Bleeping Computer

Welcome Guide    Blogs    Chat    Help    Search    RSS

Welcome Guest (Log In | Create Account) New Member? Join for free.

  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
  Do you have popups or other malware infecting your computer? If so, Start Here!
  Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> Filenames that start with M

A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other    HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23 Rootkit List  · Submit a Startup  · Top Submitters  Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key Startup Database Forum · Computer Help Forums · How to use the Startup Database Enter the filename or keyword you would like to search for: Advanced Search Name Filename Status Description Shockwave Support FlashPlayer.exe X Added by the W32/Delf-DRA worm. iLLeGaL iLLeGaL.exe X Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename ... Read More M-soft Office M-soft Office.hta X HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! ... Read More Salestart m.ex X Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infec ... Read More FX m00.exe X Added by an unknown adware. May be smitfraud related. Userinterface Report3r m0use.exe X Added by the W32/Mytob-DI worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More mmpti m1mmpti.exe N Mpact Mediaware Properties Taskbar Icon - multimedia software icon for Chromatic Research Mpact video cards ... Read More NvCplD m2gr32.exe X "Switch" premium rate adult content dialler m32info m32info.exe X Added by the CRYPTER.A TROJAN! Unknown m32lock.sys X A variant of the Troj/Haxdor-Gen rootkit. microsoft windows xp configuration loader m32svco.exe X Added by the W32/SDBOT.WORM.48548 ... Read More MyWebSearch Plugin M3PLUGIN.DLL, X Related to the MyWebSearch Internet Explorer toolbar. Some anti-malware vendors consider MyWebSearch a potentially unwanted software. ... Read More My Web Search Bar Search Scope Monitor m3SrchMn.exe X Related to the Added by the MyWebSearch adware. M3Tray m3tray.exe N Movielink - internet movie rental System Tray access Messenger Explorer m41n.exe X Added by the Troj/Sdbot-SA backdoor trojan. When started, this infection will connect to a remote IRC server and wait for commands to execute. ... Read More m4n70s personal firewall m4n70s.exe X Added by a variant of the W32.SPYBOT WORM! ... Read More <not used> M5VBVM60.EXE X Added by the W32/Brontok-CJ worm. It is important to note that there may be a legitimate C:\Autoexec.bat. This file uses the number zero instead of t ... Read More {C399F668-9A68-50CE-BC0C-2901F5522786}] m5z.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More [random name] m?config.exe X PurityScan/Clickspring adware [random name] m?dtc.exe X PurityScan/Clickspring adware ... Read More mabidwe Service mabidwe.exe X Identified by Avast Anti-virus as a variant of the Win32:Refpron-M worm. USBHWINFO mac.exe X Added by the Troj/LowZone-I trojan. mac128 mac128.sys X Added by the Troj/Klutz-A backdoor trojan. Macromedia Dreamweaver XM macdwXM.exe X Added by W32/Agobot-RI. atimace MACE.exe U Related to ATI installed alongside graphics ATI hardware and provides additional configuration options for these devices in the Managed Access to Cat ... Read More Yahoo Messengger macfee_.exe X Added by the W32/Yahlov-G worm. Sysqq mache.exe X Added by the Troj/QQRob-X password-stealing Trojan. macidwe Service macidwe.exe X Identified as a variant of the Backdoor:Win32/Refpron.C malware. MacLic MacLic.exe N Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks ... Read More MacName MacName.exe N Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks ... Read More <not used> macromedialan.exe X Added by the Troj/Small-DNX Trojan. RegRun mActiveX.exe X Added by a variant of the RBOT WORM! Mediafour Mac Volume Notifications Macvntfy.exe U Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connect ... Read More MAD.EXE MAD.EXE Y MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. A ... Read More MAFWTaskbarApp MAFWTray.exe ? Related to the M-Audio Firewire Interface. Located in the Windows system folder. ... Read More magent magent.exe X Identified by NOD32 as a variant of the Win32/Bagle worm. Magicantispy Magicantispy.exe X Added by the MagicAntiSpy rogue anti-spyware program. MagicAntiSpy is a misleading application described as a spyware removal utility that may give ex ... Read More MagicDsk MAGICDSK.EXE U Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons ... Read More Activer l'ensemble clavier et souris sans fil Labtec.lnk MagicKey.exe U A program that allows you to map certain button on the Labtec keyboard to certain functions. ... Read More magiclinker3 MagicLnk.exe U ThaiSoftware Thai Dictionary ... Read More MagicTuneEngine MagicTuneEngine.exe U MagicTune is a monitor calibration and configuration tool for certain Samsung monitors. ... Read More Magitime Magitime.exe N Magitime - connection tracking utility which monitors online time, expense, data transfer ... Read More MagPlayerWatcher_cwzjp MagPlayer.exe U Added by the Spyware.MagPlayer email surveillance software. This program should be uninstalled if not installed by yourself. ... Read More mahmud mahmud.exe X A variant of the Email-Worm.Win32.Zhelatin worm and IRC backdoor. Microsoft Security Monitor Process mail.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. windows mail service mail.