| Status Code | Name | Command | Description |
| U | Dynu Basic Client | dynubas.exe | Dynu online dynamic IP update client. Useful when using a dial up modem
|
| ? | DZKillMe | DZSAVEME.EXE | ?? |
| N | DynDNS-Updater Traytool | ddutray.exe | DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually |
| X | DyFuCA Active Alert | actalert.exe | Adult content dialler - see here |
| X | DyFuCA | optimize.exe | Adult content dialler - see here |
| X | Dxupdate.exe | Dxupdate.exe | Added by the MAFEG WORM! |
| X | Dxsty | Dxsty.exe | Added by the GEMA TROJAN! |
| N | DXM6Patch_981116 | p_981116.exe | Win32 cabinet self extractor. More info here |
| X | DxLoad | DX3DRndr.exe | Added by the GIBE.B WORM!
|
| N | DXDllRegExe | dxdllreg.exe | Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it |
| X | Dx8compat | Dx8compat.exe | Added by the GEMA TROJAN! |
| N | DwlClient | support.exe | Download manager for Dell support alerts |
| X | Dx | sys*.exe [* = random number] | Added by the DEXTER.A WORM! |
| X | dw | dw.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| U | DVSync | dvsync.exe | DVSync is the program that allows you to synchronize your daVinci?s PDA's data with your Personal Information Manager on the PC |
| X | dvsfss | fbsfsdrs.exe | Added by the SDBOT-QA WORM! |
| X | dvraudio | dvraudio.exe | Added by a variant of the CRYPTER.C TROJAN! |
| Y | dvprpt | Dvprpt.exe | Command Antivirus real time protection |
| Y | dvpapi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me |
| Y | DvpInitExe | Dvpinit.exe | Command Antivirus related |
| ? | DVDUpgrade | DVDUpgrd.exe | ?? |
| Y | Dvp95 | Dvp95.exe | Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine |
| ? | DVDTray | DVDTray.exe | HP CD/DVD Tray icon. What does it do, and is it required |
| N | DVDSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| N | DVDLauncher | DVDLauncher.exe | A process belonging to the Cyberlink PowerCinema video viewing software which allows you to play DVDs upon insertion. Non-essential process - and is installed for ease of use |
| X | Dvdcompat | Dvdcompat.exe | Added by the GEMA TROJAN! |
| U | DVDBitSet | DVDBitSet.exe | DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used |
| X | dvd98 | windvd98.exe | Added by the CULT.P WORM! |
| N | dvd43 | DVD43_Tray.exe | DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies" |
| U | dumprep 0 -u | dumprep 0 -u | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| N | dumprep 0 -k | dumprep 0 -k | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| N | DU Meter | DUMETER.EXE | Hagel Technologies internet bandwidth monitor |
| ? | DSSSGENS | dssagens.exe | ?? |
| X | DSS | dssagent.exe | DSSAgent by Br?derbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info |
| U | DSLSTATEXE | dslstat.exe | System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example) |
| Y | dslmon | dslmon.exe | Sagem DSL modem related. Apparently needed to detect the modem
|
| Y | DSLagentexe | DSLagent.exe | Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection |
| N | DSL Monitor | spdstrm.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| X | Dskcompat | Dskcompat.exe | Added by the GEMA TROJAN! |
| X | Dsi | dp-******.exe | Added by an unidentified adware where ****** are random characters |
| N | DSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| X | DSB | DSB.exe | EnergyPlugin adware |
| X | DSAcass | [path to file] | Added by the RANKY.M TROJAN! |
| X | dsa | dsa.exe | Homepage hijacker - redirecting to downseek.com |
