Name/Startup Item	Command	Comments
U	!NoLoad	winrecon.exe	WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U	$EnterNet	Enternet.exe	Connection manager for the EnterNet ISP. You can also use RASPPOE
?	%cmpmixtitle%	%cmpmixstr%	Possibly related to C-Media Mixer Control panel?
X	<executed file name>	Regsrv32.com	Added as a result of the SOUTHGHOST VIRUS!
X	<filename>	App.exe	Added as a result of the WAXPOW VIRUS! where <filename> is the executed filename
X	<name>	Svchosts.exe	Added as a result of the SDBOT.N VIRUS! where <name> can be random
X	<random filename>	wincpu.exe	Added as a result of an unidentified VIRUS!
X	<various names>	elf.exe	Elf is a hacker program, tied to a trojan server
X	(*)API Machine	winSOCKS.exe	Homepage hijacker, see here (* = any digit)
X	(*)Run	win32API.exe	Homepage hijacker, see here (* = any digit)
X	(Default)	media_driver.exe	Added as a result of the TUPEG VIRUS!
X	(Default)	Shania.vbs	Added as a result of the SHANIA VIRUS!
X	(Default)	NOTEPAD.exe	Added as the result of the RUSTY VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor
X	*JanisRuckenbrodII	janis.com	Added as a result of the POPS VIRUS!
Y	*StateMgr	statemgr.exe	Windows ME default for System Restore. Do NOT disable!
X	,main drive Loader	wininfo.exe	Suspected malware as it appears in 3 different registry locations - see here
?	.NET config	sysmon32.exe	??
N	/l:eng	N/A	Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
U	000StTHK	000StTHK.exe	Toshiba Hot key functionality for the function keys (Fn-Esc, Fn-F1 (lock), Fn-F2, Fn-F3, Fn-F4, Fn-F5 (switching between laptop and CRT display output), etc...)
U	00THotkey	00THotKey.exe	For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
X	123456	rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl	Added as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number
U	12Ghosts Popup-Killer	12popup.exe	12Ghosts Popup-Killer
?	17779Proj2002	N/A	??
N	1:	hpdrv.exe	HP utility for monitoring when and how many recoveries have been done
N	1A:MacVisionTrayMonitor	TrayMonitor.exe	Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y	1A:Stardock MCP	mcpserver.exe	Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on
Y	1A:Stardock TrayMonitor	TrayServer.exe	For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
?	1CmailS	NETMAIL.EXE	??
U	1Srv32	SpyAgent4.exe	SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."
U	1Win32Cfg	SpyBuddy.exe	SpyBuddy monitoring software
U	1Win32Cfg	Keyloggerpro.exe	KeyloggerPro - monitoring software
X	2020Downloader	mssvr.exe	2020Search Toolbar related. Reported to be auto-installed
U	2wSysTray	2portalmon.exe	2Wire Homeportal user interface
?	39ELTFH25Z8SKF	Ezg1q5.exe	Seems to be associated with software by Resplendence SP ?
Y	3c1807pd	3cmlink.exe 3cpipe-3c1807pd	3Com WinModem driver. See here for more WinModem information
Y	3capplnk	3capplnk.exe	US Robotics Modem driver
N	3cdminic	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
?	3CM Link	3cmcnkw.exe	??
Y	3Cmlink	3CmlinkW.exe	For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
N	3ComDMIAgent	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y	3cpipe-USRpdA	USRmlnkA.exe	Modem driver files from US Robotics
N	3D Text	3D Text.scr	Added as a result of the JERMY.A VIRUS!
U	3Deep Control Panel	3DeepCTL.EXE	From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X	3Dfx Acc	GFXACC.EXE	Added as a result of the GIBE VIRUS!
N	3dfx Task Manager	3dfxMan.exe	System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y	3dfx Tools	3dfxCmn.dll	Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
Y	3dfxv2ps.dll	3dfxv2ps.dll	Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
?	3Dlabs Taskbar Display Manager	3DLman.exe	3DLabs graphics driver related. System Tray access to display settings?
U	3DLabsHelperDemon	3dldemon.exe	Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled
U	3qdctl.exe	3qdctl.exe	Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
Y	3ware 3DM	3dm.exe	Monitors status of the disk array on 3ware IDE RAID controllers
X	4wd!!!	Natal!.pif	Added as a result of the OPASERV.AI VIRUS!
X	5-1-61-96	members-area.exe	Adult content dialler
X	5-2-46-112	5-2-46-112.exe	Adult content pop-up dialler. Removal instructions here
X	666	Ska.exe	Added as a result of the NETBUS VIRUS!
X	;Rundll	<filename>	Added as a result of the PWSLEGMIR.E VIRUS!
X	@	regedit -s ..win.dll	Added as a result of the SEEKER.K VIRUS!
N	@Hoc Toolbar	AtHoc.exe	One-click activated browsing toolbar used by various web-sites. See here for more info
N	@loha	reminder.exe	Registration reminder for @loha@home E-mail utility
X	@tour_ww	@tour_ww[1].exe	Adult content dialler
Y	a-winpoet-service	winpppoverethernet.exe	WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
U	A1000 Settings Utility	cpqa1000.exe	Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
U	A4Proxy	A4Proxy.exe	Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
?	AAACLEAN	AAACLEAN.INF	??
?	AAAKeyboard	??	??
N	AAATraySaver	TraySaver.exe	System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
U	AAK	aak.exe	Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere"
?	ab EazyScheduler	ezsched.exe	??
N	ABBYY Community Agent	CAGENT.EXE	Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software
X	ABC	keylogger.exe	Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
U	Absolute Shield	dseraser.exe	Absolute Shield/Evidence Eliminator - iternet history eraser
X	ABsr	absr.exe	Added as a result of the AUTOUPDER VIRUS!
X	absr	mwsvm.exe	SeekSeek search hijacker related - as seen here
X	abtu	mp3serch.exe lopsearch.exe	Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version
U	AbyssWebServer	abyssws.exe	Abyss web server
Y	AcBtnMgr_Xxx	AcBtnMgr_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
U	acc	acc.exe	Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"
U	Accelerate	accelerate.exe	Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N	Access Ramp Monitor	armon32.exe	Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
N	AccessRamp Monitor01	ARMon32a.exe	From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."
N	AccessRampLAN01	ARUpld32.exe	Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
U	AcctMgr	AcctMgr.exe	Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities—all from the safety of your own PC
N	AccuWeather.com® Desktop	??	Desktop weather from AccuWeather.com
U	AcerNotebookManager	almxptray.exe	System Tray access on some Acer Notebooks to give faster access to system settings
U	AcerPowerkey	Powerkey.exe	PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
Y	ACMonitor_Xxx	ACMonitor_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
X	acocash	fastdown.exe fastfown.exe	Adult content dialler
U	Acombo3dmouse	Acombo3d.exe	Mouse driver - required if you use non-standard Windows driver features
X	Aconti	aconti.exe	Adult content dialler
U	acoustic	acoustic.exe	Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
N	acpart	agpart11.exe	Program for finding trucks on-line
N	Acrobat Assistant	ACROTRAY.EXE	If you want to create a PDF using Acrobat Distiller, you can execute this program manually just before doing so
U	Acronis Scheduler2 Service	schedhlp.exe	Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images
N	Acronis TrueImage Monitor	TrueImageMonitor.exe	Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N	Action Manager 32	am32.exe	Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
?	ActionAgent	actionagent.exe	"A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required?
N	Activation	Activation.exe	Part of Microsoft Money
U	Activboard	MMKeybd.exe	Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
X	ActiveDesktop	systray32.exe	Added as a result of the DABOOM VIRUS!
X	ACTIVEDS	ACTIVEDS.EXE	Added as a result of the OPASERV.T VIRUS!
N	ActiveEyes	ActiveEyes.exe	ActiveEyes from TFI Technology
U	ActiveMenu	ActiveMenu.exe	Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that Wild Tanget's privacy policy states they also collect and share individuals information
U	ActivePlus	activeplus.exe	Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
Y	ActiveShield	MCVSSHLD.EXE	McAfee VirusScan On-line. See also McAgentExe
N	ActivSurf	backweb*****.exe	Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U	Ad Blocker	blocker.exe	Ad Blocker - blocks popups, and also removes banners, image ads and flash ads
?	Ad Online Guide	adonlineguide.exe	??
N	Ad-aware	Ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
U	Ad-Muncher	ADMUNCH.EXE	Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
U	Ad-watch	Ad-watch.exe	Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
U	AD2KClient	AD2KClient.exe	Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N	AdaptecDirectCD	Directcd.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N	Adaware Bootup	ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
X	Adaware lptt01 or Adaware ml097e	adaware.exe	Variant of the RapidBlaster parasite (in a "Adaware" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware
X	AddClass	AddClass.exe	CoolWebSearch parasite related
U	AdDelete	AdDelete.exe	Banner advertisment blocker
X	AdDestroyer	AdDestroyer.exe	Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code
?	ADG	ADG.exe	SoundBlaster Audigy related?
N	ADGJdet	ADGJDet.exe	Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
X	ADM Library Loader	admlib32.exe	Added as a result of a variant of the SDBOT VIRUS!
X	Adobe	Adobe.exe	Added as a result of an unidentified VIRUS!
U	Adobe Gamma Loader	Adobe Gamma Loader.exe	Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
X	AdobeA	adobes.exe	Added as a result of the FLOOD.BA VIRUS!
X	AdobeFonts	fonts.hta	Browser hijacker - redirecting to Hugesearch.net
X	adp	adp.exe	Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
N	ADQuickAccess	Adtray.exe	After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
X	AdRoarUpdate	ARUpdate.exe	AdRoar adware updater
U	ADService	ADService.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
U	AdsGone	Adsgone.exe	AdsGone - pop-up stopper
N	ADSL Diagnostic Tools	mapiicon.exe	System tray access to ADSL modem diagnostic tools. Available via Start -> Programs
Y	AdslTaskBar	rundll32.exe stmctrl.dll, TaskBar	ISP software, initializes DSL modem
Y	ADSS	ADSS.exe	ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
U	AdSubtract	adsub.exe	AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
X	AdultX	AdultX.exe	Adult content dialler and hijacker
X	Adult_Chat	Adult_Chat.exe	Adult content dialler
X	Adult_Chat1	Adult_Chat1.exe	Adult content dialler
U	ADUserMon	ADUserMon.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N	Advanced Tools Check or ADVCHK	ADVCHK.EXE	Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
X	Advapi	Advapi.exe	Added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS!
U	Advertising Killer	Akiller.exe	AKiller - pop-up stopper
U	Adware Agent	adware agent.exe	Adware Agent popup blocker
?	Aeiwlsta.exe	Aeiwlsta.exe	IBM High Rate Wireless LAN Adapter driver. Is it required?
N	AELaunch	AELaunch.exe	Audio Applications Launcher for the Philips Acoustic Edge soundcard
?	AeXSWDUsr	AeXSWDUsr.exe	Altiris Express NS Client Manager software. Is it required?
U	AEZBProc	aptezbp.exe	IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
U	AFAFilter	windefault.exe	AFAFilter - internet filter software
N	Agent	Agent.exe	Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
?	Agente	Remupd.exe	Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar?
U	AgfaCLnk	AgfaCLnk.exe	For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
Y	AGRSMMSG	AGRSMMSG.exe	IBM AMR modem driver
N	AGSatellite	AGSatellite.exe	Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U	ahfp or ahfprog	ahfp.exe	Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U	AHNSD	AhnSD.exe	AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
?	AHNUE	AHNUE.exe	??
N	AHQInit	ahqinit.exe	Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
X	Ahst	iebs.exe	Downloader - identified by BOClean as MENDWARE trojan. Also identified as PurityScan/Clickspring adware
U	aiepk	aiepk2.exe	Another IE Popup Killer - pop-up stopper
N	AIM	aim.exe	AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
X	AIM reminder	AIM reminder.exe	Added as a result of the BUDDY VIRUS!
X	aimaol lptt01 or aimaol ml097e	aimaol.exe	Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N	AimingClick	AimingClick.exe	AimingClick from AimingTech. Web searching tool. Available via Start -> Programs
N	AIMster	??	Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N	AIMWDInstall	AIMWDInstall.exe	Wild Tangent on-line games installer as part of AOL Instant Messenger. Note that Wild Tanget's privacy policy states they also collect and share individuals information
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	AKEYNAME	WinServ.exe	Added as a result of the EVILBOT.C VIRUS!
U	AKiller	akiller.exe	BuyPin Advertising Killer - popup killer
U	Alarm Manager	Alarm.app.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?	AlarmWatcher	AlarmWatcher.exe	Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?
N	Album Fast Start	ABMTSR.EXE	Scanner software, not required for scanner to work
U	Alcohol or Alcohol Autorun	Alcohol.exe	Alcohol 120% - CD/DVD emulation/writing/copying software
?	Alcom PCL Capture	FMW_PCAP.EXE	??
?	AlcxMonitor	Alcxmntr.exe	Realtek AC97 Audio - Event Monitor. What does it do and is it required?
X	Alevir	Alevir.exe	Added as a result of the OPASERV.A VIRUS!
X	Alevir	Alevir.exe	Added as a result of the OPASERV.F or OPASERV.G VIRUSES!
X	AlevirOld	<worm filename>	Added as a result of the OPASERV.G VIRUS!
N	Alexa	Alexa.exe?	Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs
?	ALFY Accellerator	AlfyAC~1.exe	??
N	AlienAutopsy	Test_BS.exe	Alienware computer technical support software
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
?	AliUSBfix	GREENMK.exe	May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?
U	All Aboard Status	stswin.exe	All Aboard! Internet Connection Sharing status icon
X	All Sea screen saver	TaskTray.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
X	All Sea web link	FWLink.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
U	allSnap	allSnap.exe	"allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"
U	Alogserv	Alogserv.exe	From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
Y	Alps Electric USB Server	Monserv.exe	Alps Electric USB Server - required according to this article
U	AlpsPoint or Apoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?	ALServ	ALServ.exe	Altec Lansing AMS speaker related. What does it do and is it required?
N	Altnet or AltnetPointsManager	points manager.exe	Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
U	AltoMB_service	AltoMBsrv.exe	Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management
U	ALUAlert	ALUNotify.exe	Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop
N	America Online *.* Tray Icon	aoltray.exe	Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N	AME_CSA	rundll32 amecsa.cpl, RUN_DLL	Loads ADSL modem Control Panel applet
Y	Amon	AMON.EXE	Monitoring part of Eset's NOD32 virus-scanner
Y	Amonitor	amon.exe	Tiny Personal Firewall
X	anbv32	nabv32.exe	Added as a result of the TITOG.C VIRUS!
?	AnnotateCheck	AnnCheck.exe	Genius Wizard Pen Tablet driver related. Is it required?
N	Announcements	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N	Anntext	Anntext.exe	Caere Pagekeeper text annotation server
U	Another Internet Explorer Popup Killer	aiepk.exe	Another IE Popup Killer - pop-up stopper
U	Anti-keylogger check	antikey.exe	Anti-keylogger - protects against keylogger programs monitoring your keystrokes
U	Anti-Trojan-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
U	AntiPopUp	AntiPopUp.exe	AntiPopUp for IE - pop-up stopper
X	Antivirus	av.exe	Added as a result of the SINKIN VIRUS! Resets IE start page to realphx.com
?	AntiVirusProtection	qumk.exe	??
Y	AnVir	AnVir.exe	AnVir virus destroyer
U	anvshell	anvshell.exe	System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
?	anycom bluetooth	ftflauncher.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
N	AO Tray or AOTray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
U	AolAcsDaemon1	Acsd.exe	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
X	AolCon	config.com	Added as a result of the TAPLAK VIRUS!
N	AolFix	AolFix.exe	Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL  to run correctly. Not seen much any more and should only run once
X	Aornum	aornum.exe	Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
Y	APC UPS Status	Display.exe	APC PowerChute Personal Edition status icon
U	APC_SERVICE	mainserv.exe	PowerChute® Personal Edition - "safe system shutdown software with sophisticated power management functions"
Y	apc_tray	apc_tray.exe	Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
?	Apmsrv9x	APMSRV9X.EXE	Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
X	App.EXEName	.exe	Added as a result of the BODIRU VIRUS!
U	Appcon	vAppCon.exe	Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established
U	AppExtender	AppExtCB.exe	Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
Y	Application	mdmsetsp.exe	Aztech Labs modem driver
U	AppPlus	AppPlus.exe	AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"
Y	Apvxd or Apvxdwin	APVXDWIN.EXE	Part of Panda Anti-Virus. Required to enable permanent virus protection
Y	Apwheel	Apwheel.exe	Wheel support for an Alps mouse
X	ara-key		Added as a result of the ANTINNY VIRUS! where <random> is a random program name with random characters
N	ARCSolo Recovery	N/A	Backup software by Computer Associates - no longer supported
X	Aritima	aritima.exe	Added as a result of the ARITIMA VIRUS!
Y	ashMaiSv	ashmaisv.exe	Part of Avast! anti-virus software
U	AsioReg	regsvr32.exe ctasio.dll	ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
N	asp4tray	asp4tray.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	AspireTimeMachine	acertmb.exe	System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
X	AST	AST	Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	AStart	AStart	Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
N	asTray	Astray.exe	Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
N	Astro	Astro.exe	Checks for updates to Quicken on a system reboot
N	ASUS Probe	AsusProb.exe	ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U	ASUS SmartDoctor	VGAProbe.exe	ASUS video card fan/thermal monitor
U	ASUS TweakEnable	astart.exe	Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N	ASUSKey	V38SHELL.EXE	System tray Icon for quickly changing video modes
N	ASWDP	ASWDP.exe	MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
X	ASWnk	aswnk.exe	Adult content dialler
U	AT-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
N	ATI GART Set-up Utility	Atigart.exe	Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
U	ATI Launchpad	launchpd.exe	Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
N	ATI Scheduler	Atisched.exe	Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N	ATI Task Application	Atitkad.exe	System Tray access to common display functions on ATI video cards. As above
N	ATI Task Application (Atikey)	Atitask.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
?	Ati2cwxx	Ati2cwxx.exe	For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it
N	Ati2mdxx	Ati2mdxx.exe	For ATI video cards. System Tray access to display mode changing
U	AtiCwd or AtiCwd32	AtiCwd.exe AtiCwd32.exe Ati2cwad.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
N	AtiKey	AtiKey32.exe atiptkad.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
U	ATIModeChange	Ati2mdxx.exe	System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
U	ATIPOLAB or ATIPOLL	ati2evxx.exe	ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces  on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U	AtiPTA or AtiPTAAA or atiptaxx	Ati2ptxx.exe Atiptaxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	AtiQiPcl	AtiQiPcl.exe	Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
U	ATISmart	ati2s9ag.exe	ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
X	atisrc2	windfind.exe	Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
N	atitray or AtiTrayTools	atitray.exe	ATI Tray Tool - allows quick access to ATI graphics card settings
U	ATIX10	atix10.exe	ATI Remote Wonder - PC wireless remote control
X	ATM Control	adpn.exe	Added as a result of the MMS.A VIRUS!
N	ATnotes	atnotes.exe	Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
N	Atomica	atomica.exe	Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
U	AtomicTime	ATOMICTIME.EXE	AtomicTime - utility that synchronizes your PC clock to an atomic clock
U	Atrack	atrack.exe	New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
U	Atray	Atray.exe	Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons
U	ATTBroadbandUpdate	SAUpdate.exe	Big Brother from Quest Software. System and network monitor
U	ATTRedUpdate	AutoUpdate.exe	Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X	AttuneClientEngine	attune_ce.exe	"Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer". Not required - treated as adware
X	AttuneContentUpdater	attune_cu.exe	Related to the above. All needed for the program to do its job properly
X	AttuneDiscovery	attune_di.exe	Related to the above. All needed for the program to do its job properly
X	AttuneSystray	attune_st.exe	Related to the above. All needed for the program to do its job properly
N	aTuner	atuner.exe	aTuner - tweak tool for GeForce based graphics cards
Y	atwtusb	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
U	AU Agent	AUagent.exe	Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
X	au.exe	au.exe	Added as the result of the BEAGLE.B VIRUS!
Y	AUCBPNP	aucbnpn.exe	Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
X	Aucompat	Aucompat.exe	Added as a result of the GEMA VIRUS!
?	AudCtrl	RunDll32 AudCtrl.dll, RCMonitor	Audio control panel?
N	AudioHQ	Ahqtb.exe	For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
Y	Aureal A3D Interactive Audio	sa3dsrv.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y	Aureal A3D Interactive Audio Init	A3dInit.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
X	ausvc	ausvc.exe	Added as a result of the AUTOUPDER VIRUS!
N	Auto T Bar or autotbar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
U	Autobar	autobar.exe	Connect buttons on the keyboard for internet direct access, etc. on HP computers
N	AutoEA	Ahqrun.exe	For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
X	Autoloaderaproposclient	Apropos_Client_Loader.exe	AproposMedia adware
N	AutoMate Task Service	automate.exe	Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
X	Automatic Windows Updater	Update.exe	Added as a result of the GAOBOT.AO VIRUS!
N	Automatically launches the United Devices Agent when you start your computer	UD.EXE	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
N	AUTOPROP	REGPROP.EXE WMPADDIN.DLL	Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
?	AutoShutdown	pssvc.exe	Utility to fix vCard Export in MS Outlook 2000 - although why are these together?
U	AutoSizer	AUTOSIZER.EXE	AutoSizer - utility that automatically maximizes windows when they're opened
N	AutoSpell 5	ASWATC32.EXE	AutoSpell - spell checker
N	AutoTKit	AUTOTKIT.EXE	On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N	autoupd	autoupd.exe	Raxco Software Auto Update utility."Used to keep your software up-to-date"
X	autoupd	autoupd.exe	VIRUS! - found in a folder of the same name
X	AutoUpdater	aupdate.exe	Aupdate, Tinybar variant. Spyware
X	AutoUpdater	AutoUpdate.exe	PeopleonPage foistware
N	AUXXTRAY	au30setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	Avast!	ashserv.exe	Avast! anti-virus software
Y	Avast32	Astart32.exe	Avast32 anti-virus - scanner
U	AvconsoleEXE	Avconsol.exe	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X	AveoAttune	atmdlusr.exe	Related to AttuneClientEngine above
Y	AVG7_CC	AVGCC.exe	AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Y	AVG7_Run	avgw.exe	Part of AVG Anti-Virus 7.0
Y	avgamsvr.exe	Avgamsvr.exe	AVG antivirus related
Y	AVGCtrl	AVGCTRL.EXE	Background task of the AntiVir antivirus program which scans files transparently in the background
Y	avgmsvr.exe	avgmsvr.exe	Required for AVG Anti-Virus 7.0 to function
Y	Avgserv9.exe	Avgserv9.exe	Background monitoring program for AVG anti-virus
Y	AVG_CC or avgcc32	avgcc32.exe	AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y	AVG_EMC	AVGEMC.exe	AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y	AVG_RegCleaner	AVGREGCL.exe	AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
X	Avimgt	Avimgt.exe	Added as a result of the GEMA VIRUS!
X	Avimgt32	Avimgt32.exe	Added as a result of the GEMA VIRUS!
Y	AvMaiSrv	Avmaisrv.exe	Avast32 anti-virus - E-mail scanner
Y	avpcc	avpcc.exe	Kaspersky Labs anti-virus
Y	avpm	avpm.exe	Kaspersky antivirus
X	Avril Lavigne - Muse	<random filename>	Added as a result of the AVRIL-A VIRUS!
Y	AVSCHED32	AVSched32.exe	AntiVir anti-virus from H+BDEV
N	Avtray	Avtray.exe	Command Antivirus tray icon
U	AVWUpd32	AVWUPD32.EXE	AntiVir updater. Useful, but can be run manually
Y	avx communicator	xcommsur.exe	Anti-virus part of BitDefender virus scanner/firewall
Y	Avxlive	avxlive.exe	Bullguard or BitDefender antivirus
Y	avxlni	avxinit.exe	Anti-virus part of BitDefender virus scanner/firewall
?	Avxnews	??	??
N	awhost32	awhost32.exe	Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
?	AxFilter	Rundll32 AXFILTER.DLL, Rundll32	??
Y	a˛	a2guard.exe	a˛ antitrojan
N	B'sCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
N	B.Reader	remin.exe	Birthday Reminder 5.0 - as the name implies
X	b3d	BDEsecureinstall.exe	B3d Projector - installed along with the KaZaA file sharing utility. Causes a program called "ZUPDATE.EXE" to periodically try to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
X	b3dUpdate	Zupdate.exe	Same as above but not installed via KaZaA
U	b9	B9.exe	FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run"
X	b99	msmm.exe	ClientMan parasite variant
X	babeie	rundll32 cnbabe.dll, dllstartup	CommonName Toolbar spyware. To uninstall see here
N	Babylon Translator	Babylon.exe	"Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"
U	BackgroundSwitcher	bgswitch.exe	Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here
N	Backpack UDF	bpudfmon.exe	Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk
U	BackupExecScheduler	besch.exe	Veritas "Back Up My PC" software
?	BackupNotify	backupnotify.exe	HP Digital Imaging related. What does it do and is it required?
N	BackWeb	backweb.exe	Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
N	Backwork	Backwork.exe	Backwork trojan detector
U	BACPI10	bacpi10a.exe	Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
N	BacsTray	BacsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	BADDATE	BADDATE.EXE	Added as a result of an unidentified VIRUS!
X	bargains	bargains.exe bargainbuddy.exe	Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here
?	Bart Station	station.sbrt	Related to PeoplePC ISP. May be a dialler for dial-up accounts?
N	Batchreg1	N/A	Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here
U	Battery Scope	batmgr.exe	Monitors battery levels on a notebook/laptop PC
U	BatteryBar	batterybar.exe	BatteryBar - displays battery usage, and the current percentage of battery power left
X	BatzBack	BatzBack.scr	Added as a result of the BACKZAT VIRUS!
U	BAUSB	BAUSB.exe	Boston Acoustics Audio, USB driver
U	BayMgr	DockApp.exe	Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap	bayswap.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
N	bbSysTray	bbSysTray.exe	Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"
U	bbui	bbui.exe	AOL DSL status monitor displaying a red/green icon indicating if you have a connection
U	BCDetect	bcdetect.exe	Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
Y	BCMDMMSG	bcmdmmsg.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
U	BCMHal	rundll32.exe bcmhal9x.dll, bcinit	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
?	bcmwltry	bcmwltry.exe	Broadcom Corporation Wireless Network Tray Applet. Is it required?
N	BCNT	bcnt.exe	AWS Weatherbug related. What does it do?
U	BCTweak	bctweak.exe	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
N	BCWipeTM	bcwipetm.exe	BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed
Y	BDMCon	Bdmcon.exe	BitDefender antivirus
N	BearShare	bearshare.exe	BearShare file sharing client. Versions known to include spyware - see here
?	BEEI	beei.exe	??
?	BEHL	BEHL.exe	??
?	BEHLO	BEHLO.exe	??
?	BELORVBI	BELORVBI.exe	??
?	Belsta.exe	Belsta.exe	Configuration tool for Belkin wireless network cards. Required to change the card’s configuration. Is it required for correct operation once the confuiguration is changed?
X	Belt	Belt.exe	Abetterinternet adware related
X	Benadril Alert Tool	benadrilalert.exe	Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
Y	bg	bullguard.exe	Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
N	BHOCop	BHOCop.exe	ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware
X	BIE	Rundll32.exe BDSrHook.dll, Rundll32	BDplugin parasite
N	bigfix	BIGFIX.EXE	BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet® Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog
U	BigPond Toolbar	bpumTray.exe	Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier"
N	Billminder	Billmind.exe	Can be setup in Quicken to remind user of due payments. Available via Start -> Programs
X	bingdian	Bingdian.vbs	Added as a result of the BINGD VIRUS!
?	Bingo Charm	charms.exe	Some kind of screen icon kind of like desk flag, but it gives you a choice of icons?
X	Bios	Bios32.exe	Added as a result of an unidentified VIURS!
X	BIOS1	BIOS1.EXE	Added as a result of the OPASERV.T VIRUS!
?	BIOVCIP	BIOVCIP.exe	??
Y	BitDefender Communicator	xcommsvr.exe	BitDefender antivirus
U	BitDefender for MSN Messenger	msnmon.exe	Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually
Y	BitDefender Live! Init	bdinit.exe	BitDefender antivirus
Y	BitDefender Scan Server	bdss.exe	BitDefender antivirus
Y	bitdefenderlive	avxlive.exe	Main program of BitDefender virus scanner/firewall
U	BitDefender_P2P_Startup	BitDefender_P2P_Startup.exe	Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually
N	BitWare Print Monitor	bwprnmon.exe	FaxServe network fax software
N	BJ Printer Status Monitor	Cjstsr.exe	Canon BJ printer status monitor
N	BJ Status Monitor 5xx	CJSTRxx.EXE	Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
N	bjcfd	cdf.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
N	BlackICE PC Protection or BlackIce Utility	blackice.exe	Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
N	BlazeChanger	FBZPaper.exe	Ember graphic file viewer, manager, and touch-up system
U	BlockAds or blads	blads.exe	A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
X	blss	blss.exe	CBlaster trojan/dialer/downloader
N	BLSTAPP	blstapp.exe	Puts access to Creative's BlasterControl in the System Tray
?	BlueToothAuthentication Agent	RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent	Used for a bluetooth adapter?
N	BMail Installation	FTP_back.exe	Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not
U	BMMGAG	Rundll32 PWRMONIT.DLL, StartPwrMonitor	Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
U	BMMLREF	BMMLREF.EXE	Battery Manager for IBM ThinkPad laptops
U	BMO MasterCard Wallet	EWALLET.EXE	The wallet conveniently stores billing, shipping and payment information on your PC
N	BMupdate	BMupdate.exe	Related to BookmarkCentral below. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install
X	Bndt32	Bndt32.exe	Added as a result of the LACON VIRUS!
X	Bnexe	<random filename>	Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Y	BOCleanautostart	Boclean.exe	NSClean's BOClean anti-trojan software
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	Spyware - read here for information and here for removal instructions
X	BookedSpace	bs2.dll,DllRun	Adware, related to the Remanent parasite
N	BookmarkCentral	BMLauncher.exe	Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use"
U	Boost XP Service	bxservice.exe	Boost XP from Systweak - WinXP tweaking utility
X	boot	boot.exe	Added as a result of the ELEM VIRUS!
X	Boot Manager	Njgal.exe	Added as a result of the KILO VIRUS!
X	BootLoader	BootLoader.exe.vbs	Added as a result of the WATERWORKS VIRUS!
U	BootStatus	BOOTST~1.EXE	Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day.  Once you exit it, it has no more effect on resources
N	Bose Wave/PC Monitor	wavepcmonitor.exe	System Tray access for this system (more info on the system here). Available via Start -> Programs
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U	BPK	bpk.exe	Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
U	BQTray.exe	BQTray.exe	System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
X	Brasil	Brasil.exe	Added as a result of the OPASERV.E VIRUS!
X	Brasil	BRASIL.PIF	Added as a result of the OPASERV.E VIRUS!
X	BrasilOld	<worm filename>	Added as a result of the OPASERV.P VIRUS!
Y	Brindys BriTray	BRITRAY.EXE	Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired
N	Broadband Wizard	bbwiz.exe	Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs
N	BrowseProxy	FindService.exe	Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you"
X	browser aid	browseraid.exe	BrowserAid/BrowserPal foistware
Y	Browser Hijack Blaster	bhblaster.exe	Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	BrowserAid/BrowserPal foistware
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
X	Bsoft lppt01	Bsoft.exe	New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Bsx3	Rundll32.exe bs3.dll, DllRun	BookedSpace parasite variant
?	btinst	btinst.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
U	bttray	bttray.exe	System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard (ditto above), advanced configuration, quick connect and shutdown device
Y	BTUSRBDGF	BtUsrBdg.exe	Used with a Mitsumi USB Bluetooth adaptor
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U	bugwatcher service	bugwatcher.exe	Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures
?	BuildBU or bldbubg	bldbubg.exe	Found on a Dell machine??
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
Y	BullGuard	mgui.exe	Part of Bullguard antivirus
U	BullGuard Update	avxlive.exe	Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions
Y	BullGuard XComm	XCOMMSVR.EXE	Part of Bullguard antivirus
Y	BullGuardInit	AVXINIT.EXE	Part of Bullguard antivirus
Y	BullguardoptIn	bulldownload.exe	Part of Bullguard antivirus
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
U	Button Server	bttnserv.exe	Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required
N	ButtonKey	ButtonKey.exe	CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut
N	Buzme	Bmui.exe	Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
U	Buzof.exe	buzof.exe	Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes"
X	bxsx5	RunDLL32.EXE bsx5.dll	BookedSpace parasite variant
X	bxxs5	RunDLL32.EXE bxxs5.dll, dllrun	BookedSpace parasite
X	Bymer.Scanner	Wininit.exe Msinit.exe	Added as a result of the BYMER VIRUS!
X	c	c:archiv~1win.com	Added as a result of the CUYDOC VIRUS!
U	C-Media Echo Control	EchoCtrl.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer (below)
N	C-Media Mixer	Mixer.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	C2K	CYB2K.EXE	CYBERsitter 2000 or 2001 -  anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
X	Cabchk	Cabchk.exe	Added as a result of the GEMA VIRUS!
X	Cabchk32	Cabchk32.exe	Added as a result of the GEMA VIRUS!
X	CABCInstall	CABCInstall.exe	CABC content delivery software
N	Cacheman	Cacheman.exe	Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
Y	CacheMgr	CacheMgr.exe	Sophos Antivirus Remote Update
N	CACStarter	cacstart.exe	Cash A Check - check writing software
U	Caddais BackupOnDemand	BODMon.exe	Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"
U	CADS	cads.exe	Cyber Sentinel internet filtering software
N	CAgent	CAgent.exe	Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
X	cAgOu	<filename>.hta	Added as a result of the KAKWORM VIRUS!
N	CahootWebcard	CahootWebcard.exe	"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed
N	Cal Reminder Shortcut	calrem.exe	Produces a pop-up reminder of events scheduled using the MS Office Calendar
?	CallBumping	cbpopw.exe	??
N	CallControl	ftctrl32.exe	FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
N	CamCheck	CamCheck.exe	NuCam camera software related
N	Camio Viewer x	IXApplet.exe	Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
?	CamMonitor	hpqcmon.exe	From HP and related to digital imaging
N	Canada	Canada.exe	Known to be a dialler - but is it maliscous or clean?
N	Canary	canary-std.exe	Canary monitoring program. Keylogger, monitors all computer activity
N	Canon Printer Monitor BJCxxx	Cjstlst.exe	Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
N	Capfax	capfax.exe	PhoneTools fax software
Y	Capon	Capon.exe	Canon printer driver
N	Capture Express 2000	capexp.exe	Capture Express - screen capture utility
N	Card Monitor	REGCNT09.exe	For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
U	CARPservice	carpserv.exe	Associated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example
?	CasAgnt	CasAgnt.exe	Related to a Casio PDA - but what does it do and is required?
X	Casdvqwa	bmqnzkg.exe	Added as a result of the RANDEX.BE VIRUS!
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"
U	CBWAttn	CBWAttn.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
U	CBWHost	CBWHost.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
?	CBWUser	CBWDial.exe	Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop
X	CC2KUI	comet.exe	Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more information and for the uninstall procedure
Y	ccApp	ccApp.exe	Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this
X	ccApp	<filename>	Added as a result of the OBSORB VIRUS! Note the random filename compared to the valid Norton AntiVirus entry above
U	CCD Manager	DDS.EXE	Project Labs Century CD manager for their CD/DVD storage device
N	Ccdecode	rundll32.exe streamci, StreamingDeviceSetup	Part of the closed caption decdoder/MS VBI codec. Should only run once
Y	CCDoctorLogonTesting	ccdoctor.exe	Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product
Y	CcEvtMgr	ccEvtMgr.exe	Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this
Y	CcPxySvc	CCPXYSVC.exe	Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall
X	ccreg	explorer.exe	Added as a result of the ZCREW VIRUS! Note - this is not the valid explorer.exe
Y	CcRegVfy	ccRegVfy.exe	Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"
Y	ccSetMgr	ccSetMgr.exe	Part of Norton AntiVirus 2004. What does it do?
U	ccWasher	aolwasher.exe	Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL
N	CDANTSRV	CDANTSRV.exe	C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually
X	Cdcompat	Cdcompat.exe	Added as a result of the GEMA VIRUS!
N	CDInterceptor	cdi.exe	CD indexer for measuring the speed of CD players
N	CDTray	CDTray.exe	On HP PCs, this is the small CD icon next to the time
?	CeEKEY	CeEKey.exe	Toshiba Satellite E-Key related. Is it required?
?	CeEPOWER	cepmtray.exe	Toshiba power management related. Is it required?
X	Cekirge	<path to worm>	Added as a result of the KERGEZ.A VIRUS!
?	CEPA	wsot.exe	??
X	cesmain.dll	cmail.dll, Rundll32	CnsMin "Chinese Keywords" hijacker related
N	CFD	CFD.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
X	CFDStart	WinMuschi.exe	WINMUSCHI dialler
Y	cfgintpr	cfgintpr.exe	Configuration Interpreter - part of Tiny Personal Firewall V4
N	cfgwiz	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
?	cFosDNT	cFosDNT.exe	cFos DSL Modem driver related. What does it do and is it required?
?	cFosInst_Check	cfosinst.exe	cFos DSL Modem driver related. What does it do and is it required?
X	cftmon32	taskmgr#.exe	Added as a result of the SOWSAT.C and SOWSAT.J VIRUSES! where # is a number greater than or equal to zero
U	CGServer	cgserver.exe	Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs
X	Cgtask Services	cgtask.exe	Added as a result of the LALA.B VIRUS!
U	ChamClock	ChamClock.exe	Chameleon Clock - system tray clock replacement
?	ChangeLines	chngline.exe	??
N	Check for One Touch Update	wiseupdt.exe	Checks for updates for Visioneer OneTouch scanners
U	Check Messenger	cmesseng.exe	Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account
U	CheckIt	ToolBox.exe	CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify
Y	CheckMsgPlus	MsgPlusH.dll, VerifyInstallation	Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.
?	checktime	ct.exe	Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?
U	CherryKeyMan	KeyMan.exe	Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys
U	ChineseStar	cstar.exe	Chinese language support software
N	CHKADMIN	CHKADMIN.EXE	Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"
X	Choke	Choke.exe-blahh	Added as a result of the CHOKE VIRUS!
U	CHotKey	mhotkey.exe MK9805.EXE	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
N	Christmas Music Player	TTEST6.EXE	"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
?	ChromeMark	keysh.exe	Related to this. Don't know what keysh.exe does though and if it's required
?	ChronitelInitTV	CHTVINIT.EXE	??
X	CiaBackdoor	msldr.com	Added by a VIRUS!
N	CIJxP2PSERVER	CIJxP2PS.EXE	Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7
N	CISrvr Program	CISRVR.EXE	Related to internet setup on Compaq PC's
X	Cissi	Cissi.exe	Added as a result of the CISSI.A VIRUS!
N	CitiVAN	CitiVAN.exe	Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again
Y	Cjstcom	Cjstcom.exe	Canon printer BJ status language monitor
U	CLCLSet	CLCL.exe	CLCL clipboard caching utility
?	CleanEasyImg	cleanall.exe	??
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	CleanSweep Useage Watch	CSUSEM32.EXE	Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
U	CleanTemp	CLEANT~1.EXEB CleanTemp.exe	CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory
N	Cleanup	ONICTASK.EXE	Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet
?	CleanupProgram	cleanup.exe	In a C:\Sonysys folder - Sony Vaio related?
N	Click Radio Tuner	clickr~1.exe	ClickRadio - subscription service playing radio music via the internet
N	Click Tray Calendar	ClickT~1.EXE	ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc
U	Clickoff	Clickoff.exe	Clickoff automatically dismisses annoying dialog boxes
X	CLICKTHEBUTTON	CTB.EXE	Price comparison based spyware
X	CLICONFG	CLICONFG.EXE	Added as a result of the OPASERV.T VIRUS!
N	Client Access Check Version	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
?	Client Access Express Welcome	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
N	Client Access Help Update	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	Client Access Service	CwbSvStr.Exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	Client agent for ARCserve	W95AGENT.EXE	Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?
X	ClientMan1	mscman.exe	Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
N	Clik Status Monitor	toolsclickstat.exe	Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
N	Clipbook Service	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipMate5x	ClipMt5x.exe	Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipmate6	CLIPMT60.EXE	Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipomatic	Clipomatic.exe	Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data
N	Clipsrv	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipTrakker	ClipTrakker.exe	Cliptrakker - clipboard extender
U	CLMFrontPanel	clmpanel.exe	System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost
?	clnwall	rundll.exe setupx.dll, InstallHinfSection ..delwall.inf	??
X	ClockSync	Sync.exe	ClockSynck - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available
U	ClockWise	CLOCKWISE.EXE	ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync
U	CloneCD or CloneCDTray	CloneCDTray.exe	System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions
U	CloneCDElbyCDFL	ElbyCheck.exe	From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
?	Clotusorgreg0	prtStart.exe Orgprt.exe	Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?
X	ClrSchLoader	Loader.exe	Clearsearch variant of IGetNet
U	cma	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
N	Cmaudio	Rundll32 cmicnfg.cpl, CMICtrlWnd	System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel
X	Cmd	cmd32.exe	Added as a result of the P2P.TANKED VIRUS!
X	CME	cme.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeSYS	CMEsys.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeUPD	CMEupd.exe	Part of Gator advertising spyware - see here for removal instructions
?	CMGrdian	CMGrdian.exe	One of the McAfee shared components. What does it do and is it required?
U	CMPDPSRV	CMPDPSRV.EXE	Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more." Installed with some Compaq and Lexmark printers
X	Cn323	cnfrm33.exe	Added as a result of the MIMAIL.D or MIMAIL.G VIRUSES!
X	CNBABE	CNBABE.EXE	Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
N	cnet	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
X	Cnfrm32	cnfrm.exe	Added as a result of the MIMAIL.D or MIMAIL.G VIRUSES!
X	CnsMax	Internat.exe	Added as a result of the POINTEX VIRUS! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%
X	CnsMin	Rundll32.exe CNSMIN.DLL, Rundll32	CnsMin "Chinese Keywords" hijacker related
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
U	Codename Dashboard	dashboard.exe	Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"
X	Coldlife -icmp	Systray.exe	Added as a result of the FSERVE VIRUS! Note - this is not the real SysTray.exe
U	coloreal	coloreal.exe	Makes colours sharper and brighter, but will only work with coloreal capable monitors
N	Colorific Control Panel	Hgcctl95.exe	From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor
X	COM Service	mscom32.com	Added as a result of the BEASTY.H VIRUS!
X	COM Service	msynvr.com	Added as a result of the BEASTY.G VIRUS!
X	COM Service	msjclh.com	Added as a result of the PLUX VIRUS!
X	COM+ System Applications	lsas.exe	Added as a result of an unidentified VIRUS!
N	COM-IP	COMIP.EXE	COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
X	ComcastSUPPORT	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
X	COMCFG	comcfg.exe	Added as a result of the TOADCOM.A VIRUS!
U	COMDRV32	svdhost.exe	Orvell Monitoring 2003 - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/
X	Command	system.exe	Added as a result of the GATECRASH.A or GATECRASH.B VIRUSES!
X	Command	Gotit.exe	Added as a result of the TITOG VIRUS!
X	COMMAND	command.exe	Added as a result of the QQPASS.E VIRUS!
N	CommCtr	commctr.exe	"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs
U	Compaq Alerter	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	Compaq Computer Corp SCCenter Module	SCCENTER.EXE	For Compaq PC's. Part of Backweb
?	Compaq Computer Security	Rundll32.exe SECURE32.CPL, Service	??
N	Compaq DMI	cpqdmi.exe	Compaq version of the Desktop Management Interface
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
U	Compaq Knowledge Center	silent.exe & matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide
N	Compaq Message Server	COMPAQ-RBA.EXE	Applies to CPQBootPerfDB below as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems
U	Compaq PK Daemon	cpqkl.exe	For Compaq laptops for programming user configurable keys. Not required unless you use them
N	Compaq Video CD Watcher	??	For Compaq PC's. MPEG viewer
?	CompaqHW Comp Manager	cpqhcm.exe	Running on a Compaq laptop - any ideas?
N	CompaqPrinTray	printray.exe	Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
N	CompaqSystray	cpqpscp.exe	Compaq System Tray icon
N	COMSMDEXE	comsmd.exe	3Com tray icon
X	ComTry Web Searcher	wstray.exe	Comtry MP3 Downloader related - spyware
X	Config	service.exe	Added as a result of the ISRAZ.B VIRUS!
X	Config Loadation	iEEexplore.exe	Added as a result of the SDBOT.H VIRUS!
X	Config Loadatiorin	I3Explorer.exe	Added as a result of the SDBOT.H VIRUS!
X	Config Loader	svchosl.exe	Added as a result of the GAOBOT.P VIRUS!
X	Config Loader	sysldr32.exe	Added as a result of the GAOBOT VIRUS!
X	Config Loader	scvhost.exe	Added as a result of the GAOBOT.AE or GAOBOT.AO VIRUSES!
X	Config Loader for Microsoft Windows	mwincfg32.exe	Added as the result of the AGOBOT.BD VIRUS!
X	Config Loader2	explores.exe	Added as a result of the GAOBOT.BT VIRUS!
X	ConfiggLoader	cart322.exe	Added as a result of the GAOBOT.DJ VIRUS!
U	ConfigSafe	CFGSAFE.EXE AUTOCHK.EXE	ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
N	ConfigServices	Config.exe	Part of initial setup on a Compaq PC
X	Configuration Loaded	wupdated.exe	Added as a result of the MOEGA or MOEGA.AG VIRUSES!
X	Configuration Loader	aim95.exe cmd32.exe IEXPL0RE.EXE iexplore.exe loadcfg32.exe MSTasks.exe	Added as a result of the LOADCFG or SDBOT. Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas the valid "iexplore.exe" (IE) resides in C:\Program Files
X	Configuration Loader	service5.exe	Added as a result of the GAOBOT.AF VIRUS!
?	Configuration Loader	lfass.exe	??
X	Configuration Loader	sycfg34.exe	Added as a result of the GAOBOT.AN VIRUS!
X	Configuration Loader	wincrt32.exe	Added as a result of the GAOBOT.BF VIRUS!
X	Configuration Loader	windex.exe	Added as a result of the GAOBOT.BM VIRUS!
X	Configuration Loader	windex.exe	Added as a result of the GAOBOT.BZ VIRUS!
X	Configuration Loader	dosrun32.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Service.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Servicess.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	sw32.exe	Added as a result of the AGOBOT.BQ VIRUS!
X	Configuration Loader	System.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Winreg.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	sysinfo.exe	Added as a result of the GAOBOT.FQ VIRUS!
X	Configuration Loader	microsoft.exe	Added as a result of the GAOBOT.JB VIRUS!
X	Configuration Loader	syscfg32.exe	Added as a result of the SDBOT.B VIRUS!
X	Configuration Loading	svchos1.exe	Added as a result of the GAOBOT.DK VIRUS!
X	Configuration Manager	CNFGLD32.EXE Cnfgldr.exe	Added as a result of the SDBOT VIRUS!
N	Configuration Utility	CONFIG.EXE	Controls linksys wireless connection. Available from the Desktop
N	Configuration Wizard	Cfgwiz32.exe	Added as a result of a variation of the HACKTACK VIRUS! Not to be confused with the valid MS "ISDN Configuration Wizard" (Cfgwiz32.exe) in C:\Windows\System
N	Conmgr	conmgr.exe	Starts Winfax pro at startup
U	ConMgr.exe	conmgr.exe	Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
X	Connect2Party	connect2party.exe	Adult content dialler
N	Connection Manager	CManager.exe	SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
?	Contacte	contacte.exe	Some kind of driver?
X	ContentDownload	rundll32.exe MSA64CHK.dll, DllMostrar	123Messenger adware
X	ContentService	winservn.exe	Homepage hijacker
X	ContinueInstall	bpsinstall.exe	BrowserAid parasite
X	Control	rundll32.exe ctrlpan.dll, Restore ControlPanel	CoolWebSearch parasite variant
N	control panel	smctrlw.exe	System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X	Control Panel	System.exe	Added as a result of the DANI VIRUS!
N	ControlCentreTray	XWCTray.exe	System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc
N	Controller	WFXCTL32.EXE	From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
U	Cookie Cop 2	CookieCop.exe	Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cookie Pal	CPBRWTCH.EXE	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookieJar	Cookiejar.exe	Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookiePatrol	CookiePatrol.exe	CookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
U	CookieWall	cookie.exe	CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cool Desk	cdesk.exe	Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you
U	CoolSwitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
X	coolwebprogram	clrssn.exe	CoolWebSearch parasite variant
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
N	Copyright	mwcpyrt.exe	Displays copyright information on IBM ThinkPads
N	Corel Colleagues & Contacts Reminders	cffrem.exe	Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office
N	Corel Desktop Application Director	dadx.exe	The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
N	Corel Family & Friends reminders	CFFREM.EXE	Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic
N	Corel Registration or Corel Registration Reminder	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	CorelCENTRAL 10	I_26dadCC.exe	CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs
N	CorelMedia FoldersIndexer8	MFindexer.exe MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
X	CoreSrv	coresrv.exe	Some IRC trojans/worms use this - see here for more information
?	CORESYS	coresys.exe	??
N	CorrectConnect	CConnect.exe	Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
N	CountrySelection or Country Select	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
?	Coupon Offers	??	??
X	couponica	couponica.exe	Adware - see here
U	CP32NOT	CP32BTN.EXE	For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
?	CPA9P2PSERVER	CPA9P2PS.exe	Found on a Compaq Presario but what is it?
U	CPATR10	CPATR10.EXE	Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast
U	CPBrWtch	CPBrWtch.exe	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
Y	CPD_EXE	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*
X	cpntmgc	wincomp.exe winmgts.exe	Remote-control trojan from Electronic Group - see here
X	cpntmgc	simcss.exe navpmc.exe	MagicControl downloader trojan variant
?	CPortPatch	cppatch.exe	CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?
Y	CPQAcDc	CPQAcDc.exe	Compaq PowerCon power management software for laptops
U	CPQAlert	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See Compaq Message Server above
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
U	CPQEASYACC	cpqeadm.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqeaui	cpqeaui.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqek	kcpqek.exe	For Compaq PC's. Easy Access button support for the keyboard
U	CPQInet Runtime Service	CpqInet.exe	For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers
N	CPQINKAGENT	cpqinkag.exe	That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Cpqset	Cpqset.exe	Default settings software in Hewlett Packard notebook
Y	CPQSTUTFIX	stutfix.exe	For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton
X	cpr	cpr	Adroar.com adware downloader
X	CPU Manager	cpumgr.exe	Added as a result of the PANDEM.B VIRUS!
U	CPUcool	Cpucool.exe	Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
X	Cpusave	Cpusave.exe	Added as a result of the GEMA VIRUS!
X	Cpusave32	Cpusave32.exe	Added as a result of the GEMA VIRUS!
X	cqlyg	world_cup_.bat	Added as a result of the WCUP VIRUS!
?	CQSCP2P SERVER	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
?	CQSCP2PS	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
U	cracked_windows1	cracked_windows1.exe	Cracked Windows popup killer
N	CrazyTalk Serve	rundll32.exe CrazyTalk.dll, DIIServeMediaFile	CrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS
N	CreateCD	Createcd.exe	Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
N	CreateCD50	Createcd50.exe	Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
N	Creative AGP Wizard	agpwiz.exe	Part of Creative's BlasterControl
N	Creative Launcher	CTLauncher.exe	For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
N	Creative MediaSource Go	CTCMSGo.exe	"Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats"
N	Creative PCI Audio Configuration Utility	starter.exe	System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer
N	Creative Service for CDROM Access	Ctsvccda.exe	Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
X	Creative.exe	Creative.exe	Added as a result of the PROLIN VIRUS!
