| Status Code | Name | Command | Description |
| N | LXSUPMON | LXSUPMON.EXE | Lexmark Printer. The printer should work fine without it |
| X | LzioMediaUpdater | LzioMediaUpdater.exe | LZIO.com adware downloader |
| ? | LXBRKsk | LXBRKsk.exe | Lexmark printer related. What does it do and is it required?
|
| Y | lxbrbmgr | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation
|
| ? | LXBLKsk | LXBLKsk.exe | Lexmark related. What does it do, and is it required? |
| ? | LXbbmgr | LXbbmgr.exe | Lexmark printer button manager? Is it required? |
| N | Lwinst Run Profiler | lwtest.exe | Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs |
| ? | lxamsp32 | lxamsp32.exe | Associated with a Lexmark Printer - is it required? |
| U | LWBMOUSE | MOUSE32A.EXE | Mouse driver - required if you use non-standard Windows driver features |
| ? | LVCOMSX | LVCOMSX.EXE | Logitech webcam related. What does it do and is it required? |
| U | LWBMOUSE | lwbwheel.exe | Mouse driver - required if you use non-standard Windows driver features |
| U | LVComs | lvcoms.exe | Lvcomm server. Related to Logitech Quick Cam - works fine without it but it is needed for the Logitech ImageStudio software to connect to the camera |
| Y | LTWinModem1 | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| X | LTSMSG | Shell32.exe | Added by the LEMIR.B TROJAN! |
| U | LtMoh | Ltmoh.exe | Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet |
| Y | LTMSG | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| N | LTSMMSG | LTSMMSG.exe | Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too |
| X | LTM2 | bible.exe | Added by the LITMUS.203 TROJAN!
|
| X | LTM2 | winupdate.exe | Added by the LITMUS.203 TROJAN! |
| X | LTM2 | MSGSRV320.EXE | Added by the LITMUS.C TROJAN! |
| X | LTM2 | MPGSRV32.EXE | Added by the LITMUS.201 TROJAN! |
| X | LTM2 | MSGSRV32.EXE | Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem |
| X | LTDMgr | LTDMgr.exe | PowerStrip foistware |
| Y | LT DAEMON | ltdaemon.exe | Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used |
| X | LSvr | LSvr.exe | PowerStrip foistware |
| X | lssass | lssas.exe | Added by the AGOBOT.RL WORM! |
| X | LSPmonitor | LSPmonitor.exe | eAcceleration Stop-Sign related - foistware. Read their privacy statement here |
| X | LSPFix | LSPmonitor.exe | eAcceleration Stop-Sign related - foistware. Read their privacy statement here |
| X | lsasss.exe | lsasss.exe | Added by the SASSER.E WORM! |
| X | lsass service | lsass2.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | lsass | lsasrv.exe | Added by the MYDOOM.AG WORM!
|
| X | lsass | [path to lsass.exe] | Added by the ALADINZ.F TROJAN! Note - this is not the legitimate lasss.exe process which should NOT appear in Msconfig/Startup! |
| X | lsass | start.bat | Added by the ZCREW TROJAN! |
| X | lsass | lsass.exe | Added by the RATSOU.B TROJAN! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup! |
| N | LS120 Superdisk | ?? | Supposed to accelerate transfer rate on LS-120, contributes to system lockups |
| U | LPtask | lptask.exe | Program Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted |
| U | LPS | Lps.exe | Local Port Scanner - "With LPS you're able to check your computer for open or listening ports" |
| X | Lpr123 | Lpr123.exe | Added by an unidentified password stealer trojan |
| X | LowVersionSupport | [filename] | Added by the LASTRAS TROJAN! |
| U | Lotus SuiteStart | suitest.exe | Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs |
| N | Lotus QuickStart | smartctr.exe | Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs |
| N | Lotus Organizer EasyClip | easyclip.exe | "The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs |
| X | Lookup_Sys | lookupsys.exe | P04n trojan |
| Y | Look 'n' Stop | looknstop.exe | Look 'n' Stop personal firewall |
| U | LogWatch | logwat95.exe | Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied |
| X | Logon.exe | logon.exe | Homepage hijacker |
| U | LogonStudio | logonstudio.exe | WinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users" |
| U | Logi_Mwx | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | LogitechVideoTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| N | LogiTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| U | LogitechVideoRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| ? | LogitechSoftwareUpdate | ManifestEngine.exe | Updater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required |
| N | LogitechImageStudioTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| U | LogitechGalleryRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| N | Logitech Wakeup | lgwakeup.exe | Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images |
| U | Logitech Utility | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| ? | Logitech Hardware Abstraction Layer | Khalmnpr.exe | Logitech Bluetooth mouse Hardware Abstraction layer. A "hardware abstraction layer" is an interface that enables adding support for new devices and new ways of connecting devices to the computer, without modifying every application that uses the device. What does it do, and is it required? |
| N | Logitech Desktop Messenger | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | Logitech Desktop Messenger | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| X | LoginPassport | Lgnpsp32.exe | Added by the REDIST.C WORM! |
| X | Login Service | [path to file] | Added by the MIGMAF TROJAN! |
| U | Login | winlog.exe | Salfeld Child Control 2003 - parental control software |
| U | Lock My PC | lockpc.exe | Lock_My_PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen, disables Windows hot keys and mouse
|
| X | Local Page | http://find.naupoint.com | Naupoint browser hijacker |
| ? | LoadWatcher | Test.exe | Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct? |
| X | LoadWindowsFile | [filename] | Added by the DELF.B TROJAN! where [filename] is the infected file |
| X | loads.exe | suploads.exe | Popuppers.com adware downloader |
| X | LoadSIPS | rundll32.exe [path] SIPSPI32.dll, SIPSPI32 | 123Mania adware |
| X | loads.exe | medload.exe | Popuppers.com adware downloader |
| X | loads.exe | loads.exe | Popuppers.com adware downloader |
| X | LoadPowerProfile | Rundll32.exe | Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line |
| U | LoadQM | loadqm.exe | Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it |
| X | LoadPowerProfile | rundl.exe | Added by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| X | LoadPowerProfile | Rundll.exe powerprof.dll | Added by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe" |
| U | LoadPowerProfile | Rundll32.exe powrprof.dll | Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings |
| X | LoadPowerProfile | ASDAPI.EXE | Added by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| U | Loadout Manager | nost_LM.exe | Manager for the Belkin Nostromo n50 SpeedPad game controller - see here |
| X | LoadOrderVerification | [random filename] | Added by the TRON.A TROJAN! |
| N | LoadMSvcmm | msvcmm32.exe | Auto-update for Movielink - internet movie rental System Tray access |
| X | LoadManager | msload.exe | Added by the OPASERV.T WORM! |
| X | LoadingAgent | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadingAgent | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadHTML | rundll32.exe mshtmpre.dll, MShtmpre | Browser hijacker |
| X | LoadFonts | Tahoma.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | LoadFonts | LoadFonts.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | loader | WMPLAYER.EXE | Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup |
| X | loader | loader.exe | Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe |
| ? | LoadDvpApi9x | DVPAPI9X.exe | Part of Command AntiVirus for Windows 95/98/Me. Is it needed? |
| X | LoadDBackUp | BcTool.exe | Added by the GIBE WORM!