| U | DS Clock | dsclock.exe | Digital desktop clock including synchronization with atomic servers - see here |
| X | DR_S | DR_S.exe | AdShooter adware |
| Y | Drwebscheduler | Drwebscd.exe | Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem |
| X | drvupd | rundll32 ..drvupd.inf | Hijacker - drvupd.inf file installs a "searchforge.com" hijack |
| X | drvrmanager | drvrquery32.exe | Added by the BOOHOO WORM! |
| X | drvsys.exe | drvsys.exe | Added by the BEAGLE.W WORM! |
| X | drvr32h | drvr32h.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| U | drvlsnr | drvlsnr.exe | Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly |
| ? | DrvListnr | DrvListnr.exe | Analog Devices SoundMAX soundcard related. What does it do and is it required? |
| X | Drvddll_exe | drvddll.exe | Added by the BEAGLE.X WORM! |
| X | drocher | d.exe | Adult content dialler |
| X | drvddll.exe | drvddll.exe | Added by the BEAGLE.AP WORM! |
| X | drmu | W95Mm.exe | Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread |
| U | dRMON SmartAgent | SmartAgt.exe | Part of the network monitoring program group for 3Com NIC cards. See here for more info |
| N | DriveSelect | driveselect.exe | DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs |
| X | Driver | gbot.exe | Added by the JUNTADOR.K TROJAN! |
| X | Driver32 | Scam32.exe | Added by the SIRCAM WORM! |
| N | DriveLED | OODLed.exe | O&O DriveLED - displays your HDD LED on your monitor. Start manually |
| ? | dried.exe | dried.exe | ?? |
| N | DrgToDsc | DrgToDsc.exe | Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly |
| ? | DragDrop | DragDrop.exe | ?? |
| ? | dregfix | ph_finder.exe | ?? |
| N | Drag'n'Drop_Autolaunch | Autolaunch.exe | Iomega HotBurn - CD-RW burning software |
| X | dps | dps.exe | scumware-remover.org foistware, bogus adware/spyware remover, is in fact itself a browser hijacker, redirecting to smartestsearch.com
|
| U | dpps2 | dpps2.exe | Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
| X | dpi | dpi.exe | Adware based media viewer by The Delfin Project |
| Y | Dpcstart | dpcstart.exe | DirecWay from DirectTV satellite based high-speed internet access. Proxy software |
| U | Dpcstart | dpcstart.exe | Startup program for Direcway 2-way satellite internet service. Loads DirecWay's Navigator, tray icon, etc |
| X | dpcproxy | dpcproxy.exe | Added by the GOLDENP-A TROJAN! |
| Y | DPCProxyLoadOnStartup | dpcstart.exe | DirecWay from DirectTV satellite based high-speed internet access |
| N | DPAgnt | DPAgnt.exe | digitalPersona fingerprint scanner |
| Y | Dpcnav | dpcnav.exe | DirecWay from DirectTV satellite based high-speed internet access |
| X | Downxz | Downxz.bat | Added by the MYDOOM.W WORM |
| X | DownloadWare Engine | Dwe.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| X | DownloadWare | dw.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| X | DownloadLegalMusic | rundll32.exe MSA64CHK.dll, DllMostrar | MatrixDialer related |
| N | Download Wonder | DownloadWonder.exe | Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features |
| X | Download Plus | DownloadPlus.exe | DownloadPlus parasite - opens pop-up adverts |
| N | Download Accelerator Plus 5.0 | DAP.exe | Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is "adware" based |
| N | DoUWantIt | duwi.exe | DoUWantIt - online shopping assistant. Start it manually |
| ? | Dosbat | ?? | ?? |
| X | dos | dos64.exe | Adware downloader trojan |
| U | Don't Panic Pop-Up Stopper | dpps2.exe | Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
| U | Don't Panic | dontpanicdemodp.exe | 30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite." |
