Start-Up Applications - All

Last update :- 8th May, 2004
4649 items listed

Introduction

This page presents a searchable, comprehensive list of the programs you may find that run when you switch on your PC as typically identified by MSCONFIG or the registry "Run" keys - and whether you need them.

Close Program/Task Manager

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 4 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences

A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Random startup entry/filename viruses

There are viruses and other pests that can add any number of different entries to the startups. They make additional entries under the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\ Run and RunOnce keys, allowing them to run at startup:

• PE_BISTRO - adds XXXX = "C:\WINDOWS\XXXX.EXE" - where XXXX is the randomly chosen filename of the dropped file
• MAGISTR.A - adds <Virus Name> = "<Path of Virus>\<Virus Name>.EXE"
• BUGBEAR.A or BUGBEAR.C or BUGBEAR.E - adds <random string> = %system%\<random filename>.EXE. %system% is a variable - by default this is C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP). The worm locates the System folder and copies itself to that location
• OPTIXPRO.11 - adds <Registry entry> = "<Path of Virus>\<Filename>"
• Lop.com homepage hijacker - creates multiple and random startup entries
• FreeScratchAndWin - creates multiple and random startup entries as it includes LOP above
• nCase (or n-Case) parasite - creates multiple and random startup entries
• LORAC - adds "<four random characters>" = "%System%\abcdef.exe" - where abcdef is the volume number of the infected hard drive
• MOSUCK - random name and filename in C:\Windows or C:\Winnt
• DEBORMS.D - adds one of a number of valid Name/Startup Item entries but points to the path of the worm file dropped
• GIBE.C - random name and filename in C:\Windows or C:\Winnt
• SWEN.A - random name and filename
• ZOMBAM.B - random name and filename
• WANADO or REUR - name and filename as XXXXXXXX where X can be any random hexadecimal (0-9, A-F) number
• SINCOM - random name and filename in C:\Windows or C:\Winnt with "Run:Auto" appended to the command/data column entry
• SOBER family - adds <random string> = %system%\<random filename.exe>
• BRANCOS.C - adds win_<4 random characters><4 random numbers 0-9> (<4 random characters><4 random numbers 0-9>.exe)
• IRC.BOT.B - random name and filename
• COREFLOO-C - <random filename> = rundll32 %SYSTEM% <random filename>.dll,Init 1
• <random digits>.exe = <random digits>.exe - 8 random digits, example: 77231997.exe = 77231997.exe. Winpup.exe adult content downloader
• DRAGONQQ - "<Trojan's filename>"="<Path to the Trojan>", "<Random name>"="C:\WINNT\<Random name>.exe", "<Random name>"="C:\Program Files\<Random name>.exe" or "<Random name>"="C:\WINDOWS\<Random name>.exe"
• FORMADOR - adds <executed file name>="%System%\<executed file name>.exe"
• NETTRASH - adds <file name>=<path to filename>.exe
• OPTIXPRO.13B - adds <registry value name>=<path to trojan>.exe
• MYDOOM.F or MYDOOM.G or MYDOOM.H - adds <4 to 8 random, lowercase letters>=<worm filename>
• ANNIL - random name and filename
• ANTINNY.G and ANTINNY.K - <random name>=<
• KILLAV.D - <Trojan filename>="%Windir%\<Trojan file name>
• MYPOO - <value name>=<Trojan file name> where <value name> is configurable
• BLACKMAL or BLACKMAL.B - "<random_file_name1>.exe"="%System%\<random_file_name1>.exe"
• ERKEX.A - "<random_file_name>"="%System%\<random_file_name>.exe"
• OPASA - "<random_file_name>"="%System%\<random_file_name>.exe"
• GAOBOT.ADN - random name and filename
• ADWAHECK - "<trojan name>"="%System%\<trojan filename>"
• GOBOT.A - random name and filename in C:\Windows or C:\Winnt
• Sandboxer adware - random name and filename

Spyware/Adware/Malware/Foistware & Hijackers

Check SpywareInfo for information about these types of program. They have a very active forum and a list of programs that may remove them here

o-----------------------------o

Search Query Courtesy of Dynamic Drive
Press Alt+S if an entry is found to continue searching

This search works with IE4+, NS4 and Mozilla/NS7+ but not NS6. Alternatively use your browsers search facility - Ctrl+F for IE users.

Key:

• "Y" - Normally leave to run at start-up

• "N" - Not required - typically infrequently used tasks that can be started manually if necessary

• "U" - User's choice - depends whether a user deems it necessary

• "X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"

