| Status Code | Name | Command | Description |
| Y | a? | a2guard.exe | a? antitrojan |
| ? | AxFilter | Rundll32 AXFILTER.DLL, Rundll32 | ?? |
| U | AWMON | Ad-Watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| N | awhost32 | awhost32.exe | Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended |
| ? | Avxnews | ?? | ?? |
| X | Awatch | Awatch.exe | Fritz!_DSL ISP software related. What does it do and is it required?
|
| Y | avxlni | avxinit.exe | Anti-virus part of BitDefender virus scanner/firewall |
| Y | Avxlive | avxlive.exe | Bullguard or BitDefender antivirus |
| Y | avx communicator | xcommsur.exe | Anti-virus part of BitDefender virus scanner/firewall |
| U | AVWUpd32 | AVWUPD32.EXE | AntiVir updater. Useful, but can be run manually |
| ? | AVWLPSTA | AVWLPSTA.exe | PRISM Status Tray Applet - but what is it for and is it required? |
| N | Avtray | Avtray.exe | Command Antivirus tray icon |
| X | avserve3.exe | avserve3.exe | Added by the SASSER.G WORM! |
| X | avserve2.exe | avserve2.exe | Added by the SASSER.B or SASSER.C WORMS! |
| Y | AVSCHED32 | AVSched32.exe | AntiVir anti-virus from H+BDEV |
| X | avserve.exe | avserve.exe | Added by the SASSER WORM! |
| X | Avril Lavigne - Muse | [random filename] | Added by the AVRIL-A WORM! |
| X | Avpr | avpr.exe | Added by the MYDOOM.AF WORM!
|
| Y | avpm | avpm.exe | Kaspersky antivirus |
| Y | avpcc | avpcc.exe | Kaspersky Labs anti-virus |
| Y | AvMaiSrv | Avmaisrv.exe | Part of Avast! anti-virus software - E-mail scanner |
| X | Avimgt32 | Avimgt32.exe | Added by the GEMA TROJAN! |
| X | Avimgt | Avimgt.exe | Added by the GEMA TROJAN! |
| Y | AVG_RegCleaner | AVGREGCL.exe | AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems |
| Y | AVG_EMC | AVGEMC.exe | AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses |
| Y | AVG_CC | avgcc32.exe | AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
| Y | avgmsvr.exe | avgmsvr.exe | Required for AVG Anti-Virus 7.0 to function |
| Y | Avgserv9.exe | Avgserv9.exe | Background monitoring program for AVG anti-virus |
| Y | AVGCtrl | AVGCTRL.EXE | Background task of the AntiVir antivirus program which scans files transparently in the background |
| Y | avgcc32 | avgcc32.exe | AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
| Y | avgamsvr.exe | Avgamsvr.exe | AVG antivirus related |
| Y | AVG7_EMC | AVGEMC.exe | AVG Anti-Virus 7.0 Email Cleaner |
| Y | AVG7_Run | avgw.exe | Part of AVG Anti-Virus 7.0 |
| Y | AVG7_CC | AVGCC.exe | AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates |
| X | AveoAttune | atmdlusr.exe | Spyware - part of an automated helpdesk software |
| U | AvconsoleEXE | Avconsol.exe | From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it |
| Y | Avast32 | Astart32.exe | Part of Avast! anti-virus software |
| Y | Avast! | ashserv.exe | Avast! anti-virus software |
| Y | avast! | ashDisp.exe | Part of Avast! anti-virus software |
| X | AV Industry | patch31345.exe | Added by the MYDOOM.AD WORM! |
| X | AV Client | patch31345.exe | Added by the MYDOOM.AD WORM! |
| X | AV | UPDATE-28062004.exe[25 blank spaces].vbs | Added by the MIDFIN WORM!