| X | DOGStart | GSDOGST.EXE | Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS |
| ? | Doing | doing.exe | ?? |
| N | DocuMagix Init | PWATCH.EXE | PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed |
| X | DocTor | Doctor.exe | Added by the DOTOR.A WORM! |
| ? | DNXVC | dnxvc.exe | ?? |
| ? | DNS2GoClient | dns2goclient.exe | DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required? |
| X | DNS Service | dnsresolver.exe | Added by the RBOT-PQ WORM! |
| Y | DNE DUN Watchdog | rundll dnes.dll, DnDneCheckDUN13 | Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
| Y | DNE Binding Watchdog | rundll dnes.dll, DnDneCheckBindings | Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
| X | Dnar | Dnar.exe | Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here |
| X | DM_server | dmserver.exe | Comet Cursor adware |
| X | dmtdll | dmtdll.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | Dmsvc32 | Dmsvc32.exe | Added by the AGOBOT.ABU WORM! |
| N | DMISLAPP | DMISLAPP.exe | DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
| N | DMISL | DMISL.EXE | DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
| N | DMILDR | dmildr.exe | Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs |
| X | DM mgr | dm_mgr.exe | Added by the JITTAR TROJAN! |
| X | Dluxjp | cnfrm.exe | Added by the DLUCA.D TROJAN! |
| X | dluxde | dluxde.exe | All-In-One-Telcom (adult content dialler) variant |
| X | dluca | dluca.exe | Added by the DLUCA.C TROJAN! |
| ? | DLT | dlt.exe | ?? |
| X | dluca | dluca.exe | Adult content dialler - see here |
| X | dllreg | dllreg.exe | Added by the CRYPTER.A TROJAN! |
| X | dllhelp | dllhlp.exe | Added by the Downloader-HI TROJAN!
|
| X | dlldmt | dlldmt.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | dllhelp | dllhelp.exe | Added by the STARTPAGE.DQ hijacker |
| X | DLL32 | dllmem32.exe | Added by the KWBOT.E WORM! |
| X | DLL Service Manager | [path to worm] | Added by the RPCBOT.F TROJAN! |
| X | Dlite | dllmanager.exe | Added by the WOOTBOT.DN WORM! |
| X | DLHelperEXE.exe | N/A | Downloader for Microgaming/Casino software - stealth installed |
| N | DLHelperEXE | WATCH.exe | Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished |
| N | DLG | DLGCHBW.exe | Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates |
| N | DLF_00000B00 | Vcdlf.exe | Known to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown |
| ? | DLForcerExe | DLForcerEXE.exe | ?? |
| X | DlDir1 | caKe | Added by the CAKE WORM! |
| X | dlder | dlder.exe | Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus |
| N | DlaTray | Dlatray.exe | System Tray access to DLA - Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones" |
| Y | dla | tfswctrl.exe | Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones" |
| ? | dkzzixm | dkzzixm.exe | ?? |
| X | Dkware ml097e | dkware.exe | Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Dkware lptt01 | dkware.exe | Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | DKTime | dktime.exe | Added by the LUNII TROJAN! |
| Y | DkService | DkService.exe | From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. It's recommended to leave this enabled, otherwise you could have problems starting it manually. |
| N | DJREGFIX | regedit /s c:hpdjregfix.reg | DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers |
| X | Divx4 codec | devldr32.exe | Added by an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file |
| X | DivX Player | DivXPlayer.exe | Added by a variant of the RBOT WORM!