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. MailBell mailbell.exe U MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based s ... Read More MailCleaner MAILCLEANER.EXE N MailCleaner "protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all ... Read More Windows Help mailinfo.exe X Added by the W32/Forbot-FK worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More mailman.exe mailman.exe X Added by the Troj/Banker-CA TROJAN! mailskinner mailskinner.exe X MailSkinner - an application by Electronic_Group , notorious for its premium rate "drive by" installed porn dialers. ... Read More Mail_Check Mail_Check.exe X Added by the PANOIL.C WORM! MAIN main.exe U SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan ... Read More MSNMESENGER Main.exe X Added by the PRORAT TROJAN! SpyCop ScanCheck MAIN.EXE U SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan ... Read More SuperCool Compress Backup Main.exe U "SuperCool Zip Backup software is a data backup,restore and file synchronization program" ... Read More 2Search main.exe X Identified as Adware-Spyware/2Search.c.2 adware. PcRaiser main.exe X Added by the PcRaiser rogue security program. PcRaiser is a misleading application that claims to improve the performance of a computer. ... Read More SystemOptimizer2008 main.exe X Added by the SystemOptimizer2008 rogue optimization software. Main Main.scr X Added by the Troj/Dloader-MC TROJAN! EXAMPLE main.sys X Added by the Troj/SpyAge-B Trojan. Main.sys has been further identified as Troj/NTRootK-BP. ... Read More explorer main.vbe X Added by the VBS/Shush-A worm. main16 main16.exe X Added by the CRYPTER.A TROJAN! Winsock Startup Main2.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. main32 main32.exe X Added by the CRYPTER.A TROJAN! Ultimate System Guard MainFAVProj.exe X Added by the Ultimate System Guard rogue anti-spyware program. APC_SERVICE mainserv.exe U PowerChuteŽ Personal Edition - "safe system shutdown software with sophisticated power management functions" ... Read More APC UPS Service mainserv.exe U APC Powerchute is used to monitor your attached UPS, and in the event of a power failure, safely shutdown your computer so there is no data loss. ... Read More Cmpnt mainsv.exe X Added by the Troj/Tompai-C Trojan. mainviewex mainviewex.exe X Added by the GEMA.D TROJAN! Microsoft Main Window Service mainwin32.exe X Added by the W32/Spybot-MR worm and IRC backdoor. Antivirus maja.exe X Added by the NETSKY.H WORM! ValuSet MaJde.exe X Added by the W32/Sdbot-OU worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Majnun was H3re Majnun was H3re.exe X Added by the W32.Yadurna.A worm. The user is presented with a password recovery dialogue once the malicious program is downloaded. ... Read More system firewall makeini32.exe X Added by the W32/Agobot-PS worm. Acts as an IRC bot which allows backdoor functionality. Found in the Windows system folder. ... Read More malware sweeper MalSwep.exe U Related to Malware_Sweeper Protects the user from malicious malware and monitors the sanity of the running programs. This spyware program has not bee ... Read More Alcmtr Malware Doctor.exe X Added by the MalwareDoc rogue anti-spyware program. Malware-Wipe Malware-Wipe.exe X Added by the rogue-antispyware application Malware Wipe. This application is usually bundled with Trojans that change your desktop to a security warn ... Read More MalwareAlarm MalwareAlarm.exe X MalwareAlarm is a rogue anti-spyware product that uses false positives, misleading reports, and deceptive advertising in order to scare you into purch ... Read More Malware-Alarm MalwareAlarm.exe X MalwareAlarm is a rogue anti-spyware product that uses false positives, misleading reports, and deceptive advertising in order to scare you into purch ... Read More MalwareBurn 6.9 MalwareBurn 6.9.exe X Added by the MalwareBurn rogue anti-spyware program. MalwareBurn is a potentially unwanted application that may give exaggerated reports of threats on ... Read More MalwareBurn 7.1 MalwareBurn 7.1.exe X Added by the MalwareBurn rogue anti-spyware program. MalwareBurn is a potentially unwanted application that may give exaggerated reports of threats on ... Read More MalwareBurn 7.2 MalwareBurn 7.2.exe X Added by the MalwareBurn rogue anti-spyware program. MalwareBurn is a potentially unwanted application that may give exaggerated reports of threats on ... Read More MalwareCore 7.3 MalwareCore 7.3.exe X MalwareCore is a rogue anti-spyware program that displays fake and exaggerated results of security risks on your computer. ... Read More MalwareCrush MalwareCrush.exe X Added by the MalwareCrush program. MalwareCrush is a rogue anti-spyware program installed through Trojans and other malware. When run, the program wi ... Read More malwaredef malwaredef.exe X Added by the Malware Defender rogue anti-spyware program. MalwareDestructor MalwareDestructor.exe X Added by the MalwareDestructor rogue security software. When it is executed and a scan is run, it scans the computer and displays exaggerated reports ... Read More MalwareMonitor MalwareMonitor.exe X Added by the MalwareMonitor rogue anti-spyware software. MalwareMonitor is a misleading application that may give exaggerated reports of threats on th ... Read More MalwareProMFC MalwarePro.exe X Added by the MalwarePro rogue anti-spyware program. MalwarePro uses false advertising and exaggerated scan results as a tactic to have you purchase th ... Read More MalwareRemoval MalwareRemoval.exe X Added by the Fake Microsoft Windows Malicious Software Removal Tool Trojan. MalwareStopper MalwareStopper.exe X Added by the MalwareStopper rogue anti-spyware product. MalwareWar 7.3 MalwareWar 7.3.exe X Added by the MalwareWar rogue anti-spyware program. MalwareWipe MalwareWipe.exe X The main executable of MalwareWipe. This program is considered a rogue antispyware program and should be uninstalled. ... Read More MalwareWiped 5.6 MalwareWiped 5.6.exe X The main executable of MalwareWiped. This program, other than the slight name change, is exactly the same as MalwareWipe. These programs are considere ... Read More MalwareWiped 6.1 MalwareWiped 6.1.exe X The main executable of MalwareWiped. This program, other than the slight name change, is exactly the same as MalwareWipe. These programs are considere ... Read More MalwareWiped MalwareWiped.exe X The main executable of MalwareWiped. This program, other than the slight name change, is exactly the same as MalwareWipe. These programs are considere ... Read More MalwaresWipeds MalwareWipeds.exe X The main executable of MalwaresWipeds. This program, other than the slight name change, is exactly the same as MalwareWipe. These programs are conside ... Read More MalwareWipePro MalwareWipePro.exe X The main executable of MalwareWipePro. This program is considered a