| Status Code | Name | Command | Description |
| ? | IZE | N/A | ?? |
| U | iwctrl | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| N | Iusage | netdet.exe | Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up |
| N | IW ControlCenter | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| Y | iTunes Helper | iTunesHelper.exe | Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation |
| N | ItsDeductiblePopUp | ItsDeductible.exe | ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip |
| U | iTouch | iTouch.exe | iTouch loads the iTouch configuration program for Logitech keyboards. It?s needed if your keyboard has shortcut buttons and if you use them. It?s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock |
| U | Itk | Itk.exe | In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| N | ISUSScheduler | issch.exe | InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you?re always working with the most current version |
| N | ISUSPM Startup | ISUSPM.exe | InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you?re always working with the most current version |
| X | ist service uninstall | [random filename] | ISTBar parasite related |
| X | IST Service | istsvc.exe | ISTBar foistware |
| U | ISStart | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| X | Israfel | Israfel.vbs | Added by the GAGGLE.D or GAGGLE.E WORMS! |
| U | iSpyNOW | ispynow.exe | iSpyNOW - remote monitoring and surveillance software |
| N | ISLP2STA | ISLP2STA.EXE | Possibly a left over from Windows Update for wireless NIC (maybe Linksys) drivers? Not required though |
| U | ISDNwatch | IWatch.exe | FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks" |
| N | ISDN Monitor | Linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| X | Isass | Isass.exe | Added by the FUTRO TROJAN!
|
| N | isdbdc | isdbdc.exe | For Compaq PC's. May install properties in dial-up networking when you register with an ISP |
| N | IS CfgWiz | cfgwiz.exe | Norton Internet Security configuration wizard |
| X | ir_ftp | ir_ftp.exe | Added by the IRFTP TROJAN! |
| X | ir_ftp | irwftp.exe | Added by the BANCOS.H TROJAN! |
| U | IrXfer | IrXfer.exe | Microsoft Infrared Transfer application |
| X | irwftp | iexplorer.exe | Added by the BANKER-AN TROJAN! |
| X | Irwftp | [path to trojan] | Added by the BANCOS.CR TROJAN! |
| U | IrMon | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| ? | IRPMonitor | itcnmon.exe | ?? |
| N | iRiver Updater | Updater.exe | Updates for the iRiver Music Manager - used with their digital music players |
| N | iRis Active Monitor | winmon32.exe | Iris Antivirus - discontinued, replace with good alternative |
| N | iRiS AntiVirus Active Monitor | WIMMUN32.exe | Iris Antivirus - discontinued, replace with good alternative |
| Y | IREIKE | IreIKE.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| X | irc session | sessionmgr.exe | Added by the SDBOT-ACE WORM! |
| ? | IQES.exe | iqes.exe | ?? |
| ? | IPW | IPW.exe | ?? |
| X | IPTable Configuration | Winipcfgs.exe | Added by a variant of the RBOT WORM! |
| Y | IPSecMon | IPSecMon.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| U | iProtectYou | ip.exe | iProtectYou - internet filtering/parental control and network monitoring software |
| ? | iPodWatcher | iPodWatcher.exe | Associated with Apple's iPod MP3 player. Detects when the iPod is connected? |
| U | iPodManager | iPodManager.exe | Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods |
| X | ipmon.exe | ipmon.exe | Added by the RECERV or R3C.B TROJANS! |
| Y | IPinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| N | IPInSightMonitor 01 | ipmon32.exe | Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information |
| X | IPInSightLAN 01 | ipclient.exe | Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resource - hence the "X" status |
| X | IpCtrl | ipcon32.exe | Added by an unidentified VIRUS, WORM or TROJAN!
|
| X | IPConfig | svcxnv32.exe | Added by the HACARMY.E TROJAN!
|
| N | iPalm | mon.exe | Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded |
| X | IP Stack | ipstack.exe | Added by the AGOBOT.CW WORM! |
| U | Iomon98.exe | Iomon98.exe | PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang |
| N | IomegaWare | COMMANDER.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| N | Iomega Watch | IOWATCH.EXE | Used by Iomega drives. Available via Start -> Programs |
| N | Iomega Startup Options | IMGSTART.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| ? | Iomega QuickSync | Quicksync.exe | ?? |
| U | Iomega Drive Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| U | Iomega Disk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | Iomega Backup Scheduler | dtiom98.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | Iomega Automatic Backup 1.0.1 | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| U | Iomega Automatic Backup | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| U | iolo Task Agent | Task_Agent.exe | iOlo System Mechanic Task Agent. Scheduled maintenance |
| X | Ioadqm | Media Player.exe | Added by the HAWAWI WORM! |
| N | Introduction-Registration | ?? | For Compaq PC's. Should only run first time, PC Introduction & Compaq registration |
| X | IntruderAlert | ia99.exe | Intruder Alert '99 from Bonzi - spyware |
| X | Intrenat | Intrenat.exe | Added by the LEMIR.E TROJAN! |
| N | Introducing Media Manager | SPLASHA.EXE | MS Media Manager tour. Not required |
| X | Intmgr | Intmgr.exe | Added by the GEMA TROJAN! |
| U | InterWARN | interwarn.exe | InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs |
| N | Intervideo WinScheduler | SchSvr.exe | WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs |
| N | Intervideo WinScheduler | WinScheduler.exe | WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs |
| N | Intervideo WinCinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo Win Cinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo Win Cinema Manager | WinCinemaMgr.exe | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo Win Cinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| X | InterU | WINDRV.EXE | Added by the IRCINTER.A TROJAN! |
| N | InterTrust Quick Start | it_cpq~1.exe | InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business |
| X | Internt | Internt.exe | Added by the PEEPER or CARUFAX.A TROJANS! |
| X | INTERNET_SERVISES | winz32.exe | Added by the SDBOT.Q TROJAN! |
| X | InternetWasherPro | iw.exe | Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003 |
| X | Internet.exe | Internet.exe | Added by the MAGICCALL VIRUS! |
| X | Internet Washer Pro | iw.exe | Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003 |
| U | Internet Timer | ITIMER.exe | Shareware dial-up connection call cost calculator from Ratsoft |
| N | Internet Sweeper | Sweeper.exe | Internet Sweeper - removes unnecessart left over files after browsing the internet |
| Y | Internet Sharing Server | iss_srvr.exe | Intel AnyPoint internet sharing software |
| X | INTERNET SERVISES | winz32.exe | Added by the KWBOT.Z WORM! |
| X | Internet Services | systemdev.exe | Added by the SDBOT-PW WORM! |
| X | Internet Service | intersvc.exe | Added by the SPYBOT-DE WORM! |
| X | Internet Send | More log.exe | Unidentfied adware |
| U | Internet Optimizer | optimize.exe | Internet connection optimizer. Leave this enabled if you find it improves your connection |
| X | Internet Mail and News | msqdevl.exe | EasySearch adware |
| X | Internet Loader1 | MSInstall61.exe | Added by the KWBOT.B WORM! |
| U | Internet History Eraser | HERASER.exe | Internet History Eraser - deletes your browsing tracks |
| X | Internet Explorer Updater | iexplorer.exe | Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) |
| X | Internet Explorer Updater | lexbac.exe | Added by the DOWNLOAD TROJAN! |
| X | Internet Explorer | IEXPLORE.EXE | Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Internet Explorer | iexplorer.exe | Added by the LORSIS WORM! Note - the legitimate IE (iexplore.exe) does not figure in Msconfig/Startup unless added manually and this loads from the "RunServices" key |
| X | Internet Exploere Services | urlmon32.dll.exe | Added by the EVIAN.C WORM! |
| X | Internet Connection Wizard | stisvsq.exe | EasySearch adware |
| U | Internet Download Accelerator | ida.exe | Internet Download Accelerator download manager
|
| X | Internet Config | svchosts.exe | Added by the SDBOT TROJAN! |
| U | Internet Answering Machine | IAMNET~1.EXE | From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access |
| X | internct | WinSocks5.exe | Added by the GRAYBIRD.F TROJAN!
|
| X | Internat.exe | internat.exe | Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon |
| N | internat.exe | internat.exe | Language selection icon in system tray |
| X | Internat Conf | bootconf.exe | Homepage hijacker, redirecting to coolwwwsearch.com; see for example here |
| X | Internat | systray.exe | Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process |
| X | internat | internat.exe | Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir% |
| X | InternalSystray | Kazza.exe | Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP) |
| X | Internal | regedit.exe /s %windir%c:[month number] | Added by the FORTNIGHT.D TROJAN! |
| X | Internal | [trojan filename] | Added by the SMOTHER and TRANSLAT TROJANS! |
| X | Interdll | Interdll.exe | Added by the DELF family of TROJANS! |
| Y | InterCheck Monitor | Icmon.exe | Part of Sophos ant-virus sofware |
| ? | Intense Registry Service | IntEdReg.exe /CHECK | Intense Educational Ltd - Language Office Software. Is it required? |
| N | Intel? Common User Interface | igfxtray.exe | Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel |
| U | IntelProcNumUtility | cpunumber.exe | Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
| U | IntelMEM | IntelMEM.exe | Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line |
| U | Intellitype | type32.exe | For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them |
| X | Intel system works | iis.exe | Added by the RBOT.QGA WORM! |
| X | InteliSys | smss.exe | Advertisingvision adware - file is located in C:Windows or C:Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup! |
| N | Intel PROSet Tray Icon | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features |
| U | Intel Product Number Utility | IntelProcNumUtility.exe | Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
| U | Intel PDS | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled |
| U | Intel File Transfer | xfr.exe | Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients |
| U | Intel Active Monitor | imontray.exe | System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards |
| X | intdctrr | idctup20.exe | SafeSurfing parasite variant |
| ? | InstUtlR.exe | InstUtlR.exe | ?? |
| X | instit | INSTIT.BAT | Added by the OPASERV.K WORM! |
| X | InstantPleasure | instantpleasure.exe | Adult content dialler |
| X | InstantPleasureXXX | instantpleasurexxx.exe | Adult content dialler |
| X | instit | instit.bat | Added by the OPASERV.H WORM! |
| U | InstantDrive | InstantDrive.exe | Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer?s hard drive. Part of InstantCD/DVD burning software |
| N | InstantAccess | INSTAN~1.EXE | From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs |
| U | Instant Wireless Configuration Utility | WUSB11cfg.exe | Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration |
| X | Instant Access | rundll32.exe EGDHTML_1023.dll, InstantAccess | Adult content dialler related |
| N | Instant Update Center | reminder.exe | From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner |
| X | Installed shell32.dll | Office.exe... | Added by a variant of the LOVGATE WORM! |
| ? | InstallNAIProduct | SETUP.EXE | Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error? |
| U | InstallBuddy | Ibtna.exe | InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync |
| N | InstallAurealDemos | InstallAurealDemos.js | Used to initialize the Aureal A3D demos InstallShield wizard |
| ? | insCOA5 | insCOA5.exe | ?? |
| ? | Install Pending Files | sifxinst.exe | Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required? |
| U | InoTask | InoTask.exe | Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here |
| Y | InoRT | InoRT9x.exe | Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here |
| Y | InoRPC | InoRpc.exe | Associated with eTrust Antivirus/InoculateIT |
| N | InkWatch | InkWatch.exe | Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
| Y | Initialize8x8 | 8x8_init.exe | Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay |
| N | Ink Monitor | InkMonitor.exe | Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
| X | Initial Page | install.exe | EasySearch browser hijack installer
|
| X | infwin | infwin.exe | Msview parasite variant |
| U | Infuzer | Infuzer.exe | Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities" |
| X | infus | infus.exe | Adult content dialler |
| U | Infra-red Monitor | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| ? | Infoplay.exe | Infoplay.exe | Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed? |
| X | Info32x | Info32x.exe | Added by the GEMA TROJAN! |
| U | Info Select | is.exe | Info Select from Micro Logic - personal information manager |
| X | InetMSN | msnet.exe | Added by a variant of the SDBOT TROJAN! |
| X | inetmgr | inetmgr.exe | Actual Names (AdvSearch) Internet Keywords parasite |
| U | inetinfo.exe | inetinfo.exe | Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more) |
| U | Inetd | INETD32.EXE | Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation |
| U | inetcntrl | inetcntrl.exe | Bsafe Online - internet filter |
| ? | InetConf | inetconf.exe | ?? |
| X | Inetapi | Netapi.exe | Added by the NETDEVIL.14 TROJAN! |
| X | Inet Delivery | intdel_2.exe | Spyware |
| X | Inet Delivery | Intdel.exe | Spyware |
| N | IndexSearch | IndexSearch.exe | Associated with PaperPort scanner software from ScanSoft |
| N | InControl Desktop Manager | DMHKEY.EXE | For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs |
| N | Incredimail | incredimail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| N | IncMail | IncMail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| N | InCD | incd.exe | Ahead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk |
| N | Imonitor | Plguni.exe | McAfee QuickClean 3.0 - removes internet clutter and unwanted programs |
| ? | immcheck.exe | immcheck.exe | Related to I-FORCE driver for force feedback steering wheel? |
| N | Imjpmig8.1 | IMJPMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese) |
| N | imjpmig | IMJPMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese) |
| N | ImgStart | ImgStart.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | ImgIcon | ImgIcon.exe | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | Imesh | ?? | Imesh is a file sharing system |
| N | Imesh Auto Update | ?? | Update check for the Imesh file sharing system. Turn the update off under "options" |
| N | IMEKRMIG6.1 | IMEKRMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
| N | imekrig | imekrig.exe | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
| X | Imagemgt32 | Imagemgt32.exe | Added by the GEMA TROJAN! |
| U | Imagefox | imagefox.exe | ImageFox 2.0 is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes |
| U | ImageDrive-{hex numbers} | ImageDrive.exe | Nero ImageDrive from Ahead - virtual CD/DVD drive software |
| Y | Image & Restore | IMAGE32.exe | Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run |
| X | Image | rundll32 image.dll, Install | CoolWebSearch parasite variant |
| N | iM Start Center | iM_Tray.exe | Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner |
| U | iLyric | iLyric.exe | iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button
|
| ? | ILO_Office_Manager | IntEdReg.exe /OFFMAN | Intense Educational Ltd - Language Office Software. Is it required? |
| X | iLLeGaL.exe | Mplayer.exe | Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
| X | iLLeGaL | Mplayer.exe | Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
| U | iKeyWorks | IKEYMAIN.EXE | A4Tech wireless keyboard driver and utility |
| Y | IJ75P2PSERVER | IJ75P2PS.EXE | Printer utility which is required in order to make the printer work correctly |
| Y | IKE Service 95 | IKEService.exe | Associated with PGP. The PGP Tray can be
disabled, but without IKESERVICE you won't be able to de- or encrypt anything |
| N | iIWiper | Systemwiper.exe | System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis |
| X | Iinl | iptl.exe | PurityScan/Clickspring adware |
| X | iilc | IILC.EXE | Homepage hijacker |
| X | igsex2x | igsex2x.exe | NewDial premium rate adult content dialler |
| U | IFSplash.exe | IFSplash.exe | I-FORCE driver for force feedback steering wheel |
| N | igfxtray | igfxtray.exe | Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel |
| X | iexplorer ml097e | iexplorer.exe | Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | iexplorer lptt01 | iexplorer.exe | Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Iexplore Services | iexplore.exe | Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | IEXPLORE | iexplore.exe | Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | ieupdate | mcpdll32.exe | Adware downloader trojan |
| X | Iexplore | iexplore.exe | Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | ieupdate | MCP****.exe [**** = random char] | Added by the ASOXY TROJAN! |