|
| N | AUXXTRAY | au30setp.exe | System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
| X | auxAudioDevice | aux32.exe | Added by the AIZU WORM! |
| X | AutoUpdater | AutoUpdate.exe | PeopleonPage foistware |
| X | AutoUpdater | aupdate.exe | Aupdate, Tinybar variant. Spyware |
| X | autoupd | autoupd.exe | Added by an unidentified VIRUS, WORM or TROJAN! - found in a folder of the same name |
| N | autoupd | autoupd.exe | Raxco Software Auto Update utility."Used to keep your software up-to-date" |
| N | AutoTKit | AUTOTKIT.EXE | On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled |
| N | autotbar | autotbar.exe | If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled |
| U | AutoSizer | AUTOSIZER.EXE | AutoSizer - utility that automatically maximizes windows when they're opened |
| N | AutoSpell 5 | ASWATC32.EXE | AutoSpell - spell checker |
| ? | AutoShutdown | pssvc.exe | Utility to fix vCard Export in MS Outlook 2000 - although why are these together? |
| N | AUTOPROP | REGPROP.EXE WMPADDIN.DLL | Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension |
| N | Automatically launches the United Devices Agent when you start your computer | UD.EXE | The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs |
| X | Automatic Windows Updater | Update.exe | Added by the GAOBOT.AO WORM! |
| X | Automatic Microsoft Windows Updater | suchost.exe | Added by the RBOT-EQ WORM!
|
| N | AutoMate Task Service | automate.exe | Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs |
| X | Autoloaderaproposclient | Apropos_Client_Loader.exe | AproposMedia adware |
| N | AutoEA | Ahqrun.exe | For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ |
| U | Autobar | autobar.exe | Connect buttons on the keyboard for internet direct access, etc. on HP computers |
| X | Auto updat | crsrs.exe | Added by the FORBOT-AK WORM! |
| N | Auto T Bar | autotbar.exe | If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled |
| X | auto repair system | qualityx.exe | Added by an unidentified WORM or TROJAN - probably a SPYBOT variant |
| X | authz | authz.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| Y | Aureal A3D Interactive Audio | sa3dsrv.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| Y | Aureal A3D Interactive Audio Init | A3dInit.exe | For Aureal based 3D soundcards. A3D sound features won't work with this disabled |
| X | ausvc | ausvc.exe | Added by the AUTOUPDER TROJAN! |
| X | audioinf | audioinf.exe | Added by a variant of the CRYPTER.C TROJAN! |
| N | AudioHQ | Ahqtb.exe | For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs |
| X | Audiocntl | audiocntl.exe | Added by a variant of the CRYPTER.C TROJAN! |
| ? | AudCtrl | RunDll32 AudCtrl.dll, RCMonitor | Audio control panel? |
| X | Aucompat | Aucompat.exe | Added by the GEMA TROJAN! |
| Y | AUCBPNP | aucbnpn.exe | Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot |
| X | au.exe | au.exe | Added by the BEAGLE.B WORM! |
| Y | atwtusb | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| U | AU Agent | AUagent.exe | Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon |
| N | aTuner | atuner.exe | aTuner - tweak tool for GeForce based graphics cards |
| X | AttuneSystray | attune_st.exe | Spyware - part of an automated helpdesk software called Aveo Attune |
| X | AttuneDiscovery | attune_di.exe | Spyware - part of an automated helpdesk software called Aveo Attune |
| X | Attunel | Attunel.exe | Spyware - part of an automated helpdesk software called Aveo Attune |
| X | AttuneContentUpdater | attune_cu.exe | Spyware - part of an automated helpdesk software called Aveo Attune |
| X | AttuneClientEngine | attune_ce.exe | Spyware - part of an automated helpdesk software called Aveo Attune |
| U | ATTRedUpdate | AutoUpdate.exe | Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates |
| U | ATTBroadbandUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| U | Atray | Atray.exe | Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons |
| U | Atrack | atrack.exe | New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert |
| U | AtomicTime | ATOMICTIME.EXE | AtomicTime - utility that synchronizes your PC clock to an atomic clock |
| N | Atomica | atomica.exe | Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key |
| N | ATnotes | atnotes.exe | Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs |
| U | Atomic.exe | Atomic.exe | Atomic Clock Sync - synchronizes your computer's time with the NIST time server |
