| Status Code | Name | Command | Description |
| X | Bymer.Scanner | Msinit.exe | Added by the BYMER WORM! |
| X | Bymer.Scanner | Wininit.exe | Added by the BYMER WORM! |
| X | bxxs5 | RunDLL32.EXE bxxs5.dll, dllrun | BookedSpace parasite |
| X | bxsx5 | RunDLL32.EXE bsx5.dll | BookedSpace parasite variant |
| U | Buzof.exe | buzof.exe | Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes" |
| N | Buzme | Bmui.exe | Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem |
| N | ButtonKey | ButtonKey.exe | CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut |
| U | Button Server | bttnserv.exe | Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required |
| N | BurnQuick Queue | BQTray.exe | System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
| ? | BullsEye Tracker | BeTrack.exe | Bullseye - intelligent research assistant |
| X | BullsEye Network | bargains.exe | BargainBuddy foistware |
| Y | BullguardoptIn | bulldownload.exe | Part of Bullguard antivirus |
| Y | BullGuardInit | AVXINIT.EXE | Part of Bullguard antivirus |
| Y | BullGuard XComm | XCOMMSVR.EXE | Part of Bullguard antivirus |
| Y | BullGuard | mgui.exe | Part of Bullguard antivirus |
| U | BullGuard Update | avxlive.exe | Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions |
| X | BuildLabs | csrss.exe | Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| U | Bulldog Service | upsd.exe | Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link |
| X | BuildLab | winlogon.exe | Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| X | BuildLab | services.exe | Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| ? | BuildBU | bldbubg.exe | Found on a Dell machine?? |
| N | Buddyizer | Buddyizer.exe | Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network |
| U | bugwatcher service | bugwatcher.exe | Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures |
| X | BTV | btv.exe | BroadcastPC adware variant |
| Y | BTUSRBDGF | BtUsrBdg.exe | Used with a Mitsumi USB Bluetooth adaptor |
| U | bttray | bttray.exe | System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device |
| U | BtStart | btstart.exe | Broadcorp (formerly WIDCOMM) Bluetooth Connectivity Software |
| ? | btinst | btinst.exe | Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
| U | BT Broadband Help | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide |
| X | Bsx3 | Rundll32.exe bs3.dll, DllRun | BookedSpace parasite variant |
| X | Bsoft lppt01 | Bsoft.exe | New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | BrowserWebCheck | loadwc.exe | Checks to make sure that IE is still your default browser |
| X | Browser Pal | adblck.exe | BrowserAid/BrowserPal foistware |
| U | Browser Sentinel | BrowserSentinel.exe | Browser Sentinel. Notifies you if a program wants to penetrate into Internet explorer, add itself to the Windows auto-run list or change your home page. See here |
| U | Browser Launcher | Commandr.exe | Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys |
| Y | Browser Hijack Blaster | bhblaster.exe | Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings |
| X | browser aid | browseraid.exe | BrowserAid/BrowserPal foistware |
| N | BrowseProxy | FindService.exe | Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you" |
| N | Broadband Wizard | bbwiz.exe | Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs |
| Y | Brindys BriTray | BRITRAY.EXE | Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired |
| X | Bridge | rundll32.exe ...Bridge.dll | Flingstone.com browser hijacker |
| X | Breg | bcre.exe | BroadcastPC adware variant |
| U | Break_Reminder | BREAK REMINDER.exe | Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here |
| X | BrasilOld | [worm filename] | Added by the OPASERV.P WORM! |