• "?" - Unknown

	Name/Startup Item	Command	Comments
U	!NoLoad	winrecon.exe	WinRecon - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
U	$EnterNet	Enternet.exe	Connection manager for the EnterNet ISP. You can also use RASPPOE
?	%cmpmixtitle%	%cmpmixstr%	Possibly related to C-Media Mixer Control panel?
X	<executed file name>	Regsrv32.com	Added as a result of the SOUTHGHOST VIRUS!
X	<filename>	App.exe	Added as a result of the WAXPOW VIRUS! where <filename> is the executed filename
X	<name>	Svchosts.exe	Added as a result of the SDBOT.N VIRUS! where <name> can be random
X	<random filename>	wincpu.exe	Added as a result of an unidentified VIRUS!
X	<various names>	elf.exe	Elf is a hacker program, tied to a trojan server
X	(*)API Machine	winSOCKS.exe	Homepage hijacker, see here (* = any digit)
X	(*)Run	win32API.exe	Homepage hijacker, see here (* = any digit)
X	(Default)	media_driver.exe	Added as a result of the TUPEG VIRUS!
X	(Default)	Shania.vbs	Added as a result of the SHANIA VIRUS!
X	(Default)	NOTEPAD.exe	Added as the result of the RUSTY VIRUS! Note - not to be confused with the valid Windows "NOTEPAD" text editor
X	(default)	<random_file_name2>.exe	Added as a result of the BLACKMAL VIRUS!
X	*JanisRuckenbrodII	janis.com	Added as a result of the POPS VIRUS!
Y	*StateMgr	statemgr.exe	Windows ME default for System Restore. Do NOT disable!
X	,main drive Loader	wininfo.exe	Suspected malware as it appears in 3 different registry locations - see here
?	.NET config	sysmon32.exe	??
N	/l:eng	N/A	Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup
U	000StTHK	000StTHK.exe	Toshiba Hot key functionality for the function keys (Fn-Esc, Fn-F1 (lock), Fn-F2, Fn-F3, Fn-F4, Fn-F5 (switching between laptop and CRT display output), etc...)
U	00THotkey	00THotKey.exe	For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.
X	123456	rundll32.exe shell32.dll, Control_RunDLL ...123456.cpl	Added as a result of the KITRO.C (or DANDI.A) VIRUS! 123456 can be any random 3 to 6 digit number
U	12Ghosts Popup-Killer	12popup.exe	12Ghosts Popup-Killer
?	17779Proj2002	N/A	??
N	1:	hpdrv.exe	HP utility for monitoring when and how many recoveries have been done
N	1A:MacVisionTrayMonitor	TrayMonitor.exe	Comes with the MacVision program for monitoring tray icons (Note : program is by Stardock)
Y	1A:Stardock MCP	mcpserver.exe	Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications, as it's important for the above two and likely to become important for others (like WindowBlinds) as time goes on
Y	1A:Stardock TrayMonitor	TrayServer.exe	For monitoring tray icons - if disabled icons will not be displayed in ObjectBar or DesktopX
?	1CmailS	NETMAIL.EXE	??
X	1on1	1on1.exe	Adult content dialler
U	1Srv32	SpyAgent4.exe	SpyTech SpyAgent monitoring software. "Spy software that allows you to monitor EVERYTHING users do on your PC."
U	1Win32Cfg	SpyBuddy.exe	SpyBuddy monitoring software
U	1Win32Cfg	Keyloggerpro.exe	KeyloggerPro - monitoring software
X	2020Downloader	mssvr.exe	2020Search Toolbar related. Reported to be auto-installed
U	2wSysTray	2portalmon.exe	2Wire Homeportal user interface
?	39ELTFH25Z8SKF	Ezg1q5.exe	Seems to be associated with software by Resplendence SP ?
Y	3c1807pd	3cmlink.exe 3cpipe-3c1807pd	3Com WinModem driver. See here for more WinModem information
Y	3capplnk	3capplnk.exe	US Robotics Modem driver
N	3cdminic	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
?	3CM Link	3cmcnkw.exe	??
Y	3Cmlink	3CmlinkW.exe	For a US Robotics WinModem. Provides the link to Windows as the CPU does the processing on WinModems - won't work without it. See here for more WinModem information
N	3ComDMIAgent	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
Y	3cpipe-USRpdA	USRmlnkA.exe	Modem driver files from US Robotics
N	3D Text	3D Text.scr	Added as a result of the JERMY.A VIRUS!
U	3Deep Control Panel	3DeepCTL.EXE	From LightSurf Technologies (nee E-Color) - 3Deep corrects lighting, shading and color for all your 2D and 3D games
X	3Dfx Acc	GFXACC.EXE	Added as a result of the GIBE VIRUS!
N	3dfx Task Manager	3dfxMan.exe	System Tray application for 3dfx Voodoo 3/4/5 functions. Available via Start -> Programs
Y	3dfx Tools	3dfxCmn.dll	Updates the registry with information that can't be held for Voodoo 3/4/5 series graphics cards. Important for owners of these cards
Y	3dfxv2ps.dll	3dfxv2ps.dll	Updates the registry with info that can't be held for 3dfx Voodoo 2 video cards. Important for owners of these cards
?	3Dlabs Taskbar Display Manager	3DLman.exe	3DLabs graphics driver related. System Tray access to display settings?
U	3DLabsHelperDemon	3dldemon.exe	Directly from the programs author "It is a tiny program that is installed by the Permedia2/3 and probably other Oxygen-series cards. Normally it sits in the background doing nothing at all (sleeping on a semaphore), so it should take zero CPU time and virtually zero memory, since it will all be paged out to the hard drive." In most cases it can be safely disabled
U	3qdctl.exe	3qdctl.exe	Provided with Terratec 128i PCI and similar sound cards. Loads a sound profile at bootup, restoring volume and other audio settings to a pre-determined default. Similar to Creative Lab's AudioHQ
Y	3ware 3DM	3dm.exe	Monitors status of the disk array on 3ware IDE RAID controllers
X	4wd!!!	Natal!.pif	Added as a result of the OPASERV.AI VIRUS!
X	5-1-61-96	members-area.exe	Adult content dialler
X	5-2-46-112	5-2-46-112.exe	Adult content pop-up dialler. Removal instructions here
X	666	Ska.exe	Added as a result of the NETBUS VIRUS!
X	9xHtProtect	AVprotect9x.exe	Added as a result of the NETSKY.M VIRUS!
X	;Rundll	<filename>	Added as a result of the PWSLEGMIR.E VIRUS!
X	@	regedit -s ..win.dll	Added as a result of the SEEKER.K VIRUS!
N	@Hoc Toolbar	AtHoc.exe	One-click activated browsing toolbar used by various web-sites. See here for more info
N	@loha	reminder.exe	Registration reminder for @loha@home E-mail utility
X	@tour_ww	@tour_ww[1].exe	Adult content dialler
X	a	a.exe	Commercials file that registers itself in the system registry and redirects IE to a certain commercial website
Y	a-winpoet-service	winpppoverethernet.exe	WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking
U	A1000 Settings Utility	cpqa1000.exe	Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features
U	A4Proxy	A4Proxy.exe	Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites
?	AAACLEAN	AAACLEAN.INF	??
?	AAAKeyboard	??	??
N	AAATraySaver	TraySaver.exe	System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray
U	AAK	aak.exe	Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere"
?	ab EazyScheduler	ezsched.exe	??
N	ABBYY Community Agent	CAGENT.EXE	Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software
X	ABC	keylogger.exe	Monitors keystrokes so you can check if someone has typed anything while your away from your PC. Reported as spyware by SpyCop in their FAQ
U	Absolute Shield	dseraser.exe	Absolute Shield/Evidence Eliminator - iternet history eraser
U	Absolute StartUp monitor	ASMon.exe	Absolute Startup - startup monitor from F-Group Software
X	ABsr	absr.exe	Added as a result of the AUTOUPDER VIRUS!
X	absr	mwsvm.exe	SeekSeek search hijacker related - as seen here
X	abtu	mp3serch.exe lopsearch.exe	Loads the executable for Lop.com. mp3serch.exe is the final version whilst lopsearch.exe is the beta version
U	AbyssWebServer	abyssws.exe	Abyss web server
Y	AcBtnMgr_Xxx	AcBtnMgr_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
U	acc	acc.exe	Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"
U	Accelerate	accelerate.exe	Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection
N	Access Ramp Monitor	armon32.exe	Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again
N	AccessRamp Monitor01	ARMon32a.exe	From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."
N	AccessRampLAN01	ARUpld32.exe	Version of the above for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003
U	AcctMgr	AcctMgr.exe	Norton™ Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities—all from the safety of your own PC
N	AccuWeather.com® Desktop	??	Desktop weather from AccuWeather.com
U	AcerNotebookManager	almxptray.exe	System Tray access on some Acer Notebooks to give faster access to system settings
U	AcerPowerkey	Powerkey.exe	PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
Y	ACMonitor_Xxx	ACMonitor_Xxx.exe	Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation
X	acocash	fastdown.exe fastfown.exe	Adult content dialler
U	Acombo3dmouse	Acombo3d.exe	Mouse driver - required if you use non-standard Windows driver features
X	Aconti	aconti.exe	Adult content dialler
U	acoustic	acoustic.exe	Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained
N	acpart	agpart11.exe	Program for finding trucks on-line
U	Acrobat Assistant	ACROTRAY.EXE	Used to create PDF files with Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation
U	Acronis Scheduler2 Service	schedhlp.exe	Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" servuce to perform backup/restore tasks correctly. Required if you want to use TrueImage to do some real backup/restore tasks - not if you only want to explore/mount images
N	Acronis TrueImage Monitor	TrueImageMonitor.exe	Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage
N	Action Manager 32	am32.exe	Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs
?	ActionAgent	actionagent.exe	"A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required?
N	Activation	Activation.exe	Part of Microsoft Money
U	Activboard	MMKeybd.exe	Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys
X	ActiveDesktop	systray32.exe	Added as a result of the DABOOM VIRUS!
X	ACTIVEDS	ACTIVEDS.EXE	Added as a result of the OPASERV.T VIRUS!
N	ActiveEyes	ActiveEyes.exe	ActiveEyes from TFI Technology
U	ActiveMenu	ActiveMenu.exe	Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that Wild Tanget's privacy policy states they also collect and share individuals information
U	ActivePlus	activeplus.exe	Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)
Y	ActiveShield	MCVSSHLD.EXE	McAfee VirusScan On-line. See also McAgentExe
N	ActivSurf	backweb*****.exe	Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates
U	Ad Blocker	blocker.exe	Ad Blocker - blocks popups, and also removes banners, image ads and flash ads
?	Ad Online Guide	adonlineguide.exe	??
N	Ad-aware	Ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
U	Ad-Muncher	ADMUNCH.EXE	Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications
U	Ad-watch	Ad-watch.exe	Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system
U	AD2KClient	AD2KClient.exe	Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N	AdaptecDirectCD	Directcd.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
N	Adaware Bootup	ad-aware.exe	Ad-aware from Lavasoft. Checks your PC for "Spyware" which reports back your internet activities to "base". Available via Start -> Programs
X	Adaware lptt01 or Adaware ml097e	adaware.exe	Variant of the RapidBlaster parasite (in a "Adaware" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Lavasoft Adaware
X	AddClass	AddClass.exe	CoolWebSearch parasite related
U	AdDelete	AdDelete.exe	Banner advertisment blocker
X	AdDestroyer	AdDestroyer.exe	Like VirtualBouncer, malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the malware it claims to remove/prevent, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code
?	ADG	ADG.exe	SoundBlaster Audigy related?
N	ADGJdet	ADGJDet.exe	Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection
Y	Adiras	Adiras.exe	ADSL USB modem related
X	ADM Library Loader	admlib32.exe	Added as a result of a variant of the SDBOT VIRUS!
X	Adobe	Adobe.exe	Added as a result of an unidentified VIRUS!
U	Adobe Gamma Loader	Adobe Gamma Loader.exe	Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine
X	AdobeA	adobes.exe	Added as a result of the FLOOD.BA VIRUS!
X	AdobeFonts	fonts.hta	Browser hijacker - redirecting to Hugesearch.net
X	adp	adp.exe	Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc
N	ADQuickAccess	Adtray.exe	After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95
X	AdRoarUpdate	ARUpdate.exe	AdRoar adware updater
U	ADService	ADService.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
U	AdsGone	Adsgone.exe	AdsGone - pop-up stopper
N	ADSL Diagnostic Tools	mapiicon.exe	System tray access to ADSL modem diagnostic tools. Available via Start -> Programs
Y	AdslTaskBar	rundll32.exe stmctrl.dll, TaskBar	ISP software, initializes DSL modem
?	ADSL_A2	A2Installed	??
Y	ADSS	ADSS.exe	ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied
U	AdSubtract	adsub.exe	AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs
X	AdultX	AdultX.exe	Adult content dialler and hijacker
X	Adult_Chat	Adult_Chat.exe	Adult content dialler
X	Adult_Chat1	Adult_Chat1.exe	Adult content dialler
U	ADUserMon	ADUserMon.exe	Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip® disk. Required if you wish the applications to launch on insertion of a disk
N	Advanced Tools Check or ADVCHK	ADVCHK.EXE	Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget
X	Advapi	Advapi.exe	Added as a result of the NETDEVIL.12 (NetDevil 1.2) VIRUS!
U	Advertising Killer	Akiller.exe	AKiller - pop-up stopper
U	Adware Agent	adware agent.exe	Adware Agent popup blocker
?	Aeiwlsta.exe	Aeiwlsta.exe	IBM High Rate Wireless LAN Adapter driver. Is it required?
N	AELaunch	AELaunch.exe	Audio Applications Launcher for the Philips Acoustic Edge soundcard
?	AeXSWDUsr	AeXSWDUsr.exe	Altiris Express NS Client Manager software. Is it required?
U	AEZBProc	aptezbp.exe	IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions
U	AFAFilter	windefault.exe	AFAFilter - internet filter software
N	Agent	Agent.exe	Cyberlink Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs
?	Agente	Remupd.exe	Part of Panda Antivirus Titanium. Is this an update reminder (guess because of the name), virus definition update reminder or something similar?
U	AgfaCLnk	AgfaCLnk.exe	For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive
Y	AGRSMMSG	AGRSMMSG.exe	IBM AMR modem driver
N	AGSatellite	AGSatellite.exe	Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs
U	ahfp or ahfprog	ahfp.exe	Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"
U	AHNSD	AhnSD.exe	AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis
?	AHNUE	AHNUE.exe	??
N	AHQInit	ahqinit.exe	Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required
X	Ahst	iebs.exe	Downloader - identified by BOClean as MENDWARE trojan. Also identified as PurityScan/Clickspring adware
U	aiepk	aiepk2.exe	Another IE Popup Killer - pop-up stopper
N	AIM	aim.exe	AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs
X	AIM reminder	AIM reminder.exe	Added as a result of the BUDDY VIRUS!
X	aimaol lptt01 or aimaol ml097e	aimaol.exe	Variant of the RapidBlaster parasite (in a "Aimaol" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
N	AimingClick	AimingClick.exe	AimingClick from AimingTech. Web searching tool. Available via Start -> Programs
N	AIMster	??	Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs
N	AIMWDInstall	AIMWDInstall.exe	Wild Tangent on-line games installer as part of AOL Instant Messenger. Note that Wild Tanget's privacy policy states they also collect and share individuals information
Y	Aiptek Graphics Tablet (USB)	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
X	AKEYNAME	WinServ.exe	Added as a result of the EVILBOT.C VIRUS!
U	AKiller	akiller.exe	BuyPin Advertising Killer - popup killer
U	Alarm Manager	Alarm.app.exe	Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop
?	AlarmWatcher	AlarmWatcher.exe	Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?
N	Album Fast Start	ABMTSR.EXE	Scanner software, not required for scanner to work
X	Alchem	Alchem.exe	Ipinsight parasite variant
U	Alcohol or Alcohol Autorun	Alcohol.exe	Alcohol 120% - CD/DVD emulation/writing/copying software
?	Alcom PCL Capture	FMW_PCAP.EXE	??
X	AlcxMonitor	Alcxmntr.exe	Realtek AC97 Audio - Event Monitor. Sypware file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but is being used by Realtek to gather data about customers
X	Alevir	Alevir.exe	Added as a result of the OPASERV.A VIRUS!
X	Alevir	Alevir.exe	Added as a result of the OPASERV.F or OPASERV.G VIRUSES!
X	AlevirOld	<worm filename>	Added as a result of the OPASERV.G VIRUS!
N	Alexa	Alexa.exe?	Alexa Toolbar "is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs
?	ALFY Accellerator	AlfyAC~1.exe	??
N	AlienAutopsy	Test_BS.exe	Alienware computer technical support software
Y	ALiSndMgr	ALiSndMg.exe	ALi AC97 Sound driver
?	AliUSBfix	GREENMK.exe	May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?
U	All Aboard Status	stswin.exe	All Aboard! Internet Connection Sharing status icon
X	All Sea screen saver	TaskTray.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
X	All Sea web link	FWLink.exe	"Free screensaver", installs lots of foistware. See here. Get rid of it
U	allSnap	allSnap.exe	"allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"
U	Alogserv	Alogserv.exe	From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up
Y	Alps Electric USB Server	Monserv.exe	Alps Electric USB Server - required according to this article
U	AlpsPoint or Apoint	Apoint.exe	Touchpad software for laptop PC's. For instance it is found on the Panasonic machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work
?	ALServ	ALServ.exe	Altec Lansing AMS speaker related. What does it do and is it required?
N	Altnet or AltnetPointsManager	points manager.exe	Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
