBOT WORM!"
XJavaTraytraymgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
NJBJiffybar.exe"Get Paid As You surf" application
XJW Managerjwmngr.exe"Added by the DELBOT-G WORM!"
UKalenderKalender.exe"UK's Kalender ""helps you organizing your dates and tasks and reminds you of upcoming events"""
NKana ReminderReminder.exe"Kana Reminder is a program which can be used to set a reminder to be triggered at a specified time"
Xkavirkavir.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
UKBD MediaCenterMEDIACTR.EXEMultimedia keyboard manager. Required if you use the multimedia keys
XKcrnerKcrner.exe"Added by the LINEAG-AIL TROJAN!"
Xkellliser.exe"Added by the AGENT.AUTP TROJAN!"
UKernel and Hardware Abstraction LayerKHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
XKernel Managerkrnlmgr.exe"Added by the JUNY.A TROJAN!"
Xkernel system daemonACTIVAT0R.exe"Added by the RANDEX.AW WORM!"
Xkernel32sys.dllIEXPLORER.exe"Added by the RBOT-MK WORM!"
XKernelCheckwinser.exe"Added by the TSPY_LMIR.SL TROJAN!"
UKHALMNPRKHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
Nkhookerkhooker.exeSiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
XKinofilmoff.NetReklamer.exe"Added by the AGENT-NGX TROJAN!"
Uklpexplorer.exe"ComSurveilSys keystroke logger/monitoring program - remove unless you installed it yourself!"
NKODAK Software UpdaterKodak Software Updater.exe"Software updater for Kodak Easyshare digital cameras"
UKryptel Component StartKicker.exe"Kryptel encryption software"
Xkvasoftkva8wr.exe"Added by the ONLINEG.ICC WORM!"
NkX Mixerkxmixer.exeProvides Mixer and Control functionality to KxProject Audio driver for EMU10k based soundcards
?Laterlater.exe"??"
ULaunch ManagerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
XLauncherlauncher.exeSpyware component related to DownloadWare and found in %ProgramFiles%\KFH
ULauncherlauncher.exe"PC Angel recovery program from SoftThinks. Located in a ""SMINST"" sub-folder of the Windows or Winnt directory"
ULauncherLauncher.exe"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
YLCDPlayerLCDPlyer.exe"Related to SuperAdBlocker"
NLDMLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
Xldriverldriver.exe"Added by the CHORUS-A TROJAN! Searchforfree browser hijacker"
ULELALinksys EasyLink Advisor.exe"System Tray access to Linksys EaasyLink Advisor - which ""is designed to set up your home network. LELA can locate computers
ULENOVO.TPFNF6RTPFNF6R.exeSupports the Fn+F6 hotkey combination on IBM/Lenovo Thinkpad notebooks which mutes the microphone
ULexmark 1200 Serieslxczbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 1200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark 2200 Serieslxbvbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 2200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark 3100 Serieslxbrbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 3100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark 4200 Serieslxbmbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 4200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark 5200 serieslxbtbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 5200 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X1100 Serieslxbkbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X1100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X5100 Serieslxbabmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X5100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X6100 Serieslxbfbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X6100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
ULexmark X74-X75lxbbbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark X74-X75 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
XLicense Managerlicense_manager.exe"MediaPipe peer-to-peer file swapping program also reported as a hijacker"
NLifeDrive ManagerLifeDriveMgr.exe"Keeps the Palm LifeDrive Manager utility in the systray. Shortcut available via Start -> Programs"
NLifeScape Media DetectorPicasaMediaDetector.exe"Media detector for Picasa's automatic photo organizer"
Xliibrliibr.exeAdded by a variant of the Storm/Nuwar/Zhelatin WORM!
NLine Speed Meter V3.0LineSpeedMeter.exe"LineSpeedMeter - detect the download and upload speed of your internet connection"
ULingvoTrainingTutor.exe"ABBYY Lingvo Electronic Dictionaries"
XLinkerLinkMaker.exe"Links adware"
XLive Messangerlivemsgr.exe"Added by the RBOT.BXX WORM!"
XLive Messangerwllmsngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XLive-Messenger.exeLive-Messenger.exe"Added by the SILLYP2P WORM!"
NLiveMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
NLiveUpdateCopyer.exe"Samsung PC Studio is a Windows-based PC program package that you can use easily to manage personal data and multimedia files by connecting a Samsung Electronics Mobile phone (GSM/GPRS/UMTS) to your PC. You can launch the update manually - see the instructions
XLMA Managerlmamanager.exe"Added by the TILEBOT-AD WORM!"
ULManagerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
ULManagerQtZpAcer.exeAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
ULmanagerLManager.exe"Acer Launch Manager - manages configuration of the multimedia keys on their range of notebooks
NLMonitorLMonitor.exeMSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information
Xlnternet ExplorerAMSNDMGR.EXE"Added by the KWBOT.R WORM! Note that the ""l"" is a lower case ""L"" and not an upper case ""I"""
Xloadexplorer.exe"Added by the LINEAGE-OZ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XloadWinExplorer.exe"Added by the VB.EIW WORM!"
Xload=msater.exe"Added by the RETSAM TROJAN!"
Xload=shambl3r.exe"Added by the REMABL WORM!"
XLoadab1explorer.exe"Added by the LINEAGE-AJ TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
Xloaderloader.exe"Homepage hijacker
XloaderWMPLAYER.EXEUnknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
XloadMecq0explorer.exe"Added by the MUMUBOY.C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
XloadMect1explorer.exe"Added by the LINEAGE-L TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
XLoadPFWwmimgr.exe"Added by the QEDS-B WORM!"
XLoadWatcherwatcher.exe"Watcher spyware"
YLogitechCommunications_Helper.exe"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
NLogitech Desktop MessengerLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
ULogitech Hardware Abstraction LayerKHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
ULogitech SetPointKHALMNPR.EXE"Part of Logitech's SetPoint control software for their range of wired and wireless keyboards and pointing devices (mice
YLogitechCommunicationsManagerCommunications_Helper.exe"Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also
NLogitechDesktopMessengerLogitechDesktopMessenger.exe"Installed with the software for Logitech products. Automatically checks for software upgrades and new products
YLogitechRegisterVideoApplicationsInstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to register video applications that can use the webcam on the first reboot after installing the software
ULogitechVideo[inspector]InstallHelper.exeEntry added when you install versions of the Logitech QuickCam webcam software and used to monitor and register video applications that can use the webcam. It isn't normally running but you could disable it and re-enable it before you install supported applications
ULogon LoaderLogonLoader.exe"Logon Loader - customize boot & login screens"
ULogon Loader RandomLogonLoader.exe"Logon Loader - customize boot & login screens"
NLotus QuickStartsmartctr.exe"Lotus central application
ULPManagerLPMGR.exe"Part of Lenovo's (was IBM) ThinkVantage Productivity Center - ""guides you to a host of information and tools to help you set up
XLSAwfdmgr.exe"Added by the MYTOB.C WORM!"
XLsaManagerlsamgr.exe"Added by the BEAGLE.DR WORM!"
Ylsburnwatcherlsburnwatcher.exe"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
YLSBWatcherlsburnwatcher.exe"HP software which helps one create labels after a music CD is burned using LightScribe discs. If you want to use LightScribe labeling
ULSPFixLSPmonitor.exe"eAcceleration Stop-Sign security software related. Previously not recommended
ULSPmonitorLSPmonitor.exe"eAcceleration Stop-Sign security software related. Previously not recommended
XLSvrLSvr.exe"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
XLTDMgrLTDMgr.exe"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
YLto ManagerDesktopLtoManager.exe"Related to Global Positioning System (GPS) found on HP iPAQ hw6500 unit and others"
?LXbbmgrLXbbmgr.exe"Lexmark printer button manager? Is it required?"
Ulxbrbmgrlxbrbmgr.exe"""Lexmark Scan & Copy Control Program"" for the Lexmark 3100 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan
XLzioMediaUpdaterLzioMediaUpdater.exe"LZIO.com adware downloader"
XM3Development_WhenUSave_InstallerM3Development_WhenUSave_Installer.exe"WhenU.Save adware"
XMacromedia 8Flash Player.exe"Added by the JAMBU-A WORM!"
UMailCleanerMAILCLEANER.EXE"MailCleaner ""protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all incoming files downloaded by Internet Explorer
XMailSkinnermailskinner.exe"MailSkinner - an application by Electronic Group
XMalware Catcher 2009MCatcher.exe"Malware Catcher 2009 rogue security software - not recommended
XMalware ScannerMalScr.exe"Malware Scanner rogue security software - not recommended
XMalwareMonitorMalwareMonitor.exe"MalwareMonitor rogue security software - not recommended"
XMalwareStopperMalwareStopper.exe"Malware Stopper rogue security software - not recommended"
XMalwareWiperMalwareWiper.exe"MalwareWipe rogue security software variant - not recommended
XMalWarriorMalWarrior.exe"MalWarrior rogue security software - not recommended
Xmanagermanager.exe"Detected by Kaspersky as the SMALL.CVT TROJAN!"
UManager Monitormonitor.exe"MindStorm AnalyzerPro from Secure Associates. ""A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"""
UMaxBlastMonitorMaxBlastMonitor.exe"Maxblast hard drive utility for Maxtor (Seagate) drives"
YMcAfee VirusScanmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
YMcAfeeVirusScanServiceAvsynmgr.exe"From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe)
NMChangerMChanger.exe"Media Changer - utility that allows you to change wallpapers
Ymcmnhdlrmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
XMcrosoftr UpdateMcrosoftr.exe"Added by a variant of the RBOT WORM!"
UMedia Card Companion MonitorMCC Monitor.exe"Monitor for Media Card Companion from ArcSoft. ""Automates the tedious processes associated with downloading and sharing files from digital cameras
XMedia Playerwmplayer.exe"Added by a variant of the AGOBOT.BM WORM! Note - this is not the valid Windows Media Player as the file is located in %System% rather than %ProgramFiles%\Windows Media Player"
XMedia servicemsnmsgxr.exe"Added by the SDBOT.TF WORM!"
Xmediamotor.exemmups.exe"Added by the AGENT-BY TROJAN!"
Xmediaplayer.exemediaplayer.exe"Added by the BANKER-EUT TROJAN! The file is located in %Windir%\Sun\Java\Deployment\logs"
Xmediaplayer.exemediaplayer.exe"Added by the BANKER.AOVZ TROJAN! The file is located in %Windir%\msagent\gf"
UMemMonstermemmnstr.exe"MemMonster - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
XMemory WatcherMemoryWatcher.exe"MemoryWatcher spyware"
UMemory+tfimemsr.exe"Memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
XMemoryMeterMemoryMeter.exe"MemoryMeter - bundled with TVMedia adware"
Xmemreader.exememreader.exe"Added by the AGOBOT-TY WORM!"
XMemScannerMemScanner.exe"Part of Enigma SpyHunter - not recommended
NMessagerStarter FreeserveStartMessager.exeFreeserve Messenger
XMessengermessenger.exe"Added by the KUTEX TROJAN!"
XMessengerWmsngr.exe"Added by a variant of the RBOT WORM!"
NMessengerMsnMsgr.exe"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → General → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 8.*"
XMessengermsnmsgrr.exe"Added by the RBOT-GYK WORM!"
NMessenger (Yahoo!)YahooMessenger.exe"System Tray access to the Yahoo! Messenger instant messenger"
XMessenger Protocolnetsender.exe"Added by the SDBOT-ACC WORM!"
XmessengerskinnerMessengerSkinner.exe"Messenger Skinner malware - uses a rootkit to hide executable files"
UMFP PanelMgrSSMMgr.exe"Monitors ink levels
XMicr Updatesoundblaster.exe"Added by the SDBOT.NP WORM!"
NMicroangelo DesktopMuamgr.exe"Using MicroAngelo On Display
NmicroAttuneDownloadatmdlusr.exe"Application Launcher
XMicroCQ0explorer.exe"Added by the LINEAGE-AK TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
XMicrosoftmsmsger.exe"Added by a variant of the SDBOT WORM!"
XMicrosofttaskbar.exe"Added by a variant of the RBOT WORM!"
XMicrosoftupdater.exe"Added by the RBOT-GHP WORM!"
XMicrosoftExplorerr.exe"Added by the IRCBOT-WG TROJAN!"
XMicrosoftwplayer.exe"Added by the IRCBOT-ABP TROJAN!"
XMicrosoftExplorer.exe"Added by a variant of the RBOT WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoftntsvr.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Automatic UpdaterExplorer.exe"Added by the RBOT-SG WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoft Buffer Appmsbuffer.exe"Added by the SLINBOT.NQ BACKDOOR!"
XMicrosoft Corp SQL Certificatessqlcer.exe"Added by the ZYBOT-C WORM!"
XMicrosoft Corporaticn SQL Handlersqlhandler.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Debug Servicedbgbgr.exe"Added by a variant of the RBOT WORM!"
UMicrosoft Default ManagerDefMgr.exe"Part of MSN Toolbar from version 4.* onwards (renamed ""Bing Bar"" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing"
XMicrosoft DirectXrasmngr.exe"Added by a variant of the RBOT WORM!"
XMicrosoft dll Host Servicewkssr.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft DLL Managerdllmgr.exe"Added by the SDBOT-KJ WORM!"
XMicrosoft DLL Monitordllmonitor.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft Explorerexplorer.exe"Added by the POEBOT-LY WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoft FixUppevblbvr.exe"Added by the RBOT.DWK WORM!"
XMicrosoft Gamesgamemanager.exe"Added by the SPYBOT.AHQ WORM!"
XMicrosoft Help SVCmsnmngr.exe"Added by the SDBOT-PQ WORM!"
XMicrosoft Inc.iexplorer.exe"Added by the LOVGATE.E WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMicrosoft Inc.iexplorer.exe..."Added by the LOVGATE.AO WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMicrosoft Internetexpl0rer.exe"Added by a variant of the SPYBOT WORM!"
XMicrosoft Internet Expiiexplorer.exe"Added by the RBOT-KX WORM!"
XMicrosoft Internet Exploreriexplorer.exe"Added by the SDBOT-XN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMicrosoft Internet Firewall Updateupdater.exe"Added by a variant of the IRCBOT TROJAN!"
UMicrosoft Location FinderLocationFinder.exe"Microsoft Location Finder ""is a client-side application that turns a regular WiFi enabled laptop
XMicrosoft machinearcpack.scr.exe"Added by the RBOT.ADF BACKDOOR!"
XMicrosoft Managermsmanager.exe"Added by the MYTOB.LF WORM!"
XMicrosoft media serviceswinmplayer.exe"Added by the RBOT.ZO WORM!"
XMicrosoft Movie MakerMmaker.exe"Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program"
XMicrosoft MSN 7 Servicesmsnmsger.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosoft MSN Messengermsnmnsgr.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft OfficeMSMSGR.exe"Added by the GAOBOT.BB WORM!"
XMicrosoft Officenxcxtpr.exe"Added by the RBOT-YG WORM!"
XMicrosoft Officemsmsgr.exe"Added by the GAOBOT.BB WORM!"
XMicrosoft QMGRmsnqmgr.exe"Added by the IRCBOT-S TROJAN!"
XMicrosoft Router Managerrouter.exe"Added by a variant of the IRCBOT TROJAN!"
XMicrosoft sddcE Contoltaskmnegr.exe"Added by the RBOT-AUM WORM!"
XMicrosoft Security Monitor Processkar.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoft Security Monitor Processlindicracker.exe"Added by the BIFROSE.GR BACKDOOR!"
XMicrosoft startupwmpIayer.exeAdded by the IRCBOT.ACI TROJAN!
XMicrosoft Svchost local servicesmsnserver.exe"Added by the RBOT-GPM WORM!"
XMicrosoft Syn ManagerManager.exe"Added by the SDBOT.BEF WORM!"
XMicrosoft Synchronization Manager___synmgr.exe"Added by the MASLAN.A or MASLAN.C WORMS!"
XMicrosoft Synchronization Managerexplorer.exe"Added by the SDBOT-AEA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoft System CheckupKeymgr.exe"Added by the DONK.M WORM!"
XMicrosoft System Checkupntsysmgr.exe"Added by the DONK.S WORM!"
XMicrosoft System Checkuplibsysmgr.exe"Added by the SDBOT-CAF WORM!"
XMicrosoft System Checkupsysmgr.exe"Added by the SDBOT-OO TROJAN!"
XMicrosoft System Checkupwnetmgr.exe"Added by the DONK.Q WORM!"
XMicrosoft System Firewall 2006.2msmsgr.exe"Added by a variant of the SDBOT WORM!"