| U | ATIX10 | atix10.exe | ATI Remote Wonder - PC wireless remote control |
| X | ATM Control | adpn.exe | Added by the MMS.A WORM! |
| X | atiupdate | msshed32.exe | Added by the DELF.EP downloader TROJAN! |
| U | AtiTrayTools | atitray.exe | ATI Tray Tools - allows quick access to ATI graphics card settings |
| X | atiupdate | ATIUPDATE5.EXE | Added by the DEBESKI.A TROJAN! |
| U | atitray | atitray.exe | ATI Tray Tools - allows quick access to ATI graphics card settings |
| X | atisrc2 | windfind.exe | Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return |
| U | ATISmart | ati2s9ag.exe | ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings |
| U | AtiQiPcl | AtiQiPcl.exe | Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's |
| U | atiptaxx | Atiptaxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | atiptaxx | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | AtiPTAAA | Atiptaxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | AtiPTAAA | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | AtiPTA | Atiptaxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | ATIPOLL | ati2evxx.exe | ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources |
| U | AtiPTA | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | ATIPOLAB | ati2evxx.exe | ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources |
| ? | AtiKey | atiptkad.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| U | ATIModeChange | Ati2mdxx.exe | System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager |
| U | AtiCwd32 | Ati2cwad.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| N | AtiKey | AtiKey32.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| U | AtiCwd32 | AtiCwd32.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd32 | AtiCwd.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd | Ati2cwad.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd | AtiCwd32.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd | AtiCwd.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | ATICCC | cli.exe runtime | ATI's CATALYST? CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. If not you can start the program manually via Start -> Programs -> ATI Catalyst Control Center -> Advanced -> Restart Runtime |
| N | Ati2mdxx | Ati2mdxx.exe | For ATI video cards. System Tray access to display mode changing |
| ? | Ati2cwxx | Ati2cwxx.exe | For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it |
| X | ATI VIDEO REGKEY | ati2vid.exe | Added by the SDBOT.UR WORM! |
| N | ATI Task Application | Atitkad.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| N | ATI Task Application (Atikey) | Atitask.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| N | ATI Scheduler | Atisched.exe | Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see |
| Y | ATI Remote Control | ATIRW.exe | Driver for the ATI REMOTE WONDER? RF remote control for ATI's All-In-Wonder graphic cards and other products. Required if you use it |
| N | ATI DeviceDetect | ATIDtct.EXE | Utility meant for future use of the ATI TV WONDER? USB 2.0 video driver and can be disabled |
| N | ATI GART Set-up Utility | Atigart.exe | Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed |
| U | ATI Launchpad | launchpd.exe | Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu |
| N | ATI CATALYST System Tray | CLI.exe SystemTray | System Tray access to ATI's CATALYST? CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop |
| U | AT-Watch | ATWatch.exe | Anti-Trojan Watch - trojan detector |
| U | Athan | Athan.exe | Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world |
| X | ASWnk | aswnk.exe | Adult content dialler |
| N | ASWDP | ASWDP.exe | MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market |
| N | ASUSKey | V38SHELL.EXE | System tray Icon for quickly changing video modes |
| U | ASUS TweakEnable | astart.exe | Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| N | ASUS Probe | AsusProb.exe | ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area |
| U | ASUS SmartDoctor | VGAProbe.exe | ASUS video card fan/thermal monitor |
| N | Astro | Astro.exe | Checks for updates to Quicken on a system reboot |
| N | asTray | Astray.exe | Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer |
| X | AStart | AStart | Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS! |
| X | Astart | Astart | Added by the VB.AH TROJAN! |