rogue antispyware program and should be uninstalled. ... Read More MalWarrior MalWarrior.exe X Added by the MalWarrior rogue anti-spyware program. MalWarrior is a misleading application that may give exaggerated reports of threats on the compute ... Read More Host Process mame.exe X Added by the W32/Rbot-APH worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Version manage.exe X JRAUN adware variant managedesk lite ManageDesk Lite.exe U Related to ManageDesk_Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use. Note: Located in C ... Read More Windows Manager Service Manager.exe X A variant of the SDBot.bhk family of worms and IRC backdoor Trojans. manager manager.exe X Identified as a variant of the Backdoor.Win32.Small.cvt backdoor. MSN CST Manager mancstmgr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. LogitechSoftwareUpdate ManifestEngine.exe ? Updater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required ... Read More Matador mantispm.exe U MailFrontier Desktop (Matador) email spam blocker software MapEDC MapEDC.exe X Identified as a variant of the Trojan-Downloader.Matcash malware. Messaging Application Programming Interface mapi.exe X Added by the W32/Sdbot-DFC worm and IRC backdoor. Handling the loading of the MAPI API MAPI32.EXE X Added by the W32/Codbot-C backdoor. When started this infection connects to a remote IRC server where it waits for commands. This infection is also ... Read More ADSL Diagnostic Tools mapiicon.exe N System tray access to ADSL modem diagnostic tools. Available via Start -> Programs ... Read More pdfmachine dispatcher mapisnd.exe U pdfMachine Windows print driver ... Read More mapisvc32 mapisvc32.exe X Added by the KX VIRUS and also recognised by Symantec as FPAI adware Mapiyasha Mapiyasha.exe X Added by the W32/SillyFDC-DM removable media worm. microsoft application center mappc.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More microsoft map pc mappc.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More microsoft mapped pc mappedpc.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Ntcheck mapserver.exe X Added by the Troj/Tompai-B backdoor trojan. runmarc8mmanager marc8m95.exe U MARC Sound System Manager for the Marc_8_MIDI sound card - allows for easy adjustment of the settings ... Read More cronos MARCO!.SCR X Added by the OPASERV.G WORM! {A72B29B3-EAE5-0215-F3C4-B4CEC13E66EE} Mariner.exe X Identified as a variant of the Backdoor.Bifrose malware. Remote Desktop Computing marspc.exe U Marspc Remote Desktop Computing NTSF MICROSOFT SYSTEM marya.exe X Added by the W32/Rbot-AXY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More _antispyware masalert.exe U Related to McAfee_AntiSpyware Note: located in C:\PROGRA~1\MCAFEE\MCAFEE~1\ ... Read More kfienq masbl.bat X Added by the KIFER TROJAN! mskrider maskrider.dll.vbs X Added by the VBS/Solow-F worm. maskrider maskrider2001.vbs X Added by the VBS.Solow.C worm. VBS.Solow.C is a worm that attempts to spread through removable storage drives. ... Read More masqform.exe masqform.exe N PureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms ... Read More McAfee AntiSpyware Service massrv.exe Y Main executable for the McAfee AntiSpyware program. WindowsKeyUpdate master.exe X Added by the JOSAM WORM! Master Card Updaate 32 Mastercard32.exe X Added by the Worm.Ircbot.Gen worm. Master Volume Spy MASTERVOLUMESPY.EXE U Volume control for the Gateway Destination "DestiVu" media interface fjdslssdfd mat2.exe X Added by the Trojan.Slapew.C Trojan that is used as a mail relay to send spam. AOL Broadband Check-Up matcli.exe U "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, cou ... Read More Blueyonder Instant Support Tool matcli.exe U "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, sta ... Read More BT Broadband Help matcli.exe U "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, cou ... Read More HP Instant Support matcli.exe U "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, sta ... Read More Resolution Assistant matcli.exe N Dell Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your na ... Read More SBC Self Support Tool matcli.exe U matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, coun ... Read More Verizon Online Support Center matcli.exe U "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, sta ... Read More Net Assistant matcli.exe U Aliant Net Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name em ... Read More rundl332 math.exe ...pluged.exe X Added by the DOOMJUICE WORM! RealPlayer Ath Check mathchk.exe X Added by the W32/MyDoom-AJ WORM/IRC backdoor! MATLAB Server matlabserver.exe U Added by Matlab. "MATLAB is a high-level language and interactive environment that enables you to perform computationally intensive tasks faster than ... Read More msn service matrixcam.exe X Added by the MYTOB.JH ... Read More romahere matrixhere.exe X SuperSpider hijacker - a CoolWebSearch parasite variant Matrox PowerDesk 8 Matrox.PowerDesk.exe N Windows system tray icon for quickly changing configuration settings on your Matrox video card. ... Read More MAV_check mav_startupmon.exe X Startup program associated with WinAntiVirus Pro 2007. WinAntiVirus Pro 2007 is a rogue anti-spyware program that displays fake alerts, and downloads ... Read More Salestart mav_startupmon.exe X Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2007. ... Read More MaxAlerts max.exe X Bonzi MaxALERT - spyware Notebook Maximizer maximizer_startup.exe U Toshiba Notebook Maximizer software - adjust settings to save battery power and increase efficiency ... Read More mxomssmenu maxmenumgr.exe U Related to Maxtor One Touch drives. SystemDrive maxpaynow1.exe X Identified as a variant of the Trojan-Downloader.Win32.Tibs.wu malware. DriveSystem maxpaynowti1.exe X Identified as a variant of the Trojan-Downloader.Win32.Tibs.wu malware. Maya maya.exe X Added by the Troj/PWS-AWP password-stealing Trojan. mayapan MayaPan.Exe Y Audiotrak Maya soundcard driver ... Read More MoodBook mb.exe U MoodBook is a free Windows utility that brings art to your desktop Malwarebytes Anti-Malware Reboot mbam.exe Y Used