XMicrosoft System Firewall 2006.2msnmsgr.exe"Added by a variant of the SDBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMicrosoft System Servicesmsnmgsr.exe"Added by the KELVIR.K WORM!"
XMicrosoft System Servicesmsmsgr.exe"Added by the RBOT-ZH WORM!"
XMicrosoft Task Messenger Configtaskmgsr.exe"Added by the SDBOT-JK WORM!"
XMicrosoft Time Managerdveldr.exe"Added by the RBOT-HQ WORM!"
XMicrosoft Updatewssvr.exe"Added by the RBOT-OD WORM!"
XMicrosoft UpdateMsnmsngr.exe"Added by the RBOT.BQS WORM!"
XMicrosoft Updatewinupdater.exe"Added by the RBOT.BIN WORM!"
XMicrosoft Updatemixer.exe"Added by the RBOT-AIR WORM!"
XMicrosoft Updateexplorer.exe"Added by the RBOT.AEU BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoft Updatewutr.exe"Added by the SPYBOT.AAR WORM!"
XMicrosoft Update 32explorer.exe"Added by the RBOT-ARF WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMicrosoft Update 32om4r.exe"Added by the RBOT-AQP WORM!"
XMicrosoft Update 32taskMangr.exe"Added by the RBOT.AIE BACKDOOR!"
XMicrosoft Update Machineexpl0rer.exe"Added by the SDBOT.OK WORM!"
XMicrosoft Update Machinewinmgr.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Update MachineTMEMSER.EXE"Added by the RBOT-NQ WORM!"
XMicrosoft Update Machinewinmngr.exe"Added by the RBOT.GKQ BACKDOOR!"
XMicrosoft Update Machinewuamgdr.exe"Added by the RBOT-IO BACKDOOR!"
XMicrosoft Updaterstskmgr.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Updateswkssvr.exe"Added by the RBOT.R WORM!"
XMicrosoft Updates 2 USBwgafixer.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Updates 5 USBsp3fixer.exe"Added by the RBOT-ADS WORM!"
XMicrosoft Updatingsyswr.exe"Added by a variant of the RBOT WORM!"
XMicrosoft USB Windows2 Driverusbautotuner.exe"Added by the SILLYFDC.BCL WORM!"
XMicrosoft Video Controlstskmsgr.exe"Added by a variant of the SPYBOT WORM!"
XMicroSoft Wind0ws Updaterwinsupdater.exe"Added by a variant of the RBOT WORM!"
XMicroSoft Window Updaterwinsupdater.exe"Added by the RBOT-ZZ WORM!"
XMicrosoft Windowsexplorar.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Windows DHCP___r.exe"Added by the MASLAN.A or MASLAN.C WORMS!"
XMicrosoft Windows DLL Services Configurationpoker.exe"Added by the SDBOT-ZY WORM!"
XMicrosoft Windows DVRwindvr.exe"Added by the RBOT-AXD WORM!"
XMicrosoft Windows Expl0rerexpl0rer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoft Windows Exploreriexplorer.exe"Added by a variant of the RBOT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMicrosoft Windows Loaderwloader.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XMicrosoft Windows Media Playermediaplayer.exe"Added by a variant of the RBOT WORM!"
XMicrosoft Windows Securetywurguar.exe"Added by the RBOT-KY WORM!"
XMicrosoft Windows Securityspvsper.exe"Added by a variant of the SDBOT WORM!"
UMicrosoft Windows SidebarSidebar.exe"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
XMicrosoft Windows Updatemsnmessenger.exe"Added by the SDBOT.AJ WORM!"
XMicrosoft Windows UpdateMSNMSGR.EXE"Added by the SDBOT-WM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMicrosoft Windows XP/2K Explorerwinexplorer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoft WinRaRwinrar.exe"Added by the RBOT-AEC WORM!"
XMicrosoft winsupdaterWINSUPDATER.EXE"Added by the SPYBOTER.FB BACKDOOR!"
XMicrosoft WordBootSector.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
XMicrosoft(R) System Managersysmgr.exe"Added by the AGENT.QTR TROJAN!"
YMicrosoftAntiSpywareCleanergcASCleaner.exe"Microsoft Antipsyware - now superseded by Microsoft's Windows Defender"
XMicrosoftCorpflashsplayer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoftCorptraymgr.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosoftf DDEs ControlFEnR.exe"Added by the RBOT-AIM WORM!"
XMicrosoftNAPCflashsplayer.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMicrosoftNAPCtraymgr.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMicrosofts Help Servicesmsnmngr.exe"Added by the SDBOT-PJ WORM!"
XMicrosofts Updatezcmsssr.exe"Added by an unidentified VIRUS
XMicrosoftUpdatesyshelper.exe"Added by the WOOTBOT.AC WORM!"
XMicrosoftUpdateRBuilder.exe"Added by the DLOADR-BMV TROJAN!"
UMicrosoft® Windows® Operating SystemSidebar.exe"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
UMicrotek Scanner FinderScannerFinder.exeMonitors whether a scanner is present. Provided with Microtek scanners
XMicrsoft Drivermsdriver.exe"Added by the SDBOT-XD WORM!"
XMicsoft-Published-Softwareexplrer.exe"Added by the RBOT-GFL WORM!"
UMilShieldSlaveShieldWorker.exe"Mil Shield from Mil Incorporated. It protects your privacy by removing all tracks from your online or offline computer activities"
XMincerMincer.exe"Added by the MINCEME-A VIRUS!"
UMiniReminderMiniReminder.exe"""MiniReminder is a small
XMiniServer.exeMiniServer.exe"Added by the LITTLEW-E TROJAN!"
XMirsoft sdcEtaskmegr.exe"Added by the RBOT-AWY WORM!"
XMiscrosoft Windows ExplorerIEEXPLORER.exeReported as the SDBOT.YX WORM!
NMixerMixer.exeC-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
UML1HelperStartUpML1Helper.exe"ScreenScenes ""Midnight Lake"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
XMMB2explorer.exeAdded by an unidentified WORM or TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
Xmmcndmgrmmcndmgr.exe"Added by an unidentified VIRUS
XMmessengermessenger.exe"Added by the AGOBOT.GM WORM!"
?mmsysrecover.exe"??"
Umm_servermm_server.exe"Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator"
NMobile Connectivity SuiteApplication Launcher.exe"System Tray access to the HTC Sync mobile phone management utility for models including the Hero
NMODmuamgr.exe"Using MicroAngelo On Display
UMODEMBTRMODEMBTR.EXE"Modem Booster from inKline Global to improve ISP connections"
NMoneyAgentmnyexpr.exeMicrosoft Money
Xmonitormonitor.exe"Browser hijacker
UMonitorSD Monitor.exe"""Transfer data quickly between your memory card and your computer with SanDisk's Readers
XMonitorexplor.exe"Added by the AGOBOT-EF BACKDOOR!"
?MonitorMonitor.exe"Related to the Philips SPC610NC & PixArt PAC207 webcams (and possibly others) and Leapfrog Connect Application. What does it do and is it required?"
UMonitor Apache ServersApacheMonitor.exePart of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
UMonitor Helpermonitor.exe"MyLittleSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
UMonitorSDSDMonitor.exe"Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here"
NMotive SmartBridgeBTHelpNotifier.exe"System tray icon for help from BT Broadband
NMP3 CD ExtractorCD-Extractor.exe"""MP3 CD Extractor is an audio CD to MP3 ripper which can extract Digital Audio tracks from Audio CDs into files on the hard disk"""
XMP4 Playermp4Player.exe"MP4 Player allows you to view MP4 videos. Marked as undesirable due to the fact that it changes your homepage to a custom Google search engine
UMPowerMPower.exe"MPower from MindBeat. ""Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load"". MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
Xmprocessormprocessor.exeInstallDollars.com foistware
Xmrsvctrmrsvctr.exe"Added by a variant of the SDBOT WORM!"
NmrtMngrmrtMngr.exeMaintenance Release Task Manager for Intuit's QuickBooks or Quicken
UMRU-Blaster Schedulerscheduler.exe"Scheduler for MRU-Blaster - ""a program made to do one large task - detect and clean MRU (most recently used) lists on your computer"""
NMRU-Blaster Silent Cleanmrublaster.exe"MRU-Blaster - performs silent cleaning of MRU lists at boot"
UMRUBlasterindexcleaner.exe"MRU-Blaster related - runs once in order to delete the index.dat file in the Temporary Internet Files and/or Cookies folder"
XMS ConfigurationMSFramer.exe"Added by the RANDEX.OL WORM!"
XMS Java Service Wrapper Windows NT & XPwrapper.exe"Added by the VANEBOT-D WORM!"
XMS Paintmspainter.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMS Real PlayerRealPlyr.exe"Added by the RBOT.MR WORM!"
XMs sock for Windows NTwinser.exe"Added by a variant of the SDBOT WORM!"
Xms spool servicemsspooler.exe"Added by a variant of the RBOT WORM!"
XMs task managertskmgr.exe"Added by the SDBOT.CCD WORM!"
XMS taskbarcrssr.exe"Added by the RBOT-AGO WORM!"
XMS taskmanagertskmgr.exe"Added by the RBOT-AKA WORM!"
XMS Unix Binarymsnq3insller.exe"Added by the RBOT.GXH BACKDOOR!"
XMS Updating Utilitymsupdater.exe"Added by the RBOT-XR WORM!"
XMS Win32 Network Serviceswindriver.exe"Added by the AGOBOT.ADH WORM!"
XMS-Connectarr.exe"Adult content dialler - see here"
XMS-RunKeyarr.exeMS-Connect dialler/hijacker
XMsAudioexplorer.exe"Added by the LEGMIR-BY TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XMsBootMgr.exeMsBootMgr.exe"Added by the VERIFY TROJAN!"
XMscolourmscolour.exe"Added by the GEMA TROJAN!"
?MSCRMStartupMicrosoft.Crm.Application.Hoster.exe"Related to Microsoft Dynamics CRM integrated solutions for Financial
Xmsdefendermsdefender.exe"Identified as a variant of the PAKES.CMD TROJAN! See here for an example"
Xmsdefender.exemsdefender.exe"Added by the PAKES.ZL TROJAN!"
XMSDRVNetFilter.exe"Added by the INTERRUPDATE TROJAN!"
Xmsenngerl4m3r.exe"Added by the PROGENT-AF TROJAN!"
NMsgCenterExeRealOneMessageCenter.exe"RealNetworks RealPlayer related - disabling this application will not affect Real Player in any way"
UMSKExespamkiller.exe"McAfee Spamkiller"
UMSKServerExeMSKSrvr.exe"Part of McAfee Spamkiller"
?msmgrmsmgr.exe"??"
Xmsmsngrmsmsngr.exe"Added by the DOPBOT-B WORM!"
XMSNmsnmsgr.exe"Added by the MYTOB or MYTOB.B WORMS! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSNmsnsgr.exeAdded by an unidentified WORM or TROJAN!
XMSNwkssvr.exe"Added by the PUSHBOT.S WORM!"
XMSNFixdriver.exe"Added by the SILLYFDC.BBY WORM!"
XMSNtaskngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSNwksvr.exe"Added by the IRCBOT-XU WORM!"
XMSNkys7r.exe"Added by the AUTORUN-AR WORM!"
XMSN Auto-Updatermsnaupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMSN Boostermsnbooster.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Checkermsnchecker.exe"Added by the SDBOT-AGB WORM!"
XMSN Client Managermsnclimgr.exe"Added by the AUTORUN-FV WORM!"
XMSN CNF Managermsncnfmgr.exe"Added by the VUNDO TROJAN!"
XMSN Communication Managermsncommgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN CST Managermancstmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Explorermsnexplorer.exe"Added by the AGENT-CAX TROJAN!"
XMSN File Sharingmsnusr.exe"Added by the SLENFBOT.AM WORM!"
XMSN File Sharing!msnuser.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Funny Imagesimsngsr.exe"Added by the AGOBOT-TT WORM!"
XMSN Managermscmgr.exeUnidentified malware - causes multiple browser windows to open
XMsn Messagermsnmsgr.exe"Added by the DOWNLOADER.19456.C TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSN Messagermsnmgr.exe"Added by the IRCBOT-ACD WORM!"
XMsn MessengeIExplorer.exe"Added by the DELF-LL TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMSN messengermessenger.exeAdded by an unidentified TROJAN! Note - this is not the real MSN Messenger
XMSN MessengerReosmsngr.exe"Added by a variant of the SPYBOT WORM!"
XMSN MESSENGERmsmmsgr.exe"Added by the KELVIR.Q WORM!"
XMSN Messengermsnmsgr.exe"Added by the AGOBOT.AOQ WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMSN Messengermsnmsngr.exe"Added by a variant of the RBOT WORM!"
XMSN MessengerIExplorer.exe"Added by the BANKER-EU TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XMsn Messengermsnmsnr.exe"Added by the BANKER-GG TROJAN!"
XMsn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
NMSN MessengerMsnMsgr.exe"MSN Messenger utility (now replaced by Windows Live Messenger) - available via the Start menu. Disable by clicking on Tools → Options → General → deselect ""Automatically run Messenger when I log on to Windows"""
XMSN MESSENGER 9.0messengerr.exe"Added by a variant of the RBOT WORM!"
XMSN Messenger Service Startermsnmgsr.exe"Added by the RBOT-AOS WORM!"
XMSN Messenger Servicesmsnmgr.exe"Added by the RBOT.ADF TROJAN!"
XMSN Messenger Servicesmsnmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN Messenger User Controlsmsmsgr.exe"Added by the KELVIR.HI WORM!"
XMsn MessengersMSNMSGR.EXE"Added by the RBOT.KX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMsn Messsengerregsvr.exe"Added by the AGENT-GXM TROJAN!"
XMSN MMISSENGERmssmmspgr.exe"Added by the KELVIR.AJ WORM!"
XMSN P2P Managermsnp2pmgr.exe"Added by the SLENFBOT.YH WORM!"
XMsn Patchesmsndr.exe"Added by a variant of the SDBOT WORM!"
XMSN Routermsnrouter.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMSN RPC Managermsnrpcmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Rx Managermsnrxmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XMSN Servermsmsnserver.exe"Added by the IRCBOT.AUS BACKDOOR!"
XMSN Servicermsnservicer.exe"Added by the SLENFBOT.PQ WORM!"
XMSN Tray Monitormsnmsgr.exe"Added by the SDBOT.FKX WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%\inetsrv"
XMSN Update Clientmsnupdater.exe"Added by a variant of the IRCBOT BACKDOOR!"
XMsn Updaterwindatemanager.exe"Added by the SDBOT.TS WORM!"
Xmsn upddatemesenger.exe"Added by the RBOT-AVZ WORM!"
XMSN Usermymsnusr.exe"Added by the IRCBOT.AVD BACKDOOR!"
XMSN User Servermsnserver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XMsnarratormsnarrator.exe"Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware"
XMSNGrabberMSNgrabber.exe"Added by the ENVID.A WORM!"
Xmsnmessengermsnmessenger.exe"Added by the BANCBAN-KJ TROJAN!"
XMsnMessengerSvcmsnmsgr.exe"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
Xmsnmgnrmsnmgnr.exe"Added by the KOLAB.TC WORM!"
Xmsnmgrmsnmgr.exe"Added by the BIFROSE-K WORM!"
UMsnMonitorMsnMonitor.exe"MSN Messenger Monitor Sniffer surveillance software for the MSN instant messenger. Uninstall this software unless you put it there yourself"
Nmsnmsgrmsnmsgr.exe"Windows Live Messenger or the older MSN Messenger utility - available via the Start menu. For Windows Live Messenger
XMsnMsgrmsnmsgr.exe"Added by the ANNEW-FAM WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XMsnmsgr.exelsass.exe"Added by the DWNLDR-GWE TROJAN! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root directory (i.e. C:\ or D:\)"
Xmsnscr.exemsnscr.exe"Added by the CERTIF-P TROJAN!"
XmsnsmgrMsnMsr.exe"Added by the LOONY-N TROJAN!"
XMSOfficeCfgssvr.exePremium rate adult content dialer
Xmsoupdatermsoupdater.exe"Added by the DLOADER.GBD TROJAN!"
XMSPP System Update 64wiaadmgr.exe"Detected by Kaspersky as the RANKY.GEN TROJAN!"
Xmsqssrmsqssr.exe"Detected by Kaspersky as the DLUCA.GEN TROJAN!"
XMSRmsr.exe"Added by the AGOBOT.RT WORM!"
XMSSQL Managermssqlmgr.exe"Added by the RBOT-BWU WORM!"