N	CreativeDiscNotifier	CTNOTIFY.EXE	For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel
U	CreativeMixer	CTMIX32.EXE	Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon
N	CriticalUpdate	Wucrtupd.exe	MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site
X	cronos	MARCO!.SCR	Added as a result of the OPASERV.G VIRUS!
X	Crusty	dmcpl.exe	Added as the result of the RUSTY VIRUS!
?	Crystal 3D Audio Control	CWD3DSND.EXE	Crystal 3D Audio sound driver. Is it required?
N	csaRem	spqmdmui.exe	Compaq modem country selection
Y	CSAV_CheckViruses	vchk.exe.exe	Part of Command AntiVirus
?	csc	csc.exe	??
U	CSINJECT.EXE	CSINJECT.EXE	Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes."
X	csrsc	csrsc.exe	Added as a result of an unidentified VIRUS!
X	CSRSS	CSRSS.EXE	Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X	CSRSWIN	<random filename>	Added as a result of the WINSHELL.50 VIRUS!
X	CSRSX	<random filename>	Added as a result of the WINSHELL.50.B VIRUS!
Y	CSScheduleCheck	SCHWIZEX.EXE	Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
X	csss	Csss.exe	Added as a result of the BALICK VIRUS!
U	CSS_Central	CSS_1631.EXE	CSS Communication Agent (95 Host) from Command Software Systems "CSS Central™ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console."
Y	ct	ct.exe	ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it
N	CTAVTray	CTAvTray.exe	For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ
N	CTDVDDet	CTDVDDet.exe CTDetect.exe	Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
U	ctfmon	ctfmon.exe	CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
X	ctfmon	taskmgr32#.exe	Added as a result of the SOWSAT.B VIRUS! where # is a number from 0 to 9
X	Ctfmon.exe	ctfmon32.exe	CoolWebSearch parasite related - hijacking to Slawsearch.com
N	CTHELPER	CTHELPER.EXE	CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
X	CTime	<path to trojan>	Added as a result of the HTTPDOS VIRUS!
?	CTPDPSRV	CTPDPSRV.EXE	Printer driver (in the WINDOWS\System32\spool\DRIVERS\W32X86 folder). Is it required?
N	CTRegRun	CTRegRun.exe	For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative
N	CTStartup	CTEaxSpl.exe	Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard
U	CTsysVol	CTSYSVOL.exe	Creative sound card volume controls
?	cttdpsrv	cttdpsrv.exe	??
Y	cuagentExe	Cuagent.exe	Command Antivirus related
X	cuo	cuo.exe	Added as a result of the BUGBEAR VIRUS!
N	CursorXP	CursorXP.exe	CursorXP from Stardock - tool for creating mouse cursors
U	Customizer2000	logon.exe	Automatic logon feature of Customizer 2000 - "a special utility which is designed to optimize Win9x/ME performance. The program lets you explore the many hidden settings in Windows, and make changes"
N	CuteMX	CuteMX.EXE	File sharing utility
Y	CVPND	cvpnd.exe	Sub-system used by Cisco VPN client for making a connection to a remote IPSec server
U	CWatch	cw.exe	ChatWatch - chat monitoring tool
N	cwbckver	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
N	cwbinhlp	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	cwbsvstr	cwbsvstr.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	cwbwlwiz	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
?	Cwcdschk.exe	Cwcdschk.exe	IBM Thinkpad related?
N	CXMon	Hpi_Monitor.exe	Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
N	Cyber	cyberchk.exe	Part of Belkins "Multimedia Cleaning Kit" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after "x" amount of time has passed
U	Cyber Trio	showmode.exe	From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs
U	Cyber-Defender 2003	uwcdsvr.exe	Cyber Defender 2003
U	CyberLat Ram Cleaner	CLRamCleaner.exe	CyberLat RAM Cleaner is a program that Frees, Optimizes and Defrags your system's wasted memory (RAM). Some users swear by programs such as this but I suggest you read this article and make up your own mind
N	CyberMedia Agent	CMAGENT.EXE	Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled
X	CyberWolf	CyberWolf.exe	Added as a result of the KICKIN.A (or CYDOG.C) VIRUS!
X	CyDoor or CydoorUpdate	CD_Load.exe	Adware. Check here for information about Cy-Door and here for a program that can remove it
N	CyphTray	CyphTray.exe	Cypherus - encryption software
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
N	D066UUtility	D066UUTY.EXE	TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software
X	d3dupdate.exe	bbeagle.exe	Added as a result of the BEAGLE.A VIRUS!
U	D4	D4.exe	Dimension 4 - network time synchronization software
N	DACONFIGEXE	daconfig.exe	3Com NIC Diagnostics. Available via Start -> Programs
Y	DadApp	dadapp.exe	"DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell
N	Daemon	DAEMON32.EXE	Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
U	Daemon or DAEMON Tools-1033	Daemon.exe	Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
N	Daily Planner	dayplan.exe	Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them
N	Dap	DAP.exe	Download Accelerator Plus from SpeedBit - download manager/accelerator
X	DarkDevil.Grasiele.BR	Grasiele.VBS	Added as a result of the LEMBRA VIRUS!
?	DashIE	N/A	Could be related to "Dash Power Shopping" tool bar in IE?
X	Data	System.dat.vbs	Added as a result of the BISCUIT.A VIRUS!
N	Data LifeGuard	BACKWE~1.EXE	Data LifeGuard diagnostic tools for Western Digital's series of hard drives
N	Data LifeGuard LifeLine Lite installer	DLGLI.EXE	Backweb installer - see here
X	Data789	Regedit.exe ....data789.tmp	Homepage hijacker
N	DataCaching	FlashKsk.exe	SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon
?	DataLayer	DataLayer.exe	Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." What does it do and is it required?
N	DataViz Messenger	DvzMsgr.exe	DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts"
X	Datcheck	datcheck.exe	Added as a result of the KEYPANIC VIRUS!
X	Date Manager	datemanager.exe	Date Manager - calender program. Spyware/adware based provided by The Gator Corporation
?	Datechecker	N/A	Could be related to this?
X	DateMakerIntl	DateMakerIntl.exe	Premium rate dialler also referred to as the PORNSPA.F VIRUS!
N	DAupdate	DAupdate.exe	DoubleAgent content manager
?	DAW9532.exe	DAW9532.EXE	Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required?
U	DayToday	DAYTODAY.EXE	DayToday from RoboMagic Software Corp. Displays the date on the taskbar
U	DAZEL Delivery Agent	DcDaemon.exe	Control and send documents, etc, to any destination - see here
N	dbserv	dbserv.exe	Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
U	DCfssvc or dcfssve	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
X	DDCActiveMenu	DDCActiveMenu.exe	Digital Distribution Channel from Wild Tangent - adware
X	DDCM or DDCMan	DDCMan.exe	Digital Distribution Channel from Wild Tangent - adware
X	ddeproc	ddeproc.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
X	DDialler	DDialler.exe	Adult content dialler
?	DDT	N/A	??
N	DeadAIM	rundll32.exe DeadAIM.ocm, ExportedCheckODLs	DeadAIM - feature enhancing product for AOL's Instant Messenger program
X	Debug	DebugW32.exe	Added as a result of the GUBED VIRUS!
X	Default web browser	IexpIore.exe	Added as a result of the OBLIVION.B VIRUS! Note - don not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L"
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Delay or Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
X	Delete Me	worm.exe	Added as the result of the DOOMHUNTER VIRUS!
N	Dell Alert	DAMon.exe	"Dell Alert" utility, that's supposed to make interaction with Support easier
?	DellDMI	delldmi.exe	Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards?
U	DELLMMKB or DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
X	delmsbb	delmsbb.exe	nCase adware
X	delsubmit	rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe	CoolWebSearch parasite related
?	DelTmp	DelTemp.exe	Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?
N	DeltTray	deltray.exe	System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel
?	demon	demon.exe	Part of the French Wanadoo ADSL extense pack. What does it do and is it required?
U	DepFrez	frzstate.exe	Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example
?	Description of Shortcuts	*.exe	* seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search)
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	??
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	DeskFlag - animated USA flag on the desktop
U	Desksite CMA	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
X	Desktop	rundll32.exe msconfd.dll, Restore ControlPanel	Added as a result of the BOOKMARKER VIRUS!
N	Desktop Architect	DATRAY.EXE	Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc
N	Desktop Plant	AZARE10S.PLT	Vritual plant from here - this version is an Azalea, there are others so the filename may be different
N	Desktop Weather	THE WEATHER CHANNEL.exe	Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc
N	desktopmgr	desktopmgr.exe	Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry"
U	DesktopX	DESKTOPX.EXE	A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
U	detect	idetect.exe	iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled
?	detect	turbodetect.exe	??
N	Detector	detector.exe	USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
U	Device Detector	DevDetect.exe	Watches for external digital imaging products being connected from ACD Systems
U	DeviceDiscovery	hpotdd01.exe	Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products
X	DevicePath	Proyecto1.exe Root.exe	Added as a result of the GRUEL VIRUS!
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards.  Provides audio support for DOS applications.  Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
?	Devlog	??	??
?	DGJM	DGJM.exe	??
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
?	DHNUXB	DHNUXB.exe	??
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Dialer	rundll32.exe msa32chk.dll	Unidentfied malware
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders
N	Dialog Helper	PDDLGHLP.EXE	Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
N	DigiGuide	CLIENT.EXE client01.exe	TV guide and reminder
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
N	Digital River eBot	downlo~1.exe	Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here
N	DigitalWizard	ISWizard.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DigitalWizard Monitor	dwMon.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DIGStream	digstream.exe	DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically
U	Dimension4	d4.exe	Atomic clock synchronisation freeware - starts-up, adjusts the system clock, then shuts down
X	Dino3	dino3.exe	Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X	Dir1	caKe	Added as a result of the CAKE VIRUS!
U	Direct Update	DUControl.exe	DirectUpdate dynamic DNS updater
N	DirectCD	DirectCD.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
U	DIRECTVDSL	Directvdsl.exe	Starts DirectTV DSL modem at boot up. Can also be started manually
X	DirectX	ddhelp32.exe	Added as a result of the BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe
X	directx	Directx.exe Sqlexploit.exe NTCmd.exe PipeCmd.exe	Added as a result of the SDBOT.D VIRUS!
X	DirectX	DirectX.exe	Added as a result of the BLAXE or LOGPOLE VIRUSES!
X	DirectX For Microsoft Windows	dtxservice.exe	Added as a result of the PROGENT VIRUS!
X	DirectX64	DirectXset.exe	Added as a result of the BROWNEY.A VIRUS!
U	Dirkey	Dirkey.exe	Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders
?	Disable EHCI	nousb20.exe	??
N	Disc Detector	CtNotify.exe	For Creative sound cards. Detects when you insert a CD, DVD, etc
?	disc detector	qnetquestnotifty.exe	??
?	discoveg	discoveg.exe	??
N	DiscoverDeskshop	Deskshop.exe	Discover Deskshop - single use "virtual" credit card
X	Disk Master	<filename>	Added as a result of the DISTER VIRUS! - a spam relayer
?	DISKMON.EXE	DISKMON.EXE	??
N	Disknag	disknag.exe	Dell program that reminds you to make your  backup diskettes
X	Diskstart	Code.exe hit.exe Snt.exe	Adult content dialler
X	Diskstart	cat.exe	MS-Connect dialler
U	Disk_Monitor	Disk_Monitor.exe	Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader
N	DisplayTrayIcon	TrayIcon.exe	System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display
N	Distiller Assistant 3.01	DISTASST.EXE	From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
U	distributed.net client	DNETC.EXE	Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses
Y	Dit	dit.exe	"Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found
N	DiTask.exe	DiTask.exe	Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs
X	DivX MediaPlayer 7.0	Dr.DivX.exe	Added as a result of the ALADINZ.G VIRUS!
X	DivX Updater	DivX.Exe	Added as a result of the NALDEM or MASTAK VIRUSES!
X	Divx4 codec	devldr32.exe	Added as a result of an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file
N	DJREGFIX	regedit /s c:\hpdjregfix.reg	DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers
U	DkService	DkService.exe	From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. Used to schedule defragmenting on a regular basis and not required if you do so manually. In Diskeeper Lite (v7 freeware version), DkService also pops up a 'reminder' after Diskeeper has not been used for two days. Removing the DkService startup will end this and have no further impact as scheduled defragmenting is not available in the Lite version. Note - when Diskeeper (Lite) is started manually, DkService will load into memory too and NOT unload after Diskeeper has been closed
X	Dkware lptt01 or Dkware ml097e	dkware.exe	Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
?	dkzzixm	dkzzixm.exe	??
Y	dla	tfswctrl.exe	Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
N	DlaTray	Dlatray.exe	On HP PCs, tray icon for dla above
X	dlder	dlder.exe	Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus
X	DlDir1	caKe	Added as a result of the CAKE VIRUS!
?	DLForcerExe	DLForcerEXE.exe	??
N	DLF_00000B00	Vcdlf.exe	Known to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown
N	DLG	DLGCHBW.exe	Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
N	DLHelperEXE	WATCH.exe	Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
X	DLHelperEXE.exe	N/A	Downloader for Microgaming/Casino software - stealth installed
X	DLL Service Manager	<path to worm>	Added as a result of the RPCBOT.F VIRUS!
X	DLL32	dllmem32.exe	Added as a result of the KWBOT.E VIRUS!
?	DLT	dlt.exe	??
X	dluca	dluca.exe	Adult content dialler - see here
X	dluca	dluca.exe	Added as a result of the DLUCA.C VIRUS!
X	Dluxjp	cnfrm.exe	Added as a result of the DLUCA.D VIRUS!
X	DM mgr	dm_mgr.exe	Added as a result of the JITTAR VIRUS!
N	DMILDR	dmildr.exe	Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs
N	DMISL	DMISL.EXE	DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
N	DMISLAPP	DMISLAPP.exe	DMI similar to above
X	DM_server	dmserver.exe	Comet Cursor adware
X	Dnar	Dnar.exe	Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here
Y	DNE Binding Watchdog	rundll dnes.dll, DnDneCheckBindings	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
Y	DNE DUN Watchdog	rundll dnes.dll, DnDneCheckDUN13	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
?	DNS2GoClient	dns2goclient.exe	DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?
?	DNXVC	dnxvc.exe	??
X	DocTor	Doctor.exe	Added as a result of the DOTOR VIRUS!
N	DocuMagix Init	PWATCH.EXE	PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
X	DOGStart	GSDOGST.EXE	Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS
?	Doing	doing.exe	??
U	Don't Panic	dontpanicdemodp.exe	30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite."
U	Don't Panic Pop-Up Stopper	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
?	Dosbat	??	??
N	Download Accelerator Plus 5.0	DAP.exe	Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is "adware" based
X	Download Plus	DownloadPlus.exe	DownloadPlus parasite - opens pop-up adverts
N	Download Wonder	DownloadWonder.exe	Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features
X	DownloadWare	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
X	DownloadWare Engine	Dwe.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N	DPAgnt	DPAgnt.exe	digitalPersona fingerprint scanner
Y	Dpcnav	dpcnav.exe	DirecWay from DirectTV satellite based high-speed internet access
Y	DPCProxyLoadOnStartup	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access
Y	Dpcstart	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access. Proxy software
X	dpi	dpi.exe	Adware based media viewer by The Delfin Project
U	dpps2	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N	Drag'n'Drop_Autolaunch	Autolaunch.exe	Iomega HotBurn - CD-RW burning software
?	DragDrop	DragDrop.exe	??
?	dregfix	ph_finder.exe	??
?	dried.exe	dried.exe	??
N	DriveLED	OODLed.exe	O&O DriveLED - displays your HDD LED on your monitor. Start manually
X	Driver	gbot.exe	Added as a result of the JUNTADOR.K VIRUS!
X	Driver32	Scam32.exe	Added as a result of the SIRCAM VIRUS!
N	DriveSelect	driveselect.exe	DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs
U	dRMON SmartAgent	SmartAgt.exe	Part of the network monitoring program group for 3Com NIC cards. See here for more info
X	drmu	W95Mm.exe	Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread
X	drocher	d.exe	Adult content dialler
?	DrvListnr	DrvListnr.exe	Analog Devices SoundMAX soundcard related. What does it do and is it required?
N	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related
X	drvr32h	drvr32h.exe	Added as a result of an unidentified VIRUS!
X	drvrmanager	drvrquery32.exe	Added as a result of the BOOHOO VIRUS!
X	drvupd	rundll32 ..drvupd.inf	Hijacker - drvupd.inf file installs a "searchforge.com" hijack
Y	Drwebscheduler	Drwebscd.exe	Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem
U	DS Clock	dsclock.exe	Digital desktop clock including synchronization with atomic servers - see here
X	dsa	dsa.exe	Homepage hijacker - redirecting to downseek.com
N	DSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
X	Dsi	dp-******.exe	Added as a result of unidentified adware where ****** are random characters
X	Dskcompat	Dskcompat.exe	Added as a result of the GEMA VIRUS!
N	DSL Monitor	spdstrm.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y	DSLagentexe	DSLagent.exe	Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection
X	DSS	dssagent.exe	DSSAgent by Brřderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info
?	DSSSGENS	dssagens.exe	??
N	DU Meter	DUMETER.EXE	Hagel Technologies internet bandwidth monitor
N	dumprep 0 -k or dumprep 0 -u	dumprep 0 -k dumprep 0 -u	Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
U	DVDBitSet	DVDBitSet.exe	DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
X	Dvdcompat	Dvdcompat.exe	Added as a result of the GEMA VIRUS!
N	DVDSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
?	DVDUpgrade	DVDUpgrd.exe	??
Y	Dvp95	Dvp95.exe	Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine
Y	dvpapi9x	DVPAPI9X.exe	Command AntiVirus for Windows 95/98/Me
Y	DvpInitExe	Dvpinit.exe	Command Antivirus related
Y	dvprpt	Dvprpt.exe	Command Antivirus real time protection
U	DVSync	dvsync.exe	DVSync is the program that allows you to synchronize your daVinci’s PDA's data with your Personal Information Manager on the PC
X	dw	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N	DwlClient	support.exe	Download manager for Dell support alerts
X	Dx	sys#.exe	Added as a result of the DEXTER.A VIRUS! where # is a random number
X	Dx8compat	Dx8compat.exe	Added as a result of the GEMA VIRUS!
N	DXDllRegExe	dxdllreg.exe	Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it
X	DxLoad	DX3DRndr.exe	Added as a result of the GIBE.B VIRUS!
N	DXM6Patch_981116	p_981116.exe	Win32 cabinet self extractor. More info here
X	Dxsty	Dxsty.exe	Added as a result of the GEMA VIRUS!
X	Dxupdate.exe	Dxupdate.exe	Added as a result of the MAFEG VIRUS!
X	DyFuCA	optimize.exe	Adult content dialler - see here
X	DyFuCA Active Alert	actalert.exe	Adult content dialler - see here
?	DZKillMe	DZSAVEME.EXE	??
X	E-Card	ecard.exe	Added as a result of the YODI VIRUS!
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that regognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
N	E6TaskPanel	TaskPanl.exe	Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X	Eac Download	download.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
U	EACLEAN	eaclean.exe	For Compaq PC's. Easy Access button support for the keyboard
X	Eac_Cnry	canary.exe	Added as a result of the CANARY VIRUS!
?	Eac_rnvdl	ANTIVIRUS_INSTALL.EXE	??
X	EanthologyApp	EANTHO~1.EXE	Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
N	EAPCISETUP	wizard.exe	Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
N	EarthLink ToolBar 5.0	etoolbar.exe	EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time
N	Easy Start Button	esb.exe	Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
X	EasyDates_nl	EasyDates_nl.exe	Adult content dialler
U	EasyKey or Easy Key	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
X	easyServ	Server.exe	Added as a result of the EASYSERV VIRUS!
U	EasySync Pro	XCPCMenu.exe	EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes
U	EasyTuneIII	EasyTune.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U	EasyTuneIV	ET4Tray.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
X	easywww	easywww2.exe	Added as a result of an unidentified VIRUS!
N	EbatesMoeMoneyMaker	wjview ...Code	Ebates is a website that provides discounts from purchases from many websites. Discounts are automatic if on the Ebates listing. Discounts are paid in cash quarterly
X	eBay Toolbar	EBAYTBAR.EXE	eBay Toolbar - reportes as spyware as it "phones home"
U	eBoard or eMachines eBoard	Eboard.exe	eMachines multimedia keyboard manager. Required if you use the extra keys
N	eBot	DownloadWizard.exe	eBot from Digital River - "helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs
?	ecpe	ECPE.EXE	??
?	edexter	edexter.exe	??
X	editpad	editpad.exe	CoolWebSearch parasite related
X	editpad	editpad.exe	CoolWebSearch parasite variant. Note! - this is not related to any utility that might bear the same name and resides in the C:\Winnt or C:\Windows directory
N	EDLoader	DTLoader.exe	Effective Desktop from MiniStars Software - desktop management software no longer being supported
U	EDRestore	??	Set Point from Easy Desk Software - "small utility that automatically sets System Restore points for WinME/XP"
U	Edwizard	Edwizard.exe	SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
N	eFax.com Tray Menu	HotTray.exe	eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
X	efaxs lptt01 or efaxs ml097e	efaxs.exe	Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	Efpap.exe	Efpap.exe	Easy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching
?	ehTray	ehtray.exe	eHome Media Center PC related - what does it do and is it required?
U	Eicon NetworksLAN_DAEMON or Eicon TechnologyLAN_DAEMON	watch.exe	Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually
X	eixfi	china.bat	Added as a result of the WCUP VIRUS!
U	Elbycheck	ElbyCheck.exe	From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
X	Element	Element.txt	Added as a result of the ELEM VIRUS!
N	elm	Elmenv.exe	ViaTech eLicense for securing, distributing and selling music online
U	ELSA WINman Suite	Winmsuit.exe	Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU
Y	ElsaCapiCtl	Rcapi.exe	Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem
U	ELSAChipGuard	elsavect.exe	ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking
N	EMA.exe	EMA.EXE	Time management system which helps you to manage your time and appointments
X	eMailEncryption	VELOZSYS.EXE	eAcceleration Stop-Sign related - foistware. Read their privacy statement here
X	emsw.exe	emsw.exe	Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
U	EM_EXEC	EM_EXEC.EXE	Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
N	EN4060C Taskbar	en4060ct.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
?	encapsulated command tool	wintr.com	??
N	Encarta Dictionary Quickshelf	QSHLFED.EXE	Provides quick access to Encarta's Dictionary features?
N	ENCMONITOR	monitor.exe	The Encompass Monitor. This program is the Connect Direct Program.  It is more trouble than it is worth and few use it
N	Encoder Agent	WMENCAGT.EXE	MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed
U	Encompass_ENCMONTR	ENCMONTR.EXE	Optional simple browser from Yahoo (Encompass)
?	ENCSurf	surfboard.exe	??
Y	EngUtil	EngUtil.exe	Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking
?	ENSApServer2_0	APSERVER.EXE	Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
?	ENSMIX32.EXE	ENSMIX32.EXE	Sound card driver. Is it required?
U	EnsoniqMixer	starter.exe	Puts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility
X	Enumerate Service	wsys.exe	Added as a result of the MANIFEST VIRUS!
U	eonemng	eOneMng.exe	eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC
U	ePrompter	ePrompter.exe	ePrompter - E-mail notification software
N	EPSON Background Monitor	STMS.EXE	Supposed to keep an Epson printer ready for quick printing.  Users report little difference whether it is on or not
U	EPSON CardMonitor	EPSON CardMonitor1.0.exe	Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint
N	EPSON Status Monitor 3 Environment Check or EPSON Status Monitor 3 Environment Check 2	e_srcv03.exe e_srcv02.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
U	Epson Stylus C62 Series	E-S0BIC1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U	Epson Stylus C82 Series	e_s0hic1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U	EpsonPhotoStarter	EPSON_PhotoStarter.exe	Only needed if you want to make full use of the capabilities of an Epson printer that included this
?	Equipmen	Equipmen.exe	??
N	EReg	reg32.exe	EReg is a software registration tool incorporated on products such as those by Brřderbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it
?	erm	erm.exe	??
X	eros.exe	eros.exe	Adult content dailler
Y	eSafe Protect	ESPWatch.exe	eSafe from Aladdin - internet security for gateway and E-mail servers
U	ESB	esb.exe	Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
Y	eScan Monitor	AVKWCTL9X.EXE	eScan antivirus
U	eScan Scheduler	avkserv.exe	eScan antivirus scheduler
U	eScan Updater	Trayicos.exe	eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads
X	EScorcher	escorcher.exe	Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead
N	ESFTP	esftp.exe	ESftp - FTP client for transfering files between a local PC and another remote computer
?	ESS Daemon	Essd.exe	Related to an ESS based soundacard. Is it required?
?	essapm	essapm.exe	ESS Solo soundcard driver. Is it required?
Y	Essdc	essdc.exe	Related to an ESS Solo soundcard. Seems as though it's required
?	ESSNDSYS	ESSNDSYS.EXE	Related to an ESS based soundacard. Is it required?
Y	ESSOLO	ESSOLO.exe	Sound card driver that re-instates itself every time it's removed
Y	esspk	esspk.exe	ESS Technology modem speaker driver file. Required to get on-line with this modem
U	EssSpkPhone	essspk.exe	ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets
N	Ethernet	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
X	Etraffic	JavaRun.exe	Marketing software from TopMoxie
Y	eTrust EZ Firewall	efpeadm.exe	eTrust EZ Firewall
Y	eTrustCIPE	ezdsmain.exe	eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior
U	EuroGlot	EuroGlot.exe	Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian"
?	Event Log	eventlog.exe	??
N	Event Planner Reminders	PLNRnote.exe	Sierra Event Planner tray icon
N	Event Reminder	pmremind.exe	A calendar/alarm program that installs with Brřderbund Printmaster
U	EVENTLISTENER	EvLstnr.exe	Used with a Nikon digital camera to recognize when the camera is plugged in
N	eventmgr	eventmgr.exe	Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
N	Evidence Eliminator	ee.exe	Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis
N	evntsvc	evntsc.exe	Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it
U	EW Message Server	msg32.exe	Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices
N	eWare Startup	iWareStart.exe	eWare iWare task bar. Not required
N	Excite Platform	Exlaunch.exe	Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer
?	Excite Private Messenger Pipe	x8impipe.exe	??
N	ExciteAssistantEXE	ASSISTANT.EXE	With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open
X	exe lptt01 or exe ml097e	exe.exe	Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	execfg4	execfg4.exe	Added as a result of the ELECTRON VIRUS!
?	Execute	delfolders.exe	??
X	ExeName32	Warm.scr	Added as a result of the SCOLD VIRUS!
U	Exif Launcher	Exiflaquickdcr.exe QuickDCF.exe	USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
U	ExitKiller	Ekiller.exe	Exit Killer - automatically closes pop-up windows in your browser
?	exmon	hpimoniter.exe	Some kind of hp digital camera maybe or a photo smart connection probe?
X	Explkw	expup.exe	Keywords hijacker
X	explore	explore.exe	Added as a result of the NETBUS, HAWAWI and other VIRUSES!
X	Explore	Explorer.exe	Added as a result of the IRC.FLOOD.G VIRUS! Note - this is not the valid Windows "explorer.exe"
X	Explore	explore.exe	Adult content dialler
X	explore.exe	Explore.exe	Added as a result of the GRAYBIRD.G VIRUS!
U	explorer	explorer.exe	Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL
X	explorer	wscript.exe <filename>	Sneaky way to start any VBS script. Many viruses use VBS files
X	Explorer	shellexpl.exe	Added as a result of the GPIX and SHELDOR VIRUSES!
X	explorer	expl32.exe	Added as a result of the RATSOU VIRUS!
X	Explorer	<path_to_worm>	Added as a result of the AUTEX VIRUS!
X	Explorer lptt01 or Explorer ml097e	explorer.exe	Variant of the RapidBlaster parasite (in an "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Explorer which has the same executable name
X	Explorer32	Expl32.exe	Added as a result of the HACKTACK VIRUS!
U	Exshow95	EXSHOW95.exe	Support software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices
U	ExtraDNS	ExtraDNS.exe	ExtraDNS - DNS configuration tool
?	Extranet AutoDial	AutoExt.exe	Nortel Networks Contivity Extranet Switching Software
N	Eye Tide Launcher	oneeyetideone.exe	Nascar wallpaper
N	ezagent	ezagent.exe	EzVCR recording software for the ASUS TV FM card. Available via Start -> Programs
N	EZDesk	EZDESK.EXE	Utility that remembers icon locations for each user and resolution. Available here
N	EzEjMnAp	EzEjMnAp.exe	For IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start -> Programs
X	eZmmod	mmod.exe	Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
?	EZNORUN	EZNORUN.EXE	Easy Internet related?
Y	ezShieldProtector for Px or ezPS_Px	ezSP_Px.exe ezSP_PxEngine.exe	Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings
U	EZSMART App	ezsmart.exe	EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported
X	ezula	eZmmod.exe	Regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
X	eZulaMain	eZulaMain.exe	Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
X	eZuluMain	eZuluMain.exe	Comes with "KaZaA" installation. Advertising Spyware. Not required but KaZaA won't work
U	E_S10IC2	E_S10IC2.exe	Epson Stylus printer monitor - for checking ink levels, etc.
U	E_S23	E_SICN03.exe	Epson printer status monitor - for checking ink levels, etc.
U	E_SOEIC1	E_SOEIC1.exe	Epson Stylus printer monitor - for checking ink levels, etc.
U	F-Secure Management Agent	FSMA32.EXE	F-Secure Antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products
Y	F-Secure Manager	FSM32.EXE	F-Secure Antivirus - carry out scheduled virus scans automatically
Y	F-StopW	F-StopW.exe	F-Prot anti-virus background scanner by F-Risk Software
X	f607	f607.exe	Added as a result of the URAT.B VIRUS!
U	FamilyKeyLogger	cisvc.exe	"Family Keylogger - is your best choice, if you want to know what other users on your machine are typing". Note! - this is not the cisvc.exe service.
?	fapmon	fapmon.exe	Fair Access Policy monitor for DirecPC/DirecWay internet access
U	FastCache	fc.exe	FastCache from AnalogX - speeds up browsing by resolving DNS requests locally
N	FastTrack Accelerator	SPEED UP.EXE	FastTrack Accelerator - "speedup" utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus
N	FastUsr or fast	fast.exe	Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
U	FatPipe	DHCP	Software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U	Fatpipe Dialer	fpdialer.exe	See above
U	FBDirect	FBDirect.exe	Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
?	FBI	FBISM.exe	Compaq related but what does it do?
X	fc	runfc.exe	Added as a result of the CAMPURF VIRUS!
?	FD_SAP	FD.exe	Genicom SAP Printer driver. Is it required?
U	FEELitDeviceManager	feelitdm.exe	Associated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
X	fegoze	SVCH0ST.EXE	Added as a result of the GRAYBIRD.D VIRUS!
U	Fellowes Proxy	R3proxy.exe	Installed with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
U	FG1_00	frntgate.exe	FrontGate MX - e-mail spam blocker
U	Fhtisxk	fhtisxk.exe	XtraKeys - keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove via Spybot S&D (for example)
?	file indexing service	msfindfile.exe	New version of MS FindFast and still a resource hog?
N	FileFreedom_Plugin	wtm.exe	FileFreedom peer-to-peer sharing program
X	FileManager32	Wscript.exe ..ChkMgr32.vbs	Added as a result of the NOTUP.A VIRUS!
X	FileSoft	Wscript.exe UpdataFiles.vbs	Added as a result of the SST.B VIRUS!
U	FilterGate	filtergate.exe	Filtergate internet filtering software - filters sounds, popup ads, background sound and other unnecessary website items
U	Filterguard	Filtrgrd.exe	An icon located in the lower left of the screen and looks like a lifesaver. This icon is a “short-cut” to access the basic features of SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by “right-clicking” on the icon
X	Find Fast	Findfast.exe	Complete utter waste of space! Part of MS Office - searches disk drives for Office file types to make opening them easier
Y	Find Virus Launch Program	fvlaunch.exe	Part of Dr. Solomon's Antivirus
N	FinePrint Dispatcher vx	FPDISPxA.EXE	FinePrint - virtual printer for use with any printer. Search for "dispatcher" here for more information. If removed, it will re-install when program is run - hence the Y recommendation
Y	Fix-it	mxtask.exe	Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required
Y	Fix-it AV	memcheck.exe	Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
?	FLASH32	-flash32.exe	??
N	FlashPath Status or FlashPath Monitor	SDSTAT.EXE FLSHSTAT.EXE	System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
U	Flexicd	Flexicd.exe	CD player - part of the Win95 Power Toys
?	FLMTRUSTKB	KbdAp32A.exe	Keyboard utility for a Trust brand keyboard. What does it do and is it required?
?	FLMTRUSTMOUSE	mouse32a.exe	Mouse utility for a Trust brand mouse. What does it do and is it required?
X	FLooDNeT	FLooDeR.exe	Added as a result of the FLOODNET VIRUS!
?	Flow Go TV	flogotv.exe	??
X	flps	flps.vbs	Added as a result of the BYRON VIRUS!
?	FLSVCI	FLSVCI.exe	??
Y	FltProcess	msinet.exe	Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done
X	FlyswatDesktop	flydesk.exe	Advertising spyware
U	FmctrlTray	Fmctrl.EXE	Genius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)
X	fmnwebassist	fmnwebassist.exe	Adware popup generator
U	FMStart	Fmstart.exe	GFI FAXmaker - native fax connector for Microsoft Exchange Server or for networks, allows all users to send and receive faxes right from their desktop
?	Focus	Focus.exe	ISDN configuration wizard?
X	Folder Service	wssdtu.exe	Added as a result of the MANIFEST VIRUS!
N	Folding@home	WINFAH.EXE	Folding@Home is a distributed computing project which studies protein folding, misfolding, aggregation, and related diseases - must be running in order to access the internet to upload to the servers. Available via Start -> Programs
N	FoneSyncSystemTray	FoneSyncSystemTray.exe	System Tray icon for Nokia FoneSync utility for the 7160/7190 mobiles. Useful to send data from/to the cell phone and the computer. You can use it to backup data or even to input data through the computer keyboard (which naturally is much more comfortable). Run manually when required
X	FontFix	fontfix.exe	Added as a result of an unidentified VIRUS!
X	FONTVIEW	FONTVIEW.EXE	Added as a result of the OPASERV.T VIRUS!
X	foobin lptt01 or foobin ml097e	adaware.exe	Variant of the RapidBlaster parasite (in a "foo1" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y	FoolProof	fpwinldr.exe	FoolProof Security PC security software from SmartStuff
Y	FoolProofSweep	??	Part of FoolProof Security PC security software from SmartStuff
N	Forbes	ForbesAlerts.exe	Forbes Business News Alerts - displays business news headlines in a little window on the screen
X	ForceShow	rundll32.exe QaBar.dll, ForceShowBar	AdultLinks/QAbar parasite related
N	Forget Me Not	AGRemind.exe	Calendar reminder part of American Greetings® CreataCard®
N	FotoStation Easy AutoLaunch	FotoStation Easy AutoLaunch.exe	Installed with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either
U	FourthDay	FourthDay.exe	The Fourth Day - "astronomical clock and almanac for your system tray"
Y	FP Loader	loadfp.exe	FoolProof Security - PC security software from SmartStuff
?	FPWGMWZD	FPWGMWZD.exe	??
N	Fpx	mnmsrvc.exe	Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations
X	France	svchost.exe	Added as a result of the MIMAIL.L VIRUS!. This is not the valid svchost.exe as described here
?	Free Downloads Monitor	fdcmon.exe	??
Y	Freedom	Freedom.exe	Zero Knowledge Freedom - Anti-Virus, Personal Firewall and Parental Control, it also blocks ads, safeguards your personal information, encrypts your passwords, and much more
U	FreeMem Pro	FMEMPRO.EXE	Some users swear by memory management utilities such as FreeMem Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
U	FreeMemVn2	FreeMem.exe	Some users swear by memory management utilities such as FreeMem but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
U	FreeRAM XP	FreeRAM XP Pro x.exe	Some users swear by memory management utilities such as FreeRAM XP Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind. "x" indicates the version number
U	freesurfer	fs20.exe	EMS Free Surfer mk II - pop-up stopper
?	frguk	shdrkmck.exe	??
?	FridaysInHellInstaller	FridaysInHellInstaller.exe	??
N	FriendlyWebQuick-Launch	SELFCERT.EXE	selfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
U	FRISK FP-Scheduler	F-Sched.exe	Scheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis
N	Fromine WinPopup	winpopup.exe	Instant Messenger program
Y	FRW_EXE	FRW.EXE	ConSeal Signal9 firewall - now McAfee Personal firewall
Y	frxmxins	frxmxins.exe	ATI 3D Studio MAX/VIZ driver
?	FSDPSRV	FSDPSRV.exe	??
?	fsg_4104.exe	fsg_4104.exe	Installed with Kazaa and believed to be Gator adware?
U	fsp	fsp.exe	Folder Shield - hide entire directories and thus prevent access by anyone else to your personal files and documents
Y	fspr	FolderShield.exe	Folder Shield - hide personal files and folders
N	FSScrCtl	FSScrCtl.exe	Screen saver control applet used by the "Stardust Screen Saver Toolkit" and "SolidWorks Screen Saver"
U	fsserv	fserv.exe	Farsighter Server - monitors a remote computer invisibly by streaming video to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time
X	FSW	FSW.exe	FreeScratchAndWin parasite
U	Ftpqueue	Ftpsched.exe	Part of WS_FTP Pro from Ipswitch. Queueing facility for scheduling FTP transfers
Y	fwenc.exe	fwenc.exe	Check Point SecuRemote VPN client - "dynamic and fixed IP addressing for all ISP services - dial-up, cable modem, or DSL - the ideal solution for telecommuters and mobile workers"
N	fwrastrc	fwrastrc.exe	Dial-up software for Friendly Technologies/1NationOnLine free ISP
U	fxredir	fxredir.exe	Canon MultiPASS fax redirector
X	G00123	<worm filename>	Added as a result of the BUGBROS VIRUS!
?	g3dctl	g3dctl.exe	??
N	Gadu-Gadu	gg.exe	Polish language Instant Messaging client
N	Gadwin PrintScreen	PrintScreen.exe	Gadwin PrintScreen - utility to capture, print or save the current window
U	Gainward	TBPanel.exe	Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
N	Game Device	JOYUPDRV.EXE	Genius game controller profile activator
N	GameSpot	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
U	gameutil.exe	gameutil.exe	Part of Redline RegTweak as supplied with Sapphire ATI graphics cards. You can configure different overlclocking settings on a per game basis and this sets those conditions following a re-boot
U	GammaHotKeys	setgamma.exe	Part of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop
X	Gator	gator.exe	Spyware - see here for removal instructions
X	Gator eWallet	gator.exe	Gator eWallet from The Gator Corporation. Spyware - see here for removal instructions
U	GazelDisplay	gsyno.exe	BT Digital Access USB - Gazel ISDN installation System Tray icon
U	GBTray or GoBack	GBTray.exe	System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
?	GCC Reminder	gccrem.exe	Associated with AcraMax Greeting Card Creator. Is it a registration reminder?
N	GCS	GrabClipSave.exe	GrabClipSave screen capture tool
N	GDrive	GDriver.exe	Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
N	Gearbox	confsvr.exe	NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here
N	GEARsec	gearsec.exe	Installed by Apple Quicktime package - iPod/iTunes CDRW support. Can be disabled if you only require Quicktime player
X	GEDZAC	GEDZAC.exe	Added as a result of the GEMEL VIRUS!
N	GemStRmW	GemStRmW.exe	For a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually
X	general lptt01 or general ml097e	general.exe	Variant of the RapidBlaster parasite (in a "General" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Generic host proccess for windows	SVCHOSTS.EXE	Added as a result of an unidentified VIRUS!
X	Generic Host Process for Win32 Services	ntspcv.exe	Added as a result of the SDBOT.S VIRUS!
Y	Genie USB Monitor	USBmonitor.exe	Port monitor for an external USB hard drive. Required to enable access to the drive
N	Get Smile	getsmile.exe	Puts smilie faces in your E-mail. Run manually when required
N	GetRight Tray Icon	GETRIGHT.EXE	GetRight from Headlight Software - download manager for resuming downloads and choosing multiple download locations. The freeware version is/was spyware. The registered version isn't if you don't install the Aureate/Radiate software. Available via Start -> Programs
N	GhostStartService	GhostStartService.exe	Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard
N	GhostStartTrayApp	GhostStartTrayApp.exe	System Tray access to Norton Ghost - added from the 2003 version
Y	Gilat SOM Enumerator	dllhost.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y	GilatFTC	ftc.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
?	GisdnLog	gisdnlog.exe	BT Digital Access USB
U	Glass2k	Glass2k.exe	"Glass2k is a small little program that allows Win2K/XP users to make any window transparent"
Y	Glide	Glidew32.exe	Cirque touchpad driver
X	GLSetIT32	msiexec16.exe	Added as a result of the OPTIX PRO series of VIRUSES!
X	GLSetIT32	isass.exe	Added as a result of a variant of the OPTIX PRO series of VIRUSES!
?	gluon	gluon.exe	In a gluon/bin sub-directory
Y	Gmouse	Gmouse.exe	Amouse mouse driver - required if you use non-standard Windows driver features
U	Gnetmous	gnetmous.exe	Genius NetScroll+ mouse driver - required if you use non-standard Windows driver features
?	gnub	gnub.exe	??
X	Go!Zilla	gozilla.exe	A variant for the Go!Zilla download manager, see above
X	Go!Zilla Monster Downloads	Go.exe	Download manager for resuming downloads and choosing multiple download locations. Advertising spyware
U	GoBack	GBMenu.exe	Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U	GoBack Polling Service	GBPoll.exe	Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U	GoBack Tray Icon	GBTray.exe	System Tray icon access to GoBack (above)
U	Goldensoft_MndlSvr	MndlSvr.exe	Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
N	GoogleDCClient	GoogleDCC.exe	Google Compute Client - only present if you installed the Google Toolbar with "Google Compute" client active. Does complex calculations in the background when idle. If you want to turn it off go to your browser, click on the little double-helix on the Google Toolbar, and click "Stop Computing"
U	GoToMyPC	g2svc.exe	ExpertCity GoToMyPc logon - web-based remote-access solution that allows individuals and companies to register their computers online and then securely access those computers from any web browser
N	GRA	gra.exe	Looks at system resources at startup and warns you if they have dropped. Contains links to the Disk Clean Up, Defrag and Start Up Menu. It does have a link to a startup configuration utility. Similar to msconfig but can keep a list of disabled apps. Not really necessary. Only appears if you load the Gateway Startup Utility
U	Gravis Appawareloader	dbserver.exe	Looks like it's associated with Gravis game controllers and the Keyset Manager, allowing the user to program the buttons for games that don't support them
U	Gravis Xperience Driver Support	Grxp4exe.exe	Driver for Gravis game controllers such as the Eliminator Aftershock. Must be loaded if you run the supplied application software for the controller to be recognized. Start it manually via a shortcut if not used
?	GrdSys32	GrdSys32.exe	X-Stream ISP software. Offers free Net access funded by on-screen ads. Is it required or can you create your own dial-up networking connection to use on demand?
N	Greetings Workshop	GWREMIND.EXE	You really want to be reminded about somebody's birthday at the expense of resources?
X	gremier	wscript.exe gpremier.vbs	Added as a result of the GPREMIER VIRUS!
X	Gremlin	intrenat.exe	Added as a result of the DOOMJUICE VIRUS!
N	GrpConv	grpconv.exe	To facilitate the upgrade from Windows 3.1 to Win95/98, an executable file named GRPCONV.EXE is included with Win95/98. This file provides the translation of groups and group items to folders and links unless you need to access Win 3.1 Group files
?	Gscbc	Gscbc.exe	??
X	gshp	zzgshp.vbs	Homepage hi-jacker
N	Gsiconexe	Gsicon.exe	ADSL modem monitor from Eicon Networks (as used by BT for its Broadband internet service for example). Can safely be disabled without affecting the connection - all this does is give an indication of connectivity and access to the diagnostic facilities
N	GSOrganizer	GSOrganizer.exe	GoldenSection Organizer - personal information manager
X	gssomatic	gssomatic.exe	Searchcentrix hijacker
X	GStartup	GMT.exe	Gator spyware variant. See Gator
N	Gtwatch	gtwatch.exe	Associated with a Mustec scanner and not required
N	Guardian	CMGrdian.exe	McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
X	GustavVED	<filename.exe>	Added as a result of the OPASERV.H VIRUS!
X	gvagfxj	rundll32 ...gvagfxj.dll	Unidentified adware, spyware or virus
Y	gw port controller	PORTCT95.EXE	From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung
N	GWInkMonitor	GWInkMonitor.exe	Gateway ink monitor - makes an annoying popup that says your printer may be running out of ink, do you want to buy some!
N	GWMDMMSG	GWMDMMSG.exe	Used with internal modems on Gateway and vprMatrix PCs. This is the "GTW modem messaging applet" and is not required for the modem to work correctly
U	GWMDMpi	GWMDMpi.exe	Used with internal modems on Gateway PCs such as the 450SX Notebook. Required for audio settings to be maintained and does not remain in memory once run. See here for more information
U	gwum	gwum.exe	Gigabyte utility manager. Loads if you have a Gigabyte motherboard and got a full bundle of utilities installed. Monitors CPU, fans, BIOS etc. Only used by system "tweakers"
?	gyy	gyy.exe	Possibly Gator (and therefore spyware) related?
U	H/PC Connection Agent	WCESCOMM.EXE	Active sync for use with Windows CE based palm PC
N	HalifaxHowardCluster	skinkers.exe	Howard the Weatherman desktop client from Halifax by Skinkers - marketing/messaging tool
U	HaMFrontPanel	hampanel.exe	Displays a panel simulating modem lights for the Intel HaM internal modem. The lights are useful as a reminder to disconnect from the net if you are likely to forget, but otherwise pointless
U	Handy Backup 3.9	hbagent.exe	Handy Backup - automatic backup of your critical data to virtually any type of storage media including CD-RW devices and remote FTP servers
U	Hardware Sensors Monitor	hmonitor.exe	Utility to monitor fan speed and temperatures - similar to Motherboard Monitor. Only required if you're concerned about your system temperature - typically for "overclocked" systems
U	Hare	hare.exe	Hare - improve and optimize performance of desktop/laptop PCs
U	HawkEye	HAWK_95.EXE	Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
U	HawkEye IV Control Panel	HAWK_32.EXE	Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs
X	Hbinst	Hbinst.exe	Hotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
N	HC Reminder	hc.exe	For Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed
N	HCDetect	HCDetect.exe	MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem
U	Hcontrol	hcontrol.exe	Hotkeys on an ASUS Notebook. Only required if you use the additional keys
?	HDhelp	tbhdhelp.exe	Associated with Philips Edge series soundcards. Is it required?
N	HDtray	HDtray.exe	Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel
X	hellodolly	shost.exe	Added as a result of the YODO VIRUS!
?	Help	helpext.exe	??
X	helpctl.exe	helpctl.exe	Added as a result of the GASLIDE VIRUS!
X	helper.dll	helper.dll, Rundll32	CnsMin "Chinese Keywords" hijacker related
X	HelpExp.exe	HelpExp.exe	Attune HelpExpress. Disable - see here
X	helpmanager	spoler.exe	Added as a result of the RANDEX.J VIRUS!
U	Hermes Messenger	DGDRHE~1.EXE	A LAN messenger alternative to WinPopUp - Digital Dreams Software
N	Hewlett Packard Recorder	Remind32.exe	HP multifunction registration
U	Hf	Hf.exe	Hide Folders - hide your folders so only you can view them
U	hfxp	hfxp.exe	Hide Folders XP - Win2K/XP version of the above
N	HGTXPEI	FirstReboot.exe	Herucles Audio tool for the Hercules Game Theater XP soundcard. Available via Start -> Settings -> Control Panel
?	HiberMonitor	HCount.exe	??
U	Hibernation	hib32.exe	Reduces the power consumption when the laptop isn't being used to preserve battery power. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run of battery regularly
X	Hid.exe	hid.exe	Added as a result of the RATSOU.B VIRUS!
X	HideRun.exe	Hiderun.exe and svhost.exe and pro.gif	Added as a result of the BOOHOO VIRUS!
U	hidserv	hidserv.exe	This is the Human Interface Device Server for Win98SE/2000/Me/XP, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to MMHid in Win98. On HP Computers, HIDSERV is the controller for the keyboard sound controls on the USB and PS/2 keyboards
N	HistoryKill	histkill.exe	HistoryKill removes your web surfing path by removing the URL drop-list history, detailed history file, cache, and cookies in both IE and Netscape Navigator browsers. Available via Start -> Programs
U	hkcmd	hkcmd.exe	Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via the Display Properties in Control Panel
U	hkserv	HKserv.exe	Keyboard manager program required to use programmable power and function keys on some laptops such as the Sony PCG R505TS
U	hkss	hkss.exe	Compaq HotKey Support - multimedia keyboard support
U	Hmonitor	Hmonitor.exe	Hardware sensor monitoring program. Only required if you overclock your system and want to check on the status
N	Holiday Lights	Holiday Lights.exe	Holiday Lights from Tiger Technologies. Festive desktop enhancement that adds lights. Available via Start -> Programs
U	HomeAlarm	HomeAlarm.exe	Chameleon Clock - system tray clock replacement
?	HomeCentre WakeUp	LGWAKEUP.EXE	Associated with the no longer supported Xerox HomeCentre printer/scanner
?	Honor	honor.exe	??
U	Hook99startup	hk2re.exe	"Hook99 enables the user to customize the start button. You can change or remove the text and replace the Windows flag on button with icon of your choice. Supports Windows icons, bitmaps and can extract icons from executables and libraries. Hook99 can also make the background of desktop icons captions transparent"
U	HookSys	HookSys.exe	SurfinGuard Pro - protects against all malicious code delivered through executables, scripting files, ActiveX and Java
U	Hot Corners	Hotc.exe	Hot Corners - "lets you quickly activate or disable your screen saver by moving the mouse into a given corner of the screen"
U	Hot Key Kbd 2690 Daemon	SK9910DM.exe	Multimedia keyboard manager - required if you use any special keys
U	Hot Key Keybd 9910 Daemon	SK9910DM.exe	Multimedia keyboard manager - required if you use any special keys
?	Hot Party 22	hotpart22.exe	??
X	Hotbar	Hbinst.exe	Hotbar enhances the surfing experience offering a variety of innovative and fresh skins to the browser while providing users worldwide with access to various services of added value and fun. Also regarded as adware/spyware due to it's adds and browsing habits information gathering - see here
U	HotIDE	hotide.exe	HotIDE allows Acer TravelMate owners to hot-swap external drives without switching of their notebooks
U	HotkeyApp	HotkeyApp.exe	Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
U	HotKeysCmds	hkcmd.exe	Installed by the Intel 810 and 815 chipset graphic drivers. If you want the Ctrl+Alt+F12 or similar keypresses to access Intel's customised graphics properties, you need it, otherwise not. Can be disabled via Control Panel -> Display Properties
X	HotPix	hotpix.exe	Adult content dialler
N	HotSync Manager	hotsync.exe	Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing.  Available via Start -> Programs
X	hotwetlove	hotwetlove.exe	Adult content dialler. Will not uninstall - components have to be manually deleted
U	HoverDesk	HoverDesk.exe	HoverDesk - desktop replacement software
?	hp 1000 firmware	fwdl.exe	HP LaserJet 1000 related. Is it a driver or automatic firmware update (based upon the filename)?
?	HP AutoIndexer	hppautoindexer.exe	??
N	HP CD-DVD or HP CD Writer	hpcdtray.exe	System Tray access to a HP CD-Writer's functions. Available via Start -> Programs
X	hp center	BACKWEB-137903.exe	Based upon HP's own description from here - "With the My HP Center, consumers have access directly from the desktop to Internet sites featuring special offers for HP customers ranging from personal finance and shopping to digital imaging and music" I have classified this as adware. The number may change - if yours is different let me know
X	hp center UI	ShadowBar.exe	User Interface for HP Center
?	HP Component Manager	hpcmpmgr.exe	??