U	AltoMB_service	AltoMBsrv.exe	Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management
U	ALUAlert	ALUNotify.exe	Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis
U	AlwaysOnTopMaker	AlwaysOnTopMaker.exe	Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop
N	America Online *.* Tray Icon	aoltray.exe	Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs
N	AME_CSA	rundll32 amecsa.cpl, RUN_DLL	Loads ADSL modem Control Panel applet
Y	Amon	AMON.EXE	Monitoring part of Eset's NOD32 virus-scanner
Y	Amonitor	amon.exe	Tiny Personal Firewall
X	anbv32	nabv32.exe	Added as a result of the TITOG.C VIRUS!
?	AnnotateCheck	AnnCheck.exe	Genius Wizard Pen Tablet driver related. Is it required?
N	Announcements	Annclist.exe	MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
N	Anntext	Anntext.exe	Caere Pagekeeper text annotation server
U	Another Internet Explorer Popup Killer	aiepk.exe	Another IE Popup Killer - pop-up stopper
U	Anti-keylogger check	antikey.exe	Anti-keylogger - protects against keylogger programs monitoring your keystrokes
U	Anti-Trojan-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
U	AntiPopUp	AntiPopUp.exe	AntiPopUp for IE - pop-up stopper
X	Antivirus	av.exe	Added as a result of the SINKIN VIRUS! Resets IE start page to realphx.com
X	Antivirus	maja.exe	Added as a result of the NETSKY.H VIRUS!
?	AntiVirusProtection	qumk.exe	??
Y	AnVir	AnVir.exe	AnVir virus destroyer
U	anvshell	anvshell.exe	System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar
?	anycom bluetooth	ftflauncher.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
N	AO Tray or AOTray	AOTray.Exe	System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel
U	AolAcsDaemon1	Acsd.exe	AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually
X	AolCon	config.com	Added as a result of the TAPLAK VIRUS!
N	AolFix	AolFix.exe	Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL  to run correctly. Not seen much any more and should only run once
X	Aornum	aornum.exe	Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware
Y	APC UPS Status	Display.exe	APC PowerChute Personal Edition status icon
U	APC_SERVICE	mainserv.exe	PowerChute® Personal Edition - "safe system shutdown software with sophisticated power management functions"
Y	apc_tray	apc_tray.exe	Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure
?	Apmsrv9x	APMSRV9X.EXE	Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
X	App.EXEName	.exe	Added as a result of the BODIRU VIRUS!
U	Appcon	vAppCon.exe	Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established
U	AppExtender	AppExtCB.exe	Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received
Y	Application	mdmsetsp.exe	Aztech Labs modem driver
U	AppPlus	AppPlus.exe	AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"
Y	Apvxd or Apvxdwin	APVXDWIN.EXE	Part of Panda Anti-Virus. Required to enable permanent virus protection
Y	Apwheel	Apwheel.exe	Wheel support for an Alps mouse
X	ara-key		Added as a result of the ANTINNY VIRUS! where <random> is a random program name with random characters
N	ARCSolo Recovery	N/A	Backup software by Computer Associates - no longer supported
X	Aritima	aritima.exe	Added as a result of the ARITIMA VIRUS!
U	Artera	arteraui.exe	Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance
Y	ashMaiSv	ashmaisv.exe	Part of Avast! anti-virus software
U	AsioReg	regsvr32.exe ctasio.dll	ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
N	asp4tray	asp4tray.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	AspireTimeMachine	acertmb.exe	System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry
X	AST	AST	Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
U	ASTART	astart.exe	ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
X	AStart	AStart	Added as a result of the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!
N	asTray	Astray.exe	Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer
N	Astro	Astro.exe	Checks for updates to Quicken on a system reboot
N	ASUS Probe	AsusProb.exe	ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area
U	ASUS SmartDoctor	VGAProbe.exe	ASUS video card fan/thermal monitor
U	ASUS TweakEnable	astart.exe	Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings
N	ASUSKey	V38SHELL.EXE	System tray Icon for quickly changing video modes
N	ASWDP	ASWDP.exe	MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market
X	ASWnk	aswnk.exe	Adult content dialler
U	AT-Watch	ATWatch.exe	Anti-Trojan Watch - trojan detector
N	ATI GART Set-up Utility	Atigart.exe	Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed
U	ATI Launchpad	launchpd.exe	Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu
N	ATI Scheduler	Atisched.exe	Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see
N	ATI Task Application	Atitkad.exe	System Tray access to common display functions on ATI video cards. As above
N	ATI Task Application (Atikey)	Atitask.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
?	Ati2cwxx	Ati2cwxx.exe	For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it
N	Ati2mdxx	Ati2mdxx.exe	For ATI video cards. System Tray access to display mode changing
U	AtiCwd or AtiCwd32	AtiCwd.exe AtiCwd32.exe Ati2cwad.exe	This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card
N	AtiKey	AtiKey32.exe atiptkad.exe	System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display
U	ATIModeChange	Ati2mdxx.exe	System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager
U	ATIPOLAB or ATIPOLL	ati2evxx.exe	ATI External Event Utility EXE Module. This task can comsume lots of CPU resournces  on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources
U	AtiPTA or AtiPTAAA or atiptaxx	Ati2ptxx.exe Atiptaxx.exe	Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings
U	AtiQiPcl	AtiQiPcl.exe	Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's
U	ATISmart	ati2s9ag.exe	ATI's "SMARTGART", which is included with the "Catalyst" drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings
X	atisrc2	windfind.exe	Adult content dialler - see here. This has to be cleared at the same time as MSStartOptimizer (WINUPD.EXE), mmxrun (msosa.exe) and RegCompres (REGCPM32.EXE), otherwise they return
N	atitray or AtiTrayTools	atitray.exe	ATI Tray Tool - allows quick access to ATI graphics card settings
X	atiupdate	ATIUPDATE5.EXE	Added as a result of the DEBESKI.A VIRUS!
U	ATIX10	atix10.exe	ATI Remote Wonder - PC wireless remote control
X	ATM Control	adpn.exe	Added as a result of the MMS.A VIRUS!
N	ATnotes	atnotes.exe	Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs
N	Atomica	atomica.exe	Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key
U	AtomicTime	ATOMICTIME.EXE	AtomicTime - utility that synchronizes your PC clock to an atomic clock
U	Atrack	atrack.exe	New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert
U	Atray	Atray.exe	Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons
U	ATTBroadbandUpdate	SAUpdate.exe	Big Brother from Quest Software. System and network monitor
U	ATTRedUpdate	AutoUpdate.exe	Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates
X	AttuneClientEngine	attune_ce.exe	"Attune is a revolutionary service that provides you with targeted Intelligram messages to help you avoid common computer problems. Attune may also let you know when you need a specific product, service, or upgrade to optimise the use of your computer". Not required - treated as adware
X	AttuneContentUpdater	attune_cu.exe	Related to the above. All needed for the program to do its job properly
X	AttuneDiscovery	attune_di.exe	Related to the above. All needed for the program to do its job properly
X	AttuneSystray	attune_st.exe	Related to the above. All needed for the program to do its job properly
N	aTuner	atuner.exe	aTuner - tweak tool for GeForce based graphics cards
Y	atwtusb	atwtusb.exe	USB interface for Aiptek Graphics Tablet (USB)
U	AU Agent	AUagent.exe	Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon
X	au.exe	au.exe	Added as the result of the BEAGLE.B VIRUS!
Y	AUCBPNP	aucbnpn.exe	Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot
X	Aucompat	Aucompat.exe	Added as a result of the GEMA VIRUS!
?	AudCtrl	RunDll32 AudCtrl.dll, RCMonitor	Audio control panel?
N	AudioHQ	Ahqtb.exe	For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs
Y	Aureal A3D Interactive Audio	sa3dsrv.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
Y	Aureal A3D Interactive Audio Init	A3dInit.exe	For Aureal based 3D soundcards. A3D sound features won't work with this disabled
X	ausvc	ausvc.exe	Added as a result of the AUTOUPDER VIRUS!
N	Auto T Bar or autotbar	autotbar.exe	If you disable the HP VIEW toolbar in IE and rarrange the toolbars on a reboot they will be back as they were before if this is left enabled
U	Autobar	autobar.exe	Connect buttons on the keyboard for internet direct access, etc. on HP computers
N	AutoEA	Ahqrun.exe	For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ
X	Autoloaderaproposclient	Apropos_Client_Loader.exe	AproposMedia adware
N	AutoMate Task Service	automate.exe	Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs
X	Automatic Windows Updater	Update.exe	Added as a result of the GAOBOT.AO VIRUS!
N	Automatically launches the United Devices Agent when you start your computer	UD.EXE	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs
N	AUTOPROP	REGPROP.EXE WMPADDIN.DLL	Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension
?	AutoShutdown	pssvc.exe	Utility to fix vCard Export in MS Outlook 2000 - although why are these together?
U	AutoSizer	AUTOSIZER.EXE	AutoSizer - utility that automatically maximizes windows when they're opened
N	AutoSpell 5	ASWATC32.EXE	AutoSpell - spell checker
N	AutoTKit	AUTOTKIT.EXE	On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled
N	autoupd	autoupd.exe	Raxco Software Auto Update utility."Used to keep your software up-to-date"
X	autoupd	autoupd.exe	VIRUS! - found in a folder of the same name
X	AutoUpdater	aupdate.exe	Aupdate, Tinybar variant. Spyware
X	AutoUpdater	AutoUpdate.exe	PeopleonPage foistware
N	AUXXTRAY	au30setp.exe	System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel
Y	Avast!	ashserv.exe	Avast! anti-virus software
Y	Avast32	Astart32.exe	Avast32 anti-virus - scanner
U	AvconsoleEXE	Avconsol.exe	From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it
X	AveoAttune	atmdlusr.exe	Related to AttuneClientEngine above
Y	AVG7_CC	AVGCC.exe	AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Y	AVG7_Run	avgw.exe	Part of AVG Anti-Virus 7.0
Y	avgamsvr.exe	Avgamsvr.exe	AVG antivirus related
Y	AVGCtrl	AVGCTRL.EXE	Background task of the AntiVir antivirus program which scans files transparently in the background
Y	avgmsvr.exe	avgmsvr.exe	Required for AVG Anti-Virus 7.0 to function
Y	Avgserv9.exe	Avgserv9.exe	Background monitoring program for AVG anti-virus
Y	AVG_CC or avgcc32	avgcc32.exe	AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates
Y	AVG_EMC	AVGEMC.exe	AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Y	AVG_RegCleaner	AVGREGCL.exe	AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems
X	Avimgt	Avimgt.exe	Added as a result of the GEMA VIRUS!
X	Avimgt32	Avimgt32.exe	Added as a result of the GEMA VIRUS!
Y	AvMaiSrv	Avmaisrv.exe	Avast32 anti-virus - E-mail scanner
Y	avpcc	avpcc.exe	Kaspersky Labs anti-virus
Y	avpm	avpm.exe	Kaspersky antivirus
X	Avril Lavigne - Muse	<random filename>	Added as a result of the AVRIL-A VIRUS!
Y	AVSCHED32	AVSched32.exe	AntiVir anti-virus from H+BDEV
X	avserve.exe	avserve.exe	Added as a result of the SASSER VIRUS!
X	avserve2.exe	avserve2.exe	Added as a result of the SASSER.B or SASSER.C VIRUSES!
N	Avtray	Avtray.exe	Command Antivirus tray icon
U	AVWUpd32	AVWUPD32.EXE	AntiVir updater. Useful, but can be run manually
Y	avx communicator	xcommsur.exe	Anti-virus part of BitDefender virus scanner/firewall
Y	Avxlive	avxlive.exe	Bullguard or BitDefender antivirus
Y	avxlni	avxinit.exe	Anti-virus part of BitDefender virus scanner/firewall
?	Avxnews	??	??
N	awhost32	awhost32.exe	Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended
?	AxFilter	Rundll32 AXFILTER.DLL, Rundll32	??
Y	a²	a2guard.exe	a² antitrojan
N	B'sCLiP	BSCLIP.exe	CD recording utility that comes with a lot of CDR/CDRW drives and isn't required
N	B.Reader	remin.exe	Birthday Reminder 5.0 - as the name implies
X	b3d	BDEsecureinstall.exe	B3d Projector - installed along with the KaZaA file sharing utility. Causes a program called "ZUPDATE.EXE" to periodically try to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in C:\Windows\System. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents
X	b3dUpdate	Zupdate.exe	Same as above but not installed via KaZaA
U	b9	B9.exe	FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run"
X	b99	msmm.exe	ClientMan parasite variant
X	babeie	rundll32 cnbabe.dll, dllstartup	CommonName Toolbar spyware. To uninstall see here
N	Babylon Translator	Babylon.exe	"Babylon-Pro is a powerful information tool that instantly provides relevant information, translations & conversions for any word or value you click on"
U	BackgroundSwitcher	bgswitch.exe	Background Switcher Powertoy. Included with the last beta version of the XP Powertoys. Whenever a user right clicked his desktop and chose properties he could see a new tab which allowed him to enable a "Desktop Slide Show." This would automatically change the Windows Desktop at an interval specified by the user. Available here
N	Backpack UDF	bpudfmon.exe	Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk
U	BackupExecScheduler	besch.exe	Veritas "Back Up My PC" software
?	BackupNotify	backupnotify.exe	HP Digital Imaging related. What does it do and is it required?
N	BackWeb	backweb.exe	Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs
N	Backwork	Backwork.exe	Backwork trojan detector
U	BACPI10	bacpi10a.exe	Known as "PowerKey" - a minimalistic keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win95/98/NT4). Also adds an icon to the system tray
N	BacsTray	BacsTray.exe	Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems
X	BADDATE	BADDATE.EXE	Added as a result of an unidentified VIRUS!
X	BagleAV	csrss.exe	Added as a result of the NETSKY.AB VIRUS! Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X	Bakra	IEHost.EXE	IEDriver adware variant
U	Banpopup by Pratik	Banpopup.exe	Banpopup - popup killer
X	bargains	bargains.exe bargainbuddy.exe	Bargain Buddy - advertising spyware installed with Net2Phone & LimeWire amongst others. Some further information here
?	Bart Station	station.sbrt	Related to PeoplePC ISP. May be a dialler for dial-up accounts?
X	Bat	secure2.bat	Added as a result of the ZCREW.C VIRUS!
N	Batchreg1	N/A	Part of the Windows System Recovery process. Added to the registry via Msbatch.inf. The existence of this key or process after the last reboot during installation indicates an unsuccessful installation, as that key should be deleted automatically. See here
U	Battery Scope	batmgr.exe	Monitors battery levels on a notebook/laptop PC
U	BatteryBar	batterybar.exe	BatteryBar - displays battery usage, and the current percentage of battery power left
X	BatzBack	BatzBack.scr	Added as a result of the BACKZAT VIRUS!
U	BAUSB	BAUSB.exe	Boston Acoustics Audio, USB driver
U	BayMgr	DockApp.exe	Hot-swappable drive management on laptops allowing you to change drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap	bayswap.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
U	Bayswap2	TbUpdate.exe	Hot-swappable drive management on Compaq Notebooks which allows you to swap drives without closing down Windows. Only required if you frequently swap bay devices
N	bbSysTray	bbSysTray.exe	Philips CD-RW related - "the 'Blue Button' feature gives users the chance to receive convenient online support for their possible device problems or questions"
U	bbui	bbui.exe	AOL DSL status monitor displaying a red/green icon indicating if you have a connection
U	bca	bca.exe	BeClean Agent - registry, history, temp files, etc cleaner
U	BCDetect	bcdetect.exe	Bcdetect.exe searches the system to make sure Creative drivers are installed for the video card. It loads the BlasterControl when the drivers are detected. Your choice - try it and see
Y	BCMDMMSG	bcmdmmsg.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
U	BCMHal	rundll32.exe bcmhal9x.dll, bcinit	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
Y	BCMSMMSG	BCMSMMSG.exe	BCM voicemodem driver. Required for dial-up if you have one of these modems
?	bcmwltry	bcmwltry.exe	Broadcom Corporation Wireless Network Tray Applet. Is it required?
N	BCNT	bcnt.exe	AWS Weatherbug related. What does it do?
U	BCTweak	bctweak.exe	BlasterControl for Creative video cards - controls for desktop settings, monitor configuration, colour adjustments and performance tuning. May be needed to retain settings
N	BCWipeTM	bcwipetm.exe	BCWipe Task Manager - scheduler for BCWipe so that it runs at convenient times. You can set a time for running the task, as well as special options for the task. Run manually when needed
Y	BDMCon	Bdmcon.exe	BitDefender antivirus
Y	BDNewsAgent	bdnagent.exe	BitDefender antivirus - updater
N	BearShare	bearshare.exe	BearShare file sharing client. Versions known to include spyware - see here
?	BEEI	beei.exe	??
?	BEHL	BEHL.exe	??
?	BEHLO	BEHLO.exe	??
?	BELORVBI	BELORVBI.exe	??
?	Belsta.exe	Belsta.exe	Configuration tool for Belkin wireless network cards. Required to change the card’s configuration. Is it required for correct operation once the confuiguration is changed?
X	Belt	Belt.exe	Abetterinternet adware related