Xmssurfer lptt01mssurfer.exe"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Xmssurfer ml097emssurfer.exe"RapidBlaster variant (in a ""surfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XMsupdateexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
Xmsupdatermsupdater.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
XMSupdater.exeN/A"CoolWebSearch parasite variant. Installs the Winshow.dll browser plugin"
Xmsupdater25lsasser.exe"Added by the RBOT-ATS WORM!"
Xmsvupdatermsvupdater.exe"Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example"
XMSWinlogonSynCor.exe"Added by the AGENT-FZL TROJAN!"
XMsWinVgrmsvgr.exe"Added by the MYTOB.LE WORM!"
Xmswsplvnmispoisn downloader.exeSearchBarCash adware variant
XMS_Update Checkwdfmgr.exe"Added by the AGOBOT-TB WORM!"
Nmuamgrmuamgr.exe"Using MicroAngelo On Display
XmuBlindermuBlinder.exeProgram that bypasses Microsoft Update's Genuine Windows Validation
NMusic01 ServerMusic01 Server.exe"J River Media Jukebox"
?Mustek MDC 3000Mounter.exe"Related to software for the Mustek MDC 3000 digital camera - what does it do and is it required?"
UMW1HelperStartUpMw1helper.exe"ScreenScenes ""Magic Waterfall"" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here"
UMXO Auto LoaderMXOaldr.exeMaxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
UMXOBGMXOALDR.EXEMaxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
?mxomssmenumaxmenumgr.exe"Related to Maxtor's One Touch series of external hard drives. What does it do and is it required?"
UMxRunnerMxRunner.exeEasyUninstall from Aladdin Systems (formerly by Ontrack)
UMyRegistryCleanerMyRegistryCleaner.exe"MyRegistryCleaner from PCSecurityShield - who's reputation is poor"
Xmysoftwinexplor.exe"Browser hijacker
NNaggerrunkeynagger.exePackard Bell Free Internet Signup screen
UNarratorNarrator.exeAssociated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
XNavegateiiexplorer.exe"Added by the BANCBAN-OP TROJAN!"
UNaverPCGreenNPCGreenUpgrader.exe"Related to Naver_Anti-virus Realtime Monitor From NHNCorp"
NNavLoadNAVBrowser.exeRegistration reminder for CorelDRAW 10
XNAVWatchNAVWatcher.exe"VX2.Transponder parasite updater/installer related"
NNecbarNecbar.exe"Nec Assistant; Ark's Navigator
NNero PhotoShow Media Managermssysmgr.exe"Nero rebranded version of Simple Star's PhotoShow photo editing and organizing software
XNeroLoaderNeroLoader.exe"Added by the BANCBAN-EJ TROJAN!"
UNet AcceleratorNetAccelerator.exe"Rizal NetAccelerator - ""Optimizing Dial-Up
Xnet64svhoster.exe"Added by the AGENT.JVF TROJAN!"
?NetBrowserNetBrowser.exe"Part of Best Network Security
?NetBrowser.exeNetBrowser.exe"Part of Best Network Security
UNetCruiser DialerNCDialer.exe"NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected
UNetlimiterNetlimiter.exe"Netlimiter - ""An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."""
UNetMeterNetMeter.exe"""Net Meter is a small
UNetMeterHooNetMeter.exe"""Net Meter is a powerful and easy-to-use bandwidth meter. It monitors traffic of all network connections and displays real-time graphical and numerical data transfer rates. Net Meter can display details of multiple network connections at the same time. It records all network traffic and includes extensive logging (daily
UNetOnHoldFTNOHMgr.EXE"""FaxTalk NetOnHold 1.5 works with the Modem-On-Hold capabilities found in V.92 modems to provide the ability to place an Internet connection ""on hold"" and receive incoming calls or place outgoing calls"""
UNetPanelStarter.exe"Gemius surveillance software. Uninstall this software unless you put it there yourself"
YNettGain2000WgwMngr.exe"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
YNettGain2000 VerifierNettGain2000 Verifier.exePart of the Starband satellite client that attempts to optimize your satellite connection to increase speed
NNeuroSpeech OESpeakerOEMonitor.exe"Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not"
UNexusServerPNXSERVR.exe"Related to ProCoder 2.0 from Canopus. ""ProCoder 2.0 software combines speed and flexibility into a streamlined video conversion tool for professionals. Featuring
NNGServerngserver.exeSymantec/Norton Ghost Console service
UnHancernHancer.exe"System Tray access to nHancer which is an advanced control panel and profile editor for NVIDIA graphic cards - offering enhanced features above those available via the standard NVIDIA control panel such as additional Anti-Aliasing and Anisotropic Filtering modes"
XNI.UWA6P_0001_N56M1001WinAntiVirusPro2006Installer.exe"Installer for the WinAntiVirus Pro 2006 rogue security software"
XNI.UWAS5LP_0001_0811UWAS5LP_0001_0811NetInstaller.exe"Installer for the WinAntiSpyware 2005 rogue spyware remover - not recommended
XNI.UWAS6_0001_N68M2301UWAS6_0001_N68M2301NetInstaller.exe"Installer for the WinAntiSpyware 2006 rogue spyware remover - not recommended
XNI.UWFX5UWFX5NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX5LP_0001_0614UWFX5LP_0001_0614NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX5LP_0001_0715UWFX5LP_0001_0715NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX5LP_0001_0802UWFX5LP_0001_0802NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX5LP_0001_0803UWFX5LP_0001_0803NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX5TUWFX5TNetInstaller.exe"Added by the DOWNLDR-BO TROJAN!"
XNI.UWFX5V_0001_0802UWFX5V_0001_0802NetInstaller.exe"WinFixer 2005 web installer - ""foistware""
XNI.UWFX6_0001_N68M2301UWFX6_0001_N68M2301NetInstaller.exe"WinFixer 2006 web installer - ""foistware""
NNikon Monitornkmonitor.exeMonitors for a Nikon CoolPix camera being connected via USB port. As soon as it detects a CoolPix camera it executes the Nikon View software to enable the user to transfer images from the camera to the PC
UNitro PDF Printer MonitorNitroPDFPrinterMonitor.exe"Printer monitor for Nitro PDF Professional from Nitro PDF
NNkbMonitor.exeNkbMonitor.exe"Part of Nikon PictureProject - image management for Nikon digital cameras"
UNMBgMonitorNMBgMonitor.exe"Associated with Nero Scout
Xnmgrnnmgr.exe"FFToolBar adware toolbar"
XNod29 Servicenodwr.exe"Added by a variant of the RBOT WORM!"
?NodeMngerNodemngr.exe"Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?"
UNokia M PlatformNokiaMServer.exe"Part of the Nokia Music music manager
YNokia PC SuiteDataLayer.exe"Part of Nokia PC Suite version 5 - which ""is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one."" Required by the Nokia status/connection monitor (NclTray.exe)"
UNokiaMServerNokiaMServer.exe"Part of the Nokia Music music manager
Xnonepmsngr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XNorton Antiviral Scannernavscnr.exe"Added by the DELBOT-K WORM!"
NNorton Navigator Loadernnloader.exe"An older Norton utility for file management under Windows 95. More information here"
XNorton Updaternavupdtr.exe"Added by the SDBOT.AXV WORM!"
XnortonsantivirusccEvtMngr.exe"Added by the HZDOOR-A TROJAN!"
Xnotepad2.exepopuper.exe"Added by the PUPER-E TROJAN!"
XNotnEber.exe"PurityScan adware"
XNPF ValueNPFMONTR.exe"Added by the RBOT-AWD WORM!"
?NPFMonitorNPFMntor.exe"Norton AntiVirus Firewall Install Monitor. What does it do and is it required?"
UNSHelperaexnsinstallhelper.exeAltiris Express Notification Server Install helper - monitors integrity of the installation
XNsvdrnsvdr.exeAdult content dialler
XNtcheckmapserver.exe"Added by the TOMPAI-B WORM!"
Xntdll.dllTrustCleaner.exe"Smitfraud variant"
Xntldrntldr.exe"Browser hijacker re-directing to search-control.com. In addition to the registry changes found by HijackThis it also creates the following system files: %System%\ntldr.exe
Xntuserntuser.exe"Added by an unidentified TROJAN! See here"
XNvCplDaemonXplorer.exe"Added by the ORBINA-A WORM!"
XNvCplScandllmanager.exe"Added by the FORBOT.R WORM!"
XNvCpTDaemonwuauqmr.exe"Added by the CULT-B WORM!"
XNVIDIA DisplayDisplayMonitor.exe"Added by the ABI.C WORM! Note - this is not a legitimate nVidia entry"
UNVIDIA System MonitorNVMonitor.exe"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
UNVMonitorNVMonitor.exe"NVIDIA System Monitor - part of NVIDIA System Tools. Utility for monitoring and logging system statistics (such as temperatures
Xnvsv32.execstr.exe"Added by a variant of the SDBOT WORM!"
Yoahstifroahstifr.exe"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
YObject Store Serverosserver.exe"Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital
?obsverobsver.exe"Part of LingoWare translating software - what does it do and is it required?"
XODSYSCNTR.EXEHotVideo dialler
NOdometerOdometer.EXEMouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available
XOeloaderOeloader.exe"Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D
UOffice Mail Alerterom_Alerter.exe"Office Mail Alerter - ""alert Office Mail users when they receive new emails"" via a System Tray icon"
XOffice MonitorsGoogleUpdater.exe"Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools"
XOffice StartupExploer.exe"Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries"
XOfficeAgentexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
XOfficeDeamonmsorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
UOKI LPR Utilityokilpr.exeOKI printer utility
XOKMasterOKMaster.exe"OKToolbar adware"
Uolesvrolesvr.exe"Salfeld Child Control - parental control software"
Xolprolpr.exe"Added by the DWNLDR-GWQ TROJAN!"
NOM2_MonitorMMonitor.exe"Olympus Master 2 - digital camera management tools"
NOM_MonitorMonitor.exe"Olympus Master 1 - digital camera management tools"
NOne Touch MonitorOneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
NOneTouchMonitorOneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
NONETOU~2OneTouchMonitor.exeFor Visioneer OneTouch scanners. System tray access to the control panel for the scanner
XOnSrvrOnSrvr.exeOnWebMedia adware
XOpen Service Driversopiater.exe"Added by a variant of the RBOT WORM!"
UOpenDNS UpdateOpenDNS Updater.exe"Updater for OpenDNS which ""is a free service that works for networks of all sizes
Xopropr.exe"MediaMotor adware"
UOpSchedulerOpScheduler.exe"Part of Nuance (was Scansoft) OmniPage Pro document conversion software"
UOptus Cable Data Monitordatamonitor.exe"Allows Optus customers to monitor their actual data usage against Optus' ""data allowance limits"""
UOptusNetUsageOptusNet Usage Meter.exe"Designed specifically for OptusNet users who wish to have their connection monitored on a frequent basis. It can also estimate when you are going to hit your usage limit
NOrangeSharkOSharkUpdater.exe"Orange Shark updater - online games for all ages"
NOrderReminderOrderReminder.exeThe HP Order Reminder utility is installed with the HP LaserJet printer software and allows you to set specific times for reminders to check the current level of toner in the print cartridge - it also contains an Order Now link to a Web page that helps you order supplies online from a reseller of your choice
XOWMngrOWMngr.exe"OnWebMedia/SearchSeekFind advertising foistware"
UPAC7302_MonitorMonitor.exe"Related to PixArt CMOS image sensors from PixArt Imaging Inc"
UPagis Schedule MonitorMonitor.exeScheduler for the Pagis scanning suite from Scansoft (now Nuance)
NPagis SchedulerMonitor.exeScheduler for the Pagis scanning suite from Scansoft (now Nuance)
NPAL Evidence EliminatorCleaner.exe"PAL Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis"
NpalmOne Registrationregister.exe"Registration reminder for Palm products"
YPanda Cleanerpavdr.exe"Panda internet security software related. Possibly the ActiveScan on-line scanner?"
YPassLockerPassLocker.exe"""PassLocker is a complete password manager helping you to manage and safely store your passwords"""
UPassword Door LoaderPDMonitor.exe"Password Door - password protection software"
UPassword Tracker DeluxePwTrkr.exe"""Password Tracker Deluxe stores passwords and usernames neatly and securely (encrypted) on your computer"""
NPasteListerplister.exe"PasteLister - clipboard extender. Start manually when required"
XPausedellweyer.exe"Added by the SDBOT.BEX WORM!"
YPAVFNSVRPavFnSvr.exe"Part of Panda Antivirus and Internet Security"
UPBKSchedulerPBKScheduler.exe"Scheduler for CyberLink PowerBackup - archiving/backup utility"
UPC Boosterpcbooster.exe"PC Booster from inKline Global - ""easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"""
NPC Pitstop Optimize ReminderReminder.exe"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
UPC Spy KeyloggerToolKeylogger.exe"PCSpyKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself!"
NPC Suite for SmartphonesApplication Launcher.exe"System Tray access to the Sony Ericsson PC Suite mobile phone management utility for some models
UPC Tools Disk SuiteaDSProcMngr.exe"Part of PC Tools Disk Suite from PC Tools - which ""is an all-in-one hard-disk management utility that integrates disk optimization
XPC-CleanerPC-Cleaner.exe"PC-Cleaner rogue security software - not recommended"
Xpccexplcrer.exe"Added by the AGENT-FW BACKDOOR!"
XPCCleanerSysCleaner.exe"PCCleaner rogue cleaning utility - not recommended
UPCDrProfilerRunProfiler.exePart of PC Doctor software installed for some machines. Disabling or enabling it is down to your preference
NPCPitstop Registration ReminderReminder.exe"Registration reminder for the Exterminate antimalware package from PC Pitstop"
XPCprotectar.exePCprotectar.exe"PCprotectar rogue security software - not recommended. A member of the AntiAID family"
XpcServerserver.exe"Ssppyy spyware"
XPcsProtectorPcsProtector.exe"PcsProtector rogue security software - not recommended
UPDAsyncSyncLauncher.exe"Laplink PDASync - PDA synchronisation utility"
?PDF Converter Registry ControllerRegistryController.exe"Part of PDF Converter Professional version 2 from Scansoft (now Nuance). what does it do and is it required?"
?PDF4 Registry ControllerRegistryController.exe"Part of PDF Converter Professional version 4 from Scansoft (now Nuance). what does it do and is it required?"
?PDF5 Registry ControllerRegistryController.exe"Part of PDF Converter Professional and PDF Create (both version 5) - from Nuance. what does it do and is it required?"
?PDF6 Registry ControllerRegistryController.exe"Part of PDF Converter Professional version 6 from Nuance. what does it do and is it required?"
Updp Serverctpdpsrvr.exeIncluded and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network
UPDUiP6000DTskbrPDUiP6000DTskbr.exe"Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows ""your computer to access the memory card reader feature of your printer"""
?PeachtreePrefetcherPeachtreePrefetcher.exe"Related to Peachtree accounting software by Sage Software. What does it do and is it required?"
?PeachtreePrefetcher.exePeachtreePrefetcher.exe"Related to Peachtree accounting software by Sage Software. What does it do and is it required?"
XPerfect Defender 2009pdfndr.exe"Perfect Defender 2009 rogue security software - not recommended
XPermissionResearchprmrsr.exe"Marketscore/RelevantKnowledge adware"
XPersonal AntivirusPerAvir.exe"Personal Antivirus rogue security software - not recommended
XPersonal Defender 2009pdefendr.exe"Personal Defender 2009 rogue security software - not recommended
Xpersonalprotectorpersonalprotector.exe"Personal Protector rogue security software - not recommended
UPervasive.SQL Workgroup EngineW3dbsmgr.exeDatabase Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup
Xpestsweeperpestsweeper.exe"PestSweeper rogue security software - not recommended
XPgMonitrPgMonitr.exe"Delfin Promulgate adware variant"
NPhilipsDMDeviceManager.exeDevice manager for Philips portable media players such as the GoGear
UPhone Connection Monitoraudevicemgr.exe"Connection monitor part of the Sony Ericsson PC Suite mobile phone management utility for some models
UPhotoManagerPhotoManager.exe"Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device"
NPhotoShow Deluxe Media Managermssysmgr.exe"Simple Star PhotoShow Deluxe photo editing and organizing software
NPicasa Media DetectorPicasaMediaDetector.exe"Media detector for Picasa's automatic photo organizer"
NPICPRTRPICPRTR.EXEProgram for viewing and measuring a variety of 3D CAD data formats
Xpicsvrpicsvr.exe"Delfin Promulgate adware"
NPicture Motion Browser Media Check ToolSPUVolumeWatcher.exe"Part of the Sony Picture Uility software supplied with Sony camera/camcorder products. Automatically invokes an import process if the camera/camcorder is connected and has media on it"
Xpicviewmsnmsgr.exe"Added by the BANLOA-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %Windir%"
NPingerpinger.exe"Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any
NPitFrame ModuleReminder.exe"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
XPixelsvrPixelsvr.exe"Added by the GEMA TROJAN!"