N	HP Display Settings	hpdisply.exe	Sets default display settings. Unchecking this item has been reported to cure a "Problem sending command to keyboard" error message
?	HP IDScheduler	HPIDSCHD.exe	HP Instant Delivery Scheduler
N	HP Info Express	??	On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
U	HP Instant Support	matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". HP Instant Support is required to run with the Help and Support program. If you uncheck HP Instant Support and and then run Help and Support it will add another HP Instant Support in the startup menu. If you remove the HP Instant Support in the add/remove program some help menus in help and support will not be available. You decide
N	HP Internet Center	SURFBRD.EXE	Loads the HP Internet center surfboard on startup. HP Internet Center allows you to customize the multimedia keys on the fly without having to go the Control Panel --> Keyboards to change them
N	HP JetDiscovery	HPJETDSC.EXE	HP JetAdmin software which monitors printing jobs on a network environment
N	HP JetSpeed Autostart	AUTOSTART.EXE	Autostart executable for the old multiplayer game HP Jetspeed
?	HP Network Registry Agent	hpnra.exe	??
?	HP OfficeJet Series xxx Startup	HPOSTR03.EXE HPOstr05.exe	xxx represents the series number - such as 700. What does it do and it it required?
N	HP Parallel Port Test	hppt.exe	Associated with a HP ScanJet scanner
?	HP Port Resolver	hpbpro.exe	??
N	HP Precision Scan	hpmdlbwx.exe	Same as HP ScanPicture below
N	HP Presentation Ready	PresRdy.exe	HP Omnibook related:  "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device"
U	hp psc 2000 Series	hpobnz08.exe	System Tray icon indicating when the printer is ready. Can be started manually with HP Director but takes time to start
U	HP RecordNow	??	From HP "Software for the CD writer. Do not prevent from starting unless the CD writer is never going to be used."
U	HP ScanPatch	HPScanFix.exe	Program that starts up and automatically fixes earlier versions of the Scanjet 5100c software. If a Scanjet 5100C scanner is not going to be used, then it is safe to remove or prevent from starting
N	HP ScanPicture	hpsplmwa.exe	HP multifunction scanner software. Available from HP Office Jet R Toolbox so not required
?	HP SchedIndexer	hppschedindexer.exe	HP laserjet related
?	hp Silent Service	HpSrvUI.exe	HP related
N	HP Simple Trax	Hpcron.exe	Supplied with HP CD-RW drives - stores information about CD contents on your hard drive. Available via Start -> Programs or Desktop Icon
N	HP software update	HPWuSchd2.exe	HP software updates. If a shortcut doesn't exist create your own and run it manually
?	HP Status Server	hpboid.exe	??
N	HP Updates	??	On HP PCs, allows the computer to automatically receive notifications from HP over the Internet. Associated with BackWeb
?	HP Visualize Init	HpVisIni.exe	HP Visualize software related. What does it do and is it required?
N	HP-Aio Flight	Remind32.exe	HP multifunction registration
N	hpaiodevice	hpodev07.exe	Direct from HP - "Device Objects Server - detects all device events and handles all ongoing communication on the device. Loads in the Startup group (except when "portable" is chosen during installation)". Related to various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner
N	HPAiODevice(hp psc 900 series) -1	hpobrt07.exe	Installed with a Hewlett Packard 900 series colour printer, scanner, fax, photo card slot printer, copier. Assumed to perform an identical function to hpaiodevice above
N	HPAIO_PrintFolderMgr	hpoopm07.exe	Directly from HP: "This process has one purpose - detects if the device moves to a different port, and notifies other processes to look on the new port." For various HP all-in-one printer/scanner/copier devices. They print and copy fine with those files disabled, and the HP icon installed on the desktop that points to "hpodir07.exe" works just fine if you need to use the scanner
?	hpcmpmgr	hpcmpmgr.exe	??
U	HPDJ Taskbar Utility	hpztsbol.exe hpztsd02.exe hpztsb04.exe hpztsb05.exe	(1) Ghostscript device driver for printers understanding Hewlett-Packard's Printer Command Language - see here for more info or (2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer
N	hpfsched	hpfsched.exe	HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
U	HPGamesActiveMenu	ActiveMenu.exe	Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that Wild Tanget's privacy policy states they also collect and share individuals information
N	hpgs2wnd	hpgs2wnd.exe	"HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." Available via Start -> Programs
U	HPHAxMON	HPHAxMON.EXE	Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature and known to cause system crashes in some cases. "x" can be 1, 2 or 3 and depends upon driver version. Replaced by HPHmon** (where ** is the version number) from version 4 onwards
U	HPHmon**	HPHMON**.EXE	Monitors the status of the memory card reader slot on a HP printers and displays a tray icon if a memory card isn't inserted. Also creates a virtual drive and assigns it the first available drive letter - which can lead to problems with drive management. ** represents the version number. Disable if you don't use the reader
U	HPHmon04	hphmon04.exe	Media card reader for some HP series printers allowing them to read digital camera memory cards directly. Only needed if you use this feature
X	Hphome	hphome.js	Homepage hijacker
N	HPHUPD**	hphupd**.exe	HP software update checker and wizard launcher. ** represents the version number. Available via Start -> Programs
?	hpjsiroute	hpjsira.exe	Related to HP laserjet printers and IP addresses. An IP address is appended to the name field - ie "hpjsiroute192.168.1.2"
Y	HpLamp	HPLAMP.EXE	HP Scanner Utility that controls your scanner’s light bulb. Needed if it's switched on. Also refer here for troubleshooting
U	HPLogiFinder	hp_finder.exe	HP LogiFinder helps detect and allows the use of the centre button for the Logitech mouse. Can be disabled if not used
U	HpMmKbd	HpMmKbd.exe	HP’s multimedia keyboard driver which enables the end-user to use the automation features of the HP multimedia keyboard
N	hpodblia	hpodblia.exe	HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
?	hpoddt01.exe	N/A	??
N	hpodlb08	hpodlb08.exe	HP OfficeJet Scan Button Monitor on a multi-function printer/copier/scanner. Start your scanning software manually
Y	hpppta	HPPPTA.exe	HP parallel port driver for certain hardware
N	HPPROPTY	HPPROPTY.EXE	HP LaserJet Toolbox
U	HPPWRSAV	HPPWRSAV.EXE	Power save related for HP Scanners. Many users have complained of system freezes with it running but it stops the light from remaining on all the time. Try www.hp.com, pick your OS option under the SUPPORT tab, follow the instructions and you will find an updated lamp control patch
?	hpqcmon	hpqcmon.exe	From HP and related to digital imaging
U	HPSCANMonitor	hpsjvxd.exe	HP scanning software that enables you to scan images from your scanner. Needed if you're using the scanner
?	hpScannerFirstBoot	scannerfb.exe	HP scanner related
N	hpsjbmgr	hpsjbmgr.exe	HP ScanJet Button Manager. It allows users of the HPScanJet scanners to indicate what the buttons on the scanner will do automatically if pushed. Not required at startup, unless the scanner is used every day, such as in a business environment
N	HPStart	hpstart.wsf	This a script used by HP that runs the first time one of their computers is started. Can't imagine why it would be starting up after the first boot
U	hpsysdrv	hpsysdrv.exe	This item keeps track of how many times the system has been recovered and the times of the first and last recoveries done on the system. Leaving unchecked will sometimes prevent the Keyboard Manager program from detecting that the computer is an HP. Since this program/driver was only made to run on HP, if it can't tell that it is an HP it will not run. If unchecked, it can prevent the running of the Application Recovery CDs, the use of the multimedia keys, and the HP Instant Support. Also seen that without it running, the Riptide Sound card that was installed on some older HP computers stops working
N	HPU	ProvenTactics.exe	Proven Internet Marketing software
N	HPZTS04	hpzts04.exe	Hewlett Packard printer toolbox shortcut that resides in the system tray
N	HP_dla	dlatray.exe	On HP PCs, tray icon for dla - which provides drive letter access to HP's and Veritas' version of DirectCD
Y	HREF.OCX	regsvr32.exe ....HREF.OCX	HREF.OCX is an ActiveX control developed by xFX JumpStart and used to provide HTML-alike clickable links on Windows-based programs such as PopUpKiller
U	Hti	npdor.exe	Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required
U	HTpatch	htpatch.exe	HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%
X	https-ssl	https.exe	Added as a result of the MOEGA.D VIRUS!
?	huhdir	huhdir.exe	??
X	huigezi	HgzServer.exe	Added as a result of the GRAYBIRD.C VIRUS!
X	Hvid	Hvid.exe	Added as a result of the GEMA VIRUS!
X	HWINFO*	HWINFO*	Added as a result of the PUROL VIRUS! where * is a random character
Y	HWinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X	HXDL.EXE or HXIUL.EXE	HXDL.EXE HXIUL.EXE	Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
U	HydraVisionDesktopManager	desk98.exe	ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
U	HydraVisionViewport	viewport.exe	ATI/Appian HydraVision Desktop Manager software - monitors and regulates window and dialog box placement according to user preferences when using a multi monitor setup
X	I-Worm.GiGu	uGiG.eXe	Added as a result of the GINK VIRUS!
X	I386	I386.exe	Added as a result of the MYPOWER VIRUS!
?	I81SHELL	I81SHELL.exe	Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard
U	i8kfangui	i8kfangui.exe	Graphical interface for fan speed control
U	IAAnotif	iaanotif.exe	IAA Event Monitor User Notification Tool - part of Intel® Application Accelerator - "a performance software package for desktop PCs using select Intel® chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed
Y	iamapp	iamapp.exe	AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
X	Iamnacho On Irc.MusIrc.com Is a Homosexual!	XBox64.exe	Added as a result of the RANDEX.Y VIRUS!
?	Iap	iap.exe	Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?
X	IASHLPR	IASHLPR.EXE	Added as a result of the OPASERV.T VIRUS!
N	ibmmessages	ibmmessages.exe	Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"
?	Ibmmon.exe	Ibmmon.exe	??
U	Ibmpmsvc	ibmpmsvc.exe	Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes
U	IBMUltraBayHotSwapCPLLoader	IBMBAY2N.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
?	IBMUltraBayHotSwapSound	IBMBAYSN.EXE	Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? Related to the item below
N	ICH Synth	eusexe.exe	Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices
U	iClean	iClean.exe	IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"
N	iCn	NAG.EXE	iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist
N	ICO	ICO.EXE	Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
N	Icon Animation	HDE.EXE	Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
N	Icon Hearit 95	hearit95.exe	Audio desktop customization utility from Moon Valley Software. Resource hog
N	Icon Hearit 98	hearit98.exe	Audio desktop customization utility from Moon Valley Software. Resource hog
X	Icon lptt01 or Icon ml097e	icon.exe	Variant of the RapidBlaster parasite (in an "Icon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y	ICONCLNT	iconclnt.exe	APC PowerChute Tray Icon. Associated with the UPS listing
U	ICONDESK	ICONDESK.EXE	Small utility which will allow you the option of hiding or showing your desktop icons
N	Iconfig.exe	Iconfig.exe	Icon for LS-120 "Superdisk"
X	iConfigLoader	DIIhost.exe	Added as a result of the GAOBOT.AO VIRUS!
N	Iconoid	Iconoid.exe	Iconoid is a desktop icon manager
N	Iconsaver	Iconsaver.exe	IconSaver is a desktop icon manager
X	ICQ Hacking Pro	ICQpro.exe	Added as a result of a version of the NETSPY VIRUS!
N	ICQ Lite	ICQLite.exe	ICQ Lite - compact version of the popular messaging program
N	ICQ Plus	vplus.exe	ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs
U	ICSDCLT	rundll32.exe Icsdclt.dll, ICSClient	Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines
N	ICServer	Icserver.exe	Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
Y	ICSMGR	ICSMGR.EXE	Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you’re sharing the internet on various computers
N	IC_KEY_3	spvic.exe	Instant Chess related
N	ID Commander	IDCom.exe	Caller ID utility for identifying incoming telephone numbers
X	ID8525	ID8525.exe id85255.exe	ID8525 VIRUS and homepage hijacker!
?	IDA	IDA.EXE	HP related - in a Program Files\Hewlett-Packard\PC COE folder
X	IDE	ide.exe	Added as a result of the ASSASIN.F VIRUS!
X	IDE Loader	IDElibr32.exe	Added as a result of the XILON VIRUS!. Related to the game "Diablo II"
U	iDesktop	idesktop.exe	Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse
N	IDMan	IDMan.exe	Internet Download Manager - download files faster, schedule and resume
N	IDW Logging Tool	idwlog.exe	Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
U	IE Doctor	IEDoctor.exe	IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"
U	IECleanAux	Ieboot6.exe	IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup
X	iedll	iedll.exe	Homepage hijacker, redirecting to coolwwwsearch.com
X	IEDriver	IEDriver.exe xplore.exe	Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze
X	IEFeatures	IEFeatures.exe Internetfeatures.exe	Added as a result of the POPMON.A VIRUS! - also known as PopMonster adware
X	Iehelper	syslaunch.exe	Outwar adware downloader
X	IELoader32	iexplore32.exe	Added as a result of the SPEX or SPEX.B VIRUSES!
X	Iesar	Iesar.exe	Browser hijacker - redirecting to an adult web page
N	ietsr	ietsr.exe	IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc
X	ieupdate	MCP****.exe	Added as a result of the ASOXY VIRUS! where **** are random characters
X	Iexplore	iexplore.exe	Added as a result of the BOXER VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder
X	IEXPLORE	iexplore.exe	Added as a result of the APHEXDOOR VIRUS! Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) wheras the valid "iexplore.exe" (IE) resides in C:\Program Files
X	Iexplore Services	iexplore.exe	Added as a result of an unidentified VIRUS!. This iexplore.exe file is located eleswhere rather than in the default Program Files\Internet Explorer folder
X	iexplorer lptt01 or iexplorer ml097e	iexplorer.exe	Variant of the RapidBlaster parasite (in an "iexplorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Explorer which has the same executable name
U	IFSplash.exe	IFSplash.exe	I-FORCE driver for force feedback steering wheel
N	igfxtray	igfxtray.exe	Quick access to the control panel via a System Tray icon for graphics based upon the Intel chipsets (ie, i810). These chipsets are often included on motherboards. Available via Start -> Settings -> Control Panel
X	iilc	IILC.EXE	Homepage hijacker
N	iIWiper	Systemwiper.exe	System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
Y	IJ75P2PSERVER	IJ75P2PS.EXE	Printer utility which is required in order to make the printer work correctly
Y	IKE Service 95	IKEService.exe	Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything
U	iKeyWorks	IKEYMAIN.EXE	A4Tech wireless keyboard driver and utility
X	iLLeGaL or iLLeGaL.exe	Mplayer.exe	Added as a result of the HOLAR.C (or GALIL@MM) VIRUS! Note - this should not be comfused with Windows Media Player which has the same filename
?	ILO_Office_Manager	IntEdReg.exe /OFFMAN	Intense Educational Ltd - Language Office Software. Is it required?
N	iM Start Center	iM_Tray.exe	Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
Y	Image & Restore	IMAGE32.exe	Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
U	Imagefox	imagefox.exe	ImageFox 2.0 is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes
X	Imagemgt32	Imagemgt32.exe	Added as a result of the GEMA VIRUS!
N	imekrig	imekrig.exe	Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
N	IMEKRMIG6.1	IMEKRMIG.EXE	Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
N	Imesh	??	Imesh is a file sharing system
N	Imesh Auto Update	??	Update check for above. Turn the update off under "options"
N	ImgIcon	ImgIcon.exe	Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
N	ImgStart	ImgStart.exe	Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N	imjpmig or Imjpmig8.1	IMJPMIG.EXE	Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese)
?	immcheck.exe	immcheck.exe	Related to I-FORCE driver for force feedback steering wheel?
N	Imonitor	Plguni.exe	McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
N	InCD	incd.exe	Ahead InCD packet writing software. Similar to DirectCD. On my system there isn't an entry, on another visitor's there is. Run manually before insert an appropriately formatted CD-RW disk
N	IncMail	IncMail.exe	"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
N	InControl Desktop Manager	DMHKEY.EXE	For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
N	Incredimail	incredimail.exe	"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
N	IndexSearch	IndexSearch.exe	Associated with PaperPort scanner software from ScanSoft
X	Inet Delivery	Intdel.exe intdel_2.exe	Spyware
X	Inetapi	Netapi.exe	Added as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
U	inetcntrl	inetcntrl.exe	Bsafe Online - internet filter
?	InetConf	inetconf.exe	??
U	Inetd	INETD32.EXE	Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation
U	inetinfo.exe	inetinfo.exe	Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)
X	InetMSN	msnet.exe	Added as a result of a variant of the SDBOT VIRUS!
U	Info Select	is.exe	Info Select from Micro Logic - personal information manager
X	Info32x	Info32x.exe	Added as a result of the GEMA VIRUS!
?	Infoplay.exe	Infoplay.exe	Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?
U	Infra-red Monitor	IRMON.EXE	System Tray access to infra-red devices. Not required unless you use infra-red devices
X	infus	infus.exe	Adult content dialler
U	Infuzer	Infuzer.exe	Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"
X	infwin	infwin.exe	Msview parasite variant
Y	Initialize8x8	8x8_init.exe	Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
N	Ink Monitor	InkMonitor.exe	Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
N	InkWatch	InkWatch.exe	Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
Y	InoRPC	InoRpc.exe	Associated with eTrust Antivirus/InoculateIT
Y	InoRT	InoRT9x.exe	Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here
U	InoTask	InoTask.exe	Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here
?	insCOA5	insCOA5.exe	??
?	Install Pending Files	sifxinst.exe	Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?
N	InstallAurealDemos	InstallAurealDemos.js	Used to initialize the Aureal A3D demos InstallShield wizard
U	InstallBuddy	Ibtna.exe	InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync
?	InstallNAIProduct	SETUP.EXE	Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?
X	Instant Access	rundll32.exe EGDHTML_1023.dll, InstantAccess	Adult content dialler related
N	Instant Update Center	reminder.exe	From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG.  PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner
U	Instant Wireless Configuration Utility	WUSB11cfg.exe	Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
N	InstantAccess	INSTAN~1.EXE	From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
U	InstantDrive	InstantDrive.exe	Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer’s hard drive. Part of InstantCD/DVD burning software
X	InstantPleasure	instantpleasure.exe	Adult content dialler
X	InstantPleasureXXX	instantpleasurexxx.exe	Adult content dialler
X	instit	instit.bat	Added as a result of the OPASERV.H VIRUS!
X	instit	INSTIT.BAT	Added as a result of the OPASERV.K VIRUS!
?	InstUtlR.exe	InstUtlR.exe	??
U	Intel Active Monitor	imontray.exe	System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
U	Intel File Transfer	xfr.exe	Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
U	Intel PDS	pds.exe	Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
U	Intel Product Number Utility	IntelProcNumUtility.exe	Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
N	Intel PROSet Tray Icon	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X	InteliSys	smss.exe	Advertisingvision adware - file is located in C:\Windows or C:\Winnt, and not in it's System32 subdirectory, as is the case with the legitimate Smss.exe system file which would normally NOT figure in Msconfig/Startup!
U	Intellitype	type32.exe	For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them
U	IntelProcNumUtility	cpunumber.exe	Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
?	Intense Registry Service	IntEdReg.exe /CHECK	Intense Educational Ltd - Language Office Software. Is it required?
Y	InterCheck Monitor	Icmon.exe	Part of Sophos ant-virus sofware
X	Interdll	Interdll.exe	Added as a result of the DELF family of VIRUSES!
X	Internal	<trojan filename>	Added as a result of the SMOTHER & TRANSLAT VIRUSES!
X	Internal	regedit.exe /s %windir%c:\<month number>	Added as a result of the FORTNIGHT.D VIRUS!
X	InternalSystray	Kazza.exe	Added as a result of the OPTIXPRO.12.C VIRUS! Note - unlike the valid KaZaA executable, this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
X	Internat Conf	bootconf.exe	Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
N	internat.exe	internat.exe	Language selection icon in system tray
X	Internat.exe	internat.exe	Added as a result of the NETSNAKE VIRUS! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon
X	internct	WinSocks5.exe	Added as a result of the GRAYBIRD.F VIRUS!
U	Internet Answering Machine	IAMNET~1.EXE	From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
X	Internet Config	svchosts.exe	Added as a result of the SDBOT VIRUS!
X	Internet Explorer	iexplorer.exe	Added as a result of the LORSIS VIRUS! Note - the valid Internet Explorer would not normally run at startup unless added manually by the user and would not run from the registry "RunServices" key as this does
X	Internet Explorer Updater	lexbac.exe	Added as a result of the DOWNLOAD VIRUS!
U	Internet History Eraser	HERASER.exe	Internet History Eraser - deletes your browsing tracks
X	Internet Loader1	MSInstall61.exe	Added as a result of the KWBOT.B VIRUS!
U	Internet Optimizer	optimize.exe	Internet connection optimizer. Leave this enabled if you find it improves your connection
X	INTERNET SERVISES	winz32.exe	Added as a result of the KWBOT.Z VIRUS!
Y	Internet Sharing Server	iss_srvr.exe	Intel AnyPoint internet sharing software
N	Internet Sweeper	Sweeper.exe	Internet Sweeper - removes unnecessart left over files after browsing the internet
U	Internet Timer	ITIMER.exe	Shareware dial-up connection call cost calculator from Ratsoft
X	Internet.exe	Internet.exe	Added as a result of the MAGICCALL VIRUS!
X	InternetWasherPro or Internet Washer Pro	iw.exe	Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
X	INTERNET_SERVISES	winz32.exe	Added as a result of the SDBOT.Q VIRUS!
X	Internt	Internt.exe	Added as a result of the PEEPER VIRUS!
N	InterTrust Quick Start	it_cpq~1.exe	InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business
X	InterU	WINDRV.EXE	Added as a result of the IRCINTER.A VIRUS!
N	Intervideo Win Cinema Manager or Intervideo WinCinema Manager	WinCinemaMgr.exe WINCIN~1.EXE	WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
N	Intervideo WinScheduler	WinScheduler.exe SchSvr.exe	WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
U	InterWARN	interwarn.exe	InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs
X	Intmgr	Intmgr.exe	Added as a result of the GEMA VIRUS!
X	Intrenat	Intrenat.exe	Added as a result of the LEMIR.E VIRUS!
N	Introducing Media Manager	SPLASHA.EXE	MS Media Manager tour. Not required
N	Introduction-Registration	??	For Compaq PC's. Should only run first time, PC Introduction & Compaq registration
X	IntruderAlert	ia99.exe	Intruder Alert '99 from Bonzi - spyware
X	Ioadqm	Media Player.exe	Added as a result of the HAWAWI VIRUS!
U	iolo Task Agent	Task_Agent.exe	iOlo System Mechanic Task Agent. Scheduled maintenance
U	Iomega Automatic Backup or Iomega Automatic Backup 1.0.1	ibackup.exe	Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
N	Iomega Backup Scheduler	dtiom98.exe	Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N	Iomega Disk Icons or Iomega Drive Icons	IMGICON.EXE	Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
?	Iomega QuickSync	Quicksync.exe	??
N	Iomega Startup Options	IMGSTART.EXE	Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
N	Iomega Watch	IOWATCH.EXE	Used by Iomega drives. Available via Start -> Programs
N	IomegaWare	COMMANDER.EXE	Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
U	Iomon98.exe	Iomon98.exe	PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
X	IP Stack	ipstack.exe	Added as the result of the AGOBOT.CW VIRUS!
N	iPalm	mon.exe	Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
X	IPInSightLAN 01	ipclient.exe	Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resource - hence the "X" status
N	IPInSightMonitor 01	ipmon32.exe	Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information
Y	IPinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
X	ipmon.exe	ipmon.exe	Added as a result of the RECERV VIRUS!
U	iPodManager	iPodManager.exe	Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods
?	iPodWatcher	iPodWatcher.exe	Associated with Apple's iPod MP3 player. Detects when the iPod is connected?
U	iProtectYou	ip.exe	iProtectYou - internet filtering/parental control and network monitoring software
Y	IPSecMon	IPSecMon.exe	Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
?	IPW	IPW.exe	??
Y	IREIKE	IreIKE.exe	Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
N	iRis Active Monitor	winmon32.exe	Iris Antivirus - discontinued, replace with good alternative
N	iRiS AntiVirus Active Monitor	WIMMUN32.exe	Iris Antivirus - discontinued, replace with good alternative
U	IrMon	IRMON.EXE	System Tray access to infra-red devices. Not required unless you use infra-red devices
?	IRPMonitor	itcnmon.exe	??
N	IS CfgWiz	cfgwiz.exe	Norton Internet Security configuration wizard
N	isdbdc	isdbdc.exe	For Compaq PC's. May install properties in dial-up networking when you register with an ISP
N	ISDN Monitor	Linksts.exe	Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
U	ISDNwatch	IWatch.exe	FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"
N	ISLP2STA	ISLP2STA.EXE	Possibly a left over from Windows Update for wireless NIC (maybe Linksys) drivers? Not required though
U	iSpyNOW	ispynow.exe	iSpyNOW - remote monitoring and surveillance software
U	ISStart	ISStart.exe	LogitechGalleryRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 - hence the "U" rather than "Y" recommendation
X	IST Service	istsvc.exe	ISTBar foistware
U	Itk	Itk.exe	In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U	iTouch	iTouch.exe	iTouch loads the iTouch configuration program for Logitech keyboards. It’s needed if your keyboard has shortcut buttons and if you use them. It’s also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock
N	ItsDeductiblePopUp	ItsDeductible.exe	ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
Y	iTunes Helper	iTunesHelper.exe	Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
N	Iusage	netdet.exe	Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
N	IW ControlCenter	iwctrl.exe	Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
U	iwctrl	iwctrl.exe	Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
?	IZE	N/A	??
N	j2 Tray Menu	HotTray.exe	eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
U	Jammer	jammer.exe	Jammer by Agnitum - "Jammer is the last word in Internet security. It combines a user-friendly interface with very sophisticated and powerful security measures that protect your Windows system while you are surfing the web"
X	Java Runtimes	iexplore.exe	Added as a result of the KILLAV.B VIRUS! Note - this is not the valid IE (iexplore.exe) file as it's located in C:\Winnt\Java\Java rather than C:\Program Files\Internet Explorer
N	JB	Jiffybar.exe	"Get Paid As You surf" application
N	Jet Detection	ADGJDet.exe	Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
Y	JetAdmin Discovery Indicator	HPJETDSC.EXE	HP JetAdmin software for HP JetDirect Print Servers. HPJETDSC.EXE is the file necessary for the JetAdmin Discovery Indicator (paper airplane in the taskbar). It gets launched automatically through the registry, and remains active to control the Discovery Indicator
U	JobHisInit	JobHisInit.exe	Used by Ricoh network printers to enable network printing from the client
U	JogServ2 or Jog Serve	JogServ2.exe	"Jog Dial" on a Sony Vaio laptop.  The dial can select various functions such as control audio. Needed if you use its features
?	jotl	millenzje.exe	??
N	jusched	jusched.exe	Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel
U	jv16 PT TempFileTool	TempTool.exe	jv16 PowerTools' temporary file remover
U	Jv16pt Network Resident	jv16pt_network.exe	jv16 PowerTools' network resident program. Only needed if you are using the program's network features
X	K2ps_full.task	K2ps_full.exe	Added as a result of the JUNTADOR.K VIRUS!
N	K6CPU.EXE	K6CPU.EXE	Authenticates CPU as K6 in system properties
X	kak	kak.hta	Added as a result of the KAKWORM VIRUS!
U	Kalibump	Kalibump.exe	Used with the now unsupported Kali software for on-line gaming. This is used to automatically bump up the priority of WinProxy to GREATLY improve game speed when using a SOCKS proxy
N	Kana Reminder	Reminder.exe	Kana Reminder is a program which can be used to set a reminder to be triggered at a specified time
X	KasperskyAv	kaspersky.exe	Added as a result of the MIMAIL.T VIRUS! Note - this has nothing to do with the real Kaspersky AntiVirus
X	KavRuns	Windll.exe	Added as a result of the TRYNOMA VIRUS!
X	KAVutil	<worm filename>	Added as a result of the WINTOO.B VIRUS!
N	KAZAA	kazaa.exe	KAZAA is a file-sharing program which unfortunately being ad-based includes "Cy-door" adware. Check here for information about "Cy-door" and here for a program that can remove it
X	Kazaa lptt01 or Kazaa ml097e	kazaa.exe	Variant of the RapidBlaster parasite (in a "kazaa" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid KaZaA file sharing program which has the same executable name
X	KAZAACuf	9	Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
N	kazaalite	kazaalite.exe	Kazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms
N	KaZooM	KaZooM.Exe	KaZoom from Blue Haven Media - "add-on application that automatically speeds up the download process and finds the files you want with far more power than regular KaZaA searches"
U	KBD	KBD.EXE	Multimedia keyboard manager. Required if you use the multimedia keys
U	KBD MediaCenter	MEDIACTR.EXE	Multimedia keyboard manager. Required if you use the multimedia keys
N	kdx	KHost.exe	KonTiki Secure Delivery Plug In related. "The Kontiki Delivery Management System (DMS) is a secure delivery network for distribution of video, software, audio, documents, and other digital media. The Kontiki DMS enables enterprises to efficiently publish, secure, deliver and track digital media to employees, partners, and customers"
U	KE9801	DriBat32.exe	KE-9801 multimedia keyboard - required if you use the multimedia keys
X	Keenvalue	Keenvalue.exe	Keenvalue spyware - see here
U	KEMailKb	KEMailKb.EXE	Controls the buttons at the top of the Micro Innovations 650i Internet Access Keyboard. If you disable it you cannot use the buttons - like volume control or shut down
?	Kemet	kemet.exe	??
X	Kernel	bboy.exe	Added as a result of the MUMU.B VIRUS!
X	Kernel Loader	ntkrnl.exe	Added as a result of the CERVIVEC.A VIRUS!
X	kernel system daemon	ACTIVAT0R.exe	Added as a result of the RANDEX.AW VIRUS!
X	kernel32	kern32.exe	Added as a result of the BADTRANS.A VIRUS!
X	Kernel32	Kernel32.exe	Added as a result of a number of VIRUSES - such as BABYLONIA, KERNEL and HOOKER
X	kernel32	kernel.dli	Added as a result of the NETDEVIL.B VIRUS!
X	Kernel32	Kernel.dll	Added as a result of the REDLOF.M VIRUS!
X	kernel32	kernel32.dlI	Added as a result of the NETDEVIL.15 VIRUS!
X	Kernel32	krnl32.exe	Added as a result of the EPON VIRUS!
N	kernelfaultcheck	dumprep 0 -k dumprep 0 -u	Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
X	KernelFaultChk	sms.exe	Added as a result of the DEADHAT VIRUS! Do not confuse with the valid "kernelfaultcheck" which runs "dumprep 0 -k" or "dumprep 0 -u"
X	Kernell32	Kernell.dll	Added as a result of the DESTINY VIRUS!
X	Kernelw	Kernelw32.exe	Added as a result of the INDOR.E VIRUS!
N	Key Text	KeyText.exe	Key Text 2000 from MJMSoft Design - utility to automate repetitive keyboard tasks. Available via Start -> Programs
X	Key1	Rlid.exe	Added as a result of the LIXY VIRUS!
?	Key2	serve.exe	??
Y	KeyAccess	keyacc32.exe	KeyServer KeyAccess client software - "when the KeyServer program is launched, the KeyServer process becomes active so license requests from client computers can be serviced. Without KeyAccess, a keyed program cannot run, so license control is very secure"
U	Keyboard Manager	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as MULTIMEDIA KEYBOARD
Y	Keyboard Preload Check	Preload.exe	Millenium Multi-Function Keyboard driver
U	KeyMaestro	kmaestro.exe	Multimedia keyboard manager. Required if you use the multimedia keys
U	keymap	keymap.exe	System Tray utility and background task used by games produced by Kesmai (published by Interactive Magic) and which enables you to program keys to do specific actions during the game
X	keymgrldr	rundll32 setupapi, InstallHinfSection... keymgr3.inf	CoolWebSearch parasite related
U	KeyPatrol	KeyPatrol.exe	KeyPatrol - detects Key Loggers ("keyboard loggers" or "keyloggers") using both behavioral and pattern-matching algorithms
U	KeyWallet	KWallet.exe	"KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins, passwords and other personal data manually"
X	kfienq	masbl.bat	Added as a result of the KIFER VIRUS!
N	khooker	khooker.exe	SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U	KICKMON.EXE	KICKMON.EXE	KeepItClean - utility that deletes safe to remove files, cookies, browsing history, etc. This is the scheduler - if you don't schedule clean-ups it isn't required
N	Kinberlink	Kinberlink.exe	Kinberlink network messaging. Available via Start -> Programs
U	KK Loader	loadkk.exe	KeyKey XP Professional from KeyKey.com. "Monitor Instant Messages, Chats, Emails, Web Site URLs, Passwords, Computer Programs, Start Up and Shut Down time and much more completely undetected to the user."
U	klp	run32dll.exe	PAL PC Spy - key recorder and screen capture utility which controls and monitors everything that happens on your pc and online
U	KM9801U	MMHotKey.exe	Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
U	kmw_run.exe	kmw_run.exe	Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features
U	kmw_show.exe	kmw_show.exe	Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features
N	Kodak Batch Transfer	pezdow1.exe	Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
N	Kodak Picture Transfer Software	pts.exe	Looks for Kodak camera connection and media insertion. Available via Start -> Programs
N	Kodak Software Updater	backweb*****.exe	Software updater for Kodak Easyshare digital cameras
Y	KodakCCS	KodakCCS.exe	Kodak DC File System Driver
N	Konni Symbol Autostart	KonniSymbol.exe	Gives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5
N	kontiki	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
U	KREC32	krec32.exe	StarrCommander Pro Keystroke logging software
U	Krnlmod	Krnlmod.exe	Keylogger - see here. Given a "U" recommendation because it depends if you intentionally installed it. If you didn't, treat it as "X" and uninstall or remove via Spybot S&D (for example)
X	kv3000	lover.vbe	Added as a result of the ZSYANG.B VIRUS!
U	LanSpeed2	LanSpeed2.exe	Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card)
U	LapLink scheduler	Llsched.exe	Utility that automatically performs file transfers as unattended background operations
X	Lar	Llass.exe	Added as a result of the INOR-A VIRUS!
X	lar	<filename>	Added as a result of the ROXY.C VIRUS!
?	Lasb	ewat.exe	??
X	LAsIAf32	RePEAtLD.exe	Added as a result of the REPEATLD VIRUS!
Y	LASTinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
?	Later	later.exe	??
?	Launcg	launcg.exe	??
N	Launch YahooPOPs! at Windows startup	YAHOOPOPS.EXE	YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs
U	LaunchAp	LaunchAp.exe	Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
U	Launchboard	lnchbrd.exe	"LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions"
X	Launcher	launcher.exe	Spyware component related to DownloadWare and found in Program FilesKFH
N	Launcher	relaunch.exe	Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs
U	Lavasoft Adwatch	Ad-watch.exe	Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
Y	laxmsp32.exe	laxmsp32.exe	Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work
U	LCDC	LCDC.exe	LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins
N	lcfep	lcfep.exe	Tivoli ‘TME’ System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"
X	ld	ld.exe	CoolWebSearch parasite related - redirects to fastwebfinder.com
N	LDM	backweb-8876480.exe ldmconf.exe	Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech. Also listed under Logitech Desktop Messenger
U	LED TRAY	LEDTRAY.EXE	Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work
N	LeechGet	LeechGet.exe	LeechGet download manager
X	LetsSearch	LetsSearch.exe	BrowserAid/BrowserPal foistware variant
U	Lexmark X5100 Series	lxbabmgr.exe	System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
U	Lexmark X74-X75	lxbabmgr.exe	System Tray application that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut
Y	Lexmark Xxx Button Manager	AcBtnMgr_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
Y	Lexmark Xxx Button Monitor	ACMonitor_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
N	LexmarkPrinTray	printray.exe	Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
N	lexpps	lexpps.exe	For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges
U	LexStart	lexstart.exe	Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance
U	Lfsndmng	lfsndmng.exe	LightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents"
N	lhttseng	rundll32.exe ..lhttseng.inf, RemoveCabinet	Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine
X	li-multi****	li-multi****.exe	Adult web-dialler - **** is random
X	li-speed****	dlres.exe	Adult web-dialler - **** is random
X	li-thund****	li-thund****.exe	Adult web-dialler - **** is random
X	li-vita****	li-vita****.exe	Adult web-dialler - **** is random
N	LicCrtl	runservice.exe	eLicense, licensing system incorporated with some software and games
N	LifeScape Media Detector	PicasaMediaDetector.exe	Media detector for Picasa's automatic photo organizer
N	Line Speed Meter V3.0	LineSpeedMeter.exe	LineSpeedMeter - detect the download and upload speed of your internet connection
N	Linksts	linksts.exe	Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
X	Linksts	linksts.exe	Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
N	LIU	LIU.exe Rubicon.exe	Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway
N	Live Menu	Dllcmd32.exe	eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here
N	LiveMonitor	LMonitor.exe	MSI Live Update2 - auto-detects and suggests the latest BIOS/Driver/Utilities information
N	LiveNote	Livenote.exe	Asus graphics card driver live update feature
?	LLMODCL2	rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF	??
U	LManager	QtZgAcer.EXE	Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio
?	lmpdpsrv	lmpdpsrv.exe	Related to a Lexmark printer/scanner. Printer sharing server? Is it required?
N	LMSTATUS	LMSTATUS.EXE	Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?)
X	lnternet Explorer	AMSNDMGR.EXE	Added as a result of the KWBOT.R VIRUS! Note that the "l" is a lower case "L" and not an upper case "I"
U	LOAD WB	LOADWB.EXE	Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it
X	LOAD32	Lorena.exe	Added as a result of the MAPSON.C VIRUS!
X	load32	load32.exe	Added as a result of the NIBU, BAMBO and DUMARU VIRUSES!
X	load32	l32x.exe	Added as a result of the DUMARU.Z or DUMARU.Y or DUMARU.AD VIRUSES!
X	load32	1111a.exe	Added as a result of the DUMARU.AH VIRUS!
N	load=	adw30.exe	After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95
U	load=	asistat.exe	Status monitor for an NEC SuperScript printer
?	load=	cfgsys32.exe	??
U	load=	esspk.exe	Speakerphone capability through a soundcard for an ESS modem
Y	load=	hotkey.exe	Solo 5300 display driver for Win2K on some Gateway laptops
N	load=	HPWHRC.EXE	Loads the Status Window software for the HP Laserjet printers
?	load=	WPSLOAD.EXE	Related to a Canon BJ C series printer?
N	load=	vi_grm.exe	Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings
?	load=	WINOSCFG.EXE	Could it be something to do with configuring Windows on a new PC from an OEM supplier?
Y	load=	wpshrc.exe	Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others)
Y	load=	Bfrecv.exe	Bitware modem driver
X	load=	msater.exe	Added as a result of the RETSAM VIRUS!
X	load=	shambl3r.exe	Added as a result of the REMABL VIRUS!
X	load=	Spoolsv.exe	Added as a result of the CIADOOR.B VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
?	Load=	wtfeat.exe	??
Y	load=	AICLIENT.EXE	Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system
Y	LoadBlackD	blackd.exe	This is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility)
?	LoadBtnHnd	BtnHnd.exe	Fujitsu LifeBook related
X	LoadDBackUp	BcTool.exe	Added as a result of the GIBE VIRUS!
?	LoadDvpApi9x	DVPAPI9X.exe	Part of Command AntiVirus for Windows 95/98/Me. Is it needed?
X	loader	loader.exe	Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe
X	loader	WMPLAYER.EXE	Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup
X	LoadFonts	LoadFonts.vbs Tahoma.vbs	Homepage hijacker that changes your homepage to an adult content site
X	LoadingAgent	ZipLoader32.exe msload32.exe	Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
X	LoadManager	msload.exe	Added as a result of the OPASERV.T VIRUS!
N	LoadMSvcmm	msvcmm32.exe	Auto-update for Movielink - internet movie rental System Tray access
X	LoadOrderVerification	*.exe	Added as a result of the TRON VIRUS! * is a random file name, possibly Pthymvfr.exe
U	Loadout Manager	nost_LM.exe	Manager for the Belkin Nostromo n50 SpeedPad game controller - see here
X	LoadPowerProfile	ASDAPI.EXE	Added as a result of the CABRO VIRUS! Not to be confused with the valid entry below
U	LoadPowerProfile	Rundll32.exe powrprof.dll	Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings
X	LoadPowerProfile	Rundll.exe powerprof.dll	Added as a result of the LOXOSCAM VIRUS! Note - do not confuse with the valid LoadPowerProfile entry above! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe"
X	LoadPowerProfile	rundl.exe	Added as a result of the TOFAZZOL VIRUS! Note - do not confuse with the valid LoadPowerProfile entry above!
X	LoadPowerProfile	Rundll32.exe	Added as a result of the MIROOT VIRUS! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line
U	LoadQM	loadqm.exe	Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it
?	LoadWatcher	Test.exe	Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct?
X	LoadWindowsFile		Added as a result of the DELF.B VIRUS! where <filename> is the infected file
X	Login Service	<random filename>	Added as a result of the MIGMAF VIRUS!
X	LoginPassport	Lgnpsp32.exe	Added as a result of the REDIST.C VIRUS!
N	Logitech Desktop Messenger	backweb-8876480.exe ldmconf.exe	Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech
U	Logitech Utility	Logi_MwX.exe	Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
N	Logitech Wakeup	lgwakeup.exe	Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images
U	LogitechGalleryRepair	ISStart.exe	Part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 - hence the "U" rather than "Y" recommendation
N	LogitechImageStudioTray	LogiTray.exe	Logitech Image Studio - installed with Logitech QuickCams
N	LogiTray	LogiTray.exe	Logitech Image Studio - installed with Logitech QuickCams
U	Logi_Mwx	Logi_MwX.exe	Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
X	Logon.exe	logon.exe	Homepage hijacker
U	LogonStudio	logonstudio.exe	WinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users"
U	LogWatch	logwat95.exe	Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied
Y	Look 'n' Stop	looknstop.exe	Look 'n' Stop personal firewall
X	Lookup_Sys	lookupsys.exe	P04n trojan
N	Lotus Organizer EasyClip	easyclip.exe	"The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs
N	Lotus QuickStart	smartctr.exe	Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs
U	Lotus SuiteStart	suitest.exe	Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs
X	LowVersionSupport	<filename>	Added as a result of the LASTRAS VIRUS! where <filename> is the name of the file dropped by the virus
U	LPS	Lps.exe	Local Port Scanner - "With LPS you're able to check your computer for open or listening ports"
N	LS120 Superdisk	??	Supposed to accelerate transfer rate on LS-120, contributes to system lockups
X	lsass	lsass.exe	Added as a result of the RATSU.B VIRUS! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
X	lsass	start.bat	Added as a result of the ZCREW VIRUS!
X	lsass	<path to lsass.exe>	Added as a result of the ALADINZ.F VIRUS! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
X	LSPFix or LSPmonitor	LSPmonitor.exe	eAcceleration Stop-Sign related - foistware. Read their privacy statement here
X	LSvr	LSvr.exe	PowerStrip foistware
Y	LT DAEMON	ltdaemon.exe	Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used
X	LTDMgr	LTDMgr.exe	PowerStrip foistware
X	LTM2	MSGSRV32.EXE MPGSRV32.EXE MSGSRV320.EXE winupdate.exe bible.exe	All added by variants of the LITMUS VIRUS!. See here for MSGSRV32.EXE (Note: MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Windows\System), here for MPGSRV32.EXE, here for MSGSRV320.EXE and here for winupdate.exe and bible.exe
U	LtMoh	Ltmoh.exe	Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
N	LTSMMSG	LTSMMSG.exe	Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too
X	LTSMSG	Shell32.exe	Added as a result of the LEMIR.B VIRUS!
Y	LTWinModem1	ltmsg.exe	One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
N	LVComs	lvcoms.exe	Lvcomm server. Related to Logitech Quick Cam - works fine without it
U	LWBMOUSE	lwbwheel.exe MOUSE32A.EXE	Mouse driver - required if you use non-standard Windows driver features
N	Lwinst Run Profiler	lwtest.exe	Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs
?	lxamsp32	lxamsp32.exe	Associated with a Lexmark Printer - is it required?
?	LXbbmgr	LXbbmgr.exe	Lexmark printer button manager? Is it required?
N	LXSUPMON	LXSUPMON.EXE	Lexmark Printer. The printer should work fine without it
?	M Player Post Installer	postinstallm.exe	??
N	M3Tray	m3tray.exe	Movielink - internet movie rental System Tray access
U	Machine Debug Manager	mdm.exe	Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable
N	MacLic	MacLic.exe	Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
N	MacName	MacName.exe	Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks
Y	MAD.EXE	MAD.EXE	MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?
N	MadExe	LaunchRA.exe	Dell Resolution Assistant
U	MagicDsk	MAGICDSK.EXE	Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons
N	Magitime	Magitime.exe	Magitime - connection tracking utility which monitors online time, expense, data transfer
?	Mail.com	mcalert.exe	Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?
U	MailBell	mailbell.exe	MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
U	Mailbox Verifier	mboxvrfy.exe	Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)
Y	MailScan Dispatcher	Launch.exe	MailScan Dispatcher splits each e-mail message into various components such as the header, body and attachment. Compressed formats (ZIP, ARJ, etc.) are scanned for viruses and cleaned
X	Mail_Check	Mail_Check.exe	Added as a result of the PANOIL.C VIRUS!
U	MAIN	main.exe	SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
?	Main Executable (HP)	HP05T0R5.exe	HP (Hewlett-Packard) related. Maybe related to printers. Now - what does it do?
N	Mania Win Restore	RESWIN.EXE	Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs
X	Mantis	<filename>	Added as a result of the MANTIBE VIRUS! where <filename> is the filename
X	mapisvc32	mapisvc32.exe	Added as a result of the KX VIRUS and also recognised by Symantec as FPAI adware
N	Mass storage check registry	rundll32.exe MSDServ.dll, check registry	Used with a USB based smartmedia card reader
U	Master Volume Spy	MASTERVOLUMESPY.EXE	Volume control for the Gateway Destination "DestiVu" media interface
U	Matador	mlfbuddy.exe	MailFrontier - anti-spam application
X	MatrixScreenSaver	mss.exe	Malware, see here
N	Matrox Color Control	hgcctl95.exe	For Matrox video cards. Quick access to changing colors
N	Matrox Control Center	mgactrl.exe	For Matrox video cards. Quick access to settings
N	Matrox Diagnostic	mgadiag.exe	For Matrox video cards. Quick access to diagnostics
N	Matrox Powerdesk	PDesk.exe	For Matrox video cards. Quick access to tweak your card to your liking
N	Matrox QuickDesk	mgaqdesk.exe	For Matrox video cards. Quick access to tweak your card to your liking
X	MaxAlerts	max.exe	Bonzi MaxALERT - spyware
Y	MaxtorCombo	ComboButton.exe	Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect)
U	MaxtorReg	AUTOREG.EXE	Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
U	MBM 4	MBM4.exe	Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
U	MBM 5	MBM5.exe	Motherboard Monitor 5 - as above but for version 5
U	MBProbe	mbrpobe.exe	MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs
X	MC	wintrims.exe	Added as a result of the WINTRIM VIRUS!
Y	McAfee Firewall	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
N	McAfee Guardian	CMGRDIAN.EXE	McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanup programs than the likes of WinOptimizer and System Mechanic
N	McAfee Winguage	??	Part of McAfee Nuts & Bolts. "WinGuage is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
U	McAfee.InstantUpdate.Monitor	RuLaunch.exe	Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
?	McAfeeUpdaterUI	UpdaterUI.exe	Associated with McAfee Enterprise 7.0.0. Updater for McAfee anti-virus and security programs?
Y	McAfeeVirusScanService	Avsynmgr.exe	From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
Y	McAfeeWebscanX	WebScanX.exe	From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
U	McAgentExe	mcagent.exe	From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). If you don't see the agent icon, VirusScan Online may not be installed
?	Mcappins.exe	mcappins.exe	McAfee Application Installer. What does it do and is it required?
N	MChanger	MChanger.exe	Media Changer - utility that allows you to change wallpapers, sounds, themes, etc
?	McRegWiz	mcregwiz.exe	McAfee antivirus related. What does it do and is it required?
U	McUpdateExe	mcupdate.exe	From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions
Y	McVsRte	mcusrt.exe	Part of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why
Y	mcvsshld	mcvsshld.exe	McAfee VirusScan On-line. See also McAgentExe above
X	MD IE Plugin	md.exe	Adult content dialler
X	MD IE Plugin	winy.exe	Adware
N	mdac_runonce	runonce.exe	Associated with MS Data Access Components (MDAC). Sometimes left over after installation - not required. NOTE :- don't delete "runonce.exe".
X	Mdm	Mdm.vbs	Added as a result of the WHITEHO or TRAPPY VIRUSES!
U	MDM7	mdm.exe	Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as Machine Debug Manager. See here to disable
N	MECA	Meca.exe	Meca instant messenging client
U	Media Manager Indexer	AIRSVCU.EXE	Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. For more information see here
X	Media Plug x.1.2	msdm.exe	Added as a result of the MULDROP.352 VIRUS!
N	MediaFace Integration	Sethook.exe	Fellowes Neato™ cd label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
U	Mediafour Mac Volume Notifications	Macvntfy.exe	Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
U	Mediafour XPlay Tray Notification Icon	Xptryicn.exe	See above
U	MediaKey	MediaKey.exe	Multimedia keyboard manager. Required if you use the multimedia keys
X	MediaLoads or MediaLoads Installer	dw.exe	Medialoads is advertising software - running DownloadWare as its executable. Installed as a bundle with Kazaa Media Desktop. See here for more information
N	MediaMonitor	Mediam~1.exe	Installed by Smartdisk MVP CD burning software. Software will work fine without it
X	MediaPath	Proyecto1.exe Root.exe	Added as a result of the GRUEL VIRUS!
N	MediaRing Talk	mrtalk.exe	Media Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs
X	media_manager	mediaman.exe	Mini-Player,  IMESH related foistware, see here
X	media_stub	stub.exe	Mini-Player,  IMESH related foistware, see here
X	MemConfig	SetupIE.com	Added as a result of the TAPLAK VIRUS!
U	MemoKit	MK.EXE	Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run while the memokit.exe is running. Probably loads a flash screen at startup and shutdown that stays on screen less than 5 seconds and gives you a button to push to purchase the full version. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
X	Memory Check	memore.exe	Added as a result of the KILLAV.C VIRUS!
N	Memory Stick Monitor	MSTAT.exe	Used with the Sony floppy disk adapter for memory sticks, showing if there is a stick in the computer
U	Memory Stick Monitor	MSstat.exe	Sony/SmartDisk memorystick-floppydisk-adapter software - allows you to read memorysticks in a normal floppydrive
U	Memory+	tfimemsr.exe	Memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
X	MemoryMeter	MemoryMeter.exe	Autoinstalling spyware by Total Velocity
U	MemTurbo	memturbo.exe	MemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind
N	MenuSnap	MenuSnap.exe	MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this manually by selecting Start -> Programs and right-clicking and choosing "Sort by Name" if availabe
X	Message Queuing	msmqs.exe	Added as a result of the FREEFORS VIRUS!
N	MessagerStarter Freeserve	StartMessager.exe	Freeserve Messenger
U	Message_Blocker	messageblock.exe	Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts when displaying a formatted email message"
X	Messenger	messenger.exe	Added as a result of the KUTEX VIRUS!
X	Messenger Block	msngrblock.exe	Added as a result of the PATOO VIRUS!
X	Messenger start-up	Msgran.exe	Added as a result of the GRAMOS VIRUS!
