| Status Code | Name | Command | Description |
| U | E_SOEIC1 | E_SOEIC1.exe | Epson Stylus printer monitor - for checking ink levels, etc. |
| N | E_S4I2F1 | E_S4I2F1.exe | Epson Status Monitor 3 for the Epson Stylus Photo R300 (and probably others) printers - monitors the status of a print job spooled to that printer |
| ? | E_S4I2G1 | E_S4I2G1.EXE | Related to the Epson Stylus CX5400 printer/scanner/copier. What does it do and is it required? |
| U | E_S23 | E_SICN03.exe | Epson printer status monitor - for checking ink levels, etc. |
| X | eZWO | wo.exe | Ezula "Web Offer" foistware |
| U | E_S10IC2 | E_S10IC2.exe | Epson Stylus printer monitor - for checking ink levels, etc. |
| X | eZuluMain | eZuluMain.exe | Comes with "KaZaA" installation. Advertising Spyware. Not required but KaZaA won't work |
| X | eZulaMain | eZulaMain.exe | Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information |
| X | ezula | eZmmod.exe | Regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information |
| U | EZSMART App | ezsmart.exe | EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported |
| Y | ezShieldProtector for Px | ezSP_PxEngine.exe | Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings |
| Y | ezShieldProtector for Px | ezSP_Px.exe | Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings |
| Y | ezPS_Px | ezSP_Px.exe | Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings |
| Y | ezPS_Px | ezSP_PxEngine.exe | Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings |
| ? | EZNORUN | EZNORUN.EXE | Easy Internet related? |
| X | eZmmod | mmod.exe | Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information |
| N | EzEjMnAp | EzEjMnAp.exe | For IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start -> Programs |
| N | EZDesk | EZDESK.EXE | Utility that remembers icon locations for each user and resolution. Available here |
| N | ezagent | ezagent.exe | EzVCR recording software for the ASUS TV FM card. Available via Start -> Programs |
| N | Eye Tide Launcher | oneeyetideone.exe | Nascar wallpaper |
| ? | Extranet AutoDial | AutoExt.exe | Nortel Networks Contivity Extranet Switching Software |
| ? | ExxtremeHelperDemon | exxdemon.exe | Creative Exxtreme graphics card related? |
| U | ExtraDNS | ExtraDNS.exe | ExtraDNS - DNS configuration tool |
| U | Exshow95 | EXSHOW95.exe | Support software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices |
| X | Explorer32 | Expl32.exe | Added by the HACKTACK.B TROJAN! |
| X | Explorer Updater | IEXPLORE.exe | Added by the SDBOT-WO WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which should not appear in Msconfig/Startup unless you add it manually! |
| X | Explorer ml097e | explorer.exe | Variant of the RapidBlaster parasite (in an "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the legitimate Windows Explorer (explorer.exe) which would only be in startups if you added it manually! |
| X | Explorer lptt01 | explorer.exe | Variant of the RapidBlaster parasite (in an "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the legitimate Windows Explorer (explorer.exe) which would only be in startups if you added it manually! |
| X | Explorer | shellexp.exe | Added by a variant of the SHELDOR TROJAN!