UPlainSight Desktop CalendarCalendar.exe"PlainSight Desktop Calendar by Desksware - ""It can display Microsoft® Outlook® data
NPluckSvrPluckUpdater.exe"Pluck Toolbar updater"
?PMHandlerPMHandler.exe"Related to IBM/Lenovo Thinkpad notebooks - possibly related to power management features? What does it do and is it required?"
Xpmrpmr.exe"PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here"
Xpmsngr.exepmsngr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XPoints Managerpoints manager.exe"Altnet TopSearch adware"
XPoliciesserver.exe"Added by the SPYRAT WORM!"
XPoliciesserver.exe"Added by the AGENT-NLT TROJAN!"
Xpool managerpopsvr.exe"Added by the AGENT-S BACKDOOR!"
XPOP Managerpopmgr.exe"Added by the BCKDR-PYV BACKDOOR!"
UPOP PeeperPOPPeeper.exe"POP_Peeper from Mortal Universe Software Entertainment ""is an email notifier that runs in your Windows task bar and alerts you when you have new email on your POP3
UPop-Up SmasherPopupSmasher.exe"Pop-Up Smasher - pop-up killer"
XPopeSvrPopeSvr.exe"Added by the LEGMIR-AJ TROJAN!"
UPopup Ad FilterPopFilter.exe"Popup Ad Filter - pop-up killer"
XPopup Blocker SystemPopUpBlocker.exe"Added by a variant of the RBOT WORM!"
UPopUp Buster+popupbuster.exePopUp Buster - free Pop-up blocker
UPopup TerminatorGLADManager.exe"Popup Terminator - pop-up killer"
UPopupEliminatorPopup Eliminator.exe"Popup Eliminator - pop-up killer"
UPopUpKillerPopUpKiller.exe"PopUpKiller - pop-up killer"
UPopUpWasherPopUpWasher.exe"PopUpWasher pop-up killer"
NPowerArchiver TrayPASTARTER.EXE"System Tray access to PowerArchiver from ConeXware
NPowerBarPowerbar.exe"Part of Cyberlink's PowerDVD software. Not sure what exactly it does
UPowerPanel Personal Edition User Interactionpppeuser.exe"CyberPower PowerPanel Personal Edition UPS Monitoring & Control Software - ""is included with CyberPower's products. This exclusive software allows control and monitoring of your UPS to provide protection for your computer system
NPowerReg SchedulerPowerReg Scheduler.exe"PowerREGISTER from Leadertech. Registration reminder as used by Iomega
?PPSchedulerPPScheduler.exe"Part of Nuance (ScanSoft) PaperPort - ""scan
UPPUpdateppupdater.exe"PPUpdater - updater that used to be part of PestPatrol before CA's acquisition"
Xpqhelperpqhelper.exe"Searchcentrix hijacker"
XPrdMgr.exePrdMgr.exe"Added by a variant of the IRCBOT BACKDOOR!"
Xprecpop2starter.exe"PrecisionPop adware"
XPremeternrpr.exe"NetRatings Premeter spyware"
?PrimaLauncherLauncher.exe"Associated with PrimaScan scanners. Is it required?"
XPrint Driver Helper Servicecrsrr.exe"Added by the AGENT-BC TROJAN!"
Xprint sharing[path] hidden32.exe [path] explorer.exe"Added by the ZCREW.B BACKDOOR! Note - the legitimate Windows Explorer (explorer.exe) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
XprinterSpyAssaultScanner.exe"SpyAssault spyware remover - not recommended
Xprinterprinter.exe"WinIFixer rogue security software - not recommended
Xprintersysprinter.exe"Added by the SMALL.ZY TROJAN!"
XPrinter Monitorwebprinter.exe"Added by the IRCBOT-Z TROJAN!"
XPrinter Spoolupdater.exe"Added by a variant of the RBOT WORM!"
XPrinter Spoolerspooler.exe"Added by the DELF-JJ TROJAN!"
UPRISMSVRPRISMSVR.EXEConfiguration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
UPRISMSVR.EXEPRISMSVR.EXEConfiguration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter
NPrivacy Eraser ProPrivacyEraser.exe"Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities"
XPrivacy GuarantorPrivacyGuarantor.exe"Privacy Guarantor rogue privacy program - not recommended
XPrivacy ProtectorPrivacy Protector.exe"PrivacyProtector rogue privacy tool - not recommended
XPrivacy WatcherPrivacy Watcher.exe"Privacy Watcher rogue privacy program - not recommended
XPrizeSurferprizesurfer.exe"""PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!"" Stealth installed malware"
UProcessGovernorprocessgovernor.exe"Core engine for Process Lasso from Bitsum Technologies - ""a state-of-the-art
UProcessSupervisorGUIProcessSupervisor.exe"Graphical user interface (GUI) for Process Lasso from Bitsum Technologies - ""a state-of-the-art
NProfilerProfiler.exe"Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs"
UProgressive TouchSynTPLpr.exe"Synaptics TouchPad driver helper - included with drivers for Synaptics based TouchPads
Nprojselectorprojselector.exeRoxio Project Selector - can be started manually
XPromulGatePgMonitr.exe"Delfin Promulgate adware variant"
NPRONoMgr.exePRONoMgr.exeSystem Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
UPRONoMgrWiredPRONoMgr.exeIntel's Pro 100 Ethernet card manager
XProof Defender 2009pdfndr.exe"Proof Defender 2009 rogue security software - not recommended
XProSiteFinderprositefinder.exe"ProSiteFinder adware"
XProtectDefenderProtectDefender.exe"ProtectDefender rogue security software - not recommended
XProtectSoldierProtectSoldier.exe"ProtectSoldier rogue security software - not recommended
XPSCastorPSCastor.exe"Added by the PSCASTOR TROJAN!"
Xpshowerpshwr.exe"SafeSurfing adware variant"
XPSListerPSLister.exe"PurityScan C adware"
UPspContrpspcontr.exeDriver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
YPSQLLauncherlauncher.exe"IBM ThinkVantage Fingerprint Software"
UPSwitchProxySwitcher.exe"""Proxy Switcher offers full featured connection management solution"" as different internet connections often require completely different proxy server settings and it's a real pain to change them manually"
UPTHOSTTRPTHOSTTR.EXE"System Tray access to HP ProtectTools Security Manager - ""can be configured to prevent unauthorized access using Smart Cards
NPVRPVR.exe"Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card"
Ypwmgrpwmgr.exe"Part of Client Security Software for IBM\Lenovo notebooks - IBM® Client Security Password Manager ""enables you to manage your sensitive and easy-to-forget login information
XPwr32ctrPwr32ctr.exe"Added by the GEMA TROJAN!"
NQBReminderFlashQBReminder.exe"Upgrade reminder for Intuit's QuickBooks"
XQBRSRQuickBrowser.exetop-banners.com adware
Xqktierqktier.exe"Added by the VBNA.ISU WORM!"
UQoeloaderQoeloader.exe"Qurb 2.0 anti-spam tool for Outlook/Outlook Express. Required when supporting OE but not for Outlook. Shortcut available via Start -> Programs"
XQTSvcssvr.exePremium rate adult content dialler
UQtZgAcerQtZgAcer.EXEAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
UQtZpAcerQtZpAcer.exeAcer Launch Manager - on Acer laptops it supports the dedicated multimedia buttons and allows users to configure their function. If the optional WLAN module and Bluetooth radio are installed the associated buttons can set their operating state
UQuick ControlsAstrotoolbar.exeGateway Astro Screen and Sound Controls tray icon
UQuickBooks Database Server ManagerQBServerUtilityMgr.exe"Part of QuickBooks Pro/Premier from Intuit - ""QuickBooks Database Server Manager is a utility that allows you to configure the QuickBooks Server for multi-user access."" See here for further information"
XquickenWinrar.exe"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
XQuickHealCleanerQuickHealCleaner.exe"QuickHealCleaner rogue spyware remover - not recommended
YQuickLaunchErQuickLaunchEr.ExeQuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
XQuicktime Mediaplayrwnmplyr.exe"Added by a variant of the RBOT WORM!"
NQuickTime Update Completion xquicktimeupdatehelper.exe"Different numbers caused by number of launches. So if 3 updates are made separately
XQuicktimeMngrQUICKTIMEMNGR.EXE"Added by the WOOTBOT.AW WORM!"
NQuickTourQuickTour.exe"Runs the QuickTour on the first reboot after installing Logitech's SetPoint software for their range of wired and wireless keyboards and pointing devices (mice
UQwest 11n Wireless WPS ToolWpsCenter.exeWireless configuration utility for the Qwest 11N 150MB USB wireless adapter
URadioSvrRadioSvr.EXEUsed to configure wire less networks. Windows automatically detects the Wireless network and it configures the network
URainlendarRainlendar.exe"Rainlendar is a customizable calendar that displays the current month"
NRainmeterRainmeter.exe"Rainmeter is a customizable performance meter
?RAMConnectionCheckerRAMConnChecker.exe"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
?RAMGINAConnWatchRAMConnWatcher.exe"Part of Remote Access Manager (RAM) for Nortel Networks - which ""combines an intuitive
XRapdataerabseuser.exe"Added by the QQPASS-S TROJAN!"
XRaptelnetravspeger.exe"Added by the QQPASS-AA TROJAN!"
XRasCon Remote Access Service Managerrasmngr.exe"Added by the SPYBOT.EM WORM!"
XRavAvAdobeR.exe"Added by the RJUMP.D WORM!"
Xravshellexpl0rer.exe"Added by the DLOADER.MAR TROJAN!"
XRavshellIEXPLORER.EXE"Added by the AGENT.URZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
YRavTimerRavTimer.exe"RAV AntiVirus"
XRavUptperavsesur.exe"Added by the QQPASS-T TROJAN!"
XRDListenerRDListener.exe"RegDefense rogue registry cleaner - not recommended"
Xrealone_nt2003moniker.exe"Added by the SNONE.A WORM!"
XRealplayer.exeRealplayer.exe"Added by the DELF.CNV TROJAN!"
URealtek AC97 Audio - Event MonitorALCMTR.EXE"Realtek Azalia Audio - Event Monitor
XRecycle Bin Handlerrecycler.exe"Added by the SHUCKBOT-A TROJAN!"
NRedline Taskbartaskbar.exeTaskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
URegClean Expert SchedulerRCHelper.exe"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
URegClean Expert SchedulerRCScheduler.exe"""Registry Clean Expert scans the Windows registry and finds incorrect or obsolete information in the registry. By fixing these obsolete information in Windows registry
NRegister MediaRing Talkregister.exeIf you don't want to register MediaRing and be reminded about it every bootup disable it
XRegistration Servicetoker.exe"Added by the SDBOT-BB WORM!"
XRegistry Loaderregloadr.exe"Added by the GAOBOT.AO WORM!"
XRegistry Scannerregscanr.exe"Added by a variant of the OPTIX TROJAN!"
XRegistry Servregsvr.exe"Added by the WEBMONEY-G TROJAN!"
NRegistryBoosterRegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
XRegistryDoctor2008registrydoctor.exe"RegistryDoctor2008 rogue registry cleaner - not recommended
XREGRUNdialer.exe"Adware downloader - also detected as a variant of the LOWZONES.BW or AGENT.RD TROJANS!"
XRegscanregscanr.exe"Added by the OPTIX-SE TROJAN!"
Xregsvrregsvr.exe"Added by the WEBMONEY-G TROJAN!"
XRegVerREGVER.EXE"Added by the LATINUS.16 TROJAN!"
Xreg_keyFUKULAMER.exe"Added by the BEAGLE.AH WORM!"
NReminderreminder.exeFrom MS Money. Reminds you of your bills
NReminderReminder.exe"Registration reminder for the PC Pitstop Optimize 2.0 system optimizatoon utility by CA. Located in %ProgramFiles%\PCPitstop\Optimize2"
XReminderReminder.exe"Registration reminder for the Secure Expert Cleaner rogue privacy program - see here. Located in %ProgramFiles%\SecureExpertCleaner"
XRemote Access Service Managerrasmngr.exe"Added by the AGOBOT.KU WORM!"
NRemote ControllerTVRMVCR.EXE"ProLink PlayTVpro TV tuner software"
Uremote masterremote master.exeRequired if you want your ASUS Remote control to work at all. Available via Start -> Programs
YRemote Update Monitorimonitor.exe"Sophos Antivirus Remote Update utility - provides an easy way for remote workers to keep up to date with their virus protection via a website or network connection provided by their employer"
UReplicatorPTReplicator.exe"Replicator from Karen's powertools. ""Automatically backup files
NResource Meterrsrcmtr.exeWindows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes
URetrieverSchedulerretrieverscheduler.exe"80-20 Retriever from 80-20 - ""80-20 Retriever is a powerful personal search tool that encompasses email folders
XrforceEXP1ORER.EXE"Added by the DROPPER.KN TROJAN! Note the number ""1"" in the filename rather than letter ""L"". It also drops another file named DEVICEMAP.SYS which is the ROOTKIT.O TROJAN!"
URhinoBlockerRhinoBlocker.exe"RhinoBlocker - pop-up stopper"
NRiorad Managerriomgr.exe"""Riorad Explorer is hands-down the most advanced Windows software companion for your Rio MP3 player"""
URivaTunerRivaTuner.exe"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for XP and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URivaTunerRivaTunerWrapper.exe"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URivaTuner ApplicationRivaTuner.exe"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for XP and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URivaTunerStartupDaemonRivaTuner.exe"Part of RivaTuner - a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This entry is for XP and applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URivaTunerStartupDaemonRivaTunerWrapper.exe"Part of RivaTuner - a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This entry is for Vista and loads the main application (RivaTuner.exe) to apply overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URivaTunerWrapper ApplicationRivaTunerWrapper.exe"RivaTuner is a tweaking utility for NVIDIA (and to a lesser extent AMD/ATI) chipset based graphics cards. This startup entry is for Vista and can appear twice - with registry key names of ""RivaTuner"" and ""RivaTunerStartupDaemon"" respectively. Both load the main application (RivaTuner.exe). The former minimizes it to the System Tray and is primarily required only if you want to use the ""Launcher"" or monitoring options. The latter applies overclocking changes to clocks and memory (for example) at startup and then exits. See the FAQ for more information"
URK LauncherRKLauncher.exe"RK Launcher by RaduKing - ""is a free application that will allow the user to have a visually pleasing bar at the side of the screen that is used to quickly launch shortcuts"""
XRnudll32tadxtr.exe"Added by the QQPASS-O TROJAN!"
NRoboFormWatcherRoboFormWatcher.exe"Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs"
XRouterRouter.exe"Added by the AGENT.FJN TROJAN!"
XRpcLocatorexplorer.exe"Added by the RBOT-GSA WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XRPCserv32gMSDEFR.EXE"Added by the BOBAX.AD WORM!"
URssReaderRssReader.exe"RssReader - a free RSS reader able to display any RSS and Atom news feed (XML)"
YRTMonitorRTMonitor.exe"Cheyenne (now eTrust) antivirus"
XRunManager.exe"Added by the DELF.EUN TROJAN! The file is found in %AppData%\Roaming\Adobe - see the link for more information"
XRun Msn Messengermsnmgr.exe"Added by the AGOBOT.HA WORM!"
URun StartupMonitorStartupMonitor.exe"Mike Lin's StartupMonitor
Xrun=fntldr.exe"CoolWebSearch Tapicfg parasite variant"
Xrun=RegistryReminder.exe"Added by the APSTROJAN.OB TROJAN!"
Xrun=wmplayer.exe"CoolWebSearch Smartsearch parasite variant"
URunNarratorNarrator.exeAssociated with the Narrator accessibility feature on Windows XP. It is used to convert text to speech
Xrunner1updater.exeAdded by the CRYPT.ULPM.GEN TROJAN!
XRunProgServer.exe"Added by the OPTIX.04.A TROJAN!"
Xrunreperviewer.exe"Added by the REPER.A VIRUS!"