| X | Brasil | BRASIL.PIF | Added by the OPASERV.E WORM! |
| X | Brasil | Brasil.exe | Added by the OPASERV.E WORM! |
| U | BQTray.exe | BQTray.exe | System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
| N | BPServer | G6FTPSrv.exe | BulletProof FTP Server |
| U | BPK | bpk.exe | Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove |
| U | bpcpost.exe | bpcpost.exe | MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| X | Bouncer RunStartup | LiveUpdate.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| X | Bouncer RunStartup | bouncer.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| ? | Boston | Boston.exe | Part of the Boston Acoustics USB speaker systems. What does it do and is it required? |
| N | Bose Wave/PC Monitor | wavepcmonitor.exe | System Tray access for this system (more info on the system here). Available via Start -> Programs |
| U | BootWarn | BootWarn.exe | From here: "Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from ?Start Programs Norton AntiVirus?. If Norton AntiVirus comes up without problems, then fix this entry from the Msconfig Startup tab ? it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages" |
| U | BootStatus | BOOTST~1.EXE | Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources |
| X | BootLoader | BootLoader.exe.vbs | Added by the WATERWORKS WORM! |
| X | Boot Manager | Njgal.exe | Added by the KILO TROJAN! |
| U | Boost XP Service | bxservice.exe | Boost XP from Systweak - WinXP tweaking utility |
| X | boot | boot.exe | Added by the ELEM TROJAN! |
| X | BookedSpace | bs2.dll,DllRun | Adware, related to the Remanent parasite |
| N | BookmarkCentral | BMLauncher.exe | Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use" |
| X | Bonzi Buddy | ?? | Spyware - read here for information and here for removal instructions |
| U | bombshel | BOMB32.EXE | Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems |
| Y | BOCleanautostart | Boclean.exe | NSClean's BOClean anti-trojan software |
| X | Bndt32 | Bndt32.exe | Added by the LACON WORM! |
| X | Bnexe | [random filename] | Added by the KITRO.D (or ARGEN.A) WORM! |
| X | BMZ | bmz.exe | nCase adware |
| N | BMupdate | BMupdate.exe | Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install |
| U | BMO MasterCard Wallet | EWALLET.EXE | The wallet conveniently stores billing, shipping and payment information on your PC |
| U | BMMLREF | BMMLREF.EXE | Battery Manager for IBM ThinkPad laptops |
| U | BMMGAG | Rundll32 PWRMONIT.DLL, StartPwrMonitor | Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window |
| N | BMail Installation | FTP_back.exe | Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not |
| U | BlueToothAuthentication Agent | rundll32.exe irprops.cpl, BluetoothAuthenticationAgent | Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig |
| N | BLSTAPP | blstapp.exe | Puts access to Creative's BlasterControl in the System Tray |
| U | BlueToothAuthentication Agent | RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent | Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup |
| X | blss | blss.exe | Added by the BLARUL TROJAN! |
| N | BlockTracker | BlockTracker.exe | If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file |
| U | BlockAds | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| ? | bldbubg | bldbubg.exe | Found on a Dell machine?? |
| X | BLMessagingIntegration | blengine.exe | BuddyLinks adware |
| N | BlazeChanger | FBZPaper.exe | Ember graphic file viewer, manager, and touch-up system |
| X | blah service | msnmsgrr.exe | Added by the RBOT.PZ WORM! |
| X | blah service | smnp.exe | Added by the RBOT.IZ WORM!
|
| X | blah service | internet.exe | Added by a variant of the RBOT WORM!