|
| X | Explorer | [path to worm] | Added by the AUTEX WORM! |
| X | explorer | expl32.exe | Added by the RATSOU TROJAN! |
| X | Explorer | shellexpl.exe | Added by the GPIX and SHELDOR VIRUSES! |
| X | explorer | wscript.exe [filename] | Sneaky way to start any VBS script. Many viruses use VBS files |
| U | explorer | explorer.exe | Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL |
| X | explore.exe | Explore.exe | Added by the GRAYBIRD.G TROJAN! |
| X | Explore | explore.exe | Adult content dialler |
| X | Explore | Explorer.exe | Added by the IRC.FLOOD.G TROJAN! Note - this is not the legitimate Windows Explorer (explorer.exe) which would only be in startups if you added it manually |
| X | Explkw | expup.exe | Keywords hijacker |
| X | explore | explore.exe | Added by any number of VIRUSES, WORMS or TROJANS! |
| ? | exmon | hpimoniter.exe | Some kind of hp digital camera maybe or a photo smart connection probe? |
| U | ExitKiller | Ekiller.exe | Exit Killer - automatically closes pop-up windows in your browser |
| U | Exif Launcher | QuickDCF.exe | USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly |
| U | Exif Launcher | Exiflaquickdcr.exe | USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly |
| X | ExeName32 | Warm.scr | Added by the SCOLD WORM! |
| ? | exgiwsl | exgiwsl.exe | ?? |
| ? | Execute | delfolders.exe | ?? |
| X | execfg4 | execfg4.exe | Added by the ELECTRON WORM! |
| X | exe ml097e | exe.exe | Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | exe lptt01 | exe.exe | Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | exdl.exe | exdl.exe | BargainBuddy foistware |
| N | ExciteAssistantEXE | ASSISTANT.EXE | With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open |
| N | Excite Platform | Exlaunch.exe | Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer |
| ? | Excite Private Messenger Pipe | x8impipe.exe | ?? |
| X | ewupdater | ewupdater.exe | EasyWebSearch adware updater
|
| N | eWare Startup | iWareStart.exe | eWare iWare task bar. Not required |
| U | EW Message Server | msg32.exe | Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices |
| X | EvtHtm | evthtm.exe | Premium rate adult content dialler |
| U | EVOLOSTA | EVOLOSTA.EXE | Evolo Status Monitor for wireless network cards. Allows a user to enter a specific access-point mode SSID, peer-to-peer mode channel, link speed, WEP encryption options, and has enable/disable and rescan buttons. It is not needed if using Windows XP or higher, as they have this built-in to the control panel. Also, if the user is very sure that there is ONLY ONE network available to connect to, then they can remove this. If it is not in startup, and the user needs to run it, they can simply type EVOLOSTA in the Start -> Run dialog to run it |
| N | evntsvc | evntsc.exe | Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it. Note that eventsvc.exe no longer appears to be in a newer version |
| N | Evidence Eliminator | ee.exe | Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis |
| N | eventmgr | eventmgr.exe | Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs |
| N | Event Reminder | pmremind.exe | A calendar/alarm program that installs with Br?derbund Printmaster |
| U | EVENTLISTENER | EvLstnr.exe | Used with a Nikon digital camera to recognize when the camera is plugged in |
| ? | Event Log | eventlog.exe | ?? |
| N | Event Planner Reminders | PLNRnote.exe | Sierra Event Planner tray icon |
| U | EuroGlot | EuroGlot.exe | Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian" |
| Y | eTrustCIPE | ezdsmain.exe | eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior |
| Y | eTrust EZ Firewall | efpeadm.exe | eTrust EZ Firewall |
| U | eTrust PestPatrol Active Protection | PPActiveDetection.exe | PestPatrol real-time protection feature. "Stops spyware before it infects your system" |
| N | Ethernet | tcaudiag.exe | 3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs |
| X | Etraffic | JavaRun.exe | Marketing software from TopMoxie |
| U | EssSpkPhone | essspk.exe | ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets |
| Y | esspk | esspk.exe | ESS Technology modem speaker driver file. Required to get on-line with this modem |
| Y | ESSOLO | ESSOLO.exe | Sound card driver that re-instates itself every time it's removed |
| ? | ESSNDSYS | ESSNDSYS.EXE | Related to an ESS based soundacard. Is it required? |
| Y | Essdc | essdc.exe | Related to an ESS Solo soundcard. Seems as though it's required |
| ? | essapm | essapm.exe | ESS Solo soundcard driver. Is it required? |
| ? | ESS Daemon | Essd.exe | Related to an ESS based soundacard. Is it required? |
| N | ESPN BottomLine | bline.exe | ESPN BottomLine. "You can dock the BottomLine to the top or bottom of your screen or drag it around on your desktop, without even worrying about a browser. As long you keep the BottomLine running, you will continue to receive live scores and breaking news, and by clicking on any score or news item, you will be taken directly to the corresponding page on ESPN.com for a full break down." |
| X | Esoh | Esoh123.exe | Added by the AGOBOT.FF WORM!