NRxUserRxUser.exe"Part of Dell Resolution Assistant - ""a diagnostic program that allows you to contact Dell. When factory-installed by Dell
YR_serverr_server.exe"Radmin - remote admistrator server. Note - the file is located in %ProgramFiles%\Radmin"
Xr_serverr_server.exe"Added by the HACDEF-DR TROJAN! Note - do not confuse with the valid Radmin file with the same name which is located in %ProgramFiles%\Radmin. This one is located in %System%"
Xs4helpers4helper.exe"Searchcentrix hijacker"
XSafeFighterSafeFighter.exe"SafeFighter rogue security software - not recommended
XSafeStripReminderSafeStripReminder.exe"SafeStrip rogue security software - not recommended
XSafetyCenterprotector.exe"Safety Center rogue security software - not recommended
XSafetyKeeperSafetyKeeper.exe"SafetyKeeper rogue security software - not recommended
USamsung PanelMgrSSMMgr.exe"Monitors ink levels
USamsungSM PanelMgrSSMMgr.exe"Monitors ink levels
XSaveArmorSaveArmor.exe"SaveArmor rogue security software - not recommended
XSaveDefenderSaveDefender.exe"SaveDefender rogue security software - not recommended
XSaveKeeperSaveKeeper.exe"SaveKeeper rogue security software - not recommended
XSaveSoldierSaveSoldier.exe"SaveSoldier rogue security software - not recommended
XSBSpywareBomber.exe"SpywareBomber rogue spyware remover - not recommended
NSBC Yahoo! Connection ManagerConnectionManager.exeUsed to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection
NScanSoft PaperPort 7 Registration ReminderNAVBrowser.EXE"Registration reminder for PaperPort 7 from Scansoft (now Nuance)"
XScanSpywareScanner.exe"ScanSpyware rogue security software - not recommended
XScanSpyware v3.2Scanner.exe"ScanSpyware rogue security software - not recommended
XScanSpyware v3.5Scanner.exe"ScanSpyware rogue security software - not recommended
NSCardSvrscardsvr.exeRelated to SmartCard readers and sometimes uses lots of system resources
XSchedulerexpIorer.exe"Added by the TACTSLAY.A TROJAN!"
Uscheduler_monitorinit_scheduler.exe"Scheduler for ReaConverter advanced image converter"
XScheduling AgentScheduler.exe"Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect"
NSchSvrSchSvr.exe"WinScheduler is installed with Home Theater or WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
Nsclaunchersclauncher.exe"SimpleCenter digital media player/manager that supports the iPod
NScreenHunter 4.0 FreeScreenHunter.exe"""ScreenHunter 4.0 Free is a completely free screen capture software for you to easily take screenshots"""
XScrSvrScrSvr.exe"Added by the OPASERV WORM!"
Xscssrr.exeServices.exe"Added by the VB-EMX TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Xsctrlmgrsescmgr.exe"Added by a variant of the DWNLDR-GAH TROJAN!"
?SDClientMonitorsdclientmonitor.exe"Related to LANDesk Management Suite from LANDesk Software Ltd. What does it do and is it required?"
?SDJobChecktriggusr.exe"Part of CA Unicenter Software Delivery - manage software across various systems
?SDMSSplashlauncher.exe"Part of HP's Smart Desktop Management System - ""Preloaded on select business desktops
NSDPhotoBar.exeSDPhotoBar.exe"SmartDraw Photo (now FotoFinsh) - ""organize
XSDR6V_Checkudcsdr.exe"Part of the DriveCleaner rogue security software - not recommended
XSDR6_Checkudcsdr.exe"Part of the DriveCleaner rogue security software - not recommended
XSearch Bartaskbar.exe"Added by the OPANKI-F WORM!"
XSearch DefenderSearchDefender.exe"Installed by SpeedItUp without permission
Xsearchbarvnmispoisn downloader.exeSearchBarCash adware variant
XSearchEnhancementscbar.exe"SCBar foistware"
XSearchUpgraderSearchUpgrader.exeHijacker
USECRETMAKERsecretmaker.exe"Secretmaker is a combination of eight privacy-defending programs
XSecure Systemintegitor.exe"Added by the AGOBOT.ACI WORM!"
XSecureCleanerSecureCleaner.exe"SecureCleaner spyware remover - not recommended
XSecureFighterSecureFighter.exe"SecureFighter rogue security software - not recommended
XSecureKeeperSecureKeeper.exe"SecureKeeper rogue security software - not recommended
XSecureWarriorSecureWarrior.exe"SecureWarrior rogue security software - not recommended
XSecurity Antivirus Xp 1inetfor.exe"Added by the SDBOT.BAV WORM!"
USecurity ManagerSecurityManager.exe"A ComCast Internet software suite that provides a variety of features (firewall
XSecurity Server DBsecserver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XSecurityCentersecuritycenter.exe"Desktop Security 2010 rogue security software - not recommended
XSecurityFighterSecurityFighter.exe"SecurityFighter rogue security software - not recommended
XSecuritySoldierSecuritySoldier.exe"SecuritySoldier rogue security software - not recommended
XSelect serverslcsvr.exe"Added by the DLOADER-WD TROJAN!"
Xserverserver.exe"Added by the DELTAD.A WORM!"
Xserverserver.exe"Added by the SINGU-Q TROJAN!"
XSERVER.EXESERVER.EXE"Added by the BUSHTRO122 or SMOKODOOR TROJANS!"
UService Centrelauncher.exe"Management tool for the Open Networks iConnect series of products - as used by Australian ISP's such as iiNet and Hotkey"
NService Connectionsccenter.exeFor Compaq PC's. Part of Backweb
XService DriversMSNMEssenger.exe"Added by a variant of the RBOT WORM!"
NService Managersqlmangr.exe"SQL Server Service Manager - provides tray access to SQL server
XService ManagerSERVICEMGR.EXE"Added by the PASSMAIL-D VIRUS!"
XService Managerserv3manager.exe"Added by the SDBOT-AGO WORM!"
XService Monitorwinxpser.exe"Added by the RBOT-BDF WORM!"
XService Schedulerscheduler.exe"Added by the AGOBOT-PH WORM!"
Xservicelayerservicelayer.exe"Added by the RENOS.FJ TROJAN! Note - do not confuse this with the Nokia service of the same name which resides in %ProgramFiles%\Common Files\PCSuite\Services or %Program Files%\PC Connectivity Solution. This one is located in %Windir%"
XServicerservcr.exe"Added by the SDBOT.BAH TROJAN!"
XServicesiexplorer.exeAdded by an unidentified WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
XServicesiexploler.exe"Added by the RANCK-LT TROJAN!"
XServices Managersvsmanager.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XServices Manager!svmanager.exe"Added by the IRCBOT.ATZ BACKDOOR!"
XServices Managerssvcmanager.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
YSetDefaultPrintercloaker.exeUsed by HP and Compaq computers to hide the windows of programs passed as arguments to it
UShadowUser Pro EditionShadowUser.exe"""StorageCraft™ ShadowUser™ provides easy to use desktop security and protection for Windows operating systems. ShadowUser is the best way to prevent unwanted changes to PCs and laptops"""
Xshambl3r*shambl3r.exe"Added by the REMABL WORM! where * is 2 to 11"
NShcenterchcenter.exe"IMSI HiJaak - ""the easiest way to convert
XShellExplorer.exe sound_drive16.exe"Added by the GP BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""sound_drive16.exe"" file is located in %System%"
XShell"Explorer.exe msmsgs.exe"
XShellExplorer.exe svchost.exe"Added by the DOYORG BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The legitimate svchost.exe process is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%"
Xshellexplorer.exe"Added by the KAKKEYS TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XShellExplorer.exe iexplore.exe"Added by the KIPIS-U WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The legitimate Internet Explorer (iexplore.exe) is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%\Microsoft"
XShellExplorer.exe winupdate.exe"Added by the AGENT-FD TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""winupdate.exe"" file is located in %System%"
XShellExplorer.exe [path] ibm[RANDOM 5 DIGIT NUMBER].exe"Added by the ANSERIN TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files"
XShellExplorer.exe winsys32.exe"Added by the DELF.CP BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""winsys32.exe"" file is located in %Windir%"
XShellexplorer.exe msbnc.exe"Added by the AGENT-PL BACKDOOR! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""msbnc.exe"" file is located in %System%"
XShellExplorer.exe kbdsys.exe"Added by the DAPROSY WORM! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""kbdsys.exe"" file is located in %AppData%\Microsoft\Keyboard"
XShellExplorer.exe init32m.exe"Added by the DLSW-B TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""init32m.exe"" file is located in %System%"
XShellExplorer.exe smssnt.exe"Added by the AGOBOT.EE TROJAN! Note - do not delete the legitimate Windows Explorer (explorer.exe) which is located in %Windir% and can be used to launch other files. The ""smssnt.exe"" file is located in %System%"
XShell32explorer.exe"Added by the SDBOT-NF WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
NShockmachineReminderSmReminder.exe"""Shockmachine is a stand-alone application that lets users collect Macromedia Shockwave and Flash titles and play them offline"". Could be a registration reminder for the trial version"
XShockwave SupportFlashPlayer.exe"Added by the DELF-DRA WORM!"
NSi MeterSIMETER.EXE"
USidebarSidebar.exe"Windows Sidebar is a pane on the side of the Microsoft Windows Vista desktop where you can keep your gadgets organized and always available. In Windows 7 this feature is known as Desktop Gadgets and each gadget can be placed anywhere on the desktop. If the file isn't located in %ProgramFiles%\Windows Sidebar or you're using other versions of Windows it could be part of the Searchcentrix hijacker"
NSIDEBARdsidebar.exe"""Desktop Sidebar provides you with instant access to the information you most desire by grabbing data from your PC and the internet. The result is a dynamic visual display you configure and control"""
NSimple Star PhotoShow Media Managermssysmgr.exe"Simple Star PhotoShow photo editing and organizing software
NSiS KHookerkhooker.exeSiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
Usiscolorcolor.exeProbably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
NSleepManagerSleepMgr.exe"This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY
USlibe.comSliber.EXE"Sliber - freeware screen capturing & online sharing tool"
USlickRunsr.exe"""SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords)
Nslimp3SliMP3 Server.exe"Slimp3 Server - ""presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards
NSM56 Helper Win32 Utilitysm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
NSm56aclsm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
NSmart Card ServiceScardSvr.exe"For Smart Card readers. Known to cause problems
XSmartfixerSmartFixer.exe"SmartFixer rogue system error and cleaning utility - not recommended"
?SmartLauncherSmartLauncher.exe"Related to SmartLauncher from Northstar Systems Corp. What does it do and is it required?"
Xsmartprotectorsmartprotector.exe"Smart Protector rogue security software - not recommended
USmartRAMMemCleaner.exe"Memory Cleaner - monitors your system in the background and frees up memory when ever need to increase the performance of your computer. Part of IOBit Advanced Windows Care Personal/Professional"
XSmcSVRSmcSVR.exe"Added by the LEGMIR.JU TROJAN!"
Xsmgrsmgr.exeAdded by an unidentified WORM or TROJAN!
NSmserialsm56hlpr.exeHelper utility for Motorola based SM56 software modems - resides in the System Tray
NSMSI LoaderSMLoader.exe"Smith Micro HotFax - fax software"
XsmsysExplorer.exe"Added by the CLICKER-C BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in a ""Template"" subfolder"
USMSystemAnalyzerSMSystemAnalyzer.exe"Part of the Iolo System Mechanic optimization tool"
NSMToolbarSMToolbar.exeStartMake.com toolbar
XSM_IANian_monitor.exe"AdvancedCleaner rogue security software - not recommended
XSN Messengermsnmsgr.exe"Added by the RBOT-AVP WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
USnapfish Media DetectorSnapfishMediaDetector.exe"Snapfish Media Detector - ""Upload your photos to Snapfish
USnapfishMediaDetectorSnapfishMediaDetector.exe"Snapfish Media Detector - ""Upload your photos to Snapfish
?snbrsnbr.exe"??"
Xsncntrsncntr.exe"Added by the DLUCA-I TROJAN!"
XSndsaverSndsaver.exe"Added by the GEMA TROJAN!"
?SO5 Integrator Pass Onesointgr.exe"StarOffice 5. See here for more details"
?SO5 Integrator Pass Twosointgr.exe"StarOffice 5. See here for more details"
XSoftBarrierSoftBarrier.exe"SoftBarrier rogue security software - not recommended
XSoftSoldierSoftSoldier.exe"SoftSoldier rogue security software - not recommended
NSony Ericsson PC SuiteApplication Launcher.exe"System Tray access to Sony Ericsson PC Suite which ""connects your phone to your computer and expands the capabilities of your phone"". Run manually via the Start Menu (or optional desktop shortcut) before connecting the phone"
USonyPowerCfgSPMgr.exeRelated to Sony VAIO Power Management Module installed on laptops and provides additional configuration options for these devices
?SoSyncMonitorSoSyncMonitor.exe"SuperOffice related. What does it do and is it required?"
XSound Loadersndloader.exe"Added by the AGOBOT-BV WORM!"
USP2 Connection PatcherSP2ConnPatcher.exeChanges limit of concurrent TCP connections of Windows Service Pack 2
Xsp2ctrsp2ctr.exe"Added by the DLUCA-M TROJAN!"
USpam MonitorSpamMonitor.Exe"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
Uspamihilatorspamihilator.exe"Spamihilator - spam filter"
USpamMonitorSpamMonitor.Exe"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
USpamMonitor ApplicationSpamMonitor.Exe"System Tray access to Spam Monitor from PC Tools - which ""is an easy-to-use spam filter that detects and isolates unsolicited junk mail sent to your mailbox. Designed for computer users
?SPC610NC_MonitorMonitor.exe"Related to the Philips SPC610NC webcam. What does it do and is it required?"
NSpeedBitVideoAcceleratorVideoAccelerator.exe"""SpeedBit Video Accelerator makes videos from YouTube and over 150 sites stream faster and play smoother by reducing buffering problems and video interruptions or hiccups"""
USpeedMeterSpeedMeter.exeApplication measuring upload and download speed
XSpeedRunnerSpeedRunner.exeIdentified as a variant of the TrojanDownloader.Matcash malware
NSpinner Plusspinner.exe""Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed
Xspoolsv managerSpoolMgr.exe"Added by the ASSIRAL WORM!"
XspoolsvrSPOOLSVR.EXE"Added by the RAYROB.A TROJAN!"
USpy Blockerspyblocker.exe"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important
USpy ProtectorSpyProtector.exe"Included in the full version of Security Task Manager
USpyBlockerspyblocker.exe"SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important
YSpybot - Search & DestroyTeaTimer.exe"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
YSpybotSD TeaTimerTeaTimer.exe"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
XSpyBurnerSpyBurner.exe"SpyBurner rogue spyware remover - not recommended
XSpyDevastatorSpyDevastator.exe"SpyDevastator rogue security software - not recommended
XSpyFighterMonitorSpyFighter.exe"SpyFighter spyware remover - not recommended
XSpyGuarderspyguarder.exe"SpyGuarder rogue security software - not recommended
XSpyHealerSpyHealer.exe"SpyHeal rogue spyware remover - not recommended"
XSpyHunterSpyHunter.exe"Enigma SpyHunter - not recommended
XSpyinatorSpyinator.exe"Spyinator rogue spyware remover - not recommended"
USpykillerSpykiller.exe"Spyware remover - older versions are not recommended
XSpyKiller.exeSpyKiller.exe"Super Spyware Killer rogue spyware remover - not recommended"
XSpyNukerSpynuker.exe"A ""spyware removal program"" by TrekBlue
XSpyOnThis MonitorSpyOnThisMonitor.exe"SpyOnThis rogue spyware remover - not recommended"
Uspyprodetectorspydetector.exeSpyware Process Detector spyware remover
Uspyshelterantikeylogger.exe"SpyShelter - anti-keylogger protects against keylogger programs monitoring your keystrokes"
XSpyShredderSpyShredder.exe"SpyShredder rogue spyware remover
Xspysoldierspysoldier.exe"SpySoldier rogue spyware remover - not recommended
XSpySpotterSpySpotter.exe"SpySpotter rogue spyware remover - not recommended
XSpySpotter System DefenderDefender.exe"SpySpotter rogue spyware remover - not recommended
USpyStopperspystopper.exe"SpyStopper - blocks intrusive spyware
USpySweeperSpySweeper.exe"Spy Sweeper - detects and removes spyware"
XSpyTrooperSpyTrooper.exe"SpyTrooper rogue spyware remover - not recommended
YSpyware Doctorspydoctor.exe"Older version of Spyware Doctor antispyware from PC Tools"
YSpyware Doctorswdoctor.exe"Older version of Spyware Doctor antispyware from PC Tools"
USpyware Nuker InstallerSpywareNukerInstaller.exe"Spyware remover by TrekBlue. Previously not recommended but the latest version was delisted here"
NSpyware ScannerAseScanner.exe"Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU
XSpyware SlayerSpywareSlayer.Exe"Spyware Slayer spyware remover - not recommended
XSpyware StormerSpywareStormer.Exe"Spyware Stormer spyware remover - not recommended
XSpyware Striker ProSpywareStriker.exe"Ascentive Spyware Striker Pro rogue spyware remover - not recommended
XSpyware SweeperSpywareSweeper.exe"SpywareSweeper rogue spyware remover - not recommended"
USpyware VanisherFreeScanner.exe"Spyware Vanisher - spyware remover. Previously not recommended
USpyware VanisherSpywareVanisher.exe"Spyware Vanisher - spyware remover. Previously not recommended
Xspywareisolatorspywareisolator.exe"SpywareIsolator rogue spyware remover - not recommended
XSpywareLockerSpywareLocker.exe"SpywareLocker rogue security software - not recommended
XSpywareRemoverSpywareRemover.exe"SpywareRemover spyware remover - not recommended
XSpywareRemover2009SR.exe"SpywareRemover 2009 rogue spyware remover - not recommended
Xspywarescannerspywarescanner.exe"Spyware Scanner 2008 rogue security software - not recommended
XSpywareSweeperSpywareSweeper.exe"SpywareSweeper rogue spyware remover - not recommended"
XSQInstallerSQInstaller.exe"Xupiter SQWire toolbar related. Use Spybot S&D
XSQLserver.exe"Added by the PUNYA-B WORM!"