N	MessengerPlus or MessengerPlus2	MsgPlus.exe	Third party MSN Messenger extension that hides banner ads and adds archiving and other useful features. Appears not to work unless checked, but may be activated after startup. Not recommended as it includes Lop.com - see here
X	messnger	<filename>	Added as a result of the DELODER VIRUS! where <filename> is the worm name
?	mfgboot	??	??
X	mfin32	mfin32.exe	MyFreeInternetUpdate - adware downloader
?	MGA Hook	Mgahook.exe	MATROX Graphics card related. What does it do and is it required?
N	MGA Quickdesk	MGAQDESK.EXE	For Matrox video cards. Quick access to tweak your card to your liking
?	Mgabg	Mgabg.exe	Matrox BIOS Guard. What does it do and is it required?
Y	mgavctrl or mgavrtclexe	mgavrtcl.exe mgavrte.exe	McAfee's Virus Scan Online
N	MGA_CD_Install	mgasetup.exe	Matrox Millennium video driver. Not required once drivers installed
X	MHDOGStart	mhdogst.EXE	Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS
N	MHINIT	MHINIT.EXE	Part of the Cybermedia Clean Sweep package
U	Microangelo Desktop	Muamgr.exe	Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs
N	microAttuneDownload	atmdlusr.exe	USR (US Robotics) modem auto updater. May be a sub-set of Attune
U	MicroDialler	atdialler1.exe	Part of the Freeserve Connection Kit - changes the dial-up for Freeserve AnyTime if access problems are encountered
X	Microfinder lptt01 or Microfinder ml097e	mcf.exe	Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	MicroLoad	<random filename>	Added as a result of the DARBY VIRUS!
X	microsoft	svchost.exe	Added as a result of the ASTEF or RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here
X	Microsoft .NET Confingurator	msnconf.exe	Added as a result of an unidentified VIRUS!
N	Microsoft Announcement Listener	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	Microsoft auto update	winupdate.exe	Added as a result of the BMBOT VIRUS!
X	Microsoft Conf Ldr	sysconf.exe	Added as a result of a variant of the SDBOT VIRUS!
X	Microsoft Corporation	<random filename>	Added as a result of various VIRUSES such as VISAGES, BABYBEAR and TOFACED
X	Microsoft Cvrt	mscvrt32.exe	Added as a result of a unidentified VIRUS!. Named almost, but not exactly like the legitimate msvcrt or msvcrt20.dll
X	Microsoft Database Handler	mssql32.exe	Added as a result of the RANDEX.AX VIRUS!
X	Microsoft Diagnostic	<filename>.exe	Added as a result of the ACEBOT VIRUS! The <filename>.exe will be random and must be deleted after the virus has been removed. Not to be confused with the DOS based MSD.EXE
X	Microsoft DirectX	Spoolserv.exe	Added as a result of the DINFOR VIRUS!
X	Microsoft Find Fast	Findfast.exe	Complete utter waste of space! Part of MS Office - searches disk drives for Office file types and creates an index to make opening them easier
Y	MICROSOFT FIREWALL CLIENT	ISATRAY.EXE	MS Internet Security and Acceleration Server 2000
N	Microsoft Greetings Workshop Reminder	Gwremind.exe	You really want to be reminded about somebody's birthday at the expense of resources?
N	Microsoft Greetings  Reminder	MHPRMINF.EXE	You really want to be reminded about somebody's birthday at the expense of resources?
X	Microsoft IIS	syshost.exe	Added as a result of the FRANCETTE VIRUS!
X	Microsoft Inet Xp..	teekids.exe	Added as a result of the BLASTER.C VIRUS!
U	Microsoft Intellitype Pro	speedkey.exe	Additional keyboard shortcuts on MS programmable keyboard
X	Microsoft Internet Explorer	iexplore.exe	Downloader trojan. Note! - this is not the valid iexplore.exe as the file is loacted in Program Files\MSIE and not Program Files\Internet Explorer
X	Microsoft Internet Firewall Manager	GMT16.exe	Added as a result of the RANDEX.AT VIRUS!
X	Microsoft IPC	system.exe	Added as a result of the NULLBOT VIRUS!
X	Microsoft IPC	svshost.exe	Added as a result of an unidentified VIRUS!
X	Microsoft Movie Maker	Mmaker.exe	Added as a result of the IRCBOT.C VIRUS! Note that this is not a valid Microsoft program
X	Microsoft MSUPDATE	SpoolSvc.exe	Added as a result of the SXTB-A VIRUS!
X	Microsoft Netview	gesfm32.exe	Added as a result of the RANDEX.C VIRUS!
X	Microsoft Netview	mssvc32.exe	Added as a result of an unidentified VIRUS!
X	Microsoft Netview Component v5.1	msnv32.exe	Added as a result of the RANDEX.F VIRUS!
X	Microsoft Network Daemon for Win32	Netd32.exe	Added as a result of the SDBOT.R VIRUS!
X	Microsoft Office	MSMSGR.exe	Added as a result of the GAOBOT.BB VIRUS!
N	Microsoft Office Fast Cache	Fastboot.exe	Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast above and can be disabled
X	Microsoft Office Start	winupdates.exe	Added as a result of the GAOBOT.BC VIRUS!
N	Microsoft Office or Microsoft Office Shortcut Bar	Msoffice.exe	Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it but a better way is to create Desktop Shortcuts if you want access these programs quickly
N	Microsoft Office or Microsoft Office Startup	Osa.exe Osa9.exe	Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
X	Microsoft RDLL	sysconf32.exe	Added as a result of a variant of the SDBOT VIRUS!
X	Microsoft Runtime	CfgDll32.exe	Added as a result of the RANDEX.BD VIRUS!
X	Microsoft Scanreg	microsoftscanreg.exe	Added as a result of the FRANRIV.A VIRUS!
N	Microsoft Sidewinder Game Controller Software	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs
N	Microsoft Sound Volume Tool	mssvol.exe	This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel
X	Microsoft Spool Server for Win32	spoolsrv.exe	Added as a result of the RANDEX.H VIRUS!
X	Microsoft System Checkup	Cool.exe	Added as a result of the DONK.B VIRUS!
X	Microsoft System Checkup	Wnetlib.exe	Added as a result of the DONK.C VIRUS!
X	Microsoft System Restore Configuration	CBRSS.EXE	Added as a result of a variant of the SPYBOT VIRUS!
X	Microsoft Tray	<random filename>	Added as a result of the DELF.BZ VIRUS!
X	Microsoft UPDATER32	lsass.exe	Added as a result of the RANDEX.AR VIRUS! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup!
X	Microsoft Utility Startup	OSA9.exe	Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
U	Microsoft Webserver	svctrl.exe	Personal web server program which enables you to create and host a web server from your computer. Not required for most people
X	Microsoft Windows 2000	Winupdsdgm.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Microsoft Windows Kernel Services	winkrnl386.exe	Added as a result of the ZEBROXY VIRUS!
X	Microsoft Windows Update	rundlls.exe	Added as a result of the HABRACK VIRUS!
X	Microsoft Windows Update Service	wupdmgr32.exe	Added as a result of the DOS.AUTOCAT VIRUS!
X	Microsoft Windows Updater	winupdgm.exe	Added as a result of the GAOBOT.BI VIRUS!
N	Microsoft Works Calendar Reminders	wkcalrem.exe	Produces a pop-up reminder of events scheduled using the MS Works Calendar
N	Microsoft Works Portfolio	WksSb.exe	The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio
N	Microsoft Works Update Detection	wkdetect.exe	Checks for updates to MS Works
X	microsoft xdaemon 2.0	xdaemon.exe	Added as a result of the DELF.D VIRUS!
X	microsoft420	microsoft420.exe	Added as a result of the MENACE.B (or W32.SOFUNNY) VIRUS!
X	MicrosoftMultimediaTask	Mmtask.exe	Adware downloader - not the valid MusicMatch Jukebox which shares the same filename
X	MicrosoftNetwork Daemon for Win32	NETD32.EXE	Added as a result of the RANDEX.F VIRUS!
X	MicrosoftServiceManager	mstask32.exe	Added as a result of the YAHA.P VIRUS!
X	MicrosoftServiceManager	Wintsk32.exe	Added as a result of the YAHA.U VIRUS!
X	MicrosoftServiceManager	EXPLORERE.EXE	Added as a result of the YAHA.AB VIRUS!
X	MicrosoftServiceManager	msupdat.exe	Added as a result of the YAHA.AA VIRUS!
X	MicrosoftValue	syscnfg.exe	Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X	MicrosoftWindows	winmgnt.exe	MagicSearch - a CoolWebSearch parasite variant
X	Microsoft© PID Lex	PIDLex.exe	Added as a result of the NIOVADOOR VIRUS!
X	Microsoft® System Mapper	SysMap.exe	Added as a result of the MAPSY VIRUS!
N	MightyFAX Controller	MFNTCTL.EXE	Mighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software"
?	MigrationVendorSetupCaller	rundll32.exe migrate.dll, CallVendorSetupDlls	??
X	MINIBUG	MINIBUG.EXE	Displays ads inside Weatherbug - see here
N	MINIFERT.EXE	MINIFERT.EXE	Part of Backweb
U	minilog	MINILOG.EXE	If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLog Analyzer are in use
N	MiniNote	MININOTE.EXE	Mini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software
U	MinMaxExtender	Mmext.exe	MinMaxExtender - window handling tool
N	Mirabilis ICQ	NDetect.exe icq.exe ICQNet.exe	If connected to the internet, automatically runs up ICQ. Convenience more than anything. ICQ can be started from Start -> Programs
U	Miramar Systems, Inc.	atmsg.exe	Miramar PC/Mac networking software
N	miroVIDEO Tray Tool	misitray.exe	Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctrl) is also closed, but mv-ctrl does not have its own EXE file. Only needed when using the capture card, e.g. for the above actions
?	misiCTRL	misiCTRL.exe	Miro video driver related. Is it required?
?	misiTRAY	misiTRAY.exe	Miro video driver related. Is it required?
N	Mixer	Mixer.exe	C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
N	Mixghost	mixghost.exe	Management software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu
X	mload	lxmstart.exe	Added as a result of an unidentified VIRUS!
?	MM Install	setup.exe	Possibly Money Manager from Moneysoft?
U	MMhid	mmhid.dll	This is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Typical examples are USB multimedia keyboards with volume control and web-ready keyboards. For example - loaded by default with MS DSS80 Speakers because they have Volume, Mute and Bass controls on the speaker. Some users may experience problems disabling this - if this is the case then re-enable it. Equivalent to Hidserv in Win98SE/2000/Me/XP
?	MMHK	mmhk.exe	A driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys?
N	MMHotKey	MMHotKey.exe	Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen
U	MMKeybd	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys
X	mmod	mmod.exe	Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
N	mmpti	m1mmpti.exe	Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards
?	MMRun	mmrun.exe	??
Y	MMTASK	mmtask.tsk	A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedia drivers (which are still 16-bit on Win9x) to perform background processing. Some soundcards need this to support MIDI, etc
N	mmtask	mmtask.exe	Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator
X	MMtask Service	mmtask.exe	Added as a result of the BACKGAT.A VIRUS! Not the valid MusicMatch Jukebox which has the same filename
N	MMTray	mm_tray.exe	MusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator
N	MMTray	MMTray.exe	Part of Morgan Multimedia Codecs. Only required when the codecs are used
N	MMTray2K	MMTray2K.exe	Part of Morgan Multimedia Codecs. Only required when the codecs are used
N	MMTrayLSI	MMTrayLSI.exe	Part of Morgan Multimedia Codecs. Only required when the codecs are used
?	mmusrstp	procrun.exe	??
X	mmxrun	msosa.exe	Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and RegCompres (REGCPM32.EXE), otherwise they return
X	mnsvc	mnsvc.exe	Added as a result of the AUTOUPDER VIRUS!
X	mnsvcsp	mnsvcsp.exe	VIRUS!
N	mobsync	mobsync.exe	MS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages
X	MOBSYNC32.EXE	mobsync32.exe	Added as a result of the FINERO VIRUS!
N	MOD	muamger.exe	MicroAngelo On Display from Impact Software lets you customize Windows icons. With a few exceptions, you can customize icons by right-clicking on them
U	MODEMBTR	MODEMBTR.EXE	Modem Booster from inKline Global to improve ISP connections
U	ModemOnHold	MOH.EXE	NetWaiting Modem-on-Hold Application
N	ModemUtility	mdmsetpe.exe	System Tray configuration icon for Aztech modems
X	ModularConfig	syscnfg.exe	Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X	Module Call initialize	RUNDLL32.EXE reg.dll, ondll_reg	Added as a result of the LOVGATE VIRUS!
N	Money Express	moneyexpress.exe	Part of MS Money. Available via Start -> Programs
N	MoneyAgent	money express.exe	Part of MS Money. Available via Start -> Programs
N	MoneyStartUp10.0	Activation.exe	Part of MS Money 2002. Available via Start -> Programs
U	Monitor Apache Servers	ApacheMonitor.exe	Part of the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start -> Programs
X	Monitormgt	Monitormgt.exe	Added as a result of the GEMA VIRUS!
N	Monstersoundtray	Freectrl.exe	Diamond Multimedia sound card control panel
N	moon phase	moon.exe	Moon Phase - tray icon that indicates the phases of the moon
N	Morpheus	morpheus.exe	MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"
X	mosearch	mosearch.exe	Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here
N	Motive SmartBridge	mpbtn.exe	System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required
U	MotiveMonitor	motmon.exe	On HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required
N	MotiveSB	MotiveSB.exe	The same as Motive SmartBridge below
U	MotMon	motmon.exe	On HP systems. MotiveMonitor allows you to use HP Instant Support, and allows the agent on the other side to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. For most users it's not required
U	Mount Safe & Sound	Fbmount.exe	From McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start
N	Mouse 32A	Mouse32A.exe	Mouse driver to control mouse functions from Azona. Available via Start -> Programs
N	Mouse Suite 98 Daemon	pelmiced.exe	Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
N	MouseCount	MC.exe	MouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required
U	mouseElf	MC.exe	System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features
U	MouseImp	MImpHost.exe	MouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device"
U	Mousinfo	mousinfo.exe	MS mouse information tool - for troubleshooting mouse problems
X	MovieNetworks	MovieNetworks.exe	MovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you to stay on the internet on their line and $$$ and remove the C:\Program Files\MovieNetworks directory
X	Movieplace	Movieplace.exe	MoviePlace malware
N	Mozilla Quick Launch	Netscp6.exe Mozilla.exe	Netscape 6 and Mozilla browsers
U	MPEO	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
Y	MPFExe	mpf.exe MpfTray.exe	McAfee Personal Firewall
U	MplSetup	MplSetup.exe	Used by Ricoh network printers to enable network printing from the client
U	MPower	MPower.exe	MPower from MindBeat. "Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmark (speed test) your hard disk drives and your CPU load". Some users swear by programs such as this but I suggest you read this article and make up your own mind
X	MPREXE	MPREXE.EXE	Added as a result of the OPASERV.T VIRUS! Note - this is not the legitimate Mprexe.exe system file
Y	MPREXE.exe	mprexe.exe	WIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with it sometimes though - see here and here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background. NOTE : sometimes it will appear in start-ups if you have a virus
X	MprHTML	MprHTML.exe	Added as a result of a variant of the VAGRNOCKER VIRUS!
U	MPSExe	mscifapp.exe	McAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering"
?	MPT	MPT.exe	??
X	MPtask Services	mptask.exe	Added as a result of the LALA or DOWNLOADER-BN.B or AOT VIRUSES!
N	MPTBox	MPTBOX.EXE	Cannon Multi-Pass toolbox - a button bar
N	MPXTray	mpxptray.exe	Windows Media Player PowerToy which is run from the taskbar. It can be used to hide Windows Media Player (when in use) and choose various standard buttons (play/pause, next,previous) etc
?	MP_STATUS_MONITOR	monitr32.exe	Related to Cannon Multi-Pass
X	mqbkup	mqbkup.exe	Added as a result of the OPASERV.K VIRUS!
N	mrtMngr	mrtMngr.exe	Maintenance Release Task Manager for Intuit’s QuickBooks or Quicken
U	MRU-Blaster Scheduler	scheduler.exe	MRU-Blaster scheduler - detects and cleans MRU (most recently used) lists on your computer
N	MRU-Blaster Silent Clean	mrublaster.exe	MRU-Blaster - performs silent cleaning of MRU lists at boot
X	MS Config Loader	svchos1.exe	Added as a result of the AGOBOT.R VIRUS!
X	MS Config Loader	MSWin32bck.exe	Added as a result of the GAOBOT.AA VIRUS!
X	MS Explorer	mexplore.exe	Added as a result of the YAHA.AE VIRUS!
X	MS HTML	msHtml.exe	Added as a result of the PESTDOOR.31 VIRUS!
X	MS HTML	mslat.exe	Added as a result of the LATINUS.SVR VIRUS!
?	MS management console	mms.exe	Suspicious as the Microsoft Management Console is "mmc.exe" and doesn't normally run at startup
X	MS Network Control	mswin.exe	Added as a result of the DUMBA VIRUS!
X	MS Security Hotfix	service5.exe	Added as a result of the GAOBOT.AG VIRUS!
X	Ms Spool32	MS SPOOL32.EXE	Added as a result of the ASASSIN VIRUS!
X	MS Updates	mscache.exe aupd.exe	Spyware web downloader
X	MS-Connect	arr.exe cdm.exe game.exe msite18.exe web.exe	Adult content dialler - see here
X	MS-HTML	<random filename>	Added as a result of the LATINUS.15 VIRUS!
X	MS-RunKey	arr.exe	MS-Connect dialler/hijacker
X	MS7531	ms7531.exe	Homepage hijacker
X	MSAdmin	jdbgmrg.exe	Added as a result of the DASMIN.A VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
X	MSBB	msbb.exe	Advertising spyware
X	mscman	mscman.exe	Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
U	mscn	mscn.exe	Part of the SafeChildNet internet filtering program - required if you use it
X	Mscnt	mscnt.exe	Adult content dialler
N	MSConfig	MSCONFIG32.EXE	Unidentified adware, spyware or virus. Not to be confused with the valid entry above which has the command "msconfig.exe"
X	Msconfig lptt01 or Msconfig ml097e	msconfig.exe	Variant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Msconfig which has the same executable name
X	MSConfig45	MSConfig45.exe	Added as a result of the SDBOT.OJ VIRUS!
N	MSConfig or MSConfigReminder	msconfig.exe	This is an entry that appears when you uncheck an item in the Startup group, and will disappear if on the next reboot you select the option to not be reminded that you are running in Selective Startup mode
X	MSConfigr	jdbgmrg.exe	Added as a result of the DASMIN.C VIRUS! Note - this is not the valid JDBGMGR.EXE file - see here
X	MSCORE	syscnfg.exe	Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X	Mscsgs	MSCSGS.EXE	Added as a result of the ZEZER VIRUS!
X	Mscsgs32	MSCSGS32.EXE	Added as a result of the ZEZER VIRUS!
X	Msctrl32	Msctrl32.scr	Added as a result of the REDIST VIRUS!
X	MSCVT	MSCVT.exe	Added as a result of the SLIDESHOW VIRUS!
X	MSDLL	syscnfg.exe	Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X	Msdmxm	msdmxm.exe	Adult premium rate dialler
X	Msdos32	Msdos32.pif	Added as a result of the RECORY VIRUS!
X	msdos423	msdos423.exe	Added as a result of the MENACE.A (or W95.SOFUNNY.WORM@M) VIRUS!
N	MSDTC	msdtc.exe	MS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server
X	Msemu32	Msemu32.exe	Unidentified spyware/adware/hijacker
X	Msfind	Msfind.exe	CoolWebSearch parasite related
X	MSFind32	msfind32.exe	Added as a result of the CAYAM VIRUS!
X	msfindosa.exe	msfindosa.exe	Added as a result of the DOWNLOADER-BS VIRUS!
X	Msgmgr	<path to worm>	Added as a result of the BABYBEAR VIRUS!
X	Msgsrv16	Msgsrv16.exe	Added as a result of the DELF family of VIRUSES!
Y	MSGSRV32.exe	msgsrv32.exe	Windows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start-up programs I don't know but I was asked to include it here. It automatically runs in the background
X	msgsvr32	msgsvr32.exe	Added as the result of the DEADHAT.B VIRUS! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:\Windows\System) on a Win9x/Me machine
X	Msgtray	sys16.exe	Added as a result of an unknown VIRUS!
X	MSHT@	MSHT@.EXE	Added as a result of the MAGISTR.A VIRUS!
?	MSIN	MSin.exe	??
X	MSKCES32	<filename>	Added as a result of the CLONER VIRUS!
X	MSKernel32	MSKernel32.vbs	Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
X	MSkernel32	System.exe 4820	Added as a result of the TUXDER VIRUS!
U	MSKExe	spamkiller.exe	McAfee SpamKiller
?	MSLIB32	mswatch32.exe	??
X	Mslogon lptt01 or Mslogon ml097e	mslogon.exe	Variant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	MsManager	msmgr32.exe	Added as a result of the YAHA.AF VIRUS!
X	msmanager32	msmngr32.exe	Added as a result of the RANDON-R (or WOMANIZ.A) VIRUS!
X	msmc	mscpbo.exe msgdmf.exe msongn.exe msmc.exe	ClientMan parasite variant
X	MSMcAfeeh	Avsynmgr32h.exe	Added as a result of the FRANGO VIRUS!
X	MSMcAfeeS	Avsynmgr32S.exe	Added as a result of the VOLAC or VOLAC.DR VIRUSES!
?	msmgr	msmgr.exe	??
X	Msmgt	msmgt.exe	Total Velocity adware/hijacker
?	MsmqIntCert	regsvr32 /s mqrt.dll	Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. Is it required?
U	MSMSGS	msmsgs.exe	Windows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
X	msn	system32.exe	Added as a result of the KITRO.A VIRUS!
N	MSN Internet Access	trayclnt.exe	Quick way to connect to MSN internet service - replaces "MSN Quick View" from V5.6 onwards
X	MSN messenger	messenger.exe	Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
X	MSN messenger service	mssgs.exe	Unidentified trojan VIRUS!. Note - this is not the real MSN Messenger, see this thread
N	MSN Quick View	Msndc.exe	Quick way to connect to MSN internet service
X	Msnarrator	msnarrator.exe	Added as a result of the NARAT.A VIRUS! - also identified as MPGCOM Toolbar adware
X	MSNET	msnet.exe	Added as a result of the BOA VIRUS!
?	MsnFixer	msnfixjs.js	Located in the HPbinmsnfix directory of a HP PC
N	MSNIA	MSNIASVC.EXE	Added with MSN version 9. Resets certain internet settings upon bootup and can't be disabled via MSCONFIG
N	msnmsgr	msnmsgr.exe	MSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
X	MSNService	MSNService.exe	Added as a result of the CARPET.C VIRUS!
X	MSNSysRestore	pc32.exe	Added as a result of a variant of the MASTAK VIRUS!
X	MSObject32	MSObject32.js	Added as a result of the PUN VIRUS!
X	Msoffice	msoffice.hta	Hijacker - redirecting to Searchdot.net
X	MSOOBD	MSOOBD.EXE	Added as a result of the MAGISTR.A VIRUS!
X	Mspatch69	<path to trojan>	Added as a result of the MPROX VIRUS!
X	Mspatch89	cnqmax.exe	Added as a result of the RANDEX.P VIRUS!
X	MSPQFile	MSA****.TMP	Homepage hijacker. See here for more information. **** can be anything
U	mspwr	pupstman.exe	"Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me)
N	MSPY2002	ImScInst.exe	Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
X	Msrc	Msrc.exe	Added as a result of the KRYPTONIC GHOST VIRUS!
X	msreg.exe	msrege.exe	Added as a result of the ZINX VIRUS!
X	MSREGIT	Msgp.exe	Added as a result of the KRYPGHOS (Kryptonic Ghost) VIRUS!
X	MSRegSvc	regsvc32.exe	Homepage hijacker that changes your homepage to an adult content site
X	msrunocx32	msrunocx32.exe	Added as a result of the SKUS VIRUS!
X	msservice	msserv.exe	Added as a result of the HYD VIRUS!
X	MSSHVC	MSSHVC.exe	Added as a result of the NUFFY.A VIRUS!
X	MSSQL	Mssql.exe	Added as a result of the SDBOT VIRUS!
X	Msstart	msstart.exe	Added as a result of the LIVUP.C VIRUS!
X	MSStartOptimizer	Iexpres.exe	Added as a result of the POLDO.B VIRUS!
X	MSStartOptimizer	WINUPD.EXE	Adult content dialler - see here. This has to be cleared at the same time as RegCompres (REGCPM32.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
X	mssurfer lptt01 or mssurfer ml097e	mssurfer.exe	Variant of the RapidBlaster parasite (in a "surfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware
X	mssvc	<path to trojan>	Added as a result of the PSK VIRUS!
Y	MSSVC.EXE	MSSVC.EXE	Stealthdisk - hides folders, files and applications. Will also encrypt them for better protection
X	mssys	mssys.exe	Added as a result of the MYSS.B VIRUS!
X	mssysint	Iexplore .exe	Added as a result of the PWSTEAL.ABCHLP and PSPIDER.310.B VIRUSES! Note - this is not the valid Internet Explorer (iexplore.exe)
X	mssyslanhelper	msmsgri32.exe	Added as a result of the RANDEX.D VIRUS!
X	MsSystem	msdos.exe	Adult content downloader - see here
X	MsSystem	mssys.exe	Added as a result of the VANTA.A VIRUS!
X	Mstapi	Mstapi.exe	Keylogger trojan
X	Mstask	mstask.exe	Added as a result of the OPASERV.N VIRUS! Note - this is not the "Scheduling Agent" and the executable resides in C:\Windows or C:\WINNT
?	Mstcgww	MSTCGWW.EXE	??
X	Mstng32	MSTng32.exe	Added as a result of the TANG VIRUS!
X	MSupdate.exe	N/A	CoolWebSearch parasite related - resets home page to an adult content site
X	MSupdater.exe	N/A	CoolWebSearch parasite related. Installs the Winshow.dll browser plugin
X	msuser32.exe	msuser32.exe	Added as a result of the ANDROV VIRUS!
X	msvc32	msvc32.exe	ClientMan parasite variant
X	msvcc	msvchost.exe	Added as a result of the XOMBE VIRUS!
X	MSVersion	INTERNETFEATURES.exe clrschp038.exe	Added as a result of the POPMON.A VIRUS! - also known as PopMonster adware
X	MSVXD	MSVXD.EXE	Added as a result of the DATOM.A VIRUS!
U	MSwheel	mswheel.exe	Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
X	Mswincfg	Mswincfg32.exe	Added as a result of the CYBERSPY VIRUS!
X	msys lptt01	msys.exe	New variant of the RapidBlaster parasite (in a "Msyss" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Msys32	morfitwebentrance.exe	Morfit ADjectPager - "uses home page rental technology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as http://www.web-entrance.com/. Any installed application including this must be un-installed before you can reset your homepage
X	MS_NETD_WIN32	netd32.EXE	Added as a result of the RANDEX.F VIRUS!
X	MS_SETUP.EXE	N/A	Added as a result of the CHARGE VIRUS!
X	Mtr2	mtr2.exe	Added as a result of the KRYPTONIC GHOST VIRUS!
U	MUAL	mual.exe	Millesky video mail updater and launcher
U	muamgr	muamgr.exe	Quick access to MicroAngelo 5.0. It can make the background of the icon text transparent and also change the color of the shortcut's text to a color you want. Very useful, if you have a wallpaper. Available via Start -> Programs
?	Mufix	mufix.exe	??
U	Multi-function keyboard	GWHotkey.exe	Software that sets up the Gateway AnyKey keyboard shortcuts (a series of buttons that allow one-click access to e-mail, browser, volume and CD/DVD controls, etc)
U	MultiCAM Initializer	MCamBoot.exe	The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC Digital cameras on a single computer. Clears itself from memory once initialized but can also be safely disabled
U	Multimedia KBD or MULTIMEDIA KEYBOARD	MMKeybd.exe	Multimedia keyboard manager. Required if you use the additional keys. Can also be listed as Keyboard Manager
U	MultiRes	MultiRes.exe	MultiRes - system tray utility allowing quick access to changing desktop resolutions and has the ability to lock the screen refresh rate in WinNT/2K/XP
U	MUPS	MUPS.exe	Lauches the Belkin Bulldog Plus Service - required if you want to access the UPS advanced functions
Y	murphy shield	lmgui.exe	Firewall part of BitDefender virus scanner/firewall
N	Music01 Server	Music01 Server.exe	J River Media Jukebox
X	MusIRC (irc.music.com) client	musirc4.71.exe	Added as a result of the RANDEX.Q VIRUS!
X	MutexServiceEx	Sys32Smm.exe	Added as a result of an unidentified VIRUS!
N	MWProEng	MWProEng.exe	Logitech Mouseware Pro software - only required when using special functions
N	MWSnap	MWSnap.exe	MWSnap - screen capture utility. Start manually when required
X	mwsoemon	mwsoemon.exe	"My Web Search" malware
X	Mwsvm	mwsvm.exe	SeekSeek search hijacker related - as seen here
X	MxHLp32	MxHLp32.exe	Added as a result of a variant of the VAGRNOCKER VIRUS!
U	MXO Auto Loader	MXOaldr.exe	Maxtor includes a driver to bypass the Windows certified drivers check just when it detects an external drive. MXOaldr.exe is installed with the new driver and if disabled the button on a Maxtor OneTouch External Store no longer functions
U	MxRunner	MxRunner.exe	EasyUninstall from Aladdin Systems (formerly by Ontrack)
X	My Agent	msagent.exe	Added as a result of the NEGASMS.A VIRUS!
X	My App	SMSSvc.exe	Added as a result of the NEGASMS.A VIRUS!
X	My Search Bar Eq	S4BAREQ.EXE	MySearch bar parasite
U	MyAgtTry	MyAgtTry.exe	System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
X	Myapp	<filename>	Added as a result of the FATEE.B VIRUS!
X	Myapp	service.exe	Homepage hijacker
Y	MyCIO Agent Service	myagtsvc.exe	McAfee VirusScan ASaP Agent service
U	myCIO.com ASaP	MyAgtTry.exe	System tray notification for McAfee VirusScan ASaP on-line scanner. Not required to be protected but you lose notifications
N	myCIO.com Splash	Splash.exe	Splash screen for McAfee VirusScan ASaP on-line scanner
X	MyCometCursor	MYCOME~1.EXE	Comet Cursor adware
N	MyFastAccess	myfastupdate.exe	My-Fast-Access toolbar updater
X	MyLife	CmdServ.exe	Added as a result of the HOLAR.A VIRUS!
U	myNetWatchman	nwclient.exe	Sends your firewall alerts to a website, which then filters them and forwards details of suspicious activities to the host ISP they originated from. Only needs to be running when your firewall is running
X	MyPointsPointAlert	wjview ...MyPointsPointAlertrun.exe	"With MyPoints you can earn rewards from name-brand merchants. You can even earn vacations and frequent flyer miles". Dubious privacy policy
U	myprint mileage	mpm.exe	Reports battery status on a portable printer
?	MySoftware NewsFlash	Newsflsh.exe	??
U	MytekSystrayExePath	MyTekSystray.exe	MyTek system tray - web site providing computer tech support in Australia
U	MyVitalAgent	VtlAgent.exe	MyVitalAgent from Lucent Technologies. Replacement for Net.Medic, monitoring all popular internet transactions and alerting the user of the loaction of connection problems. Available via Start -> Programs
X	MyWebSearch Email Plugin	mwsoemon.exe	"My Web Search" malware
U	N2PTray	Net2fone.exe	An Internet telephony application. Needed only if you have an account at Net2Phone, Inc
N	NADaemon	NADAEMON.EXE	Program by NetActive which appears to be piggybacked onto some Nvidia graphics cards software. They seem to look after "digital rights management". One user reports disabling it has no detrimental affect - not required
N	Naggerrunkey	nagger.exe	Packard Bell Free Internet Signup screen
Y	Naimagent_service	EPOAgentnaimas32.exe	Networked version of McAfee VirusScan. Installs, configures and updates the software and DAT (virus definition) files on local computers from a network server. A resource hog but required for DAT updates and if disabled can also cause random freezes and error messages
Y	Naimagent_UI	EPOAgentnaimag32.exe naimag32.exe	Workstation background program for Network Associates’ McAfee ePolicy Orchestrator - a network management tool for enforcing antivirus protection of the workstations using system policies. Works with both McAfee and Norton AntiVirus. NAIMAG32 and NAIMAS32 communicate with the ePolicy Orchestrator processes on the network fileserver to check for virus updates or for the need to perform a virus scan
X	Name	Iexplorer0.exe	Added as a result of the THREADSYS VIRUS!
X	Natal	Natal.scr	Added as a result of the OPASERV.AE VIRUS!
X	NAV	RuxDLL32.exe	Added as a result of the MAPSON.D VIRUS!
X	nAv AGENT	N/A	Added as a result of the RIOSYS VIRUS! Note the lower-case "n" and "v" in the name as this is not the valid Norton AntiVirus entry of the same name - indeed it closes Norton AV processes
Y	NAV Agent or navapw32	navapw32.exe	Introduced with Norton Anti-Virus 2002 to replace Norton Auto-Protect and Norton eMail Protect. Leaving "Auto-Protect", "E-mail Scanning" and "Script Blocking" enabled doesn't seem to slow the system down.
X	NAV Auto Update	Navautoupdate.exe	Added as a result of the SPYBOT VIRUS!
N	NAV CfgWiz or NAV Configuration Wizard	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
U	NAV DefAlert	DefAlert.exe	Norton Anti-Virus Definitions Alert. Warns you if virus definitions are out of date. Leave enabled unless you manually update virus definitions on a regular basis
X	NAV Live Update	<filename>	Added as a result of the DEBORMS.C VIRUS! <filename> represents the path to the worm. Note - this is not a valid Norton Anti-Virus (NAV) function from Symantec
X	NavAgent32	lasvr32.exe	Added as a result of the FEMOT.D VIRUS!
X	NavAgent32	SCardSvr32.Exe	Added as a result of the MOFEI.B VIRUS!
U	Naviscope	naviscope.exe	Naviscope is a multipurpose browser enhancement that can speed up Web searches, lock out cookies, examine HTML send/receive headers, provide single-click network diagnostics, and much more
X	navman_20	sysnav32.exe	Hijacker, possibly a CoolWebSearch variant
X	NavPass	NavPass.exe	Free system for gaining access to and downloading from adult content web-sites
X	NavScan	<filename>	Added as a result of the OBSORB VIRUS!
X	NAVUpd	rundll32.exe navupd.dll, Startup	Added as a result of the NAVU VIRUS!
N	NB Common Dialog Enhancements	COMDLGEX.EXE	Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs
N	NB Start Menu	STARTM.EXE	Part of McAfee Nuts & Bolts. Provides the same control as MSCONFIG and can be used instead if you have N&B
N	NB Windows Patterns	WINDBKGND.EXE	Part of McAfee Nuts & Bolts. With Background Patterns, you can change background patterns of wizard and dialog windows
U	NBJ	NBJ.exe	Ahead Nero BackItUp backup program. Only required for if you have scheduled back-ups
U	NbkCtrl	NbkCtrl.exe	Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
?	NCClient	N/A	??
N	NCD	ncd.exe	Norton Change Directory - from the DOS days that allows the user to change directories on their machine without typing the complete path
?	NCLAUNCH	NCLAUNCH.Exe	Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP. Is it required?
N	NCS_SS	Csinsm32.exe	Same as CleanSweep Smart Sweep-Internet Sweep
?	NDDEAGNT	NDDEAGNT.EXE	WinNT default process. Network Dynamic Data Exchange (DDE) Agent, handles requests for network DDE services
X	NDplDeamon	nstask32.exe winlogin.exe	Added as a result of the RANDEX.E VIRUS!
U	NDPS	DPMW32.EXE	Novell Distributed Printer Services - part of Novell's Netware Client and Groupwise products. Not required if you don't use this feature
?	NDSTray	NDSTray.exe	ConfigFree™ Tray on a Toshiba laptop. What does it do and is it required?
N	Necbar	Necbar.exe	Nec Assistant; Ark's Navigator, a graphical interface for NEC computers
Y	NECMFK	necmfk.exe	NEC wireless keyboard driver
U	Necutray	Necutray.exe	Driver for external USB storage devices (hard drives, flsh disks, etc)
?	neqprvfy.exe	neqprvfy.exe	Appears to be related to the downloading of some application - possibly verifying updates?
X	Nero.ma	<digits>.exe	Added as a result of the JONBARR.D VIRUS! where <digits> is 2 or 3 random digits
U	NeroCheck	nerocheck.exe	Associated with "Nero Burning Rom" CD writing software. Used to install/control Nero driver nerocd2k.sys. Required only if you use Win2K/XP and login without admin privileges
X	NeroCheck	regedit.exe	Added as a result of the DOOMJUICE.B VIRUS! Note - this is not the valid Ahead Nero CD burning program. Also it is not the valid Windows registry editor which resides in C:\Windows or C:\Winnt wheras this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K) or C:\Windows\System32 (WinXP)
X	Net	WINREG.EXE	Added as a result of the ASSASIN.D VIRUS!
U	Net Activity Diagram	nad.exe	Net Activity Diagram from MetaProducts. Monitors your computer internet activity. Available via Start -> Programs
N	Net-It Launcher	NILaunch.exe	Net-It - web publishing software
U	NetAccelerator	NetAccel.exe	NetAccelerator is a "software utility that optimizes your internet access up to 1200% faster!. NetAccelerator speeds all modems allowing you to download faster, browse faster, surf faster!. Only required if you find it helps improve your performance
X	Netapi	Netapi.exe	Added as a result of the NETDEVIL.14 (NetDevil 1.4) VIRUS!
X	NetApp	winserv.exe	Added as a result of the SHADOWTHIEF VIRUS!
X	netconfig	netconfig.exe	Added as a result of the NETCONF VIRUS!
U	NetCruiser Dialer	NCDialer.exe	NetCruiser Dialer from NetCruiser Software. "An Internet dialer and connection monitor with features to launch applications when a connection is detected, dial and hangup at predefined times and automatic redialing of dropped connections"
?	netfxupdate or NetFxUpdate_v1.0.3705	netfxupdate.exe	Would appear to be a valid Microsoft .NET file (see here) but this suggest's it's a trojan?
U	Netlimiter	Netlimiter.exe	Netlimiter - "An internet traffic control tool to monitor applications which access the internet and actively control their internet traffic. Use it o set (download/upload) speed limits for applications or even single connection. NetLimiter also allows you to share your internet connection bandwidth among all applications running on your PC."
N	Netline User	netchk.exe	Netline supplies internet related products and services and this program identifies user ID and IP information. Found installed along with the Falcon 4 game, for example
X	NetManagerService	ntss.exe	Added as a result of the BESTPICS.A VIRUS!
X	NetMon	netmon.exe	Added as a result of the MIMAIL.M VIRUS!
U	NetPatrol	winclient.exe	NetPatrol network monitoring software
N	NetPerSec	NetPerSec.exe	NetPerSec - measures the real-time speed of your Internet connection
N	NetPumper	NetPumperIEProxy.exe	NetPumper - download manager
X	Netropa Internet Receiver	Netropa.exe	Netropa Internet Receiver. Shows a scrolling bar with the news. Major resource hog and flagged as spyware
U	NetRun	NetRun.exe	NetRun - will 'RUN' a 'List' of programs only when a internet connection is detected, and close/kill the same 'List' when the connection is lost
N	Netscape Messenger	NETSCAPE.EXE	In Netscape 6 (I know for sure with 6.2.1, maybe with 6.0) Netscape.exe is the main executable file for Netscape Navigator, Netscape Mail and News, and Netscape Messenger (the new name for the embedded AIM, no doubt to make it sound like Windows Messenger, the XP version of MSN Messenger). Basically, netscape.exe can be more than just Netscape Messenger, and Messenger can be more then just AIM in disguise, depending on the version of Netscape installed
N	Netscp6	Netscp6.exe	Netscape 6
U	NetShow Powerpoint Helper	NSPPTHLP.EXE	If disabled, user created fonts can no longer be seen by other programs
N	NetStat Live	Nsl.exe	AnalogX NetStat Live - TCP/IP protocol monitor which can be used to see your exact throughput on both incoming and outgoing data
U	NetTime	NETTIME.EXE	From a visitor - "This is the executable for NetTime. It is started from the registry when you check the box to start at startup. NetTime allows you to synchronize your computers' clock with a server on your local net or the internet using any of several protocols, e.g. NTP."
U	NetTurbo	netturbo.exe	NetTurbo from SharewareOnline.com. "Accelerate Your Internet Connections by up to 600%". If you find it helps your connectivity leave it enabled
X	NetWatch32	netwatch.exe	Added as a result of the MIMAIL.C VIRUS!
N	Netword Agent	nwant33.exe	An interesting browser utility that allows you to navigate by typing a single word or phrase (a "NetWord") related to what you're looking for into your browser's location field. It also puts an icon in the system tray icon that is a circle with the letter N in the center to access the menu faster. Available via Start -> Programs
X	Network Administration	NAS.exe	Added as a result of the ANTILAM.20.Q VIRUS!
U	Network Associates Error Reporting Service	TBMon.exe	Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
U	NetWork Device Switch	NetDevSW.exe	Toshiba laptops with built-in Wi-Fi. Allows switching between Wi-Fi and internal ethernet. Only necessary if you have regular need to switch back and forward between these network interfaces. Located in Startup folder so make own shortcut to it and disable if not really necessary
X	Network Host Controller	<path to trojan>	Added as a result of the WHISPER VIRUS!
X	NetworkClient	NetworkClient.exe	Added as a result of the LEMUR VIRUS!
N	NetworkSetup	dlink.exe	D-Link System Tray icon
X	Netzip Smart Downloader	npnzdad.exe	Advertising spyware
N	NetZIPFolders	nzfprop.exe	Netzip Classic zip file manager
X	NeuroMedia(IESpeaker)	NeuroMedia.exe	Part of an older freeware version of IESpeaker - a program that allows you to listen to web pages. NeuroMedia.exe only downloads advertisments. Not included in the paid-for version currently available
N	NeuroSpeech OESpeaker	OEMonitor.exe	Part of OESpeaker - a program that allows you to listen to long E-mails instead of reading them in Outlook Express. OEMonitor.exe checks whether OE is open or not
X	New.net or NEWDOT~1	rundll32.exe NewDotNetStartup Newdot~2.exe	Advertising spyware, see here for details on how to remove as disabling in MSCONFIG reportedly doesn't work. Installed as part of the Kazaa Media Desktop bundle for example
N	Newsalrt	NEWSALRT.EXE	MSNBC News system tray utility to alert you to new news
X	Newsgroup lptt01 or Newsgroup ml097e	newsgroup.exe	Variant of the RapidBlaster parasite (in a "newsgroup" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N	NewsUpd	newsupd.exe	For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -> Programs. Also spyware - see here.
X	NewtonKnowsUpd	NewtKnow.exe ...NewtnUpd.dll, runkey	NewtonKnow hijacker
U	NFM Service	NPDOR9x.exe	Appears in startup if you have chosen to participate in on survey by NPD Online Research. Required for the survey to work correctly. Otherwise not required
N	nForce Tray Options	sstray.exe	nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
U	NGClient	ngctw32.exe	Symantec Ghost Server software - needed for a "a Ghost multicast" (transfer images to multiple machines). Can be launched manually
N	NGServer	ngserver.exe	Symantec/Norton Ghost Console service
N	Nielsen NetRatings	insight.exe	Nielsen NetRatings -  "Provides real-time research and analysis about Internet users, delivering the timely, actionable data you need to make critical business decisions on your competition, your Web site’s audience and your customers". Is it required?
X	nikLaus	nikLaus.exe	Added as a result of the NIKLAS VIRUS!
N	NInit	NInit.exe	Norton Uninstall Deluxe. Monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging - not required
Y	nisserv	NISSERV.EXE	Norton Personal Firewall
Y	Nisum	NISUM.EXE	Norton Personal Firewall
X	NJG40	NJG40.EXE	Added as a result of the BANCOS.D VIRUS!
N	NkvMon.exe	NkvMon.exe	Nikon View 5 - for transferring pictures from Nikon digital cameras
N	NkVwMon.exe	NkVwMon.exe	Nikon View - for transferring pictures from Nikon digital cameras
?	NMSSvc	NMSSVC.EXE	NIC Management Service - diagnostics program for Intel Pro family network cards
Y	NMSVC	nmSvc.exe	Covenant Eyes - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Disabling it means loss of internet connection until renabled - therefore required if you use it
U	NNSvc	nnsvc.exe	NetNanny internet filter
X	No Credit Card	plugin-<random>.exe	Adult content pop-up dialler
U	No-IP DUC	DUC20.exe	Part of http://www.no-ip.com provided service. Keeps No-IP's dynamic nameserver (DNS) updated if and when your computer's (network's) dynamic IP-address changes so that you can run servers on computers with dynamic IP. Shortcut available
U	NoAds	NoAds.exe	Blocks advertisement banners in Internet Explorer
U	Nod32CC	nod32cc.exe	Control Center part of Eset's NOD32 virus-scanner. Leave this enabled if you want to update your virus data files via the click of a button
Y	NOD32kernel	Nod32krn.exe	Nod32 Antivirus Version 2
Y	nod32kui	nod32kui.exe	Nod32 Antivirus Version 2
Y	NOD32POP3	Pop3scan.exe	POP3 E-mail part of Eset's NOD32 virus-scanner
?	NodeMnger	Nodemngr.exe	Part of the Dell OpenManage Client installation - to allow Dell representatives to remote logon?
X	nodriver	AUEKXRZ.EXE	Added as a result of a variant of the SPYBOT VIRUS!
N	Nokia Connection Monitor	NclConf.exe	Monitors the infrared port, the serial ports and the Bluetooth for a Nokia phone connection. It is installed by the Nokia PC Suite (and Nokia PC Connectivity SDK), and the tray icon shows if a phone has been connected. If you have a conflict with another program, such as TV tuner card remote control monitor, you can disable it, and run only when needed. Available via a desktop shortcut or Start -> Programs - not required
U	NOMAD Detector	ctmnrun.exe	Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected
N	NomdCheck	nomdchek.exe	Part of Intel's Native Audio
U	Norman ZANDA	ZLH.EXE	System Tray icon for Norman Antivirus
Y	Norton Auto-Protect	navapw32.exe	Norton Anti-Virus's background scanning process. Can be inconvenient because it scans files when Run/Opened or Downloaded/Created and you can scan files manually via right-click after downloading/copying. However, in light of some of the viruses around these days it's probably best to put up with the inconvenience
?	Norton AV Preload	Premend.exe	Norton Antivirus related. What does it do and is it required
N	Norton Crashguard Monitor	cgmenu.exe	Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001
N	Norton Disk Doctor	Ndd32.exe	Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, checking for disk errors. Better than ScanDisk but can be started manually via Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
Y	Norton eMail Protect	POPROXY.EXE	Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
X	Norton Live Updater	Cavapsvc.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Norton Live Updater	Sochost.exe	Added as a result of the GAOBOT.AO VIRUS!
N	Norton Navigator Loader	nnloader.exe	An older Norton utility for file management under Windows 95. More information here
U	Norton Program Scheduler	nsched32.exe NPSsvc.exe	Installed on a Windows system where the Windows Task Scheduler isn't used as part of the OS (Win95, WinNT(?), Win2K(?)) to schedule automatic tasks such as Norton Anti-Virus scans
?	Norton Program Scheduler Event Checker	npscheck.exe	Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as NPS Event Checker
N	Norton System Doctor	Sysdoc32.exe	Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
?	NotebookManager	nbm.exe	Associated with Acer notebook PCs. What does it do and is it required?
X	Notepad lptt01 or Notepad ml097e	notepad.exe	Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not Windows Notepad which has the same executable name
?	NovaPortal Single User Service	NPSU.exe	??
U	NovastorSchedulerd	SCHENGD.EXE	NovaStor NovaBACKUP Scheduler - back-up utility. If you don't have regularly scheduled back-ups you don't need it
U	NPROTECT	nprotect.exe	Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here
?	NPS Event Checker	npscheck.exe	Part of Norton Anti-Virus. What does it do? Apparently it can safely be disabled without causing problems. Can also be listed as Norton Program Scheduler Event Checker
X	NSCheck	NSCHECK.EXE	Nettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
X	nscntrl	nscntrl.exe	Adult content dialler
X	nsdlua	nsdlua.exe	All-In-One Telcom - adult content dialler
X	nsdriver	nssys32.exe	Added as a result of an unidentified VIRUS!
U	Nsengine	Nsengine.exe	Scheduling engine of NovaSTOR Backup Service. Only required if scheduling is enabled and wanted - see here
U	NSHelper	aexnsinstallhelper.exe	Altiris Express Notification Server Install helper - monitors integrity of the installation
X	NSupdate	NSupdate.exe	Adult content dialer
X	Nsvdr	nsvdr.exe	Adult content dialler
N	NSystemMonitor	Symmon.exe	Norton Uninstall Deluxe - monitors programs being installed and logs them for removing later. Available via Start -> Programs for manual logging
N	NT Kernel Patch	ntkrnlpt.exe	FaxServe network fax software
X	NT Logging Service	Syslog32.exe	Added as a result of the DONK.B or  DONK.C VIRUSES!
X	ntdll	ntdll.exe	Added as a result of the BIONET.404 VIRUS!
X	NTDLM	csrss.exe	Added as a result of the HALE VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling as this resides in c:\winnt\system32\qossrv
Y	NTFSCLUP	NTFSCLUP.EXE	Part of ConfigSafe- "checks if an ntfssos restore has been performed since it was last run. It exits immediately after running. 99+% of the time it will only execute about a dozen instructions before exiting"
N	ntlfreedom	RyDial.dll, QuickStart	NTL Freedom ISP software - reportedly not required
N	NTrtc	ntrtc.exe	Dell year 2000 tool to deal with non-standard applications. Only required on older Dell PCs that may need this support - see here
X	NTsocket	NoeWinnt.exe	Added as a result of the ATAKA-E VIRUS!
U	NTVDM	NTVDM.EXE	Windows NT Virtual DOS Machine (NTVDM) for running 16-bit tasks on the 32-bit OS's (Windows NT, 2K and XP). Required if hardware on a machine with these OS's needs 16-bit DOS drivers. You can find a bit more about NTVDM here
X	ntvdscm	ntvdscm.exe	Added as a result of the TR/SCKEYLOG.SPY.20 VIRUS!
Y	NuTCSetupEnviron	ncoeenv.exe	Used by the MKS Toolkit for Enterprise Developers product. NuTCracker is a Unix runtime environment for Windows, so disabling this would be unwise if you are using NuTCracker or any 3rd party package that is using it. Since you might not know what is actually using it it's probably best left alone
?	NVCLOCK	rundll32 nvclock.dll, fnNvclock	Overclocking utility for nVidia based graphics cards?
?	NvColorInit	rundll32.exe NvQtwk.dll, NvColorInit	Associated with Nvidia based graphics cards
U	NvCpl or NvCplDaemon	rundll32.exe NvCpl.dll, NvStartup	Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
U	NvCplDaemon	rundll32.exe NvQtwk.dll, NvCplDaemon	Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
X	NvCplDmn	NAVSVC.EXE	Added as a result of an unidentified VIRUS!
X	nvd32 lptt01 or nvd32 ml097e	nvd32.exe	Variant of the RapidBlaster parasite (in a "nvd32" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Nvid	<8 random charachters>	Unidentified adware
X	Nvid32	Nvid32.exe	Added as a result of the GEMA VIRUS!
X	Nvidex32	Nvidex32.exe	Added as a result of the GEMA VIRUS!