|
| X | blah service | winsysengine.exe | Added by the RBOT-KI WORM! |
| X | blah service | winupdate.exe | Added by the GAOBOT.BIA WORM! |
| U | blads | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| N | BlackIce Utility | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| N | BlackICE PC Protection | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| N | bjcfd | cdf.exe | BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs |
| N | BJ Status Monitor 5xx | CJSTRxx.EXE | Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers |
| N | BJ Printer Status Monitor | Cjstsr.exe | Canon BJ printer status monitor |
| N | BitWare Print Monitor | bwprnmon.exe | FaxServe network fax software |
| U | BitDefender_P2P_Startup | BitDefender_P2P_Startup.exe | Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually |
| Y | bitdefenderlive | avxlive.exe | Main program of BitDefender virus scanner/firewall |
| Y | BitDefender Scan Server | bdss.exe | BitDefender antivirus |
| Y | BitDefender Virus Shield | vsserv.exe | BitDefender antivirus |
| Y | BitDefender Live! Init | bdinit.exe | BitDefender antivirus |
| U | BitDefender for Yahoo! Messenger | yahmon.exe | BitDefender Antivirus for Yahoo! Messenger - free AV add-on for Yahoo! Messenger |
| U | BitDefender for MSN Messenger | msnmon.exe | Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually |
| ? | BIOVCIP | BIOVCIP.exe | ?? |
| Y | BitDefender Communicator | xcommsvr.exe | BitDefender antivirus |
| X | BIOS1 | BIOS1.EXE | Added by the OPASERV.T WORM! |
| X | Bios | Bios32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| ? | Bingo Charm | charms.exe | Some kind of screen icon kind of like desk flag, but it gives you a choice of icons? |
| X | bingdian | Bingdian.vbs | Added by the BINGD WORM! |
| X | bin32hpu | ppstub.exe | PrecisionPop adware |
| N | Billminder | Billmind.exe | Can be setup in Quicken to remind user of due payments. Available via Start -> Programs |
| N | BigPondCable | bpcable.exe | Telstra Bigpond Cable login software - can be started manually
|
| U | BigPond Toolbar | bpumTray.exe | Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier" |
| N | bigfix | BIGFIX.EXE | BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet? Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog |
| X | BIE | Rundll32.exe BDSrHook.dll, Rundll32 | BDplugin parasite |
| U | BHODemon 2.0 | BHODemon.exe | BHODemon "protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. When running, it also monitors your Registry and alerts you when a BHO is installed. Best of all, BHODemon knows about the most common BHOs - the good ones, and the not-so-good ones!". If you prefer forgoing resident protection, the application can also be run on demand |
| N | BHOCop | BHOCop.exe | ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware |
| N | bgsmsnd | bgsmsnd.exe | Printer driver to generate PDF files from any program |
| Y | BGNewsAgent | bgnewsag.exe | BullGuard antivirus updater
|
| U | BGInfo | Bginfo.exe | BGinfo automatically displays relevant information about a Windows computer on the desktop's background, such as the computer name, IP address, service pack version, and more |
| Y | bg | bullguard.exe | Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster |
| N | BestPopUpKiller | BestPopupKiller.exe | Popup killer of dubious repute by SwankSoft.com. For more info about the company, do a search for 'SwankSoft' on this web page on "Rogue/Suspect Anti-Spyware Products & Web Sites" |
| X | Belt | Belt.exe | Abetterinternet adware related |
| X | Benadril Alert Tool | benadrilalert.exe | Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril |
| ? | Belsta.exe | Belsta.exe | Configuration tool for Belkin wireless network cards. Required to change the card?s configuration. Is it required for correct operation once the confuiguration is changed? |
| ? | BELORVBI | BELORVBI.exe | ?? |
| ? | BEHLO | BEHLO.exe | ?? |
| ? | BEHL | BEHL.exe | ?? |
| ? | BEEI | beei.exe | ?? |
| N | BearShare | bearshare.exe | BearShare file sharing client. Versions known to include spyware - see here |
| Y | BDSwitchAgent | bdswitch.exe | Bitdefender 8 antivirus and firewall |
| Y | BDOESRV | bdoesrv.exe | Bitdefender 8 antivirus and firewall |
| Y | BDNewsAgent | bdnagent.exe | BitDefender antivirus - updater |
| Y | BDMCon | Bdmcon.exe | BitDefender antivirus |
| N | BCWipeTM | bcwipetm.exe | BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed |
| N | Bcvsrv32 | bcvsrv32.exe | Added by the GAOBOT.BQJ WORM!