Xssgrate.exesysdoor.exe"Added by the MITGLIEDER.N TROJAN!"
Xssgrate.exewinerdir.exe"Added by the MITGLIEDER.O TROJAN!"
USSMMgrSSMMgr.exe"Monitors ink levels
Xstartisfmntr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
Xstartsbmntr.exe"Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as ""iCodecPack""
XStart Uppingtaksmgr.exe"Added by the RBOT-QK WORM!"
Xstartkeysvcmgr.exe"Added by the HIPPER-B TROJAN!"
XstartkeyRunWinRaR.exeAdded by a variant of the BIFROSE-LV TROJAN!
Xstartkeyexplorer.exe"Added by the BCKDR-MLD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xstartkeyserver.exe"Added by the BIFROSE-DB TROJAN!"
Xstartkeyantivir.exe"Added by the BIFROSE-TO TROJAN!"
UStartup Manager ScannerStartupMonitor.exe"Startup-Mechanic Startup monitor - offers boot protection of your PC from harmful trojans
YStartup ScanSensor.EXE"AntiVirus Quick Heal - scheduling agent"
UStartupMonitorStartupMonitor.exe"Mike Lin's StartupMonitor
XStatBarSTATBAR.exe"StatBar (system status bar) allows you to quickly get an overview of your system's condition (memory
Xstcloaderstcloader.exe"SecondThought adware"
Xstealth.injector.exestealth.injector.exe"Added by the THEALS.A WORM!"
?STPMGRSTPMGR.EXE"Part of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs"
NStreamload UploaderStreamMgr.exe"Uploader for MediaMax (was Streamload) - ""gives you a private and secure place to upload
XSunJavaSchedccEvtMngr.exe"Added by the SDBOT-YP WORM!"
XSunJavaUpdaterv13javaupdater.exe"Added by the ROUTROBOT WORM!"
YSunProtectionServerSunProtectionServer.exe"CounterSpy antispyware software"
YSunServerSunServer.exe"CounterSpy antispyware software"
Xsupersuper.exe"Added by the AGOBOT-QT WORM!"
USupercleanerSupercleaner.exe"Supercleaner - all in one disk cleaner for your computer"
XSupervisor.exeSupervisor.exe"Has been reported to be associated with various antitrojan software like ATS and PC Doorguard. If so it's required in Startup - any further information is welcome"
XSurfer lptt01surfer.exe"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
XSurfer ml097esurfer.exe"RapidBlaster variant (in a ""mssurfer"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
NsuSchedulerUCLauncher.exe"Scheduler for versions of ThinkVantage System Update (for software updates) found on IBM/Lenovo ThinkCentre/ThinkStation desktops and Thinkpad notebooks"
XSustemexplorer.exe"Added by an unidentified VIRUS
XSustemUpdateexplorer.exe"Added by an unidentified VIRUS
XSVA PlayerSVAplayer.exe"SVAPlayer parasite"
XSVCHOSTtaskgmr.exe"Added by the MYTOB.F or MYTOB.H WORMS!"
Xsvchost[path to explorer.exe]"Added by the UNREAL-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!"
Xsvchostrsvchostr.exeAdded by an unidentified WORM or TROJAN!
XSvconrSvconr.exe"WaveRevenue-lBann adware"
XSvhost Service Serversvhostser.exe"Added by a variant of the RBOT WORM! See here"
Xsvshostmessenger.exe"Added by the LOONY-G TROJAN!"
XSWCallerSWcaller.exe"Swporta homepage hijacker"
UswgGoogleToolbarNotifier.exe"Part of Google Toolbar (from version 4 onwards) for IE. ""Google Toolbar Notifier allows you to set Google as your default search engine and prevents your search settings from being changed without your consent. An icon in your system tray blinks if the Notifier identifies an attempt to change your default search engine. You can click the icon to get more details and allow the change"". There was a bug in earlier versions where disabling the option resulted in the entry still running at startup but this has now been resolved"
XSwiftCleanerSwiftCleanerScanner.exe"SwiftCleaner rogue cleaning utility - not recommended
USwitcherSwitcher.exe"""On a Sony laptop with built in wireless it allows the user to select which wireless services they want to run (i.e. Wireless LAN
NSxgTkBarsxgtkbar.exeYamaha SXG soundcard utility - gives quick and easy access via the system tray bar to diagnostics and configuration
XSygate Personal Firewallsyserror.exe"Added by the RBOT.UC WORM!"
XSymantec Antivirus professionalfor.exe"Added by a variant of the FORBOT WORM!"
XSymantec Antivirus professionalxplrer.exe"Added by a variant of the FORBOT WORM!"
XSyncManagermsorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
USynTPLprSynTPLpr.exe"Synaptics TouchPad driver helper - included with drivers for Synaptics based TouchPads
XSYS1explorar.exe"Added by the SILLYFDC.BDJ WORM!"
Xsyscheckiexplorer.exeAdded by the AGENT.DM TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
XSysCleanerSysCleaner.exe"SysCleaner rogue cleaning utility - not recommended
XSysCommsnmsgr.exe"Added by the BANK-AF TROJAN! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%MSN Messenger or %ProgramFiles%Windows LiveMessenger. This one is located in %Windir%\system"
Xsysconfigiexplorer.exe"Added by the CULT.C WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
Xsysfilersysfiler.exe"Added by the RETSAM TROJAN!"
XSysManagerManager.EXE"Added by the DAGGER.140 TROJAN!"
XsysMett1explorer.exe"Added by the LEGMIR-Y TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
Xsysmngr32sys64mnger.exe"Added by a variant of the RBOT WORM!"
XSysmonSystemMonitor.exe"Added by the NUJAMA-A WORM!"
XsysPersonalFirewallmsnmssgr.exe"Added by a variant of the RBOT WORM!"
XsysPersonalFirewalltskm0nitor.exe"Added by the SDBOT.APC WORM!"
XSysProtectorSysProtector.exe"SysProtector rogue security software - not recommended
XSysResTASKMANAGER.exe"Added by the ELIPTER.A or ELIPTER.B WORMS!"
XsystemExplorer.exe"Added by the GRAYBIRD BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XSystemYPager.exe"Added by the JUNTADOR.K TROJAN! Note - this is not the older version of Yahoo! Messenger which shares the same filename and is located on %ProgramFiles%\Yahoo!\Messenger"
XSystemcber.exeAdded by an unidentified TROJAN!
Xsystemmessenger.exeAdded by an unidentified WORM or TROJAN!
XSYSTEMwindmupdr.exe"Added by a variant of the RBOT WORM!"
Xsystemsvcr.exe"Added by the SPYONE TROJAN!"
XSystemXsfr.exe"Added by the CULLER-D WORM!"
XSystem 64 Driver for Gamessys64dvr.exe"Added by the SDBOT TROJAN!"
XSystem CGI Managersyscgmgr.exe"Added by an unidentified WORM or TROJAN! See here"
Xsystem checkupdater.exeUnidentified adware downloader
XSystem Download ManagerSysMgr.exe"Added by the RBOT.CIG WORM!"
XSystem driverMessenger.exe"Added by the WOOTBOT.GI WORM!"
USystem Files UpdaterSystem Files Updater.exe"System Files Updater from Flyakiteosx ""will transform the look of an ordinary Windows XP system to resemble the look of Mac OS X"""
XSystem Managersysmgr.exe"Added by the IRCBOT.AGW BACKDOOR!"
XSystem Managersysmngr.exe"Added by the IRCBOT.BAQ BACKDOOR!"
USystem Mechanic Popup BlockerPopupBlocker.exe"Popup blocker part of Iolo System Mechanic utility suite"
USystem Mechanic Popup StopperPopupstopper.exe"Popup stopper part of Iolo System Mechanic utility suite"
XSystem ProcessCSRSR.exe"Added by the AGOBOT-SQ WORM!"
XSystem Registry Managersysrgmgr.exe"Added by an unidentified WORM or TROJAN! See here"
XSystem Serviceexp0lrer.exe"Added by a variant of the RBOT WORM!"
XSystem Serviceteskmangr.exe"Added by the RBOT-AUV WORM!"
XSYSTEM service helpersvchelper.exe"Added by the MONKBD-A WORM!"
XSystem Services Monitorserver.exe"Bifrost malware"
XSystem Updatewupdmgr.exe"Added by the SOROMO-A TROJAN!"
XSystem Update Applicationmsbuffer.exe"Added by the SDBOT.AFF WORM!"
XSystem Update2explorer.exe"Added by the AUTOTROJ-C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XSystem Update2wupdmgr.exe"Added by the AUTOTROJ-C TROJAN!"
XSystem51616msnmsgesser.exe"Added by a variant of the PUSHBOT WORM! A family of worms that spread using MSN Messenger"
XSystemArmorSystemArmor.exe"SystemArmor rogue security software - not recommended
XSystemBMessengerStopper.exe"MessStopper adware"
XSystemBooster2009sbr_updater.exe"SystemBooster2009 rogue system suite - not recommended
XSystembootmsnsngr.exe"Added by a variant of the RBOT WORM!"
XSystemDataMBlocker.exe"Messenger Blocker rogue security software - not recommended"
XSystemDefenderSystemDefender.exe"SystemDefender rogue spyware remover - not recommended
XSystemFighterSystemFighter.exe"SystemFighter rogue security software - not recommended
?SystemGuardAlerterSystemGuardAlerter.exe"Part of the Iolo System Mechanic maintenance software. What does it do?"
XSystemGuardCenterSystemGuardCenter.exe"System Guard Center rogue security suite - not recommended
XSystemssescmgr.exe"Added by the DWNLDR-GAH TROJAN!"
USystemServicensserver.exe"NiceSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
XSystemTunerSystemTuner.exe"System Tuner rogue system suite - not recommended
XSystemWarriorSystemWarrior.exe"SystemWarrior rogue security software - not recommended
USystemWizard SnifferSniffer.exe"SystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC"
XsystrSYSERVER.exe"Added by the VB-DQY WORM!"
XSystrayw32explorer.exe"Added by the RBOT-AJY WORM!"
Xsys_Runtt1explorer.exe"Added by the LINEAGE-M TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %ProgramFiles%"
XSyzmy3exp1orer.exe"Added by the LINEAG-AIO TROJAN! Note the number ""1"" in the filename"
XSyztMyexpiorer.exe"Added by the LINEAG-AIN TROJAN!"
NT-DSL SpeedMgrspeedmgr.exeT-Online ISP SpeedManager - shows upload and download speed. Also checks for updates automatically
?TAcelMgrTAcelMgr.exe"TOSHIBA Acceleration Utilities related. What does it do and is it required?"
XTAKSMGNtaskmr.exe"Added by the RBOT-AHS WORM!"
NTalkingReminderTALKINGREMINDER.EXE"Talking Reminder from Software River Solutions - talking calendar reminder"
UTallyGenicom PanelMgrSSMMgr.exe"Monitors ink levels
?TangoManagerTangoManager.exe"Tango Broadband access software. Is it required?"
XTasktasker.exe"Added by the MYDOOM.R WORM!"
XTask BarTASKBAR.EXE"Added by the FRETHEM.J WORM!"
?Task BarSvrTaskBarSvr.exe"Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?"
XTask Managertaskmngr.exe"Added by the RBOT.Y WORM!"
XTask managertaskemngr.exe"Added by the RBOT-AGA WORM!"
XTask managertaskmngr.exe"Added by the RBOT-AYZ WORM!"
XTask Managertskmngr.exe"Added by the RBOT-GOU WORM!"
XTask managertaskmangr.exe"Added by the SPYBOT-CH WORM!"
NTaskbarTaskbar.exeTaskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
Xtaskdirtaskdir.exe"Added by the LAGER.AQ TROJAN!"
Xtaskmanagertaskmanager.exe"Added by the AGOBOT-TF WORM!"
Xtaskmangertaskmanger.exe"Added by a variant of the RBOT WORM!"
XTaskmgrTaskmgr.exe"System1060 homepage hi-jacker. Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1060"" sub-folder"
Xtaskmgrtaskmgr.exe"Added by the STARTPAGE.G hijacker. Note - this is NOT the Windows Task Manager file!"
Xtaskmgrexplorer.exe"Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
Xtaskmgrtaskmanager.exe"Added by the BCKDR-QHT BACKDOOR!"
XTaskMgrkeymayker.exe"Added by the LDPINCH-EP TROJAN!"
Ntaskmgr.exetaskmgr.exe"Windows Task Manager in Windows XP. If run from the Startup folder
Xtaskmgr.exepaint.exeAdded by a variant of the AGENT.AH TROJAN!
Xtaskmgr.exemirc.exeAdded by a variant of the AGENT.AH TROJAN!
Xtaskmgr.exepaintms.exeAdded by a variant of the AGENT.AH TROJAN!
Xtaskmngr lptt01taskmngr.exe"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Xtaskmngr ml097etaskmngr.exe"RapidBlaster variant (in a ""Taskmngr"" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here"
Xtaskngrtaskngr.exe"Added by the BANCOS-AWX TROJAN!"
UtbbMetertbbmeter.exe"tbbMeter - bandwidth meter developed by thinkbroadband.com ""to help you monitor your Internet usage. It allows you to see how much your computer is sending to and receiving from the Internet in real time. It also shows you how your Internet usage varies at different times of the day"""
UtcomantidialerrunT-Com Antidialer.exe"T-Com Antidialer from T-Com internet provider. It's a small antidialer utility which monitors whether you're trying to dial a new connection. It basically asks you do you want to dial the shown number or not. Protects agains dialer malware"
XTCPServerTCPServer.exe"Added by a variant of the SDBOT WORM!"
Xtcupdatertcupdater.exeTopconverting.com/180Search adware updater
YTeaTimerTeaTimer.exe"Part of the popular Spybot - Search & Destroy spyware removal tool from Safer Networking Limited. ""Resident TeaTimer is a tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options
Utgcmdhcenter.exe"Bellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers
UThe Easy Bee's HiveATCEgSvr.exe"The Easy Bee is a software that allows you to record Internet navigation sequences
XThe Spy Guard Monitorspyguard_monitor.exe"The SpyGuard rogue spyware remover - not recommended
XTheLastDefenderLastDefender.exe"The Last Defender rogue security software - not recommended
UThoosje Vista SidebarThoosje Vista Sidebar.exe"Thoosje's Vista Sidebar - sidebar and skins for microsoft Windows XP and Vista"
UThrustTSRTMTMTSR.exe"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
XTime ManagerTimeManager.exe"Added by the MYTOB-BV WORM!"
UTimemanager.exeTimemanager.exe"Time Manager will let you track billable and non-billable time by customer
XTIMERTIMER.EXE"Added by the TIMESE.AG WORM!"
UTimounterMonitorTimounterMonitor.exe"Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive"
NTiny Watcher Logon TimeWatcher.exe"Tiny Watcher detects changes to your system. It will not prevent your system from being modified or corrupted. It will only tell you that something suspicious happened. Think of it as an early CAT scan against system tumors. Better to install a tool that will detect and remove bad items"
UTivoServerTiVoServer.exe"Tivo Server - installed with the TiVo Home Media Option. It streams audio files to your television/home theater from your PC"
UTivoTransferTivoTransfer.exe"Tivo Transfer Service. TiVo Desktop is an easy-to-use application that lets you publish and share digital music
Utlntsvrtlntsvr.exe"Microsoft program associated with Telnet"
?TmmkbTmmkysvr.exe"Toshiba multi-media keyboard software - possibly including creating keyboard shortcuts?"