|
| X | DivX Updater | DivX.Exe | Added by the NALDEM TROJAN or MASTAK VIRUS! |
| ? | Divamon.exe | Divamon.exe | Associated with an Eicon Networks Diva ISDN or ADSL modem - what does it do and is it required? |
| X | DivX MediaPlayer 7.0 | Dr.DivX.exe | Added by the ALADINZ.G TROJAN! |
| N | DiTask.exe | DiTask.exe | Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs |
| Y | Dit | dit.exe | "Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found |
| U | distributed.net client | DNETC.EXE | Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses |
| X | Distributed File System | kernel32dll.exe | Added by the MYFIP-C or MYFIP.K WORMS! |
| X | Distributed File System | Dfsvc.exe | Added by the MYFIP.A or MYFIP.K WORMS! |
| N | Distiller Assistant 3.01 | DISTASST.EXE | From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs |
| N | DisplayTrayIcon | TrayIcon.exe | System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display |
| N | Display Settings | hptasks.exe | Allows for the adjustment of the display for LCD screen, CRT Monitor and TV output on HP computers |
| U | Disk_Monitor | Disk_Monitor.exe | Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader |
| X | Display Drivers | cssrs.exe | Added by the AGOBOT.FX WORM! |
| X | Diskstart | hit.exe | Adult content dialler |
| X | Diskstart | Snt.exe | Adult content dialler |
| X | Diskstart | Code.exe | Adult content dialler |
| X | Diskstart | cat.exe | MS-Connect dialler |
| N | Disknag | disknag.exe | Dell program that reminds you to make your backup diskettes |
| ? | DISKMON.EXE | DISKMON.EXE | ?? |
| X | diskinf | diskinf.exe | Added by the CRYPTER.A TROJAN! |
| N | DiskeeperSystray | DkIcon.exe | DisKeeper defragmentation software - can be started manually |
| X | Disk Master | [trojan name] | Added by the DISTER TROJAN! - a spam relayer |
| N | DiscoverDeskshop | Deskshop.exe | Discover Deskshop - single use "virtual" credit card |
| ? | discoveg | discoveg.exe | ?? |
| ? | disc detector | qnetquestnotifty.exe | ?? |
| N | Disc Detector | CtNotify.exe | For Creative sound cards. Detects when you insert a CD, DVD, etc |
| ? | Disable EHCI | nousb20.exe | ?? |
| U | Dirkey | Dirkey.exe | Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders |
| X | DirectX64 | DirectXset.exe | Added by the BROWNEY.A WORM! |
| X | DirectX Video Driver | dxterm5.exe | Added by the WILAB-A TROJAN!
|
| X | DirectX for Microsoft Windows | Sservice.exe | Added by the PRORAT TROJAN! |
| X | DirectX For Microsoft Windows | dtxservice.exe | Added by the PROGENT TROJAN! |
| X | DirectX for Microsoft Windows | Fservice.exe | Added by the PRORAT TROJAN! |
| X | directx | PipeCmd.exe | Added by the SDBOT.D TROJAN! |
| X | directx | NTCmd.exe | Added by the SDBOT.D TROJAN! |
| X | DirectX | DirectX.exe | Added by the BLAXE or LOGPOLE WORMS! |
| X | directx | Sqlexploit.exe | Added by the SDBOT.D TROJAN! |
| X | directx | Directx.exe | Added by the SDBOT.D TROJAN! |
| X | DirectX | ddhelp32.exe | Added by the BIONET.318 TROJAN! Note - not the DirectX helper which is ddhelp.exe |
| U | DIRECTVDSL | Directvdsl.exe | Starts DirectTV DSL modem at boot up. Can also be started manually |
| X | directs.exe | directs.exe | Added by the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T WORMS! |
| N | DirectCD | DirectCD.exe | DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later |
| X | Direct X Opengl | dxopengl.exe | Added by a variant of the RBOT-CJ WORM!
|
| X | Direct X Direct3D | dxd3d.exe | Added by a variant of the SDBOT WORM!