| U | ASTART | astart.exe | ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| X | AST | AST | Added by the VB.AH TROJAN! |
| X | AST | AST | Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS! |
| X | assistse | ASSISTSE.EXE | CnsMin (Chinese_Keywords) related |
| Y | AspireTimeMachine | acertmb.exe | System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry |
| N | asp4tray | asp4tray.exe | System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
| U | AsioReg | regsvr32.exe ctasio.dll | ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
| X | ASHLT | Ashlt.exe | Adware - leads back to an ad server |
| Y | ashMaiSv | ashmaisv.exe | Part of Avast! anti-virus software - E-mail scanner |
| U | Ashampoo PopUpBlocker | PopUpKiller.exe | Ashampoo popup blocker, part of Privacy Protector Plus - see here |
| N | ASE Scheduler | ASE Scheduler.exe | Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here |
| X | asdx | xwinrpc32.exe | Added by the AGOBOT.VO WORM! |
| U | Artera | arteraui.exe | Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance |
| X | Aritima | aritima.exe | Added by the ARITIM WORM! |
| N | areslite | AresLite.exe | Ares Lite Edition is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download" |
| N | ares | ares.exe | Ares is "a Windows program that enables peer-to-peer file-sharing on the Ares P2P network. As a member of the P2P community you can search and download any file shared by other users. You can meet new friends in Ares chatrooms while you download" |
| N | ARCSolo Recovery | N/A | Backup software by Computer Associates - no longer supported |
| X | ara-key | [random filename] | Added by the ANTINNY WORM! |
| X | aqadcup.exe | aqadcup.exe | Added by the AGENT.BG WORM! |
| Y | Apwheel | Apwheel.exe | Wheel support for an Alps mouse |
| Y | Apvxd | APVXDWIN.EXE | Part of Panda Anti-Virus. Required to enable permanent virus protection |
| Y | Apvxdwin | APVXDWIN.EXE | Part of Panda Anti-Virus. Required to enable permanent virus protection |
| U | AppPlus | AppPlus.exe | AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)" |
| Y | Application | mdmsetsp.exe | Aztech Labs modem driver |
| U | Application Explorer | Naldesk.exe | Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components." |
| U | AppExtender | AppExtCB.exe | Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received |
| X | appconn | appconn.exe | Added by the CARGAO WORM! |
| U | Appcon | vAppCon.exe | Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established |
| X | App.EXEName | [path to worm].exe | Added by the BODIRU WORM! |
| U | Apoint | Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
| ? | Apmsrv9x | APMSRV9X.EXE | Intel AnyPoint Wireless II Home Network related. What does it do and is it required? |
| X | APIMon | winapix.exe | Added by a variant of the TIBSER.A downloader TROJAN! |
| X | APIMon | apimonx.exe | Added by the TIBSER.A downloader TROJAN! |
| X | API32 | api32.exe | Added by the IRCBOT-B TROJAN! |
| Y | apc_tray | apc_tray.exe | Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure |
| U | APC_SERVICE | mainserv.exe | PowerChute? Personal Edition - "safe system shutdown software with sophisticated power management functions" |
| Y | APC UPS Status | Display.exe | APC PowerChute Personal Edition status icon |
| N | AOTray | AOTray.Exe | System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel |
| X | Aornum | aornum.exe | Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware |
| N | AolFix | AolFix.exe | Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once |
| N | AOLDialer | AOLDial.exe | AOL ISP software dialer - can be activated through a desktop shortcut |
| X | AolCon | config.com | Added by the TAPLAK WORM! |
| Y | AolAcsDaemon1 | AOLACSD.EXE | AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually |
| Y | AolAcsDaemon1 | Acsd.exe | AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually |
| U | AOL Spyware Protection | AOLSP Scheduler.exe | AOL's spyware protection program |
| X | AOL Messenger | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | AOL Messenger | aolmsngr.exe | Added by the SDBOT-JF WORM! |
| N | AOL Companion | companion.exe | Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process, and is installed for ease of use
|
| ? | AOL Instant Messenger | AlM.EXE | That is an L between the A and M, the start up location is wrong for AIM. What does this relate to? |