by Malwarebytes's Anti-malware to perform an action on reboot. MBAMProtector mbam.sys Y Related to MalwareBytes' Anti-malware. Malwarebytes' Anti-Malware mbamgui.exe Y Realtime protection agent and tasktray for MalwareBytes' Anti-Malware. MBAMService mbamservice.exe Y Added by the Malwarebytes’ Anti-Malware anti-malware program. NBInstall MBDownloader_*****.exe X Identified as a variant of the ADSPY/NetNucleus adware. The *s standard for random characters. ... Read More SystemData MBlocker.exe X Added by the MessengerBlocker rogue security software. MessengerBlocker is a misleading application that may periodically spam the user's computer wit ... Read More System32a MBlocker.exe X Added by the MessengerBlocker rogue security software. MessengerBlocker is a misleading application that may periodically spam the user's computer wit ... Read More MBM 4 MBM4.exe U Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> ... Read More MBM 5 MBM5.exe U Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> ... Read More mbnet mbnet.exe U MBNet (Portugal) Credit Card Processing software Mailbox Verifier mboxvrfy.exe U Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail b ... Read More MBProbe mbrpobe.exe U MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs ... Read More mbssm32 mbssm32.exe X Added by the MicroBillSys billing software. MicroBillSys is a potentially unwanted application that uses aggressive billing and collection service tec ... Read More Microsoft (R) Windows Network Latency Controller mbti.exe X Added by the Backdoor.Ranky backdoor Trojan. This infection also installs a Windows service of the same name and filename. ... Read More dns mc-110-12-0000079.exe X Added by the TrojanDownloader.Agent.rv TROJAN! services32 mc-110-12-0000079.exe X Added by the TrojanDownloader.Agent.rv TROJAN! dns mc-58-12-0000080.exe X "Shorty" adware component, also detected as the AGENT.FD TROJAN! ... Read More dns mc-58-12-0000093.exe X Nail/Aurora related malware dns mc-58-12-0000140.exe X "Shorty" adware component, also detected as the AGENT.FD TROJAN! ... Read More services32 mc-58-12-0000140.exe X "Shorty" adware component, also detected as the AGENT.FD TROJAN! ... Read More MouseCount MC.exe N MouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." No ... Read More mouseElf MC.exe U Genius NetScroll mouse driver - required if you use non-standard Windows driver features ... Read More Salestart mc.exe X Added by the rogue security program called Hitorialout as well as other rogue anti-spyware programs. ... Read More mchlnjDrv mc22.tmp X Added by the Troj/Feutel-AS backdoor Trojan. mchInjDrv mc??.tmp X Added by the Troj/Lmir-EX password-stealing Trojan. mcafe Software mcafe.exe X Added by the W32/Rbot-BAV worm and IRC backdoor. Windows Media Player mcafe32.exe X Added by the W32/Rbot-XG WORM/backdoor, it connects to an IRC channel to allow unauthorized access. ... Read More mcafee Software Intrenet mcafee.exe X Added by the W32/Rbot-ATR worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More mcAfee.Instan.Update mcAfee.Update.exe.exe X Added by the W32/Minusia-A worm. Windows Update McAfee3.exe X Identified as a variant of the Trojan.Win32.Buzus.izj malware. mcafee windows protection mcafee32.exe X Added by a variant of the W32.SPYBOT WORM! ... Read More mcafee antivirus protection mcafeeAV.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More mcafee antivirus McAfeeAV.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More McAfee Antivirus 32 MCAFEEAV32.EXE X Added by the W32/Spybot-EH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Media Player mcafeee.exe X A variant of the RBot WORM/backdoor adds this, allowing remote control by an attacker using an IRC channel. ... Read More McAfeeScanPlus McAfeeScanPlus.exe X Added by the Backdoor.Mepcod backdoor. Mcaffe Antivirus Mcafeescn.exe X Added by a variant of the SPYBOT WORM! Sygate Personal Firewall Mcafeeupdate.exe X Added by the RBOT.YN WORM! Mcafee Auto Protect mcafeshield.exe X Added by the W32/RBOT-UH WORM! windows serv patch Mcaffe2005.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More McAfee McAffeAv.exe X Added by the W32.Netsky.AN@mm mass-mailing worm. MCAFFE FLD LOADER MCAFFEFLD.EXE X Added by the W32/Rbot-PY trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This i ... Read More McAgentExe mcagent.exe U From McAfee VirusScan On-line. The Agent is a red M icon that appears in the Windows system tray or Notification Area (if you're running Windows XP). ... Read More Mail.com mcalert.exe ? Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived? ... Read More MultiCAM Initializer MCamBoot.exe U The MultiCAM Initializer is part of the MultiCAM software package provided by Vista Imaging in order to run up to 10 USB ViCAM or 3Com Home Connect PC ... Read More Mcappins.exe mcappins.exe ? McAfee Application Installer. What does it do and is it required? Malware Catcher 2009 MCatcher.exe X Added by the Malware Catcher 2009 rogue anti-spyware program. McaFee virus detect program. McaUpdate.exe X Added by the W32/Autorun-T removable media worm. Multimedia Codecs mcc.exe X Added by the MCC TROJAN! Microsoft Internet Explorer mccagent.exe X Added by the Troj/Dloader-UD Trojan. btbb_wcm_McciTrayApp McciTrayApp.exe U Tray icon for Motive's software which is commonly used by Internet broadband providers that offer DSL or cablemodem services. The icon provides access ... Read More BellSouthWCC_McciTrayApp McciTrayApp.exe U Tray icon for Bell South broadband customers which can be used to diagnose and repair connection and hardware problems. This software is rebranded so ... Read More Verizon_McciTrayApp McciTrayApp.exe U Verizon and MCI software that provides a Tray icon which broadband customers can use to diagnose and repair hardware and connection problems. This so ... Read More Winammp mccm.exe X Added by the Troj/IRCBot-HH IRC backdoor Trojan. Network Service MccTrayApp.