X	Benadril Alert Tool	benadrilalert.exe	Plug-in for WeatherBug advising when pollen count in your area is high - prompting you to buy Benadril
Y	bg	bullguard.exe	Bullguard antivirus and firewall. The P2P version is free with KaZaA Media Desktop and Grokster
N	bgsmsnd	bgsmsnd.exe	Printer driver to generate PDF files from any program
N	BHOCop	BHOCop.exe	ZDNet's BHO Cop that lets you see what browser helper objects are installed. Useful for detecting spyware
X	BIE	Rundll32.exe BDSrHook.dll, Rundll32	BDplugin parasite
N	bigfix	BIGFIX.EXE	BigFix can automatically download and read technical support information provided by computer and software manufacturers and other technical support experts (published in the form of Fixlet® Messages) and can automatically check your computer for bugs, configuration conflicts, and security holes. Should only be started manually as it's a resource hog
U	BigPond Toolbar	bpumTray.exe	Telstra BigPond Toolbar - "Introducing the free and easy to use BigPond Toolbar that is designed to make your internet experience and managing your Telstra internet account a whole lot easier"
N	Billminder	Billmind.exe	Can be setup in Quicken to remind user of due payments. Available via Start -> Programs
X	bin32hpu	ppstub.exe	PrecisionPop adware
X	bingdian	Bingdian.vbs	Added as a result of the BINGD VIRUS!
?	Bingo Charm	charms.exe	Some kind of screen icon kind of like desk flag, but it gives you a choice of icons?
X	Bios	Bios32.exe	Added as a result of an unidentified VIURS!
X	BIOS1	BIOS1.EXE	Added as a result of the OPASERV.T VIRUS!
?	BIOVCIP	BIOVCIP.exe	??
Y	BitDefender Communicator	xcommsvr.exe	BitDefender antivirus
U	BitDefender for MSN Messenger	msnmon.exe	Bitdefender anti-virus for MSN Messenger. Unless you have MSN Messenger running all the time start it manually
U	BitDefender for Yahoo! Messenger	yahmon.exe	BitDefender Antivirus for Yahoo! Messenger - free AV add-on for Yahoo! Messenger
Y	BitDefender Live! Init	bdinit.exe	BitDefender antivirus
Y	BitDefender Scan Server	bdss.exe	BitDefender antivirus
Y	BitDefender Virus Shield	vsserv.exe	BitDefender antivirus
Y	bitdefenderlive	avxlive.exe	Main program of BitDefender virus scanner/firewall
U	BitDefender_P2P_Startup	BitDefender_P2P_Startup.exe	Bitdefender anti-virus for file transfers via internet messaging clients such as ICQ and MSN Messenger. Unless you have these running all the time start it manually
N	BitWare Print Monitor	bwprnmon.exe	FaxServe network fax software
N	BJ Printer Status Monitor	Cjstsr.exe	Canon BJ printer status monitor
N	BJ Status Monitor 5xx	CJSTRxx.EXE	Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> Printers
N	bjcfd	cdf.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
N	BlackICE PC Protection or BlackIce Utility	blackice.exe	Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD
N	BlazeChanger	FBZPaper.exe	Ember graphic file viewer, manager, and touch-up system
X	BLMessagingIntegration	blengine.exe	BuddyLinks adware
U	BlockAds or blads	blads.exe	A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks
N	BlockTracker	BlockTracker.exe	If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file
X	blss	blss.exe	CBlaster trojan/dialer/downloader
N	BLSTAPP	blstapp.exe	Puts access to Creative's BlasterControl in the System Tray
U	BlueToothAuthentication Agent	RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent	Associated with a Bluetooth adapter. If disabled the error dialogue box disappears
N	BMail Installation	FTP_back.exe	Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not
U	BMMGAG	Rundll32 PWRMONIT.DLL, StartPwrMonitor	Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window
U	BMMLREF	BMMLREF.EXE	Battery Manager for IBM ThinkPad laptops
U	BMO MasterCard Wallet	EWALLET.EXE	The wallet conveniently stores billing, shipping and payment information on your PC
N	BMupdate	BMupdate.exe	Related to BookmarkCentral below. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install
X	BMZ	bmz.exe	nCase adware
X	Bndt32	Bndt32.exe	Added as a result of the LACON VIRUS!
X	Bnexe	<random filename>	Added as a result of the KITRO.D (or ARGEN.A) VIRUS!
Y	BOCleanautostart	Boclean.exe	NSClean's BOClean anti-trojan software
U	bombshel	BOMB32.EXE	Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems
X	Bonzi Buddy	??	Spyware - read here for information and here for removal instructions
X	BookedSpace	bs2.dll,DllRun	Adware, related to the Remanent parasite
N	BookmarkCentral	BMLauncher.exe	Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use"
U	Boost XP Service	bxservice.exe	Boost XP from Systweak - WinXP tweaking utility
X	boot	boot.exe	Added as a result of the ELEM VIRUS!
X	Boot Manager	Njgal.exe	Added as a result of the KILO VIRUS!
X	BootLoader	BootLoader.exe.vbs	Added as a result of the WATERWORKS VIRUS!
U	BootStatus	BOOTST~1.EXE	Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day.  Once you exit it, it has no more effect on resources
N	Bose Wave/PC Monitor	wavepcmonitor.exe	System Tray access for this system (more info on the system here). Available via Start -> Programs
U	bpcpost.exe	bpcpost.exe	MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it
U	BPK	bpk.exe	Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove
N	BPServer	G6FTPSrv.exe	BulletProof FTP Server
U	BQTray.exe	BQTray.exe	System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
X	Brasil	Brasil.exe	Added as a result of the OPASERV.E VIRUS!
X	Brasil	BRASIL.PIF	Added as a result of the OPASERV.E VIRUS!
X	BrasilOld	<worm filename>	Added as a result of the OPASERV.P VIRUS!
X	Bridge	rundll32.exe ...Bridge.dll	Flingstone.com browser hijacker
Y	Brindys BriTray	BRITRAY.EXE	Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired
N	Broadband Wizard	bbwiz.exe	Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs
N	BrowseProxy	FindService.exe	Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you"
X	browser aid	browseraid.exe	BrowserAid/BrowserPal foistware
Y	Browser Hijack Blaster	bhblaster.exe	Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings
U	Browser Launcher	Commandr.exe	Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys
X	Browser Pal	adblck.exe	BrowserAid/BrowserPal foistware
N	BrowserWebCheck	loadwc.exe	Checks to make sure that IE is still your default browser
X	Bsoft lppt01	Bsoft.exe	New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Bsx3	Rundll32.exe bs3.dll, DllRun	BookedSpace parasite variant
?	btinst	btinst.exe	Associated with an Anycom bluetooth wireless card. What does it do and is it required?
U	bttray	bttray.exe	System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard (ditto above), advanced configuration, quick connect and shutdown device
Y	BTUSRBDGF	BtUsrBdg.exe	Used with a Mitsumi USB Bluetooth adaptor
N	Buddyizer	Buddyizer.exe	Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network
U	bugwatcher service	bugwatcher.exe	Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures
?	BuildBU or bldbubg	bldbubg.exe	Found on a Dell machine??
U	Bulldog Service	upsd.exe	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link
Y	BullGuard	mgui.exe	Part of Bullguard antivirus
U	BullGuard Update	avxlive.exe	Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions
Y	BullGuard XComm	XCOMMSVR.EXE	Part of Bullguard antivirus
Y	BullGuardInit	AVXINIT.EXE	Part of Bullguard antivirus
Y	BullguardoptIn	bulldownload.exe	Part of Bullguard antivirus
?	BullsEye Tracker	BeTrack.exe	Bullseye - intelligent research assistant
N	BurnQuick Queue	BQTray.exe	System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually
U	Button Server	bttnserv.exe	Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required
N	ButtonKey	ButtonKey.exe	CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut
N	Buzme	Bmui.exe	Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
U	Buzof.exe	buzof.exe	Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes"
X	bxsx5	RunDLL32.EXE bsx5.dll	BookedSpace parasite variant
X	bxxs5	RunDLL32.EXE bxxs5.dll, dllrun	BookedSpace parasite
X	Bymer.Scanner	Wininit.exe Msinit.exe	Added as a result of the BYMER VIRUS!
X	c	c:archiv~1win.com	Added as a result of the CUYDOC VIRUS!
U	C-Media Echo Control	EchoCtrl.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer (below)
N	C-Media Mixer	Mixer.exe	C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs
U	C2K	CYB2K.EXE	CYBERsitter 2000 or 2001 -  anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser
X	Cabchk	Cabchk.exe	Added as a result of the GEMA VIRUS!
X	Cabchk32	Cabchk32.exe	Added as a result of the GEMA VIRUS!
X	CABCInstall	CABCInstall.exe	CABC content delivery software
N	Cacheman	Cacheman.exe	Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up
Y	CacheMgr	CacheMgr.exe	Sophos Antivirus Remote Update
N	CACStarter	cacstart.exe	Cash A Check - check writing software
U	Caddais BackupOnDemand	BODMon.exe	Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"
U	CADS	cads.exe	Cyber Sentinel internet filtering software
N	CAgent	CAgent.exe	Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents
X	cAgOu	<filename>.hta	Added as a result of the KAKWORM VIRUS!
N	CahootWebcard	CahootWebcard.exe	"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed
N	Cal Reminder Shortcut	calrem.exe	Produces a pop-up reminder of events scheduled using the MS Office Calendar
?	CallBumping	cbpopw.exe	??
N	CallControl	ftctrl32.exe	FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows
N	CamCheck	CamCheck.exe	NuCam camera software related
N	Camio Viewer x	IXApplet.exe	Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version
?	CamMonitor	hpqcmon.exe	From HP and related to digital imaging
N	Canada	Canada.exe	Known to be a dialler - but is it maliscous or clean?
N	Canary	canary-std.exe	Canary monitoring program. Keylogger, monitors all computer activity
N	Canon Printer Monitor BJCxxx	Cjstlst.exe	Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
N	Capfax	capfax.exe	PhoneTools fax software
Y	Capon	Capon.exe	Canon printer driver
N	Capture Express 2000	capexp.exe	Capture Express - screen capture utility
N	Card Monitor	REGCNT09.exe	For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs
U	CARPservice	carpserv.exe	Associated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example
?	CasAgnt	CasAgnt.exe	Related to a Casio PDA - but what does it do and is required?
X	Casdvqwa	bmqnzkg.exe	Added as a result of the RANDEX.BE VIRUS!
N	Cashsurfers Cashbar Navigator	Cashbar.Exe	Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"
X	CAZNOVAS	CAZNOVAS.exe	Added as a result of the CAZNO VIRUS!
U	CBWAttn	CBWAttn.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
U	CBWHost	CBWHost.exe	Required for Bitware to answer incoming faxes, can cause sleep mode problems
?	CBWUser	CBWDial.exe	Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop
X	CC2KUI	comet.exe	Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more information and for the uninstall procedure
Y	ccApp	ccApp.exe	Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this
X	ccApp	<filename>	Added as a result of the OBSORB VIRUS! Note the random filename compared to the valid Norton AntiVirus entry above
U	CCD Manager	DDS.EXE	Project Labs Century CD manager for their CD/DVD storage device
N	Ccdecode	rundll32.exe streamci, StreamingDeviceSetup	Part of the closed caption decdoder/MS VBI codec. Should only run once
Y	CCDoctorLogonTesting	ccdoctor.exe	Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product
Y	CcEvtMgr	ccEvtMgr.exe	Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this
Y	CcPxySvc	CCPXYSVC.exe	Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall
X	ccreg	explorer.exe	Added as a result of the ZCREW VIRUS! Note - this is not the valid explorer.exe
Y	CcRegVfy	ccRegVfy.exe	Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"
Y	ccSetMgr	ccSetMgr.exe	Part of Norton AntiVirus 2004. What does it do?
U	ccWasher	aolwasher.exe	Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL
N	CDANTSRV	CDANTSRV.exe	C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually
X	Cdcompat	Cdcompat.exe	Added as a result of the GEMA VIRUS!
N	CDInterceptor	cdi.exe	CD indexer for measuring the speed of CD players
N	CDTray	CDTray.exe	On HP PCs, this is the small CD icon next to the time
?	CeEKEY	CeEKey.exe	Toshiba Satellite E-Key related. Is it required?
U	CeEPOWER	cepmtray.exe	Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed, Monitor Shut Off, Hard Drive Shut-Off, Monitor Brightness, System Stand-by and System Hibernate times
?	Ceic	Ceic.exe	??
X	Cekirge	<path to worm>	Added as a result of the KERGEZ.A VIRUS!
?	CEPA	wsot.exe	??
X	cesmain.dll	cmail.dll, Rundll32	CnsMin "Chinese Keywords" hijacker related
N	CFD	CFD.exe	BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs
X	CFDStart	WinMuschi.exe	WINMUSCHI dialler
Y	cfgintpr	cfgintpr.exe	Configuration Interpreter - part of Tiny Personal Firewall V4
N	cfgwiz	cfgwiz.exe	Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it
?	cFosDNT	cFosDNT.exe	cFos DSL Modem driver related. What does it do and is it required?
?	cFosInst_Check	cfosinst.exe	cFos DSL Modem driver related. What does it do and is it required?
X	cftmon32	taskmgr#.exe	Added as a result of the SOWSAT.C and SOWSAT.J VIRUSES! where # is a number greater than or equal to zero
U	CGServer	cgserver.exe	Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs
X	Cgtask Services	cgtask.exe	Added as a result of the LALA.B VIRUS!
U	ChamClock	ChamClock.exe	Chameleon Clock - system tray clock replacement
?	ChangeLines	chngline.exe	??
N	Chcenter	chcenter.exe	IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"
X	Cheatle	GigaByte.exe	Added as a result of the SHODI.B VIRUS!
N	Check for One Touch Update	wiseupdt.exe	Checks for updates for Visioneer OneTouch scanners
U	Check Messenger	cmesseng.exe	Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account
U	CheckIt	ToolBox.exe	CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify
Y	CheckMsgPlus	MsgPlusH.dll, VerifyInstallation	Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.
?	checktime	ct.exe	Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?
U	CherryKeyMan	KeyMan.exe	Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys
U	ChineseStar	cstar.exe	Chinese language support software
N	CHKADMIN	CHKADMIN.EXE	Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"
X	Choke	Choke.exe-blahh	Added as a result of the CHOKE VIRUS!
X	chostsv	chostsv.exe	Added as a result of the BANPAES.C VIRUS!
U	CHotKey	mhotkey.exe MK9805.EXE	Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features
N	Christmas Music Player	TTEST6.EXE	"Christmas Music Player brings the music of the Christmas Holiday to your desktop"
?	ChromeMark	keysh.exe	Related to this. Don't know what keysh.exe does though and if it's required
?	ChronitelInitTV	CHTVINIT.EXE	??
X	CiaBackdoor	msldr.com	Added by a VIRUS!
X	cihost.exe	cihost.exe	Added as a result of the LINST VIRUS!
N	CIJxP2PSERVER	CIJxP2PS.EXE	Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7
N	CISrvr Program	CISRVR.EXE	Related to internet setup on Compaq PC's
X	Cissi	Cissi.exe	Added as a result of the CISSI.A VIRUS!
N	CitiVAN	CitiVAN.exe	Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again
Y	Cjstcom	Cjstcom.exe	Canon printer BJ status language monitor
U	CLCLSet	CLCL.exe	CLCL clipboard caching utility
?	CleanEasyImg	cleanall.exe	??
U	CleanSweep Smart Sweep- Internet Sweep	Csinsm32.exe	Automatic logging of installs from Norton CleanSweep - available via Start -> Programs
N	CleanSweep Useage Watch	CSUSEM32.EXE	Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time
U	CleanTemp	CLEANT~1.EXEB CleanTemp.exe	CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory
N	Cleanup	ONICTASK.EXE	Internet Cleanup from Aladdin Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet
?	CleanupProgram	cleanup.exe	In a C:\Sonysys folder - Sony Vaio related?
N	Click Radio Tuner	clickr~1.exe	ClickRadio - subscription service playing radio music via the internet
N	Click Tray Calendar	ClickT~1.EXE	ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc
U	Clickoff	Clickoff.exe	Clickoff automatically dismisses annoying dialog boxes
X	CLICKTHEBUTTON	CTB.EXE	Price comparison based spyware
X	CLICONFG	CLICONFG.EXE	Added as a result of the OPASERV.T VIRUS!
N	Client Access Check Version	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
?	Client Access Express Welcome	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
N	Client Access Help Update	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	Client Access Service	CwbSvStr.Exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	Client agent for ARCserve	W95AGENT.EXE	Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?
X	ClientMan1	mscman.exe	Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-clicking it to allow passing through the firewall!"
N	Clik Status Monitor	toolsclickstat.exe	Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed
N	Clipbook Service	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipMate5x	ClipMt5x.exe	Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipmate6	CLIPMT60.EXE	Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs
N	Clipomatic	Clipomatic.exe	Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data
N	Clipsrv	Clipsrv.exe	Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks
N	ClipTrakker	ClipTrakker.exe	Cliptrakker - clipboard extender
U	CLMFrontPanel	clmpanel.exe	System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost
?	clnwall	rundll.exe setupx.dll, InstallHinfSection ..delwall.inf	??