X	Nvidia32	nvidia32.exe	CoolWebSearch parasite variant
N	NvidiaQuickTweak or NVQuickTweak	rundll32.exe NvQtwk.dll, NvTaskbarInit	System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
U	NVIEW	rundll32.exe nview.dll, nViewLoadHook	This is a DLL to enable multiple display monitors on a single computer. It can be a cause of numerous problems on some computers
N	NvInitialize	rundll32.exe NvQtwk.dll, NvXTInit	Thought to enable the clock frequency option on nVidia control panels. You can overclock without leaving this enabled
Y	NVmax	NVmax.exe	NVmax is a old tweaking utility for NVidia graphics cards. In the startup list if the user chooses to overclock their card
U	NvMediaCenter	RunDLL32.exe NvMCTray.dll, NvTaskbarInit	System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
N	NVRT	nvrt.exe	NVRefreshTool is a utility that will automatically detect the maximum refresh rate at each resolution that your monitor supports
N	NvSvc	nvsvc.exe	NVIDIA Driver Helper Service - installed when you change from the WDM drivers to nVidia's latest versions but not requied. Extreme shutdown delays can be encountered with this service active, but no adverse side effects with it disabled. NOTE: If using drivers other than nVidia's, such as Asus, this service may have been renamed to reflect that
X	NvXplDeamon	xstyles.exe	Added as a result of the SMALL.AJ VIRUS!
?	NWEReboot	dummy.exe	??
N	nwiz	nwiz.exe	Associated with the newer versions of nVidia graphics cards drivers.  Allows you to immensely improve desktop layouts by setting preferences and optimizations.  However, this isn't necessary for the operation of your system
Y	Nwpopup	Nwpopup.exe	Broadcast message handler part of Novell Netware that displays server, printer and other messages. Older version of nwrecmsg below
U	nwrecmsg	nwrecmsg.exe	Broadcast message handler part of Novell Netware that displays server, printer and other messages. Newer version of Nwpopup above and can cause crashes
Y	NWTRAY	nwtray.exe	Novell Netware. Displays the red "N" tray icon which can be disabled (by right-click on the icon) but is also needed by the client
Y	oahstifr	oahstifr.exe	Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
U	OAKSTART	OAKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	OAKTASK	OAKTASK.EXE	Taskbar utility for a "control panel" for a CD-RW
Y	Object Store Server	osserver.exe	Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up."
?	objtjprx	objtjprx.exe	??
N	OCAudioIni	OCAudioIni.exe	One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer
N	ocraware	ocraware.exe	Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start -> Programs
X	ocx32	ocx32.exe	Added as a result of the ASTEF or RESPAN VIRUSES!
X	OD	SYSCNTR.EXE	HotVideo dialler
X	od-matrxx	od-matrxx.exe	Adult dialler - xx can be any number
X	od-stndxx	od-stndxx.exe	Adult dialler - xx can be any number
X	od-teenxx	od-teenxx.exe	Adult dialler - xx can be any number
X	Oeloader	Oeloader.exe	Xupiter OrbitExplorer toolbar related, drive-by foistware
N	OEMCLEANUP or OEMRESET	oemreset.exe	Resets OEM installation settings at bootup. Not required unless you're new to PC's
?	OEPowerPlugs	winoeinit.exe	??
N	OEXCheck	EA2Check.exe	Express Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others
X	Offer Companion or Offers	offers.exe	Advertising spyware
X	Office Startup	Osa.exe Osa9.exe	Resource hog that launches common MS Office components to help speed up the launch of Office programs. Some users claim there's no difference with or without it but it isn't required anyway. Different filenames used for different variants
X	Office Startup	Exploer.exe	Added as a result of the GAOBOT.BV VIRUS! Note the different filename to the valid MS Office entry above
Y	OfficeGuard RegChecker	ogrc.exe	Kaspersky Labs anti-virus
?	officejet 6100	hposol08.exe	Associated with a HP PSC2110 (and maybe others) all-in-one machine
Y	OfficeScanNT Monitor	pccntmon.exe	Trend Micro OfficeScan Antivirus real-time scan monitor
N	OfotoNow USB Detection	Rundll32.exe OFUSBS.DLL, WatchForConnection OfotoNow	Autodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs
Y	ogrc	ogrc.exe	Kaspersky Labs anti-virus
N	Oil Change	OCTray32.exe	From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs
?	OIM	oim.exe	Related to the O2 (was "genie") mobile phone service. What does it do and is it required?
X	OLE	<filename>	Added as a result of the STAWIN VIRUS!
X	Olehelp	Olehelp.exe	CoolWebSearch parasite variant
X	olehelp	olehelp.exe	Added as a result of the BOOKMARKER.D hijacker/virus
X	Omf4	OMF4.EXE	Added as a result of the FREEMEGA VIRUS!
N	OmgStartup	omgstartup.exe	Sony program called OpenMG Jukebox - player and music organizer
U	OmniHTTPd	ohttpd.exe	OmniHTTPd web server from Omnicron
N	OmniPage	Opware32.exe	Part of OmniPage Pro from Scansoft (was Caere) - "the fastest, easiest way to turn paper documents into digital files you can edit." Opware32.exe links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs
U	OmniPass	scureapp.exe	OmniPass from Softex Inc. - secure password management software
N	On Screen Display	OSD.EXE	By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume, etc. Nice but not required if you don't adjust things regularly - can also freeze
N	OneTouchMonitor or One Touch Monitor or ONETOU~2	OneTouchMonitor.exe 1tou~2.exe ONETOU~2.EXE	For Visioneer OneTouch scanners. System tray access to the control panel for the scanner
X	Onflow	onflow.exe	Onflow is a internet company that offers an online advertising program. Not required - uninstall
X	Online Service	svchost.exe	Added as a result of the HOSTIDEL.B VIRUS! Note - this is not the valid svchost.exe as described here
X	Online Service	svchost.exe	Added as a result of the HOSTIDEL.C VIRUS!. This is not the valid svchost.exe as described here
U	OnlinePCfix SmoothSurfer	SS.exe	Smooth-Surfer - blocks banners, ads, popups, and cleans MRU and Recent file lists
N	OnlineTime	onlinetime.exe	OnlineTimer - monitors your Windows dial-up network and logs the time you spend online as well as the resulting costs
X	online_party	online_party.exe	Adult content dialler
X	OnSrvr	OnSrvr.exe	OnWebMedia adware
X	oo4	RunDLL32.EXE oo4.dll, DllRun	BookedSpace parasite variant
N	OP12 Reminder	Ereg.exe	Registration reminder for OmniPage Pro 12 from ScanSoft
X	Open Site	opnste.exe	Adware - see here
N	OpenOffice.org x	QUICKS~1.EXE	Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number
N	Operator	??	Media Pilot operator, in Win.ini. Locks port open
U	Operator	xtmop.exe	Fax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported
N	OpiStat	OPISTAT.EXE	OpiStat is a European Research Institute whose goal is to understand consumer needs and opinions better
X	OPQFile	regedit.exe /s ...rad03FA6.tmp	Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit
N	Optimum Online	Netsurf.exe	Optimum Online ISP software. Not required, just window dressing & advertising from Optimum
N	Opware12	Opware12.exe	OmniPage Pro 12 from ScanSoft
X	OrbitUpdate	update.exe	Xupiter OrbitExplorer toolbar, drive-by foistware
X	OrbitView	view.exe	Xupiter OrbitExplorer toolbar, drive-by foistware
?	org5.exe	org5.exe	Lotus Organizer 5 application file, Lotus Organizer software. What does it do and is it required?
X	OrgyCam	OrgyCam.exe	Adult content dialler
U	OrigRage128Tweaker	RAGE128TWEAK.EXE	Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com
U	ORiNOCO	Cmluc.exe	Client Manager software for an ORiNOCO wireless LAN card
X	Osa32	NTOSA32.exe	Added as a result of the ANIG VIRUS!
X	OSSProxy	OSSPROXY.EXE	Part of Nettsetter - a "market research" program intended to track your Internet usage and buying habits. To remove click on Start -> Run and enter "%WinDir%\SYSTEM\NSCheck.exe /uninstall" (where %windir% is the Windows directory - C:\Windows or C:\Winnt) followed by enter - this removes all registry entries and a box appears saying "uninstall successful. Find and delete the files nscheck.exe, ossproxy.exe.rvt & ossproxy.exe
U	OStivityInvAgt	ostivity.exe	OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system"
Y	Outpost Firewall	outpost.exe	Outpost personal firewall
X	Outwar	syslaunch.exe	Outwar adware downloader
?	OVCJ	ovcj.exe	??
N	Overnet	Overnet.exe	Overnet peer-to-peer (P2P) file sharing program
U	OWCCardbusTray	ocbtray.exe	Icon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface
U	OWCWebCamDV	wcdvtray.exe	WebCamDV from Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam
X	OWMngr	OWMngr.exe	OnWebMedia advertising foistware - see here for exactly what to look for
N	P2P NETWORKING	P2P Networking.exe p2pautostart.exe	Peer to Peer (P2P) sharing of files on the internet
X	P3p4chk	P3p4chk.exe	Added as a result of the GEMA VIRUS!
U	Pagekeeper Jobs or Pagekeeper Lite	pkjobs.exe	PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
X	PAgent	PAgent.exe	Scans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found. See here for more info
N	Pagis Scheduler	Monitor.exe	Scheduler for the Pagis scanning suite from Scansoft.
?	pagmstart	client.exe	Possibly related to this?
N	Pagoo	PAGOO.EXE	Pagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
?	Palm MultiUser Config	Configtool.exe	MultiUser configuration for a Palm PDA device?. Is it required?
N	Palm.exe	Palm.exe	Palm Desktop Software for use with Palm handheld devices. Available via Start -> Programs
N	PaltalkNetaware.exe	PALNETAW~1.EXE	Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start -> Programs. Delete the shortcut in Start -> Programs -> StartUp as well otherwise it will be reinstated
U	Panda Scheduler	pavsched.exe	Panda Antivirus scan scheduler. Required if this is your virus scanner program and you have scans scheduled on a regular basis. I recommend that you scan manually so you don't need this but if you tend to forget then leave it
N	Paperport	runppdrv.exe	Loads the drivers associated with monitoring scanner status associated with PaperPort software. Can be a resource hog - see here
N	PaperPort PTD	pptd40nt.exe	"PaperPort" software associated with scanners
N	PaperQuote System Tray Icon	PQTRAY.EXE	PaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation
N	PasteLister	plister.exe	PasteLister - clipboard extender. Start manually when required
X	Patch	patch.exe	Added as a result of the NETBUS VIRUS!
?	Path	lide.exe	??
X	PAV.EXE	%Number%	Added as a result of the KITRO.D (or ARGEN.A) VIRUS!. %Number% can be any number
Y	PAV.EXE	PAV.EXE	PER Antivirus
Y	PAVFIRES	PavFires.exe	Panda Antivirus
U	PC Alert III	alert.exe	MSI PC Alert III - allows you to view your system and cpu temperature, fan rpm and more. Only required if you overclock
U	PC Booster	pcbooster.exe	PC Booster from inKline Global - "easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"
X	PC-Config32	corona.exe	Added as a result of the CORONEX.A VIRUS!
Y	PCBODYGUARD or PCBG	PCBODYGUARD.EXE	PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
Y	PCCClient.exe	PCCClient.exe	PC-Cillin 2002 antivirus software
Y	pccguide.exe	pccguide.exe	PC-Cillin 2002 antivirus software
Y	PCCIOMON.EXE	PCCIOMON.EXE	PC-Cillin 2000 antivirus software. This is the actual virus-scanner
Y	PccPfw	PccPfw.exe	PC Cillin 2003 personal firewall
N	PCHbutton	PCHbutton.exe	Used by HP Instant Support
N	PCHealth	pchschd.exe	This is a "scheduler" and does not turn off PC Health. For more information refer here
?	PCIMODEM	pcimodem.exe	Associated with Lucent based Aztech MDP7800-U PCI modems. Is it required?
U	PCLEPCI	ppe.exe	Pinnacle Systems PCI Performance Enhancer. "This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards."
?	PCMService	PCMService.exe	In a Dell\Media Experience sub-directory
?	PCRecSA	PCRecSA.exe	Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
N	PCStart	Pcm25.exe	Runs as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big
N	Pcsv	pcsvc.exe	Delfin Promulgate - adware based media viewer by The Delfin Project
N	PcSync	PcSync.exe	If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start -> Programs
U	pctspk	pctspk.exe	Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions
U	PCTVOICE	pctvoice.exe	The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. It’s better to leave it
U	PDEngine	PDEngine.exe	PerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot
N	pdexplo	PDEXPLO.EXE	PowerDesk Pro by Ontrack. Enhanced desktop and file manager. Available via Start -> Programs
N	pdfFactory Pro Dispatcher v1	fppdis1.exe	"With pdfFactory you can create PDF documents from any program printing to the virtual PDF printer". Available via a desktop shortcut or Start -> Programs
N	PDirect	PDirect.exe	IBM Presentation Director software
U	pdp Server	ctpdpsrvr.exe	Included and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed when used over a network
N	Pe2ckfnt SE	chkfont.exe	Used to check whether the fonts are installed properly on your computer or not for a scanner. If you don't want to execute it, you can uncheck it in the startup menu
U	Pent@VALUE 3.2	Pent@VALUE.exe	Pent@VALUE Digital Satellite Internet PC Receiver
Y	PER Email Protection	pavmail.exe	PER Antivirus
N	PerfectPrint	pfppop70.exe	Print engine used by Corel WordPerfect 7 and Presentations 7
Y	PersFw	PersFw.exe	Kerio or Tiny Personal Firewall
U	Pervasive.SQL Workgroup Engine	W3dbsmgr.exe	Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before using it as it has a tendancy to crash/freeze if loaded with other applications at startup
U	PestPatrol Control Center	PPControl.exe	PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
?	PestPatrolCL	PestPatrolCL.exe	Associated with PestPatrol anti-malware software. What does this part do and is it required?
?	PFW_CfgEngine	PFWCFG~1.EXE	Personal Firewall related?
?	PFW_PullSrv	PULL.EXE	Personal Firewall related?
X	PgMonitr	PgMonitr.exe	Adware based media viewer by The Delfin Project
Y	PGPSDKSVC	pgpsdkserv.exe	PGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality
U	PGPSERVICE	pgpservice.exe	PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a "fall-back" mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference
N	PGPtray	pgptray.exe	PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start -> Programs
X	PGStub.exe	<various filenames>	Unidentified adware
N	Phime2002a or PHIME2002ASync	TINTSETP.EXE	Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
U	PhoneFree version 6.2	PHONEF??.EXE	An Internet telephony application. Complicated registration and ad banners tailored to your profile - see here
N	Photo Express Calendar Checker SE	CALCHECK.EXE	If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper, Photo Express will replace the wallpaper automatically. Photo Express 2.0 has a calendar checker which checks the date on your system and updates your wallpaper accordingly
N	Photo Loader supervisory	Plauto.exe	Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures
N	PhotoWise QuickLink	quicklnk.exe	Agfa PhotoWise - "PhotoWise QuickLinkTM lets you drag and drop photos right from the camera into your document (applications must be OLE-compliant). Use PhotoWise to print contact sheets and photographic prints. Create slide shows, screen savers, wallpaper and more."
N	Picasa Media Detector	PicasaMediaDetector.exe	Media detector for Picasa's automatic photo organizer
N	Pickatag	pickatag.exe	Pick-a-tag - "Freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages"
N	PICPRTR	PICPRTR.EXE	Program for viewing and measuring a variety of 3D CAD data formats
N	pictureBUZZTray	swtray.exe	System Tray access to PictureBUZZ on-line printing software from Streetwise Software. If you use the software set the page you use as a favourite in your browser and run it manually
U	PiDunHK	PIDUNHK.EXE	Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens
U	piiserviceOE	N/A	Spam Inspector (nee Postal Inspector) from The Giant Company or iHateSpam from Sunbelt Software - spam filter add-ons for OE
N	Pinger	pinger.exe	Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification
Y	PinnacleDriverCheck	PSDrvCheck.exe	Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
N	Piolet	piolet.exe	Piolet - peer-to-peer file sharing client
N	PivotSoftware	wpctrl.exe	PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
X	Pixel32	Pixel32.exe	Added as a result of the GEMA VIRUS!
X	Pixelpwr32	Pixelpwr32.exe	Added as a result of the GEMA VIRUS!
X	Pixelsvr	Pixelsvr.exe	Added as a result of the GEMA VIRUS!
U	pjWebCam	pjWebCam.exe	Webcam automation software that saves regular photos from webcam and can also act as HTTP server
U	PLEAPCPUCPL	pleapu.exe	CPU Control Panel for the Powerleap CPU upgrade
N	Plguni	Plguni.exe	McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
U	plmg.exe	plmg.exe	Paragon Last Minute Bidder - auction assistant software
?	PLoader	umsd.exe	USB Mass Storage Disk related tray icon. Is it required?
X	Plob	kernel.com	Added as a result of the OPTIXPRO.12 VIRUS!
U	PLXSTART	PLXSTART.EXE	Sets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW.
N	PLXTASK	PLXTASK.EXE	Taskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files)
?	pm32info	pm32info.exe	??
X	pmc	764.exe	Adult content dialler
X	PMedia	winsrvc.exe	Internet marketing sofware from PMedia as used in E-Card FriendGreetings foistware - see here. Treated by Trend as the FRIENDGRT.B VIRUS!
?	PmProxy	PmProxy.exe	Associated with Analog Devices "SoundMAX" audio chipset - often built-in to motherboards. What does it do and is it required?
N	PMTSHOOT	pmtshoot.exe	MS tool for troubleshooting power management problems
U	PMXInit	pmxinit.exe	Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma
N	PNAgent	PNAgent.exe	PhatNoise Music Manager - manages WMA, MP3, WAV, etc music files
U	Pnpchk	Pnpchk.exe	Aztech Labs Sound 3 PnP driver
U	PNSetup	PNSetup.exe	PopNot - pop-up killer
X	PNtask Services	pntask.exe	Added as a result of the LALA.C VIRUS!
U	Pocket Sheet Sync	PSXLTRAY.EXE	Casio Pocket Sheet synchronization software
X	Pofatch	nstrue.exe	Added as a result of the RANDEX.Z VIRUS!
U	point32 or POINTER	point32.exe	Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
N	Points Manager	points manager.exe	Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
X	POP	PopSrv***.exe	PeopleonPage foistware, bundled with Grokster where *** are random digits
U	Pop-Up Smasher	PopupSmasher.exe	Pop-Up Smasher - pop-up killer
U	Pop-Up Stopper	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
U	Pop-Up_Blocker	Popup.exe	A Tweak-XP component, blocks advertisement pop-up windows in Internet Explorer. Can be enabled/disabled via Tweak-XP -> Internet Tweaks
Y	pop3trap.exe	pop3trap.exe	PC-Cillin 2000 antivirus software -> E-mail scanner
U	PopNot	PopNot.exe	PopNot - pop-up killer
U	PopOops	PopOops.exe	PopOops - pop-up killer
U	Popopen	popopen.exe	PopOpen makes your windows spring open with animation effects
Y	Poproxy	POPROXY.EXE	Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
X	popsrv146	popsrv146.exe	PeopleOnPage online dating browser enhancement - also adware and privacy issues, see here. For removal instructions see here
U	PopSubtract	PopSub.exe	PopSubtract - pop-up killer
U	Popup Ad Filter	PopFilter.exe	Popup Ad Filter - pop-up killer
U	Popup Defender	PD.exe	Popup Defender - pop-up killer
U	Popup Terminator	GLADManager.exe	Popup Terminator - pop-up killer
U	PopupEliminator	Popup Eliminator.exe	Popup Eliminator - pop-up killer
U	PopUpKiller	PopUpKiller.exe	PopUpKiller - pop-up killer
U	PopUpStopperFreeEdition	PSFREE.EXE	Pnaicware's Pop-Up Stopper - free limited features version
U	PopUpWatch	PopUpWatch.exe	Part of BPS Trace Remover - made by the folks who "developed" BPS Spyware Remover which reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!
?	POS-Partnerbatchprocessor	BATCH.EXE	VISA credit card batch processing related to Appcon. Is it needed or can it be started manually via Start -> Programs or a manually created shortcut?
N	Post-It(r) Software	Psnotes.exe	Pop-up "yellow" notes on screen. Available via Start -> Programs
U	POW!	pow.exe	Pop-up killer
X	Power Scan	powerscan.exe	Foistware by Integrated Search Technologies - the people behind the ISTbar parasite
Y	PowerChute	Pwrchute.exe	"During a power outage, if you're not available to save your files & close down Windows....PowerChute will do that for you. PowerChute will save your application files, close your applications and shut down your computer just like you would...otherwise, the APC UPS (Uninterruptible Power Supply) unit would go to battery until it wore down, then your computer would shutoff"
U	PowerDOCSAPIHost	papihost.exe	Hummingbird PowerDOCS - "delivers powerful enterprise document management functionality via a tightly integrated Microsoft WinNT/98/2K environment"
N	PowerDVD	PowerDVD.exe	Launches Cyberlink's PowerDVD software and creates a system tray icon. If enabled, PowerDVD will open automatically when a DVD movie is inserted. Launch manually
U	PowerKey	PowerKey.exe	Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
X	PowerManagement	Rundlll.exe	Added as a result of the SURDUX VIRUS!
X	PowerManager	Svchost.exe	Added as a result of the JEEFO VIRUS! Note - this is not the valid svchost.exe as described here
Y	PowerPanel	POWPANEL.EXE	Power management utility on notebooks/laptops - automatically switches modes when running on battery
X	PowerPrifile	rundl132 kenel.dll, PowerProfileEnable	Added as a result of the INMOTA VIRUS!
U	PowerPro	powerpro.exe	Part of the power professional program that loads the floating menu bar. Can be accessed from Start -> Programs, but I'd leave it alone if you use this program
N	PowerQuest Startup Utility	PQINIT.EXE	From a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems"
N	PowerReg Scheduler	PowerReg Scheduler.exe	PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
N	PowerReg SchedulerV2	PowerReg SchedulerV2.exe	PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
?	POWERR~1	POWERR~1.exe	Power monitoring?
?	PowerS	PowerS.exe	ProlinkTest for either their AGP graphics card or TV/FM capture card. Is it required?
?	PowerSet	Regedit.exe /s ...PowerSet_8100_CU.REG	Appears to be Toshiba power management related
N	PowerStrip	powerstrip.exe PSTRIP.EXE	PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
U	PowerTools Tray Icon	pttray.exe	PowerTools - add-on for AOL
U	Powertweak	PT2.EXE	"Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Use predefined settings' is enabled in the programs options
U	Powertweak	PTCTRL.EXE	"Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Configure system at logon' is enabled in the programs options
N	PP****usb	FBDirect.exe	Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
U	PP2000 Instaupdate	PPInupdt.exe	Protector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually
Y	PP2000 Real Time Scan	PPVstop.exe	Protector Plus anti-virus software - real time scanner
Y	PP2000 Taskbar Control	PPTbc.exe	Protector Plus anti-virus software - system tray access
N	PP3100b	flatbed.exe	Twain driver for the Visioneer PaperPort 3100b scanner that allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop
U	ppass	Antispy.exe	AntiSpy firewall - "program designed to combat against various types of intrusion and monitoring programs currently in use or presently being developed worldwide"
U	PPControl	PPControl.exe	PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
U	PPK Setup(Server)	SEServe.exe	Programmable Power Key on Sony Vaio laptops. "Using the Programmable Power Key (PPK) button, collect your e-mail automatically with one key stroke. You can also program your PPK to turn on your SuperSlim Notebook at a predetermined time and perform simple tasks - completely unattended"
U	PPMemCheck	ppmemcheck.exe	PPMemCheck - "extends PestPatrol's power so that the most dangerous Pests -- those that are about to execute -- are found, terminated, and cleaned from a user's system"
N	PProTray	pprotray.exe	Part of the power professional program. Loads the System Tray control
N	pptd40nt	pptd40nt.exe	"PaperPort" software associated with scanners
U	PPUpdate	ppupdater.exe	PPUpdater - "is the update program that ships with PestPatrol. It is able to update licensed and evaluation versions, and presents a visual display of what it is doing". Run manually unless you think you'll forget to check for updates on a regular basis
N	PPWWebCap	PPWebCap.exe	"PaperPort" software associated with scanners
X	pqhelper	pqhelper.exe	Searchcentrix hijacker
U	PractiSearch	PSearch.exe	PractiSearch web search software
U	Praize Messenger	itLoad.exe	Praize IM Christian chat instant messenger
U	Prayer	PTW.EXE	Islamic Adhan program (call fpr daily prayers)
?	PreAnnotate	PreAnntt.exe	Genius Wizard Pen Tablet driver related. Is it required?
N	Precision Time Clock Checker	PrecisionTime.exe	Precision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
X	precpop2	starter.exe	PrecisionPop adware
Y	Preload	Preload.exe	Millenium Multi-Function Keyboard driver
?	PreloadApp	hphprld.exe	HP Printer driver related?
X	Premeter	nrpr.exe prmt.exe	NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
N	Price Patrol	neo.exe	Price Patrol by Half.com - internet shopping companion for finding the best on-line prices
?	PrimaLauncher	Launcher.exe	Associated with PrimaScan scanners. Is it required?
U	Primax 3D Mouse	3dmoused.exe	Enables the scroll button on the Primax 3-D Scroll mouse
?	Primsta	Primsta.exe	Linksys Wireless CompactFlash Card driver related. Is it required?
N	Print Master Event Reminder	PMremind.exe	Print Master Gold - calander feature that pops up reminders, such as birthdays
N	Print Screen Deluxe	psdeluxe.exe	Utility allows "Print Scrn" or "Print Screen" key to capture, print or save the current window
X	print sharing	start.bat	Added as a result of the ZCREW VIRUS!
X	print sharing	hidden32.exe (path) explorer.exe	Added as a result of the ZCREW.B VIRUS! Note - this is not the valid Windows Explorer (explorer.exe)
X	Print Spooler	Spoolsv.exe	Added as a result of the CIADOOR.B VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
X	Print Spooler	spoolsvc32.exe	Added as a result of the SDBOT.BB VIRUS!
X	Printer	Spyassault.exe	Dubious "spyware killer" - see here. To be avoided
?	Printer Update	CFGREG.EXE	Maybe a registration reminder or automatically updates drivers or application software for a printer?
N	Printkey2000	printkey2000.exe	Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
N	printnow	printnow.exe	PrintNow - a utility that primarily allows "Print Srceen" or "Alt+Print Screen" screenshots to be sent directly to a printer
N	PrinTray	Printray.exe	Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
N	PrintScreen	UNWISE.EXE	Gadwin PrintScreen - utility to capture, print or save the current window
N	Printscreen 95	PRT95MIN.EXE	Printscreen 95 - utility to capture, print or save the current window
?	PRISMSTA.EXE	PRISMSTA.EXE	??
N	Privacy Eraser Pro	PrivacyEraser.exe	Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities
U	Privoxy	privoxy.exe	Privoxy - web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk
X	PrizeSurfer	prizesurfer.exe	"PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
X	prmt	prmt.exe	NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
U	Pro PCL Status Monitor	PENGSS.EXE	Xerox printer/fax/copier status monitor (PCL = printer control language)
?	ProArt	ProArt.exe	??
X	procmon	procmon.exe	Added as a result of the BIONET.40A VIRUS!
N	ProDsl	ProDsl.exe	Intel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
X	Profile	Profile.vbs	Added as a result of the WHITEHO or TRAPPY VIRUSES!
N	Profiler	Profiler.exe	Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs
X	Program File	Progmon.exe	Added as a result of the PEEPER VIRUS!
X	Program In Windows	IEXPLORE.EXE	Added as a result of the LOVGATE.F VIRUS! Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) wheras the valid "iexplore.exe" (IE) resides in C:\Program Files
N	Promon.exe	promon.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
X	PromulGate	PgMonitr.exe	Adware based media viewer by The Delfin Project
N	PRONoMgr.exe	PRONoMgr.exe	System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
U	Propel Accelerator	PropelAC.exe	Propel Internet Accelerator
U	ProPort Startup	ProPort.exe	Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving
U	PRPCMonitor	PRPCUI.exe	Intel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%
U	PS2	ps2.exe	Multimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost.
Y	PSDrvCheck	PSDrvCheck.exe	Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
U	PSFree	PSFree.exe	Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N	PSIWin2.3 Connection Server	Psconsv.exe	Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
U	PsMFCard	PsMFCard.exe	Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use
Y	PSNotify	psnotify.exe	Pharos SignUp Vx - "PC reservation and management application that addresses the PC scheduling needs of public libraries and higher education labs and libraries"
?	PsPCCard	PsPCCard.EXE	Found on a Toshiba laptop?. Any ideas?
U	PspContr	pspcontr.exe	Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
U	PsSound	PsSound.exe	On a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay
?	PSTORES	PSTORES.EXE	Part of Windows Services Protected Storage?
N	ptfb	ptfb.exe	Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
N	Ptsnoop	Ptsnoop.exe	These descriptions I've come across - all valid as far as I can see :- (1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it (2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info (3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed) Note: If using AOL and you disable this you may lose your connection or lock up (4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists (5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems (6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows"
U	pttrun	pttrun.exe	Transmeta Crusoe processor related. Reduces application launch times and makes the computer "more responsive"
N	PtUDFApp	PtUDFApp.exe	Sony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start -> Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar
U	Purgative	PURGATIVE100.EXE	AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack
N	Push Client	pull.exe	Client software from Interwise that MS use for their webcasts
N	Push The Freakin' Button	ptfb.exe	Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
N	PUSH6599	PUSH6599.EXE	Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software
X	PutA!!	PutA!!.exe	Added as a result of the OPASERV.L VIRUS!
X	PutAS!	PutA!!.com	Added as a result of the OPASERV.Z VIRUS!
X	putil	<filename>	Added as a result of the LDPINCH VIRUS!
N	PVR	PVR.exe	Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card
X	Pwr32ctr	Pwr32ctr.exe	Added as a result of the GEMA VIRUS!
X	Pwr32ctrl	Pwr32ctrl.exe	Added as a result of the GEMA VIRUS!
X	Pwr32mgt	Pwr32mgt.exe	Added as a result of the GEMA VIRUS!
Y	Pwrmonit	Rundll32 PwrMonit.dll	IBM's proprietary 'battery maximiser' and power monitoring software for laptops
X	Pwroff	Pwroff.exe	Added as a result of the GEMA VIRUS!
U	Pwrsave	Pwrsave.exe	Toshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power
?	Pwruplogin	pulogin.exe	??
U	PwrupTweakMe	PUPXPTWK.EXE	"Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows® NT4, 2000 and XP configuration to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want." Boot-up options won't work if disabled
U	PWS Tray	PwsTray.exe	Microsoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start -> Programs
N	p_981116	p_981116.exe	Win32 cabinet self extractor. More info here
N	Q152404	wsript.exe Q152404.VBS	Appears to run Scandisk at bootup on NEC PCs
N	QAGENT	qagent.exe	Quicken program is controlled by a separate utility program called the Quicken Download Manager (also known as Qagent). When Quicken Download Manager option is enabled, background downloading takes advantage of unused bandwidth to download current financial information anytime your computer is connected to the Internet
N	QBCD autorun	autorun.exe	Quick Books CD
X	qbkupdbs	mqbkup.exe	Added as a result of the OPASERV.K VIRUS!
?	qBrowse	qbrowse.exe	??
U	QCTRAY	Qctray.exe	System Tray icon providing access to the "IBM Access Connections" wizard on ThinkPad laptops and also allows to change the network environment. Not the same as QCWLIcon, which is pertinent only to the Wireless LAN
U	QCWLICON	Qcwlicon.exe	Used by IBM Thinkpad laptops with built-in wireless card (802.11). System Tray icon that provides a shortcut to "Wireless Connection Status" and allows to turn WL on and off
N	QD FastAndSafe	QDCSFS.exe	Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
U	QDM or QDMStart	QdmStart.exe	QDM (QDI Desktop Manager) - part of QDI ManageEasy for QDI's series of motherboards for monitoring PSU, temperatures, BIOS information, etc. Only required if you overclock system components and need to monitor temperatures, etc
?	Qdsafe	??	??
?	Qexplo	Qexplo.exe	??
?	QMusic	QMAgent.exe	??
N	QNPlus	QNPlus.exe	Quick Notes Plus by Conceptworld - sticky notes tool
U	Qoeloader	Qoeloader.exe	Qurb 2.0 anti-spam tool for Outlook/Outlook Express. Required when supporting OE but not for Outlook. Shortcut available via Start -> Programs
X	QQ	sendmess.exe	Added as a result of the SEMES VIRUS!
N	QSort2000	QSORT.EXE	Utility that sorts your Start menu and Favourites in alphanumerical order. Not required - at any time you can right-click on these lists and choose "Sort by Name"
U	QT4HPOT	OneTouch.exe	Hewlett Packard One Touch keyboard driver. Required if you use the additional keys
U	QTaskStartup	qtask.exe	Feature of Quicken.com Brokerage to customize and display Desktop Alerts and icon. It is not required for the Quicken Program to run correctly, it is only required for the Desktop Alerts feature
N	QTSTUB.EXE	Qtstub.exe	Part of an old version of the Quick Tax application. It enables Quick Tax Calendar Popup to show tax calendar reminders
N	qttask	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
?	QUBCity	qtp.exe	??
?	Queensla	Queensla.exe	??
U	Quick Controls	Astrotoolbar.exe	Gateway Astro Screen and Sound Controls tray icon
Y	Quick Heal On-Line Protection	Cateye.exe	Quick Heal - virus scanner
Y	Quick Heal Startup Scan	QHSTRT32.EXE	Quick Heal - virus scanner
N	Quick Shelf xx	qushelfxx.exe	Places an icon in the system tray for launching MS Bookshelf. Available via Start -> Programs"xx" represents the version number - ie, 98, 99
Y	Quick Startup	Fquick32.exe	For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
N	Quick View Plus	QVP32.EXE	Quick View Plus from Inso Corporation. Multiple file type viewer. Available via Start -> Programs
N	QuickBooks Delivery Agent	QBDAGENT.EXE	As far QAGENT but for QuickBooks. Can also have the version number in the name
N	Quickbooks Update Agent	qbupdate.exe	Associated with Intuit's Quickbooks but not required. Possibly to do with the payroll update service but you're prompted to check for updates when appropriate whether this is running or not
U	QuickCamPro	QuickCamPro.exe	System Tray for Picture Capture utility that can run unattended. Pictures every 30 seconds for example, auto FTP Upload, etc
X	quicken	quicken.exe Waol.exe Winrar.exe	CoolWebSearch parasite variant. Note! - this is not the file zipping utility also known as WinRAR
N	Quicken Scheduled Updates	bagent.exe	Quicken background downloading module
N	Quicken Startup	QWDLLS.EXE	Quicken option to load DLLs at startup
N	QuickenSEMessage	Qsemsg.exe	Quicken option
N	QuickFinder Scheduler	QFSCHD100.exe QFSched.exe	Used in Corel 2002 & Corel Suite 7 - finds files faster by indexing your files (similar to Microsoft's Find Fast or Fast Search for its Office products)
Y	QuickLaunchEr	QuickLaunchEr.Exe	QuickLaunchEr - allows you to quickly launch programs from an icon in the system tray
N	Quicklink III	QL.EXE	HP fax program and only needs to be in the start-up group if you allow your phone to automatically answer your phone in fax mode, that is, to receive faxes after a certain number of rings. Available via Start -> Programs
N	Quicknote	quicknote.exe	JC&MB Quicknote Virtual Scrapbook
U	QuickPassword	agquickp.exe	Smart card-based authentication and digital signature client software
N	QuickRes	QUICKRES.EXE	Utility to quickly change desktop resolution - left over from Win95 Power Toys. In Win98 and above incorporated via Control Panel -> Display. Not required unless you have to change resolutions on a regular basis
N	quickset	quickset.exe	Dell taskbar icon allowing you to quickly change settings
X	Quicktime Pro 3.0	winuodps.exe	Added as a result of the GAOBOT.BH VIRUS!
N	QuickTime Task	Qttask.exe	System Tray access to Apple's "Quick Time" viewer from version 5 onwards
X	QuickTime Task	qttasks.exe	CoolWebSearch parasite related
N	QuickTime Update Completion x	quicktimeupdatehelper.exe	Different numbers caused by number of launches. So if 3 updates are made separately, 3 would appear (in theory)
U	QuickTV	QuickTV.exe	Infra-red remote control driver for the AVerTV Studio TV tuner/personal video recoder from AVerMedia. Required if you use the remote control
N	QuikShield	qkshield.exe	QuikShield popup blocker - reportedly stealth installed, see here
N	QuikSync	QUIKSYNC.EXE	Used by Iomega drives. Available via Start -> Programs
U	QWS3270 Sessions	sessions.exe	QWS3270 Secure terminal emulation software
X	RA Server	Slave.exe	Added as a result of the RA VIRUS!
X	RabbitWannaHome	rabbit.exe	Added as a result of the MIMAIL.S VIRUS!
U	RadBoot	RadBoot.exe	RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings
U	RAMASST	RAMASST.exe	Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs
U	RAMDef	ramdef.exe	Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. Some users swear by programs such as this but I suggest you read this article and make up your own mind
U	RamIdle	ramidle.exe	RAM Idle - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by  freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." Some users swear by programs such as this but I suggest you read this article and make up your own mind
U	RAMpage	RAMpage.exe	Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source
Y	RapApp	RAPAPP.EXE	Application protection component of BlackICE PC Protection (was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch
X	RapidBlaster	rb32.exe	Homepage hijacker (adult content) - see this newsgroup thread
Y	Raptor Mobile	vpnservices.exe	Symantec VPN Client used to connect to corporate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking
Y	RAV8Tray	ravtray8.exe	RAV anti-virus related
X	RAVEN_VLZS.EXE	RAVEN_VLZS.EXE	Another eAcceleration program - spyware. Read their privacy statement here
X	RavTime	Mstray.exe	Added as a result of the WUKILL.A VIRUS!
X	RavTimeXP	<worm filename>	Added as a result of the WULLIK.B VIRUS!
X	RavTimXP	<worm filename>	Added as a result of the WULLIK.B VIRUS!
?	rav_temp.exe	rav_temp.exe	??
N	Ray Process Killer	Prkill.exe	Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead
X	rb32 lptt01 or rb32 ml097e	rb32.exe	Variant of the RapidBlaster parasite (in a "RapidBlaster" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	rbenh ml***e	rbenh.exe	Variant of the RapidBlaster parasite (in a "RBEnhance" folder in Program Files) where *** represents random digits. It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	RCSync	RCSync.exe	PrizeSurfer related. "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
X	RDLL	RunDll16.exe	Added as a result of the SDBOT.F VIRUS!
X	rdvs	<filename.exe>	Added as a result of the ULTIMAX VIRUS! <filename.exe> is the worm filename created
X	Real player updater	realupd.exe	Added as a result of the PARLAY VIRUS!
X	Real-Tens	Real-Tens.exe	DownloadWare based advetising spyware
N	RealDownload	RealPlay.exe	Download manager. Available via Start -> Programs
X	RealDownload Express	npnzdad.exe	Advertising spyware
N	Reality Fusion GameCam SE	RFTRay.exe	System Tray access for Logitech's Reality Fusion GameCam. For more details see here. Available via Start -> Programs
N	RealJukeboxSystray	tsystray.exe	System Tray icon for RealJukebox
X	realplay lptt01 or realplay ml097e	realplay.exe	Variant of the RapidBlaster parasite (in a "RealPlay" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not RealPlayer which can have the same executable name
?	Realpopup	Realpopup.exe	RealPopup - "Replaces old winpopup with a full featured freeware tool which remains stable and simple as its predecessor"
N	Realsched	realsched.exe	Application Scheduler installed along with RealOne Player. Runs independently of RealOne Player, to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. If it can't be disabled try deleting or renaming realsched.exe and then delete the entry in the registry
?	Realtime Audio Engine	mmrtkrnl.exe	??
Y	Realtime Monitor	realmon.exe	Realtime scanner part of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates
?	RealTimeUpdate	RealTimeUpdate.exe	Product description in properties is "InternetExplorerCommunicationAgent Module" ?
N	RealTray	RealPlay.exe	System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling SmartCenter via Preferences
X	RealUpdater	realupd.exe	Added as a result of the PARLAY VIRUS!
N	Reboot	Reboot.exe	MS-DOS/Win3.1 utility use to clean boot a system. Sometimes installed by default from some driver CDs for motherboards
Y	Recguard	recguard.exe	On HP computers, Recguard prevents the deletion or corruption of the WinXP Recovery Partition. Without it enabled, it is possible to knock that completely out and force the customer to send the PC back to HP for a re-image, possibly at the customer's expense
N	Reclip	reclip.exe	Reclip Popup Clipboard manager
N	Recover	N/A	Added during the installation of Comcast High Speed Internet software. During installation the system reboots and if the disk is removed a screen appears asking for the disk to be re-inserted to complete installation. Not required once installion is complete
N	RecShe	RecSche.exe	Recording scheduler for WatchTV Capture Card (TV Tuner card)
N	Red Flag	redflag.exe	PMS prediction program with modes for guys and girls - no longer available
X	Red Swoosh EDN Client	RSEDNClient.exe	Red Swoosh - mechanism used by web sites to allow you to download files from those sites quicker and more efficiently. Note from the license agreement they automatically update the software and share non-personally identifiable information with others in the network
X	redirect	redirect*.exe	Dotcomtoolbar/Linksummary hijacker installer - where * is a random digit
N	Redline Taskbar	taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
U	Referee	referee.exe	MediaComm's monitor for file association changes. Stop rogue programs from screwing your settings either on installation or whenever they run
N	Refresh	Refresh.exe	(Iomega) Refresh - loads the Iomega desktop icons at startup
X	Reg	Reg.hta	Homepage hi-jacker. Removal instructions here
X	Reg32	Reg32.exe	Hijacker - redirecting to only-virgins.com
X	Regcheck	~CAB001.EXE	Added as a result of the CYBERSPY VIRUS!
X	RegCleaner	SYSio32.exe	Added as a result of an unidentified virus VIRUS!. Note - do not confuse this with the popular RegCleaner registry cleaner freeware
X	RegCompres	Regcpm32.exe	Added as a result of the POLDO.B VIRUS!
X	RegCompres	REGCPM32.EXE	Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), atisrc2 (windfind.exe) and mmxrun (msosa.exe), otherwise they return
X	regedit	regedit.exe	Added as a result of the BRID.A VIRUS! Note - resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). The valid "regedit.exe" resides in C:\Windows (Win9x/Me/XP) or C:\Winnt (WinNT/2K)
X	REGEDIT	Regsrv32.com	Added as a result of the SOUTHGHOST VIRUS!
?	reginfo32	reginfo32.exe	??
N	Register MediaRing Talk	register.exe	If you don't want to register MediaRing and be reminded about it every bootup disable it
U	RegisterDropHandler	REGIST~1.EXE	Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation
N	Registration-Studio 8	RegTool.exe	Registration for Pinnacle Studio Version 8 home video software from Pinnacle Systems
X	Registry	wscript.exe	Added as a result of the VBSWG VIRUS!
X	Registry Loader	regloadr.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Registry Loader	winhlpp32.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Registry Scanner	regscanr.exe	Added as a result of the OPTIX LITE FIREWALL BYPASS VIRUS!
X	Registry Services	Registry.exe	Added as a result of the DOWNLOADER.CILE VIRUS!
X	RegistryChk	winbackup.exe	Added as a result of the MERTIAN VIRUS!
Y	RegProt	Regprot.exe	RegistryProt from Diamond Computer Systems - protects the system registry against changes
Y	Regrun2	WatchDog.exe	Greatis Software's RegRun 3 Security Suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, viruses, etc
N	RegShave	regshave.exe	Part of the USB driver for your Fuji digital cameras - used when uninstalling the USB drivers, erasing all entries from the registry. Only required BEFORE attempting to uninstall the Fuji software or the uninstall may not work correctly
X	regsrv	regsrv.exe	Added as a result of the OPTIXPRO.11 VIRUS!
X	regsvc32	regsvc32.exe	Homepage hijacker that changes your homepage to an adult content site
U	REGSVR32	regsvr32.exe ctasio.dll	ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
?	regtmlp	N/A	??
U	RegTweak	RegTwk.exe	Rage3d Tweak - ATI Radeon tweaker which allows access to registry tweak options, custom display modes, refresh rates and overclocking all through an easy to use interface
X	RegVer	REGVER.EXE	Added as a result of the LATINUS.16 VIRUS!
X	RegWrite	csrss.exe	Added as a result of the SOKACAPS VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
U	Regx10EXE	atix10.exe	ATI Remote Wonder - PC wireless remote control
X	Reg_WFT	Regsysw.com	Added as a result of the WILSEF VIRUS!
U	ReleaseRAM	RRAM.exe	"Release RAM allows your computer to run faster and uses your computer's RAM more efficiently". Some users swear by programs such as this but I suggest you read this article and make up your own mind
N	RemHelp	Remhelp.exe	BT Voyager ADSL Modem Help related
N	Reminder	reminder.exe	From MS Money. Reminds you of your bills
?	Reminder	Remind_XP.exe	Probably a registration reminder - but what for? Found in a C:\Windows\Creator directory
N	Reminder-cpqXXXXX	remind32.exe	Compaq printer Registration
N	Reminder-hpcXXXXX	remind32.exe	HP CD-Writer Registration
N	Reminder-ranXXXXX	remind32.exe	Registration reminder widget for Rand Mcnally maps
N	reminder-ScanSoft Product Registration	remind32.exe	Registration reminder for ScanSoft products such as PaperPort
U	RemindMe	RemindMe.exe	Remind-Me - calendar software
?	Remind_XP	Remind_XP.exe	Probably a registration reminder - but what for? Found in a C:\Windows\Creator directory
U	Remote Access	rnaapp.exe	Dial-up networking application - not normally found in the startup locations. It runs when you connect to the net via this method (ie, analogue 56K modem) and terminates after the connection is closed
X	Remote Access Slave	Synchost.exe	Added as a result of the RIPJAC VIRUS!
N	Remote Control	Rc.exe	Hinet Hi-Five ISP software
U	Remote Desktop Computing	marspc.exe	Marspc Remote Desktop Computing
U	Remote Management Agent	zenrc32.exe	Part of Novell's ZENworks - "Complete End-to-End Directory-enabled Network Management". Installed on a managed workstation fo an administrator to remotely manage the workstation. Required if the PC is a managed workstation
U	remote master	remote master.exe	Required if you want your ASUS Remote control to work at all. Available via Start -> Programs
X	Remote Procedure Call Locator	RUNDLL32.EXE reg678.dll ondll_reg	Added as a result of the LOVGATE.F VIRUS!
U	RemoteCenter	RcMan.exe	Remote control for Creative MediaSource - plays back music in DVD-Audio, MP3, WMA, WAV and other media formats
U	RemoteControl	rmctrl.exe	Remote Control background application for CyberLink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one
N	Remote_Agent	RemoteAgent.exe	Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings, you will need this, otherwise can be disabled. Available via Start -> Programs
N	Removecpl	Removecpl.exe	Related to a Belkin 54Mbps Wireless Utility Control Panel applet
X	Removed.exe	Removed.exe	GatorCheat - adware downloader
?	RemStart	remstart.exe	Part of McAfee's Remote Desktop 32 Agent application. What does it do and is it required?
?	RenolB	ib.exe	??
U	RepliGo Assistant	RepliGoMon.exe	Cerience RepliGo software - "any document you have on your PC can be transferred to your mobile device"
N	Resolution Assistant	matcli.exe	Dell Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Resolution Assistant is required to run with the Help and Support program. If you uncheck Resolution Assistant and and then run Help and Support it will add another Resolution Assistant in the startup menu. If you remove the Resolution Assistant in the add/remove program some help menus in help and support will not be available. You decide
N	Resource Meter	rsrcmtr.exe	Windows Resource Meter. Available via Start -> Programs. You may want this enabled if your PC is suffering from crashes and want to know potential causes
?	Restart Watch	Watch.exe	Associated with an Eicon Networks Diva ISDN or ADSL modem. What does it do and is it required?
?	Restart_VS	Viewsonic.exe	Could be a left-over from the installation of a Viewsonic flat panel display
Y	RestoreIT!	VBPTASK.EXE	RestoreIT! from FarStone "allows you to recover instantly your files, system configuration, and even your operating system, to any point in time prior to the data loss or system failure."
X	restory	restory.exe	Added as a result of the RETSAM VIRUS!
U	Resume Copy	copyfstq.exe	Part of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut down. Not required if your not using the program or don't care about that function
U	ResumeFixClocks	resumefix.exe	Part of the RadeonTweaker utility for overclocking ATI Radeon graphics cards
U	RetrieverScheduler	retrieverscheduler.exe	80-20 Retriever from 80-20 - "80-20 Retriever is a powerful personal search tool that encompasses email folders, archived email, and local or network file systems, giving users one point of fast, accurate search for all personal information". Real-time scheduler - shortcut available
N	RexSyMon	rexsymon.exe	Intellisync for REX sychronization software for Xircom REX MicroPDAs for sharing information between the PDA and PC
X	RFTray	RFTRay.exe	Reality Fusion GameCam Video Interaction Technology Software that comes with the Logitech QuickCam PC video camera and other USB cameras. It's only an icon that appears on your System Tray. Available via Start -> Programs
?	rfwydg	rfwydg.exe	??
N	RFX_auto_upgrade	rundll32.exe npvpg005.dll	A browser plugin called the RichFX player. Here is a link to download RichFX's solution to removing the auto upgrade
U	RH	rh32.exe	EuroFonts - adds Euro symbols to pre-Euro computers
U	RhinoBlocker	RhinoBlocker.exe	RhinoBlocker - pop-up stopper
N	RHSI SHS	SHS.exe	Rogers Hi-Speed Internet software. "Should you ever lose access to your Rogers Hi-Speed Internet connection or e-mail, the Self-Healing Software (SHS.exe) will automatically repair your settings to get you up and running in a flash"
U	Ring Central Fax	rcenterrll.exe	Only needed if you want a PC to answer faxes automatically
X	rIOphosIs	rIOPHosIs.vBS	Added as a result of the RIOSYS VIRUS!
U	RivaTuner or RivaTunerStartupDaemon	RivaTuner.exe	RivaTuner for tweaking nVidia graphics cards. Required if you make any changes
?	RjLyraInstaller	setup.exe	??
U	rmctrl	rmctrl.exe	Remote Control background application for CyberLink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one
N	rmmon	mprmmon.exe	Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card
?	RMremote	RmRemote.exe	Remote control driver for REALmagic Xcard. Is it required?
U	RNBOStart	sentstrt.exe	Program used to initialise the VxD virtual driver for Sentinel drivers associated with Rainbow H/W keys that plug-in to the parallel port. These are usually supplied with workplace design tools and restrict the use of the software only to the machine to which the H/W key is connected. Required if you have such tools
?	rndll2	rndll2.exe	May be related to the DivX program as a *.dat file in the same directory had "DivXPro505Bundle.exe" mentioned within?
X	rngmf	<path to trojan>	Added as a result of the RANKY.C VIRUS!
N	RoboForm	RoboTaskBarIcon.exe	Roboform - password manager and web form filler. Will work without this startup entry, as the "active" component is an integrated Internet Explorer browser plugin
N	RoboFormWatcher	RoboFormWatcher.exe	AI Roboform from Siber Systems. Automatically completes web forms. Available via Start -> Programs
U	Rocket.Time	RocketTime.exe	Time synchronization software from Rocket Software
?	roketpipe	rpclient.exe	??
?	ROUTD	ROUTD.exe	??
?	Roxio Engine	MSMNGR32.EXE	Not believed to be a valid Roxio program - more likely a variant on the WOMANIZ.A VIRUS!