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. McAfee WSC Integration mcdetect.exe Y Allows McAfee security products to integrate into the Windows Security Center. Win7 Mced.exe X Unknown malware. Microfinder lptt01 mcf.exe X Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBla ... Read More Microfinder ml097e mcf.exe X Variant of the RapidBlaster parasite (in a "mcf" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBla ... Read More mcfCC4 mcfCC4.dll X Added by the W32/Goldax- Peer to Peer (P2P) worm with backdoor functionality. This infection utilizes the wrmdrv.sys or the mcfdrv.sys rootkit to hid ... Read More MCFservice mcfdrv.sys X Added by the W32/Goldax- Peer to Peer (P2P) worm with backdoor functionality. mcfG7A mcfG7A.dll X Added by the Troj/Haxdoor-AK backdoor Trojan. This infection utilizes the rootkit nodantivir.sys rootkit. ... Read More MChanger MChanger.exe N Media Changer - utility that allows you to change wallpapers, sounds, themes, etc ... Read More Microsoft (C) HTML Application host mchta.exe X Added by a Rbot variant. msci mcinfo.exe ? McAfee Internet Security related. What does it do and is it required? mckwave mckwave.dll X Added by a variant of the Goldun.Fam Trojan. McAfee Log Manager mclogsrv.exe Y Used by Mcafee products to log new events to logfiles. mClubclient.exe mClubclient.exe X Designated as malware by PrevX. Messager.exe mClubclient.exe X Designated as malware by PrevX. Realplayer.exe mClubclient.exe X Designated as malware by PrevX. mcm3 mcm3.exe X ShopAtHome/SAHagent adware variant ... Read More OpenMstart mcmgr32.exe X "Switch" adult content dialler Microsoft Control Manager mcmmng32.exe X Added by the W32/Tilebot-HK worm and IRC backdoor. W32/Tilebot-HK spreads to other network computers by exploiting common buffer overflow vulnerabilit ... Read More VSOCheckTask MCMNHDLR.EXE Y Part of McAfee's SecurityCenter and Virusscan Online. Must be enabled for scanning to work ... Read More McAfee Services mcmscsvc.exe Y Related to McAfee security products. McAfee Network Agent mcnasvc.exe Y Related to McAfee security products. ExploreUpdSched mcntmtdl.exe X Identified as a variant of the AdWare.Win32.ZenoSearch.am malware. McAfee Scanner mcods.exe Y Controls Mcafee VirusScan's manual and scheduled virus scans. Configuration Owner MCOMFIX.EXE X Added by the W32/SdBot-IM worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More ieupdate MCP****.exe [**** = random char] X Added by the ASOXY TROJAN! ieupdate mcpdll32.exe X Adware downloader trojan McAfee Protection Manager mcpromgr.exe Y Manages whether or not the Mcafee Firewall is protecting your computer. McAfee Proxy Service mcproxy.exe Y Controls communication between various components of Mcafee Security Products. 1A:Stardock MCP mcpserver.exe Y Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications ... Read More Media Center Extender Service mcrdsvc.exe U This service allows Media Extender devices to find your computer. McRegWiz mcregwiz.exe ? McAfee antivirus related. What does it do and is it required? mcrosoftr update Mcrosoftr.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Logical Disk Browser mcrsvc.exe X Identified as a variant of the Backdoor.Win32.IRCBot.aoz by Kaspersky antivirus. ... Read More Start Upping mcrt32.exe X Added by a variant of the W32.SPYBOT WORM! mcrwave mcrwave.dll X Identified as a variant of the Trojan-Spy.Win32.Goldun.api malware. McAfee.com McShield mcshield.exe Y Associated with McAfee's Internet Security suite. McAfee Real-time Scanner mcshield.exe Y Associated with McAfee's Internet Security suite. Network Associates McShield Mcshield.exe Y Real-time scanner for McAfee VirusScan. mcshld9x mcshld9x.exe Y Related to McAfee AntiVirus Component which protects your computer against Internet-bound threats such as spyware and trojans which can be distrubuted ... Read More cmssSystemProcess mcsmss.exe X Added by a variant of the AGENT.EI TROJAN! NDAv MCSV.COM X Added by the W32/Sumom-C instant messenger and P2P worm. SDAv MCSV.COM X Added by the W32/Sumom-C instant messenger and P2P worm. System mcsys.dll X Added by the Troj/Pindrop-A Trojan. McAfee SystemGuards mcsysmon.exe Y McaFee SystemGuards is a component of Mcafee VirusScan which performs behavioral monitors and reacts appropriately when triggered. Used to find new m ... Read More McAfee Security Agent Taskbar Extension. Mctray.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. mctskshd mctskshd.exe Y Related to McAfee_SecurityCenter It will run in the background controlling critcal updates and control antivirus related actions. This program is imp ... Read More McAfee Task Scheduler mctskshd.exe Y Related to McAfee_SecurityCenter It will run in the background controlling critcal updates and control antivirus related actions. This program is imp ... Read More McUpdateExe mcupdate.exe U From McAfee VirusScan On-line. Automatically updates your virus definitions. Leave enabled unless you regularly update these definitions ... Read More McAfee SecurityCenter Update Manager mcupdmgr.exe Y Associated with McAfee's Internet Security suite. May control the updating of the program. ... Read More mcupdmgr.exe MCUPDMGR.EXE Y McAfee antivirus SecurityCenter Update Manager McAfee Update Manager mcupdmgr.exe Y Associated with McAfee's Internet Security suite. May control the updating of the program. ... Read More McAfee User Manager mcusrmgr.exe Y Related to Mcafee security products. McVsRte mcusrt.exe Y Part of McAfee's SecurityCenter. Must remain checked but one  user reports Windows glitches with no response from McAfee as to why ... Read More emailscan mcvsescn.exe Y Related to McAfee AntiVirus suite. It is used to automatically scan incoming e-mails. This process should not be removed to ensure that your system se ... Read More McAfee.com VirusScan Online Realtime Engine mcvsrte.exe Y Associated with McAfee's Internet Security suite. This is the real-time scanning engine and should not be disabled! ... Read More ActiveShield MCVSSHLD.EXE Y McAfee VirusScan On-line. See also the McAgentExe entry mcvsshld mcvsshld.exe Y McAfee VirusScan On-line. See also the McAgentExe entry VirusScan Online mcvsshld.exe Y McAfee VirusScan On-line. See also the McAgentExe entry prnsyst mcvswin.exe X Added by the Troj/Agent-CIO