| N | ietsr | ietsr.exe | IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc |
| X | iestart | iexp1orer.exe | Added by the NEMOG.C TROJAN! |
| X | Iesar | Iesar.exe | Browser hijacker - redirecting to an adult web page |
| X | Iesearch.exe | Iesearch.exe | LookNSearch adware |
| X | IELoader32 | iexplore32.exe | Added by the SPEX or SPEX.B WORMS! |
| X | iel2cde8 | rundll32.exe [path] iel2cde8.dll, EnableRunDLL32 | LZIO.com adware downloader |
| X | IEFeatures | Internetfeatures.exe | Added by the POPMON.A TROJAN! - also known as PopMonster adware |
| X | Iehelper | syslaunch.exe | Outwar adware downloader |
| X | IEengine | IEeng.exe | STARTPAG.AI hijacker |
| X | IEFeatures | IEFeatures.exe | Added by the POPMON.A TROJAN! - also known as PopMonster adware |
| X | IEDriver | TD.exe | IEDriver adware variant |
| X | IEDriver | xplore.exe | IEDriver adware variant |
| X | IEDriver | IEDriver.exe | Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze |
| X | iedll | iedll.exe | Homepage hijacker, redirecting to coolwwwsearch.com |
| U | IECleanAux | Ieboot6.exe | IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup |
| N | iecheck | iecheck.exe | Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2 |
| X | IE Menu Extension toolbar | rundll32.exe [path] tbextn.dll DllShowTB | Topconverting.com/180Search "IEMenuExtension" toolbar
|
| N | IDW Logging Tool | idwlog.exe | Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems |
| U | IE Doctor | IEDoctor.exe | IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options" |
| N | IDMan | IDMan.exe | Internet Download Manager - download files faster, schedule and resume |
| X | idecntl | idecntl.exe | Added by a variant of the CRYPTER.C TROJAN! |
| U | iDesktop | idesktop.exe | Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse |
| X | IDE Loader | IDElibr32.exe | Added by the XILON TROJAN! Related to the game "Diablo II" |
| X | IDE | ide.exe | Added by the ASSASIN.F TROJAN! |
| ? | IDA | IDA.EXE | HP related - in a Program FilesHewlett-PackardPC COE folder |
| X | ID8525 | id85255.exe | Added by the ID8525.A TROJAN! |
| X | ID8525 | ID8525.exe | Added by the ID8525.A TROJAN! |
| N | ID Commander | IDCom.exe | Caller ID utility for identifying incoming telephone numbers |
| N | IC_KEY_3 | spvic.exe | Instant Chess related |
| Y | ICSMGR | ICSMGR.EXE | Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you?re sharing the internet on various computers |
| N | ICServer | Icserver.exe | Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations |
| U | ICSDCLT | rundll32.exe Icsdclt.dll, ICSClient | Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines |
| N | ICQ Plus | vplus.exe | ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs |
| X | ICQ Net | winlogon.exe | Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should NOT appear in Msconfig/Startup! |
| X | ICQ Lite Messenger | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory |
| N | ICQ Lite | ICQLite.exe | ICQ Lite - compact version of the popular messaging program |
| X | ICQ Hacking Pro | ICQpro.exe | Added by a variant of the NETSPY TROJAN! |
| X | ICQ Center | [path to worm] | Added by the RANDIN WORM! |
| N | Iconsaver | Iconsaver.exe | IconSaver is a desktop icon manager |
| N | Iconoid | Iconoid.exe | Iconoid is a desktop icon manager |
| X | iConfigLoader | DIIhost.exe | Added by the GAOBOT.AO WORM! |
| N | Iconfig.exe | Iconfig.exe | Icon for LS-120 "Superdisk" |
| U | ICONDESK | ICONDESK.EXE | Small utility which will allow you the option of hiding or showing your desktop icons |
| Y | ICONCLNT | iconclnt.exe | APC PowerChute Tray Icon. Associated with the UPS listing |
| X | Icon ml097e | icon.exe | Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Icon lptt01 | icon.exe | Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | Icon Hearit 98 | hearit98.exe | Audio desktop customization utility from Moon Valley Software. Resource hog |
| N | Icon Hearit 95 | hearit95.exe | Audio desktop customization utility from Moon Valley Software. Resource hog |
| N | Icon Animation | HDE.EXE | Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons |
| N | ICO | ICO.EXE | Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
| N | iCn | NAG.EXE | iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist |
| U | iClean | iClean.exe | IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy" |
| N | ICH Synth | eusexe.exe | Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices |
| X | icdd7ee6 | rundll32.exe [path] icdd7ee6.dll, EnableRunDLL32 | LZIO.com adware downloader |
| ? | IBMUltraBayHotSwapSound | IBMBAYSN.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? |
| U | IBMUltraBayHotSwapCPLLoader | IBMBAY2N.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops |
| U | Ibmpmsvc | ibmpmsvc.exe | Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes |
| ? | Ibmmon.exe | Ibmmon.exe | ?? |
| N | ibmmessages | ibmmessages.exe | Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport" |
| X | IASHLPR | IASHLPR.EXE | Added by the OPASERV.T WORM! |
| ? | Iap | iap.exe | Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely? |
| X | Iamnacho On Irc.MusIrc.com Is a Homosexual! | XBox64.exe | Added by the RANDEX.Y WORM! |
| Y | iamapp | iamapp.exe | AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well |
| U | i8kfangui | i8kfangui.exe | Graphical interface for fan speed control |
| U | IAAnotif | iaanotif.exe | IAA Event Monitor User Notification Tool - part of Intel? Application Accelerator - "a performance software package for desktop PCs using select Intel? chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed |
| ? | I81SHELL | I81SHELL.exe | Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard |
| X | I386 | I386.exe | Added by the MYPOWER WORM! |
| X | I-Worm.GiGu | uGiG.eXe | Added by the GINK WORM!