NTMMonitortmmonitor.exe"System Tray access and sync monitor for TotalMedia from Arcsoft - ""an all-in-one multimedia application that allows you to access and work with digital photos
UTMTMTSRTMTMTSR.exe"Thrustmaster Thrustmapper - ""t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"""
UTogglertoggler.exe"""Toggler allows you to gain control over your Caps Lock
XTok-Cirrhatus-1959sarcsv711224030r.exe"Added by the BRONTOK-R WORM!"
Ntoolbar_eula_launcherEULALauncher.exe"Related to Google Desktop"
NTortor.exe"Tor anonymous internet communication system. Shortcut available via Start -> Programs"
NToshibaPingerpinger.exe"Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any
XTotal PC DefenderTotal PC Defender.exe"Total PC Defender rogue security software - not recommended
XTotal Protect 2009pcpc_starter.exe"Total Protect 2009 rogue security software - not recommended
UTotalMedia Backup MonitoruBBMonitor.exe"ArcSoft's TotalMedia Backup - ""Backing up your precious photos
UTPHKMGRTPHKMGR.exe"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
UTPHKMGR.exeTPHKMGR.exe"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
UTPHOTKEYTPHKMGR.exe"Hotkey manager for IBM/Lenovo Thinkpad notebooks. Supports the blue ""ThinkVantage"" or ""Access IBM"" help key
UTPP Auto LoaderTppaldr.exe"Installed with DataStor's (and some other manufacturers) USB 2.0 based external DVD
?TPwrMgrTPwrMgr.exe"Found on a Toshiba laptop. Related to power management?"
Xtracesweepertracesweeper.exe"Trace Sweeper rogue privacy tool - not recommended"
UTrack4WinMonitorSTMonitor.exe"Track4Win Monitor surveillance software. Uninstall this software unless you put it there yourself"
?TrackerTracker.exe"Possibly associated with My Deluxe Invoices program"
UTray FolderTray Folder.exe"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
UTrayFolderTray Folder.exe"Tray Folder by Titlebar Software - creates a hidden folder that is only normally accessible by double-clicking on a System Tray icon that shows the current date. You can also hide files and other folders in that hidden folder. The originator's website is no longer available but you can still download it here"
NTrayServerTrayServer.exeFor monitoring tray icons
Ntray_helpertray_helper.exe"Tray Helper is an Email checker with additional tools
XTrojan Guarder Gold VersionTrojan Guarder.exe"TrojanGuarder rogue security software - not recommended"
UTrue Internet Color Iconinternetcolor.exe"Part of 3Deep® from E-Color (now superseded by 3DxWizzard™) - ""With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"""
NTrueImageMonitor.exeTrueImageMonitor.exe"Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage"
XTrust CleanerTrustCleaner.exe"Smitfraud variant"
XTrustDoctorTrustDoctor.exe"TrustDoctor rogue security software - not recommended
XTrustFighterTrustFighter.exe"TrustFighter rogue security software - not recommended
XTrustSoldierTrustSoldier.exe"TrustSoldier rogue security software - not recommended
XTrustWarriorTrustWarrior.exe"TrustWarrior rogue security software - not recommended
NTSMsgerTSMsger.exe"Epson scannner software - required for ""one-touch"" operation. Can be launched manually"
?TukatiTukatiRedistributor.exe"Tukati Digital Content Distribution. Is it required?"
UTuneUp MemOptimizermemoptimizer.exe"Part of ""TuneUp Utilities""
UTurboMemoryChargerturbomemorycharger.exe"Turbo Memory Charger - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind"
?Tweak ManagerWinManager.Exe"WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed?"
Utwistertwister.exe"Twister ""AntiTrojanVirus"""
?TypeRegCheckerTypeRegChecker.exe"Part of the Sharpdesk from Sharp Electronics. ""A desktop-based
Utypetellertypeteller.exe"TypeTeller keystroke logger/monitoring program - remove unless you installed it yourself!"
UUberIconUberIcon Manager.exe"Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders"
XUCmdfallfour.exe"Added by the SDBOT-AZA WORM!"
NUidlerUidler.exeUniloc Titlewave Browser used with some shareware
NUIWatcherUIWatcher.exe"Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2
?Ulead AutoDetectorMonitor.exe"Related to Ulead Systems Inc. programs. What does it do and is it required?"
?Ulead AutoDetector v2monitor.exe"Related to Ulead Systems Inc.. What does it do and is it required?"
UUlead Memory Card DetectorMonitor.exe"Ulead Memory Card Detector - ""Automatically starts datadownload when your card is inserted into a memory card reader"""
XUltimate CleanerUltimateCleaner.exe"Ultimate Cleaner rogue security software - not recommended
XUltimate DefenderUltimateDefender.exe"Ultimate Defender rogue security software - not recommended
XUltimate FixerUltimateFixer.exe"UltimateFixer rogue system error and cleaning utility - not recommended"
XUndefinedwinter.exe"Added by the KILLAV.LW TROJAN!"
NUniblue Registry BoosterRegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
NUniblue RegistryBooster 2RegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
NUniblue RegistryBooster 2009RegistryBooster.exe"RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will ""clean
UUniblue SpyEraserspyeraser.exe"SpyEraser from Uniblue. Spyware detection program"
UUniblueSpeedUpMyPCLauncher.exe"SpeedUpMyPC 2009 from Uniblue - which ""lets you monitor and control all your PC resources with easy
XUpdateCDUpdater.exe"""Carpe Diem"" adult premium rate dialler related"
NUpdate ManagerUpdateManager.exe"Searches for updates for the Rogers Yahoo! Browser - can be run manually"
Xupdate mon sysupdaterar.exe"Added by a variant of the RBOT WORM!"
XUpdate.exeravseuper.exe"Added by the QQPASS-P TROJAN!"
NUpdateCheckerUpdateChecker.exe"Checks for new releases available in the popular FileHippo.com repository for any software you may already have installed on your computer. Run manually when required"
XUpdateManagerupdmanager.exe"Added by the ANYHOMB.F TROJAN!"
XUpdateMgrupdmgr.exe"SouthBeachTel premium rate adult content dialer"
NupdateMgrAdobeUpdateManager.exeAutomatic updates for the Adobe Reader file viewer
Nupdatemgr.exeupdatemgr.exe"Once a month
Xupdaterwupdater.exe"KeenVal adware"
?updaterupdater.exe"??"
NUPDATE~1updatemgr.exe"Once a month
XUpdmgrupdmgr.exe"KeenVal adware"
Xupdmgrrvupdmgr.exe"KeenVal adware"
Xupdtr.exeupdtr.exe"Added by the AGENT-MXG TROJAN!"
XUSARUSAR.exe"Ultimate Spyware Adware Remover - not recommended
XUSB Device Server!usbserver.exe"Added by a variant of the IRCBOT TROJAN!"
XUSBConfigration2wmmndir.exe"Added by the AGOBOT-SV WORM!"
UUSBDetectorUSBDetector.exeUSBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware
XUser Messenger Managerusnmsgr.exe"Added by a variant of the IRCBOT TROJAN! See here"
XUserinitcologsver.exe"Added by the DROPPER.DJO TROJAN!"
XUsrrrncr.exe"PurityScan adware"
?vWMPVer.EXE"Dritek System Inc. 3D Mouse related. Is it required?"
XVBouncerVirtualBouncer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
XVbouncerDLVBouncerInner.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
XVBundleOuterDLBundleOuter.EXE"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
NVCDPlayerVCDPlayer.exe"Virtual CD drive emulator. Available via Start -> Programs"
UVCDTowerVCDTower.exe"Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive
NVegas Palms - LauncherLauncher.exe"Vegas Palms on-line cassino"
?Verizon Custom Uninstall TrackingInstallHelper.exe"Verizon related installation tracker. What does it do and is it required?"
XVideo Lan PlayerVideoLanPlayer.exe"Added by the RBOT-MY WORM!"
XVideo Managervideomgr.exe"Added by the PANDEM.C WORM!"
XVideoDriverHookvmdriver.exe"Added by the BCKDR-PSS BACKDOOR!"
NVidSvrvidsvr.exeMS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
UViewbarViewbar.exe"Agloco Viewbar is a small toolbar that rests on the bottom of your screen or browser window while you surf the Internet. The Viewbar software is what enables AGLOCO to collect the money you are earning while browsing the Internet"". Get paid for browsing but you must consent to them collecting your personal information"
NViewMgrViewMgr.exe"Viewpoint Manager - automatic updates for ViewPoint products such as ViewPoint Media Player (as bundled with AOL
UViivMonitorViivMonitor.exe"Related to Intel Media Share Software. ""Stream or download media files from your Intel® Core®2 Processor with Viiv® technology-based PC"""
XVirtual BouncerVirtualBouncer.exe"Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove
UVirtualExpanderVirtualExpander.exe"Micro Vault Virtual Expander from Sony for their range of USB memory sticks. This software will compress your data to virtually store about 3 times as much data"
UVirtuaReminderVirtuaReminder.exe"VirtuaReminder is a tool allowing the user to create reminders for such things as important appointments
XVirus Remover Profesionalvirusremover.exe"Virus Remover Profesional rogue security software - not recommended
XVirusBursterVirusBurster.exe"VirusBursters rogue security software - not recommended
XvirusbyevirusbyeUpdater.exe"VirusBye rogue security software - not recommended"
XVirusIsolator.exeVirusIsolator.exe"VirusIsolator rogue security software - not recommended
UVirusKeeperVirusKeeper.exe"VirusKeeper uses a powerful real-time threat detection engine"
XVirusLockerVirusLocker.exe"VirusLocker rogue security software - not recommended
XVirusRangerVirusRanger.exe"VirusRanger rogue security software - not recommended"
XVirus_ScannerVirus_Cleaner.exe"Added by the PANOL WORM!"
XVisualStudiomsorunner.exe"Added by a variant of the TACTSLAY TROJAN!"
XVITAL BOOT PROCESStaskmngr.exe"Added by a variant of the RBOT WORM!"
XVITAL BOOT PROCESStaskmnsgr.exe"Added by the Rbot-VY WORM!"
XVital Load ProcessSpoolsvr.exe"Added by the RBOT.AIF WORM!"
XvmsnGraberVMSNGRABER.EXE"Added by the ENVID.B WORM!"
XVMware ToolsXplorer.exe"Added by the AUTOIT.K TROJAN!"
Xvnmispoisn downloadervnmispoisn downloader.exeSearchBarCash adware variant
NVoipBusterVoipBuster.exe"VoipBuster - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
NVoipRaiderVoipRaider.exe"VoipRaider - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype"
?voowsmcrhuhdir.exe"??"
NVsEcomrEXEVSECOMR.EXEFrom McAfee VirusScan up to version 4.x. This executable is responsible for the periodic "update" prompts
YVSOCheckTaskmcmnhdlr.exe"Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically
Xvstvstkmgr.exe"Added by the AGOBOT.SK WORM!"
UVTTimerVTTimer.exeDriver file for the on-board VIA/S3G KM400/KN400 graphics which enables TV in/out communication
NvTunerStartUpvTuner.exe"vTuner - "an easy way to find and listen to radio and TV broadcasts over the Internet""
UVZAccess ManagerVZAccess Manager.exeVerizon Access manager for enterprises
UVZRemoteCommanderAvRmtCtr.exeRelated to Sony's VAIO Zone Remote Commander
XW32PluginsDownloaderXMLHTTPSelfClearing7520wiper.exe"Added by the PROXYSER-M TROJAN!"
Uwallchgr.exe wstartWallchgr.exe"WallChanger - wallpaper changer from Blue Tree Software"
XWallPapertaskimgr.exe"Added by the BANKER-GX TROJAN!"
UWallpaperChangerWallpaper.exe"A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version is 30-day trialware
NWanadoo Messenger.exeWanadoo Messenger.exeWanadoo ISP instant messenger client
UWarnerwarner.exeAlso known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
UWashAndGo - Cleanup of old Backupfileschecker.exe"WashAndGo - temp file cleaner"
UWasherwasher.exe"Window Washer from Webroot Software. Useful utility that deletes safe to remove files
UWatcherHelperWaHelper.exe"Sierra Wireless Watcher™ - wireless configuration utility"
Xwaumgrwaumgr.exe"Added by a variant of the IRCBOT TROJAN!"
YWaveFramerWaveFramer.exe"Part of SafeSpace (from Artificial Dynamics) which ""protects computers from Internet malware infection without the need for signature updates or regular maintenance"""
YWavXMgrWavXDocMgr.exe"Part of Wave Systems Corp. Embassy Trust Suite. ""Document Manager uses the hardware security provided by the TPM to provide strong protection for data. Files encrypted by Document Manager cannot be located or viewed by others"""
XWbcmgrwbcmgr.exe"Added by the SLENFBOT.AW WORM!"
XWCESMngrWCEMNGR.EXE"Added by the AGOBOT-QX WORM!"
Nwcmdmgr.exewcmdmgr.exe"Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case"
XWCPTwintsvtr.exe"PurityScan adware"
UWD Backup MonitoruBBMonitor.exe"WD Backup - customized version of ArcSoft's TotalMedia Backup for Western Digital external drives (see here)"
UWD Button ManagerWDBtnMgr.exeButton manager installed with a western digital external disk drive. Allows you to back up your system with one click
NWEATHERWEATHER.EXE"Weatherbug provides current outdoor temperature in the System Tray
NWeatherCastWeather.exeWeather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
UWebshotsLauncher.exe"Webshots - software that displays photos as your screensaver and wallpaper
UWebWasherwwasher.exe"Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs"
Uwfipsiphider.exe"ICQ (messaging/chat program) anti-bomb software. ""WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed."" For more information about ICQ bombs see here"
UWGWLocalManagerWGWLocalManager.exe"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
YWgwMngrWgwMngr.exe"Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution
Xwiascrwiascr.exe"Added by the AGENT.AM TROJAN! Note - example names include ""XviD""
XWifi Booterwifibooter.exe"Added by the IRCBOT.ATH BACKDOOR!"
XWifi Loader!wifiloader.exe"Added by the IRCBOT.XES BACKDOOR!"
XWin Patchntldr.exe"Added by the SDBOT-GS WORM!"
XWin Server Updtwinserver.exe"Added by a variant of the IMISERV TROJAN!"
XWin TaskLoadermsgmr.exe"Added by the MYTOB.L WORM!"
XWin Updatemsnmger.exe"Added by the RBOT-GDP WORM!"
XWin UpdaterWINUPDATER.EXE"Added by the RBOT.IP WORM!"
XWin32 Configurationmplayer.exe"Added by the FORBOT-BZ WORM!"
XWin32 Device LoaderWin32ldr.exe"Added by a variant of the AGOBOT/GAOBOT WORM!"
Xwin32 internet serverwinserver.exe"Added by the DERMON-D TROJAN!"
XWin32 NT Adv Servicestaskmngr.exe"Added by the RBOT-ADE WORM!"
Xwin32 security updates downloadertskmngr.exe"Added by a variant of the SDBOT WORM! See here"
XWin32 Serviceswuamngr.exe"Added by the SDBOT-N WORM!"
Xwin32 system serverwinserver.exe"Added by the DERMON-A TROJAN!"
XWin32 USB2 Driverupdatemgr.exe"Added by a variant of the FORBOT WORM!"
XWIN32DSclienttimer.exe"Eziin adware"
XWin32Host Processwebemir.exe"Added by the TURGEN -A TROJAN!"
XWIN32ioclienttimer.exe"Eziin adware"
Xwin32servdevicer.exe"Added by the CHECKOUT WORM!"
UWinacsrWinacsr.exe"AceScreenSpy keystroke logger/monitoring program - remove unless you installed it yourself!"
UWinBarWinBar.exe""WinBar is a free and compact program that lets you monitor your system and provides easy access to frequently used controls""
XWinButlerWinButler.exeIdentified as a variant of the Trojan-Dropper.Agent.DKN malware
NWinCinemaMgrWinCinemaMgr.exe"WinCinema_Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs"
UWinColorReminderWinColorReminder.exe"The Microsoft Color Control Panel Applet for Windows XP ""helps you manage Windows color settings in one place."" Part of the Pro Imaging Powertoys"
XWind OptimizerWindOptimizer.exe"Wind Optimizer rogue system optimization tool - not recommended
XWind0ws Sharingssprotecter.exe"Added by the RBOT-AHW WORM!"
Xwindefenderwindefender.exe"Added by the AGENT.BYH TROJAN!"
XWindeows NetStart Service2tesakrmger.exe"Added by the RBOT-AMY WORM!"