|
| N | ESFTP | esftp.exe | ESftp - FTP client for transfering files between a local PC and another remote computer |
| X | EScorcher | escorcher.exe | Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead |
| U | eScan Updater | Trayicos.exe | eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads |
| Y | eScan Monitor | AVKWCTL9X.EXE | eScan antivirus |
| U | eScan Scheduler | avkserv.exe | eScan antivirus scheduler |
| U | ESB | esb.exe | Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys |
| Y | eSafe Protect | ESPWatch.exe | eSafe from Aladdin - internet security for gateway and E-mail servers |
| X | eros.exe | eros.exe | Adult content dailler |
| X | ErrorGuard | ErrorGuard.exe | Spyware remover of dubious repute |
| X | erthgdr | windll.exe | Added by the BEAGLE.AO or BEAGLE.AQ WORMS! |
| ? | erm | erm.exe | ?? |
| ? | Equipmen | Equipmen.exe | ?? |
| N | EReg | reg32.exe | EReg is a software registration tool incorporated on products such as those by Br?derbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it |
| U | EpsonPhotoStarter | EPSON_PhotoStarter.exe | Only needed if you want to make full use of the capabilities of an Epson printer that included this |
| U | Epson Stylus C82 Series | e_s0hic1.EXE | Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required |
| U | Epson Stylus C62 Series | E-S0BIC1.EXE | Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required |
| N | EPSON Status Monitor 3 Environment Check 2 | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check 2 | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| U | EPSON CardMonitor | EPSON CardMonitor1.0.exe | Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint |
| N | EPSON Background Monitor | STMS.EXE | Supposed to keep an Epson printer ready for quick printing. Users report little difference whether it is on or not |
| N | EPS | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPS | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| U | ePrompter | ePrompter.exe | ePrompter - E-mail notification software |
| X | Enumerate Service | wsys.exe | Added by the MANIFEST TROJAN! |
| U | eonemng | eOneMng.exe | eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC |
| ? | ENSMIX32.EXE | ENSMIX32.EXE | Sound card driver. Is it required? |
| U | EnsoniqMixer | starter.exe | Puts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility |
| ? | ENSApServer2_0 | APSERVER.EXE | Intel AnyPoint Wireless II Home Network related. What does it do and is it required? |
| X | enhance32 | enhance32.exe | Added by the CRYPTER.A TROJAN! |
| N | EnigmaPopupStop | EnigmaPopupStop.exe | SpyHunter - spyware remover of somewhat dubious repute, see note |
| Y | EngUtil | EngUtil.exe | Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking |
| ? | ENCSurf | surfboard.exe | ?? |
| U | Energizer FileSaver | Energizer FileSaver.exe | Energizer FileSaver - UPS back-up utility for Energizer UPS products |
| U | Encompass_ENCMONTR | ENCMONTR.EXE | Optional simple browser from Yahoo (Encompass) |
| N | ENCMONITOR | monitor.exe | The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it |
| N | Encoder Agent | WMENCAGT.EXE | MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed |
| N | Encarta Dictionary Quickshelf | QSHLFED.EXE | Provides quick access to Encarta's Dictionary features? |
| ? | encapsulated command tool | wintr.com | ?? |
| N | EN4060C Taskbar | en4060ct.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| U | EM_EXEC | EM_EXEC.EXE | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | eMusicClient Systray | eMusicClient.exe | eMusic MP3 download software |
| X | emsw.exe | emsw.exe | Attune HelpExpress - spyware. Disable and uninstall - see here |
| U | eMachines eBoard | Eboard.exe | eMachines multimedia keyboard manager. Required if you use the extra keys |
| N | EMA.exe | EMA.EXE | Time management system which helps you to manage your time and appointments |
| U | ELSAChipGuard | elsavect.exe | ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking |
| Y | ElsaCapiCtl | Rcapi.exe | Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem |
| U | ELSA WINman Suite | Winmsuit.exe | Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU |
| N | elm | Elmenv.exe | ViaTech eLicense for securing, distributing and selling music online |
| X | Element | Element.txt | Added by the ELEM TROJAN! |