|
| X | bcpc_c | bcpc_c.exe | BroadcastPC adware variant |
| U | BCTweak | bctweak.exe | BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
| X | BCPC | bcpc.exe | BroadcastPC adware variant |
| N | BCNT | bcnt.exe | AWS Weatherbug related. What does it do? |
| ? | bcmwltry | bcmwltry.exe | Broadcom Corporation Wireless Network Tray Applet. Is it required? |
| Y | BCMSMMSG | BCMSMMSG.exe | BCM voicemodem driver. Required for dial-up if you have one of these modems |
| U | BCMHal | rundll32.exe bcmhal9x.dll, bcinit | BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
| Y | BCMDMMSG | bcmdmmsg.exe | BCM voicemodem driver. Required for dial-up if you have one of these modems |
| U | BCDetect | bcdetect.exe | Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see |
| U | bca | bca.exe | BeClean Agent - registry, history, temp files, etc cleaner |
| U | bbui | bbui.exe | AOL DSL status monitor displaying a red/green icon indicating if you have a connection |
| N | bbSysTray | bbSysTray.exe | Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions" |
| ? | BBDial | BT Broadband.exe | Part of BT Broandband - is it required? |
| U | Bayswap2 | TbUpdate.exe | Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
| U | Bayswap | bayswap.exe | Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
| U | BayMgr | DockApp.exe | Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices |
| X | bawindo | bawindo.exe | Added by the BEAGLE.AR or BEAGLE.AU WORMS! |
| U | BAUSB | BAUSB.exe | Boston Acoustics Audio, USB driver |
| X | BatzBack | BatzBack.scr | Added by the BACKZAT WORM! |
| U | BatteryBar | batterybar.exe | BatteryBar - displays battery usage, and the current percentage of battery power left |
| U | BatInfEx | rundll32.exe | Displays battery status information on an IBM Thinkpad |
| U | Battery Scope | batmgr.exe | Monitors battery levels on a notebook/laptop PC |
| X | Bat | secure2.bat | Added by the ZCREW.C TROJAN! |
| N | Batchreg1 | N/A | Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here |
| ? | Bart Station | station.sbrt | Related to PeoplePC ISP. May be a dialler for dial-up accounts? |
| X | bargains | bargainbuddy.exe | BargainBuddy foistware |
| X | bargains | bargains.exe | BargainBuddy foistware |
| U | Banpopup by Pratik | Banpopup.exe | Banpopup - popup killer |
| X | Bakra | IEHost.EXE | IEDriver adware variant |
| X | BagleAV | csrss.exe | Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | BADDATE | BADDATE.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| N | BacsTray | BacsTray.exe | Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
| U | BACPI10 | bacpi10a.exe | Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray |
| N | Backwork | Backwork.exe | Backwork trojan detector |
| N | BackWeb | backweb.exe | Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs |
| ? | BackupNotify | backupnotify.exe | HP Digital Imaging related. What does it do and is it required? |
| U | BackupExecScheduler | besch.exe | Veritas "Back Up My PC" software |
| N | Backpack UDF | bpudfmon.exe | Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk |
| U | BackgroundSwitcher | bgswitch.exe | Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here |
| N | Babylon Translator | Babylon.exe | "Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on" |
| X | babeie | rundll32 cnbabe.dll, dllstartup | CommonName Toolbar spyware. To uninstall see here |
| X | b99 | msmm.exe | ClientMan parasite variant |
| U | b9 | B9.exe | FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run" |
| X | b3dUpdate | Zupdate.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | b3d | BDEsecureinstall.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| N | B.Reader | remin.exe | Birthday Reminder 5.0 - as the name implies |
| N | B'sCLiP | BSCLIP.exe | CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