|
| Y | LoadBlackD | blackd.exe | This is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility) |
| ? | LoadBtnHnd | BtnHnd.exe | Fujitsu LifeBook related |
| X | load= | a1g.exe | Added by the ATAK.B WORM! |
| X | load= | dapdll.exe | Added by the ATAK.E WORM! |
| X | load= | win32exec.exe | Added by the BITTER WORM! |
| X | load= | hint.exe | Added by the ATAK WORM! |
| Y | load= | AICLIENT.EXE | Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system |
| ? | Load= | wtfeat.exe | Associated with the Wintab Digitizer |
| X | load= | Spoolsv.exe | Added by the CIADOOR.B TROJAN! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file |
| X | load= | msater.exe | Added by the RETSAM TROJAN! |
| X | load= | shambl3r.exe | Added by the REMABL WORM! |
| Y | load= | wpshrc.exe | Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others) |
| Y | load= | Bfrecv.exe | Bitware modem driver |
| ? | load= | WINOSCFG.EXE | Could it be something to do with configuring Windows on a new PC from an OEM supplier? |
| N | load= | vi_grm.exe | Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings |
| Y | load= | hotkey.exe | Solo 5300 display driver for Win2K on some Gateway laptops |
| N | load= | HPWHRC.EXE | Loads the Status Window software for the HP Laserjet printers |
| ? | load= | WPSLOAD.EXE | Windows printing system that comes with the setup for Canon BJC series on the manufacturer's disk |
| U | load= | esspk.exe | Speakerphone capability through a soundcard for an ESS modem |
| U | load= | asistat.exe | Status monitor for an NEC SuperScript printer |
| ? | load= | cfgsys32.exe | ?? |
| N | load= | adw30.exe | After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95 |
| X | load32 | 1111a.exe | Added by the DUMARU.AH WORM! |
| X | load32 | swchost.exe | Added by the TURTA.A WORM! |
| X | load32 | l32x.exe | Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM! |
| X | load32 | load32.exe | Added by the NIBU, BAMBO TROJANS and DUMARU WORM! |
| X | LOAD32 | Lorena.exe | Added by the MAPSON.C WORM! |
| X | Load-Guard | Wscript.exe LGuarg.exe.vbs | Added by the YENO.B and YENO.C WORMS! |
| U | LOAD WB | LOADWB.EXE | Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it |
| X | lnternet Explorer | AMSNDMGR.EXE | Added by the KWBOT.R WORM! Note that the "l" is a lower case "L" and not an upper case "I" |
| N | LMSTATUS | LMSTATUS.EXE | Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?) |
| N | LMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| ? | lmpdpsrv | lmpdpsrv.exe | Related to a Lexmark printer/scanner. Printer sharing server? Is it required? |
| U | LManager | QtZpAcer.exe | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
|
| U | LManager | QtZgAcer.EXE | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio |
| ? | LLMODCL2 | rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF | ?? |
| U | LiveUpdate | LiveUpdate.exe | Web-update utility as used by various types of software - see here |
| N | LiveNote | Livenote.exe | Asus graphics card driver live update feature |
| N | LiveMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| N | Live Menu | Dllcmd32.exe | eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here |
| N | LIU | Rubicon.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| N | LIU | LIU.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| U | LiquidView | lviewj.exe | "Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor" |
| X | Linux | Linux.vbs | Added by the LOVELETTER.AS VIRUS! |
| X | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| N | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| N | Line Speed Meter V3.0 | LineSpeedMeter.exe | LineSpeedMeter - detect the download and upload speed of your internet connection |
| N | LimeWire x.x | LimeWire.exe | LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware |
| U | Lightning Download | Lightning.exe | Lightning Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer
|
| N | LifeScape Media Detector | PicasaMediaDetector.exe | Media detector for Picasa's automatic photo organizer |
| U | LicCtrl | runservice.exe | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
|
| U | LicCtrl | rundll32.exe [path] MMFS.DLL, Service | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
|
| N | LicCrtl | runservice.exe | eLicense, licensing system incorporated with some software and games |
| X | li01f948 | rundll32.exe [path] li01f948.dll, EnableRunDLL32 | LZIO.com adware downloader |
| X | li-thund**** | li-thund****.exe | Adult web-dialler - **** is random |
| X | li-vita**** | li-vita****.exe | Adult web-dialler - **** is random |
| X | li-speed**** | dlres.exe | Adult web-dialler - **** is random |
| X | li-multi**** | li-multi****.exe | Adult web-dialler - **** is random |
| N | lhttseng | rundll32.exe ..lhttseng.inf, RemoveCabinet | Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine |
| U | LexStart | lexstart.exe | Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance |
| U | Lfsndmng | lfsndmng.exe | LightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents" |
| N | lexpps | lexpps.exe | For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges |
| N | LexmarkPrinTray | printray.exe | Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray |
| Y | Lexmark Xxx Button Monitor | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| Y | Lexmark Xxx Button Manager | AcBtnMgr_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| U | Lexmark X5100 Series | lxbabmgr.exe | System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| U | Lexmark X74-X75 | lxbabmgr.exe | System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| Y | Lexmark 3100 Series | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation
|
| N | LeechGet | LeechGet.exe | LeechGet download manager |
| X | LetsSearch | LetsSearch.exe | BrowserAid/BrowserPal foistware variant |
| U | LED TRAY | LEDTRAY.EXE | Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work |
| N | LDM | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | LDM | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| X | ld | ld.exe | CoolWebSearch parasite related - redirects to fastwebfinder.com |
| N | lcfep | lcfep.exe | Tivoli ?TME? System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally" |
| X | lcvga | lcvga.exe | Added by the HOSTOL-A TROJAN!