|
| X | I-Worm.GiGu | uGiG.eXe | Added by the GINK WORM!
|
| X | I386 | I386.exe | Added by the MYPOWER WORM! |
| ? | I81SHELL | I81SHELL.exe | Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard |
| U | i8kfangui | i8kfangui.exe | Graphical interface for fan speed control |
| U | IAAnotif | iaanotif.exe | IAA Event Monitor User Notification Tool - part of Intel? Application Accelerator - "a performance software package for desktop PCs using select Intel? chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed |
| Y | iamapp | iamapp.exe | AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well |
| X | Iamnacho On Irc.MusIrc.com Is a Homosexual! | XBox64.exe | Added by the RANDEX.Y WORM! |
| ? | Iap | iap.exe | Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely? |
| X | IASHLPR | IASHLPR.EXE | Added by the OPASERV.T WORM! |
| N | ibmmessages | ibmmessages.exe | Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport" |
| ? | Ibmmon.exe | Ibmmon.exe | ?? |
| U | Ibmpmsvc | ibmpmsvc.exe | Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes |
| U | IBMUltraBayHotSwapCPLLoader | IBMBAY2N.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops |
| ? | IBMUltraBayHotSwapSound | IBMBAYSN.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? |
| X | icdd7ee6 | rundll32.exe [path] icdd7ee6.dll, EnableRunDLL32 | LZIO.com adware downloader |
| N | ICH Synth | eusexe.exe | Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices |
| U | iClean | iClean.exe | IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy" |
| N | iCn | NAG.EXE | iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist |
| N | ICO | ICO.EXE | Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
| N | Icon Animation | HDE.EXE | Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons |
| N | Icon Hearit 95 | hearit95.exe | Audio desktop customization utility from Moon Valley Software. Resource hog |
| N | Icon Hearit 98 | hearit98.exe | Audio desktop customization utility from Moon Valley Software. Resource hog |
| X | Icon lptt01 | icon.exe | Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Icon ml097e | icon.exe | Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| Y | ICONCLNT | iconclnt.exe | APC PowerChute Tray Icon. Associated with the UPS listing |
| U | ICONDESK | ICONDESK.EXE | Small utility which will allow you the option of hiding or showing your desktop icons |
| N | Iconfig.exe | Iconfig.exe | Icon for LS-120 "Superdisk" |
| X | iConfigLoader | DIIhost.exe | Added by the GAOBOT.AO WORM! |
| N | Iconoid | Iconoid.exe | Iconoid is a desktop icon manager |
| N | Iconsaver | Iconsaver.exe | IconSaver is a desktop icon manager |
| X | ICQ Center | [path to worm] | Added by the RANDIN WORM! |
| X | ICQ Hacking Pro | ICQpro.exe | Added by a variant of the NETSPY TROJAN! |
| N | ICQ Lite | ICQLite.exe | ICQ Lite - compact version of the popular messaging program |
| X | ICQ Lite Messenger | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory |
| X | ICQ Net | winlogon.exe | Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should NOT appear in Msconfig/Startup! |
| N | ICQ Plus | vplus.exe | ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs |
| U | ICSDCLT | rundll32.exe Icsdclt.dll, ICSClient | Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines |
| N | ICServer | Icserver.exe | Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations |
| Y | ICSMGR | ICSMGR.EXE | Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you?re sharing the internet on various computers |
| N | IC_KEY_3 | spvic.exe | Instant Chess related |
| N | ID Commander | IDCom.exe | Caller ID utility for identifying incoming telephone numbers |
| X | ID8525 | ID8525.exe | Added by the ID8525.A TROJAN! |
| X | ID8525 | id85255.exe | Added by the ID8525.A TROJAN! |
| ? | IDA | IDA.EXE | HP related - in a Program FilesHewlett-PackardPC COE folder |
| X | IDE | ide.exe | Added by the ASSASIN.F TROJAN! |
| X | IDE Loader | IDElibr32.exe | Added by the XILON TROJAN! Related to the game "Diablo II" |
| X | idecntl | idecntl.exe | Added by a variant of the CRYPTER.C TROJAN! |
| U | iDesktop | idesktop.exe | Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse |
| N | IDMan | IDMan.exe | Internet Download Manager - download files faster, schedule and resume |
| N | IDW Logging Tool | idwlog.exe | Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems |
| U | IE Doctor | IEDoctor.exe | IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options" |
| X | IE Menu Extension toolbar | rundll32.exe [path] tbextn.dll DllShowTB | Topconverting.com/180Search "IEMenuExtension" toolbar
|
| N | iecheck | iecheck.exe | Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2 |
| U | IECleanAux | Ieboot6.exe | IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup |
| X | iedll | iedll.exe | Homepage hijacker, redirecting to coolwwwsearch.com |
| X | IEDriver | IEDriver.exe | Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze |
| X | IEDriver | xplore.exe | IEDriver adware variant |
| X | IEDriver | TD.exe | IEDriver adware variant |
| X | IEengine | IEeng.exe | STARTPAG.AI hijacker |
| X | IEFeatures | IEFeatures.exe | Added by the POPMON.A TROJAN! - also known as PopMonster adware |
| X | IEFeatures | Internetfeatures.exe | Added by the POPMON.A TROJAN! - also known as PopMonster adware |
| X | Iehelper | syslaunch.exe | Outwar adware downloader |
| X | iel2cde8 | rundll32.exe [path] iel2cde8.dll, EnableRunDLL32 | LZIO.com adware downloader |
| X | IELoader32 | iexplore32.exe | Added by the SPEX or SPEX.B WORMS! |
| X | Iesar | Iesar.exe | Browser hijacker - redirecting to an adult web page |
| X | Iesearch.exe | Iesearch.exe | LookNSearch adware |
| X | iestart | iexp1orer.exe | Added by the NEMOG.C TROJAN! |
| N | ietsr | ietsr.exe | IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc |
| X | ieupdate | MCP****.exe [**** = random char] | Added by the ASOXY TROJAN! |
| X | ieupdate | mcpdll32.exe | Adware downloader trojan |
| X | Iexplore | iexplore.exe | Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | IEXPLORE | iexplore.exe | Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Iexplore Services | iexplore.exe | Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | iexplorer lptt01 | iexplorer.exe | Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | iexplorer ml097e | iexplorer.exe | Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| U | IFSplash.exe | IFSplash.exe | I-FORCE driver for force feedback steering wheel |
| N | igfxtray | igfxtray.exe | Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel |
| X | igsex2x | igsex2x.exe | NewDial premium rate adult content dialler |
| X | iilc | IILC.EXE | Homepage hijacker |
| X | Iinl | iptl.exe | PurityScan/Clickspring adware |
| N | iIWiper | Systemwiper.exe | System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis |
| Y | IJ75P2PSERVER | IJ75P2PS.EXE | Printer utility which is required in order to make the printer work correctly |
| Y | IKE Service 95 | IKEService.exe | Associated with PGP. The PGP Tray can be
disabled, but without IKESERVICE you won't be able to de- or encrypt anything |
| U | iKeyWorks | IKEYMAIN.EXE | A4Tech wireless keyboard driver and utility |
| X | iLLeGaL | Mplayer.exe | Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
| X | iLLeGaL.exe | Mplayer.exe | Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
| ? | ILO_Office_Manager | IntEdReg.exe /OFFMAN | Intense Educational Ltd - Language Office Software. Is it required? |
| U | iLyric | iLyric.exe | iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button
|
| N | iM Start Center | iM_Tray.exe | Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner |
| X | Image | rundll32 image.dll, Install | CoolWebSearch parasite variant |
| Y | Image & Restore | IMAGE32.exe | Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run |
| U | ImageDrive-{hex numbers} | ImageDrive.exe | Nero ImageDrive from Ahead - virtual CD/DVD drive software |
| U | Imagefox | imagefox.exe | ImageFox 2.0 is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes |
| X | Imagemgt32 | Imagemgt32.exe | Added by the GEMA TROJAN! |
| N | imekrig | imekrig.exe | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
| N | IMEKRMIG6.1 | IMEKRMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
| N | Imesh | ?? | Imesh is a file sharing system |
| N | Imesh Auto Update | ?? | Update check for the Imesh file sharing system. Turn the update off under "options" |
| U | ImgIcon | ImgIcon.exe | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | ImgStart | ImgStart.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| N | imjpmig | IMJPMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese) |
| N | Imjpmig8.1 | IMJPMIG.EXE | Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese) |
| ? | immcheck.exe | immcheck.exe | Related to I-FORCE driver for force feedback steering wheel? |
| N | Imonitor | Plguni.exe | McAfee QuickClean 3.0 - removes internet clutter and unwanted programs |
| N | InCD | incd.exe | Ahead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk |
| N | IncMail | IncMail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| N | InControl Desktop Manager | DMHKEY.EXE | For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs |
| N | Incredimail | incredimail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| N | IndexSearch | IndexSearch.exe | Associated with PaperPort scanner software from ScanSoft |
| X | Inet Delivery | Intdel.exe | Spyware |
| X | Inet Delivery | intdel_2.exe | Spyware |
| X | Inetapi | Netapi.exe | Added by the NETDEVIL.14 TROJAN! |
| U | inetcntrl | inetcntrl.exe | Bsafe Online - internet filter |
| ? | InetConf | inetconf.exe | ?? |
| U | Inetd | INETD32.EXE | Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation |
| U | inetinfo.exe | inetinfo.exe | Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more) |
| X | inetmgr | inetmgr.exe | Actual Names (AdvSearch) Internet Keywords parasite |
| X | InetMSN | msnet.exe | Added by a variant of the SDBOT TROJAN! |
| U | Info Select | is.exe | Info Select from Micro Logic - personal information manager |
| X | Info32x | Info32x.exe | Added by the GEMA TROJAN! |
| ? | Infoplay.exe | Infoplay.exe | Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed? |
| U | Infra-red Monitor | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| X | infus | infus.exe | Adult content dialler |
| U | Infuzer | Infuzer.exe | Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities" |
| X | infwin | infwin.exe | Msview parasite variant |
| X | Initial Page | install.exe | EasySearch browser hijack installer
|
| Y | Initialize8x8 | 8x8_init.exe | Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay |
| N | Ink Monitor | InkMonitor.exe | Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
| N | InkWatch | InkWatch.exe | Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
| Y | InoRPC | InoRpc.exe | Associated with eTrust Antivirus/InoculateIT |
| Y | InoRT | InoRT9x.exe | Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here |
| U | InoTask | InoTask.exe | Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here |
| ? | insCOA5 | insCOA5.exe | ?? |
| ? | Install Pending Files | sifxinst.exe | Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required? |
| N | InstallAurealDemos | InstallAurealDemos.js | Used to initialize the Aureal A3D demos InstallShield wizard |
| U | InstallBuddy | Ibtna.exe | InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync |
| X | Installed shell32.dll | Office.exe... | Added by a variant of the LOVGATE WORM! |
| ? | InstallNAIProduct | SETUP.EXE | Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error? |