backdoor Trojan. Windows FileSharing Service mcwsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MD IE Plugin md.exe X Adult content dialler SystemMD md.exe X Homepage hijacker file0_0 MD1.exe X Added by the Troj/Dloader-OR ... Read More Malware Destructor 2009 MD345d.exe X Added by the Malware Destructor 2009 rogue anti-spyware program. md4hsh md4hsh.dll X Added by a variant of the Goldun.Fam Trojan. This infection utilizes the nvnatv.sys and the nvnati.sys rootkits to hide itself. ... Read More {xphjvkwj-kdxl-noya-dlva-sjyhnxhaxjfg} mdbbf.exe X Added by the Troj/Delf-EAW Trojan. mddiskprotect.exe MDDiskProtect.exe N MediaFour MacDrive for Windows - easily open, edit and save files from Mac-formatted disks, format Mac disks and burn Mac CDs and DVDs! ... Read More mule_st_key mdelk.exe X Added by the TROJ_MITGLIED.A Trojan. mdfpro mdfpro.dll X Added by a variant of the Goldun.Fam Trojan. mdhash mdhash.dll X Added by a variant of the Goldun.Fam Trojan. Microsoft Digital Cryptors mdigits.exe X Added by the W32/Sdbot-CQ backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More Machine Debug Manager mdm.exe U Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang ... Read More mdm mdm.exe X Added by the LYDRA-F TROJAN! Note - this is not the valid Machine Debug Manager which shares the same filename ... Read More MDM7 mdm.exe U Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang ... Read More load mdm.exe X Added by the BINGHE backdoor Trojan! It has the ability to log your keystrokes, steal data, and execute commands. ... Read More MDM MDM.exe X Added by the Troj/Kilt-A, designed to exploit the mIRC program! [not used] mdm.exe X Added by the Troj/Proxy-GG proxy Trojan. Machine Debug Manager MDM.EXE X Added by the W32/Sdbot-APE worm and IRC backdoor. SVCHOST MDM.EXE X Added by the W32/LCJump-A worm. W32/LCJump-A attempt to copy itself to mapped drives with the filename RavMon.exe and create a file autorun.inf which ... Read More Machine Debug Manager mdm.exe X Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.SdBot.aad worm and IRC backdoor. ... Read More Microsoft Office mdm.exe X Added by the Troj/IBot-A Trojan. Windows Networking Monitoring mdm.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Mdm Mdm.vbs X Added by the WHITEHO VIRUS or TRAPPY WORM! melg3445 mdmdd.exe X A variant of the Mailbot trojan. Mdmdll mdmdll.exe X Added by the CRYPTER TROJAN! Mdmdll32 mdmdll32.exe X Added by a variant of the CRYPTER.C TROJAN! modem driverz updates mdmdrv.exe X Added by a variant of the W32/SDBOT WORM! ... Read More SvcManager mdmex2.exe X Added by the Troj/Zalon-B backdoor Trojan. Machine Debug Manager mdms.exe X Added by the W32/SdBot-CH backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More SysMemory manager mdms.exe X Added by the Troj/Cimuz-B trojan. Microsoft mdms.exe X Added by the Troj/Agent-GHY Trojan. ModemUtility mdmsetpe.exe N System Tray configuration icon for Aztech modems Application mdmsetsp.exe Y Aztech Labs modem driver windows_startup mdmw.exe X Added by the W32/Womble-E mass-mailing worm. MDN mdn.exe X Backdoor.Win32.Rbot.gen is a backdoor agent. Microsoft Dynamic Network MDN.exe X Added by the W32/Sdbot-AUQ worm and IRC backdoor. Messenger Accelerator mdn.exe X Added by the Troj/Bifrose-UV backdoor Trojan. Machine Debug Mgr mdn.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft DNSx mdnex.exe X Added by the W32/Delbot-AI worm and IRC backdoor. MDN MDNS.exe X Added by the SPYBOT.JPB worm with backdoor and DDOS abilities. Spreads via weak network shares and vulnerabilities. ... Read More Bonjour Service mDNSResponder.exe N The Bonjour Service is typically installed with the iTunes software. Apple's site describes: "Bonjour, also known as zero-configuration networking, e ... Read More MDN MDNZ.exe X Added by the RBOT.AQD WORM! mdojtgmr mdojtgmr.sys X Added by the Keylogger.Mose keylogger with rootkit capabilities. mdp mdp.dll X Identified as a variant of the Trojan.Inject.GI malware. mds.exe mds.exe X Added by the Troj/Mads-A proxy trojan. Microsoft Agent mdss32.exe X Added by the Troj/Keylog-AG TROJAN! mdwmdmsp mdwmdmsp.exe X Adware - recognized by Kaspersky antivirus and others as TrojanDownloader.Win32.Agent.am ... Read More MS DVD DirectX Dll Drivers mdxdl.exe X Added by the W32/Sdbot-XI WORM/IRC backdoor trojan, it also installs msdirectx, as both it's service and display name. ... Read More MECA Meca.exe N Meca instant messenging client medgs MEDGS1.exe X PacerD_Media/Pacimedia.com adware component ... Read More Ioadqm Media Player.exe X Added by the HAWAWI WORM! Media Player media.exe X Added by the FLDMEDIA-A TROJAN! [Various Names] media64.exe X Part of the Wareout infection as described here. Media Access MediaAccK.exe X A windupdate adware infection. mediacodec.exe mediacodec.exe X Added by the VSCodecPro Trojan. KBD MediaCenter MEDIACTR.EXE U Multimedia keyboard manager. Required if you use the multimedia keys corel photo downloader MediaDetect.exe N Related to Corel Photo Album. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be ... Read More media gateway MediaGateway.exe X 180Solutions Windupdates adware variant - also see here ... Read More MediaKey MediaKey.exe U Multimedia keyboard manager. Required if you use the multimedia keys media_manager mediaman.exe X Mini-Player,  IMESH related foistware. MediaManagerService MediaManager.Service.exe U thePlatform's MPS Download Media Manager. More info about this service can be found here. ... Read More MediaMonitor Mediam~1.exe N Installed by Smartdisk MVP CD burning software. Software will work fine without it ... Read More Microsoft Update mediap.exe X Added by a variant of the RBOT WORM! Media Pass MediaPass.exe X This is a Trojan Downloader that appears to be part of the Windupdates family of adware delivery products. ... Read More Media Pass MediaPassK.exe X This is a Trojan Downloader that appears to be part of the Windupdates family of adware delivery products. ... Read More Windows Media Player MediaPIayer.exe X Added by the SDBOT-QO TROJAN! - note, the executable is called 'MediapIayer', with an 'i' !) ... Read