| U | Electron Microscope | EMIII.exe | Electron Microscope or EM - is a program used to track Stanford's distributed computing program client called Folding at Home, FAH. It will monitor up to 50 clients and give you the details about each client's progress as the FAH client runs. EM will also show you what each change in the protein looks like as the process continues
|
| U | Elbycheck | ElbyCheck.exe | From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it |
| X | eixfi | china.bat | Added by the WCUP.A WORM! |
| U | Eicon TechnologyLAN_DAEMON | watch.exe | Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually |
| U | Eicon NetworksLAN_DAEMON | watch.exe | Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually |
| ? | ehTray | ehtray.exe | eHome Media Center PC related - what does it do and is it required? |
| U | Efpap.exe | Efpap.exe | Easy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching |
| X | efaxs ml097e | efaxs.exe | Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | efaxs lptt01 | efaxs.exe | Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| N | eFax.com Tray Menu | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here |
| U | Edwizard | Edwizard.exe | SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks" |
| X | educational writer | [random filename] | Added by the RBOT-LZ WORM! |
| U | EDRestore | ?? | Set Point from Easy Desk Software - "small utility that automatically sets System Restore points for WinME/XP" |
| N | EDLoader | DTLoader.exe | Effective Desktop from MiniStars Software - desktop management software no longer being supported |
| X | editpad | editpad.exe | Added by the CONSPER-B TROJAN! |
| ? | ecpe | ECPE.EXE | ?? |
| ? | edexter | edexter.exe | ?? |
| N | eBot | DownloadWizard.exe | eBot from Digital River - "helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs |
| U | eBoard | Eboard.exe | eMachines multimedia keyboard manager. Required if you use the extra keys |
| X | EbatesMoeMoneyMaker0 | EbatesMoeMoneyMaker0.exe | Ebates adware |
| X | eBay Toolbar | EBAYTBAR.EXE | eBay Toolbar - reportes as spyware as it "phones home" |
| N | EbatesMoeMoneyMaker | wjview ...Code | Ebates adware |
| X | easywww | easywww2.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| U | EasyTuneIII | EasyTune.exe | Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available |
| U | EasyTuneIV | ET4Tray.exe | Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available |
| X | easyServ | Server.exe | Added by the EASYSERV TROJAN! |
| U | EasySync Pro | XCPCMenu.exe | EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes |
| X | EasySearchBar | ESBUpdate.exe | EasySearchBar adware downloader |
| U | EasyMessage | em2.exe | Easy Messenger, instant messenger for MSN, AOL, ICQ, and Yahoo. See here |
| U | EasyKey | easykey.exe | For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used |
| X | EasyDates | EasyDates.exe | Premium rate adult content dialler
|
| X | EasyDates_nl | EasyDates_nl.exe | Adult content dialler |
| N | Easy Start Button | esb.exe | Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys |
| X | EasyAV | EasyAV.exe | Added by the NETSKY.S or NETSKY.T WORMS! |
| U | Easy Key | easykey.exe | For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used |
| N | EarthLink ToolBar 5.0 | etoolbar.exe | EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time |
| N | EAPCISETUP | wizard.exe | Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation |
| N | Eapcisetup | sbsetup.exe | Rockwell RipTide soundcard application software. Sound works without it |
| N | eanth_system_patcher | sys_alert.exe | eAcceleration Stop-Sign related - not recommended, see note |
| X | EanthologyApp | EANTHO~1.EXE | Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here |
| X | eanth_critical_update_alert | sys_alert.exe | Stop-Sign from eAcceleration. Purports to detect spyware, malware, viruses and keyloggers, but is in fact spyware itself - read their privacy statement here |
| ? | Eac_rnvdl | ANTIVIRUS_INSTALL.EXE | ?? |
| X | Eac_Cnry | canary.exe | Added by the CANARY TROJAN! |
| U | EACLEAN | eaclean.exe | For Compaq PC's. Easy Access button support for the keyboard |
| X | Eac Download | download.exe | Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here |
| U | eabconfg.cpl | EabServr.exe | Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys |
| N | E6TaskPanel | TaskPanl.exe | Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space |
| U | E-color | IconMgr.Exe | Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program |
| X | E-Card | ecard.exe | Added by the YODI WORM! |
| X | E-Card | ecard.exe | Added by the YODI WORM! |