|
| U | Direct Update | DUControl.exe | DirectUpdate dynamic DNS updater |
| X | Dir1 | caKe | Added by the CAKE WORM! |
| X | Dino3 | dino3.exe | Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result |
| U | Dimension4 | d4.exe | Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
| U | Dimension | Dimension.exe | Dimension - a program which lets you customize MSN messenger such as adding animated and coloured nicknames, personal toast creator, war tools (login flooder), and allows viewing and interacting with the raw MSN protocol |
| N | DIGStream | digstream.exe | DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically |
| N | DigitalWizard Monitor | dwMon.exe | InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content |
| N | DigitalWizard | ISWizard.exe | InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content |
| X | DigitalNames | DigitalNamesStart.exe | DigitalNames spyware variant
|
| N | Digital River eBot | downlo~1.exe | Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here |
| N | Digital Line Detect | DLG.exe | Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems |
| N | Digital Dashboard | devgulp.exe | For Compaq PC's. Loads Digital Dashboard options |
| N | DigiGuide | CLIENT.EXE | TV guide and reminder |
| N | DigiGuide | client01.exe | TV guide and reminder |
| X | DigiD | DigitalSound.exe | Adware downloader
|
| U | DigiCell | DigiCell.exe | MSI DigiCell - "the most useful and powerful utility that MSI has spent much research and efforts to develop, helps users to monitor and configure all the integrated peripherals of the system, such as audio program, power management, MP3 files management and communication / 802.11g WLAN settings. Moreover, with this unique utility, you will be able to activate the MSI well-known features, Live Update and Core Center" |
| U | DietK | DietK.exe | DietK - add-on for Kazaa Media Desktop; "removes all adware and popups, built in Download Accelerator, makes searches faster and helps produce more results" |
| X | DIECOX | csrss.exe | Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| N | Dialog Helper | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs |
| N | Dialog Box Assistant | OSDEx.exe | Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders |
| X | DialNet | mxt32.exe | Adult content dialler |
| U | Dialgo SDK | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" |
| U | Dialer Detect | dd.exe | DialerDetect detects stealth installed premium rate diallers, and sounds the alarm when such a connection is being installed without you knowing it
|
| X | Dialer | rundll32.exe msa32chk.dll | Unidentfied malware |
| U | Dialer Control | dc.exe | Dialer-Control. Detects and protects from premium rate p0rn diallers |
| X | Dial33 | dlm.exe | Adult content dialler |
| X | Dial22 | dlm.exe | Adult content dialler |
| ? | DHNUXB | DHNUXB.exe | ?? |
| N | diagent | diagent.exe | System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs |
| Y | dhcpagnt | dhcpagnt.exe | Intel DSL modem driver - leave enabled or you'll have to re-install the drivers |
| N | dguard | dguard.exe | eAcceleration Stop-Sign related - not recommended, see note |
| ? | Devlog | ?? | ?? |
| ? | DGJM | DGJM.exe | ?? |
| U | devldr16 | devldr16.exe | Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| X | DevicePath | Root.exe | Added by the GRUEL WORM! |
| U | Devices | olesvr.exe | Salfeld Child Control 2003 - parental control software |
| U | DeviceDiscovery | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products. "This program is a non-essential process, but should not be terminated unless suspected to be causing problems" |
| X | DevicePath | Proyecto1.exe | Added by the GRUEL WORM! |
| U | DEventAgent | eventagt.exe | DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this |
| X | Device Configuration Loader | msdvc32.exe | Added by a variant of the AGOBOT/GAOBOT WORM!