More Microsoft Windows Media Player mediaplayer.exe X Added by a variant of the RBOT WORM! [various names] mediaplayer32.exe X Added by a variant of the RBOT WORM! MediaPlayeS MediaPlayer_update.exe X Added by the Troj/Starter-K Trojan. mediapluscash.exe mediapluscash.exe X MediaMotor/Popuppers adware component ... Read More media playr mediaply32.exe X A variant of the IRCbot family of worms and IRC backdoors. (Default) media_driver.exe X Added by the TUPEG VIRUS! media_driver media_driver.exe X Added by the TUPEG VIRUS! - NOTE: this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launc ... Read More Medichi medichi.exe X Added by the Trojan.Virantix.B Trojan. Trojan.Virantix.B is a Trojan horse that ends antivirus applications and displays a fake security alert. I ... Read More Medichi2 medichi2.exe X Added by the Trojan.Virantix.B Trojan. Trojan.Virantix.B is a Trojan horse that ends antivirus applications and displays a fake security alert. I ... Read More loads.exe medload.exe X Added by the Adware.Medload adware. <not used> mega.dll X Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Inject.ouw Trojan. ... Read More <not used> mega2.dll X Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Inject.ouw Trojan. ... Read More 5-megawati megawati.exe X Added by the W32/Brontok-CR worm. MELIS melis.exe X Added by the W32/Niklas-U P2P worm. Windows mella.bat X Added by the < href="http://securityresponse.symantec.com/avcenter/venc/data/vbs.allem@mm.ht ml" rel="nofollow" target="_blank">ALLEM mass-mai ... Read More mem32 mem32.exe X Added by the W32/Agent-FWF worm. W32/Agent-FWF spreads by copying itself to removable devices with the filename Setup.exe. ... Read More pst memaker2.exe U Added by the Spyware.SpymodePCSpy surveillance software. This program should be uninstalled if it was not installed by yourself. ... Read More 5-1-61-96 members-area.exe X Adult content dialler memorycardmanager MemCard.exe U Related to Memory_Card_Manager Found on Dell or Lexmark computers. ... Read More Fix-it AV memcheck.exe Y Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resource ... Read More Memory Check Service MemCheck.exe U Part of Acer's ePerformance Management software. SmartRAM MemCleaner.exe U Memory Optimizer found in the Iobit's Advanced WindowsCare software. Microsoft Memory Dumping Protocol memdump.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. WINDOWS SYSTEM MEMORY LOADER memloader.exe X Added by the W32/Mytob-IN worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More LMMngr memlow.sys X Part of the Troj/Haxdoor-AE rootkit. This is installed as a system driver service so will not be seen in the services.msc control panel. ... Read More MemMan MemMan.dll X Added by a variant of the Goldun.Fam Trojan. This infection also utilizes the CsdDriver.sys rootkit to hide itself. ... Read More memmonster memmnstr.exe U MemMonster is a memory manager which enables your computer to work more efficiently. ... Read More TuneUp MemOptimizer memoptimizer.exe U Part of "TuneUp Utilities", specifically 2003 version. "Monitors and optimizes free memory in the background." Basically, it cleans RAM and also allow ... Read More Memory Check memore.exe X Added by the KILLAV.C TROJAN! memoryboost MemoryBoost.exe U MemoryBoost ... Read More Memory Manager memorymanager.pif X Added by the Troj/Delf-JJ Trojan! File is found in the Windows system folder. MemoryMeter MemoryMeter.exe X Autoinstalling spyware by Total Velocity Windows Memory Sharing memoryshr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Storm-Memory Drivers memorystorm.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Memory Watcher MemoryWatcher.exe X MemoryWatcher spyware BsRte MemoteXZZ.exe X Added by the W32/AutoRun-AJU removable media worm. memreader.exe memreader.exe X Added by the W32/Agobot-TY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MEMreaload MEMreaload.exe X Added by the LAZAR trojan downloader. Windows Memory Drivers memretain.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Memory Running Services memrun.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MemScanner MemScanner.exe N SpyHunter - spyware remover of somewhat dubious repute, see note Windows Memory Sharing memshare.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Memory Sharing memshr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Update Machine memstat.exe X Added by the RBOT-OM WORM! keyboard driver memswapmanager.pif X Added by the Troj/Delf-LB browser hijacking trojan. Systweak Memory Optimizer memtuneup.exe U Part of SysTweak Advanced System Optimizer MemTurbo memturbo.exe U MemTurbo memory optimizer. MS professionals recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind ... Read More memoryzipperplus memzip.exe U Related to Memory_Zipper_Plus_optimizes memory management tool. Note: located in C:\Program Files\Memzip\ ... Read More MenuSnap MenuSnap.exe N MenuSnap from Rietta Solutions. Utility that re-orders your Start Menu items alphabetically. You may not want this utility if you're able to do this m ... Read More biomenu menusw.exe Y Related to Sony_VAIO Passwords, encryption, and a biometric fingerprint sensor. ... Read More mercora MercoraClient.exe U Related to Mercora_IMRadio Search, find and listen to thousands of radio channels hosted by other Mercora users. Note If you subscribe make sure you ... Read More merqpo merqpo.chm X Added by the Backdoor.Rustock backdoor rootkit. Windows modz Verifier Meseger.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msn upddate mesenger.exe X Added by the W32/Rbot-AVZ worm and IRC backdoor. Messenger mesg.dll X Added by the Backdoor.Fuwudoor backdoor. Message_Blocker messageblock.exe U Message Blocker - "prevents Outlook Express from loading images or other content from the internet without confirmation, as well as executing scripts ... Read More Messenger messenger.exe X Added by the KUTEX TROJAN! MSN messenger messenger.exe X Added by an unidentified TROJAN! Note - this is not the real MSN Messenger, see this thread ... Read More System driver Messenger.exe X Added by a variant of the SMALL.BJ TROJAN! Yahoo Updater Messenger.exe X Added by the W32/Forbot-FE worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More mmessenger messenger.exe X Added by the AGOBOT.GM WORM! ... Read More Yahoo!!! Messenger.exe X Added by the Troj/Dloadr-TG keylogging Trojan. MSN Messenger messenger.vbs X Added by the VBS/Eliles-A mass-mailing and Instant Messenger worm. MessengerDiscovery MessengerDiscovery.exe U MessengerDiscovery is a MSN Messenger add-on - adding over 70 new features MSN Messenger Live Windows messengerlive.