X	ClockSync	Sync.exe	ClockSynck - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available
U	ClockWise	CLOCKWISE.EXE	ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync
U	CloneCD or CloneCDTray	CloneCDTray.exe	System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions
U	CloneCDElbyCDFL	ElbyCheck.exe	From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
?	Clotusorgreg0	prtStart.exe Orgprt.exe	Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?
X	ClrSchLoader	Loader.exe	Clearsearch variant of IGetNet
?	CM-SmWizard	SmWizard.exe	SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?
U	cma	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
N	Cmaudio	Rundll32 cmicnfg.cpl, CMICtrlWnd	System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel
X	Cmd	cmd32.exe	Added as a result of the P2P.TANKED VIRUS!
X	CME	cme.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeSYS	CMEsys.exe	Part of Gator advertising spyware - see here for removal instructions
X	CmeUPD	CMEupd.exe	Part of Gator advertising spyware - see here for removal instructions
?	CMGrdian	CMGrdian.exe	One of the McAfee shared components. What does it do and is it required?
U	CMPDPSRV	CMPDPSRV.EXE	Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more." Installed with some Compaq and Lexmark printers
X	Cn323	cnfrm33.exe	Added as a result of the MIMAIL.D or MIMAIL.G VIRUSES!
X	CNBABE	CNBABE.EXE	Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing
N	cnet	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
X	Cnfrm32	cnfrm.exe	Added as a result of the MIMAIL.D or MIMAIL.G VIRUSES!
X	CnsMax	Internat.exe	Added as a result of the POINTEX VIRUS! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%
X	CnsMin	Rundll32.exe CNSMIN.DLL, Rundll32	CnsMin "Chinese Keywords" hijacker related
N	CnxDslTaskBar	CnxDslTb.exe	Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
U	Codename Dashboard	dashboard.exe	Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"
X	Coldlife -icmp	Systray.exe	Added as a result of the FSERVE VIRUS! Note - this is not the real SysTray.exe
U	coloreal	coloreal.exe	Makes colours sharper and brighter, but will only work with coloreal capable monitors
N	Colorific Control Panel	Hgcctl95.exe	From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor
X	COM Service	mscom32.com	Added as a result of the BEASTY.H VIRUS!
X	COM Service	msynvr.com	Added as a result of the BEASTY.G VIRUS!
X	COM Service	msjclh.com	Added as a result of the PLUX VIRUS!
X	COM+ System Applications	lsas.exe	Added as a result of an unidentified VIRUS!
N	COM-IP	COMIP.EXE	COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)
X	ComcastSUPPORT	tgkill.exe	Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs
X	COMCFG	comcfg.exe	Added as a result of the TOADCOM.A VIRUS!
U	COMDRV32	svdhost.exe	Orvell Monitoring 2003 - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it. Note - asks for permission to contact the IP address of http://www.protectcom.com/
U	Comm Driver	commh32.exe	G Data PC Spion keylogger/monitoring program. Disable/remove if you didn't install it
X	Command	system.exe	Added as a result of the GATECRASH.A or GATECRASH.B VIRUSES!
X	Command	Gotit.exe	Added as a result of the TITOG VIRUS!
X	COMMAND	command.exe	Added as a result of the QQPASS.E VIRUS!
N	CommCtr	commctr.exe	"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs
U	Compaq Alerter	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	Compaq Computer Corp SCCenter Module	SCCENTER.EXE	For Compaq PC's. Part of Backweb
?	Compaq Computer Security	Rundll32.exe SECURE32.CPL, Service	??
N	Compaq DMI	cpqdmi.exe	Compaq version of the Desktop Management Interface
N	Compaq Internet Setup	inetwizard.exe	For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list
U	Compaq Knowledge Center	silent.exe & matcli.exe	"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide
N	Compaq Message Server	COMPAQ-RBA.EXE	Applies to CPQBootPerfDB below as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems
U	Compaq PK Daemon	cpqkl.exe	For Compaq laptops for programming user configurable keys. Not required unless you use them
N	Compaq Video CD Watcher	??	For Compaq PC's. MPEG viewer
?	CompaqHW Comp Manager	cpqhcm.exe	Running on a Compaq laptop - any ideas?
N	CompaqPrinTray	printray.exe	Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
N	CompaqSystray	cpqpscp.exe	Compaq System Tray icon
X	Compatibility Service Process	regsvs.exe	Added as a result of the GAOBOT.YN VIRUS!
N	COMSMDEXE	comsmd.exe	3Com tray icon
X	ComTry Web Searcher	wstray.exe	Comtry MP3 Downloader related - spyware
X	Config	service.exe	Added as a result of the ISRAZ.B VIRUS!
X	Config Loadation	iEEexplore.exe	Added as a result of the SDBOT.H VIRUS!
X	Config Loadatiorin	I3Explorer.exe	Added as a result of the SDBOT.H VIRUS!
X	Config Loader	svchosl.exe	Added as a result of the GAOBOT.P VIRUS!
X	Config Loader	sysldr32.exe	Added as a result of the GAOBOT VIRUS!
X	Config Loader	scvhost.exe	Added as a result of the GAOBOT.AE or GAOBOT.AO VIRUSES!
X	Config Loader for Microsoft Windows	mwincfg32.exe	Added as the result of the AGOBOT.BD VIRUS!
X	Config Loader2	explores.exe	Added as a result of the GAOBOT.BT VIRUS!
X	ConfiggLoader	cart322.exe	Added as a result of the GAOBOT.DJ VIRUS!
U	ConfigSafe	CFGSAFE.EXE AUTOCHK.EXE	ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice
N	ConfigServices	Config.exe	Part of initial setup on a Compaq PC
X	Configuration Loaded	wupdated.exe	Added as a result of the MOEGA or MOEGA.AG or MOEGA.AP VIRUSES!
X	Configuration Loader	aim95.exe cmd32.exe IEXPL0RE.EXE iexplore.exe loadcfg32.exe MSTasks.exe	Added as a result of the LOADCFG or SDBOT. Note - "iexplore.exe" resides in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (WinNT/2K), or C:\Windows\System32 (WinXP) whereas the valid "iexplore.exe" (IE) resides in C:\Program Files
X	Configuration Loader	service5.exe	Added as a result of the GAOBOT.AF VIRUS!
?	Configuration Loader	lfass.exe	??
X	Configuration Loader	sycfg34.exe	Added as a result of the GAOBOT.AN VIRUS!
X	Configuration Loader	wincrt32.exe	Added as a result of the GAOBOT.BF VIRUS!
X	Configuration Loader	windex.exe	Added as a result of the GAOBOT.BM VIRUS!
X	Configuration Loader	windex.exe	Added as a result of the GAOBOT.BZ VIRUS!
X	Configuration Loader	dosrun32.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Service.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Servicess.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	sw32.exe	Added as a result of the AGOBOT.BQ VIRUS!
X	Configuration Loader	System.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	Winreg.exe	Added as a result of the GAOBOT.AO VIRUS!
X	Configuration Loader	sysinfo.exe	Added as a result of the GAOBOT.FQ VIRUS!
X	Configuration Loader	microsoft.exe	Added as a result of the GAOBOT.JB VIRUS!
X	Configuration Loader	confgldr.exe	Added as a result of the POLYBOT VIRUS!
X	configuration loader	winicfg32.exe	Added as a result of the GAOBOT.GEN!POLY VIRUS!
X	Configuration Loader	svhst.exe	Added as a result of the GAOBOT.YC VIRUS!
X	Configuration Loader	syscfg32.exe	Added as a result of the SDBOT.B VIRUS!
X	Configuration Loading	svchos1.exe	Added as a result of the GAOBOT.DK VIRUS!
X	Configuration Loading	configldr.exe	Added as a result of the AGOBOT-EC VIRUS!
X	Configuration Manager	CNFGLD32.EXE Cnfgldr.exe	Added as a result of the SDBOT VIRUS!
N	Configuration Utility	CONFIG.EXE	Controls linksys wireless connection. Available from the Desktop
U	Configuration Utility	wlanutil.exe	NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)
N	Configuration Wizard	Cfgwiz32.exe	Added as a result of a variation of the HACKTACK VIRUS! Not to be confused with the valid MS "ISDN Configuration Wizard" (Cfgwiz32.exe) in C:\Windows\System
N	Conmgr	conmgr.exe	Starts Winfax pro at startup
U	ConMgr.exe	conmgr.exe	Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut
X	Connect2Party	connect2party.exe	Adult content dialler
N	Connection Manager	CManager.exe	SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service
X	Cons	consol32.exe	Hijacker - redirects to a p0rn portal, where foistware like ISTBar gets stealth installed
?	Contacte	contacte.exe	Some kind of driver?
X	ContentDownload	rundll32.exe MSA64CHK.dll, DllMostrar	123Messenger adware
X	ContentService	winservn.exe	Homepage hijacker
X	ContinueInstall	bpsinstall.exe	BrowserAid parasite
X	Control	rundll32.exe ctrlpan.dll, Restore ControlPanel	CoolWebSearch parasite variant
N	control panel	smctrlw.exe	System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card
X	Control Panel	System.exe	Added as a result of the DANI VIRUS!
N	ControlCentreTray	XWCTray.exe	System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc
N	Controller	WFXCTL32.EXE	From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs
X	ControlPanel	rundll32 internat.dll, LoadKeyboardProfile	CoolWebSearch parasite related
U	Cookie Cop 2	CookieCop.exe	Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cookie Pal	CPBRWTCH.EXE	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookieJar	Cookiejar.exe	Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	CookiePatrol	CookiePatrol.exe	CookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
U	CookieWall	cookie.exe	CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
U	Cool Desk	cdesk.exe	Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you
U	CoolSwitch	taskswitch.exe	ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen
X	coolwebprogram	clrssn.exe	CoolWebSearch parasite variant
U	CopernicPerUserTaskMgr	CopernicPerUserTaskMgr.exe	Automatic tasking feature of Copernic Pro multi-search engine tool
N	Copyright	mwcpyrt.exe	Displays copyright information on IBM ThinkPads
N	Corel Colleagues & Contacts Reminders	cffrem.exe	Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office
N	Corel Desktop Application Director	dadx.exe	The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs
N	Corel Family & Friends reminders	CFFREM.EXE	Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic
N	Corel Registration or Corel Registration Reminder	Remind32.exe	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	Corel Reminder	NAVBROWSER.EXE	If you don't want to register Corel products and be reminded about it every 2 weeks disable it
N	CorelCENTRAL 10	I_26dadCC.exe	CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs
N	CorelMedia FoldersIndexer8	MFindexer.exe MFINDE~1.EXE	Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office
X	CoreSrv	coresrv.exe	Some IRC trojans/worms use this - see here for more information
?	CORESYS	coresys.exe	??
N	CorrectConnect	CConnect.exe	Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available
U	CostAware	niIPCApp.exe	NetInternals CostAware - download quota measuring tool
N	CountrySelection or Country Select	pctptt.exe	Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
?	Coupon Offers	??	??
X	couponica	couponica.exe	Adware - see here
U	CP32NOT	CP32BTN.EXE	For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons
?	CPA9P2PSERVER	CPA9P2PS.exe	Found on a Compaq Presario but what is it?
U	CPATR10	CPATR10.EXE	Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast
U	CPBrWtch	CPBrWtch.exe	Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return
Y	CPD_EXE	CPD.EXE	Firewall bundled with McAfee VirusScan 6.*
X	cpntmgc	wincomp.exe winmgts.exe	Remote-control trojan from Electronic Group - see here
X	cpntmgc	simcss.exe navpmc.exe	MagicControl downloader trojan variant
?	CPortPatch	cppatch.exe	CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?
Y	CPQAcDc	CPQAcDc.exe	Compaq PowerCon power management software for laptops
U	CPQAlert	CPQAlert.exe	Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information
N	CPQBootPerfDB	CPQBootPerfDB.EXE	See Compaq Message Server above
Y	CPQCalib	CPQCalib.exe	Compaq PowerCon power management software for laptops
N	CPQDFWAG	CpqDfwAg.exe	For Compaq PC's. Runs Compaq diagnostics on every boot
U	CPQEASYACC	cpqeadm.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqeaui	cpqeaui.exe	For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys
U	cpqek	kcpqek.exe	For Compaq PC's. Easy Access button support for the keyboard
U	CPQInet Runtime Service	CpqInet.exe	For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers
N	CPQINKAGENT	cpqinkag.exe	That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)
U	cpqns	cpqnpcss.exe	Related to Compaq.Net - not required if you don't use that
N	Cpqset	Cpqset.exe	Default settings software in Hewlett Packard notebook
Y	CPQSTUTFIX	stutfix.exe	For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton
X	cpr	cpr	Adroar.com adware downloader
X	CPU Manager	cpumgr.exe	Added as a result of the PANDEM.B VIRUS!
U	CPUcool	Cpucool.exe	Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel
X	Cpusave	Cpusave.exe	Added as a result of the GEMA VIRUS!
X	Cpusave32	Cpusave32.exe	Added as a result of the GEMA VIRUS!
X	cqlyg	world_cup_.bat	Added as a result of the WCUP VIRUS!
?	CQSCP2P SERVER	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
?	CQSCP2PS	??	"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed
U	cracked_windows1	cracked_windows1.exe	Cracked Windows popup killer
N	CrazyTalk Serve	rundll32.exe CrazyTalk.dll, DIIServeMediaFile	CrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS
N	CreateCD	Createcd.exe	Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs
N	CreateCD50	Createcd50.exe	Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs
N	Creative AGP Wizard	agpwiz.exe	Part of Creative's BlasterControl
N	Creative Launcher	CTLauncher.exe	For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs
N	Creative MediaSource Go	CTCMSGo.exe	"Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats"
N	Creative PCI Audio Configuration Utility	starter.exe	System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer
N	Creative Service for CDROM Access	Ctsvccda.exe	Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs
X	Creative.exe	Creative.exe	Added as a result of the PROLIN VIRUS!
N	CreativeDiscNotifier	CTNOTIFY.EXE	For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel
U	CreativeMixer	CTMIX32.EXE	Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon
N	CriticalUpdate	Wucrtupd.exe	MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site
X	cronos	MARCO!.SCR	Added as a result of the OPASERV.G VIRUS!
X	Crusty	dmcpl.exe	Added as the result of the RUSTY VIRUS!
?	Crystal 3D Audio Control	CWD3DSND.EXE	Crystal 3D Audio sound driver. Is it required?
N	csaRem	spqmdmui.exe	Compaq modem country selection
Y	CSAV_CheckViruses	vchk.exe.exe	Part of Command AntiVirus
?	csc	csc.exe	??
U	CSINJECT.EXE	CSINJECT.EXE	Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes."
X	csrsc	csrsc.exe	Added as a result of an unidentified VIRUS!
X	CSRSS	CSRSS.EXE	Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
X	CSRSWIN	<random filename>	Added as a result of the WINSHELL.50 VIRUS!
X	CSRSX	<random filename>	Added as a result of the WINSHELL.50.B VIRUS!
Y	CSScheduleCheck	SCHWIZEX.EXE	Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot
X	csss	Csss.exe	Added as a result of the BALICK VIRUS!
U	CSS_Central	CSS_1631.EXE	CSS Communication Agent (95 Host) from Command Software Systems "CSS Central™ provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console."
Y	ct	ct.exe	ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it
N	CTAVTray	CTAvTray.exe	For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ
N	CTDVDDet	CTDVDDet.exe CTDetect.exe	Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again
U	ctfmon	ctfmon.exe	CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
X	ctfmon	taskmgr32#.exe	Added as a result of the SOWSAT.B VIRUS! where # is a number from 0 to 9
X	Ctfmon.exe	ctfmon32.exe	CoolWebSearch parasite related - hijacking to Slawsearch.com
N	CTHELPER	CTHELPER.EXE	CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative’s sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task.Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled
X	CTime	<path to trojan>	Added as a result of the HTTPDOS VIRUS!
X	CTin10	CTin10.exe	Added as a result of the BANCOS.E VIRUS!
?	CTPDPSRV	CTPDPSRV.EXE	Printer driver (in the WINDOWS\System32\spool\DRIVERS\W32X86 folder). Is it required?
N	CTRegRun	CTRegRun.exe	For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative
N	CTStartup	CTEaxSpl.exe	Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard
U	CTsysVol	CTSYSVOL.exe	Creative sound card volume controls
?	cttdpsrv	cttdpsrv.exe	??
Y	cuagentExe	Cuagent.exe	Command Antivirus related
X	cuo	cuo.exe	Added as a result of the BUGBEAR VIRUS!
N	CursorXP	CursorXP.exe	CursorXP from Stardock - tool for creating mouse cursors
U	Customizer2000	logon.exe	Automatic logon feature of Customizer 2000 - "a special utility which is designed to optimize Win9x/ME performance. The program lets you explore the many hidden settings in Windows, and make changes"
N	CuteMX	CuteMX.EXE	File sharing utility
Y	CVPND	cvpnd.exe	Sub-system used by Cisco VPN client for making a connection to a remote IPSec server
U	CWatch	cw.exe	ChatWatch - chat monitoring tool
N	cwbckver	cwbckver.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources
N	cwbinhlp	cwbinhlp.exe	Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries
N	cwbsvstr	cwbsvstr.exe	Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources
?	cwbwlwiz	cwbwlwiz.exe	Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?
?	Cwcdschk.exe	Cwcdschk.exe	IBM Thinkpad related?
N	CXMon	Hpi_Monitor.exe	Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs
N	Cyber	cyberchk.exe	Part of Belkins "Multimedia Cleaning Kit" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after "x" amount of time has passed
U	Cyber Trio	showmode.exe	From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs
U	Cyber-Defender 2003	uwcdsvr.exe	Cyber Defender 2003
U	CyberLat Ram Cleaner	CLRamCleaner.exe	CyberLat RAM Cleaner is a program that Frees, Optimizes and Defrags your system's wasted memory (RAM). Some users swear by programs such as this but I suggest you read this article and make up your own mind
N	CyberMedia Agent	CMAGENT.EXE	Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled
X	CyberWolf	CyberWolf.exe	Added as a result of the KICKIN.A (or CYDOG.C) VIRUS!
X	CyDoor or CydoorUpdate	CD_Load.exe	Adware. Check here for information about Cy-Door and here for a program that can remove it
N	CyphTray	CyphTray.exe	Cypherus - encryption software
N	D-Link AirPlus DWL-650+ Utility	WLANMON.exe	D-Link Air Plus Wireless PC modem connection monitor
N	D066UUtility	D066UUTY.EXE	TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software
X	d3dupdate.exe	bbeagle.exe	Added as a result of the BEAGLE.A VIRUS!
U	D4	D4.exe	Dimension 4 - network time synchronization software
N	DACONFIGEXE	daconfig.exe	3Com NIC Diagnostics. Available via Start -> Programs
Y	DadApp	dadapp.exe	"DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell
N	Daemon	DAEMON32.EXE	Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs
U	Daemon or DAEMON Tools-1033	Daemon.exe	Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive
N	Daily Planner	dayplan.exe	Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them
X	Danton<number>	<filename>	Added as a result of the DANTON VIRUS!
N	Dap	DAP.exe	Download Accelerator Plus from SpeedBit - download manager/accelerator
X	DarkDevil.Grasiele.BR	Grasiele.VBS	Added as a result of the LEMBRA VIRUS!
?	DashIE	N/A	Could be related to "Dash Power Shopping" tool bar in IE?
X	Data	System.dat.vbs	Added as a result of the BISCUIT.A VIRUS!
N	Data LifeGuard	BACKWE~1.EXE	Data LifeGuard diagnostic tools for Western Digital's series of hard drives
N	Data LifeGuard LifeLine Lite installer	DLGLI.EXE	Backweb installer - see here
X	Data789	Regedit.exe ....data789.tmp	Homepage hijacker
N	DataCaching	FlashKsk.exe	SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon
U	DataLayer	DataLayer.exe	Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on
N	DataViz Messenger	DvzMsgr.exe	DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts"
X	Datcheck	datcheck.exe	Added as a result of the KEYPANIC VIRUS!
X	Date Manager	datemanager.exe	Date Manager - calender program. Spyware/adware based provided by The Gator Corporation
?	Datechecker	N/A	Could be related to this?
X	DateMakerIntl	DateMakerIntl.exe	Premium rate dialler also referred to as the PORNSPA.F VIRUS!
N	DAupdate	DAupdate.exe	DoubleAgent content manager
?	DAW9532.exe	DAW9532.EXE	Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required?
U	DayToday	DAYTODAY.EXE	DayToday from RoboMagic Software Corp. Displays the date on the taskbar
U	DAZEL Delivery Agent	DcDaemon.exe	Control and send documents, etc, to any destination - see here
N	dbserv	dbserv.exe	Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled
X	DCE Manager	dcemgr.exe	Added as a result of the TUMAG VIRUS!
U	DCfssvc or dcfssve	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example
X	DDCActiveMenu	DDCActiveMenu.exe	Digital Distribution Channel from Wild Tangent - adware
X	DDCM or DDCMan	DDCMan.exe	Digital Distribution Channel from Wild Tangent - adware
X	ddeproc	ddeproc.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
X	DDialler	DDialler.exe	Adult content dialler
?	DDT	N/A	??
N	DeadAIM	rundll32.exe DeadAIM.ocm, ExportedCheckODLs	DeadAIM - feature enhancing product for AOL's Instant Messenger program
X	Debug	DebugW32.exe	Added as a result of the GUBED VIRUS!
X	Default web browser	IexpIore.exe	Added as a result of the OBLIVION.B VIRUS! Note - don not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L"
X	defragm_check	defragment.exe	CoolWebSearch parasite related
U	defwatch	defwatch.exe	Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis
U	Delay or Delayrun	delayrun.exe	On HP PCs this program is used to help prevent conflicts or timing issues on fast computers
X	Delete Me	worm.exe	Added as the result of the DOOMHUNTER VIRUS!
?	Dell AIO Printer A920	dlbkbmgr.exe	Button manager for the Dell AIO Printer A920?
N	Dell Alert	DAMon.exe	"Dell Alert" utility, that's supposed to make interaction with Support easier
?	DellDMI	delldmi.exe	Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards?
U	DELLMMKB or DellTouch	DELLMMKB.EXE	Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys
N	DellSC	dellsc.exe	Dell Solution Center - web-based troubleshooting tools and educational offerings
X	delmsbb	delmsbb.exe	nCase adware
X	delsubmit	rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe	CoolWebSearch parasite related
?	DelTmp	DelTemp.exe	Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete?
N	DeltTray	deltray.exe	System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel
?	demon	demon.exe	Part of the French Wanadoo ADSL extense pack. What does it do and is it required?
U	DepFrez	frzstate.exe	Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example
?	Description of Shortcuts	*.exe	* seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search)
X	Desire	desires.exe	Adult content dialler
?	desk-top-service	desk-top-service.exe	??
N	DeskColor	DESKCOLOR.EXE	Provides transparent icon text backgrounds and coloured icon text
N	Deskflag	Deskflag.exe	DeskFlag - animated USA flag on the desktop
U	Desksite CMA	cma.exe	DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
X	Desktop	rundll32.exe msconfd.dll, Restore ControlPanel	Added as a result of the BOOKMARKER VIRUS!
N	Desktop Architect	DATRAY.EXE	Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc
N	Desktop Plant	AZARE10S.PLT	Vritual plant from here - this version is an Azalea, there are others so the filename may be different
N	Desktop Weather	THE WEATHER CHANNEL.exe	Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc
N	Desktop Weather 3	THE WEATHER CHANNEL.exe or THEWEA~1.EXE	Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc
N	desktopmgr	desktopmgr.exe	Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry"
U	DesktopX	DESKTOPX.EXE	A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking
N	deskup	deskup.exe	Adds Iomega Zip drive icons to the desktop
U	detect	idetect.exe	iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled
?	detect	turbodetect.exe	??
N	Detector	detector.exe	USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software
U	DEventAgent	eventagt.exe	DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this
U	Device Detector	DevDetect.exe	Watches for external digital imaging products being connected from ACD Systems
U	DeviceDiscovery	hpotdd01.exe	Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products
X	DevicePath	Proyecto1.exe Root.exe	Added as a result of the GRUEL VIRUS!
U	Devices	olesvr.exe	Salfeld Child Control 2003 - parental control software
U	devldr16	devldr16.exe	Associated with some Creative Labs sound cards.  Provides audio support for DOS applications.  Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices
?	Devlog	??	??
?	DGJM	DGJM.exe	??
Y	dhcpagnt	dhcpagnt.exe	Intel DSL modem driver - leave enabled or you'll have to re-install the drivers
?	DHNUXB	DHNUXB.exe	??
N	diagent	diagent.exe	System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs
X	Dial22 or Dial33	dlm.exe	Adult content dialler
X	Dialer	rundll32.exe msa32chk.dll	Unidentfied malware
U	Dialgo SDK	PhoneAnswer.exe	Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis"
X	DialNet	mxt32.exe	Adult content dialler
N	Dialog Box Assistant	OSDEx.exe	Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders
N	Dialog Helper	PDDLGHLP.EXE	Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
N	DigiGuide	CLIENT.EXE client01.exe	TV guide and reminder
N	Digital Dashboard	devgulp.exe	For Compaq PC's. Loads Digital Dashboard options
N	Digital Line Detect	DLG.exe	Detects whether your are plugged into a digital telephone line and displays the information graphically. Installed by Dell (and maybe others) and is included with all Connexant V.92 and Broadcom modems
N	Digital River eBot	downlo~1.exe	Digital River Systems EBOT for downloading software from their site. In some cases, if you purchase software online for a download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Read more here
N	DigitalWizard	ISWizard.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DigitalWizard Monitor	dwMon.exe	InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content
N	DIGStream	digstream.exe	DIGStream Cache Manager - part of ESPN Motion and Disney Motion that periodically check for new videos and indication they're available in the System Tray. Starting ESPN Motion/Disney Motion starts digstream automatically
U	Dimension4	d4.exe	Atomic clock synchronisation freeware - starts-up, adjusts the system clock, then shuts down
X	Dino3	dino3.exe	Related to Jurassic Park III and enables a dinosaur to walk across the screen. Also generates adverts and classified as adware as a result
X	Dir1	caKe	Added as a result of the CAKE VIRUS!
U	Direct Update	DUControl.exe	DirectUpdate dynamic DNS updater
N	DirectCD	DirectCD.exe	DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later
X	directs.exe	directs.exe	Added as a result of the BEAGLE.O or BEAGLE.R or BEAGLE.S or BEAGLE.T VIRUSES!
U	DIRECTVDSL	Directvdsl.exe	Starts DirectTV DSL modem at boot up. Can also be started manually
X	DirectX	ddhelp32.exe	Added as a result of the BIONET.318 VIRUS! Note - not the DirectX helper which is ddhelp.exe
X	directx	Directx.exe Sqlexploit.exe NTCmd.exe PipeCmd.exe	Added as a result of the SDBOT.D VIRUS!
X	DirectX	DirectX.exe	Added as a result of the BLAXE or LOGPOLE VIRUSES!
X	DirectX For Microsoft Windows	dtxservice.exe	Added as a result of the PROGENT VIRUS!
X	DirectX64	DirectXset.exe	Added as a result of the BROWNEY.A VIRUS!
U	Dirkey	Dirkey.exe	Dirkey - small utility that allows you to bookmark up to 9 folders by using the Ctrl+Alt+1..9 shortcut keys in an Open/Save File dialog or in Windows Explorer. After this the Ctrl+1..9 shortcut keys can be used in the same or another window to go to any of the 9 bookmarked folders
?	Disable EHCI	nousb20.exe	??
N	Disc Detector	CtNotify.exe	For Creative sound cards. Detects when you insert a CD, DVD, etc
?	disc detector	qnetquestnotifty.exe	??
?	discoveg	discoveg.exe	??
N	DiscoverDeskshop	Deskshop.exe	Discover Deskshop - single use "virtual" credit card
X	Disk Master	<filename>	Added as a result of the DISTER VIRUS! - a spam relayer
?	DISKMON.EXE	DISKMON.EXE	??
N	Disknag	disknag.exe	Dell program that reminds you to make your  backup diskettes
X	Diskstart	Code.exe hit.exe Snt.exe	Adult content dialler
X	Diskstart	cat.exe	MS-Connect dialler
U	Disk_Monitor	Disk_Monitor.exe	Multi-media, Smartmedia, Compact Flash card reader for reading digital camera cards. Device is recognised as internal USB disk drive. Necessary if camera cards are to be recognised as soon as they are inserted into the reader
X	Display Drivers	cssrs.exe	Added as a result of the WORM_AGOBOT.FX VIRUS!
N	DisplayTrayIcon	TrayIcon.exe	System Tray access to display properties for ABIT graphics cards. Unless you change your desktop resolution, etc regularily use Control Panel -> Display
N	Distiller Assistant 3.01	DISTASST.EXE	From Adobe. Creates PDF universal files for Acrobat Reader. Available via Start -> Programs
U	distributed.net client	DNETC.EXE	Dsitributed computing projects client from Distributed.net where numerous computers are used to share a projects workload - similar to SETI@Home and Folding@Home. Also prone to being distributed by viruses
Y	Dit	dit.exe	"Drive Icon and Label Utility" - assigns drive icons and names to flash memory cards. Required, otherwise the drives aren't found
N	DiTask.exe	DiTask.exe	Associated with an Eicon Networks ISDN or ADSL modem. System Tray icon which shows you the status of your lines (free, occupied with incoming or outgoing call). Available via Start -> Programs
X	DivX MediaPlayer 7.0	Dr.DivX.exe	Added as a result of the ALADINZ.G VIRUS!
X	DivX Updater	DivX.Exe	Added as a result of the NALDEM or MASTAK VIRUSES!
X	Divx4 codec	devldr32.exe	Added as a result of an unidentfied VIRUS! Note - this is not the legitimate Creative Labs devldr32.exe file
N	DJREGFIX	regedit /s c:\hpdjregfix.reg	DJRegFix showed up first in WinME as a "clever" way to ensure that all Hewlett-Packard DeskJet printers actually worked with WinME - since most were having major problems. This "utility" adds the functionality and compatibility HP forgot to add in its WinME drivers
U	DkService	DkService.exe	From Executive Software's Diskeeper defragmenting utility - a replacement for Windows Disk Defragmenter. Used to schedule defragmenting on a regular basis and not required if you do so manually. In Diskeeper Lite (v7 freeware version), DkService also pops up a 'reminder' after Diskeeper has not been used for two days. Removing the DkService startup will end this and have no further impact as scheduled defragmenting is not available in the Lite version. Note - when Diskeeper (Lite) is started manually, DkService will load into memory too and NOT unload after Diskeeper has been closed
X	Dkware lptt01 or Dkware ml097e	dkware.exe	Variant of the RapidBlaster parasite (in a "DonkeySoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
?	dkzzixm	dkzzixm.exe	??
Y	dla	tfswctrl.exe	Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones"
N	DlaTray	Dlatray.exe	On HP PCs, tray icon for dla above
X	dlder	dlder.exe	Advertising spyware. Considered to be one oft the worst - even creating a fake "explorer.exe" file. Can be installed via versions of "Grokster", "Lime Wire" and "KaZaA" amongst other file-sharing utilities (see here). Reported in the past as a virus
X	DlDir1	caKe	Added as a result of the CAKE VIRUS!
?	DLForcerExe	DLForcerEXE.exe	??
N	DLF_00000B00	Vcdlf.exe	Known to cause problems with "Out of memory" errors (see here). Otherwise, it's purpose is unknown
N	DLG	DLGCHBW.exe	Backweb part of Data LifeGuard - diagnostic tools for Western Digital's series of hard drives. Automatically detects an internet connection and downloads any available updates
N	DLHelperEXE	WATCH.exe	Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installation is finished
X	DLHelperEXE.exe	N/A	Downloader for Microgaming/Casino software - stealth installed
X	DLL Service Manager	<path to worm>	Added as a result of the RPCBOT.F VIRUS!
X	DLL32	dllmem32.exe	Added as a result of the KWBOT.E VIRUS!
?	DLT	dlt.exe	??
X	dluca	dluca.exe	Adult content dialler - see here
X	dluca	dluca.exe	Added as a result of the DLUCA.C VIRUS!
X	Dluxjp	cnfrm.exe	Added as a result of the DLUCA.D VIRUS!
X	DM mgr	dm_mgr.exe	Added as a result of the JITTAR VIRUS!
N	DMILDR	dmildr.exe	Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs
N	DMISL	DMISL.EXE	DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information
N	DMISLAPP	DMISLAPP.exe	DMI similar to above
X	DM_server	dmserver.exe	Comet Cursor adware
X	Dnar	Dnar.exe	Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here
Y	DNE Binding Watchdog	rundll dnes.dll, DnDneCheckBindings	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
Y	DNE DUN Watchdog	rundll dnes.dll, DnDneCheckDUN13	Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work
?	DNS2GoClient	dns2goclient.exe	DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required?
?	DNXVC	dnxvc.exe	??
X	DocTor	Doctor.exe	Added as a result of the DOTOR VIRUS!
N	DocuMagix Init	PWATCH.EXE	PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
X	DOGStart	GSDOGST.EXE	Added as a result of an unidentified VIRUS! A possibility is a trojan known as PENIS
?	Doing	doing.exe	??
U	Don't Panic	dontpanicdemodp.exe	30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite."
U	Don't Panic Pop-Up Stopper	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
?	Dosbat	??	??
N	DoUWantIt	duwi.exe	DoUWantIt - online shopping assistant. Start it manually
N	Download Accelerator Plus 5.0	DAP.exe	Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is "adware" based
X	Download Plus	DownloadPlus.exe	DownloadPlus parasite - opens pop-up adverts
N	Download Wonder	DownloadWonder.exe	Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features
X	DownloadWare	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
X	DownloadWare Engine	Dwe.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N	DPAgnt	DPAgnt.exe	digitalPersona fingerprint scanner
Y	Dpcnav	dpcnav.exe	DirecWay from DirectTV satellite based high-speed internet access
Y	DPCProxyLoadOnStartup	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access
Y	Dpcstart	dpcstart.exe	DirecWay from DirectTV satellite based high-speed internet access. Proxy software
U	Dpcstart	dpcstart.exe	Startup program for Direcway 2-way satellite internet service. Loads DirecWay's Navigator, tray icon, etc
X	dpi	dpi.exe	Adware based media viewer by The Delfin Project
U	dpps2	dpps2.exe	Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
N	Drag'n'Drop_Autolaunch	Autolaunch.exe	Iomega HotBurn - CD-RW burning software
?	DragDrop	DragDrop.exe	??
?	dregfix	ph_finder.exe	??
?	dried.exe	dried.exe	??
N	DriveLED	OODLed.exe	O&O DriveLED - displays your HDD LED on your monitor. Start manually
