| Status Code | Name | Command | Description |
| U | z-WrDialer | WrDialer.exe | WinPoet DSL dialer |
| X | ZaCker | [filename].PIF | Added by the HOLAR.A WORM! |
| X | Zacker | Zacker.exe | Added by the GEMEL WORM!
|
| Y | Zapro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| U | zBrowser Launcher | iTouch.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn't have them |
| U | zBrowser Launcher | Commandr.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn't have them |
| ? | zcb | zcb.exe | ?? |
| X | zcproo | qssstiej.exe | Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise. see this thread |
| N | zdnet | kontiki.exe | Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops |
| N | Zebus | msdc32.exe | Runs a HTML tutorial on the Zebus web-site |
| X | Zen.A | [path to trojan] | Added by the ZOOMEN-A TROJAN! |
| X | Zenet | rundll32 CNBabe.dll, DllStartup | CommonName Toolbar spyware. To uninstall see here |
| Y | ZENRC | zenrc32.exe | The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Leave well alone |
| Y | ZENRC Tray Icon | zentray.exe | Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Best left alone |
| Y | ZENworks Imaging Service | ZISWin.exe | Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management" |
| U | ZeroAds | 0 | ZeroAds - culls ads, cookies and pop-ups. Tells ZeroAds not to run at startup - needed to start it manually |
| U | ZeroAds | LAS0Ads.exe | ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work |
| U | ZeroSpyware | ZeroSpyware.exe | FBM Software ZeroSpyware 2004 spyware detector and remover |
| X | zervpack2 | update2.exe | Added by an unidentified VIRUS, WORM or TROJAN!
|
| ? | ZGNUBI | ZGNUBI.exe | ?? |
| X | ZIBMACC | rundll.exe ZIBMACC.INF | ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435) |
| U | ZingSpooler | ZingSpooler.exe | Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums |
| N | Zinio DLM | ZDLM.EXE | Zinio - used to read magazines in digital rather than paper format |
| X | Zip Driver Loader | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | Zip Driver Loader | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| U | ZipDisk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | ZipGenius Clean | zg.exe | ZipGenius file compression utility |
| X | ziphelp | ziphelp.exe | CoolWebSearch parasite related |
| N | ZipMagic | zm32.exe | Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first |
| Y | zlclient | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| U | ZLH | ZLH.EXE | System Tray icon for Norman Antivirus |
| X | Zonavirus | 0 | Added by the KITRO.D (or ARGEN.A) WORM!
|
| X | Zone Alarm | vsmon.exe | Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector |
| Y | Zone Labs Client | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| X | Zone Labs Client Ex | svchost.exe | Added by the NETSKY.F WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| Y | ZoneAlarm | zonealarm.exe | Firewall program from Zonelabs - free version |
| X | zonealarm | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! The only exception is if you have an older version of the ZoneAlarm firewall running |
| X | Zonealarm | Removeme.exe | Added by the FORBOT-BG WORM!
|
| Y | ZoneAlarm Plus | zaplus.exe | Firewall program from Zonelabs - paid for version |
| Y | ZoneAlarm Pro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| U | Zoom | zoom.exe | Zoom - speeds up Windows startup and manages startup applications |
| Y | ZPOINT32 | ZPOINT32.exe | USB graphics/writing tablet driver |
| X | zSearch | Zstb.exe | TotalVelocity zSearch parasite |
| U | zSPGuard | Spguard.exe | "StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'." |
| X | ZtgServerSwitch | server.vbs | ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware |
| X | Zupdate | Zupdate.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | zzb | zzb.exe | IAGold adware downloader |
| X | zzb | zzb.exe | IAGold adware downloader |
| X | zzgshp | gshp.vbs | Homepage hi-jacker that re-defines your IE or Netscape start page |
| ? | zzz-hpi-boot | hpi-boot.exe | Associated with HP Photosmart printers |
| ? | zzzCamlnSuitelll | setup.exe 46*** | ?? |
| ? | zzzhpsetup | setup.exe | ?? |
| U | z-WrDialer | WrDialer.exe | WinPoet DSL dialer |
| X | ZaCker | [filename].PIF | Added by the HOLAR.A WORM! |
| X | Zacker | Zacker.exe | Added by the GEMEL WORM!