| U | E-color | IconMgr.Exe | Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program |
| N | E6TaskPanel | TaskPanl.exe | Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space |
| U | eabconfg.cpl | EabServr.exe | Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys |
| X | Eac Download | download.exe | Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here |
| U | EACLEAN | eaclean.exe | For Compaq PC's. Easy Access button support for the keyboard |
| X | Eac_Cnry | canary.exe | Added by the CANARY TROJAN! |
| ? | Eac_rnvdl | ANTIVIRUS_INSTALL.EXE | ?? |
| X | EanthologyApp | EANTHO~1.EXE | Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here |
| X | eanth_critical_update_alert | sys_alert.exe | Stop-Sign from eAcceleration. Purports to detect spyware, malware, viruses and keyloggers, but is in fact spyware itself - read their privacy statement here |
| N | eanth_system_patcher | sys_alert.exe | eAcceleration Stop-Sign related - not recommended, see note |
| N | Eapcisetup | sbsetup.exe | Rockwell RipTide soundcard application software. Sound works without it |
| N | EAPCISETUP | wizard.exe | Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation |
| N | EarthLink ToolBar 5.0 | etoolbar.exe | EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time |
| U | Easy Key | easykey.exe | For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used |
| N | Easy Start Button | esb.exe | Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys |
| X | EasyAV | EasyAV.exe | Added by the NETSKY.S or NETSKY.T WORMS! |
| X | EasyDates | EasyDates.exe | Premium rate adult content dialler
|
| X | EasyDates_nl | EasyDates_nl.exe | Adult content dialler |
| U | EasyKey | easykey.exe | For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used |
| U | EasyMessage | em2.exe | Easy Messenger, instant messenger for MSN, AOL, ICQ, and Yahoo. See here |
| X | EasySearchBar | ESBUpdate.exe | EasySearchBar adware downloader |
| X | easyServ | Server.exe | Added by the EASYSERV TROJAN! |
| U | EasySync Pro | XCPCMenu.exe | EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes |
| U | EasyTuneIII | EasyTune.exe | Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available |
| U | EasyTuneIV | ET4Tray.exe | Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available |
| X | easywww | easywww2.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| N | EbatesMoeMoneyMaker | wjview ...Code | Ebates adware |
| X | EbatesMoeMoneyMaker0 | EbatesMoeMoneyMaker0.exe | Ebates adware |
| X | eBay Toolbar | EBAYTBAR.EXE | eBay Toolbar - reportes as spyware as it "phones home" |
| U | eBoard | Eboard.exe | eMachines multimedia keyboard manager. Required if you use the extra keys |
| N | eBot | DownloadWizard.exe | eBot from Digital River - "helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs |
| ? | ecpe | ECPE.EXE | ?? |
| ? | edexter | edexter.exe | ?? |
| X | editpad | editpad.exe | Added by the CONSPER-B TROJAN! |
| N | EDLoader | DTLoader.exe | Effective Desktop from MiniStars Software - desktop management software no longer being supported |
| U | EDRestore | ?? | Set Point from Easy Desk Software - "small utility that automatically sets System Restore points for WinME/XP" |
| X | educational writer | [random filename] | Added by the RBOT-LZ WORM! |
| U | Edwizard | Edwizard.exe | SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks" |
| N | eFax.com Tray Menu | HotTray.exe | eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here |
| X | efaxs lptt01 | efaxs.exe | Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | efaxs ml097e | efaxs.exe | Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| U | Efpap.exe | Efpap.exe | Easy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching |
| ? | ehTray | ehtray.exe | eHome Media Center PC related - what does it do and is it required? |
| U | Eicon NetworksLAN_DAEMON | watch.exe | Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually |
| U | Eicon TechnologyLAN_DAEMON | watch.exe | Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually |
| X | eixfi | china.bat | Added by the WCUP.A WORM! |
| U | Elbycheck | ElbyCheck.exe | From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it |
| U | Electron Microscope | EMIII.exe | Electron Microscope or EM - is a program used to track Stanford's distributed computing program client called Folding at Home, FAH. It will monitor up to 50 clients and give you the details about each client's progress as the FAH client runs. EM will also show you what each change in the protein looks like as the process continues