N	RoxioAudioCentral	RxMon.exe	Part of Roxio EasyCD Creator 6.0 - places the Roxio AudioCentral icon in you system tray. "Includes a player, media manager, ripper, tag and sound editor - integrated in a single application". Not required for Roxio to work properly.
N	RoxioDragToDisc	DrgToDsc.exe	Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly
Y	RoxioEngineUtility	EngUtil.exe	Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking
U	RP32	rp32.exe	ControlIT (was Remotely Possible) from Enterprise International for remote control and access to Win9x/NT systems.
X	RPC Patcher	<path to worm>	Added as a result of the BOLGI VIRUS!
Y	RPCSS.exe	rpcss.exe	Remote Procedure Call. Required by windows for programs to communicate with each other on networks/different machines. Originally for NT only but now installed with Win98/98se. Under Win98/98se, a program may need it to communicate with other components of itself. You could delete the program but if any abnormalities occur soon after then reinstall. Under NT, deleting this critical system component will disable the OS. For a more detailed explanation see here
X	RRMedic	rrmedic.exe	Troubleshooting utility for the RoadRunner cable internet service. Not required and you are advised to completely uninstall it. Provides a lot of false alarms and gets a lot of people panicking about there internet connection
U	rscmpt	rscmpt.exe	Required on the GeFroce 64 meg MX card to show the full 64 meg memory and appears to be a software memory emulator running under the Win2K - see here. High CPU useage results - hence the U status
U	rsMenu	rsMenu.exe	Synchronizes a Casio PDA with MS Outlook
?	RSRCMTZ	RSRCMTZ.exe	??
X	RSS	rundll32 RSSToolbar.dll, DllRunMain	"Related Sites" toolbar - SearchAndClick hijacker variant
N	RtlMon.exe	RtlMon.exe	Monitor for RealTek network card
X	rtos	rtos.exe	IRC trojan
?	RTStartMute	N/A	??
Y	rtvscn95	RTVSCN95.EXE	Real-time virus scanner component of Norton Anti-Virus Corporate Edition
U	RuLaunch	RuLaunch.exe	Instant Updater for McAfee's VirusScan, Internet Security, Quick Clean, Uninstaller and Firewall products. In the case of VirusScan leave it enabled unless you update manually on a regular basis
X	Run MSupdt32	wscript MSupdt32.vbs	Added as a result of the CASER VIRUS!
U	Run POPFile in background	perl.exe wperl.exe	POPFile - E-mail spam blocker
U	Run StartupMonitor	StartupMonitor.exe	Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
X	run32dll	WINClock.exe	Unidentified mIRC VIRUS!
X	run32dll	task32.exe	Unidentified mIRC VIRUS!
X	Run32dll	ocxdll.exe	Unidentified mIRC VIRUS!
N	run=	cmmpu.exe	MIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as part of the software for a Guillemot Maxi Muse sound card (PCI)
N	run=	hpfsched	HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature
N	run=	lxdboxcp.exe	Lexmark DOS-Printing Control Program for the Lexmark 2050. Only required if you need to print from DOS
N	run=	pcfix2k.exe	pcfix2k splash screen
X	run=	ptlseq.cpl	PhoenixNet BIOS adware. See here
U	run=	ramsys.exe	Advanced Startup Manager from Rays Lab
?	run=	wallflip.exe	Desktop wallpaper changer?
X	run=	svcinit.exe	CoolWebSearch parasite related
X	run=	fntldr.exe	CoolWebSearch parasite related
Y	run=	smsrun16.exe	Microsoft Systems Management Server (SMS) related - program that reads SMSRUN16.INI on clients running Win 3.1, Windows for Workgroups, Win95, or OS/2 to create program groups on the client and then launch SMS client programs
U	RunAlert	AService.exe	MSI MOtherboard PC Alert III - MSI motherboard monitoring software. Only required if you "overclock" your system
N	runAP	runAP.exe	Not required but what is it?
X	Runapp32	Runapp32.exe	Added as a result of the NEODURK VIRUS!
X	Rund1l32	Winfi1e32.exe	Added as a result of the MERTIAN VIRUS!
X	rundl332	math.exe ...pluged.exe	Added as a result of the DOOMJUICE VIRUS!
X	rundli32	rundli32.exe	Added as a result of the LADE VIRUS!
X	RunDLL	rundll32.exe bridge.dll, Load	Flingstone.com browser hijacker
X	rundll###	die.exe and either ttg.exe or secure.exe or mdll.exe or secure.bat	Added as a result of the SUMTAX VIRUS! where ### is 134, 569, 777 or 946
X	Rundll16	Rundll16.exe	Added as a result of any number of VIRUSES!
X	Rundll32	Rundll32.exe	Added as a result of the DVLDR VIRUS! Note - this is not the valid "Rundll32.exe" as it's in the Windows\Fonts directory
N	RUNDLL32	RUNDLL32.EXE NvQtwk, NvCplDaemon	This loads the System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again
N	RunDLL32	RunDLL32.exe NvMCTray.dll, NvTaskbarInit	System Tray icon used to change display settings for nVidia based graphics cards. Unnecessary since you can easily configure these settings the way you want them in the Display Properties
U	rundll32	Rundll32.exe Wf2kcpl.dll DllLoadDefaultSettings	Loads default settings for Leadtek Winfast graphics cards
X	RunDLL32	winupdate.exe	Unidentified VIRUS! - possibly a BMBOT variant
X	Rundll32	Windows.exe	Added as a result of the QQPASS.E VIRUS!
X	Rundll32	Rundll32.exe ptipbm.dll, SetWriteBack	Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. If used is it required?
X	rundll32	<path_to_worm>	Added as a result of the AUTEX VIRUS!
?	rundll32	rundll32.exe ptipbmf.dll, SetWriteCacheMode	Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. May be necessary in order to maintain preferences applied to the RAID array connected to the Promise controller
X	rundll32	rundll32.exe	Added as a result of the SANKER VIRUS! Note that the valid "rundll32.exe" resides in C:\Windows\System32 wheras this version resides in C:\Windows
X	rundll32	csrss.exe	Added as a result of the GUTTA VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
?	rundll32	RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent	Used for a bluetooth adapter?
N	Rundll32 cmicnfg	Rundll32 cmicnfg.cpl, CMICtrlWnd	System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel
X	Rundll32.exe	Proyecto1.exe Root.exe	Added as a result of the GRUEL VIRUS!
X	Rundll32_7	rundll32.exe MSIEFR40.DLL, DllRunServer	BrowserAid "Featured Results" hijacker variant
X	Rundll32_8	rundll32.exe inetp60.dll, DllRunServer	BrowserAid parasite variant
X	rundll64	<path_to_worm>	Added as a result of the AUTEX VIRUS!
X	Rundllsystem32	Rundllsystem32.exe	Added as a result of the NETDEVIL.B VIRUS!
U	RunOnce	RUNONCE.EXE	Part of MS Data Access Components - only required if you use these
X	RunProg	Server.exe	Added as a result of the OPTIX.04.A VIRUS!
X	RunProg	wini.exe	Added as a result of the OPTIX.04.D VIRUS!
U	RunSysd32	RunSysd32.exe	DesktopShield2000 by Stéphane Groleau. Locks the desktop at bootup so that users cannot bypass the Windows screensaver password. Only essential if using the program and is an optional setting. It can be disabled from within
X	RunWindowsUpdate	uptodate.exe	BrowserAid/BrowserPal foistware
X	Run[0]	syscnfg.exe	Added as the result of an unidentified VIRUS!. "syscnfg.exe" is found in the C:\windows\fonts (or C:\winnt\fonts) directory where no *.exe files should reside
X	Run_cd	Run_cd.exe	Added as a result of the GHOST.23 VIRUS!
?	RUSBHOLoader	rundll32.exe RUSBHOLoader.dll, AutoRegister	??
X	rvde	N/A	Related to li-speed****
X	RVP	bpc.exe	Spyware included with the latest version of Grokster. Also see here
N	RxMon	rxmon9x.exe	Dell Resolution Assistant
Y	r_server	r_server.exe	Radmin - remote admistrator server
?	S24EvMon	S24EvMon.exe	Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?
?	S3apphk	S3apphk.exe	S3 graphics related?
N	S3TRAY	S3Tray.exe	S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display
?	s3tray2	s3tray2.exe	Same as above?
U	S4F	S4F.exe	S4F internet filtering software
X	s4helper	s4helper.exe	Searchcentrix hijacker
?	SA	Sa3.exe	Logitech QuickCam driver. Is it required?
?	SA Service	SAservice.exe	Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?
N	Sa3dsrv	Sa3dsrv.exe	3D sound extension for Windows
N	Sabreserver	SABSERV.EXE	Airline reservation software from Sabre. Available via Start -> Programs
N	SAClient	RegCon.exe	AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging
N	SafeInstall.exe	SAFEIN~1.EXE	Monitors a download and ensures an newer version of a file isn't replaced by an older one
N	SafeOFF	SafeOff.exe	Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation
X	SafeSearch	safesearch.exe	AutoSearch parasite variant
X	SafeSurfingUpdate	SSUpdate.exe	DyFuCa/MoneyTree parasite variant
U	Safeworld	Freedom.exe	SafeWorld Internet Security
N	SAgent2ExePath	SAgent2.exe	Seiko Epson printer status agent. Disable if printer is not used often
X	sagnt	sagnt.exe	Adware web downloader
X	SAHagent	Sahagent.exe	ShopAtHomeSelect parasite
X	SAHBundle	bundle.exe	ShopAtHomeSelect parasite related
U	SAIMON	SaiMon.exe	Saitek joystick driver
?	SaiSmart	SaiSmart.exe	"Smart Button Special Sauce" - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button. What does it do and is it required?
U	SaitekAutoConfigure	saicnfig.exe	Configuration for Saitek game controllers
U	SAMcal	SAMcal.exe	SamCal - calendar/reminder program
N	SandIcon	SandIcon.exe	SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources
U	SAUpdate	SAUpdate.exe	Big Brother from Quest Software. System and network monitor
Y	SAVAgent	SAVAgent.exe	Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users
X	Save	Save.exe	Rebranded version of SaveNow advertising spyware
X	Savenow	SaveNow.exe	Advertising spyware. Installed as part of the Kazaa Media Desktop bundle for example
X	Savenow	savenow.exe	Added as a result of the SPREDA.B VIRUS!
U	Say The Time 5.0	SAYTIME.EXE	This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly
N	SB Audigy 2 Startup Menu	/l:eng	Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
X	SB Watchdog	SBWatchdog.exe	Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank. See here for more information
U	SBDrvDet	SBDrv.exe	Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one
X	SBHC	sbhc.exe	SuperBar parasite - uninstall available here
N	SBMX	sbmx.exe	SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)
N	sc	scrubxp.exe	ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc
U	sc	sc.exe	Watchdog 2.0 Software - monitoring program
?	sc23exec	sc23exec.exe	Possibly related to a digital camera
X	scan	mscman.exe	Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
?	Scan Detector	Pmxdetect.exe	Associated with PrimaScan scanners. Is it required?
?	Scan Wizard	button.exe	Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required?
X	ScanDisk	ScanDisk.exe	Added as a result of the GANDA.A VIRUS! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker
?	ScanFile	??	??
?	ScanInicio	Inicio.exe	Part of Panda Anti-Virus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active
N	Scanner Detector	SDetect.exe	ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
X	Scanreg	<filename>	Added as a result of the QQPASS.E VIRUS!
X	ScanRegistry	nsrvnt.exe	Added as a result of the NERTE VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe
X	ScanRegistry	scanregv.exe	Added as a result of the MASTERLOCK VIRUS!. Not to be confused with the real ScanRegistry below - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe
Y	ScanRegistry	Scanregw.exe	Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
X	ScanRegistry	Scanregw.exe	Added as a result of the STATOR VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt). Runs from the registry RunServices key as opposed to the Run key
X	ScanRegistry	Scanregw.exe	Added as a result of the GWGHOST VIRUS!. Not to be confused with the real ScanRegistry above - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%\System (where %windir% is the Windows directory - C:\Windows or C:\Winnt)
N	SCardSvr	scardsvr.exe	Related to SmartCard readers and sometimes uses lots of system resources
X	SCardSvr	SCardSvr32.Exe	Added as a result of the MOFEI.B VIRUS!
X	scheck	scheck**.exe	Added as a result of the KETCH VIRUS! where ** represents a number
N	Scheduled Maintenance	Scheduled_Maintenance.exe	Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs
X	Scheduling Agent	Scheduler.exe	Added as a result of the SUBWOOFER VIRUS! Note - this is not the real MS Scheduling agent as the executable is incorrect
X	SchedulingAgant	MMTASK.EXE	Added as a result of the YAB.A VIRUS! Not the valid MusicMatch Jukebox which has the same filename
U	SchedulingAgent	mstask.exe mstinit.exe	MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
U	Schmaili	Schmaili.exe	Schmaili - insert animated smilies into your e-mail
Y	SCHWIZEX	SCHWIZEX.EXE	Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
N	Scotia OnLine Recovery or Scotia OnLine Security v*.* Recovery	etdirrcv.exe	Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process
X	Scr	scr.scr	Added as a result of the OPASERV.T VIRUS!
N	ScrapPad	Scrappad.exe	ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper
U	Screen Guard	launch.exe	Part of Access Denied security and privacy software
U	Screen Guard Message Scan	sgms.exe	Part of Access Denied security and privacy software
N	Screen Saver Control	FSScrCtl.exe	Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon
?	screxe	scruser2k.exe	??
?	script	script.bat	Maybe associated with DOS on a Win9x machine
Y	ScriptBlocking	SBServ.exe	Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information
Y	ScriptSentry	Scriptsentry.exe	Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly
U	Scroll-In-Mouse V2.0	SCROLL.EXE	Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features
X	ScrSvr	ScrSvr.exe	Added as a result of the OPASOFT.A VIRUS!
X	ScrSvr	ScrSvr.exe	Added as a result of the OPASERV VIRUS!
X	ScrSvrOld	<worm filename>	Added as a result of the OPASERV VIRUS!
Y	Scsi	Scsi.exe	SCSI Miniport driver
U	SDaemon	sdaemon.exe	PC Security from Tropical Software. 'PC Security™ 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'
N	SDetect	SDetect.exe	ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button
?	Search Hook	srchhook.exe	??
X	Search-Exe	SE.exe	Hijacker - redirecting to Search-exe.com
X	Search.vbs		Hijacker
X	SearchEnhancement	scbar.exe	IE search hijacker
X	SearchSquire33	SearchUpdate33.exe	SearchSquire parasite
U	SecondChance	sctray.exe	Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash
X	Secret-Crush	start.exe	Hijacker that may reset your browser's home page and/or search settings to point to undesired sites
U	Secsys	Secsys.exe	Key Interceptor - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
N	SecureCleanIEClean	SCIEClean.exe	SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches
U	SecureItPro	Secureitpro470p.exe	SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop
X	SecureLogin	Mslg32.exe	Added as a result of the REDZED VIRUS!
Y	SECWIZ98	SECWIZ98.EXE	Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here
?	SelfHostUtil	slefhost.exe	??
U	SeMS	SeMS.exe	PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone
X	SENTRY	SENTRY.exe	From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it
X	Serials	serials.exe	Any one of a variety of worms and trojans
Y	serrdctl.exe	serrdctl.exe	"Shared Modem Service Client Event Viewer" - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems
N	Serv-U	serv-u32.exe	FTP server
X	Serv-U	wssdsu.exe	Added as a result of the MANIFEST VIRUS!
X	server	server.exe	Added as a result of the DELTAD.A VIRUS!
X	SERVER.EXE	SERVER.EXE	Added as a result of the BUSHTRO122 or SMOKODOOR VIRUSES!
X	serverex	Server.txt.vbs	Added as a result of the DELTAD.A VIRUS!
U	Service	service.exe	Added as a result of the ALADINZ.H VIRUS!
X	Service	services.exe	Added as the result of the NETSKY or NETSKY.B VIRUSES! Note - not to be confused with the valid Windows "services.exe" which resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K) or C:\Windows\System32 (WinXP) as this resides in C:\Windows or C:\Winnt
N	Service Connection	sccenter.exe bwtray.exe	For Compaq PC's. Part of Backweb
X	Service Controller	Csrrs.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Service Host	<filename>.exe	Added as a result of the TORVEL.B VIRUS!
X	Service Host	spoolos.exe	Added as a result of the TORVEL VIRUS!
N	Service Manager	sqlmangr.exe	SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs
X	Service Process	SVCHOST.EXE	Added as a result of the DARKER VIRUS! Note - not the valid svchost.exe as described here. Located in %Windir% not %Sysdir%
X	Service.exe	Service.exe	"servedby.advertising" popup generator
U	ServiceConfig	ispbeg.exe	Comcast Transition Wizard. On June 30th, 2003 it will migrate E-mail and web pages from AT&T Broadband Internet to Comcast High-Speed Internet. Until then it will run at startup and then terminate - hence the U recommendation
X	services	start.bat	Added as a result of the ZCREW VIRUS!
X	Services	<path to trojan>	Added as a result of the RANCK or RANCK.B or METEORSHELL VIRUSES!
X	Services	back32.exe ...service.exe	Added as a result of an unidentified VIRUS! Back32.exe is the baddie whose purpose is to HIDE the MIRC32 server in service.exe
X	Services Host	Scchost.exe	Added as a result of the DONK VIRUS! Note - this is not the valid svchost.exe as described here
X	Services.EXE	services.exe	Added as a result of the KAZPING VIRUS! Note - this is not the valid Windows Service Controller (services.exe) process
X	Services004	<worm filename>	Added as a result of the BUGBROS VIRUS!
?	ServUTrayIcon	ServUTray.exe	System Tray icon for Serv-U FTP server. Is it required?
?	SetDefaultMIDI	MIDIDef.exe	Related to a Soundblaster Audigy soundcards. What does it do and is it required?
?	setdefprt	setdefprt.exe	Related to a Brother printer?
U	SetecCertUtil	Certutil.exe	Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered through Internet, mobile handsets and digital TV
X	setFTPBack	createsw.exe	Added as a result of the FTP_BMAIL VIRUS!
N	SetHook	SetHook.exe	Fellowes Neato CD label design software. "Launch NEATO's MediaFACE II label making software directly from the productname toolbar"
N	seticlient or SETI@home	SETI@home.exe	SETI@home is a scientific experiment that uses Internet-connected computers in the Search for Extraterrestrial Intelligence (SETI). You can participate by running a free program that downloads and analyzes radio telescope data
N	SetIcon	SetIcon.exe	Installed by a 6-in-1 (4 Media Card slots, a floppy drive and a USB connection) device. Constantly updates the icons for the four Media Card slots that it has and is a resource hog
N	SetiQueue	Setiqu~1.exe	Provides work unit buffering for Seti@Home clients - see here for more details
N	SetiSpy	SetiSpy.exe	From the site - 'SETI Spy is a little program I wrote to "spy" on the progress and performance of the SETI@home client. I call it a "spy" because I tried to make it as unobtrusive as possible'
X	Setting	sysweb.exe	Added as a result of the SDBOT.GEN VIRUS!
N	setup	hphprld.exe ....setup.exe	HP DeskJet Setup - printers function normally without it
N	SetupICWDesktop	icwconn1.exe	Appears to be the "Internet Connection Wizard" from Internet Explorer being set-up as a desktop shortcut. Appears under the RunOnce registry key but is available under Start -> Programs -> Accessories -> Communication (or similar) anyway
?	setuzp	setuzp.exe	??
X	SetVrc	setvrc.exe	Added as a result of the HUNTOCX VIRUS!
X	Sex Teris	st01b.exe	Added as a result of the REPAD VIRUS!
X	SFtrb Service	cftrb32.exe	Added as a result of the SOBIG.D VIRUS!
U	SfWinStartInfo	sfWinStartupInfo.exe	SFIRM32 Online Banking software
U	Sgecrypt	Sgecrypt.exe	SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
U	Sgeecview	Ecview.exe	SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
?	SGTBox	SGTBox.exe	Canon scanner driver. Is it required?
U	sgtray	sgtray.exe	StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
X	shambl3r	cnf.bat	Added as a result of the REMABL VIRUS!
X	shambl3r*	shambl3r.exe	Added as a result of the REMABL VIRUS! where * is 2 to 11
N	Share-to-Web Namespace Daemon	hpgs2wnd.exe	"HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs
X	sharedprem	sharedprem.exe	Added as a result of the MAKECALL VIRUS!
Y	Sharing and Mapping Software	DShmap.exe	Intel AnyPoint internet sharing software
N	SharkEject	AEJCT32.exe	Allows you to eject a disk from the Avatar Shark drive from the system tray. When loaded, there is a desktop icon so this isn't required
X	Shell	Shell32.exe	Added as a result of the BADSECTOR VIRUS!
X	Shell	ray.exe Tray.exe	Homepage hijacker re-directing browsers to adult content websites
X	ShellApi	SHELLMSN.EXE	Added as a result of the NETDEV.B VIRUS!
X	Shellapi32	Shellapi32.exe	Added as a result of the NETDEVIL (or NERTE) VIRUS!
X	ShellEx	ShellEx.exe	Added as a result of the ANAKHA VIRUS!
N	shicoxp	shicoxp.exe	Driver for a MultiCard slot ImageMate 6-in-1 Combo cardreader
X	Shine	Shine.exe	Added as a result of the HAPPYLOW (or NISHE-A) VIRUS!
X	Shmgrate.exe	ibot4.exe	Added as a result of the GASTER VIRUS!
N	shockmachine reminder	SmReminder.exe	Shockmachine is an entertainment playback device that lets you save your favorite Shockwave.com titles and play them back in full-screen mode, off-line, anytime. Could be a registration reminder for the trial version
N	Shockwave Init	SWINIT.EXE	Part of Macromedia Shockwave. Controls the Shockwave Remote Control Panel. The Remote Control can be activated manually from the Start Menu by locating and selecting Shockwave and then Shockwave Remote under Programs
N	ShortKeys 99	SHORTKEY.EXE	ShortKeys from Insight Software Solutions - allows you to program keys with text strings
X	Showbehind	SHOWBEHIND.EXE	Advertisement display which can be stopped here
?	ShowIcon_SmartDisk Corporation_USB Card Reader v1.14e051	shwicon.exe	Card reader for memory cards from digital cameras. Is it required?
U	SHPC32	SHPC32.exe	Port monitor for Lexmark printers on a USB connection. Ties in with the Printer Control Program. Features like cancelling a print are unavailable if disabled
Y	ShStatEXE	SHSTAT.EXE	From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs
U	Shutdownaware	shutdownaware.exe	Loaded by the SWEEX 6-in-1 Media Card Reader to properly manage the reader while it is connected to your system
U	ShutDownPro	ShutDownPro.exe	ShutDownPro - shutdown, reboot, logoff your System with one mouse click
?	Si Meter	SIMETER.EXE	??
X	Sicom	Sicom.exe	Added as a result of the NETLIP VIRUS!
U	SideACT	SideACT.exe	SideACT organizer software
X	Sidebar	Sidebar.exe	Searchcentrix hijacker
N	SideWinderTrayV4 or SWTrayV4	SWTrayV4.exe	MS SideWinder game controller system tray icon. This is specific to version 4 of the software. Available via Start -> Programs
U	SimpLite-MSN	SimpLite-MSN.exe	Required if you use the SimpLite add-on to MSN Messenger (SimpLite adds encryption to the instant messaging service)
X	Singapore	singapore.exe	Adds a blue crescent to the taskbar and when double-clicked displays an adult-content web-site. Also known to drop your internet connection and dial an international telephone number. See here for more information. Must be disabled in MSCONFIG before un-installing or it re-instates itself
N	SiS KHooker	khooker.exe	SiS Keyboard Daemon. System Tray utility which gets installed by the drivers of the latter day SiS VGA cards. Can cause errors at startup and isn't required
U	SiS Tray or sistray	sistray.exe	System Tray icon for SiS based graphics. Note - this resides in C:\Windows\System
?	SISAM10M	SISAM10M.exe	??
N	SiSAudio	MP_S3.exe	WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems
U	siscolor	color.exe	Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if you choose another graphics card and disable the on-board
U	siService.exe	siService.exe	Spam Inspector - anti email spam software
?	SiSSetCDfmt	SiSSetCDfmt.exe	Related to a Silicon Integrated Systems Corp (SiS) product?
?	SISSoundman	Soundman.exe	Related to a Silicon Integrated Systems Corp (SiS) product?
U	SiSSWLED	sisswled.exe	System Tray utility for SiS 900 network cards
X	sistrai.exe	sistrai.exe	Added as a result of the PROVA VIRUS!
X	sistray	sistray.exe	Added as a result of the PROVA VIRUS! Note - this resides in C:\Windows\Command
X	sistry	sistry.exe	Added as a result of the CEBE VIRUS!
?	SiSUSBRG	SiSUSBrg.exe	SiS USB Registry Patch File - fixes the undetectable problem with SiS USB controller on Windows XP. Why is it in the startups though?
U	SK9910DM	SK9910DM.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	SKDAEMON	SKDAEMON.EXE	Multi-function keyboard driver. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
N	skinkers	skinkers.exe	Selection of desktop messaging/marketing tools with celebrity tie-ins including MTV's "Desktop Ozzy" and Arsenal's "Desktop Wenger" - see here
Y	SkyBlaster Scheduler	SSFSch.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
N	Skype	Skype.exe	"Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Y	SkySurfer Management Service	SmaServ.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
N	SleepManager	SleepMgr.exe	This program locates free contiguous disk spaces and allocates them for storing BASE MEMORY, EXTENDED MEMORY, VIDEO MEMORY, and SM RAM. It helps the computer come out of hibernate mode
U	SlickRun	sr.exe	"SlickRun is a floating command line utility for Windows. It gives you almost instant access to any program or website. SlickRun allows you to create command aliases (known as MagicWords), so C:\Program Files\Outlook Express\msimn.exe becomes MAIL"
X	slide	Iexplore.exe	Added as a result of the GASLIDE VIRUS! Note - this is not the valid Internet Explorer file "iexplore.exe"
N	slimp3	SliMP3 Server.exe	Slimp3 Server - "presents an entirely new way of accessing and enjoying your music collection. Instead of storing your music on CDs or memory cards, the SliMP3 uses your home network to access the music stored on your PC"
N	Slingshot	SLINGS~1.EXE	Atomica Slingshot - "reference tool with access to dictionary and encyclopedia terms, bios, technical terms, history, geography, and much more"
X	slmss	slmss.exe	SeekSeek search hijacker related - as seen here
?	SM1BG	SM1BG.EXE	USB driver for downloading from within Napster to portable MP3 players. Is it required to run at startup or can it be run manually?
N	Sm56acl	sm56hlpr.exe	Helper utility for Motorola based SM56 software modems - resides in the System Tray
N	Smapp	smtray.exe	System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
N	Smart Card Service	ScardSvr.exe	For Smart Card readers. Known to cause problems, especially for Windows 2000 users - see here. Probably not required unless you use such a device regularly
U	Smart Connect Monitor	SCMon.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
U	Smart Connect Setup	SCSetup.exe	Appears on a Sony Vaio. Smart Connect Version 2.1 enables data transfer between Vaios via i.LINK cable. Smart Connect supports File and Printer Sharing for MS networks. You can copy files from your Vaio to another Vaio or print using a printer connected to a remote Vaio
N	Smart Label O Server	ssloserv.exe	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N	Smart Label RFViewer	SSLFVIEW.EXE	Part of the printer software for the smart-label printer made by Seiko. Can be disabled safely
N	Smart Type Assistant	sta.exe	Smart Type Assistant - a complex typing automation tool, intended to make your work faster and safer
U	Smartalec	pcaccel.exe	Smartalec PC Accelerator - system optimization utility
N	sMaRTcaPs	SMARTC~1.EXE	sMaRTcaPs from Phoebus LLC - enables you to configure the time needed to depress Caps Lock, Num Lock & Insert keys
?	Smarthruengine	QS.exe	Unknown but disabled without problems
U	SmartPCXL	pcaccel.exe	Smartalec PC Accelerator - system optimization utility
N	SMax4	SMax4.exe	System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
U	SMax4PNP	SMax4PNP.exe	SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
?	smbdpmi	smbdpmi.exe	IBM Netfinity Director and Universal Management Services related. What does it do and is it required?
Y	smc or SMC Service or SmcServices	smc.exe spfsmc.exe	Sygate Firewall
?	Smcsta.exe	Smcsta.exe	SMC Networks wireless PCI card driver. Is it required?
N	Smith Micro try	smiptray.exe	Smith Micro shared files. Comes with D-Link web cam
U	SMS Application Launcher	LAUNCH32.EXE	Microsoft Systems Management Server - used to manage computers on a network remotely
U	SMS Client Service	clisvc95.exe	When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights, and account comment. The Client service then waits for the synchronization of the comment to verify that the account and user rights are properly set for this account. This account is used to obtain a token to start the SMS Client processes, such as the Software Inventory and Software Distribution agents (MS Systems Management Server)
U	SMS Win9x Message Agent	??	This program assigns a user to a Systems Management Server site
Y	Smserial	sm56hlpr.exe	Motorola based modem driver
N	SMSI Loader	SMLoader.exe	Smith Micro HotFax - fax software
X	SMSS	smss.exe	Added as a result of the FLOOD.F VIRUS! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup!
X	smss	<path to smss.exe>	Added as a result of the ALADINZ.F VIRUS! Note - this is not the legitimate Smss.exe system file should normally NOT figure in Msconfig/Startup!
X	smsys	Explorer.exe	Added as a result of the CLICKER-C VIRUS! Note - the valid "explorer.exe" is located in C:\Windows or C:\Winnt whereas this one is located in a C:\Windows\Template or C:\Winnt\Template subdirectory
X	smsys	vi.exe	Adult content dialler
N	SMToolbar	SMToolbar.exe	StartMake.com toolbar
?	snbr	snbr.exe	??
X	sncntr	sncntr.exe	Adult content dialler
X	Sndcompat	Sndcompat.exe	Added as a result of the GEMA VIRUS!
X	Sndsaver	Sndsaver.exe	Added as a result of the GEMA VIRUS!
N	Snsicon	Snsicon.exe	Launches a screensaver program from Second Nature
?	SO5 Integrator Pass One	sointgr.exe	StarOffice 5. See here for more details
?	SO5 Integrator Pass Two	sointgr.exe	StarOffice 5. See here for more details
X	Soar	Rwon.exe	PurityScan/Clickspring adware
X	Sock32	sock32.exe	Added as a result of the SDBOT VIRUS!
Y	SoDA Startup	SodaStartup.exe	Used by the Rational SoDA project management tool. Unsure of it's actual purpose but it's recommended you leave it enabled if you use the software
N	soffice	SOFFICE.EXE	Displays StarOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the StarOffice 6.0 suite. Available via Start -> Programs. Automatically started when any StarOffice 6.0 component is started from the Start -> Programs. A resource hog (it eats > 16 MB of memory).
Y	SOFTinst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
Y	Solo Sentry	Solosent.exe	Solo Antivirus
U	SoloSchedule	Solocfg.exe	Scheduler for Solo Antivirus. Leave enabled unless you scan manually on a regular basis
X	somatic	somatic.exe	Searchcentrix hijacker
N	Sonic A3D Control	vrtxctrl.exe	Sound related options
N	SoniqueQuickStart	sqstart.exe	Quickstart for Sonique audio player. Available via Start -> Programs
?	SonnReg	SonnReg.exe	Part of E-Color 3Deep for color calibration. Possibly a registration reminder?
?	Soot	rcea.exe	??
?	sophagnt	sophagnt.exe	Possibly related to Sophocles Screenwriting Software?
?	SoSyncMonitor	SoSyncMonitor.exe	SuperOffice related. What does it do and is it required?
?	SoundFusion	rundll32 cwcprops.cpl	Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?
?	SoundFusion	rundll32 hercplgs.cpl, BootEntryPoint	Control panel item for Hercules Fortissimo soundcards (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Does it need to run at start-up every time?
N	soundman	soundman.exe	System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel
X	Soundmx	Soundmx.exe	CoolWebSearch parasite related
N	SourcePath	gwreg.exe	Used to update Gateway registry settings for System Restoration Kit and Web update programs
X	sp	sp.reg	IE search hijacker - changes the default search to http://www.gocybersearch.com/
X	sp	regedit-s .... sp.dll	Malicious javascript annoyance that changes the default search engine in IE to one of many including "topsearcher". See here for more and a fix
X	SP00LSV	Sp00lsv.exe	Added as a result of the GRAYBIRD.E VIRUS!
U	SpamPal	spampal.exe	SpamPal - anti-spam tool
N	Spdstart	Spdstart.exe	Norton Utilities Speed Start. "This feature optimizes the start up speed of launching applications, such as Word and Excel."
U	Speaking Clock Deluxe	SpClDlx.exe	Speaking Clock Deluxe - turns your computer into a speaking clock with several languages. It can also keep track of up to 50 alarms that can be set to a time and a date, and be repeated daily, weekly, monthly and yearly
N	Speed racer	CTSRReg.exe	Software for a Creative sound card
U	Speed Tec	speedtec.exe	Accel SpeedTec from Montana Software speeds up your modem. SpeedTec modifies the Internet Protocol settings in the Windows registry to speed downloads on all modems. If you find this improves your connectivity and download speeds leave this enabled
X	SpeedBoss	<worm filename>	Added as a result of the OPASERV.AD VIRUS!
U	Speedkey	SPEEDKEY.EXE	Additional keyboard shortcuts on MS programmable keyboard
U	SpeedMeter	SpeedMeter.exe	Application measuring upload and download speed
U	Speedtouch USB Diagnostics	Dragdiag.exe	For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
X	Spees1	speedy.scr	Added as a result of the OPASERV.Y VIRUS!
X	Spees2	Speedy.bat	Added as a result of the OPASERV.AD VIRUS!
X	Spees3	SPEEDY.PIF	Added as a result of the OPASERV.AD VIRUS!
N	Spellex Anywhere	sa.exe	Spellex-Anywhere - adds spell checking functionality to almost any Window program. Create a shortcut and run manually before it's to be used
Y	SpIDerMail	spiderml.exe	DrWeb antivirus Spider Mail e-mail scanner
N	Spinner Plus	spinner.exe	"Spinner Plus lets you listen to over 100 channels of music broadcast from Spinner.com. Spinner Plus uses RealNetwork's G2 technology to provide high-quality online audio. The technology adjusts the audio streaming to match your Internet connection speed, which helps eliminate sound distortion or choppiness". Available via Start -> Programs
X	Spool lptt01 or Spool ml097e	spool.exe	Variant of the RapidBlaster parasite (in a "spool" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Spooler Service	Spoolsrv.exe	Added as a result of the JOINER.C1 VIRUS!
X	Spooler Sub System Process	SPOOL32.EXE	Added as a result of the YAB.A VIRUS!
X	Spooler Subsytem App	spoolsvc.exe	Added as a result of an unidentified VIRUS!
X	SpoolerSubSystemProcess	SpooI32.exe	Added as a result of the SPY.EHKS.21 VIRUS! Note - the "I" between "o" and "3" is a captial "i" not a lower case "L"
X	Spoolsv	Spoolsv.exe	Added as a result of the CIADOOR.121 VIRUS! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file
X	spoolsvv	spoolsvv.exe	Searchcentrix hijacker
?	SPP	run.exe	??
X	spp	regedit -s spp.reg	IE search hijacker - changes the default search to http://www.hotsearchbox.com/ie/
?	sppbridge	sppbridge.exe	Associated with an Anycom bluetooth wireless card on laptops - used for printing to portable printers for example. Is it required or can it be started manually?
?	SprintPort	SprintPortA.exe	Novatel wireless modem related. What does it do and is it required?
U	SPSTEALT	SmartProtectorPro.exe	Smart Protector Pro - internet privacy tool that erases tracks, MRU lists, etc
U	Spy Blocker	spyblocker.exe	SpyBlocker blocks the communications of spyware installed on a PC so spyware runs but can't exchange data with the server to which it should report. Ensuring spyware can't communicate is important, as you may find after using Ad-Aware that some applications containing spyware subsystems may not run correctly or at all
X	SpyBlast	SpyBlast.exe	Spyware killer that is in effect autoinstalled foistware, targeted by SpyBot, among others
U	SpyBotSnD	Spybotsd.exe	Spybot - Search & Destroy - free multi-spyware removal tool from Patrick Kolla
X	Spybott lptt01 or Spybott ml097e	spybott.exe	Variant of the RapidBlaster parasite (in a "Spybott" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	SpyCop ScanCheck	MAIN.EXE	SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan
U	SpyHunter	SpyHunter.exe	SpyHunter - spyware detection and removal
U	Spykiller	Spykiller.exe	Shareware "Spyware remover" of questionable quality and repute. There are better alternatives that are freeware to boot
X	SpyNuker	Spynuker.exe	A "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ‘TrekData’ and ‘Blue Haven Media’, who distribute spyware through ActiveX drive-by-download on web pages
U	SpyStopper	spystopper.exe	SpyStopper - blocks intrusive spyware, Web bugs, worms, scripts, advertisements, and cookies. Protects you from being profiled and tracked
U	SpySweeper	SpySweeper.exe	Spy Sweeper - detects and removes spyware
X	Spyware	Spyware.exe	BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!
U	Spyware Guard Control Panel	spywar~1.exe	"SpywareGuard provides a real-time protection solution against spyware"
X	Spyware Nuker Installer	SpywareNukerInstaller.exe	A "spyware removal program" by TrekBlue, which is being heavily advertised through junk e-mail from its affiliates and misleading fake-dialogue-box web advertising. This is the same company as E-mail marketers ‘TrekData’ and ‘Blue Haven Media’, who distribute spyware through ActiveX drive-by-download on web pages
U	Spyware Scanner	AseScanner.exe	Spyware Eliminator - Aluria Software's multi-spyware removal tool
U	SpywareGuard	sgmain.exe	"SpywareGuard provides a real-time protection solution against spyware"
X	Spywareguard lptt01 or Spywareguard ml097e	Spywareguard.exe	Variant of the RapidBlaster parasite (in a "Spyguard" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	SPYWATCH	SpyWatch.exe	BPS Spyware Remover - reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!
X	SQConfigChecker	cc.exe	Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
X	SQInstaller	SQInstaller.exe	Xupiter hijacker
N	SQL Server	scm.exe	SQL Server Service Control Manager. Available via Start -> Programs
X	SQUpdatesChecker	uc.exe	Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants
?	sr1exe	updtSup3.exe	Found on a Dell computer, in a Documents and SettingsAll UsersApplication DataDellAlert2 subfolder
U	Srmclean	srmclean.exe	Srmclean helps in the installation and execution of the SoundMax SoftPaq for Compaq/ADI SoundMax Integrated Digital Audio. According to Compaq - "If you disable the entry from loading into startup, then you will not be able to use the features of the sound card"
X	SRNG	srng.exe	Search hijacker - see here
U	SRP Startup	srrpro.exe	System Restore Remover Pro allows you to safely and easily remove System Restore and various other Windows Millennium "features." This is enabled if you tick the "Remove unnecessary System Restore information on startup" box. Available via Start -> Settings -> Control Panel
Y	SRS Applet	SrsTray.Exe	S3 Sonic Vibes sound card drivers - if disabled you loose sound
X	Srv32	Srv32.exe	Added as a result of the OPASERV.J VIRUS!
X	Srv32	Srv32.exe	Added as a result of the OPASERV.S VIRUS!
X	Srv32Old	<filename>.PIF	Added as a result of the OPASERV.J VIRUS! where <filename> is the original worm name
U	Srv32Win	SpyAgent4.exe	SpyAgent - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U	Srv32Win	Svchost.exe	Realtime-Spy keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
Y	Ssd	Std.exe	Stealthdisk - file and folder hiding/locking utility
?	ssdiag	ssdiag.exe	Equinox "Configuration and DOS Diagnostic for DOS and Windows platforms"
N	SSDPSRV	ssdpsrv.exe	Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. Used by Universal Plug and Play (for network device discovery). To remove this program, open Add/Remove Programs, select either Communications (Me) or Networking Services (XP), and remove the checkmark next to Universal Plug and Play
X	ssgrate.exe	system.exe	Added as a result of the MITGLIEDER.C VIRUS!
X	SSK Service	winssk32.exe	Added as a result of the SOBIG.E VIRUS!
U	ssmmgr	ssmmgr.exe	Samsung printer monitor - for checking ink levels, etc.
N	sstray	sstray.exe	nVidia nForce Taskbar Utility - quick access to the nForce2 "Sound Storm" control panel and related utilitys
X	SSUpdate	SSUpdate.exe	DyFuCa/MoneyTree parasite variant
X	ssvchost	ssvchost.exe	Added as a result of the HELIOS.B VIRUS!
Y	Start	Quick95.exe	For a Nisis G6 USB Graphics Tablet. Re-enables itself if disabled therefore best left alone
X	Start	windows.vbs	Homepage hijacker
?	start	start.exe	??
N	Start Getright	getright.exe	See Getright Tray Icon
U	Start Up Cop	startcop.exe	StartUp Cop - startup manager
N	Start Wingman Profiler	lwtest.exe lwemon.exe	Logitech Wingman software required to operate Logitech joysticks and gamepads.  Unless you're a hard-core gamer, it's best to leave it unchecked
U	Startacc	startacc.exe	Launches Webroot's Accelerate 2000 software that "speeds up your Internet connection by up to 300%". Leave enabled if you find it improves internet connection
Y	StartEAK	StartEAK.exe	Easy Access Button Support for Compaq PCs. Required if you use these
N	startl.exe	startl.exe	Lingocom LingoWare - translates any application into your language
X	startpage	startpage.exe	Browser hijacker - redirecting to pages2start.com
U	StartStop	STARTSTOP.EXE	StartStop from TFI Technology - startup manager
U	StartSurfing	STARTS.exe	Start Surfing allows you to protect your privacy while surfing and searching the Internet by acting as a "filter" between you and the website you are visiting. Startsurfing acts as your shield from Pop Up Windows, Mouse Traps, Window Resizing, and scripts that attempt to record your personal information. Available via Start -> Programs
N	Startup	??	Related to an Iomega drive
?	Startup Launcher GUI	GUI.exe	Startup manager?
X	Startup Update	Cvshost.exe	Added as a result of the GAOBOT.AO VIRUS!
U	StartupMonitor	StartupMonitor.exe	Mike Lin's StartupMonitor, throws up an alert and asks your permission every time any change is made to your start-up configuration, either in the registry or start menu
X	startwindowskeyuser	rundle2.exe	Added as a result of the JAVAKILLER VIRUS!
N	Stat 'n' Perf	StatnPerf.exe	Stat 'n' Perf monitors your internet connection and displays information about sent and received bytes
X	StatBar	STATBAR.exe	StatBar (system status bar) allows you to quickly get an overview of your system's condition (memory, CPU, uptime, and much more). Due to the sheer number of resources (over 60%) consumed by this program, it is unsuitable for Windows 95/98/SE/Me
N	Status Monitor XE	ENGSS.EXE	The Xerox Document WorkCentre XE Series Status Monitor displays information about your printer and currently active or waiting print jobs. You can use it to control your printing environment and manage your printing operations. Available via Start -> Programs
N	Stay Connected!	StayCon.exe	More than just a pinger, actually simulates online activity. Supports AOL, NetZero, MSN, ATT WorldNet, CompuServe and many other ISPs as well. Available via Start -> Programs
U	StayAlive	sa.exe	StayAlive from TFI Technology. "This top-notch tool intercepts crashes when they happen, keeping your programs running so you can save your work."
?	STBVision	STBVisn.exe	Related to the STB Velocity graphics card. What does it do and is it required?
N	STBWEBTV	STBWEBTV.EXE	Used to display TV on your PC
X	stcloader or STCLOA~1	stcloader.exe STCLOA~1.exe	Popup adware by 2ndThought software
Y	STCPO	STCPO.exe	Sophos Sweep antivirus software
U	Stealth Anonymizer 2.5	stealth25.exe	Now named Stealther - proxy server agent that lets you travel the Internet with maximum possible privacy
N	Steam	Steam.exe	Program used for the game Half-Life. Valve (Half-Life creator) made it to test update and patches of the game as well as other games. Can be started manually
N	Stickies	STICKIES.EXE	Stickies - utility that allows you to put yellow "Post-It" type messages on your desktop and can be used to set reminders. Available via Start -> Programs
N	StickyNote	StickyNote.exe	Utility that allows you to put yellow "Post-It" type messages on your desktop. Available via Start -> Programs
U	StillImageMonitor	Stimon.exe	Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners and some of their SCSI scanners
X	stlbdist	rundll32exe stlbdist.DLL, DllRunMain	Hijacker pointing to www.searchandclick.com
X	stlbupdt	rundll32.exe stlbupdt.DLL, DllRunMain	BrowserAid/Startium parasite
U	StorageGuard	sgtray.exe	StorageGuard from Veritas. Free utility that integrates with Backup MyPC (formerly Backup Exec Desktop), Simple Backup and MS Backup. Provides system tray access and background monitoring - warning you of files that haven't recently been backed up. Required unless you backup manually on a regular basis or have scheduled backups
?	STPMGR	STPMGR.EXE	Part of SafeTP which is transparent FTP security software. Does it need to be running permanently or can it be started manually via Start -> Programs
X	Strng32	strngbox.exe	Added as a result of the STRANO VIRUS!
U	StyleXP	StyleXP.exe	StyleXP allows you customize the way WinXP looks. If disabled via msconfig it re-instates itself at reboot, therefore uninstall it if you don't want it
N	Subtract the Ads	AdSub.exe	Removes adverts from web pages. Although useful - not required
X	SULFNBJ.EXE	SULFNBJ.EXE	Left as the result of being infected by the PE_MAGISTR.DAM virus. This virus infects system files and renames them (changing one letter) before adding them to the Run keys in the registry. Once the virus is removed via anti-virus software, delete the infected file and remove the key from the registry
N	SunJavaUpdateSched	jusched.exe	Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel
U	Sunkist	shwicon98.exe	Card reader for memory cards from digital cameras, etc
U	Sunkist2k	shwicon2k.exe	Card reader for memory cards from digital cameras, etc
N	Supastatus	status.exe	Supanet ISP software
U	Supercleaner	Supercleaner.exe	Supercleaner - all in one disk cleaner for your computer
U	SuperCool Compress Backup	Main.exe	"SuperCool Zip Backup software is a data backup,restore and file synchronization program"
X	Supernova	.exe	Added as a result of the SURNOVA (or SUPOVA) VIRUS! <filename>.exe is the chosen name
X	superslut	msslut32.exe	Added as a result of the SLUTER-A VIRUS!
X	supporter5	supporter5.exe	Part of eScorcher anti-virus software- responsible for updates of new virus bases each time you logon to the web. Used to collect information about the user and therefore treated as spyware - now the web-site is dead
U	Sureshotpopupkiller	Stopthepop.exe	Stop-the-Pop-Up popup blocker
U	SurfChoice	SCMan.exe	SCMan is a utility that can control services on WinNT from the command line. This utility can create, start, pause, stop, delete services. Furthermore it can retrieve a service's current state, get the displayname for a service and vice versa
X	Surfer lptt01 or Surfer ml097e	surfer.exe	Variant of the RapidBlaster parasite (in a "mssurfer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	SurfSecret	ss2-full.exe	"House-cleaning utility that enables you to keep your computer usage to yourself. Runs quietly from the system tray, eliminating tell-tale files at a regular interval of your choosing. You can set it to clear your Internet cache files, cookies, history, temp folder, etc. It can also clear the history of your Run and Find menus, in addition to the AOL cache"
X	Susp	Susp.exe	Transponder based malware by abetterinternet.com
X	Sustem	explorer.exe	Undentified VIRUS!
X	SustemUpdate	explorer.exe	Undentified VIRUS!
X	SVA Player	SVAplayer.exe	QuickFlicks Streaming Player - regarded as spyware. See here for details of how to disable or uninstall it
X	Svc	svc.exe	Hijacker, Clientman parasite variant, redirecting to madfinder.com. Detected by Symantec as the MADFIND VIRUS!
X	SVC Service	svcinit.exe	Added as a result of the SINIT VIRUS!
X	SVC Service	svcinit.exe svcpack.exe	CoolWebSearch parasite related
X	SVC Socks	mstaskm.exe	CoolWebSearch parasite related
X	Svced	Svced.exe	Added as a result of the DELF.F VIRUS!
X	svchost	Svch0st.exe	Added as a result of the GAYBIRD.B VIRUS!. Note - there is a number "0" in the executable filename, not a lower/upper case O. This is not the valid svchost.exe as described here
X	SVCHOST	svchost.exe	System1060 homepage hi-jacker. Found in a WindowsSystem1060 directory. Note - this is not the valid svchost.exe as described here
X	svchost	svchost.exe	Added as a result of the MORB or TARNO VIRUSES!. This is not the valid svchost.exe as described here. Located in the Windows directory, and not in Windows\System32
X	SVCHOST	mrowyekdc.exe	Added as a result of the GOTORM VIRUS!. This is not the valid svchost.exe as described here
X	svchost	Svch0st.exe	Added as a result of the GRAYBIRD VIRUS!. This is not the valid svchost.exe as described here
X	svchost	<path to trojan>	Added as a result of the HAZZER VIRUS!. This is not the valid svchost.exe as described here
X	svchost	ADMAGIC.EXE	Added as a result of the SMIBAG VIRUS!. This is not the valid svchost.exe as described here
X	Svchost	winhost.exe	Added as a result of the LOLAWEB.A VIRUS!. This is not the valid svchost.exe as described here
X	svchost.exe	svchost32.exe	CoolWebSearch parasite related. Note - this is not the valid svchost.exe as described here
X	SvcHost32	svchost32.exe	Added as a result of the MIMAIL.I or MIMAIL.J VIRUSES!
X	svcwinprocess32	<path to worm>	Added as a result of the UPERING VIRUS!
?	SVM Pop	svmpop.exe	??
X	svshost	svshost.exe	Added as a result of an unidentified VIRUS!
N	Swap Nut	javaw.exe	SwapNut is a peer-to-peer file sharing and searching utility developed and marketed by File Metrics, Inc. Users can search for and find almost any type of digital file (audio, video, photos etc.) through a secure peer-to-peer network
X	SWCaller	SWcaller.exe Swcaller2.exe	Homepage hijacker - see here
N	SWd	winwd.exe	PC Security from Tropical Software - lock files, password protect, etc
Y	Sweep95	ICLOAD95.EXE	Part of Sophos ant-virus sofware
X	Swf32	AVupdate.exe	Added as a result of the MERKUR VIRUS!
X	Swf32	_backup.exe	Added as a result of the SYMTEN VIRUS!
X	SwimSuitNetwork	SwimSuitNetwork.exe	Advertising spyware
U	Switch Off	swoff.exe	Switch Off - tray-based system utility that can automatically perform various frequently used operations like shutdown or restart your computer, disconnect your current dialup connection, lock workstation, etc
N	Switchboard.com Toolbar	AtHoc.exe	Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com
X	sws.exe	<random filename>.exe	Haldex type adult content dialler
N	SwTray	SWTRAY.EXE	MS SideWinder game controller system tray icon. Available via Start -> Programs. May have the version number after it
?	SXGDSENU	sxgdsenu.exe	Yamaha SXG soundcard driver
?	SxgTkBar	sxgtkbar.exe	Yamaha SXG soundcard driver
X	SYDNEY	<file path>	Added as a result of the SYNEY VIRUS!
U	SyGateService	sgserv95.exe	SyGate is a useful little program that lets you share an internet connection over an intranet. Is it needed - it saves a lot of headache to just let SyGate load at startup. Available via Start -> Programs
Y	Symantec Core LC	symlcsvc.exe	Part of Norton AntiVirus 2004. What does it do?