| N | AO Tray | AOTray.Exe | System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel |
| N | AnyDVD | AnyDVD.exe | "AnyDVD is a driver, which descrambles DVD-Movies automatically in the background. This DVD appears unprotected and region code free for all applications and the Windows operating system as well" |
| ? | anycom bluetooth | ftflauncher.exe | Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
| U | anvshell | anvshell.exe | System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar |
| Y | AnVir Task Manager | AnVir.exe | AnVir Task Manager - protects computer against viruses and manages running processes and startup files |
| Y | AnVir | AnVir.exe | AnVir Task Manager - protects computer against viruses and manages running processes and startup files |
| ? | AntiVirusProtection | qumk.exe | ?? |
| U | AntiWindowsMessenger | AntiMsMsg.exe | Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory |
| X | Antivirus | maja.exe | Added by the NETSKY.H WORM! |
| U | AntiPopUp | AntiPopUp.exe | AntiPopUp for IE - pop-up stopper |
| X | Antivirus | av.exe | Added by the SINKIN TROJAN! Resets IE start page to realphx.com |
| U | Anti-keylogger check | antikey.exe | Anti-keylogger - protects against keylogger programs monitoring your keystrokes |
| U | Anti-Trojan-Watch | ATWatch.exe | Anti-Trojan Watch - trojan detector |
| U | Another Internet Explorer Popup Killer | aiepk.exe | Another IE Popup Killer - pop-up stopper |
| N | Anntext | Anntext.exe | Caere Pagekeeper text annotation server |
| U | ANONYMIZER_SPYWAREKILLER | SpyWareKiller.exe | Anonymizer Spyware Killer |
| N | Announcements | Annclist.exe | MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| ? | AnnotateCheck | AnnCheck.exe | Genius Wizard Pen Tablet driver related. Is it required? |
| X | anbv32 | nabv32.exe | Added by the TITOG.C WORM! |
| ? | ANIWZCSService | WZCSLDR.exe | D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity |
| Y | Amonitor | amon.exe | Tiny Personal Firewall |
| Y | Amon | AMON.EXE | Monitoring part of Eset's NOD32 virus-scanner |
| N | AME_CSA | rundll32 amecsa.cpl, RUN_DLL | Loads ADSL modem Control Panel applet |
| X | AmazingTens | AmazingTens.exe | Premium rate adult content dialler |
| N | America Online *.* Tray Icon | aoltray.exe | Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs |
| U | AlwaysOnTopMaker | AlwaysOnTopMaker.exe | Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
| U | ALUAlert | ALUNotify.exe | Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
| U | AltoMB_service | AltoMBsrv.exe | Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management |
| N | AltnetPointsManager | points manager.exe | Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required |
| N | Altnet | points manager.exe | Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required |
| ? | ALServ | ALServ.exe | Altec Lansing AMS speaker related. What does it do and is it required? |
| U | AlpsPoint | Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
| Y | Alps Electric USB Server | Monserv.exe | Alps Electric USB Server - required according to this article
|
| U | allSnap | allSnap.exe | "allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop" |
| U | Alogserv | Alogserv.exe | From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
| X | All Sea web link | FWLink.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
| X | All Sea screen saver | TaskTray.exe | "Free screensaver", installs lots of foistware. See here. Get rid of it |
| U | All Aboard Status | stswin.exe | All Aboard! Internet Connection Sharing status icon |
| X | alkasr | ?????.exe | Added by the BALKART TROJAN! |
| ? | AliUSBfix | GREENMK.exe | May be realted to a USB 2.0 PCI card - the IOgear GIC220OU? |
| Y | ALiSndMgr | ALiSndMg.exe | ALi AC97 Sound driver |
| N | Alias SketchBook Snapshot | ALIASS~2.EXE | Screen-capture utility for Alias Sketchbook |
| N | AlienAutopsy | Test_BS.exe | Alienware computer technical support software |
| ? | ALFY Accellerator | AlfyAC~1.exe | ?? |
| N | Alexa | Alexa.exe? | Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs |
| X | AlevirOld | [worm filename] | Added by the OPASERV.G WORM! |
| X | Alevir | Alevir.exe | Added by the OPASERV.A or OPASERV.F or OPASERV.G WORMS! |
| X | AlcxMonitor | Alcxmntr.exe | Realtek AC97 Audio - Event Monitor. Sypware file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but is being used by Realtek to gather data about customers |