| N | B'sCLiP | BSCLIP.exe | CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
| N | B.Reader | remin.exe | Birthday Reminder 5.0 - as the name implies |
| X | b3d | BDEsecureinstall.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | b3dUpdate | Zupdate.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| U | b9 | B9.exe | FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run" |
| X | b99 | msmm.exe | ClientMan parasite variant |
| X | babeie | rundll32 cnbabe.dll, dllstartup | CommonName Toolbar spyware. To uninstall see here |
| N | Babylon Translator | Babylon.exe | "Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on" |
| U | BackgroundSwitcher | bgswitch.exe | Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here |
| N | Backpack UDF | bpudfmon.exe | Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk |
| U | BackupExecScheduler | besch.exe | Veritas "Back Up My PC" software |
| ? | BackupNotify | backupnotify.exe | HP Digital Imaging related. What does it do and is it required? |
| N | BackWeb | backweb.exe | Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs |
| N | Backwork | Backwork.exe | Backwork trojan detector |
| U | BACPI10 | bacpi10a.exe | Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray |
| N | BacsTray | BacsTray.exe | Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
| X | BADDATE | BADDATE.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | BagleAV | csrss.exe | Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | Bakra | IEHost.EXE | IEDriver adware variant |
| U | Banpopup by Pratik | Banpopup.exe | Banpopup - popup killer |
| X | bargains | bargains.exe | BargainBuddy foistware |
| X | bargains | bargainbuddy.exe | BargainBuddy foistware |
| ? | Bart Station | station.sbrt | Related to PeoplePC ISP. May be a dialler for dial-up accounts? |
| X | Bat | secure2.bat | Added by the ZCREW.C TROJAN! |
| N | Batchreg1 | N/A | Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here |
| U | BatInfEx | rundll32.exe | Displays battery status information on an IBM Thinkpad |
| U | Battery Scope | batmgr.exe | Monitors battery levels on a notebook/laptop PC |
| U | BatteryBar | batterybar.exe | BatteryBar - displays battery usage, and the current percentage of battery power left |
| X | BatzBack | BatzBack.scr | Added by the BACKZAT WORM! |
| U | BAUSB | BAUSB.exe | Boston Acoustics Audio, USB driver |
| X | bawindo | bawindo.exe | Added by the BEAGLE.AR or BEAGLE.AU WORMS! |
| U | BayMgr | DockApp.exe | Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices |
| U | Bayswap | bayswap.exe | Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
| U | Bayswap2 | TbUpdate.exe | Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices |
| ? | BBDial | BT Broadband.exe | Part of BT Broandband - is it required? |
| N | bbSysTray | bbSysTray.exe | Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions" |
| U | bbui | bbui.exe | AOL DSL status monitor displaying a red/green icon indicating if you have a connection |
| U | bca | bca.exe | BeClean Agent - registry, history, temp files, etc cleaner |
| U | BCDetect | bcdetect.exe | Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see |
| Y | BCMDMMSG | bcmdmmsg.exe | BCM voicemodem driver. Required for dial-up if you have one of these modems |
| U | BCMHal | rundll32.exe bcmhal9x.dll, bcinit | BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
| Y | BCMSMMSG | BCMSMMSG.exe | BCM voicemodem driver. Required for dial-up if you have one of these modems |
| ? | bcmwltry | bcmwltry.exe | Broadcom Corporation Wireless Network Tray Applet. Is it required? |
| N | BCNT | bcnt.exe | AWS Weatherbug related. What does it do? |
| X | BCPC | bcpc.exe | BroadcastPC adware variant |
| X | bcpc_c | bcpc_c.exe | BroadcastPC adware variant |
| U | BCTweak | bctweak.exe | BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings |
| N | Bcvsrv32 | bcvsrv32.exe | Added by the GAOBOT.BQJ WORM!