|
| Y | Zapro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| U | zBrowser Launcher | iTouch.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn't have them |
| U | zBrowser Launcher | Commandr.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn't have them |
| ? | zcb | zcb.exe | ?? |
| X | zcproo | qssstiej.exe | Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise. see this thread |
| N | zdnet | kontiki.exe | Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops |
| N | Zebus | msdc32.exe | Runs a HTML tutorial on the Zebus web-site |
| X | Zen.A | [path to trojan] | Added by the ZOOMEN-A TROJAN! |
| X | Zenet | rundll32 CNBabe.dll, DllStartup | CommonName Toolbar spyware. To uninstall see here |
| Y | ZENRC | zenrc32.exe | The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Leave well alone |
| Y | ZENRC Tray Icon | zentray.exe | Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Best left alone |
| Y | ZENworks Imaging Service | ZISWin.exe | Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management" |
| U | ZeroAds | 0 | ZeroAds - culls ads, cookies and pop-ups. Tells ZeroAds not to run at startup - needed to start it manually |
| U | ZeroAds | LAS0Ads.exe | ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work |
| U | ZeroSpyware | ZeroSpyware.exe | FBM Software ZeroSpyware 2004 spyware detector and remover |
| X | zervpack2 | update2.exe | Added by an unidentified VIRUS, WORM or TROJAN!
|
| ? | ZGNUBI | ZGNUBI.exe | ?? |
| X | ZIBMACC | rundll.exe ZIBMACC.INF | ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435) |
| U | ZingSpooler | ZingSpooler.exe | Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums |
| N | Zinio DLM | ZDLM.EXE | Zinio - used to read magazines in digital rather than paper format |
| X | Zip Driver Loader | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | Zip Driver Loader | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| U | ZipDisk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| N | ZipGenius Clean | zg.exe | ZipGenius file compression utility |
| X | ziphelp | ziphelp.exe | CoolWebSearch parasite related |
| N | ZipMagic | zm32.exe | Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first |
| Y | zlclient | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| U | ZLH | ZLH.EXE | System Tray icon for Norman Antivirus |
| X | Zonavirus | 0 | Added by the KITRO.D (or ARGEN.A) WORM!
|
| X | Zone Alarm | vsmon.exe | Added by the RBOT.BO WORM! If this was the ZoneAlarm firewall the name column would be TrueVector |
| Y | Zone Labs Client | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| X | Zone Labs Client Ex | svchost.exe | Added by the NETSKY.F WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! |
| Y | ZoneAlarm | zonealarm.exe | Firewall program from Zonelabs - free version |
| X | zonealarm | [random filename] | Added by an unidentified VIRUS, WORM or TROJAN! The only exception is if you have an older version of the ZoneAlarm firewall running |
| X | Zonealarm | Removeme.exe | Added by the FORBOT-BG WORM!
|
| Y | ZoneAlarm Plus | zaplus.exe | Firewall program from Zonelabs - paid for version |
| Y | ZoneAlarm Pro | Zapro.exe | Firewall program from Zonelabs - paid for version |
| U | Zoom | zoom.exe | Zoom - speeds up Windows startup and manages startup applications |
| Y | ZPOINT32 | ZPOINT32.exe | USB graphics/writing tablet driver |
| X | zSearch | Zstb.exe | TotalVelocity zSearch parasite |
| U | zSPGuard | Spguard.exe | "StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'." |
| X | ZtgServerSwitch | server.vbs | ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware |
| X | Zupdate | Zupdate.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:WindowsSystem. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | zzb | zzb.exe | IAGold adware downloader |
| X | zzb | zzb.exe | IAGold adware downloader |
| X | zzgshp | gshp.vbs | Homepage hi-jacker that re-defines your IE or Netscape start page |
| ? | zzz-hpi-boot | hpi-boot.exe | Associated with HP Photosmart printers |
| ? | zzzCamlnSuitelll | setup.exe 46*** | ?? |
| ? | zzzhpsetup | setup.exe | ?? |