| ? | Alcom PCL Capture | FMW_PCAP.EXE | ?? |
| ? | AlcWzrd | ALCWZRD.EXE | RealTek High Definition audio driver related. What does it do, and is it required |
| U | Alcohol Autorun | Alcohol.exe | Alcohol 120% - CD/DVD emulation/writing/copying software |
| U | Alcohol | Alcohol.exe | Alcohol 120% - CD/DVD emulation/writing/copying software |
| X | Alchem | Alchem.exe | IPInsight parasite variant |
| X | alcmtr | ALCMTR.EXE | Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers |
| N | Album Fast Start | ABMTSR.EXE | Scanner software, not required for scanner to work |
| ? | AlarmWatcher | AlarmWatcher.exe | Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required? |
| U | AKiller | akiller.exe | BuyPin Advertising Killer - popup killer |
| U | Alarm Manager | Alarm.app.exe | Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop |
| Y | Aiptek Graphics Tablet (USB) | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| X | AKEYNAME | WinServ.exe | Added by the EVILBOT.C TROJAN! |
| N | AIMWDInstall | AIMWDInstall.exe | Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | AIMster | ?? | Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs |
| N | AimingClick | AimingClick.exe | AimingClick from AimingTech. Web searching tool. Available via Start -> Programs |
| X | aimaol ml097e | aimaol.exe | Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | aimaol lptt01 | aimaol.exe | Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | AIM reminder | AIM reminder.exe | Added by the BUDDY TROJAN! |
| N | AIM | aim.exe | AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs |
| U | aiepk | aiepk2.exe | Another IE Popup Killer - pop-up stopper |
| X | Aida | ttuh.exe | PurityScan/Clickspring adware |
| X | Aica | tuaa.exe | PurityScan/Clickspring adware |
| N | AHQInit | ahqinit.exe | Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required |
| X | Ahst | iebs.exe | Downloader - identified by BOClean as MENDWARE trojan. Also identified as PurityScan/Clickspring adware |
| ? | AHNUE | AHNUE.exe | ?? |
| U | AHNSD | AhnSD.exe | AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis |
| U | ahfp | ahfp.exe | Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
| U | ahfprog | ahfp.exe | Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
| Y | AGRSMMSG | AGRSMMSG.exe | IBM AMR modem driver |
| N | AGSatellite | AGSatellite.exe | Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs |
| U | AgfaCLnk | AgfaCLnk.exe | For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive |
| X | agp | agp32.exe | Added by the GAOBOT.SY WORM! |
| ? | Agente | Remupd.exe | Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar? |
| N | Agent | Agent.exe | Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs |
| U | AFAFilter | windefault.exe | AFAFilter - internet filter software |
| U | AEZBProc | aptezbp.exe | IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
| ? | AeXSWDUsr | AeXSWDUsr.exe | Altiris Express NS Client Manager software. Is it required? |
| N | AELaunch | AELaunch.exe | Audio Applications Launcher for the Philips Acoustic Edge soundcard |
| ? | Aeiwlsta.exe | Aeiwlsta.exe | IBM High Rate Wireless LAN Adapter driver. Is it required? |
| N | Adware Spy | AdwareSpy.exe | Bogus adware remover, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites |
| U | Adware Agent | adware agent.exe | Adware Agent popup blocker |
| X | advmon32 | advmon32.exe | Added by a variant of the CRYPTER.C TROJAN! |
| U | Advertising Killer | Akiller.exe | AKiller - pop-up stopper |
| N | ADVCHK | ADVCHK.EXE | Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
| X | Advapi | Advapi.exe | Added by the NETDEVIL.12 WORM! |
| N | Advanced Tools Check | ADVCHK.EXE | Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget |
| X | Advanced Internet Protocol | cerf.exe | Added by a variant of the SPYBOT WORM! |
| X | Adult_Chat1 | Adult_Chat1.exe | Adult content dialler |
| U | ADUserMon | ADUserMon.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk |
| X | AdultX | AdultX.exe | Adult content dialler and hijacker |
| X | Adult_Chat | Adult_Chat.exe | Adult content dialler |
| U | AdSubtract | adsub.exe | AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs |
| X | adstartup | Adstartup.exe | Adlogix adware variant |
| X | adstartup | automove.exe | Adlogix adware variant |