|
| X | Element | Element.txt | Added by the ELEM TROJAN! |
| N | elm | Elmenv.exe | ViaTech eLicense for securing, distributing and selling music online |
| U | ELSA WINman Suite | Winmsuit.exe | Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU |
| Y | ElsaCapiCtl | Rcapi.exe | Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem |
| U | ELSAChipGuard | elsavect.exe | ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking |
| N | EMA.exe | EMA.EXE | Time management system which helps you to manage your time and appointments |
| U | eMachines eBoard | Eboard.exe | eMachines multimedia keyboard manager. Required if you use the extra keys |
| X | emsw.exe | emsw.exe | Attune HelpExpress - spyware. Disable and uninstall - see here |
| N | eMusicClient Systray | eMusicClient.exe | eMusic MP3 download software |
| U | EM_EXEC | EM_EXEC.EXE | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | EN4060C Taskbar | en4060ct.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| ? | encapsulated command tool | wintr.com | ?? |
| N | Encarta Dictionary Quickshelf | QSHLFED.EXE | Provides quick access to Encarta's Dictionary features? |
| N | ENCMONITOR | monitor.exe | The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it |
| N | Encoder Agent | WMENCAGT.EXE | MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed |
| U | Encompass_ENCMONTR | ENCMONTR.EXE | Optional simple browser from Yahoo (Encompass) |
| ? | ENCSurf | surfboard.exe | ?? |
| U | Energizer FileSaver | Energizer FileSaver.exe | Energizer FileSaver - UPS back-up utility for Energizer UPS products |
| Y | EngUtil | EngUtil.exe | Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking |
| X | enhance32 | enhance32.exe | Added by the CRYPTER.A TROJAN! |
| N | EnigmaPopupStop | EnigmaPopupStop.exe | SpyHunter - spyware remover of somewhat dubious repute, see note |
| ? | ENSApServer2_0 | APSERVER.EXE | Intel AnyPoint Wireless II Home Network related. What does it do and is it required? |
| ? | ENSMIX32.EXE | ENSMIX32.EXE | Sound card driver. Is it required? |
| U | EnsoniqMixer | starter.exe | Puts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility |
| X | Enumerate Service | wsys.exe | Added by the MANIFEST TROJAN! |
| U | eonemng | eOneMng.exe | eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC |
| U | ePrompter | ePrompter.exe | ePrompter - E-mail notification software |
| N | EPS | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPS | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Background Monitor | STMS.EXE | Supposed to keep an Epson printer ready for quick printing. Users report little difference whether it is on or not |
| U | EPSON CardMonitor | EPSON CardMonitor1.0.exe | Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint |
| N | EPSON Status Monitor 3 Environment Check | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check 2 | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| N | EPSON Status Monitor 3 Environment Check 2 | e_srcv02.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| U | Epson Stylus C62 Series | E-S0BIC1.EXE | Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required |
| U | Epson Stylus C82 Series | e_s0hic1.EXE | Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required |
| U | EpsonPhotoStarter | EPSON_PhotoStarter.exe | Only needed if you want to make full use of the capabilities of an Epson printer that included this |
| ? | Equipmen | Equipmen.exe | ?? |
| N | EReg | reg32.exe | EReg is a software registration tool incorporated on products such as those by Br?derbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it |
| ? | erm | erm.exe | ?? |
| X | eros.exe | eros.exe | Adult content dailler |
| X | ErrorGuard | ErrorGuard.exe | Spyware remover of dubious repute |
| X | erthgdr | windll.exe | Added by the BEAGLE.AO or BEAGLE.AQ WORMS! |
| Y | eSafe Protect | ESPWatch.exe | eSafe from Aladdin - internet security for gateway and E-mail servers |
| U | ESB | esb.exe | Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys |
| Y | eScan Monitor | AVKWCTL9X.EXE | eScan antivirus |
| U | eScan Scheduler | avkserv.exe | eScan antivirus scheduler |
| U | eScan Updater | Trayicos.exe | eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads |
| X | EScorcher | escorcher.exe | Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead |
| N | ESFTP | esftp.exe | ESftp - FTP client for transfering files between a local PC and another remote computer |
| X | Esoh | Esoh123.exe | Added by the AGOBOT.FF WORM!