N	Symantec Fax Starter Edition Port	OLFSNT40.EXE	Offers a virtual printer as a fax machine. Can be run via a desktop shortcut
U	SymKeepAlive	CKA.exe	Part of Norton SystemWorks 2003 - keeps a dial-up modem connection alive
N	SymTray - Norton SystemWorks	SYMTRAY.EXE	Keeps all System Tray icons for Norton SystemWorks together to reduce clutter. SystemWorks includes Norton Anti-Virus, Norton Utilities and Norton CleanSweep - mentioned elsewhere here. Personally I only have Norton eMail Protect running which doesn't need SymTray
U	Sync Data	Hndsync.exe	Pocket Real Estate - mobile synchronization manager
U	Sync-It	Syncit.exe	Sync-It - synchronizes the system clock with time servers on the internet
U	SyncAgent	syncagent.exe	Ghost Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
N	Synchronization Manager	mobsync.exe	Find more information about its use here
?	SynSetup	SynTP.tmp RunOnce.exe	Probably associated Synaptics touchpads on laptops as for SynTPEnh and SynTPLpr below but what does it do and is it required?
U	SynTPEnh	syntpenh.exe	Synaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll
Y	SynTPLpr	syntplpr.exe	Synaptics touchpad driver helper. Required for touchpad features to work
X	sys	regedit /s sys.reg	Hijacker
U	SysAgent	SysAgent.exe	SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of
U	Sysbot	sysbot.exe	Spector - spying (or monitoring) software to record internet activity
X	syscfg	syscfg32.exe	Added as a result of the KWBOT.S VIRUS!
X	syscfg34.exe	syscfg34.exe	Added as a result of the ELECTRON VIRUS!
?	SysComp	mssdnl.com	Unknown but suspect as *.com are not usually run at start up and the name isn't recognized
X	syscon lptt01 or syscon ml097e	syscon.exe	Variant of the RapidBlaster parasite (in a "Syscon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	sysconfig	iexplorer.exe	Added as a result of the CULT.C VIRUS!. Note - iexplorer.exe is not to be confused with Interrnet Explorer (iexplore.exe)
X	SysConfig	syscfg35.exe	Added as a result of the KAZMOR.C VIRUS!
X	sysconfig	iexplorer.exe	Added as a result of the CULT.H VIRUS! Note - the valid "iexplorer.exe" resides in C:\Program Files whereas this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP)
X	Syscpy	Syscpy.exe	Firewall-bypassing, proxied spam relayer. Detected by Symantec as the HOGLE VIRUS!
X	SysCtl	sysctl.exe	Added as a result of the AOK VIRUS!
X	Sysctrls	procdll.exe	Added as a result of the WEEDBOTZ.14 VIRUS!
X	sysdir	winrun.exe	Added as a result of the WINBUR.B VIRUS!
X	sysfiler	sysfiler.exe	Added as a result of the RETSAM VIRUS!
X	syshelp	syshelp.exe	Added as a result of the LOVGATE VIRUS!
X	sysinfo	sysinfo.exe	Added as a result of the BEDRILL VIRUS!
X	SysInit	wininit32.exe	Added as a result of the XABOT VIRUS!
X	Syslib	Syslib.exe	Adult content related downloader trojan
X	Syslog lptt01 or Syslog ml097e	Syslog.exe	Variant of the RapidBlaster parasite (in a "Syslog" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	SysMetrix	SysMetrix.exe	SysMetrix - skinnable clock and metering application. It monitors and reports on a great number of statistics
X	SysOps	SysOps	Added as a result of the MSNCORRUPT VIRUS!
X	syspath	drv.exe	Added as a result of the SOBER VIRUS!
X	sysPnP	bootconf.exe	Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
X	SysPnP	rundll32 setupapi, InstallHinfSection.... oemsyspnp.inf	Search hijacker - see here
Y	SysPool	Mssvc.exe	StealthDisk - hides folders, files and applications. Will also encrypt them for better protection
X	SysProtect	System.exe	Added as a result of the NETSPY VIRUS!
X	SysR	sysmd.exe	Adult content based "foistware" (adds hidden components to your system)
X	SysReg	SysReg.exe	Added as a result of the CCINVADER2 VIRUS!
X	SysReg	SysReg.exe	SearchSeekFind textual marketing foistware
X	Sysres	Sysres.exe	Added as a result of the LOGMOD VIRUS!
X	SysScan	bvt.exe	Added as a result of the AUTOUPDER VIRUS!
X	SysService	SysService.exe	Added as a result of the DELF family of VIRUSES!
X	SysService32	SysService32.exe ln32k.dll	Added as a result of the KINDAL VIRUS!
X	SysService32l	systask32l.exe	Added as a result of the THEUG VIRUS!
X	SYSsfitb	SYSsfitb.exe	Searchforit browser hijacker
X	System	run322.exe	Added as a result of the LANFILT VIRUS!
X	System	system.exe	Added as a result of a number of VIRUSES, including CHILI, NULLBOT, FULAMER.25, NETCONTROLL, NETCONTROLL, GATECRASH.A, GATECRASH.B, NTCONTROL.A, BUSHTRO122 & VIVAEL
X	system	regedit -s system.dll	Homepage hijacker
X	system	systemsearch.hta	Jetseeker.com hijacker
X	System	dcomx.exe	Added as a result of the CIREBOT VIRUS!
X	system	Explorer.exe	Added as a result of the GRAYBIRD VIRUS! Note - this is located in this is located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) rather than the valid Windows Explorer which is located in C:\Windows or C:\Winnt
X	System	YPager.exe	Added as a result of the JUNTADOR.K VIRUS! Note! - this is not Yahoo! Messenger
X	system	outlook.exe	Added as a result of the MIMAIL.Q VIRUS! Note that Microsoft's outlook.exe resides in the Program Files sub-directory wheras this resides in C:\Windows or C:\Winnt
X	System 64 Driver for Games	sys64dvr.exe	Added as a result of the SDBOT VIRUS!
U	System Check	Rundll32.exe SysDll32.dll, SystemCheck	XPCSpy Pro keylogger, surveillance and monitoring software
X	System Configuration	iexplore.exe	Added as a result of the RANDEX.AD VIRUS! Note that the real "iexplore.exe" is located in Program Files\Internet Explorer
X	System Diagnostics	sysdiag32.exe	Added as a result of the SDBOT.GEN VIRUS!
N	System DLF	cpqdiaga.exe	Compaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via Start -> Programs
X	System Efficiency Monitor	mscedit32.exe	Added as a result of the SDBOT.P VIRUS!
X	System Efficiency Monitor	mscommand.exe	Added as a result of the KWBOT.P VIRUS!
X	System Executable DLL Library	EXECDLL32.exe	Added as a result of the RANDEX.AZ VIRUS!
X	System Initialization	msmsgri32.exe payload.dat	Added as a result of the RANDEX.D or ROXY or ROXY.B VIRUSES!
U	System LifeGuard Scheduler	Slsched.exe	System LifeGuard scheduler
U	System Monitor	SYSMON.EXE	Comes with some Aopen motherboards. Monitors CPU temp, voltage and fan speed. Warns if any become abnormal
X	System Monitor	Sysmon16.exe	Added as a result of the SDBOT VIRUS!
X	System MScvb	mscvb32.exe	Added as a result of the SOBIG.C VIRUS!
X	System Profile	Regsrv.exe	Added as a result of the BDS/OPTIXPRO.12 VIRUS!
X	System Service	MSREXE.EXE	Added as a result of the AML VIRUS!
X	system service	spoolcrv.cpl	Added as a result of the INSPIR.11 VIRUS!
X	System Soap Pro	soap.exe	System Soap Pro internet cleaning software. Bundles foistware like HTTPER and Zipclix - best avoided
U	System startup	charmapx.exe	Only required if using an oriental language
X	System time updator	CSysTime.exe	Added as a result of the RANDEX.S VIRUS!
X	System Toolkit	Systools.exe	Added as a result of the RONOPER-G VIRUS!
X	System Tray	msccn32.exe	Added as a result of the PALYH.A VIRUS! Warning - spreading via infected E-mail attachments with the sender address faked as support@microsoft.com. Note - do not confuse with the valid SystemTray above
X	System Tray32	SysTray32.exe	Added as a result of the REPAD VIRUS!
X	System-Service	EXPLORER.SCR	Added as a result of the BENJAMIN VIRUS! KaZaA file-sharing users beware!
X	system.	system..exe	Added as a result of the OPTIXPRO.13.C VIRUS!
X	system...	system...exe	Added as a result of the OPTIXPRO.13.C VIRUS!
X	System32	system.exe	Added as a result of the BUSHTRO122 VIRUS!
X	System32	System32.exe	Added as a result of the MARI, SYSXXX and other VIRUSES!
X	System33	FB_PNU.EXE	Added as a result of the NICHELLO-A VIRUS!
X	SystemAdministration	Wincmp32.exe	Added as a result of the ASYLUM VIRUS!
U	SystemAgent	Sage.exe	"Microsoft Plus! System Agent automatically tunes your system, performing tasks such as disk optimization and error correction. It can also run any application at prescheduled times"
X	SystemBackup	mtx.exe	Added as a result of the MTX VIRUS!
X	SystemBackup	MicroLog.exe	Added as a result of the MICROLOG.A VIRUS!
?	SystemBoot	ladies.htm	Unknown but sounds very suspicious??
X	SystemBoot	Mshta.exe ...filename.hta	Adult content dialler
X	SystemCheck	Systemcheck.exe	Added as a result of the LAVITS VIRUS!
X	SystemChecker	Syschk.exe	Added as a result of the GAIL.F VIRUS!
X	SystemCONF98i	SystemCONF98i.exe	Added as a result of the FROZEN BOT VIRUS!
X	SystemDebug	Sysdeb32.exe	Added as a result of the SYSBUG VIRUS!
X	SystemDll	SystemDll.exe	Added as a result of the LOXOSCAM VIRUS!
X	systemdrv	ms32sys.exe	VIRUS related - most likely GAOBOT
X	SystemEmergency	<various filenames>	SmartSearch a CoolWebSearch parasite variant
X	SystemExplorer	explore.exe	Homepage hijacker - file located in the "Services" folder in Common Files
X	SystemFTP	VSENMB.exe	Malware (ie, malicious software).  Also changes the system.ini Shell line to read Shell=Explorer.exe VSENMB.exe, and it hacks the Winstart.bat as well
X	SystemInit	iservc.exe	Added as a result of the FIZZER VIRUS!
X	SystemLoad32	sysload32.exe	Added as a result of the MIMAIL.E VIRUS!
X	SystemManager	Sysman32.exe	Added as a result of the DOWNLOADER-BW.B VIRUS!
X	SystemMap32	Netisp32.vbs	Added as a result of the REDIST.C VIRUS!
X	SystemMD	md.exe	Homepage hijacker
X	SystemNetwork	NETSERV.EXE	Added as a result of the NETCONTROL VIRUS!
?	SystemReg	PROCES.EXE	??
X	SystemReg	svchost.exe	Added as a result of the DEWIN.E VIRUS! Note - this is not the valid svchost.exe as described here
X	SystemReg	WINREG.EXE	Added as a result of the DEWIN.A VIRUS!
U	Systems.exe	Systems.exe	Keyboard Spectator - monitoring software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U	SystemSafe	Syssafe.exe	System Safety Monitor - system monitoring tool with additional application firewalling
X	SYSTEMSars32	csrss.exe	Added as a result of the AHLEM.A VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X	SystemSAS	System32.exe	Added as a result of the KWBOT.C VIRUS!
X	SystemSearch	regedit.exe -s c:\ie.reg	Installs a Seachxl.com browser page hijack
U	SystemSuite Task Manager	MXTASK.EXE	vcom (nee Ontrack) SystemSuite - PC maintenance and security. Use the program's configuration options to enable only the parts you want running all the time - such as Virusscanner Pro
X	SystemTasks	filez.exe sexypicz.exe loaded.exe	Adult content dialler
X	SystemTray	SystemTray.exe	Added as a result of the BIGFOOT VIRUS! Note - this is not the valid SystemTray above
U	SystemTray or SysTray	SysTray.Exe	SYSTRAY.EXE - System Tray Services. Provides the Volume Control, PC Card Status, Power Management and other icons that reside in the System Tray (see here). SYSTRAY.EXE may be disabled if none of these services are required. It will launch as and when required if you later enable the icons. If you need these items they're available via Start -> Settings -> Control Panel
N	SystemUpd	SystemUpd.exe	Updater for Swapoo.com, a kind of Napster for games
U	SystemWizard Sniffer	Sniffer.exe	SystemWizard for Win98/ME from SystemSoft - diagnoses and solves hardware and software problems on a PC
N	Systest	Systest.exe	Clean Space temp files cleaner
X	systhread	winkernal.exe	Added as a result of the LIAMED VIRUS!
X	Systoan32	systoan.exe	Added as the result of an unidentified VIRUS!
?	systr32	systr32.exe	??
?	systrax	systrax.exe	??
X	Systray	Systray_.Exe	Added as a result of the KERGEZ.A VIRUS!
X	Systry	<path_to_worm>	Added as a result of the AUTEX VIRUS!
X	Systryt	<path_to_worm>	Added as a result of the AUTEX VIRUS!
X	sysu	sysu.exe	Dynamic Desktop Media adware - see here
U	SysW8	csta.exe	Clean Space - privacy and perfomance enhancer
U	SYSWB6	SYSWB6.exe	We-Blocker - gives parents the opportunity to monitor their children's Internet access and provide them with age-appropriate content, while filtering out sites that contain adult content
X	Syswindow	Syswindow.exe	Added as a result of the COW VIRUS!
X	SYS_CLEAN	Service.exe	Added as a result of the FLOPCOPY VIRUS!
U	SZMsgSvc.exe	SZMsgSvc.exe	StopZilla! - pop-up killer
X	Taba	stte.exe	Clickspring spyware
N	Tablet	Tablet.exe	Loads the tablet drivers for the Wacom Graphics Tablet. This can be unchecked in msconfig without problems if you don't need the tablet functional all the time. Create your own shortcut if you need to run it ad hoc. If you forget to run it before running Paint Shop Pro & Adobe Photo Shop) you may find the following: (1) Paint Shop Pro (version 7.04) - (a) Browse function will NOT work (program freezes) (b) On program exit, PSP does not terminate (you have to CTRL+ALT+DEL to close it) (2) Photo Shop (version 6.01) - (a) Program functions slowdown (d) On program exit it takes noticeably longer to shut down (like 30-45 seconds)
Y	TabUserW	TabUserW.exe	Wacom pen tablet driver
N	Tad	tad.exe	From Turtle Beach's Santa Cruz on a Dell WinME system. Not required - works fine without it including keyboard hot controls for volume and mute
?	TAG	tag.exe	??
N	Tahni Deskmate	Tahni.exe	Tahni Deskmate - "Interactive cartoon character that lives on your Windows desktop"
N	TalkingReminder	TALKINGREMINDER.EXE	Talking Reminder from Software River Solutions - talking calendar reminder
?	talknow	talknow.exe	Could it be related to this or something similar?
?	Tango	Setup.exe	Tango Broadband access software. Is it required?
?	TangoManager	TangoManager.exe	Tango Broadband access software. Is it required?
X	Tapicfg	Tapicfg.exe	CoolWebSearch parasite related
U	TapiTNA	TapiTNA.exe	Telephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys
U	Tardis	Tardis.exe	Tardis - time synchronization software
X	Task Bar	TASKBAR.EXE	Added as a result of the FRETHEM.J VIRUS!
?	Task BarClient	TaskBarClient.exe	Responsible for creating the System Tray icon and associated display system for the Starband satellite always on internet service
?	Task BarSvr	TaskBarSvr.exe	Part of the Starband satellite always on internet service. Not included on the current system. What does it do and is it needed?
N	Taskbar	Taskbar.exe	Taskbar icon for the Redline RegTweak overclocking program as supplied with Sapphire ATI graphics cards
N	Taskbar Display Controls	RunDLL deskcp16.dll, QUICKRES_RUNDLLENTRY	Only appears in MSCONFIG if you have a Display Settings icon in the System Tray allowing resolution changes on the fly. Can also be disabled under Control Panel -> Display -> Settings -> Advanced -> General. Also appears if you have Win95 with the QuickRes "Powertoy" installed
X	TaskMan	rundll32.exe	Added as a result of the DVLDR VIRUS! Note - this is not the valid "rundll32.exe" as it's in the Windows\Fonts directory
X	taskmanager	taskmgr.com	Added as a result of the BEREB VIRUS!
X	Taskmgr	Taskmgr.exe	System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory
X	Taskmgr	tskmgr32.exe	Homepage hi-jacker
N	taskmgr.exe	taskmgr.exe	Windows Task Manager in Windows XP. If run from the Startup folder, the tray icon will be put to the system tray after boot. Useful to check if XP has finished running the delayed services after boot. Available via a desktop shortcut
X	taskmngr lptt01 or taskmngr ml097e	taskmngr.exe	Variant of the RapidBlaster parasite (in a "Taskmngr" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	TaskMon	taskmon.exe	Added as a result of the MYDOOM.A VIRUS! Note - this is not the valid Win98/Me file of the same name which resides in C:\Windows as this version resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). It is not normally on a WinXP system
U	TaskMonitor	taskmon.exe	The Task Monitor checks the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors (per Symantec's Knowledgebase)
N	TaskPlus	TASKPLUS0.EXE TASKPL~1.EXE	Task and calendar management software available as freeware or as a "Professional" version for sharing over a LAN
X	TaskReg	<filename.exe>	Added as a result of the CBLAD VIRUS! <filename.exe> is the full path and name of the infected file
X	Taskschd	TRAYWND.EXE	Added as a result of the LITMUS.002 VIRUS!
N	taskswitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
X	tasksys	tasksys.vbs	Added as a result of the BYRON VIRUS!
N	Tasktray	CTLTray.exe	Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a systray icon.  Also allows you to launch the Taskbar via right-click -> Show Taskbar. The tasktray can be accessed via Start -> Programs -> Creative -> Sound Blaster Audigy -> Taskbar
X	tat	tatss.exe	Adware based media viewer by The Delfin Project
Y	Tau monitor	Taumon.exe	"Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system."
U	TBC Pro	tbcpro.exe	TitleBarClock Pro - displays Day, Time, Date, Month, Year, FreeMem, and FreeDriveSpace on the right side of the title bar in any main window that has the mouse or keyboard focus
N	tbctray	tbctray.exe	Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
Y	TBLFUNC	tblmouse.exe	Aiptek HyperPen driver
U	TBPanel	TBPanel.exe	Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
N	TBTray	tbtray.exe	VLSI/QSound ThunderBird PCI Control Panel. System Tray access to the settings for this and related soundcards. Available via Start -> Settings -> Control Panel
?	TB_setup	TB_ANI~1.EXE	??
X	TB_setup	tb_setup.exe	HuntBar parasite toolbar installer
Y	tcactive	tca.exe	Part of The Cleaner from MooSoft - stops virus trojans before they can do any damage
N	TCAUDIAG -off or TCASUTIEXE	tcaudiag.exe	Associated with the 3COM diagnostic module (3COM NIC Doctor).  No further information is available
?	TCDPbtn	TCDPbtn.exe	Found on a Toshiba laptop
?	TCDPlay	TCDPlay.drv	Found on a Toshiba laptop - sounds like the driver for the CD-ROM but why doesn't it use the standard Windows drivers - any comments?
U	TClock	TCLOCK.EXE	Kazubon TClock. Utility that amongst other things synchronizes your system clock with Internet time servers. Available via Start -> Programs
U	TClockEx	TCLOCKEX.EXE	Puts a configurable time/date display in the tray (and other features). Freeware by Dale Nurden and is popular on cover disks
U	tcmonitor	tcm.exe	Part of The Cleaner from MooSoft - warns of changes to the registry
?	TDispVol	TDispVol.exe	??
U	TDKSTART	TDKSTART.EXE	Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW.
N	TDKTASK	TDKTASK.EXE	Taskbar utility for a "control panel" for a CD-RW
?	TDockNUndock	N/A	Found on a Toshiba laptop - for use with a docking station?
?	TDspOff	Tdspoff.exe	Found on a Toshiba laptop
N	Teach In Box	teachbox.exe	Tutoring program that comes with a SystemAX Computer
Y	Tech-In-A-Box	techbox.exe	Tech-in-a-Box "provides easy-to-use tools for various system maintenance tasks. From backup and restore to diagnostics and repairs, Tech-in-a-Box is your tool to stay up and running"
N	Telemeter 3.0	telemeter3.exe	Internet connection bandwidth meter from a user ISP
Y	Telepath	telepath.exe	Drivers for the WinModem versions of the US Robotics "Telepath" series - as supplied to Gateway for instance. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
X	Tencent QQ	Rund1132.exe qq.dll, Rundll32	Added as the result of the QQPASS.F VIRUS!
X	Terminate Popup	FPUK.exe ZPU.exe	Free Popup Killer - foistware proven to install the Regsvc32 homepage hijacker.  Also see here
U	TEscKey	TEscKey.exe	Toshiba Escape Key handler. Enables you to program and use the <FN><Esc> key combination to perform a specific function
?	Tesla	TESLA.EXE	??
?	TExBUtil Registry	TExBUtil.exe	??
N	TextAloud	TextAloudMP3.exe	TextAloud MP3 - convert text into spoken words and MP3s
N	Textbridge Instant Access OCR	telepath.exe	TextBridge from Scansoft. OCR (optical character recognition) software for scanning documents into popular editing applications. Available via Start -> Programs
U	TFncKy	TFncky.exe	Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
U	TFNF5	TFNF5.exe	Toshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5>, a window appears showing the displays that can be chosen – LCD, LCD + CRT, CRT, TV
Y	tfswctrl	tfswctrl.exe	Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
X	TFTP###	tftp###	Added as a result of the SPYBOT VIRUS! where # can be any number
U	TFunckey	TFuncKey.exe	Deals with the <Fn> - <Function> key combinations on a Toshiba laptop
N	TgAddServer	tgfix.exe	Software from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba (Virtual Tech)) and ISPs (such as Comcast, Cox and Charter (Pipeline Support Agent)) that allows them to offer on-line support - to update drivers, fix faults, etc. Can cause a deterioration in a PC's peformance (see here). This part does the protection and "self-healing". Uninstallation is recommended by most people - especially for System Restore users (WinME/XP). If not available via Add/Remove, Charter offer some uninstallation instructions involving a registry patch that you may be able to modify for your proivder or try here
U	Tgcmd or tgcmdprovidersbc	tgcmd.exe	See above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. "tgcmdprovidersbc" is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation
N	TGCMG	??	Related to Rogers@Home, causes errors in WinSock32.dll. Not required for connection to work
X	TGDC IE Plugin	tgdc.exe	ShopForGood spyware - see here
X	tgkill	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
U	Tgsetsite	tgfix.exe	See TgAddserver and Tgcmd above. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation
N	Thdetrf	thdetr32.exe	Appears to be related to Lycos advertising
U	The Easy Bee\'s Hive	ATCEgSvr.exe	The Easy Bee is a software that allows you to record Internet navigation sequences, which can include form filling and button clicking and to attach a replay schedule to each sequence
?	TheMainStart	N/A	??
U	THGuard	TH_Guard.exe	Resident memory scanning for TrojanHunter
X	This is a virus, please delete it	bigbadvirus.exe	Added as a result of the RANDEX.F VIRUS!
U	THOTKEY	THotkey.exe	Associated with the Fn+ keys on Toshiba laptops. When disabled some keys still worked, like the one that regulates the volume of the system beep, but others didn't, like the one that immediately blackens your screen
U	ThrustTSR	TMTMTSR.exe	Thrustmaster Thrustmapper. "The Thrustmapper - t-mapper - icon sits on your taskbar and automatically detects when the joystick is plugged in and configures it accordingly"
U	TiADSL	tidslmon.exe	Actiontec DSL modem. Associated with High Speed AOL DSL. Used to get line sync with the Actiontec DSL USB Modem. Available via Start -> Programs
X	Tiger	Shine.exe	Added as a result of the HAPPYLOW (or NISHE-A) VIRUS!
X	Time Zone Synchronization	wscript zshell.js	Added as a result of the NETDEX-A VIRUS!
N	TimeCalendar	tc.exe	TimeCalender - calendar reminder
N	Timed Backups Manager Startup	BACKTIME.EXE	Backup Plus - backup software
N	Timemanager.exe	Timemanager.exe	Easy to use program for recording how you spend your time, designed to help you in billing multiple clients
N	TimeOnline	TIMEONLINE.EXE	Lightman Groups's TimeOnline monitor. For dial-up users to monitor time spent on the net. Available via Start -> Programs
X	TimeSink Add Client	TSADBOT.EXE	Advertising spyware
N	TimeUp	Timeup.exe	TimeUp - internet online timer
N	TINTSETP	TINTSETP.EXE	Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
Y	Tiny Personal Firewall	persfw.exe	Tiny Personal Firewall
U	tinySpell	tinyspell.exe	Tinyspell - "allows you to easily and quickly check the spelling of words in any Windows application. Monitors your typing on the fly, alerts you whenever it detects a misspelled word, and checks the spelling of every word you copy to the clipboard"
U	TiomanExe	Tioman.Exe	Agate Tioman - warm and hot swap removable bay device manager for IBM laptops
N	Tips	mousetips.exe	Suggests tips on using your mouse
U	TiTleBarClock	TiTleBarClock.exe	TitleBarClock displays the day/month/time and free physical RAM on the right hand side of an open window, replacing the system tray clock at startup
N	Tivoli	LCFEP.EXE	Tivoli ‘TME’ System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally"
N	TkBellExe or TkBell.Exe	evntsvc.exe realsched.exe tkbell.exe	Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK
N	tkonnect	TKONNECT.EXE	Dialer for the Tiscali internet service provider. Available as a desktop shortcut
X	tlc	update911.js	Hijacker installer
?	TlcR	avp.exe	??
U	TM Outbreak Agent	TMOAgent.exe	Trend Micro Internet Security anti-virus software virus outbreak warnings. Notifies users of virus outbreaks and offers to update the scanner
U	TMA distribution	cfinst.exe	Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
X	tmax	pupdate.exe	Adware pop-up generator
X	tmchook	tmchook.exe	Detected by Kaspersky as the TrojanDownloader.Win32.VB.aa VIRUS!
?	TMEEJME	TMEEJME.EXE	Found in a ToshibaTME3 directory. Toshiba Mobile Extension related?
?	TMERzCtl	TMERzCtl.EXE	Found in a ToshibaTME3 directory. Toshiba Mobile Extension related?
U	TMESBS	TMESBS21.exe	Toshiba Mobile Extension Selectable Bay Service for WinXP - support for docking stations. Not required if you don't use a docking station
?	TMESBS32	TMESBS32.EXE	Found in a ToshibaTME3 directory. Toshiba Mobile Extension related?
?	TMESRV31	TMESRV31.EXE	Found in a ToshibaTME3 directory. Toshiba Mobile Extension related?
U	TMExLogon	TMESRV.EXE	Toshiba utility related to inserting and removing a laptop from a docking station. Not required if you don't use a docking station
?	Tmmkb	Tmmkysvr.exe	Toshiba multi-media keyboard software - possibly including creating keyboard shortcuts?
U	TMOUSE	tmouse.exe	Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL + ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL + SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects, except disabling the scroll/zoom features of the AccuPoint
Y	tmproxy	tmproxy.exe	Trend Micro PC-cillin 2003 antivirus software
N	TMTMTSR	TMTMTST.exe	Installed with Thrustmaster game controllers. It launches the Thrustmapper utility. Not required if you install the "driver only" from Thrustmaster website
U	TNTClk	TNTCLK.exe	Overclocking program for TNT, TNT2, and other graphics cards. This program can overclock the graphics card manually after startup when needed, especially before starting a gaming session. However, for simplicity, it can be left checked to let it run once at startup to automatically overclock the graphics card. In this case, it doesn't even run in the background after doing its job
U	ToADiMon.exe	ToADiMon.exe	T-Online ISP software connection assistant
?	Tommorrow	tomorrow.exe	??
?	ToPassSrv	Pktopass.exe	Related to Caere Pagekeeper scanning software (now taken over by Scansoft), Disabling is known to cause problems
X	ToPicks Starter	Idhost.exe	ToPicks parasite related
X	topmoxie	JavaRun.exe	Marketing software from TopMoxie
Y	Toshiba Fan	fan.exe	Toshiba untilty to keep the fan on a laptop running if they fail to detect there is too much heat
U	Toshiba Key State	KEYSTATE.EXE	Displays an icon in the System Tray indicating the state of the CAPS LOCK key. Can be handy on (e.g., Toshiba) laptops which do not have a Caps Lock indicator light. Available via Start -> Programs
N	ToshibaPinger	pinger.exe	Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification. Disabling instructions here
U	TOSHIBSU	Toshibsu.exe	Reduces the power consumption when the laptop isn't being used to preserve battery power. Hibernate function doesn't work if this is disabled. Similar programs on other laptops reduce the processor clock rate, etc. Required if you run off battery regularly
U	TosHKCW	TosHKCW.exe	Toshiba Hot Key Change/Control Wireless. Permits you to use a hot key to activate/deactivate built-in 802.11b wireless transmission on a laptop (if installed)
Y	TosMem	tosmem.exe	Toshiba laptop related. Win98/Me ACPI system can not hibernate or go on standby if all of the physical memory lower than 640KB is locked. This utility allocates and locks three pages on boot and then releases them on standby/hibernation for ACPI.SYS in order to solve the above problem
U	TotRecSched	TotRecSched.exe	Scheduler for Total Recorder - allows automatic recording of a show at a given time for later playback or you can use the scheduler as an alarm
U	Touch Manager	WinLED.exe	Dell keyboard utility. Disabling can result in loss of screen saver and power saver functionality
U	TouchED	TouchED.exe	TouchPad On/Off Utility on a Toshiba laptop
N	tour	regedit ..tour.reg	Edits registry values to keep the WinMe tour in Task Scheduler
N	Tour	wincool.exe	Component of WinME that's annoying as hell. Pop's up a prompt to play the C:\WINDOWS\Application Data\Microsoft\INTROCONTENT.HTA that plays a full screen version of the WinME product preview Windows Media video file that cannot be stopped to my knowledge until it finishes. That prompt will keep popping up after an install/reinstall of WinME until you give in and watch the thing. It also puts a task scheduler entry to run that annoying thing every 30 minutes, and don't bother deleting that entry, Windows puts it right back. Not only should you disable it from running, you should delete the thing altogether, as it, somehow can re-enable itself. Apparently you can try setting the file to read only
U	TP4EX	tp4ex.exe	Adds accessibility options for an IBM TrackPoint
?	tp4mon	tp4mon.exe	May be IBM Thinkpad mouse/trackpoint related, if so is it required?
U	tp4serv	tp4serv.exe	Supports the "pointer stick" on Thinkpads in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work
?	TP98TRAY or TPTRAY	TP98TRAY.EXE	IBM Thinkpad related utility. What does it do and is it required?
N	TP98UTIL	TP98.EXE	IBM Thinkpad feature setup & configuration utility
U	TpHotKey	TPHKMGR.EXE	Activates "ThinkPad Help" when the "Thinkpad key" is pressed on an IBM ThinkPad laptop. Also activates the audio buttons (volume up/down, mute) on models such as the Thinkpad T30
U	TpKmapMn	TpKmapMn.exe	Create Keyboard combinations for special Thinkpad buttons when using an external keyboard, e.g. "Ctrl-arrow up" for "volume up". Only required when using an external keyboard. Available via Start -> Programs
U	TPP Auto Loader	Tppaldr.exe	Installed with DataStor's (and some other manufacturers) USB 2.0 based external DVD, CD-ROM and CD-RW drives. System tray icon allowing the user to disconnect the external drive without an error message being displayed
U	Tprtray	Tprtray.exe	Displays the Power icon in the System Tray on a Toshiba laptop
N	TPTray	TPTray.exe	Touchpad configuration tray icon for Toshiba laptops. Available via Start -> Settings -> Control Panel
?	TPwrMgr	TPwrMgr.exe	Found on a Toshiba laptop. Related to power management?
Y	TPWRTRAY	Tpwrtray.exe	Toshiba laptop's own Advanced Power Management system which disables Windows APM (greyed-out in Control Panel). You can't choose which of the 2 systems to use
U	tqrecv	tqrecv.exe	Tellique satellite broadcast reception software
N	Traceless	launch.exe	Traceless 2003 - clear your cookies, temp directories and browser history with a click of a button. It also clears the recent documents and the IE drop down auto complete box
?	Tracker	Tracker.exe	Possibly associated with My Deluxe Invoices program
U	TrackpointSrv	daemon.exe tp4serv.exe	Supports the "pointer stick" in lieu of a mouse on an IBM ThinkPad laptop. Necessary for the "scroll" button to work
U	Tracks Eraser or Tracks Eraser Pro	te.exe	Tracks Eraser Pro from Acesoft - "Erases all tracks of your internet activity"
U	Transparent	TransparentW.exe TransparentD.exe TransparentB.exe	Utility to turn desktop icon text backgrounds transparent. The last letter defines the icon text color: D= as desktop, W=white, B=black. Available from here
U	TransparentIcons or tranicon	tranicon.exe	A Tweak-XP component (only in the registered version), makes Desktop icons transparent. Can be enabled/disabled via Tweak-XP -> System + File Tweaks -> Windows Tweaks -> Desktop Tweaks -> Make Desktop Icons Transparent
U	Trashgrd	TRASHGRD.EXE	Part of McAfee Nuts & Bolts. Protects all the files you delete, even files deleted in DOS or in 16-bit Windows applications, by sending them to the Recycle Bin
N	Tray Temperature	Weatherbug.exe	Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs
U	traydate.exe	TRAYDATE.EXE	Displays the date as well as the time in the System Tray. Available from TUCOWS
U	TrayManager	Trayman.exe	TrayManager hides system tray icons (FreeCell won't work when TrayMan is loaded)
U	Traymon	traymon.exe	Netropa Internet Receiver traymonitor. Will only launch the bar if you are connected to the internet and there's new news
N	TraySantaCruz	tbctray.exe	Provides quick access via a System Tray icon to the control panel for Turtle Beach's Santa Cruz or VideoLogic's SonicFury soundcards. Available via Start -> Settings -> Control Panel
N	TrayServer	TrayServer.exe	For monitoring tray icons
X	TrayX	winppr32.exe	Added as a result of the SOBIG.F VIRUS!
N	tray_helper	tray_helper.exe	Tray Helper is an Email checker with additional tools, including a popup window killer, pinger module to monitor hosts and an event reminder
Y	TrendMicro Antivirus	Aveagent.exe	Virus scanner
Y	TrendMicro OfficeScan NT	TMLISTEN.EXE	Virus scanner
X	Trickler	fsg.exe fsg-ag_3102.exe gain_trickler_3202.exe	Advertising spyware
X	trickler_bic_GatorDM_4010	trickler_bic_GatorDM_4010.exe	Advertising spyware
?	TridTray	TridTray.exe	System Tray access to Trident 4DWave soundcards?
?	TridTray	TridTray.exe	System Tray access to Trident 4DWave soundcards?
U	TrojanScanner	Trjscan.exe	Trojan Remover from Simply Super Software. Scans for an removes trojan viruses where anti-virus software may have not detected or removed
U	True Internet Color Icon	internetcolor.exe	Part of Colorific & 3Deep from LightSurf Technologies (nee E-Color). "With True Internet Color PCs can display the best color possible over the web. Enabled web sites will know how connected monitors display color and will send them color corrected images"
X	TrueFonts	fonts.hta	Browser hijacker - redirecting to Hugesearch.net
N	TrueSync Launcher	tstool.exe	Starfish TrueSync - for synchronization between Windows platforms and popular devices, applications and services
Y	TrueVector	VSMON.EXE	Even if you don't have ZoneAlarm or ZoneAlarm Pro run at start-up you do need this
X	TsAdbot	TSADBOT.EXE	TimeSink Add Client - advertising spyware
?	TSBxLogon	TMESBS2.EXE	Found on a Toshiba laptop. May be related to TMESBS?
X	tskdbg	tskdbg.exe	Added as a result of the FLOOD.E VIRUS!
N	TSMsger	TSMsger.exe	Epson scannner software - required for "one-touch" operation. Can be launched manually
?	TSPower	spower.drv	Found on a Toshiba laptop. Related to power management?
?	TSService	NSSERVICE.EXE	??
?	tsyssmon	tsyssmon.exe	Found in a Toshibasysstability directory
?	Tukati	TukatiRedistributor.exe	Tukati Digital Content Distribution. Is it required?
U	TuneUp MemOptimizer	memoptimizer.exe	Part of "TuneUp Utilities", specifically 2003 version. "Monitors and optimizes free memory in the background." Basically, it cleans RAM and also allows you to clear the clipboard
U	TurboExplorer	TE.exe	Web accelerator - "TurboExplorer® 2.x is a real-time web surfing accelerator specifically designed for Internet Explorer® 4/5 to achieve a faster and more effective approach to the internet". Only needed if you find it improves web browsing
U	TurboMemoryCharger	turbomemorycharger.exe	Some users swear by memory management utilities such as Turbo Memory Charger but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
N	TurboNote	tbnote.exe	Post-It's on your desktop. Available via Start -> Programs
U	TurboTop	TurboTop.exe	TurboTop - make any window "Always on top"
X	TVMD	tvmd.exe	Total Velocity - "Secure commerce company that enables the ‘checkout’ process for our customers in order to safely and securely purchase our award winning software". Autointsalling spyware
X	TVTMD	TVTMD.EXE	Total Velocity variant - autoinstalling spyware
N	TVWakeup	tvwakeup.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
?	Tvwatch	tvwatch.exe	Associated with the TV-oOut option on Asus AGP or Intel graphics cards. Is it required?
?	TWarmBay	N/A	Found on a Toshiba laptop. Related to hotswap bay management?
U	TWarnMsg	twarnmsg.exe	Toshiba System Warning Function for Windows 98, Me, 2000 - provides notification dialog when the cooling fan stops
?	TWBbtn	N/A	Found on a Toshiba laptop
?	TWBrowse	TWBrowse.drv	Found on a Toshiba laptop. Possibly related to TWAIN drivers (ie, scanners, etc) - see this?
?	Tweak Manager	WinManager.Exe	WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed?
U	Tweak UI	rundll32.exe tweakui.cpl, tweakmeup	Restores settings that can't be retained if you have Microsoft's Tweak UI "powertoy" installed
U	Tweak UI	rundll32.exe tweakui.cpl, tweaklogon	Automatically logs you on if you have Microsoft's Tweak UI "powertoy" installed
U	Tweak UI	RunDLL32 tweakUI.DLL, TWEAKUI /tweakmeup	Added as a result of the SUBWOOFER VIRUS! Note - the real Tweak UI entry for this is "rundll32.exe tweakui.cpl, tweakmeup"
U	Tweak-Me	TWEAK-ME.exe	3rd party version of Miscrosoft'sTweak UI "powertoy" with many more options and controls (plus full support), designed specifically to take advantage of features in WinMe/2K and above, available from here
U	Tweak-xp	Tweak-xp.exe	Main program for Tweak-XP - a WinXP tweaking utility
U	TweakDUN	tweakdun.exe	Utility to optimize your Internet Browser Software. TweakDUN promotes faster Internet data transfer rates and faster downloads by eliminating fragmentation of data packets
?	tweakico	tweakico.exe	May be a HP program to control their icons?
N	TwkSCardSrv	SCardS32.Exe	Used with Towitoko SmartCard Readers for card recognition
X	Twunk_64	twunk_64.exe	System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory
N	type32	type32.exe	For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings. Not required unless you have changed them
N	TypingSatellite	KBOOST.exe	Typing Master 2002 background utility that collects typing errors and builds up customised typing lessons for your needs. Available via Start -> Programs
U	UBSShell	UBSShell.exe	UBS (United Bank of Switzerland) banking software
N	UC_SMB	ucstart.exe	Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed
N	uc_start	ucstartup.exe	Auto updater feature for IBM machines that tries to connect to IBM to see if there are any new drivers, patches and etc
U	UD Agent	UD.EXE	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
U	Ueproc32	UEPROC32.exe	Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions
?	ugon	aockstrs.exe	??
N	Uidler	Uidler.exe	Uniloc Titlewave Browser used with some shareware
N	UIWatcher	UIWatcher.exe	Ashampoo Uninstaller Suite - installation watcher. Available via Start -> Programs
X	UKVideo2	ukvideo2.exe	Adult content dialler
N	Ulead Photo Express x.0 Calendar	calcheck.exe	Ulead Calendar Checker - part of Ulead Photo Express, where "x" represents the version number. Automatically replaces your calendar desktop wallpaper on a weekly/monthly/yearly basis if you've created them. Not required - change them manually. See here for disabling instructions
N	UltimateZip Quick Start	uzqkst.exe	UltimateZip - file compression utility
N	Ultra Hal Assistant 4.5 Startup	HalAsst.exe	Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion
X	Ulubione	sys****.exe	Search Hijacker, redirecting to maxxxhosters.com - where **** are random characters
N	UMAX VistaAccess	vsaccess.exe	VistaAccess gives you quick and easy access to scanning functions right from your desktop
U	UMonit	umonit.exe	Alerts when USB device is plugged in
Y	umxagent	umxagent.exe	Tiny Personal Firewall V4 - main engine
Y	umxldra	umxldra.exe	User mode executive module DLL loader - part of Tiny Personal Firewall V4
Y	UMXLDRW	UMXLDRW.exe	Tiny Personal Firewall (pre V4)
X	Uninstall####	upd.exe	Adult content based screen saver where #### can be any number
N	UninstallAbility	uability.exe	UninstallAbility uninstaller
U	UniSc	Unisc.exe	McAfee UnInstaller
?	uniucu	uniucu.exe	??
Y	untray	untray.exe	Part of Command AntiVirus
N	uoltray	exec.exe	Netzero free ISP software - not required
X	Update	<original file path>	Added as a result of the LYNDEGG VIRUS!
X	Update	CDUpdater.exe	"Carpe Diem" adult premium rate dialler related
?	Update for Works	MSWkstz.exe	Maybe related to later versions of MS Works?
N	Update Grokster	WiseUpdt.exe	Automatically updates the Grokster file sharing software. Beware of adware and spyware when using this type of program, for instance, Grokster contains CyDoor
X	Update Install	Schost.exe	Added as a result of the GAOBOT.AO VIRUS!
?	Update local	SetCPQLC.exe	Running on a Compaq desktop. Any ideas?
Y	Update Service	Update.exe	Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is run so best to leave it enabled. Prevent it dialling out via a firewall
?	Update TUT	WiseUpdt.exe	??
X	UpdateComponent	CNF UPD.EXE	Added as a result of the SPYBOT.GEN VIRUS!
?	UpdateFW	fwdload.exe	Appears to be firmware update software for a Network Associates ATMbook OC-3 SMF Interface Module?
?	UPDATEHOOK	Rundll32.exe	??
X	UpdateMedia	UpdateMedia.exe	MediaUpdate foistware
N	updatemgr.exe or UPDATE~1	updatemgr.exe UPDATE~1.EXE	Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Can go to http://www.earthlink.net and download the updates manually
X	updater	wupdater.exe	eUniverse KeenValue parasite related
?	updater	updater.exe	??
X	updater32	winload32.exe	Added as the result of the CULT.M VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor
X	Updates	msupdate.exe	CoolWebSearch parasite related
N	Updates from HP	backweb*****.exe	Automatically detects an internet connection and downloads any available updates - * is random digit
N	Updatestats	Updatestats.exe	Statblaster - "Get officially liscensed MLB pitch-by-pitch real time updates from every stadium around the league. StatBlaster provides live streaming statistics for each fantasy matchup you want tracked either in one league or across all your leagues"
?	Updatewiz	updatewiz.exe	??
N	Updmgr	updmgr.exe	It's an auto-updater bundled with Kazaa that starts every time you try to connect to the internet
N	UpdReg	Updreg.exe	Reminder to register Creative Labs SoundBlaster Live! cards
N	UpdSys	<random filename>	Added as a result of the BJ VIRUS!
Y	UPS	ups.exe	PowerChute v5.02 - UPS Monitoring Module (which loads iconclnt - the tray icon)
Y	UPSentry 2000 or UPSlim	upsd.exe	Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss
X	UPSUtl	web.exe	CoolWebSearch parasite variant
U	Uptimer4	Uptimer4.exe	Uptimer4 is an appbar which displays time, date, uptime, free ram, free pagefile, cpu usage, disk free space, battery power, IP addresses, TCP throughput, list of running processes, netstat and several more things
X	UpToDate	uptodate.exe	BrowserAid/BrowserPal foistware
?	URLLSTCK.exe	UrlLstCk.exe	Norton Internet Security 2004 related. What does it do and is it required?
N	URLMAP	Urlmap.exe	Installed by MS Money, and runs whenever you start IE. All it does is bring up an annoying sidebar (kind of like the search window) with 'financial links' when the web page supports it
Y	UrtSvcExe	Urt95Svc.exe	"Cisco Secure URT is a virtual LAN (VLAN) assignment service that enhances LAN security by actively identifying and authenticating users and then associating them only to their specific network services and resources"
?	Usb	Usb.exe	HP related - not sure whether it's required
?	USB Hub Keyboard Patch	SKBPATCH.EXE	USB HUB Update
U	USBDetector	USBDetector.exe	USBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware
U	USBMMKBD	usbmmkbd.exe	USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version (available here) no longer pings a server when on-line wheras the older version did but did not transmit any user information
N	USBTA	usbtapnp.exe	System Tray access for the BeWAN Gazel 128 USB ISDN adapter
X	User23.exe	DIAL.exe	This is a trojan trying to disguise itself as User32.dll
X	User32	<filename>	Added as a result of the NETTRASH VIRUS!
X	ushli	sscbltqu.exe	Obtained from an MP3 search list site. Also generates random processes on reboot
N	Usrobotics Online Registration	??	Pop-up reminding customers to register their products online at US Robotics
?	USRSTA	USRSTA.exe	Wireless Card controller. What does it do and is it required?
N	USSShReg	USSSHREG.EXE	Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers
?	Utility Ping	UTILIT~1.EXE	??
N	UtilityPro	UtilityPro.exe	IE search toolbars as supplied by people such as Yellow Internet and SearchBoss and written by Rawhide Search Solutions
Y	UTILsInst	N/A	For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
N	Utopia Angel	Angel.exe	Calculator for the online Utopia game
U	V.92 Modem On Hold	Ltmoh.exe	Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet
Y	V128IID	Rundll32.exe v128iitw.dll, STB_InitTweak	Loads drivers for some STB graphics cards such as the STB nVIDIA TNT 16MB. Required if you don't want to experience lock-ups or error messages
?	V128IITV	??	Loads drivers for some STB graphics cards. May be related to such a card with a TV out option?
?	V66SHELL	V66SHELL.EXE	It looks to be part of the display driver set for ASUS V3800, V6600 and V6800 display adapters. Probably a system tray quick access control?
U	va10key	va10key.exe	Only required if you use the 10 kay bay unit with a Sony Vaio laptop
Y	VAGCtrl	VAGCTRL.EXE	Vexira Antivirus - virus scanner from Central Command
Y	VAGuard	VAGNT.exe	Vexira Antivirus - virus scanner from Central Command
U	VAIO Action Setup (Server)	VAServ.exe	Sony Vaio utility that auto-launches selected applications when you plug in a digital video camera, digital still camera, etc. via iLink (FireWire) or USB
?	VAIO Recovery	PartSeal.exe	Associated with Sony VAIO PCs. What does it do and is it required?
X	VbouncerDL	VBouncerInnerxxxx.exe	Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here and here. "xxxx" represents 4 random numbers
X	VB_run	comctl_32.exe	Dubious downloader from densmail.com
N	VC5Play	VC5Play.exe	Virtual CD drive emulator - version 5. Available via Start -> Programs
X	VCatch	Vcatch.exe	CommonSearch Vcatch - "antivirus" software which actually bundles spy/adware itself!
X	VCatch Premium	VCatchpre.exe	VCatch antivirus. Considered spyware itself - see here
N	VCDPlayer	VCDPlayer.exe	Virtual CD drive emulator. Available via Start -> Programs
N	vcdplayx	vcdplayx.exe	CD emulation part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically
U	VCDTower	VCDTower.exe	Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking
?	VCDWATCH	VCDWATCH.EXE	Confirmed as Voyetra CD Watcher as it was found in a Compaq/Voyetra/AS2 directory but what does it do?
N	VCSPlayer	vcsplay.exe	Virtual CD drive emulator. Available via Start -> Programs
?	VDI Manager (HP)	HPO0VDX05.exe	HP (Hewlett-Packard) related. Now - what does it do?
N	vdtask	vdtask.exe	Program part of GameDrive & VirtualDrive from Farstone. Not required as starting these programs load this automatically
N	Vegas Palms - Launcher	Launcher.exe	Vegas Palms on-line cassino
N	Verizon Control Pad	cpad.exe	Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience
U	Verizon Online Support Center	matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Verizon Online Support Center is required to run with the Help and Support program. If you uncheck Verizon Online Support Center and and then run help and Support it will add another Verizon Online Support Center in the startup menu. If you remove the Verizon Online Support Center in the add/remove program some help menus in help and support will not be available. You decide
U	versato	versato.exe	"Hot" button (such as volume and browser control) management and a CD player as supplied with QTronix (as possibly Micro Innovations) keyboards
X	Version	Version.exe manage.exe	JRAUN adware variant
Y	Vet Alert	vetmsg9x.exe	Computer Associates "InnoculateIT" and Vet Anti-Virus virus software
Y	Vet Start Up	vet98.exe vet32.exe	Computer Associates "InnoculateIT"  and Vet Anti-Virus virus software. This option will slow down your system, if set too aggressively. There is no need to scan every file when opened, closed, etc. Check in InoculateIT PE options
U	VetTray	vettray.exe	Computer Associates "InnoculateIT"  and Vet Anti-Virus virus software. System Tray quicklaunch access, not really necessary but only occupies 36k resources
X	Vidcompat	Vidcompat.exe	Added as a result of the GEMA VIRUS!
X	Video Manager	videomgr.exe	Added as a result of the PANDEM.C VIRUS!
X	VideoDriver	<filename>	Added as a result of the GSPOT20.A VIRUS!
X	VideoDriver	videodrv.exe	Added as a result of the MIMAIL.A VIRUS!
X	VideoDriver	gspotbot.exe	Added as a result of the SPIGOT.C VIRUS!
N	VidSvr	vidsvr.exe	MS WebTV for Windows Channel Guide. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
X	vietato.exe	vietato.exe	Adult content dialler
?	Vinny	??	??
U	Virtual Access Scheduler	VASCHD32.EXE	The scheduler for mail and usenet tool
X	Virtual Bouncer	VirtualBouncer.exe	Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here and here
N	VirtualDrive	VDTask.exe	VirtualDrive from Farstone - virtual CD drive emulator. Available via Start -> Programs
X	Virus Scan	virscana.exe	Added as a result of a VIRUS!
X	VirusCheckII	AVIRCHK.EXE	Added as a result of the DASMIN VIRUS!
Y	VirusScan Online	mcvsshld.exe	McAfee VirusScan On-line. See also McAgentExe
?	VirusScanMSC	VsStat.exe	Part of McAfee VirusScan. System Tray application as with previous versions (were also VsStat.exe), McAfee SecurityCenter integration or something else? Is it required?
X	Virus_Scanner	Virus_Cleaner.exe	Added as a result of the PANOL VIRUS!
N	visionGS	VISIONGS.EXE	visionGS webcam software
N	Vistascan	vistascan.exe	Included in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users, you'll see a scanner icon in the Windows Tray of the Taskbar. Click this icon and a menu opens
X	VividGalut	VividGalut.exe	Adult content related web downloader
Y	VMDFW	vmdfw.exe	VirusMD Personal Firewall
X	VnCplUpdate	msdm.exe	Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory
U	VOBID	InstantDrive.exe	Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer’s hard drive. Part of InstantCD/DVD burning software
Y	VOBRegCheck	VOBRegCheck.exe	Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
U	VoodooBanshee	rundll32.exe 3DBBps.dll, BansheeLoadSettings	Loads the configuration settings for a 3dfx Voodoo Banshee chipset based graphics card. If you change some of the settings from default you probably need this - otherwise maybe not
?	voowsmcr	huhdir.exe	??