|
| Y | laxmsp32.exe | laxmsp32.exe | Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work |
| U | LCDC | LCDC.exe | LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins |
| U | Lavasoft Adwatch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| N | Launcher | relaunch.exe | Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs |
| X | Launcher | launcher.exe | Spyware component related to DownloadWare and found in Program FilesKFH |
| U | Launchboard | lnchbrd.exe | "LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions" |
| U | LaunchApp | Alaunch.exe | Acer Launch tool utility on laptops |
| U | LaunchAp | LaunchAp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| N | Launch YahooPOPs! at Windows startup | YAHOOPOPS.EXE | YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs |
| ? | Launcg | launcg.exe | ?? |
| U | LaunApp | LaunApp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| ? | Later | later.exe | ?? |
| Y | LASTinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| ? | Lasb | ewat.exe | ?? |
| X | LAsIAf32 | RePEAtLD.exe | Added by the REPEATLD WORM! |
| X | lar | [trojan filename] | Added by the ROXY.C TROJAN! |
| X | Lar | Llass.exe | Added by the INOR-A TROJAN! |
| U | LapLink scheduler | Llsched.exe | Utility that automatically performs file transfers as unattended background operations |
| X | LanGuard | languard.exe | Adware downloader |
| U | LanSpeed2 | LanSpeed2.exe | Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card) |
| X | LanGuard | languard.exe | Adware downloader |
| U | LanSpeed2 | LanSpeed2.exe | Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card) |
| U | LapLink scheduler | Llsched.exe | Utility that automatically performs file transfers as unattended background operations |
| X | Lar | Llass.exe | Added by the INOR-A TROJAN! |
| X | lar | [trojan filename] | Added by the ROXY.C TROJAN! |
| ? | Lasb | ewat.exe | ?? |
| X | LAsIAf32 | RePEAtLD.exe | Added by the REPEATLD WORM! |
| Y | LASTinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| ? | Later | later.exe | ?? |
| U | LaunApp | LaunApp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| ? | Launcg | launcg.exe | ?? |
| N | Launch YahooPOPs! at Windows startup | YAHOOPOPS.EXE | YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs |
| U | LaunchAp | LaunchAp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| U | LaunchApp | Alaunch.exe | Acer Launch tool utility on laptops |
| U | Launchboard | lnchbrd.exe | "LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions" |
| X | Launcher | launcher.exe | Spyware component related to DownloadWare and found in Program FilesKFH |
| N | Launcher | relaunch.exe | Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs |
| U | Lavasoft Adwatch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| Y | laxmsp32.exe | laxmsp32.exe | Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work |
| U | LCDC | LCDC.exe | LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins |
| N | lcfep | lcfep.exe | Tivoli ?TME? System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally" |
| X | lcvga | lcvga.exe | Added by the HOSTOL-A TROJAN!