|
| N | ESPN BottomLine | bline.exe | ESPN BottomLine. "You can dock the BottomLine to the top or bottom of your screen or drag it around on your desktop, without even worrying about a browser. As long you keep the BottomLine running, you will continue to receive live scores and breaking news, and by clicking on any score or news item, you will be taken directly to the corresponding page on ESPN.com for a full break down." |
| ? | ESS Daemon | Essd.exe | Related to an ESS based soundacard. Is it required? |
| ? | essapm | essapm.exe | ESS Solo soundcard driver. Is it required? |
| Y | Essdc | essdc.exe | Related to an ESS Solo soundcard. Seems as though it's required |
| ? | ESSNDSYS | ESSNDSYS.EXE | Related to an ESS based soundacard. Is it required? |
| Y | ESSOLO | ESSOLO.exe | Sound card driver that re-instates itself every time it's removed |
| Y | esspk | esspk.exe | ESS Technology modem speaker driver file. Required to get on-line with this modem |
| U | EssSpkPhone | essspk.exe | ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets |
| N | Ethernet | tcaudiag.exe | 3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs |
| X | Etraffic | JavaRun.exe | Marketing software from TopMoxie |
| Y | eTrust EZ Firewall | efpeadm.exe | eTrust EZ Firewall |
| U | eTrust PestPatrol Active Protection | PPActiveDetection.exe | PestPatrol real-time protection feature. "Stops spyware before it infects your system" |
| Y | eTrustCIPE | ezdsmain.exe | eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior |
| U | EuroGlot | EuroGlot.exe | Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian" |
| ? | Event Log | eventlog.exe | ?? |
| N | Event Planner Reminders | PLNRnote.exe | Sierra Event Planner tray icon |
| N | Event Reminder | pmremind.exe | A calendar/alarm program that installs with Br?derbund Printmaster |
| U | EVENTLISTENER | EvLstnr.exe | Used with a Nikon digital camera to recognize when the camera is plugged in |
| N | eventmgr | eventmgr.exe | Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs |
| N | Evidence Eliminator | ee.exe | Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis |
| N | evntsvc | evntsc.exe | Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it. Note that eventsvc.exe no longer appears to be in a newer version |
| U | EVOLOSTA | EVOLOSTA.EXE | Evolo Status Monitor for wireless network cards. Allows a user to enter a specific access-point mode SSID, peer-to-peer mode channel, link speed, WEP encryption options, and has enable/disable and rescan buttons. It is not needed if using Windows XP or higher, as they have this built-in to the control panel. Also, if the user is very sure that there is ONLY ONE network available to connect to, then they can remove this. If it is not in startup, and the user needs to run it, they can simply type EVOLOSTA in the Start -> Run dialog to run it |
| X | EvtHtm | evthtm.exe | Premium rate adult content dialler |
| U | EW Message Server | msg32.exe | Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices |
| N | eWare Startup | iWareStart.exe | eWare iWare task bar. Not required |
| X | ewupdater | ewupdater.exe | EasyWebSearch adware updater
|
| N | Excite Platform | Exlaunch.exe | Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer |
| ? | Excite Private Messenger Pipe | x8impipe.exe | ?? |
| N | ExciteAssistantEXE | ASSISTANT.EXE | With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open |
| X | exdl.exe | exdl.exe | BargainBuddy foistware |
| X | exe lptt01 | exe.exe | Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | exe ml097e | exe.exe | Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | execfg4 | execfg4.exe | Added by the ELECTRON WORM! |
| ? | Execute | delfolders.exe | ?? |
| X | ExeName32 | Warm.scr | Added by the SCOLD WORM! |
| ? | exgiwsl | exgiwsl.exe | ?? |
| U | Exif Launcher | Exiflaquickdcr.exe | USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly |
| U | Exif Launcher | QuickDCF.exe | USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly |
| U | ExitKiller | Ekiller.exe | Exit Killer - automatically closes pop-up windows in your browser |
| ? | exmon | hpimoniter.exe | Some kind of hp digital camera maybe or a photo smart connection probe? |
| X | Explkw | expup.exe | Keywords hijacker |
| X | explore | explore.exe | Added by any number of VIRUSES, WORMS or TROJANS! |
| X | Explore | Explorer.exe | Added by the IRC.FLOOD.G TROJAN! Note - this is not the legitimate Windows Explorer (explorer.exe) which would only be in startups if you added it manually |
| X | Explore | explore.exe | Adult content dialler |
| X | explore.exe | Explore.exe | Added by the GRAYBIRD.G TROJAN! |
| U | explorer | explorer.exe | Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL |
| X | explorer | wscript.exe [filename] | Sneaky way to start any VBS script. Many viruses use VBS files |
| X | Explorer | shellexpl.exe | Added by the GPIX and SHELDOR VIRUSES! |
| X | explorer | expl32.exe | Added by the RATSOU TROJAN! |
| X | Explorer | [path to worm] | Added by the AUTEX WORM! |
| X | Explorer | shellexp.exe |