| X | Instant Access | rundll32.exe EGDHTML_1023.dll, InstantAccess | Adult content dialler related |
| N | Instant Update Center | reminder.exe | From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner |
| U | Instant Wireless Configuration Utility | WUSB11cfg.exe | Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration |
| N | InstantAccess | INSTAN~1.EXE | From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs |
| U | InstantDrive | InstantDrive.exe | Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer?s hard drive. Part of InstantCD/DVD burning software |
| X | InstantPleasure | instantpleasure.exe | Adult content dialler |
| X | InstantPleasureXXX | instantpleasurexxx.exe | Adult content dialler |
| X | instit | instit.bat | Added by the OPASERV.H WORM! |
| X | instit | INSTIT.BAT | Added by the OPASERV.K WORM! |
| ? | InstUtlR.exe | InstUtlR.exe | ?? |
| X | intdctrr | idctup20.exe | SafeSurfing parasite variant |
| U | Intel Active Monitor | imontray.exe | System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards |
| U | Intel File Transfer | xfr.exe | Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients |
| U | Intel PDS | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled |
| U | Intel Product Number Utility | IntelProcNumUtility.exe | Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
| N | Intel PROSet Tray Icon | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features |
| X | Intel system works | iis.exe | Added by the RBOT.QGA WORM! |
| X | InteliSys | smss.exe | Advertisingvision adware - file is located in C:Windows or C:Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup! |
| U | Intellitype | type32.exe | For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them |
| U | IntelMEM | IntelMEM.exe | Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line |
| U | IntelProcNumUtility | cpunumber.exe | Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
| N | Intel? Common User Interface | igfxtray.exe | Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel |
| ? | Intense Registry Service | IntEdReg.exe /CHECK | Intense Educational Ltd - Language Office Software. Is it required? |
| Y | InterCheck Monitor | Icmon.exe | Part of Sophos ant-virus sofware |
| X | Interdll | Interdll.exe | Added by the DELF family of TROJANS! |
| X | Internal | [trojan filename] | Added by the SMOTHER and TRANSLAT TROJANS! |
| X | Internal | regedit.exe /s %windir%c:[month number] | Added by the FORTNIGHT.D TROJAN! |
| X | InternalSystray | Kazza.exe | Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP) |
| X | internat | internat.exe | Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir% |
| X | Internat | systray.exe | Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process |
| X | Internat Conf | bootconf.exe | Homepage hijacker, redirecting to coolwwwsearch.com; see for example here |
| N | internat.exe | internat.exe | Language selection icon in system tray |
| X | Internat.exe | internat.exe | Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon |
| X | internct | WinSocks5.exe | Added by the GRAYBIRD.F TROJAN!
|
| U | Internet Answering Machine | IAMNET~1.EXE | From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access |
| X | Internet Config | svchosts.exe | Added by the SDBOT TROJAN! |
| X | Internet Connection Wizard | stisvsq.exe | EasySearch adware |
| U | Internet Download Accelerator | ida.exe | Internet Download Accelerator download manager
|
| X | Internet Exploere Services | urlmon32.dll.exe | Added by the EVIAN.C WORM! |
| X | Internet Explorer | iexplorer.exe | Added by the LORSIS WORM! Note - the legitimate IE (iexplore.exe) does not figure in Msconfig/Startup unless added manually and this loads from the "RunServices" key |
| X | Internet Explorer | IEXPLORE.EXE | Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Internet Explorer Updater | lexbac.exe | Added by the DOWNLOAD TROJAN! |
| X | Internet Explorer Updater | iexplorer.exe | Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) |
| U | Internet History Eraser | HERASER.exe | Internet History Eraser - deletes your browsing tracks |
| X | Internet Loader1 | MSInstall61.exe | Added by the KWBOT.B WORM! |
| X | Internet Mail and News | msqdevl.exe | EasySearch adware |
| U | Internet Optimizer | optimize.exe | Internet connection optimizer. Leave this enabled if you find it improves your connection |
| X | Internet Send | More log.exe | Unidentfied adware |
| X | Internet Service | intersvc.exe | Added by the SPYBOT-DE WORM! |
| X | Internet Services | systemdev.exe | Added by the SDBOT-PW WORM! |
| X | INTERNET SERVISES | winz32.exe | Added by the KWBOT.Z WORM! |
| Y | Internet Sharing Server | iss_srvr.exe | Intel AnyPoint internet sharing software |
| N | Internet Sweeper | Sweeper.exe | Internet Sweeper - removes unnecessart left over files after browsing the internet |
| U | Internet Timer | ITIMER.exe | Shareware dial-up connection call cost calculator from Ratsoft |
| X | Internet Washer Pro | iw.exe | Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003 |
| X | Internet.exe | Internet.exe | Added by the MAGICCALL VIRUS! |
| X | InternetWasherPro | iw.exe | Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003 |
| X | INTERNET_SERVISES | winz32.exe | Added by the SDBOT.Q TROJAN! |
| X | Internt | Internt.exe | Added by the PEEPER or CARUFAX.A TROJANS! |
| N | InterTrust Quick Start | it_cpq~1.exe | InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business |
| X | InterU | WINDRV.EXE | Added by the IRCINTER.A TROJAN! |
| N | Intervideo Win Cinema Manager | WinCinemaMgr.exe | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo Win Cinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo Win Cinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo WinCinema Manager | WINCIN~1.EXE | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| N | Intervideo WinScheduler | WinScheduler.exe | WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs |
| N | Intervideo WinScheduler | SchSvr.exe | WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs |
| U | InterWARN | interwarn.exe | InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs |
| X | Intmgr | Intmgr.exe | Added by the GEMA TROJAN! |
| X | Intrenat | Intrenat.exe | Added by the LEMIR.E TROJAN! |
| N | Introducing Media Manager | SPLASHA.EXE | MS Media Manager tour. Not required |
| N | Introduction-Registration | ?? | For Compaq PC's. Should only run first time, PC Introduction & Compaq registration |
| X | IntruderAlert | ia99.exe | Intruder Alert '99 from Bonzi - spyware |
| X | Ioadqm | Media Player.exe | Added by the HAWAWI WORM! |
| U | iolo Task Agent | Task_Agent.exe | iOlo System Mechanic Task Agent. Scheduled maintenance |
| U | Iomega Automatic Backup | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| U | Iomega Automatic Backup 1.0.1 | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| N | Iomega Backup Scheduler | dtiom98.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | Iomega Disk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| U | Iomega Drive Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| ? | Iomega QuickSync | Quicksync.exe | ?? |
| N | Iomega Startup Options | IMGSTART.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| N | Iomega Watch | IOWATCH.EXE | Used by Iomega drives. Available via Start -> Programs |
| N | IomegaWare | COMMANDER.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | Iomon98.exe | Iomon98.exe | PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang |
| X | IP Stack | ipstack.exe | Added by the AGOBOT.CW WORM! |
| N | iPalm | mon.exe | Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded |
| X | IPConfig | svcxnv32.exe | Added by the HACARMY.E TROJAN!
|
| X | IpCtrl | ipcon32.exe | Added by an unidentified VIRUS, WORM or TROJAN!
|
| X | IPInSightLAN 01 | ipclient.exe | Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resource - hence the "X" status |
| N | IPInSightMonitor 01 | ipmon32.exe | Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information |
| Y | IPinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| X | ipmon.exe | ipmon.exe | Added by the RECERV or R3C.B TROJANS! |
| U | iPodManager | iPodManager.exe | Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods |
| ? | iPodWatcher | iPodWatcher.exe | Associated with Apple's iPod MP3 player. Detects when the iPod is connected? |
| U | iProtectYou | ip.exe | iProtectYou - internet filtering/parental control and network monitoring software |
| Y | IPSecMon | IPSecMon.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| X | IPTable Configuration | Winipcfgs.exe | Added by a variant of the RBOT WORM! |
| ? | IPW | IPW.exe | ?? |
| ? | IQES.exe | iqes.exe | ?? |
| X | irc session | sessionmgr.exe | Added by the SDBOT-ACE WORM! |
| Y | IREIKE | IreIKE.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| N | iRis Active Monitor | winmon32.exe | Iris Antivirus - discontinued, replace with good alternative |
| N | iRiS AntiVirus Active Monitor | WIMMUN32.exe | Iris Antivirus - discontinued, replace with good alternative |
| N | iRiver Updater | Updater.exe | Updates for the iRiver Music Manager - used with their digital music players |
| U | IrMon | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| ? | IRPMonitor | itcnmon.exe | ?? |
| X | Irwftp | [path to trojan] | Added by the BANCOS.CR TROJAN! |
| X | irwftp | iexplorer.exe | Added by the BANKER-AN TROJAN! |
| U | IrXfer | IrXfer.exe | Microsoft Infrared Transfer application |
| X | ir_ftp | ir_ftp.exe | Added by the IRFTP TROJAN! |
| X | ir_ftp | irwftp.exe | Added by the BANCOS.H TROJAN! |
| N | IS CfgWiz | cfgwiz.exe | Norton Internet Security configuration wizard |
| X | Isass | Isass.exe | Added by the FUTRO TROJAN!
|
| N | isdbdc | isdbdc.exe | For Compaq PC's. May install properties in dial-up networking when you register with an ISP |
| N | ISDN Monitor | Linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| U | ISDNwatch | IWatch.exe | FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks" |
| N | ISLP2STA | ISLP2STA.EXE | Possibly a left over from Windows Update for wireless NIC (maybe Linksys) drivers? Not required though |
| U | iSpyNOW | ispynow.exe | iSpyNOW - remote monitoring and surveillance software |
| X | Israfel | Israfel.vbs | Added by the GAGGLE.D or GAGGLE.E WORMS! |
| U | ISStart | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| X | IST Service | istsvc.exe | ISTBar foistware |
| X | ist service uninstall | [random filename] | ISTBar parasite related |
| N | ISUSPM Startup | ISUSPM.exe | InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you?re always working with the most current version |
| N | ISUSScheduler | issch.exe | InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you?re always working with the most current version |
| U | Itk | Itk.exe | In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| U | iTouch | iTouch.exe | iTouch loads the iTouch configuration program for Logitech keyboards. It?s needed if your keyboard has shortcut buttons and if you use them. It?s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock |
| N | ItsDeductiblePopUp | ItsDeductible.exe | ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip |
| Y | iTunes Helper | iTunesHelper.exe | Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation |
| N | Iusage | netdet.exe | Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up |
| N | IW ControlCenter | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| U | iwctrl | iwctrl.exe | Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis |
| ? | IZE | N/A | ?? |