|
| X | ld | ld.exe | CoolWebSearch parasite related - redirects to fastwebfinder.com |
| N | LDM | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | LDM | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| U | LED TRAY | LEDTRAY.EXE | Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work |
| N | LeechGet | LeechGet.exe | LeechGet download manager |
| X | LetsSearch | LetsSearch.exe | BrowserAid/BrowserPal foistware variant |
| Y | Lexmark 3100 Series | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation
|
| U | Lexmark X5100 Series | lxbabmgr.exe | System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| U | Lexmark X74-X75 | lxbabmgr.exe | System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| Y | Lexmark Xxx Button Manager | AcBtnMgr_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| Y | Lexmark Xxx Button Monitor | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| N | LexmarkPrinTray | printray.exe | Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray |
| N | lexpps | lexpps.exe | For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges |
| U | LexStart | lexstart.exe | Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance |
| U | Lfsndmng | lfsndmng.exe | LightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents" |
| N | lhttseng | rundll32.exe ..lhttseng.inf, RemoveCabinet | Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine |
| X | li-multi**** | li-multi****.exe | Adult web-dialler - **** is random |
| X | li-speed**** | dlres.exe | Adult web-dialler - **** is random |
| X | li-thund**** | li-thund****.exe | Adult web-dialler - **** is random |
| X | li-vita**** | li-vita****.exe | Adult web-dialler - **** is random |
| X | li01f948 | rundll32.exe [path] li01f948.dll, EnableRunDLL32 | LZIO.com adware downloader |
| N | LicCrtl | runservice.exe | eLicense, licensing system incorporated with some software and games |
| U | LicCtrl | rundll32.exe [path] MMFS.DLL, Service | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
|
| U | LicCtrl | runservice.exe | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program
|
| N | LifeScape Media Detector | PicasaMediaDetector.exe | Media detector for Picasa's automatic photo organizer |
| U | Lightning Download | Lightning.exe | Lightning Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer
|
| N | LimeWire x.x | LimeWire.exe | LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware |
| N | Line Speed Meter V3.0 | LineSpeedMeter.exe | LineSpeedMeter - detect the download and upload speed of your internet connection |
| N | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| X | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| X | Linux | Linux.vbs | Added by the LOVELETTER.AS VIRUS! |
| U | LiquidView | lviewj.exe | "Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor" |
| N | LIU | LIU.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| N | LIU | Rubicon.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| N | Live Menu | Dllcmd32.exe | eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here |
| N | LiveMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| N | LiveNote | Livenote.exe | Asus graphics card driver live update feature |
| U | LiveUpdate | LiveUpdate.exe | Web-update utility as used by various types of software - see here |
| ? | LLMODCL2 | rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF | ?? |
| U | LManager | QtZgAcer.EXE | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio |
| U | LManager | QtZpAcer.exe | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
|
| N | LMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| ? | lmpdpsrv | lmpdpsrv.exe | Related to a Lexmark printer/scanner. Printer sharing server? Is it required? |
| N | LMSTATUS | LMSTATUS.EXE | Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?) |
| X | lnternet Explorer | AMSNDMGR.EXE | Added by the KWBOT.R WORM! Note that the "l" is a lower case "L" and not an upper case "I" |
| U | LOAD WB | LOADWB.EXE | Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it |
| X | Load-Guard | Wscript.exe LGuarg.exe.vbs | Added by the YENO.B and YENO.C WORMS! |
| X | LOAD32 | Lorena.exe | Added by the MAPSON.C WORM! |
| X | load32 | load32.exe | Added by the NIBU, BAMBO TROJANS and DUMARU WORM! |
| X | load32 | l32x.exe | Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM! |
| X | load32 | 1111a.exe | Added by the DUMARU.AH WORM! |
| X | load32 | swchost.exe | Added by the TURTA.A WORM! |
| N | load= | adw30.exe | After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95 |
| U | load= | asistat.exe | Status monitor for an NEC SuperScript printer |
| ? | load= | cfgsys32.exe | ?? |
| U | load= | esspk.exe | Speakerphone capability through a soundcard for an ESS modem |
| Y | load= | hotkey.exe | Solo 5300 display driver for Win2K on some Gateway laptops |
| N | load= | HPWHRC.EXE | Loads the Status Window software for the HP Laserjet printers |
| ? | load= | WPSLOAD.EXE | Windows printing system that comes with the setup for Canon BJC series on the manufacturer's disk |
| N | load= | vi_grm.exe | Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings |
| ? | load= | WINOSCFG.EXE | Could it be something to do with configuring Windows on a new PC from an OEM supplier? |
| Y | load= | wpshrc.exe | Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others) |
| Y | load= | Bfrecv.exe | Bitware modem driver |
| X | load= | msater.exe | Added by the RETSAM TROJAN! |
| X | load= | shambl3r.exe | Added by the REMABL WORM! |
| X | load= | Spoolsv.exe | Added by the CIADOOR.B TROJAN! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file |
| ? | Load= | wtfeat.exe | Associated with the Wintab Digitizer |
| Y | load= | AICLIENT.EXE | Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system |
| X | load= | hint.exe | Added by the ATAK WORM! |
| X | load= | win32exec.exe | Added by the BITTER WORM! |
| X | load= | a1g.exe | Added by the ATAK.B WORM! |
| X | load= | dapdll.exe | Added by the ATAK.E WORM! |
| Y | LoadBlackD | blackd.exe | This is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility) |
| ? | LoadBtnHnd | BtnHnd.exe | Fujitsu LifeBook related |
| X | LoadDBackUp | BcTool.exe | Added by the GIBE WORM!