| Y | ADSS | ADSS.exe | ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied |
| ? | ADSL_A2 | A2Installed | Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required? |
| Y | AdslTaskBar | rundll32.exe stmctrl.dll, TaskBar | ISP software, initializes DSL modem |
| N | ADSL Diagnostic Tools | mapiicon.exe | System tray access to ADSL modem diagnostic tools. Available via Start -> Programs |
| U | AdsGone | Adsgone.exe | AdsGone - pop-up stopper |
| U | ADService | ADService.exe | Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk |
| X | AdRotator.Application | csrss.exe | AdRotator adware. Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, shutdown, and hard-error handling |
| X | AdRoarUpdate | ARUpdate.exe | AdRoar adware updater |
| N | ADQuickAccess | Adtray.exe | After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95 |
| X | Adope File Manager | lsasv.exe | Added by an unidentified WORM or TROJAN! |
| X | adp | adp.exe | Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc |
| X | AdobeFonts | fonts.hta | Browser hijacker - redirecting to Hugesearch.net |
| X | AdobeA | adobes.exe | Added by the FLOOD.BA TROJAN! |
| U | Adobe Gamma Loader | Adobe Gamma Loader.exe | Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine |
| X | Adobe | sysconfig.exe | Added by an unidentified WORM or TROJAN! |
| X | Adobe | Adobe.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| Y | Adiras | Adiras.exe | ADSL USB modem related |
| X | ADM Library Loader | admlib32.exe | Added by a variant of the SDBOT TROJAN! |
| N | ADGJdet | ADGJDet.exe | Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection |
| ? | ADG | ADG.exe | SoundBlaster Audigy related? |
| U | AdDelete | AdDelete.exe | Banner advertisment blocker |
| X | AdDestroyer | AdDestroyer.exe | Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code |
| X | AddClass | [Installation_Path] | Added by the STARTPAGE.F TROJAN! |
| X | AddClass | AddClass.exe | CoolWebSearch parasite variant |
| X | Adaware ml097e | adaware.exe | Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Adaware lptt01 | adaware.exe | Variant of the RapidBlaster parasite (in a "Adaware" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware |
| N | Adaware Bootup | ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
| N | AdaptecDirectCD | Directcd.exe | DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
| N | Adaptec DirectCD | Directcd.exe | DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
|
| U | AD2KClient | AD2KClient.exe | Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk |
| U | Ad-watch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| U | Ad-Muncher | ADMUNCH.EXE | Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications |
| N | Ad-aware | Ad-aware.exe | Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs |
| ? | Ad Online Guide | adonlineguide.exe | ?? |
| U | Ad Blocker Pro | Ad Blocker Pro.exe | Ad Away popup and banner remover |
| U | Ad Blocker | blocker.exe | Ad Blocker - blocks popups, and also removes banners, image ads and flash ads |
| U | ActMaker | ActMak25.exe | "ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding, nor are you required to know a lot about the computer" |
| N | ActivSurf | backweb*****.exe | Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates |
| Y | ActiveShield | MCVSSHLD.EXE | McAfee VirusScan On-line. See also the McAgentExe entry |
| U | ActivePlus | activeplus.exe | Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on) |
| U | ActiveMenu | ActiveMenu.exe | WildTangent games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | ActiveEyes | ActiveEyes.exe | ActiveEyes from TFI Technology |
| X | ACTIVEDS | ACTIVEDS.EXE | Added by the OPASERV.T WORM! |
| X | ActiveDesktop | systray32.exe | Added by the DABOOM WORM! |
| N | Activation | Activation.exe | Part of Microsoft Money |
| U | Activboard | MMKeybd.exe | Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys |
| ? | ActionAgent | actionagent.exe | "A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required? |
| N | Action Manager 32 | am32.exe | Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs |
| N | Acronis TrueImage Monitor | TrueImageMonitor.exe | Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage |
| U | Acronis Scheduler2 Service | schedhlp.exe | Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images |
| U | Acrobat Assistant | ACROTRAY.EXE | |