X	Driver	gbot.exe	Added as a result of the JUNTADOR.K VIRUS!
X	Driver32	Scam32.exe	Added as a result of the SIRCAM VIRUS!
N	DriveSelect	driveselect.exe	DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs
U	dRMON SmartAgent	SmartAgt.exe	Part of the network monitoring program group for 3Com NIC cards. See here for more info
X	drmu	W95Mm.exe	Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread
X	drocher	d.exe	Adult content dialler
X	Drvddll_exe	drvddll.exe	Added as a result of the BEAGLE.X VIRUS!
?	DrvListnr	DrvListnr.exe	Analog Devices SoundMAX soundcard related. What does it do and is it required?
N	drvlsnr	drvlsnr.exe	Compaq/ADI SoundMAX integrated digital audio controller related
X	drvr32h	drvr32h.exe	Added as a result of an unidentified VIRUS!
X	drvrmanager	drvrquery32.exe	Added as a result of the BOOHOO VIRUS!
X	drvsys.exe	drvsys.exe	Added as a result of the BEAGLE.W VIRUS!
X	drvupd	rundll32 ..drvupd.inf	Hijacker - drvupd.inf file installs a "searchforge.com" hijack
Y	Drwebscheduler	Drwebscd.exe	Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem
U	DS Clock	dsclock.exe	Digital desktop clock including synchronization with atomic servers - see here
X	dsa	dsa.exe	Homepage hijacker - redirecting to downseek.com
N	DSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
X	Dsi	dp-******.exe	Added as a result of unidentified adware where ****** are random characters
X	Dskcompat	Dskcompat.exe	Added as a result of the GEMA VIRUS!
N	DSL Monitor	spdstrm.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
Y	DSLagentexe	DSLagent.exe	Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection
X	DSS	dssagent.exe	DSSAgent by Brøderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info
?	DSSSGENS	dssagens.exe	??
N	DU Meter	DUMETER.EXE	Hagel Technologies internet bandwidth monitor
N	dumprep 0 -k or dumprep 0 -u	dumprep 0 -k dumprep 0 -u	Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out
X	dvd98	windvd98.exe	Added as a result of the CULT.P VIRUS!
U	DVDBitSet	DVDBitSet.exe	DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used
X	Dvdcompat	Dvdcompat.exe	Added as a result of the GEMA VIRUS!
N	DVDSentry	DSentry.exe	Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts
?	DVDUpgrade	DVDUpgrd.exe	??
Y	Dvp95	Dvp95.exe	Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine
Y	dvpapi9x	DVPAPI9X.exe	Command AntiVirus for Windows 95/98/Me
Y	DvpInitExe	Dvpinit.exe	Command Antivirus related
Y	dvprpt	Dvprpt.exe	Command Antivirus real time protection
U	DVSync	dvsync.exe	DVSync is the program that allows you to synchronize your daVinci’s PDA's data with your Personal Information Manager on the PC
X	dw	dw.exe	DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent
N	DwlClient	support.exe	Download manager for Dell support alerts
X	Dx	sys#.exe	Added as a result of the DEXTER.A VIRUS! where # is a random number
X	Dx8compat	Dx8compat.exe	Added as a result of the GEMA VIRUS!
N	DXDllRegExe	dxdllreg.exe	Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it
X	DxLoad	DX3DRndr.exe	Added as a result of the GIBE.B VIRUS!
N	DXM6Patch_981116	p_981116.exe	Win32 cabinet self extractor. More info here
X	Dxsty	Dxsty.exe	Added as a result of the GEMA VIRUS!
X	Dxupdate.exe	Dxupdate.exe	Added as a result of the MAFEG VIRUS!
X	DyFuCA	optimize.exe	Adult content dialler - see here
X	DyFuCA Active Alert	actalert.exe	Adult content dialler - see here
?	DZKillMe	DZSAVEME.EXE	??
X	E-Card	ecard.exe	Added as a result of the YODI VIRUS!
U	E-color	IconMgr.Exe	Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program
N	E6TaskPanel	TaskPanl.exe	Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space
U	eabconfg.cpl	EabServr.exe	Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys
X	Eac Download	download.exe	Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here
U	EACLEAN	eaclean.exe	For Compaq PC's. Easy Access button support for the keyboard
X	Eac_Cnry	canary.exe	Added as a result of the CANARY VIRUS!
?	Eac_rnvdl	ANTIVIRUS_INSTALL.EXE	??
X	EanthologyApp	EANTHO~1.EXE	Stop-Sign from eAccelerration. Detects spyware, malware, viruses and keyloggers and stops popups. Spyware itself - read their privacy statement here
X	eanth_critical_update_alert	sys_alert.exe	Stop-Sign from eAcceleration. Purports to detect spyware, malware, viruses and keyloggers, but is in fact spyware itself - read their privacy statement here
N	Eapcisetup	sbsetup.exe	Rockwell RipTide soundcard application software. Sound works without it
N	EAPCISETUP	wizard.exe	Part of the Creative Sounblaster PIC Installation Wizard. Probably left as a result of a failed installation
N	EarthLink ToolBar 5.0	etoolbar.exe	EarthLink Toolbar is a tool to help you get to all of the resources of the internet. EarthLink 5.0 Setup adds a few basic buttons to the Toolbar, but you can delete these or add more buttons any time
N	Easy Start Button	esb.exe	Provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
X	EasyAV	EasyAV.exe	Added as a result of the NETSKY.S or NETSKY.T VIRUSES!
X	EasyDates_nl	EasyDates_nl.exe	Adult content dialler
U	EasyKey or Easy Key	easykey.exe	For programming of the built-in functions keys on some laptops (and maybe desktops). Required if these are used
X	easyServ	Server.exe	Added as a result of the EASYSERV VIRUS!
U	EasySync Pro	XCPCMenu.exe	EasySync Pro is a Lotus program for synchronizing a PDA with Lotus Notes
U	EasyTuneIII	EasyTune.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
U	EasyTuneIV	ET4Tray.exe	Tuning (overclocking) utility for Gigabyte motherboards. Shortcut available
X	easywww	easywww2.exe	Added as a result of an unidentified VIRUS!
N	EbatesMoeMoneyMaker	wjview ...Code	Ebates is a website that provides discounts from purchases from many websites. Discounts are automatic if on the Ebates listing. Discounts are paid in cash quarterly
X	eBay Toolbar	EBAYTBAR.EXE	eBay Toolbar - reportes as spyware as it "phones home"
U	eBoard or eMachines eBoard	Eboard.exe	eMachines multimedia keyboard manager. Required if you use the extra keys
N	eBot	DownloadWizard.exe	eBot from Digital River - "helps ensure your computer always has the latest technology, fixes, add-ons, upgrades and 'cool stuff'." Can optionally be installed with software such as Net Nanny internet filtering software. Available via Start -> Programs
?	ecpe	ECPE.EXE	??
?	edexter	edexter.exe	??
X	editpad	editpad.exe	CoolWebSearch parasite related
X	editpad	editpad.exe	CoolWebSearch parasite variant. Note! - this is not related to any utility that might bear the same name and resides in the C:\Winnt or C:\Windows directory
N	EDLoader	DTLoader.exe	Effective Desktop from MiniStars Software - desktop management software no longer being supported
U	EDRestore	??	Set Point from Easy Desk Software - "small utility that automatically sets System Restore points for WinME/XP"
U	Edwizard	Edwizard.exe	SafeGuard Easy - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks"
N	eFax.com Tray Menu	HotTray.exe	eFax Messenger Tray Menu system tray icon for eFax Messenger Plus. Available via Start -> Programs. Disabling instructions available here
X	efaxs lptt01 or efaxs ml097e	efaxs.exe	Variant of the RapidBlaster parasite (in an "efaxs" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
U	Efpap.exe	Efpap.exe	Easy File & Folder Protector. Deny access to certain files and folders, or to hide them securely from viewing and searching
?	ehTray	ehtray.exe	eHome Media Center PC related - what does it do and is it required?
U	Eicon NetworksLAN_DAEMON or Eicon TechnologyLAN_DAEMON	watch.exe	Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) to see your connection statistics. You can manually start watch.exe before you go online. Needs diinfo.exe (started by DiTask) to work correctly which can be started manually
X	eixfi	china.bat	Added as a result of the WCUP VIRUS!
U	Elbycheck	ElbyCheck.exe	From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it
X	Element	Element.txt	Added as a result of the ELEM VIRUS!
N	elm	Elmenv.exe	ViaTech eLicense for securing, distributing and selling music online
U	ELSA WINman Suite	Winmsuit.exe	Allows you to totally customize your ELSA graphics card settings, including overclocking the GPU
Y	ElsaCapiCtl	Rcapi.exe	Assumed to stand for Remote Common Application Programming Interface (RCAPI), this was installed with an Elsa Microlink ISDN modem. If it is not there you can not bring up the dialog box which is sometimes needed to reset the modem
U	ELSAChipGuard	elsavect.exe	ChipGuard for ELSA graphics cards - monitoring solution which monitors both the GPU temperature and fan speed, and will halt the system if either are at dangerous levels and restore the default clock speeds upon reboot. Leave enabled if overclocking
N	EMA.exe	EMA.EXE	Time management system which helps you to manage your time and appointments
X	eMailEncryption	VELOZSYS.EXE	eAcceleration Stop-Sign related - foistware. Read their privacy statement here
X	emsw.exe	emsw.exe	Believed to be spyware - made by a company called Alset. Also known as "HelpExpress". Will install itself if you have previously had Attune by Aveo installed as they're by the same company. Uninstall via Add/Remove programs
U	EM_EXEC	EM_EXEC.EXE	Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled
N	EN4060C Taskbar	en4060ct.exe	Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray
?	encapsulated command tool	wintr.com	??
N	Encarta Dictionary Quickshelf	QSHLFED.EXE	Provides quick access to Encarta's Dictionary features?
N	ENCMONITOR	monitor.exe	The Encompass Monitor. This program is the Connect Direct Program.  It is more trouble than it is worth and few use it
N	Encoder Agent	WMENCAGT.EXE	MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed
U	Encompass_ENCMONTR	ENCMONTR.EXE	Optional simple browser from Yahoo (Encompass)
?	ENCSurf	surfboard.exe	??
U	Energizer FileSaver	Energizer FileSaver.exe	Energizer FileSaver - UPS back-up utility for Energizer UPS products
Y	EngUtil	EngUtil.exe	Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking
?	ENSApServer2_0	APSERVER.EXE	Intel AnyPoint Wireless II Home Network related. What does it do and is it required?
?	ENSMIX32.EXE	ENSMIX32.EXE	Sound card driver. Is it required?
U	EnsoniqMixer	starter.exe	Puts the Ensoniq mixer in system tray. From Ensoniq Technologies "Our mixer is a critical part of the soundcard as it fixes sound problems and replaces the MS mixer which can no longer be used". If you find you don't need it - try one of the solutions on this special page. Similar to Creative PCI Audio Configuration Utility
X	Enumerate Service	wsys.exe	Added as a result of the MANIFEST VIRUS!
U	eonemng	eOneMng.exe	eOne Manager, provides access to the buttons on the keyboard and on the front of the console for the eMachines eOne PC
U	ePrompter	ePrompter.exe	ePrompter - E-mail notification software
N	EPSON Background Monitor	STMS.EXE	Supposed to keep an Epson printer ready for quick printing.  Users report little difference whether it is on or not
U	EPSON CardMonitor	EPSON CardMonitor1.0.exe	Monitors the PCMCIA memory card slot on EPSON cameras and printers and launches PhotoStarter or PhotoPrint
N	EPSON Status Monitor 3 Environment Check or EPSON Status Monitor 3 Environment Check 2	e_srcv03.exe e_srcv02.exe	According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check
U	Epson Stylus C62 Series	E-S0BIC1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U	Epson Stylus C82 Series	e_s0hic1.EXE	Required for an interface to some versions of MS Word to ensure that some fonts are printed correctly. Start it manually if required
U	EpsonPhotoStarter	EPSON_PhotoStarter.exe	Only needed if you want to make full use of the capabilities of an Epson printer that included this
?	Equipmen	Equipmen.exe	??
N	EReg	reg32.exe	EReg is a software registration tool incorporated on products such as those by Brøderbund, Connectix, Hewlett-Packard, The Learning Company, and Sierra. Needless to say you don't need it
?	erm	erm.exe	??
X	eros.exe	eros.exe	Adult content dailler
Y	eSafe Protect	ESPWatch.exe	eSafe from Aladdin - internet security for gateway and E-mail servers
U	ESB	esb.exe	Easy Start Button - provides functionality on certain laptops that have additional keys. Not required unless you use the extra keys
Y	eScan Monitor	AVKWCTL9X.EXE	eScan antivirus
U	eScan Scheduler	avkserv.exe	eScan antivirus scheduler
U	eScan Updater	Trayicos.exe	eScan antivirus updater - allows users to automatically download updates and set the auto time interval for downloads
X	EScorcher	escorcher.exe	Part of eScorcher anti-virus software - responsible for performing virus checks and deletions. Used to collect information about the user and therefore treated as spyware - now the web-site is dead
N	ESFTP	esftp.exe	ESftp - FTP client for transfering files between a local PC and another remote computer
?	ESS Daemon	Essd.exe	Related to an ESS based soundacard. Is it required?
?	essapm	essapm.exe	ESS Solo soundcard driver. Is it required?
Y	Essdc	essdc.exe	Related to an ESS Solo soundcard. Seems as though it's required
?	ESSNDSYS	ESSNDSYS.EXE	Related to an ESS based soundacard. Is it required?
Y	ESSOLO	ESSOLO.exe	Sound card driver that re-instates itself every time it's removed
Y	esspk	esspk.exe	ESS Technology modem speaker driver file. Required to get on-line with this modem
U	EssSpkPhone	essspk.exe	ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets
N	Ethernet	tcaudiag.exe	3Com NIC Installation/Diagnostic MFC application. Diagnostics may be run from the Start -> Programs
X	Etraffic	JavaRun.exe	Marketing software from TopMoxie
Y	eTrust EZ Firewall	efpeadm.exe	eTrust EZ Firewall
Y	eTrustCIPE	ezdsmain.exe	eTrust EZ Deskshield from Computer Associates. Protects against malicious email attachments and unauthorized use of email by detecting and blocking unusual behavior
U	EuroGlot	EuroGlot.exe	Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian"
?	Event Log	eventlog.exe	??
N	Event Planner Reminders	PLNRnote.exe	Sierra Event Planner tray icon
N	Event Reminder	pmremind.exe	A calendar/alarm program that installs with Brøderbund Printmaster
U	EVENTLISTENER	EvLstnr.exe	Used with a Nikon digital camera to recognize when the camera is plugged in
N	eventmgr	eventmgr.exe	Used with a Microtek scanner. Manages the scanner's button events. Available via Start -> Programs
N	Evidence Eliminator	ee.exe	Evidence Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis
N	evntsvc	evntsc.exe	Application Scheduler installed along with RealOne Player. Once installed, it runs independently of RealOne Player. Not required - see here for more information, including how to disable it
U	EW Message Server	msg32.exe	Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices
N	eWare Startup	iWareStart.exe	eWare iWare task bar. Not required
N	Excite Platform	Exlaunch.exe	Loads an Icon in the startup tray that allows you to receive service update notices for Excite@Home if you desire (note that since Excite@Home appears to be winding down this becomes irrelevant). May also allow you to kill the Excite Toolbar that automatically loads in Internet Explorer
?	Excite Private Messenger Pipe	x8impipe.exe	??
N	ExciteAssistantEXE	ASSISTANT.EXE	With Excite Assistant, you can access a wide variety of online information, including email, news, and stock quotes without having to have a browser window open
X	exe lptt01 or exe ml097e	exe.exe	Variant of the RapidBlaster parasite (in an "Exe" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	execfg4	execfg4.exe	Added as a result of the ELECTRON VIRUS!
?	Execute	delfolders.exe	??
X	ExeName32	Warm.scr	Added as a result of the SCOLD VIRUS!
?	exgiwsl	exgiwsl.exe	??
U	Exif Launcher	Exiflaquickdcr.exe QuickDCF.exe	USB mass storage driver used by some digital cameras such as the Fuji Finepix. Only required if you use it regularly
U	ExitKiller	Ekiller.exe	Exit Killer - automatically closes pop-up windows in your browser
?	exmon	hpimoniter.exe	Some kind of hp digital camera maybe or a photo smart connection probe?
X	Explkw	expup.exe	Keywords hijacker
X	explore	explore.exe	Added as a result of the NETBUS, HAWAWI and other VIRUSES!
X	Explore	Explorer.exe	Added as a result of the IRC.FLOOD.G VIRUS! Note - this is not the valid Windows "explorer.exe"
X	Explore	explore.exe	Adult content dialler
X	explore.exe	Explore.exe	Added as a result of the GRAYBIRD.G VIRUS!
U	explorer	explorer.exe	Starts Windows Explorer. Unless this has been manually added to startups or added by another program it could be a virus such as PE_BISTRO or DVLDR or MYDOOM.C. Note that it is also not the explorer.exe task/service you'll see when via CTRL+ALT+DEL
X	explorer	wscript.exe <filename>	Sneaky way to start any VBS script. Many viruses use VBS files
X	Explorer	shellexpl.exe	Added as a result of the GPIX and SHELDOR VIRUSES!
X	explorer	expl32.exe	Added as a result of the RATSOU VIRUS!
X	Explorer	<path_to_worm>	Added as a result of the AUTEX VIRUS!
X	Explorer lptt01 or Explorer ml097e	explorer.exe	Variant of the RapidBlaster parasite (in an "explorer" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here. Note - this is not the valid Windows Explorer which has the same executable name
X	Explorer32	Expl32.exe	Added as a result of the HACKTACK VIRUS!
U	Exshow95	EXSHOW95.exe	Support software for some of the Kensington mice. Provides access to extra features like those available with enhanced Logitech and MS devices
U	ExtraDNS	ExtraDNS.exe	ExtraDNS - DNS configuration tool