N	Vortex Tray	asp4setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N	VortexTray	au30setp.exe asp4tray.exe asp4setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
N	VoyetraTray	vtray.exe	This provides an abbreviated Control Group for the Turtle Beach Montego II sound functions/associated with AudioStation 3 and 32
U	Vpop3 Mail Server	vpop3.exe	Mail server from Paul Smith Computer Services. Runs in system tray to collect mail. Can be run from a shortcut and if it isn't running then it won't get your email!
U	vptray	vptray.exe	System Tray icon for Norton Anti-Virus Corporate Edition. Gives access to the options available and may not be required. Some users may have problems - refer here
Y	VS.VSN		Part of eSafe antivirus "SmartScan" - alerts the user if files have been changed/added
X	vscanner	spooll32.exe	Added as a result of the OPTIXPRO VIRUS!
N	VsEcomrEXE	VSECOMR.EXE	From McAfee VirusScan up to version 4.x. This executable is responsible for the periodic "update" prompts
Y	Vshwin32EXE	VSHWIN32.EXE	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start -> Programs
Y	VSOCheckTask	MCMNHDLR.EXE	Part of McAfee's SecurityCenter and Virusscan Online. Must be enabled for scanning to work
N	vspdfprsrv.exe	vspdfprsrv.exe	Visage PDF Printer
Y	VsStatEXE	VSSTAT.EXE	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Communicates between VSSTAT.EXE and the VShield System Scan module. Can be started automatically or available via Start -> Programs
N	vTPass	vtpassld.exe	Part of vTrails - a live media delivery solution. vTPass is the driver enabling the system to work. If unavailable via Start -> Programs, create your own shortcut for the "vtpass.exe" file
N	vTunerStartUp	vTuner.exe	vTuner - "an easy way to find and listen to radio and TV broadcasts over the Internet"
X	w32alanis	mope.scr	Added as a result of the SINALA VIRUS!
X	W32Load	<random filename>.scr	Added as a result of the CASPID VIRUS!
X	w32sup	w32sup.exe	Adult content dialler
X	W32Tc	WTC32.scr	Added as a result of the VOTE.D or VOTE.K VIRUSES!
X	W3KNetwork	rundll32.exe w3knet.dll, dllinitrun	Advertising spyware. Check here for more info on this particular one
Y	W75P2PSERVER	W75P2PS.EXE	Printer utility which is required in order to make the printer work correctly
Y	WanMPSvc	WanMPSvc.exe	An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling AOL doesn’t help
N	war-ftpd.exe	WAR-FTPD.EXE	War FTP Daemon from JGAA's Internet - FTP client
X	Wardo	syslaunch.exe	Added as a result of the ADLCICKER.G VIRUS!
U	Warner	warner.exe	Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files
U	Warnet	warnet.exe	Warnet - system cleanup software
U	Warning: do not remove it!	fpplock.exe	Part of Folder Password Expert by ZQS Software Team - "a software program to restrict access to the folders that contain your sensitive data"
N	WARSVR	war-ftpd.exe	"War FTP Daemon - the original free FTP server for windows"
N	Washer	washer.exe	Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
N	Washerie.exe	washerie.exe	Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available via Start -> Programs
N	washindex	washidx.exe	Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
N	Watch	watch.exe	Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted
?	Watch	1200UBWATCH.EXE	??
N	Watch Dog Program	watchdog.exe	For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do
N	Watchdog	Watchdog.exe	Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, but not required as they give instructions on removing it on their webpage
N	WaveTop Launcher	WaveTop.exe	WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98
N	WaveTop Receiver 1	N/A	See above
N	WaveTop Receiver 2	N/A	See above
N	WaveTop Upload Manager	N/A	See above
N	Wbiff	Wbiff.exe	Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received
N	WCESCOMM	WCESCOMM.EXE	Active sync for use with Windows CE based palm PC
N	wcmdmgr.exe	wcmdmgr.exe	It will periodically contact Wild Tangent servers to see if an update is available for your system and allows us to make the product exceptionally reliable. You can control its behavior, or disable it completely, inside your Windows Control Panel. Note that Wild Tanget's privacy policy states they also collect and share individuals information
U	wcmdmgrl	wcmdmgrl.exe	Checks for periodic updates of Wild Tangent Web Driver over the web. A multimedia extension/plug-in. Note that Wild Tanget's privacy policy states they also collect and share individuals information
U	WCOLOREAL	coloreal.exe	Makes colours sharper and brighter, but will only work with coloreal capable monitors
X	WDInfo	wdinfo.exe	Adult content dialler
X	wdwctrl	wdwctrl.exe	Added as a result of the DLUCA.R VIRUS!
N	WEATHER	WEATHER.EXE	Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs
N	WeatherCast	Weather.exe	Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight
N	WeatherWatcher	ww.exe	WeatherWatcher - weather reporting in the System Tray
?	Web Search	??	??
Y	web3trap	web3trap.exe	PC-Cillin 2000 anti-virus software -> ActiveX filter. Guards against malicious ActiveX programs, etc
X	webalize	webalize.exe	Searchcentrix hijacker
X	webassist	webassist.exe	Adware popup generator
?	Webcam Go Sti Service Application	wbcgosvc.exe	Control software for the portable Creative Video Blaster Webcam Go digital camera/PC web cam. What does it do and is it required?
N	WebcamRT.exe	WEBCAMRT.exe	For Logitech Web Cams. Not required - camera works fine without it
X	Webcelerator	webcel.exe	Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Spyware and troublesome - see here
X	Webdav.exe	webdav.exe	IRC DDoS bot which gives the hacker full control over your system
X	WebHancer Agent	whagent.exe	System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here
X	webHancer Survey Companion	whSurvey.exe	WebHancer foistware - traffic measurement service that uses a client agent that is stealth installed on user machines, gathering detailed data about sites visited, their performance and, most important, what the user actually does while there
?	WebInstall	WebInstall.exe	??
X	WebInstall2	INS????.TMP	Left over from a failed install of Movie Networks, ie, if it is already installed
N	WebKey	WebKey.exe	WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet
N	WebOutfitterTray	sttray.exe	Intel WebOutfitter service System Tray icon
N	Webposition Gold 2	wpsche~1.exe	Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines
U	websaverlive	websaverlive.exe	WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle
X	WebScan	DEFSCANGUI.EXE	Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware in itself - see their privacy statement here
Y	WebScanX	WebScanX.exe	From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc
X	websearch	wjview ...websearch.exe	"Web Savings" From Ebates Software, a shopping tool that opens pop-up windows
?	WebServer	VBI_SE~1.EXE	Related to a Pinnacle sound card. What does it do and is it needed?
N	Webshots	Webshots Tray.exe websho~1.exe	Screensaver program that automatically downloads from the webshots web site
Y	Webtrap	webtrap.exe	Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating
U	WebWasher	wwasher.exe	Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs
N	Welcome	Welcome.exe	Launches the Welcome to Windows tutorial on boot up
?	WEPstat	Wepstat.exe	Cisco Aironet 340 Series PC Card driver. If it can be started manually it shouldn't be required if you don't use the PC card facility regularily - hence the status could be "U". Can anybody confirm this?
N	WetSock	wetsock.exe	RoboMagic Wetsock - weather reporting in the System Tray
N	WFGStartup	WFGStartup.exe	World Weather. "This midlet displays the current weather conditions for major cities around the world. This version is for memory limited mobile phones"
U	wfips	iphider.exe	ICQ (messaging/chat program) anti-bomb software. "WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed." For more information about ICQ bombs see here
N	WFXCTL32.EXE	WFXCTL32.EXE	From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y	wfxsnt40	wfxsnt40.exe	WinFax 10.0 and maybe earlier versions. The program that opens the port for WinFax and not normally in the start menu. Needed if you want to run WinFax
?	WFXSwtch	WFXSWTCH.exe	Related to WinFax. What does it do and is it required?
U	WGWLocalManager	WGWLocalManager.exe	Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so. It could be started by creating a shortcut, running it only when connecting to the internet. If internet is used often, it's recommended to leave it in startup so it starts with the system
X	whagent	whagent.exe	System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here
U	WheelMouse	4DMAIN.EXE	Mouse software for "Fellowes" Wheelman mouse. Has caused some users problems but shouldn't be needed if you don't use any enhanced features it may provide
U	WheelMouse	AMOUMAIN.EXE	A4Tech wireless mouse driver and utility - required if you use non-standard Windows driver features
X	WhenUSave	Save.exe	Rebranded version of SaveNow advertising spyware
X	WhenUSearch	Search.exe	WhenUSearch adware
X	Whvlxd	Whvlxd.exe	Added as a result of the W32.LXD.Mirc VIRUS!
N	WIAWizardMenu	RUNDLL32.EXE sti_ci.dll, WiaCreateWizardMenu	Still Image Class Installer - installed with a webcam
U	WildTangent Web Driver updater	wcmdmgrl.exe	Checks for periodic updates of Wild Tangent Web Driver over the web. A multimedia extension/plug-in. Note that Wild Tanget's privacy policy states they also collect and share individuals information
N	Wildwire Monitor	WWMon.exe	This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem
N	Willow Road	WillowRoad.exe	Willow Road Screen Saver
X	win	regedit -s ..win.dll	Added as a result of the SEEKER.K VIRUS!
U	Win Chimes	winchi~1.exe	WinChimes - enhancement software for the system clock that runs in the system tray
X	WIN HOST PROCESS	WIN HOST PROCESS.EXE	Added as a result of the KEYLOGGER.CLONE VIRUS!
?	win name	stat.exe	??
X	Win Server	winserv.exe	Added as a result of the IMISERV VIRUS!
X	Win Server Updt	wupdt.exe	Added as a result of the IMISERV VIRUS!
X	WIN-BUGSFIX	WIN-BUGSFIX.EXE	Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
X	Win2Drv	<worm filename>	Added as a result of the WINTOO VIRUS!
X	WIN32	WIN32.EXE	Added as a result of the RATEGA VIRUS!
X	win32	Shakira_1997_Part_1_.Mpeg_.scr	Added as a result of the MYLIFE.N VIRUS!
X	win32	Setup_32.exe WinSetup.exe	Added as a result of the EVILBOT.B VIRUS!
X	Win32	Win32.exe	Added as a result of the ISRAZ.A VIRUS!
X	win32	winsrv32.exe	Added as a result of the ADUENT VIRUS! Acts as a hi-jacker redirecting to Surferbar.com and adult content sites
X	Win32 Kernel core component	Kernel32.pif	Added as a result of the MOKS VIRUS!
X	Win32 Rundll Loader	Rundll32.exe	Added as a result of the SDBOT.A VIRUS! Note: Rundll32.exe is a valid Windows application called "Run a DLL as an App" and stored in the C:\Windows directory. The version created by this virus is saved in the C:\Windows\System directory
X	win32app	winpup32.exe	Added as a result of the ADCLICKER VIRUS!
X	Win32BaseServiceMOD	Wintask.exe	Added as a result of the NAVIDAD VIRUS!
X	win32clf	win32clf.exe	Added as a result of an unidentified VIRUS!
X	Win32DLL	Win32DLL.vbs	Added as a result of the LOVELETTER (I LOVE YOU) VIRUS!
X	Win32dll	Win32dll.exe	Added as a result of the BANPAES VIRUS!
X	Win32G	Kernel32.com Scandisk.com	Added as a result of the ESTRELLA VIRUS!
X	win32gb	win32gb.exe	All-In-One-Telcom (adult content dialler) variant
X	win32ini	systroy.exe	Added as a result of the IRC.ALADINZ.C VIRUS!
X	Win32R	Server.com	Added as a result of the ESTRELLA VIRUS!
Y	WIN32SL	Win32sl.exe	Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. The specific function of this is to load MIF's in order for Dell OpenManage Client to work
X	Win32system	<filename>	Added as a result of the DDV.B VIRUS!
X	win32us	win32us.exe	All-In-One-Telcom (adult content dialler) variant
X	win32_i lptt01 or win32_i ml097e	win32_i.exe	Variant of the RapidBlaster parasite (in a "win32_i" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Win386	Win386.exe	Added as a result of the GOSUSUB VIRUS!
X	Win386	sp32.dll	Homepage hijacker. Not a dll but a regfile in disguise
X	Win64 Compatibility Check	load win64.drv	CoolWebSearch parasite related
X	winactive	WINACTIVE.EXE	Active variant of LOP.com hijacker - see here
X	WinActiveJ	WinActiveJ.exe	Added as a result of the ROTARRAN VIRUS!
X	Winahlp.exe	Winahlp.exe	Added as a result of a variant of the VAGRNOCKER VIRUS!
X	winallap	winallap.exe	Added as a result of the DELF.E VIRUS!
X	winallapu	winallapu.exe	Added as a result of the DELF.E VIRUS!
X	Winamp	winamp.hta	Hijacker - re-directing to adult content sites. Note - this isn't the real Winamp below
U	WinampAgent or Winampa	WINAMPa.exe	Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs
X	Winapp	winpup32.exe	Produces popup ads to adult content sites
X	WinApp32	msapp.exe	Added as a result of the RSBOT VIRUS!
X	WinAuth	winlogon.exe	Added as a result of an unidentified VIRUS!. This is not the valid winlogon.exe as described here
U	WinBackup Scheduler	Wbsched.exe	LIUtilities WinBackup scheduler - backup software
U	WinBar	WinBar.exe	"WinBar is a free and compact program that lets you monitor your system and provides easy access to frequently used controls"
X	Winbed	winbed.exe	Hijacker
X	WinCheck	WinCheck.exe	Added as a result of the PWS-CY VIRUS!
N	WinDates	windates.exe	WinDates is a calendar, date organizer and event reminder program from Rockin' Software
X	Winde	winde.exe	Added as a result of the DLUCA VIRUS!
X	windir	winrun.exe	Added as a result of the WINBUR.B VIRUS!
X	Windll	Windll.exe	Added as a result of the TRYNOMA VIRUS!
U	WINDLL	WSYS.EXE	STARR key logger. "It logs almost everything that goes through the box. It logs all key strokes, all passwords transacted even if they weren't keyed in, all web sites visited, every program launched including the path to that program, and more"
X	windll	windll32.exe	Added as a result of the ASTEF or RESPAN VIRUSES!
X	Windll.exe	Windll.exe	Added as a result of the STEALER VIRUS!
X	Windll32	Windll32.exe	Added as a result of the MSNPWS VIRUS!
X	Windoes Kernel	kernel32.exe	Added as a result of the KICKIN.A (or CYDOG.C) VIRUS!
X	Window Loader	Dos32.exe	Added as a result of the GAOBOT.AO VIRUS!
U	WindowBlinds	wbload.exe	WindowBlinds from Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object Desktop. Required to restore settings if you use it. Available via right-click on the Desktop -> Properties -> Skins
X	WindowEnhancer	Winex.exe	SCbar foistware variant
U	WindowFX	wfxload.exe	Stardock WindowFX - "Allows you to add an unprecedented number of special effects to windows"
X	Windows	Kernel32.exe	Added as a result of the TENDOOLF VIRUS!
X	Windows	msdos98.exe	Added as a result of the PWSTEAL VIRUS!
X	Windows	Windows.exe	Added as a result of the KAZMOR, BOBBINS & ALADINZ.D VIRUSES!
X	Windows	explorer.exe	Added as a result of an unidentified VIRUS! Note - this is not the valid Windows Explorer (explorer.exe). It was found in the C:\Windows directory on a WinNT machine and the wheras the valid explorer.exe would be found in C:\Winnt
U	Windows Accelerators	setup.exe	KeySpy keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
X	windows auto update	penis32.exe	Added as a result of the BLASTER (or MSBLAST.A) VIRUS!
X	windows auto update	msblast.exe	Added as a result of the BLASTER.B VIRUS!
X	windows automation	mslaugh.exe	Added as a result of the BLASTER.E VIRUS!
X	Windows Backup Configuration	IEXPLORER.exe	Added as a result of the GAOBOT.AZ VIRUS!. Note - this is not the valid Windows Explorer which has the same executable name
X	Windows Baţlangýç Dosyasý	sistem.exe	Added as a result of the MUZK VIRUS!
X	Windows Config Loader	Wincfg32.exe	Added as a result of the SILVERFTP VIRUS!
X	Windows Configuration	wsys32.exe	Added as a result of the GAOBOT.FB VIRUS!
X	Windows Control	Control.exe	Browser hijacker. NOTE - On Win9x systems it will overwrite the Windows file of the same name in the Windows directory, so therefore it will be necessary to extract a fresh copy of the file from the Windows setup cabs!
X	Windows DLL Loader	RUNDLL16.EXE	Added as a result of the DOMWIS VIRUS!
X	Windows Explorer	<filename>.exe	Added as a result of the SDBOT VIRUS! Note - this is not the valid Windows Explorer (explorer.exe) which would only be in startups if you added it manually
X	Windows Explorer	Lsas.exe	Added as a result of the GAOBOT.AO VIRUS! Note - this is not the valid Windows Explorer (explorer.exe) which would only be in startups if you added it manually
X	Windows Explorer Shell	Winexec32.exe	Added as a result of the REDIST.B VIRUS!
X	Windows Explorer Update Build 1142	EXPLORER32.EXE	Added as a result of the KaZaA based KWBOT or KWBOT.Y VIRUSES!
N	Windows Eyes	??	For blind people, gives a voice description of items on the screen. Windows application which gives you total control over what you hear, when you hear it, and how you hear it. Available via Start -> Programs
U	Windows Guardian	thehel1iawgrd32.exe Fawgrd32.exe	Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes
?	Windows Help System	Help.pif	??
?	Windows Load	windows.com	??
X	Windows Loader	wstart32.exe	Added as a result of the GAOBOT.CA VIRUS!
X	Windows Management Instrumentation	mwd.exe	Added as a result of the GRAPS VIRUS!
X	Windows Manager	winmants.exe	Added as a result of the MANTAS VIRUS!
X	Windows mangement	winlogonn.exe	Added as a result of the RANDEX.FC VIRUS!
N	Windows Media Powerpoint Helper	NSPPTHLP.EXE	German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start -> Programs
X	Windows Media SP.2.37	<random filename>	Added as a result of the LEMIR.C VIRUS!
X	Windows MeTaLRoCk service	metalrock.exe	Added as a result of the TASTYRED VIRUS!
X	Windows Networking	winsys32.exe	Added as a result of the GAOBOT.FL VIRUS!
?	Windows Print Spooler	SCVHOSTS.EXE	Suspicious due to the similarity to the valid "svchost.exe" file
X	Windows Print Spooler	NavAgent32.exe	Added as a result of an unidentified VIRUS!
X	Windows Print Spooler	SVEHOST.EXE	Added as a result of the SPYBOT.H VIRUS!
X	Windows Security Assistant	rundll32.vbe	CoolWebSearch parasite variant
X	Windows Security Assistant	winsec.exe	CoolWebSearch parasite variant
X	Windows Service Host	scvhost.exe	Added as a result of the SDBOT.N VIRUS!
X	Windows Services	service.exe	Added as a result of the RANDEX.R VIRUS!
?	Windows shell	win70.exe	??
X	Windows Shell Library Loader	load shell.dll /c /set	CoolWebSearch parasite related
X	windows shellext.32	mschost.exe	Added as a result of the BLASTER.K VIRUS!
X	Windows Spooler	SPOOLSRV.EXE	Added as a result of the SPYBOT.P VIRUS!
X	Windows Startup	winsta~1.exe winstartup.exe	Added by browser enhancement some people find annoying called "Go Hip". See here for details of what "Go Hip" is and the page also includes a link for removing it.
X	Windows Startup	Wdrun32.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Windows System Restorer	SystemRestorer.exe	Added as a result of the DULOAD.C VIRUS!
U	Windows System Tray	msni.exe	Iambigbrother monitoring software
X	Windows Task Manager	ACCOUNT_DETAILS.DOC.exe	Added as a result of the QUATERS.A VIRUS!
X	Windows Update	<filename>	Added as a result of the NORIO VIRUS! Acts as a hi-jacker redirecting to adult content sites
X	Windows Update	iexplorere.exe	Added as a result of the GAOBOT.AP VIRUS!
X	windows update	uddater.exe	Added as a result of the LEOX VIRUS!
X	Windows Update	wudate.exe	Added as a resuklt of the AGOBOT.3.GEN VIRUS!
X	Windows Update	wupdate.exe	Wengs adware
X	Windows Update Files	dnetc.exe	Unidentified VIRUS! Note - wupdmgr.exe is the real Windows Update
X	Windows Update.exe	N/A	Homepage hijacker, see here
X	Windows Updater	wupdmgr32.exe	Added as a result of a variant of the DOS.AUTOCAT VIRUS!
N	Windows Version Check	ver_chk.exe	Version checker for CyberAudioLibrary ("A new way to exchange information through the Internet")
X	Windows-System	System32.exe	Added as a result of the LOGPOLE.C VIRUS!
X	WindowsAgent	WindowsAgent.exe	Added as a result of the GOP.G VIRUS!
X	WindowsAPI.DLL	Server5.exe	Added as a result of the "Fear and Hope" trojan
X	WindowsCriticalUpdate	windows_critical_update.exe	Added as a result of the ASTEF or RESPAN VIRUSES!
X	WindowsMGM	Winmgm32.exe	Added as a result of the SOBIG and LALA.C VIRUSES!
X	WindowsSetup	<path to trojan>	Added as a result of the EZBOT VIRUS!
X	WindowsUpd	WindowsUpd4.exe	VirtuMonde adware
X	WindowsUpdate	windows_update.exe	Added as a result of the LOHACK.B VIRUS!
X	WindowsUpdate	svchost.exe	Added as a result of the ASTEF or RESPAN VIRUSES! Note - this is not the valid svchost.exe as described here
X	windowsupdate	RPCX1sQ3.exe	Added as a result of the IRCBOT.B VIRUS!
X	Windows_VXD	user32.exe	Added as a result of the PWSTEAL.PPORT VIRUS!
X	Windowz Update V2.0	Explorer.exe	Added as a result of the YODO VIRUS! Note - the valid "explorer.exe" is located in C:\Windows or C:\Winnt whereas this one is located in the System32 sub-directory
X	windrv	windrv32.exe	Unidentified VIRUS - possibly a strain of OBLIVION or BIONET
?	WinDSL_MTU	WinDSL_MTU.exe	May be realted to Tiscali broadband, if so is it required?
X	WinDSNX	Win????.exe	Added as a result of the DNSX VIRUS!
N	WINDVDpatch	CTHELPER.EXE	CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
N	WinDVR SchSvr	SchSvr.exe	WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
N	WinDVRCtrl	WinDVRCtrl.exe	Control center software for an AOpen VA1000 TV tuner card
X	Windws Configuration Loader	LEXPLORE.exe	Added as a result of the SODABOT VIRUS!
X	WinEssential	Keyhost.exe	Hijacker - hailing from jraun.com
X	WinExec32	WinExec32.exe	Added as a result of the KAZWIN VIRUS!
U	WinFast Schedule	Wfwiz.exe	Leadtek WinFast TV tuner scheduler
U	Winfast2KLoadDefault	Rundll32.exe Wf2kcpl.dll, DllLoadDefaultSettings	Loads default settings for Leadtek Winfast graphics cards
U	Winfast_2K	WF2k.exe	System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start -> Settings -> Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card
U	WinFast_Gamma	Rundll32.exe wfcpl.dll, DllLoadGammaRampSettings	Loads if you change the gamma settings on Leadtek WinFast graphics cards
X	WinFavorites	WinFavorites.exe1	Loudmarketing.com adware downloader
N	WinFax PRO Controller	WFXCTL32.EXE	From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
Y	WinFaxAppPortStarter	wfxsnt40.exe	WinFax 10.0 and maybe earlier versions. Used to initiate the WinFax port to enable printing to the WinFax printer (send a fax) from any application.
U	WinFoxV2	WF2k.exe	System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start -> Settings -> Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card
X	WinGate	WinGate.exe	Added as a result of the LOVGATE.G VIRUS!
X	WinGate initialize	WinGate.exe	Added as a result of the LOVGATE VIRUS!
N	WinGuage Pro	WGPRO32.EXE	Part of McAfee Nuts & Bolts. "WinGauge is a dynamic reporting tool that constantly monitors your use of Windows and your applications, to alert you to potential problems before they become serious". Resource hog. Available via Start -> Programs
Y	Winguard	WGFE95.EXE	Dr Solomon's Virex antivirus
N	WinHacker	rundll32.exe wh95.dll, HackMe	Tweaking utility by Wedge Software. There are far better tweakers and, unlike WinHacker, most are free
X	Winhelp	winhelp.exe	Added as a result of the LOVGATE.G VIRUS!
X	Winhelp	winhe1p.exe	Added as a result of the QQPASS.E VIRUS!
X	Winhlp32	Wscript.exe ..Msexec32.vbs	Added as a result of the GANT.B VIRUS!
X	Winhost	wintt.exe	Added as a result of the LOLAWEB.B VIRUS!
X	wininetd	wininetd.exe	Added as a result of the WINET VIRUS!
X	wininit	wininit.exe	Added as a result of the WOLLF.16 VIRUS!
X	Wink*.exe	Wink*.exe	Added as a result of a version of the KLEZ VIRUS! * represents any random characters
U	Winkb6	winkb6.exe	Part of We-Blocker, works in tandem with syswb6. Both files are needed to run WeBlocker. Required if We-Blocker is installed
X	WinKernel	WinKer.exe	Added as a result of the MIRAB or SERVIDOR VIRUSES!
X	WinKernel	<path to worm>	Added as a result of the PLEA.A VIRUS!
X	winkernel32	wWin32.com	Added as the result of the BANSAP VIRUS!
U	WinKey	winkey.exe	Loads Copernic's WinKey. Used to map out Windows key hotkey combinations. Not required for the system, but is necessary for this to be running if you use these hotkey combos
X	WinLibUpdate	libupdate.exe	Added as a result of the BIONET series of VIRUSES such as BIONET.31 or BIONET.310
X	WinLibUpdate32	libupdate32.exe	Added as a result of the BIONET.405 VIRUS!
X	WinLibUpdte	libupdte.exe	Added as a result of the BIONET.318 VIRUS!
X	Winlme	windll.exe	Added as a result of the GOP.F VIRUS!
X	WinLoader	<random filename>	Added as a result of versions of the SUBSEVEN VIRUS!
X	winlocatorupdate	updatewinlocator.exe	Locator adult content toolbar related
Y	winlogon	winlogon.exe	Windows Logon Process - handles user logons described here
X	winlogon	winlogon.exe	Hijacker or adult content dialler - file is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory, as is the case with the legitimate winlogon.exe file described here
X	winlogon	winlogin.exe	Added as a result of the RANDEX.E VIRUS!. This is not the valid winlogon.exe as described here
X	winlogon	winlogon.exe	Added as a result of the TRODAL VIRUS! - file is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory, as is the case with the legitimate winlogon.exe file
X	Winlogon.exe	N/A	CoolWebSearch parasite related - resets home page to an adult material site
X	Winmain	winmain.exe	One of the first of a new breed of malware. When run it immediately loads MSHTA.EXE from the Windows folder, placing it on "hot standby", ready to accept HTA scripting within a web page and then EXECUTE what is embedded IN the page as a program! In other words, it's possible for a "rogue" website to actually embed trojans, worms and/or viruses directly into a web page. BOClean's HTA Stop offers an easy way to toggle this capabiltity, or rather vulnerability, on and off. I suggest you leave it disabled!
?	WinManager	schost.exe	??
U	winmatrix.exe	WinMatrixXP.exe	WinMatrix XP - wallpaper replacement that shows different matrix effects (including flowing matrix codes from 'The Matrix' movie) on your desktop
X	WinMenssage	winmax.exe	Added as a result of the BANCOS.B VIRUS!
N	WinMgmt	WinMgmt.exe	Used for Enterprise Management. If you are not an IT Administrator you don't need it to be running. Also runs from the PCHealth "scheduler" - refer here
X	WinMgr32	winmgr32.exe	Added as a result of the MIMAIL.P VIRUS!
X	WinMine	D4NG3.vbs	Added as a result of the BISCUIT.A VIRUS!
Y	winmodem	wmexe.exe	Software for software based modems. Required if you have one of these. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
N	winmysqladmin or WinMySQLadmin Tool	winmysqladmin.exe	Starts the MySQL database admin tool
X	winnet	winnet.exe	CommonName Toolbar spyware. To uninstall see here
?	Winnov Menu	WnvMenu.Exe	Winnov Video Capture Card related. What does it do and is it required?
?	Winnov Remote	WnvRsvr.Exe	Winnov Video Capture Card related. What does it do and is it required?
?	Winnov Status	WvStatus.Exe	Winnov Video Capture Card related. What does it do and is it required?
X	WinNtBB	WinntBB.exe	Added as a result of the DULOAD.C VIRUS!
U	WinPatrol	WinPatrol.exe	WinPatrol - "Manage Startup programs, tasks, cookies; will sniff out Worms, Trojan horses, Cookies, Adware, Spyware, Klez, Assumption and other malicious programs"
Y	WinPoet	WinPPPoverEthernet.exe	WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
N	WinPopup	WINPOPUP.EXE	Intranet chat software provided by windows for chat on small networks. Handy little LAN messaging utility. Has been included in Windows since 95, and maybe in WFWG 3.11. Normally it won't set itself up to run unless the user specifically adds it to startup
X	winpopup	winupie.exe	Adware by Tradeexit.com
X	WinProfile	Command.exe	Added as a result of the BUDDY VIRUS!
X	WinProt	Winprot.exe server.exe	Added as a result of the CHUPACABRA VIRUS!
U	WinProxy	WinProxy.EXE	"WinProxy is the world-first proxy server and a firewall with integrated mail server for Windows 95/98/ME/NT/2000/XP"
X	winpup32	Winpup32.exe	Added as a result of the ADCLICKER VIRUS!
X	winrar	winrar.exe	CoolWebSearch parasite variant. Note! - this is not the file zipping utility also known as WinRAR and it's located in C:\Winnt or C:\Windows
X	winrarshell	winrarshell32.exe	Added as a result of the SALIRA VIRUS!
X	winReg	winReg.exe	Added as a result of the YAHA.H or YAHA.J VIRUSES!
X	winregsrv	winregsrv.exe	Added as a result of the SYNRG VIRUS!
X	Winres32vis	<path to worm>	Added as a result of the THRAX.A VIRUS!
N	winroute	winroute.exe	Win-Route 4.27. WinRoute Tray Icon for starting and stopping the WrCtrl.exe process, also to log in to the console to view logs and change settings. Can be unchecked and the engine still runs and functions normally. Can then use provided shortcuts for administration of the program. Loaded in SERVICES on Windows 2k
X	winrun	msconfig.exe	Added as a result of the WINUR VIRUS! Note - this is not the real msconfig.exe
X	WinRunners	WinDrivers.exe	Added as a result of the DULOAD.C VIRUS!
X	winserver	Server.txt.vbs	Added as a result of the DELTAD.A VIRUS!
X	WinServices	WinServices.exe	Added as a result of the YAHA.K or YAHA.M VIRUSES!
X	winservn	winservn.exe	PurityScan/Clickspring adware
X	winservs	winservs.exe	PurityScan/Clickspring adware
X	WinSetBrowse	BasicUpdate.dll.vbs	Added as a result of the BISCUIT.A VIRUS!
?	Winshoe	wuadfdqr.exe	Probably an unidentified VIRUS! Adds itself to 3 registry "Run" keys and prevents Task Manager being displayed. This is not the Winshoe IRC Client as the visitor did not have it installed
X	WinShowUpdate	copy C:\WINDOWS\winshow.new C:\WINDOWS\winshow.dll	Winshow parasiate related - from the "RunOnce" keys it replaces "winshow.dll" with a new version
X	Winsock2 driver	SDJOIJE.EXE	Added as a result of the SPYBOT.DR VIRUS!
X	Winsock2.dll	WINLODR.SCR	Added as a result of an unidentified VIRUS!
X	Winsock32 driver	Testing.exe lcd.exe Sdjoije.exe	Added as a result of the SPYBOT.B VIRUS!
X	Winsock32driver	win32server.scr	Added as a result of the HACARMY VIRUS!
X	winsockdriver	tskmg.exe	Added as a result of the SDBOT.GEN or WARPIGS.C VIRUSES!
X	winsockdriver	winsock2.2.exe	Added as a result of a variant of the SPYBOT VIRUS!
X	WinSocketComponent	nthost.exe	Added as a result of an unidentified VIRUS!
X	WinSrv	kn0x.exe	Added as a result of the HOBBIT.F VIRUS!
X	WinSrv	SHIZZLE.EXE	Added as a result of the HOBBIT.C VIRUS!
X	Winsrv	winsrv.exe	Added as a result of the OPASERV.T VIRUS!
X	WinStart	WinStart.exe	From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words, with this installed, typing "car" in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge
X	WinStart	Wscript.exe WinStart.vbs	Added as a result of the CIAN.C VIRUS!
X	WinStart	winstart32.exe	Added as a result of the PUROL VIRUS!
X	WinStart001 or WinStart001.EXE	WinStart001.exe	From IGetNet - turns the IE address bar into a keyword engine piped into IGetNet. In other words, with this installed, typing "car" in the IE address bar will point the browser to the Lexus web site. Foistware - installs components without your knowledge
X	Winsta~1	winsta~1.exe	GoHip foistware
X	WinSth16	WinSth16.exe	Added as a result of the CAKE VIRUS!
X	winstro	RUN32DLL.exe	Added as a result of the FTP_ANA VIRUS!
X	Winsvc32	Winsvc32.exe	Homepage hijacker
U	Winsys	Winsys.exe	Win-Spy - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
X	WinSys32	Winsys32.exe	Added as a result of the CIGIVIP or RECKUS VIRUSES!
X	winsyslog lptt01	winsyslog.exe	Variant of the RapidBlaster parasite (in a "Winsyslog" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	WinSysStartUpWKbLw	TaskSystemDll.Exe	Added as a result of the BACKZAT.G VIRUS!
X	WinSyst32	winsyst32.exe	Added as a result of the MORB VIRUS!
X	WinSystem	winsystem.exe	Added as a result of the WHITEBAIT VIRUS!
X	WinTask	Wintask.exe	Added as a result of the HIPO or LEMIR.F VIRUSES!
U	WinTasks Traybar	wintasks.exe	WinTasks - "Efficient Resource and Task Management is absolutely critical if you want to achieve the highest system performance levels possible. WinTasks 4 will not only help you achieve this task, but will actually make your system run faster and more smoothly than ever before"
N	Wintercooler Pro	WINCOOL.EXE	Wintercooler Pro - utility that monitors CPU usage, RAM consumption and Internet connection speed
N	WinTidy	WinTidy.exe	Desktop icon manager from PC Magazine (Ziff-Davis) for Win95. Available via Start -> Programs
N	Wintime Wtxpload	Wxpload.exe Wintime	Part of the software to support a Dexxa USB graphics tablet. From a visitor - "This gets started anyway when you plug in the USB connector for the graphics tablet, if it's not already running. It then starts an application which manages the tablet messages. Since I leave the tablet unplugged unless I need to use it, I don't need this running at startup. I suspect that this program monitors a number of windows messages, so that when it's loaded, my regular mouse slows down - it acts like it 'sticks' entering and leaving windows. Certainly my performance returned to what I expected when I removed this item using MSCONFIG"
N	WinTOTAL Scheduler	guru.exe	WinTOTAL Real estate appraisal software related
X	WinTray	wintray.exe	Added as a result of the LEGUARDIEN.B VIRUS!
X	WinUPD32	explorer.exe	Unidentified VIRUS!
X	WinUpdate	RBSKQQBO.EXE	Added as a result of the VBS.Vbswg2b.A@mm VIRUS!
X	winupdate.exe	winupdate.exe	Added as a result of the RADO VIRUS!
X	Winux Piriax Service	PH32.EXE	Added as a result of the RANDEX.G VIRUS!
U	WinVNC	WinVNC.exe	WinVNC is an application that allows you to remote control your PC from another PC somewhere on the internet
X	winwan lptt01 or winwan ml097e	winwan.exe	Variant of the RapidBlaster parasite (in a "Winwan" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	WinXPLoad	Rundll32 LoadDll, LoadExe WinXPLoad.exe	Compaq hotkey related - required if you use the hotkeys
N	WinZip Quick Pick	WZQKPICK.EXE	Added with WinZip version 8.1. "The new WinZip Quick Pick taskbar tray icon gives you instant access to WinZip and your Zip files. Just left click the icon to open WinZip, or right click it to instantly reopen recently used Zip files, access your Favorite Zip Folders, open WinZip Help, or start WinZip itself.". You can right-click and close it - choosing to not re-load it at start-up
X	Win_api_driver	system.exe	Added as a result of the REVIRD VIRUS!
X	Win_Library	INISvc.exe	Added as a result of the ANARCH VIRUS!
X	Win_vader	Win_vader.vbs	Added as a result of the INVASION.A VIRUS!
U	Wireless PCI Card Configuration Utility	WMP11Cfg.exe	Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
U	Wireless-G Notebook Adapter Utility	WPC54CFG.EXE	Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G)
N	wjview	wjview.exe	MS tool used to view window-based Java applications from the command line
N	wkcalrem	wkcalrem.exe	Produces a pop-up reminder of events scheduled using the MS Works Calendar
N	WkDetect	WkDetect.exe	Checks for updates to MS Works
N	wkfud	wkfud.exe	A marketing program for MS Works
N	WksSb	WksSb.exe	The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file
N	WkUFind	WkUFind.exe	MS Works Update Detection. MS Picture It! (versions 7 to current) use this automatic update feature during the log on process. It can also cause your system to automatically dial into your ISP as it tries to access the internet, if you have your system set to automatically dial when the internet is invoked. To manually update, go to Microsoft's Office/Works update site
N	WLAN Status Tray Applet	WLANSTA.EXE	System Tray icon for checking the status of a Wireless LAN
Y	WLAN_Cfg.exe	WLAN_Cfg.exe	Linksys Instant Wireless USB Network Adapter driver
N	WMBoot	N/A	Associated with Logitech Wingman game controllers. Not required but what does it do?
U	WMIEXE.exe	wmiexe.exe	NT component, used by Windows Millennium to detect  Plug and Play-compliant IEEE 1394 devices during the startup process. Since this is important for the computer to work properly if you have these, Windows Millennium protects wmiexe.exe and will restore the file even if it's deleted or renamed. Check here for some details on what to do to stop it loading
X	Wminf	Wminf.exe	Added as a result of the GEMA VIRUS!
X	Wminfo	Wminfo.exe	Added as a result of the GEMA VIRUS!
X	wmsys32	wmsys32.exe	Added as a result of the BANPAES.B VIRUS!
?	WM_LOGIN	MSGLOGIN.EXE	Part of McAfee Firewall. What is it for and is it needed?
X	WNAD	WNAD.EXE	Spyware added as a result of running a program called "Yo Mama Osama" (osama.exe). See here for more and how to get rid of it. There are other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like
N	Woowatch	Watch.exe	Wanadoo ISP software, not required
N	WordWeb	wweb32.exe	WordWeb - free theasaurus and dictionary. Start manually
?	Workflo	workflow.exe	Related to BroadJump Client Foundation - broadband troubleshooting software installed by various companies. Is it required?
N	Works Calendar Reminder	wkcalrem.exe	Produces a pop-up reminder of events scheduled using the MS Works Calendar
N	WorksFUD	wkfud.exe	A marketing program for MS Works
U	Workstation Scheduler	wm95.exe	Desktop Management Scheduler. Part of Novell's Netware Client. Schedueles NDS events. If events have been schedueled, it is required, otherwise, it is useless and a memory hog
U	Worm Detector	wd.exe	Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam
X	wormexe	winstart.exe	Added as a result of the EARLYBIRD VIRUS!
N	Wpctrl or wpctrl95	wpctrlnt.exe wpctrl95.exe	WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties
Y	WPCycle.exe	WpCycleWin.exe	Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end, preventing instability of your CPU (freezing)
X	WQK	WQK.exe	Added as a result of a version of the KLEZ VIRUS!
?	wr	WR.EXE	??
?	WR Command	wr.exe	??
N	WrCtrl	WrCtrl.exe	Win-Route 4.27 NAT engine on Win2k Pro for connection sharing and security using Win-Route by Tiny Software. A connection sharing/Firewall Application. If service is disabled the program does not work, but you can manually start/stop the service with a shortcut the program installs at any time
X	WRDialer	WrDialer.exe	WinPoet DSL dialler
?	WRECK GUARD	??	??
?	WregBios	wregbios.exe	Desktop Management BIOS (DMI BIOS) related. Apparently invokes the DosBios.exe file. Is it required?
U	wrexec	wrexec.exe	Watch Right - monitoring program, part of the PowerTools add-on for AOL. Records instant messages, E-mail, chat. Watch Right appears to be, and functions as an online clock updater which connects with the U.S. National Institute of Standards and Technology. It was designed for parents who wish to keep an eye on what their children are doing online
?	wriste	wriste.exe	??
U	WScheduler	WScheduler.exe	Windows Scheduler - "schedule unattended running of applications, batch files, scripts and much more. Also, you can schedule popup reminders so you'll never forget reminders, tasks and other events."
U	WService	WService.exe	Tablet client Driver for UC-Logic Pen/Graphics Tablet
Y	wstimeb	wstimeb.exe	Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it
Y	wswpd	wswpd.exe	Used with some models of Panasonic, Epson and NEC printers. Some older drivers known to have a "memory leak". Needed for printing to work
N	WT Game Channel or WT GameChannel	GameChannel.exe wtgamechannel.exe	Wild Tangent GameChannel - notification of new games, quick access to games and fast and easy game downloads. Note that Wild Tanget's privacy policy states they also collect and share individuals information
U	WTIndicator	SchedInd.exe	WinTask - software that automates a variety of routine tasks quickly and simply
Y	WUOLService	WUOLService9x.exe	Remote wakeup status agent. Part of Novell's ZenWorks. Processes Wake-up on LAN requests (turn on a computer remotely on LAN)
X	WUPD	iglmtray.exe	Added as a result of the TZET VIRUS!
X	wupdt	wupdt.exe	Added as a result of the IMISERV VIRUS!
Y	WUSB11B.exe	WUSB11B.exe	Linksys WUSB11 WLAN USB adapter
?	WUx_RegSvr	RegSvr32.exe	x is any number??
X	www.hidro.4t.com	enbiei.exe	Added as a result of the BLASTER.F VIRUS!
N	WXProcMgr Module	WXprocMgr.exe	TVTonic from Wavexpress - "enjoy 3 full-screen, DVD-quality video channels for FREE". Allows data content to be downloaded and synchronized on your system
X	wzhelper	wzhelper.exe	Searchcentrix hijacker
U	X Server	X.exe	"XoftWare for Windows" enables you to run network-based UNIX programs ("X programs" or "clients") side-by-side with Windows applications on your personal computer. You can also share programs and computing resources with host computers connected to your PC over a network
N	X-Grabber	sswizard.exe	ScreenShot Wizard
U	x3watch	x3watch.exe	"program helping with online integrity. Whenever you browse the internet and accesses a site which may contain questionable material, the program will save the site name on your computer. Approximately every 30 days, a person of your choice (an accountabiltiy partner) will receive an e-mail containing all possible questionable sites you may have visited within the month. This information is meant to encourage an open and honest conversation between friends and help us all be more accountable"
N	Xanadu	Xanadu.exe	Xanadu - free language and translation wizard from Foreignword
?	xBrotherMeCom	BrMeCom.exe	Related to Brother MFC-9200c printer. What does it do and is it required?
U	XE 8x LM Status	lmsxxe.exe	Xerox XE8 series laser printer status monitor
X	Xecuter.bat	psexec.bat	Added as a result of the BOOHOO VIRUS!
N	XemiCo	ADC.EXE	XemiComputers Active Desktop Calendar
?	xicon	xicon.exe	Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
X	XiD	mmx.exe	Added as a result of the ANALOGX VIRUS!
Y	XircWinModem4	ltcm000c.exe	WinModem drivers. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information
U	xitami	Xiwin32.exe	Xitami Multiplatform Open Source web server
?	xkstartup	RunDll32 InstZ82.dll, SetUsbPrinterPort	On a system with a Lexmark printer
X	XNSearchAssistant	SrchAsst.exe	iWon Search Assistant - spyware
?	Xpagent	xpagent.exe	Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
?	xpcfg	xpcfg.exe	??
?	Xpclient	xpclient.exe	Part of the IBM/XPoint Rapid Restore utility. What does it do and is it required?
X	xpsystem	y.exe services.exe	CoolWebSearch parasite variant
U	XStop95	XStop95.exe	XStop - internet filter
?	XTCsgloader	XTCsgloader.exe	Another Xupiter toolbar variant??
U	XTNDConnect PC - 3CmPlm	Autodet.exe	Component of EasySync Pro. Synchronisation between Palm PDAs  and Microsoft Outlook
U	XTNDConnect PC - ErPhn2	ErPhn2.exe	Component of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook
U	XTNDConnect PC - ErTray	ErTray.exe	Component of EasySync Pro. Synchronisation between SonyEricsson mobile phones and Microsoft Outlook
U	XTNDConnect PC - LtNts4	NtsAgnt.exe	Component of EasySync Pro
U	XtreamLok License Manager	xl.exe	License manager for xLok (XtreamLok) - prevents software being reverse engineered
?	xuio.exe	xuio.exe	??
X	Xupiter Startup	XupiterStartup.exe	Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X	XupiterCfgLoader	XTCfgLoader.exe BWCfgLoader.exe	Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X	xupiterstartup2003	xupiterstartup2003.exe	Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
X	XupiterToolbarLoader	XupiterToolbarLoader.exe	Xupiter - adware and homepage hijacker. To remove Xupiter go here and to prevent it re-installing in the future see here
U	xv_ctrl	v_ctrl.exe	3dfx Underground Tools - "Gives direct hardware control to your video graphics adapter"
?	XWMSUSBAPI	XWMSAPI.EXE	Part of the installation of a Xerox WorkCentre printer/scanner. Is it required?
X	XXXmpeg	XXXmpeg.exe	Adult content dialler
?	Yahoo HP Reminder 1.1	yr.exe	??
N	Yahoo! Pager or ypager	ypager.exe	Yahoo! Messenger allows you to send instant messages. Available via Start -> Programs
X	YahooStock	Prmvr.exe ystckAO32.exe	Adtomi adware
X	yahoo_toolbar lptt01 or yahoo_toolbar ml097e	yahoo_toolbar.exe	Variant of the RapidBlaster parasite (in a "yahoo_toolbar" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N	YAMAHA DS-XG Launcher	dslaunch.exe	System Tray access for the features of the Yamaha DS-XG soundcard unless you regularly change set-ups
N	Yankee Clipper III	YankClip.exe	Yankee Clipper III - 'A super powerful Windows clipboard extender/memory - now in its third generation. Handles Pictures, Richtext, URLS, etc - any size. Features printing, drag and drop, optional permanent storage of clippings. Familiar "Outlook" interface'. Freeware
N	YBrowser	ybrwicon.exe	SBC Yahoo! Browser system tray icon
?	YOW tuner	WatchPNM.exe	??
U	YPC	ypc.exe	Yahoo Parental controls - "Let you decide what type of sites and Yahoo! services your kids can access"
Y	YTrayMagic Lite 1	YTRAYMAGIC.EXE	YTrayMagic from YoconSoft automatically restores your tray icons after an Explorer(the windows shell) crash. Leave to run at startup since only those icons that are in the taskbar after YTrayMagic has initialized will be restored
X	ywzizdon	ywzizdon.exe	Free_Scratch_Cards foistware
X	yyyyyyyy	<path to trojan>	Added as a result of the MUMUBOY.B VIRUS!
X	yz.exe	yz.exe	Added as a result of the VARDO VIRUS!
U	z-WrDialer	WrDialer.exe	WinPoet DSL dialer
X	ZaCker	<filename>.PIF	Added as a result of the HOLAR.A VIRUS! where <filename> is the worm filename
X	Zacker	Zacker.exe	Added as a result of the GEMEL VIRUS!
Y	Zapro	Zapro.exe	Firewall program from Zonelabs - paid for version
N	zBrowser Launcher	iTouch.exe Commandr.exe	For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	zcproo	qssstiej.exe	Possible homepage hijacker installing a toolbar: http://tdko.com/ ,Lop.com in disguise. see this thread
N	zdnet	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
N	Zebus	msdc32.exe	Runs a HTML tutorial on the Zebus web-site
X	Zenet	rundll32 CNBabe.dll, DllStartup	CommonName Toolbar spyware. To uninstall see here
Y	ZENRC	zenrc32.exe	The main component of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Leave well alone
Y	ZENRC Tray Icon	zentray.exe	Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management". Best left alone
Y	ZENworks Imaging Service	ZISWin.exe	Imaging Agent. Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management"
U	ZeroAds	0	ZeroAds - culls ads, cookies and pop-ups. Tells ZeroAds not to run at startup - needed to start it manually
U	ZeroAds	LAS0Ads.exe	ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work
?	ZGNUBI	ZGNUBI.exe	??
X	ZIBMACC	rundll.exe -> ZIBMACC.INF	ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435)
U	ZingSpooler	ZingSpooler.exe	Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums
N	Zinio DLM	ZDLM.EXE	Zinio - used to read magazines in digital rather than paper format
X	Zip Driver Loader	ZipLoader32.exe msload32.exe	Added as a result of the OBLIVION VIRUS! The two executables shown are the most common but there are more
N	ZipDisk Icons	IMGICON.EXE	Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
N	ZipGenius Clean	zg.exe	ZipGenius file compression utility
N	ZipMagic	zm32.exe	Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first
Y	zlclient or Zone Labs Client	zlclient.exe	Firewall program from Zonelabs. Pro version inlcudes other online security options
U	ZLH	ZLH.EXE	System Tray icon for Norman Antivirus
X	Zonavirus	0	Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Y	ZoneAlarm	zonealarm.exe	Firewall program from Zonelabs - free version
Y	ZoneAlarm Plus	zaplus.exe	Firewall program from Zonelabs - paid for version
Y	ZoneAlarm Pro	Zapro.exe	Firewall program from Zonelabs - paid for version
U	Zoom	zoom.exe	Zoom - speeds up Windows startup and manages startup applications
Y	ZPOINT32	ZPOINT32.exe	USB graphics/writing tablet driver
U	zSPGuard	Spguard.exe	"StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known 'invaders'."
X	ZtgServerSwitch	server.vbs	ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware
X	Zupdate	Zupdate.exe	B3d Projector - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
X	zzgshp	gshp.vbs	Homepage hi-jacker that re-defines your IE or Netscape start page
?	zzz-hpi-boot	hpi-boot.exe	Associated with HP Photosmart printers
?	zzzCamlnSuitelll	setup.exe 46***	??
?	zzzhpsetup	setup.exe	??
X	\\MSMcAfeee	Avsynmgr32e.exe	Added as a result of the FRAMAR VIRUS!
U	_winadm	winadm.exe	Parents Friend - "Log any activity and protect programs with a password. Further more you can lock the pc any hour in the week you want with the main password. You can also give users allowed programs in their program-lists and you can limit the maximal daily hours and maximal weekly hours user spend on the PC"
X	_x-Finder	_x-Finder.exe	Disconnects and redials an ISP modem to an adult content site
X	{2CF0B992-5EEB-4143-99C0-5297EF71F444}	rundll32.exe stlbdist.dll, DllRunMain	BrowserAid/Startium parasite
X	{2CF0B992-5EEB-4143-99C2-5297EF71F44B}	rundll32.exe stlbupdt.DLL, DllRunMain	BrowserAid/Startium parasite