|
| ? | LoadDvpApi9x | DVPAPI9X.exe | Part of Command AntiVirus for Windows 95/98/Me. Is it needed? |
| X | loader | loader.exe | Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe |
| X | loader | WMPLAYER.EXE | Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup |
| X | LoadFonts | LoadFonts.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | LoadFonts | Tahoma.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | LoadHTML | rundll32.exe mshtmpre.dll, MShtmpre | Browser hijacker |
| X | LoadingAgent | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadingAgent | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadManager | msload.exe | Added by the OPASERV.T WORM! |
| N | LoadMSvcmm | msvcmm32.exe | Auto-update for Movielink - internet movie rental System Tray access |
| X | LoadOrderVerification | [random filename] | Added by the TRON.A TROJAN! |
| U | Loadout Manager | nost_LM.exe | Manager for the Belkin Nostromo n50 SpeedPad game controller - see here |
| X | LoadPowerProfile | ASDAPI.EXE | Added by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| U | LoadPowerProfile | Rundll32.exe powrprof.dll | Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings |
| X | LoadPowerProfile | Rundll.exe powerprof.dll | Added by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe" |
| X | LoadPowerProfile | rundl.exe | Added by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| X | LoadPowerProfile | Rundll32.exe | Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line |
| U | LoadQM | loadqm.exe | Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it |
| X | loads.exe | loads.exe | Popuppers.com adware downloader |
| X | loads.exe | medload.exe | Popuppers.com adware downloader |
| X | loads.exe | suploads.exe | Popuppers.com adware downloader |
| X | LoadSIPS | rundll32.exe [path] SIPSPI32.dll, SIPSPI32 | 123Mania adware |
| ? | LoadWatcher | Test.exe | Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct? |
| X | LoadWindowsFile | [filename] | Added by the DELF.B TROJAN! where [filename] is the infected file |
| X | Local Page | http://find.naupoint.com | Naupoint browser hijacker |
| U | Lock My PC | lockpc.exe | Lock_My_PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen, disables Windows hot keys and mouse
|
| U | Login | winlog.exe | Salfeld Child Control 2003 - parental control software |
| X | Login Service | [path to file] | Added by the MIGMAF TROJAN! |
| X | LoginPassport | Lgnpsp32.exe | Added by the REDIST.C WORM! |
| N | Logitech Desktop Messenger | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | Logitech Desktop Messenger | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| ? | Logitech Hardware Abstraction Layer | Khalmnpr.exe | Logitech Bluetooth mouse Hardware Abstraction layer. A "hardware abstraction layer" is an interface that enables adding support for new devices and new ways of connecting devices to the computer, without modifying every application that uses the device. What does it do, and is it required? |
| U | Logitech Utility | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | Logitech Wakeup | lgwakeup.exe | Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images |
| U | LogitechGalleryRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| N | LogitechImageStudioTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| ? | LogitechSoftwareUpdate | ManifestEngine.exe | Updater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required |
| U | LogitechVideoRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| N | LogitechVideoTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| N | LogiTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| U | Logi_Mwx | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| X | Logon.exe | logon.exe | Homepage hijacker |
| U | LogonStudio | logonstudio.exe | WinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users" |