?	Extranet AutoDial	AutoExt.exe	Nortel Networks Contivity Extranet Switching Software
N	Eye Tide Launcher	oneeyetideone.exe	Nascar wallpaper
N	ezagent	ezagent.exe	EzVCR recording software for the ASUS TV FM card. Available via Start -> Programs
N	EZDesk	EZDESK.EXE	Utility that remembers icon locations for each user and resolution. Available here
N	EzEjMnAp	EzEjMnAp.exe	For IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start -> Programs
X	eZmmod	mmod.exe	Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
?	EZNORUN	EZNORUN.EXE	Easy Internet related?
Y	ezShieldProtector for Px or ezPS_Px	ezSP_Px.exe ezSP_PxEngine.exe	Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings
U	EZSMART App	ezsmart.exe	EZ-S.M.A.R.T. hard drive monitoring software from StorageSoft - appears to be no longer supported
X	ezula	eZmmod.exe	Regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
X	eZulaMain	eZulaMain.exe	Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information
X	eZuluMain	eZuluMain.exe	Comes with "KaZaA" installation. Advertising Spyware. Not required but KaZaA won't work
U	E_S10IC2	E_S10IC2.exe	Epson Stylus printer monitor - for checking ink levels, etc.
U	E_S23	E_SICN03.exe	Epson printer status monitor - for checking ink levels, etc.
?	E_S4I2G1	E_S4I2G1.EXE	Related to the Epson Stylus CX5400 printer/scanner/copier. What does it do and is it required?
U	E_SOEIC1	E_SOEIC1.exe	Epson Stylus printer monitor - for checking ink levels, etc.
U	F-Secure Management Agent	FSMA32.EXE	F-Secure Antivirus - F-Secure Policy Manager provides tools for administering F-Secure software products
Y	F-Secure Manager	FSM32.EXE	F-Secure Antivirus - carry out scheduled virus scans automatically
Y	F-StopW	F-StopW.exe	F-Prot anti-virus background scanner by F-Risk Software
X	f607	f607.exe	Added as a result of the URAT.B VIRUS!
U	FamilyKeyLogger	cisvc.exe	"Family Keylogger - is your best choice, if you want to know what other users on your machine are typing". Note! - this is not the cisvc.exe service.
?	fapmon	fapmon.exe	Fair Access Policy monitor for DirecPC/DirecWay internet access
X	Fash	Fash.exe	Unidentified adware
U	FastCache	fc.exe	FastCache from AnalogX - speeds up browsing by resolving DNS requests locally
N	FastTrack Accelerator	SPEED UP.EXE	FastTrack Accelerator - "speedup" utility for programs that use the FastTrack network such as KaZaA Media Desktop, Grokster and Morpheus
N	FastUsr or fast	fast.exe	Installs as part of Windows XP PowerToys as an option for very-fast user switching (allowing a keystoke to switch users instead of using the login screen). It is only used for the hot-key switch and yet it hogs 1.5 megs of memory in two separate processes (one run by the user & one by the system). Optional install in PowerToys
U	FatPipe	DHCP	Software enabling high speed internet browsing (2-4 times faster) and internet connection sharing for up to 5 users
U	Fatpipe Dialer	fpdialer.exe	See above
U	FBDirect	FBDirect.exe	Software that monitors the status of a Visioneer OneTouch scanner button and allows you to scan, fax, copy, print, and easily communicate by simply dragging and dropping scans on your PaperPort Desktop!. The **** represents the model, 5300, 7600, etc. Available via Start -> Programs
?	FBI	FBISM.exe	Compaq related but what does it do?
X	fc	runfc.exe	Added as a result of the CAMPURF VIRUS!
?	FD_SAP	FD.exe	Genicom SAP Printer driver. Is it required?
U	FEELitDeviceManager	feelitdm.exe	Associated with Immersion TouchSense devices (Logitech Wingman Force Feedback Mouse and possibly other peripherals)
X	fegoze	SVCH0ST.EXE	Added as a result of the GRAYBIRD.D VIRUS!
U	Fellowes Proxy	R3proxy.exe	Installed with Fellowes EasyPoint mouse software. Not necessary for normal functioning of Fellowes mice but it is necessary to use the extended features of all Fellowes mice
U	FerrariWallPaper	FerrariWP.exe	Calendar that replaces the default desktop background image. It comes with every Acer Ferrari 3000 laptop. Also downloadable for members of www.ferrari.com
U	FG1_00	frntgate.exe	FrontGate MX - e-mail spam blocker
U	Fhtisxk	fhtisxk.exe	XtraKeys - keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove via Spybot S&D (for example)
?	file indexing service	msfindfile.exe	New version of MS FindFast and still a resource hog?
N	FileFreedom_Plugin	wtm.exe	FileFreedom peer-to-peer sharing program
X	FileManager32	Wscript.exe ..ChkMgr32.vbs	Added as a result of the NOTUP.A VIRUS!
X	FileSoft	Wscript.exe UpdataFiles.vbs	Added as a result of the SST.B VIRUS!
U	FilterGate	filtergate.exe	Filtergate internet filtering software - filters sounds, popup ads, background sound and other unnecessary website items
U	Filterguard	Filtrgrd.exe	An icon located in the lower left of the screen and looks like a lifesaver. This icon is a “short-cut” to access the basic features of SOS-Guardian, SOS-KidProof Lite, SOS Best Defense and SOS Pro such as Internet filtering utility. You can access this menu by “right-clicking” on the icon
X	Find Fast	Findfast.exe	Complete utter waste of space! Part of MS Office - searches disk drives for Office file types to make opening them easier
Y	Find Virus Launch Program	fvlaunch.exe	Part of Dr. Solomon's Antivirus
N	FinePrint Dispatcher vx	FPDISPxA.EXE	FinePrint - virtual printer for use with any printer. Search for "dispatcher" here for more information. If removed, it will re-install when program is run - hence the Y recommendation
X	FirewallSvr	FirewallSvr.exe	Added as a result of the NETSKY.X or NETSKY.Y VIRUSES!
Y	Fix-it	mxtask.exe	Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required
Y	Fix-it AV	memcheck.exe	Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources
N	fkSysMon	fksysmon.exe	fkWrae SysMon - system monitor - "displays the current memory consumption, CPU and resource usage, date, time, Windows uptime, IP address and a lot more"
?	FLASH32	-flash32.exe	??
N	FlashPath Status or FlashPath Monitor	SDSTAT.EXE FLSHSTAT.EXE	System Tray icon that you can't get rid of - and does not need to run!. Tells you the battery status in the floppy disk adapter for the smartmedia cards. Available via Start -> Programs
U	Flexicd	Flexicd.exe	CD player - part of the Win95 Power Toys
?	FLMTRUSTKB	KbdAp32A.exe	Keyboard utility for a Trust brand keyboard. What does it do and is it required?
?	FLMTRUSTMOUSE	mouse32a.exe	Mouse utility for a Trust brand mouse. What does it do and is it required?
X	FLooDNeT	FLooDeR.exe	Added as a result of the FLOODNET VIRUS!
?	Flow Go TV	flogotv.exe	??
X	flps	flps.vbs	Added as a result of the BYRON VIRUS!
?	FLSVCI	FLSVCI.exe	??
Y	FltProcess	msinet.exe	Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done
X	FlyswatDesktop	flydesk.exe	Advertising spyware
U	FmctrlTray	Fmctrl.EXE	Genius SM-Live Control Panel. Enhances audio output through Genius sound cards (makes a big difference and worth the 3MB Ram used)
X	fmnwebassist	fmnwebassist.exe	Adware popup generator
U	FMStart	Fmstart.exe	GFI FAXmaker - native fax connector for Microsoft Exchange Server or for networks, allows all users to send and receive faxes right from their desktop
?	Focus	Focus.exe	ISDN configuration wizard?
X	Folder Service	wssdtu.exe	Added as a result of the MANIFEST VIRUS!
N	Folding@home	WINFAH.EXE	Folding@Home is a distributed computing project which studies protein folding, misfolding, aggregation, and related diseases - must be running in order to access the internet to upload to the servers. Available via Start -> Programs
N	FoneSyncSystemTray	FoneSyncSystemTray.exe	System Tray icon for Nokia FoneSync utility for the 7160/7190 mobiles. Useful to send data from/to the cell phone and the computer. You can use it to backup data or even to input data through the computer keyboard (which naturally is much more comfortable). Run manually when required
X	FontFix	fontfix.exe	Added as a result of an unidentified VIRUS!
X	FONTVIEW	FONTVIEW.EXE	Added as a result of the OPASERV.T VIRUS!
X	foobin lptt01 or foobin ml097e	adaware.exe	Variant of the RapidBlaster parasite (in a "foo1" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
Y	FoolProof	fpwinldr.exe	FoolProof Security PC security software from SmartStuff
Y	FoolProofSweep	??	Part of FoolProof Security PC security software from SmartStuff
N	Forbes	ForbesAlerts.exe	Forbes Business News Alerts - displays business news headlines in a little window on the screen
X	ForceShow	rundll32.exe QaBar.dll, ForceShowBar	AdultLinks/QAbar parasite related
N	Forget Me Not	AGRemind.exe	Calendar reminder part of American Greetings® CreataCard®
N	FotoStation Easy AutoLaunch	FotoStation Easy AutoLaunch.exe	Installed with a Nikon digital camera. Used to collect photos uploaded from camera program NkVwMon.exe. If your camera is not connected (via USB port) you do not need this program loaded either
U	FourthDay	FourthDay.exe	The Fourth Day - "astronomical clock and almanac for your system tray"
Y	FP Loader	loadfp.exe	FoolProof Security - PC security software from SmartStuff
?	FPWGMWZD	FPWGMWZD.exe	??
N	Fpx	mnmsrvc.exe	Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations
X	France	svchost.exe	Added as a result of the MIMAIL.L VIRUS!. This is not the valid svchost.exe as described here
?	Free Downloads Monitor	fdcmon.exe	??
Y	Freedom	Freedom.exe	Zero Knowledge Freedom - Anti-Virus, Personal Firewall and Parental Control, it also blocks ads, safeguards your personal information, encrypts your passwords, and much more
U	FreeMem Pro	FMEMPRO.EXE	Some users swear by memory management utilities such as FreeMem Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
U	FreeMemVn2	FreeMem.exe	Some users swear by memory management utilities such as FreeMem but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind
X	FreeMP3download	rundll32.exe MSA64CHK.DLL, DllMostrar	Mostrar adult content dialler
U	FreeRAM XP	FreeRAM XP Pro x.exe	Some users swear by memory management utilities such as FreeRAM XP Pro but others say you don't need them - especially if you have Win98 or WinME. See this article and make up your own mind. "x" indicates the version number
U	freesurfer	fs20.exe	EMS Free Surfer mk II - pop-up stopper
?	frguk	shdrkmck.exe	??
?	FridaysInHellInstaller	FridaysInHellInstaller.exe	??
N	FriendlyWebQuick-Launch	SELFCERT.EXE	selfcert.exe is a stand alone program for creating your own digital certificates for macros - the .exe is installed as an extra basically by clicking on MS Office in add/remove programs and selecting remove - also I would do away with the FriendlyWebQuickLaunchBar as well
U	FRISK FP-Scheduler	F-Sched.exe	Scheduler for F-Prot anitvirus software. Leave enabled unless you scan manually on a regular basis
N	Fromine WinPopup	winpopup.exe	Instant Messenger program
X	Frsk	frsk.exe	Unidentified adware downloader trojan
Y	FRW_EXE	FRW.EXE	ConSeal Signal9 firewall - now McAfee Personal firewall
Y	frxmxins	frxmxins.exe	ATI 3D Studio MAX/VIZ driver
?	FSDPSRV	FSDPSRV.exe	??
?	fsg_4104.exe	fsg_4104.exe	Installed with Kazaa and believed to be Gator adware?
U	fsp	fsp.exe	Folder Shield - hide entire directories and thus prevent access by anyone else to your personal files and documents
Y	fspr	FolderShield.exe	Folder Shield - hide personal files and folders
N	FSScrCtl	FSScrCtl.exe	Screen saver control applet used by the "Stardust Screen Saver Toolkit" and "SolidWorks Screen Saver"
U	fsserv	fserv.exe	Farsighter Server - monitors a remote computer invisibly by streaming video to a viewer on your computer. You will know exactly what is happening on the remote computer as you see it in real-time
X	FSW	FSW.exe	FreeScratchAndWin parasite
U	FTMSFLT(USB)	FTMSFLTU.EXE	Fujitsu's Touch Panel Message Notifier
U	Ftpqueue	Ftpsched.exe	Part of WS_FTP Pro from Ipswitch. Queueing facility for scheduling FTP transfers
Y	fwenc.exe	fwenc.exe	Check Point SecuRemote VPN client - "dynamic and fixed IP addressing for all ISP services - dial-up, cable modem, or DSL - the ideal solution for telecommuters and mobile workers"
N	fwrastrc	fwrastrc.exe	Dial-up software for Friendly Technologies/1NationOnLine free ISP
U	fxredir	fxredir.exe	Canon MultiPASS fax redirector
X	f~a	ra32.exe	Password stealer trojan
X	G00123	<worm filename>	Added as a result of the BUGBROS VIRUS!
?	g3dctl	g3dctl.exe	??
N	Gadu-Gadu	gg.exe	Polish language Instant Messaging client
N	Gadwin PrintScreen	PrintScreen.exe	Gadwin PrintScreen - utility to capture, print or save the current window
U	Gainward	TBPanel.exe	Configuration utility for Gainward graphics cards. Not required unless you use non-default settings. Available via Start -> Settings -> Control Panel
N	Game Device	JOYUPDRV.EXE	Genius game controller profile activator
N	GameSpot	kontiki.exe	Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops
U	gameutil.exe	gameutil.exe	Part of Redline RegTweak as supplied with Sapphire ATI graphics cards. You can configure different overlclocking settings on a per game basis and this sets those conditions following a re-boot
U	GammaHotKeys	setgamma.exe	Part of the RadeonTweaker program for adjusting ATI Radeon graphics cards. Allows you to adjust the gamma (or brightness) when playing a full-screen game without switching back to the desktop
X	Gator	gator.exe	Spyware - see here for removal instructions
X	Gator eWallet	gator.exe	Gator eWallet from The Gator Corporation. Spyware - see here for removal instructions
U	GazelDisplay	gsyno.exe	BT Digital Access USB - Gazel ISDN installation System Tray icon
U	GBTray or GoBack	GBTray.exe	System Tray icon access to Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
?	GCC Reminder	gccrem.exe	Associated with AcraMax Greeting Card Creator. Is it a registration reminder?
N	GCS	GrabClipSave.exe	GrabClipSave screen capture tool
N	GDrive	GDriver.exe	Found on IBM systems. All it does is set the CDROM drive letter to G:. Set your drive letter manually via Start -> Settings -> Control Panel -> System -> Device Manager
N	Gearbox	confsvr.exe	NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which can be used instead using the dial-up details available here
N	GEARsec	gearsec.exe	Installed by Apple Quicktime package - iPod/iTunes CDRW support. Can be disabled if you only require Quicktime player
X	GEDZAC	GEDZAC.exe	Added as a result of the GEMEL VIRUS!
N	GemStRmW	GemStRmW.exe	For a GemPlus smart card reader. If it doesn't start automatically when you insert the smart card, start it manually
X	general lptt01 or general ml097e	general.exe	Variant of the RapidBlaster parasite (in a "General" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here
X	Generic host proccess for windows	SVCHOSTS.EXE	Added as a result of an unidentified VIRUS!
X	Generic Host Process for Win32 Services	ntspcv.exe	Added as a result of the SDBOT.S VIRUS!
X	Generic Host Process for Win32 Services	intspvc.exe	Added as a result of the DINFOR.D VIRUS!
X	Generic Service Process	regsvc32.exe	Added as a result of the GAOBOT.UJ or GAOBOT.UL VIRUSES!
Y	Genie USB Monitor	USBmonitor.exe	Port monitor for an external USB hard drive. Required to enable access to the drive
N	Get Smile	getsmile.exe	Puts smilie faces in your E-mail. Run manually when required
N	GetRight Tray Icon	GETRIGHT.EXE	GetRight from Headlight Software - download manager for resuming downloads and choosing multiple download locations. The freeware version is/was spyware. The registered version isn't if you don't install the Aureate/Radiate software. Available via Start -> Programs
N	GhostStartService	GhostStartService.exe	Required to run the Windows based wizard in Norton Ghost - added from the 2003 version. Will start automatically when you run the wizard
N	GhostStartTrayApp	GhostStartTrayApp.exe	System Tray access to Norton Ghost - added from the 2003 version
X	gigabit.exe	gigabit.exe	Added as a result of the BEAGLE.U VIRUS!
Y	GigaByte	Cheatle.exe	Added as a result of the SHODI.B VIRUS!
Y	Gilat SOM Enumerator	dllhost.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
Y	GilatFTC	ftc.exe	For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system
?	GisdnLog	gisdnlog.exe	BT Digital Access USB
U	Glass2k	Glass2k.exe	"Glass2k is a small little program that allows Win2K/XP users to make any window transparent"
Y	Glide	Glidew32.exe	Cirque touchpad driver
X	GLSetIT32	msiexec16.exe	Added as a result of the OPTIX PRO series of VIRUSES!
X	GLSetIT32	isass.exe	Added as a result of a variant of the OPTIX PRO series of VIRUSES!
?	gluon	gluon.exe	In a gluon/bin sub-directory
Y	Gmouse	Gmouse.exe	Amouse mouse driver - required if you use non-standard Windows driver features
U	Gnetmous	gnetmous.exe	Genius NetScroll+ mouse driver - required if you use non-standard Windows driver features
?	gnub	gnub.exe	??
X	Go!Zilla	gozilla.exe	A variant for the Go!Zilla download manager, see above
X	Go!Zilla Monster Downloads	Go.exe	Download manager for resuming downloads and choosing multiple download locations. Advertising spyware
U	GoBack	GBMenu.exe	Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U	GoBack Polling Service	GBPoll.exe	Roxio's (nee Adaptec) GoBack software which allows you to revert back to a previously working state on you hard drive if you install a new program and your system goes faulty - performing the same functions with extra features as System Restore on WinMe/XP systems. Disable before running Scandisk or Defrag. Not required for WinMe/XP users, recommended for Win9x/NT/2K users
U	GoBack Tray Icon	GBTray.exe	System Tray icon access to GoBack (above)
X	GOG	GOG.exe	Added as a result of the PHILIS.B VIRUS!
U	Goldensoft