|
| N | BCWipeTM | bcwipetm.exe | BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed |
| Y | BDMCon | Bdmcon.exe | BitDefender antivirus |
| Y | BDNewsAgent | bdnagent.exe | BitDefender antivirus - updater |
| Y | BDOESRV | bdoesrv.exe | Bitdefender 8 antivirus and firewall |
| Y | BDSwitchAgent | bdswitch.exe | Bitdefender 8 antivirus and firewall |
| N | BearShare | bearshare.exe | BearShare file sharing client. Versions known to include spyware - see here |
| ? | BEEI | beei.exe | ?? |
| ? | BEHL | BEHL.exe | ?? |
| ? | BEHLO | BEHLO.exe | ?? |
| ? | BELORVBI | BELORVBI.exe | ?? |
| ? | Belsta.exe | Belsta.exe | Configuration tool for Belkin wireless network cards. Required to change the card?s configuration. Is it required for correct operation once the confuiguration is changed? |
| X | Belt | Belt.exe | Abetterinternet adware related |
| X | Benadril Alert Tool | benadrilalert.exe | Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril |
| N | BestPopUpKiller | BestPopupKiller.exe | Popup killer of dubious repute by SwankSoft.com. For more info about the company, do a search for 'SwankSoft' on this web page on "Rogue/Suspect Anti-Spyware Products & Web Sites" |
| Y | bg | bullguard.exe | Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster |
| U | BGInfo | Bginfo.exe | BGinfo automatically displays relevant information about a Windows computer on the desktop's background, such as the computer name, IP address, service pack version, and more |
| Y | BGNewsAgent | bgnewsag.exe | BullGuard antivirus updater
|
| N | bgsmsnd | bgsmsnd.exe | Printer driver to generate PDF files from any program |
| N | BHOCop | BHOCop.exe | ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware |
| U | BHODemon 2.0 | BHODemon.exe | BHODemon "protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. When running, it also monitors your Registry and alerts you when a BHO is installed. Best of all, BHODemon knows about the most common BHOs - the good ones, and the not-so-good ones!". If you prefer forgoing resident protection, the application can also be run on demand |
| X | BIE | Rundll32.exe BDSrHook.dll, Rundll32 | BDplugin parasite |
| N | bigfix | BIGFIX.EXE | BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet? Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog |
| U | BigPond Toolbar | bpumTray.exe | Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier" |
| N | BigPondCable | bpcable.exe | Telstra Bigpond Cable login software - can be started manually
|
| N | Billminder | Billmind.exe | Can be setup in Quicken to remind user of due payments. Available via Start -> Programs |
| X | bin32hpu | ppstub.exe | PrecisionPop adware |
| X | bingdian | Bingdian.vbs | Added by the BINGD WORM! |
| ? | Bingo Charm | charms.exe | Some kind of screen icon kind of like desk flag, but it gives you a choice of icons? |
| X | Bios | Bios32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | BIOS1 | BIOS1.EXE | Added by the OPASERV.T WORM! |
| ? | BIOVCIP | BIOVCIP.exe | ?? |
| Y | BitDefender Communicator | xcommsvr.exe | BitDefender antivirus |
| U | BitDefender for MSN Messenger | msnmon.exe | Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually |
| U | BitDefender for Yahoo! Messenger | yahmon.exe | BitDefender Antivirus for Yahoo! Messenger - free AV add-on for Yahoo! Messenger |
| Y | BitDefender Live! Init | bdinit.exe | BitDefender antivirus |
| Y | BitDefender Scan Server | bdss.exe | BitDefender antivirus |
| Y | BitDefender Virus Shield | vsserv.exe | BitDefender antivirus |
| Y | bitdefenderlive | avxlive.exe | Main program of BitDefender virus scanner/firewall |
| U | BitDefender_P2P_Startup | BitDefender_P2P_Startup.exe | Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually |
| N | BitWare Print Monitor | bwprnmon.exe | FaxServe network fax software |
| N | BJ Printer Status Monitor | Cjstsr.exe | Canon BJ printer status monitor |
| N | BJ Status Monitor 5xx | CJSTRxx.EXE | Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers |
| N | bjcfd | cdf.exe | BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs |
| N | BlackICE PC Protection | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| N | BlackIce Utility | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| U | blads | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| X | blah service | winupdate.exe | Added by the GAOBOT.BIA WORM! |
| X | blah service | winsysengine.exe | Added by the RBOT-KI WORM! |
| X | blah service | internet.exe | Added by a variant of the RBOT WORM!