XWinDLL (smaprnter.exe)"rundll32.exe smaprnter.exestart"
XWinDLL (tepmlayer.exe)"rundll32.exe tepmlayer.exestart"
XWinDLL (Wseclayer.exe)"rundll32.exe Wseclayer.exestart"
XWindowfdgfds DasdLL Verifierwinupdatr.exe"Added by the AGOBOT.HZ WORM!"
XWindowsexplorer.exe"Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWINDOWSymssgr.exe"Added by the BCKDR-PS BACKDOOR! Note - deactivates the Microsoft\Internet Connection Firewall (ICF)"
XWindowstaskmngr.exe"Added by a variant of the SDBOT WORM!"
XWindowsCfreer.exe"Added by the CULLER-C WORM!"
XWindowsZser.exe"Added by the CULLER-D WORM!"
UWindows & Internet Cleaner ProWICleaner.exe"Windows & Internet Cleaner Pro - ""Powerful and easy to use internet surfing privacy protection & PC security software"""
XWindows Auto Updatewinupdater.exe"Added by the SDBOT.TF WORM!"
XWindows Automatic Updatewuamgrder.exe"Added by a variant of the RBOT WORM!"
XWindows Automatic Updatesdvldr.exe"Added by the RBOT.MF WORM!"
XWindows Automationmsdspr.exe"Added by the SOLAME.A WORM!"
XWindows Backup ConfigurationIEXPLORER.exe"Added by the GAOBOT.AZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XWindows Booter!winbooter.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Bootuptask-mngr.exe"Added by the RBOT-AWP WORM!"
XWindows ConfigZANBOR.EXE"Added by the SPYBOT-MH WORM!"
XWindows Controls Centerwinudmr.exe"Added by the LAMER.AA BACKDOOR!"
XWindows Download Managerwindlmngr.exeAdded by an unidentified TROJAN!
XWindows Driverwinxpdriver.exe"Added by the WOOTBOT.EE WORM!"
XWindows Driver!windriver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Enterprise DefenderWindowsEDefender.exe"Windows Enterprise Defender rogue security software - not recommended
XWindows ExplorerEEXPLORER.EXE"Added by a variant of the SPYBOT WORM!"
XWindows Explorerexplorer.exe"Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindows ExplorerWindows Explorer.EXE"Added by the VB-EBA WORM!"
XWindows Explorer Keyexplorer.exe"Added by the IRCBOT-YB WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindows Explorer.exeExplorer.exe"Added by the FALTER-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindows File XP Managerwfdmgr.exe"Added by the SDBOT.XD TROJAN!"
XWindows Fixintegator.exe"Added by the SDBOT.ZAB WORM!"
XWindows Hijack Protectioncomngr.exe"Added by the AGENT-FYD TROJAN!"
XWindows Hijack Protection Systemcommngr.exe"Added by a variant of the AGENT-FYD TROJAN!"
XWindows Host Booterhostbooter.exe"Added by an unidentified WORM or TROJAN! See here"
XWindows Icons Managerwicomgr.exe"Added by the RBOT-AIF WORM!"
XWindows Kernel System Servicewkssvr.exe"Added by a variant of the RANDEX.GEL WORM!"
XWindows Live Managerwinlivemgr.exe"Added by the SHEUR.EB TROJAN!"
XWindows Live Messengermsnmsgr.exe"Added by a variant of the RBOT WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
NWindows Live Messengermsnmsgr.exe"Windows Live Messenger (was MSN Messenger) utility - available via the Start menu. Disable by clicking on the ""Show menu"" icon and select Tools → Options → Sign In → deselect ""Automatically run Windows Live Messenger when I log on to Windows"". This is the Windows Defender/Vista MSConfig entry for version 14.*"
XWindows Live Messenger Addonwllivemsngr.exe"Added by a variant of the SDBOT WORM! See here"
XWindows Live Messenger!livemsngr.exe"Added by the IRCBOT.AWE BACKDOOR!"
XWindows live Supportwlmsngr.exe"Added by the RBOT-BKL WORM!"
XWindows Local ISPwinthcr.exe"Added by the SDBOT.ENZ BACKDOOR!"
XWindows Loginmsnmsgr.exe"Added by the AGOBOT-UC WORM! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XWindows LoL Layergqwdcr.exe"Added by the AGOBOT-AHS WORM!"
XWindows Media Drivermsnger.exe"Added by a variant of the RBOT WORM!"
XWindows Media Loaderwmloader.exe"Added by a variant of the GAOBOT WORM!"
XWindows Media Playerwmediaplayer.exe"Added by the AGOBOT-NQ WORM!"
XWindows Media PlayerMediaPIayer.exe"Added by the SDBOT-QO TROJAN! Note - the lower case ""l"" in ""MediapIayer"" is a capital ""i"""
XWindows Media Playerwmplayer.exe"Added by the KELVIR.G WORM or variants! Note - this is not the valid Windows Media Player as the file is located in %System% rather than %ProgramFiles%\Windows Media Player"
XWindows Media Server!wmserver.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Memory Sharingmemoryshr.exe"Added by a variant of the IRCBOT TROJAN!"
XWindows Memory Sharingmemshr.exe"Added by the IRCBOT.MC BACKDOOR!"
XWindows Messenger Live MSNwinlivemsnmessenger.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Messenger Servicewinsmsgr.exe"Added by the RBOT-VW WORM!"
XWindows modez Verifiertaskmngr.exe"Added by a variant of the RBOT WORM!"
XWindows Monitor Serviceswinmonitor.exe"Added by the RBOT-XX WORM!"
XWindows MS Update 32sucker.exe"Added by the FORBOT-GJ WORM!"
XWindows Pcwinmgr.exe"Added by the BIBOT-A WORM!"
XWindows Printing DriverWinSpooler.exe"Added by the ARCHIVARIUS series of WORMS!"
XWindows Rundll Centermsnsmgr.exe"Added by the AGENT-LLB TROJAN!"
XWindows Schedulerwmscheduler.exe"Added by a variant of the SDBOT WORM! See here"
XWindows Scheduler!scheduler.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Secure FixiPodFixer.exe"Added by the WOOTBOT.BM BACKDOOR!"
XWindows Secure Updatewinupser.exe"Added by the RBOT-GCG WORM!"
XWindows Securetywurger.exe"Added by the AGOBOT-NC BACKDOOR!"
XWindows Server!winsvr.exe"Added by the IRCBOT.AYC BACKDOOR!"
XWindows Servicer.exe"Added by a variant of the SMALL.VZ TROJAN!"
XWindows serviceiexpl0rer.exe"Added by the SDBOT.RO WORM!"
XWindows Service Agentmsnmagr.exe"Added by a variant of the SLAPER TROJAN!"
XWindows Service Agentmsngear.exe"Added by the RBOT.AHW BACKDOOR!"
XWindows Service Agentmsngerr.exe"Added by the RBOT.EOZ WORM!"
XWindows Service Agentmsnmsgr.exe"Added by the RBOT.ABIK BACKDOOR! Note - this is not the valid MSN Messenger (now Windows Live Messenger) utility which is located in either %ProgramFiles%\MSN Messenger or %ProgramFiles%\Windows Live\Messenger. This one is located in %System%"
XWindows Service Controller Agenttaksmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Service ExecServiceLayer.exe"Added by the SPYBOT-OI WORM! Note - do not confuse this with the Nokia service of the same name which resides in %ProgramFiles%\Common Files\PCSuite\Services or %Program Files%\PC Connectivity Solution. This one is located in %Windir%"
XWindows Service Managertaskmgr.exe"Detected by Kaspersky as the IAMBIGBROTHER.91 TROJAN! Note - this is not the legitimate taskmgr.exeprocess which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""fonts\svc"" sub-folder"
XWindows ServicesExplorer.exe"Added by the SDBOT-WT WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindows Services B-Runnersvcbrunner.exe"Added by the IRCBOT.BYV BACKDOOR!"
XWindows Services Jogersvcjoger.exe"Added by the RBOT.CAT WORM!"
XWindows Servserserviser.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Shelltaskgmr.exe"Added by the MYTOB.BV WORM!"
XWindows Spoolerwinsplr.exe"Added by the SHEUR.ANX TROJAN!"
XWindows spoolservr Servicespoolservr.exe"Added by the SDBOT-AAN WORM!"
XWindows SSL Secondary DriversSSL32Dr.exe"Added by the SDBOT.ASQ WORM!"
UWindows Supervisorwinspvr.exe"Windows Supervisor surveillance software. Uninstall this software unless you put it there yourself"
XWINDOWS SYSTEMdcomuser.exe"Added by the MYTOB.EO WORM!"
XWINDOWS SYSTEMbotzor.exe"Added by the ZOTOB WORM!"
XWINDOWS SYSTEMper.exe"Added by the ZOTOB.C WORM!"
XWINDOWS SYSTEMexpI0rer.exe"Added by the MYTOB-FI WORM! Note the upper case ""i"" and number ""0"" in the filename"
XWINDOWS SYSTEMWin32IMAPSVR.exe"Added by the MYTOB-FQ or MYTOB-FU WORMS!"
XWindows System Configurationnether.exe"Added by the OPANKI-AB WORM!"
XWindows System GatewaySPOOLER.EXE"Added by a variant of the RBOT WORM!"
XWindows System Managerwinsysmgr.exe"Added by the IRCBOT.BJG BACKDOOR!"
XWINDOWS SYSTEM MEMORY LOADERmemloader.exe"Added by the MYTOB-IN WORM!"
XWindows System RestorerSystemRestorer.exe"Added by the DULOAD.C WORM!"
XWindows System32explorer.exe"Added by the OPANKI-V WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is also copied to %System%"
XWindows SYSTEM32Realplayer.exe"Added by the SPYBOT.ZH WORM!"
XWindows Systemnmgstagmr.exe"Added by the MYTOB.S WORM!"
XWindows SYStryspoolsvr.exe"Added by the SDBOT.GN BACKDOOR!"
XWindows Task Managertaskgmr.exe"Added by the MYTOB.BJ WORM!"
XWindows Task Managertaskmngr.exe"Added by the RBOT-ANM WORM!"
XWindows Task Manager Emulatorkennewr.exe"Added by the SPYBOT-FA WORM!"
XWindows Task Mgr!mstasker.exe"Added by the IRCBOT.OE BACKDOOR!"
XWindows Taskmanageriexplorer.exe"Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe)"
XWindows Taskmanagertaskngr.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows Taskmanagertskmngr.exe"Added by the IRCBOT.DHR BACKDOOR!"
XWindows Taskmanagerwinpifviewer.exe"Added by the PUSHBOT.BB WORM!"
XWindows Timewinmgr.exe"Added by the RBOT-XC WORM!"
XWindows UDP Control Centerfxstaller.exe"Added by the AGENT-IEE TROJAN!"
XWindows UDP Control Centerinstaller.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows UDP Control Centerwinudpmsgr.exe"Added by the SDBOT.GAV WORM!"
XWindows UDP Control Centerwinupmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows UDP Control Centerwinudpmgr.exe"Added by the DLOADR-HQL TROJAN!"
XWindows UDP Control Centerfxsteller.exe"Added by the IRCBOT-J BACKDOOR!"
XWindows UDP Control Managerwinudpmgr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
Xwindows updateuddater.exe"Added by the LEOX TROJAN!"
Xwindows updatemsnsever.exe"Added by the RBOT-AHN WORM!"
XWindows Updatetaskmr.exe"Added by the MYTOB-GZ WORM!"
XWindows Updatewupdmgr.exe"Added by the BANCBAN-FC TROJAN and variants!"
XWindows Updateavkir.exe"Added by the RBOT-GJP WORM!"
XWindows Updatetaskngr.exe"Added by a variant of the IRCBOT BACKDOOR! See here"
XWindows Updatesmsscr.exe"Added by the BANKER-DK TROJAN!"
XWindows Updatetskmngr.exe"Added by the AGENT.ALY BACKDOOR!"
XWindows Update Auto Updatewuaumgr.exe"Added by a variant of the SPYBOT WORM!"
XWindows Update Checksyslodr.exe"Added by the SMALL.LU TROJAN!"
XWindows Update Managerwupdmngr.exe"Added by the RANDEX.BTB WORM!"
XWindows Update ManagerWindowsUpdateManager.exe"Added by a variant of the IRCBOT TROJAN!"
XWindows Updatedupdatr.exe"Added by the RBOT-AYB WORM!"
XWindows Updater Service Managerwinupdatr.exe"Added by a variant of the IRCBOT BACKDOOR!"
XWindows USB 2.0 Driverusbtskmgr.exe"Added by the RBOT-BKG WORM!"
XWindows Workstation Start Servicemslanmgr.exe"Added by a variant of the RBOT WORM!"
XWindowsKeyUpdatemaster.exe"Added by the JOSAM WORM!"
XWindowss Service Agentmssngear.exe"Added by the RBOT.KGU BACKDOOR!"
XWindowsSystem32asper.exe"Added by the AGENT-EFP TROJAN!"
XWindowsSystem32msnmssgr.exe"Added by the AGENT.ALY BACKDOOR!"
XWindowsSystem32msnmgaer.exe"Added by the AGENT.ALY BACKDOOR!"
XWindowz Update V2.0Explorer.exe"Added by the YODO WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%"
XWindowz Update V2.0updater.exe"Added by the YODO-C WORM!"
UWINDVDpatchCTHELPER.EXE"CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers
NWinDVR SchSvrSchSvr.exe"WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card
XWinFixer helperwfxcwr.exe"WinFixer web installer - ""foistware""
XWiniFighterWiniFighter.exe"WiniFighter rogue security software - not recommended
XWinIFixerWinIFixer.exe"WinIFixer rogue security software - not recommended
UWinIRXHelperWinIRXHelper.exe"MSI Media Center Deluxe software - see here"
XWinKernelWinKer.exe"Added by the MIRAB or SERVIDOR TROJANS!"
Xwinlocatorupdateupdatewinlocator.exeLocator adult content toolbar related
XWinlogonscssrr.exe"Added by the AGENT-LXB TROJAN!"
XWinlogon ShellExplorer.exe svchost.exe"Added by the KIPIS.M WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ""1032"" sub-folder"
Xwinlogon.exehelper.exe"Added by the FAKESPY-A TROJAN!"
XWINMGRtaskgmgr.exe"Added by the MYTOB.AN WORM!"
XWinmgr.exescvhost.exe"Added by the AGOBOT.AFG WORM!"
Xwinmngr.exe[path to trojan]"Added by the AGENT-ZB TROJAN!"
XWinMsgwinmsgr.exe"Added by the DLOADR-AS TROJAN!"
?Winnov RemoteWnvRsvr.Exe"Winnov Video Capture Card related. What does it do and is it required?"
Xwinnt DNS identiexplorer.exe"Added by a variant of the RBOT WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)"
NWinpowerWinpower.exe"Part of InstallAnywhere from Zero G Software
Xwinprocessor Updatewinprocessor.exe"Added by the RBOT.IO WORM!"
XWinProtserver.exe"Added by the CHUPACABRA TROJAN!"
XWinProtectorWinProtector.exe"WinProtector rogue security software - not recommended
XWinPWD Managerwpwdmgr.exe"Added by the RBOT-AUT WORM!"
Xwinrarwinrar.exe"CoolWebSearch Therealsearch parasite variant. Note - this is not the file zipping utility also known as WinRAR!"
XWinReanimatorWinReanimator.exe"WinReanimator rogue security software - not recommended
XWINRUNtaskgmr.exe"Added by the MYTOB-BX WORM!"
XWinSecured32ssmr.exe"Added by a variant of the FORBOT WORM!"
UWinService32ssmgr.exe"007 Spy Software - ""stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"""
?Winshoewuadfdqr.exe"Probably an unidentified VIRUS! Adds itself to 3 registry ""Run"" keys and prevents Task Manager being displayed. This is not the Winshoe IRC Client as the visitor did not have it installed"
XWinsock drivertcpmngr.exe"Added by the SPYBOT-CK WORM!"
Xwinsock2netsvr.exe"Added by the AGOBOT.LY WORM!"
XWinsock2 driverWUAUMQR.EXE"Added by the SPYBOT-DP WORM!"
XWinsock2 driverWWEUMQR.EXE"Added by the SPYBOT-BY WORM!"
XWinsock32driverwin32server.exe"Added by the BACKDOOR-AZV TROJAN!"
XWinsock32driverwin32server.exe"Added by the HACARMY.F TROJAN!"
Xwinsockdriveriexplor.exe"Added by the BLATIC.A WORM!"
XWinsocks2 drivermznmgr.exe"Added by a variant of the SDBOT WORM!"
XWinspoolspoolsvr.exe"Added by a variant of the SDBOT WORM!"
XWinSpyKiller</