|
| U | Device Detector | DevDetect.exe | Watches for external digital imaging products being connected from ACD Systems |
| N | Detector | detector.exe | USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software |
| ? | detect | turbodetect.exe | ?? |
| U | detect | idetect.exe | iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled |
| N | deskup | deskup.exe | Adds Iomega Zip drive icons to the desktop |
| U | DesktopX | DESKTOPX.EXE | A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking |
| N | desktopmgr | desktopmgr.exe | Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry" |
| N | Desktop Weather 3 | THEWEA~1.EXE | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather 3 | THE WEATHER CHANNEL.exe | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather | THE WEATHER CHANNEL.exe | Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Plant | AZARE10S.PLT | Vritual plant from here - this version is an Azalea, there are others so the filename may be different |
| N | Desktop Architect | DATRAY.EXE | Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc |
| X | Desktop | rundll32.exe msconfd.dll, Restore ControlPanel | Added by the BOOKMARKER TROJAN! |
| U | Desksite CMA | cma.exe | DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center" |
| X | DeskMateAutoUpdate | DeskMateAutoUpdate.exe | DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related
|
| N | Deskflag | Deskflag.exe | DeskFlag - animated USA flag on the desktop |
| N | DeskColor | DESKCOLOR.EXE | Provides transparent icon text backgrounds and coloured icon text |
| ? | desk-top-service | desk-top-service.exe | ?? |
| X | Desire | desires.exe | Adult content dialler |
| ? | Description of Shortcuts | *.exe | * seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search) |
| ? | demon | demon.exe | Part of the French Wanadoo ADSL extense pack. What does it do and is it required? |
| U | DepFrez | frzstate.exe | Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example |
| N | DeltTray | deltray.exe | System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel |
| ? | DelTmp | DelTemp.exe | Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete? |
| X | delsubmit | rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe | CoolWebSearch parasite variant |
| X | delmsbb | delmsbb.exe | nCase adware |
| U | DellTouch | DELLMMKB.EXE | Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
| U | DellTouch | MMKeybd.exe | Dell multimedia keyboard manager. Required if you use the additional keys |
| N | DellSC | dellsc.exe | Dell Solution Center - web-based troubleshooting tools and educational offerings |
| U | DELLMMKB | DELLMMKB.EXE | Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
| ? | DellDMI | delldmi.exe | Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards? |
| N | Dell Alert | DAMon.exe | "Dell Alert" utility, that's supposed to make interaction with Support easier |
| N | Dell AIO Printer A*** | dlbabmgr.exe | Dell AIO Printer A*** related (*** = model). Not Required at Startup |
| X | Delete Me | worm.exe | Added by the DOOMHUNTER WORM! |
| U | Delayrun | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| U | Delay | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| U | defwatch | defwatch.exe | Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis |
| X | defragm_check | defragment.exe | CoolWebSearch parasite variant |
| X | Default_Search_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | Default_Page_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | Default web browser | IexpIore.exe | Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L" |
| X | Default System Research | vhchost.exe | Added by the TARNO.I TROJAN! |
| X | deejay | forboo.exe | Added by the FORBOT-AY WORM! |
| X | Debug | DebugW32.exe | Added by the GUBED TROJAN Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | DealHelperDown | download.exe | DealHelper adware |
| X | DealHelperUpdate | DHUpdt.exe | DealHelper adware |
| X | DealHelperBrwsr | dhbrwsr.exe | DealHelper adware |
| N | DeadAIM | rundll32.exe DeadAIM.ocm, ExportedCheckODLs | DeadAIM - feature enhancing product for AOL's Instant Messenger program |
| X | de32gen | de32gen.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | DDialler | DDialler.exe | Adult content dialler |
| ? | DDT | N/A | ?? |
| X | ddeproc | ddeproc.exe | Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here |
| N | DDCMan | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCM | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCActiveMenu | DDCActiveMenu.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| U | DCfssvc | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| U | dcfssve | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| X | DCE Manager | dcemgr.exe | Added by the TUMAG TROJAN! |
| U | DAZEL Delivery Agent | DcDaemon.exe | Control and send documents, etc, to any destination - see here |