| U | LogWatch | logwat95.exe | Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied |
| Y | Look 'n' Stop | looknstop.exe | Look 'n' Stop personal firewall |
| X | Lookup_Sys | lookupsys.exe | P04n trojan |
| N | Lotus Organizer EasyClip | easyclip.exe | "The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs |
| N | Lotus QuickStart | smartctr.exe | Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs |
| U | Lotus SuiteStart | suitest.exe | Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs |
| X | LowVersionSupport | [filename] | Added by the LASTRAS TROJAN! |
| X | Lpr123 | Lpr123.exe | Added by an unidentified password stealer trojan |
| U | LPS | Lps.exe | Local Port Scanner - "With LPS you're able to check your computer for open or listening ports" |
| U | LPtask | lptask.exe | Program Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted |
| N | LS120 Superdisk | ?? | Supposed to accelerate transfer rate on LS-120, contributes to system lockups |
| X | lsass | lsass.exe | Added by the RATSOU.B TROJAN! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup! |
| X | lsass | start.bat | Added by the ZCREW TROJAN! |
| X | lsass | [path to lsass.exe] | Added by the ALADINZ.F TROJAN! Note - this is not the legitimate lasss.exe process which should NOT appear in Msconfig/Startup! |
| X | lsass | lsasrv.exe | Added by the MYDOOM.AG WORM!
|
| X | lsass service | lsass2.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | lsasss.exe | lsasss.exe | Added by the SASSER.E WORM! |
| X | LSPFix | LSPmonitor.exe | eAcceleration Stop-Sign related - foistware. Read their privacy statement here |
| X | LSPmonitor | LSPmonitor.exe | eAcceleration Stop-Sign related - foistware. Read their privacy statement here |
| X | lssass | lssas.exe | Added by the AGOBOT.RL WORM! |
| X | LSvr | LSvr.exe | PowerStrip foistware |
| Y | LT DAEMON | ltdaemon.exe | Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used |
| X | LTDMgr | LTDMgr.exe | PowerStrip foistware |
| X | LTM2 | MSGSRV32.EXE | Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem |
| X | LTM2 | MPGSRV32.EXE | Added by the LITMUS.201 TROJAN! |
| X | LTM2 | MSGSRV320.EXE | Added by the LITMUS.C TROJAN! |
| X | LTM2 | winupdate.exe | Added by the LITMUS.203 TROJAN! |
| X | LTM2 | bible.exe | Added by the LITMUS.203 TROJAN!
|
| U | LtMoh | Ltmoh.exe | Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet |
| Y | LTMSG | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| N | LTSMMSG | LTSMMSG.exe | Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too |
| X | LTSMSG | Shell32.exe | Added by the LEMIR.B TROJAN! |
| Y | LTWinModem1 | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| U | LVComs | lvcoms.exe | Lvcomm server. Related to Logitech Quick Cam - works fine without it but it is needed for the Logitech ImageStudio software to connect to the camera |
| ? | LVCOMSX | LVCOMSX.EXE | Logitech webcam related. What does it do and is it required? |
| U | LWBMOUSE | lwbwheel.exe | Mouse driver - required if you use non-standard Windows driver features |
| U | LWBMOUSE | MOUSE32A.EXE | Mouse driver - required if you use non-standard Windows driver features |
| N | Lwinst Run Profiler | lwtest.exe | Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs |
| ? | lxamsp32 | lxamsp32.exe | Associated with a Lexmark Printer - is it required? |
| ? | LXbbmgr | LXbbmgr.exe | Lexmark printer button manager? Is it required? |
| ? | LXBLKsk | LXBLKsk.exe | Lexmark related. What does it do, and is it required? |
| Y | lxbrbmgr | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation
|
| ? | LXBRKsk | LXBRKsk.exe | Lexmark printer related. What does it do and is it required?
|
| N | LXSUPMON | LXSUPMON.EXE | Lexmark Printer. The printer should work fine without it |
| X | LzioMediaUpdater | LzioMediaUpdater.exe | LZIO.com adware downloader |