|
| X | blah service | smnp.exe | Added by the RBOT.IZ WORM!
|
| X | blah service | msnmsgrr.exe | Added by the RBOT.PZ WORM! |
| N | BlazeChanger | FBZPaper.exe | Ember graphic file viewer, manager, and touch-up system |
| ? | bldbubg | bldbubg.exe | Found on a Dell machine?? |
| X | BLMessagingIntegration | blengine.exe | BuddyLinks adware |
| U | BlockAds | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| N | BlockTracker | BlockTracker.exe | If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file |
| X | blss | blss.exe | Added by the BLARUL TROJAN! |
| N | BLSTAPP | blstapp.exe | Puts access to Creative's BlasterControl in the System Tray |
| U | BlueToothAuthentication Agent | RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent | Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup |
| U | BlueToothAuthentication Agent | rundll32.exe irprops.cpl, BluetoothAuthenticationAgent | Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig |
| N | BMail Installation | FTP_back.exe | Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not |
| U | BMMGAG | Rundll32 PWRMONIT.DLL, StartPwrMonitor | Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window |
| U | BMMLREF | BMMLREF.EXE | Battery Manager for IBM ThinkPad laptops |
| U | BMO MasterCard Wallet | EWALLET.EXE | The wallet conveniently stores billing, shipping and payment information on your PC |
| N | BMupdate | BMupdate.exe | Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install |
| X | BMZ | bmz.exe | nCase adware |
| X | Bndt32 | Bndt32.exe | Added by the LACON WORM! |
| X | Bnexe | [random filename] | Added by the KITRO.D (or ARGEN.A) WORM! |
| Y | BOCleanautostart | Boclean.exe | NSClean's BOClean anti-trojan software |
| U | bombshel | BOMB32.EXE | Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems |
| X | Bonzi Buddy | ?? | Spyware - read here for information and here for removal instructions |
| X | BookedSpace | bs2.dll,DllRun | Adware, related to the Remanent parasite |
| N | BookmarkCentral | BMLauncher.exe | Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use" |
| U | Boost XP Service | bxservice.exe | Boost XP from Systweak - WinXP tweaking utility |
| X | boot | boot.exe | Added by the ELEM TROJAN! |
| X | Boot Manager | Njgal.exe | Added by the KILO TROJAN! |
| X | BootLoader | BootLoader.exe.vbs | Added by the WATERWORKS WORM! |
| U | BootStatus | BOOTST~1.EXE | Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources |
| U | BootWarn | BootWarn.exe | From here: "Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from ?Start Programs Norton AntiVirus?. If Norton AntiVirus comes up without problems, then fix this entry from the Msconfig Startup tab ? it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages" |
| N | Bose Wave/PC Monitor | wavepcmonitor.exe | System Tray access for this system (more info on the system here). Available via Start -> Programs |
| ? | Boston | Boston.exe | Part of the Boston Acoustics USB speaker systems. What does it do and is it required? |
| X | Bouncer RunStartup | bouncer.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| X | Bouncer RunStartup | LiveUpdate.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| U | bpcpost.exe | bpcpost.exe | MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| U | BPK | bpk.exe | Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove |
| N | BPServer | G6FTPSrv.exe | BulletProof FTP Server |
| U | BQTray.exe | BQTray.exe | System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
| X | Brasil | Brasil.exe | Added by the OPASERV.E WORM! |
| X | Brasil | BRASIL.PIF | Added by the OPASERV.E WORM! |
| X | BrasilOld | [worm filename] | Added by the OPASERV.P WORM! |
| U | Break_Reminder | BREAK REMINDER.exe | Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here |
| X | Breg | bcre.exe | BroadcastPC adware variant |
| X | Bridge | rundll32.exe ...Bridge.dll | Flingstone.com browser hijacker |
| Y | Brindys BriTray | BRITRAY.EXE | Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired |
| N | Broadband Wizard | bbwiz.exe | Starts Broadband Wizard so it runs in the System Tray. This application tests |