| N | dbserv | dbserv.exe | Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled |
| ? | DAW9532.exe | DAW9532.EXE | Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required? |
| U | DayToday | DAYTODAY.EXE | DayToday from RoboMagic Software Corp. Displays the date on the taskbar |
| X | DAupdate | DAupdate.exe | NavEnhance adware |
| X | DateMakerIntl | DateMakerIntl.exe | Premium rate adult content dialler |
| ? | Datechecker | N/A | Could be related to this? |
| X | Date Manager | datemanager.exe | Date Manager - calender program. Spyware/adware based provided by The Gator Corporation |
| X | Datcheck | datcheck.exe | Added by the KEYPANIC TROJAN! |
| N | DataViz Messenger | DvzMsgr.exe | DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts" |
| U | DataLayer | DataLayer.exe | Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
| N | DataCaching | FlashKsk.exe | SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon |
| X | Data789 | Regedit.exe ....data789.tmp | Homepage hijacker |
| X | DATABASE MySql | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| N | Data LifeGuard LifeLine Lite installer | DLGLI.EXE | Backweb installer - see here |
| N | Data LifeGuard | BACKWE~1.EXE | Data LifeGuard diagnostic tools for Western Digital's series of hard drives |
| X | Data | System.dat.vbs | Added by the BISCUIT.A WORM! |
| X | dasxdads | fsdqd.exe | Added by the GAOBOT.BIQ WORM! |
| ? | DashIE | N/A | Could be related to "Dash Power Shopping" tool bar in IE? |
| X | DarkDevil.Grasiele.BR | Grasiele.VBS | Added by the LEMBRA WORM! |
| N | Dap | DAP.exe | Download Accelerator Plus from SpeedBit - download manager/accelerator |
| X | Danton* | [random filename] | Added by the DANTON TROJAN! where * = random number |
| N | Daily Planner | dayplan.exe | Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them |
| U | DAEMON Tools-1033 | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| U | Daemon | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| N | Daemon | DAEMON32.EXE | Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs |
| Y | DadApp | dadapp.exe | "DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell |
| N | DACONFIGEXE | daconfig.exe | 3Com NIC Diagnostics. Available via Start -> Programs |
| U | D4 | D4.exe | Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
| X | d3dupdate.exe | bbeagle.exe | Added by the BEAGLE.A WORM! |
| N | D066UUtility | D066UUTY.EXE | TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software |
| Y | D-Link Air Utility | AirCFG.exe | D-Link wireless PCI adapter related |
| N | D-Link AirPlus DWL-650+ Utility | WLANMON.exe | D-Link Air Plus Wireless PC modem connection monitor |
| Y | D-Link Air Utility | AirCFG.exe | D-Link wireless PCI adapter related |
| N | D-Link AirPlus DWL-650+ Utility | WLANMON.exe | D-Link Air Plus Wireless PC modem connection monitor |
| N | D066UUtility | D066UUTY.EXE | TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software |
| X | d3dupdate.exe | bbeagle.exe | Added by the BEAGLE.A WORM! |
| U | D4 | D4.exe | Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
| N | DACONFIGEXE | daconfig.exe | 3Com NIC Diagnostics. Available via Start -> Programs |
| Y | DadApp | dadapp.exe | "DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell |
| N | Daemon | DAEMON32.EXE | Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs |
| U | Daemon | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| U | DAEMON Tools-1033 | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| N | Daily Planner | dayplan.exe | Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them |
| X | Danton* | [random filename] | Added by the DANTON TROJAN! where * = random number |
| N | Dap | DAP.exe | Download Accelerator Plus from SpeedBit - download manager/accelerator |
| X | DarkDevil.Grasiele.BR | Grasiele.VBS | Added by the LEMBRA WORM! |
| ? | DashIE | N/A | Could be related to "Dash Power Shopping" tool bar in IE? |
| X | dasxdads | fsdqd.exe | Added by the GAOBOT.BIQ WORM! |
| X | Data | System.dat.vbs | Added by the BISCUIT.A WORM! |
| N | Data LifeGuard | BACKWE~1.EXE | Data LifeGuard diagnostic tools for Western Digital's series of hard drives |
| N | Data LifeGuard LifeLine Lite installer | DLGLI.EXE | Backweb installer - see here |
| X | Data789 | Regedit.exe ....data789.tmp | Homepage hijacker |
| X | DATABASE MySql | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| N | DataCaching | FlashKsk.exe | SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon |
| U | DataLayer | DataLayer.exe | Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
| N | DataViz Messenger | DvzMsgr.exe | DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts" |
| X | Datcheck | datcheck.exe | Added by the KEYPANIC TROJAN! |
| X | Date Manager | datemanager.exe | Date Manager - calender program. Spyware/adware based provided by The Gator Corporation |
| ? | Datechecker | N/A | Could be related to |