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSN MESSENGER 9.0 messengerr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows messenger messengers.exe X Added by the W32.Mytob.EI@mm worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More SystemB MessengerStopper.exe X MessStopper adware Messenger91 messengersystem.exe X Added by the W32/Rbot-FPF worm and IRC backdoor. metacafe MetacafeAgent.exe U Related to Metacafe An entertainment community on the web. ... Read More MeTaLRoCk (irc.musirc.com) has sex with printers metalrock-is-gay.exe X Added by the RANDEX.Q WORM! Windows MeTaLRoCk service metalrock.exe X Added by the TASTYRED TROJAN! mewegex mewegex22011.exe X Added by the Troj/TTC-A Trojan. LMMng mewlow.sys X The Troj/Haxdoor-Q TROJAN/backdoor creates this file, and service with a servicename of mewlow. ... Read More MS Explorer mexplore.exe X Added by the YAHA.AE WORM! mfcapi32u mfcapi32u.exe X Added by the WORM_TOYPET.A worm. This worm propagates via email. It gathers target email addresses from an affected system by searching for files with ... Read More staeck122 mfceee.exe X Identified as a variant of the Mailbot Trojan. PowerProfile mfcp30.exe X Added by the Troj/Rindas-A TROJAN and found in the Windows system folder. It allows access to a compromised PC by way of IRC channels. ... Read More mfin32 mfin32.exe X MyFreeInternetUpdate - adware downloader CorelMedia FoldersIndexer8 MFindexer.exe N Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office ... Read More CorelMedia FoldersIndexer8 MFINDE~1.EXE N Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office ... Read More spam firewall mfirewall.exe X Added by the SDBOT.AOU ... Read More MightyFAX Controller MFNTCTL.EXE N Mighty FAX from RKS Software - "installs a printer driver so that you can fax directly from Windows software" ... Read More panasonic communications utility Mfpscdl.exe U Related to Panasonic_Panafax_fax_machines Note: located in C:\Program Files\Panasonic\Panasonic-DMS\Port Controller\ ... Read More Microsoft Incroporate mfs.exe X Added by the W32/Rbot-ANF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Mass Effect(TM) Xbox 360 mfxbox.exe X Added by the W32/Spybot-MS worm and IRC backdoor. W32/Spybot-MS spreads via networks shares and MSSQL servers protected protected by weak passwords. T ... Read More Mgabg Mgabg.exe ? Matrox BIOS Guard. What does it do and is it required? Matrox Control Center mgactrl.exe N For Matrox video cards. Quick access to settings Matrox Diagnostic mgadiag.exe N For Matrox video cards. Quick access to diagnostics MGA Hook Mgahook.exe ? MATROX Graphics card related. What does it do and is it required? Matrox QuickDesk mgaqdesk.exe N For Matrox video cards. Quick access to tweak your card to your liking MGA Quickdesk MGAQDESK.EXE N For Matrox video cards. Quick access to tweak your card to your liking MGA_CD_Install mgasetup.exe N Matrox Millennium video driver. Not required once drivers installed mgavctrl mgavrtcl.exe Y McAfee's Virus Scan Online mgavrtclexe mgavrtcl.exe Y McAfee's Virus Scan Online mgavctrl mgavrte.exe Y McAfee's Virus Scan Online mgavrtclexe mgavrte.exe Y McAfee's Virus Scan Online mgcxt.exe mgcxt.exe X Added by the Troj/DNSChan-IZ Trojan. This Trojan will change your DNS settings. ... Read More <not used> mgmrwmrv.exe X Identified as a variant of the Trojan.FakeAlert malware. This malware will issue fake alerts on your computer stating you have security problems and ... Read More mgmtapi mgmtapi.exe X Unidentified malware RandomWin32 mgnwin32.exe X Added by the SDBOT-DV WORM! smgr mgrs.exe X Identified as a variant of the Trojan-Downloader.Win32.Alphabet Trojan. Intel Input Service mgrsvc.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Microsoft HTTP Protocol mgsev.exe X Added by the W32.Spybot.AGEN AOL Instant Messenger worm. This worm has virtual machine detection where it will terminate itself if it is run on a VMw ... Read More mgsvflkw mgsvflkw.dll X Identified as a variant of the Adware.Agent malware. MGSysCtrl MGSysCtrl.exe U Control Panel that allows you to configure various settings on MSI motherboards. ... Read More Ms Java for Windows NT mguard.exe X Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.VanBot.f backdoor worm. ... Read More BullGuard mgui.exe Y Part of Bullguard antivirus mgxfebsq mgxfebsq.dll X Identified as a variant of the VideoAccessCodec adware. MHDOGStart mhdogst.EXE X Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS ... Read More System Guard mhguard.exe X Added by the W32/Rbot-AGU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MHINIT MHINIT.EXE N Part of the Cybermedia Clean Sweep package CHotKey mhotkey.exe U Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features ... Read More Microsoft Greetings Reminders MHPRMIND.EXE N Microsoft Home Publishing greetings reminder Microsoft Greetings Reminder MHPRMINF.EXE N You really want to be reminded about somebody's birthday at the expense of resources? ... Read More mhs mhs.exe X Added by the Troj/Gampass-B Trojan. mhs2 mhs2.exe X Added by the Troj/Gampass-E spyware Trojan. mhs3 mhs3.exe X Added by the Troj/LegMir-AMW information-stealing Trojan for the online game Legend of Mir. ... Read More Smrkvx mhsxmx.exe X Added by the Troj/Kelvir-CJ Trojan. The Trojan monitors the status of Windows Messenger contacts and sends predefined messages to online contacts. ... Read More mhsystem mhsystem.exe X Added by the Troj/LegMir-AHW password-stealing Trojan. mi5035a0 mi5035a0.dll X A variant of the Troj/Haxdor backdoor Trojan. This infection utilizes the mi5035a5.sys rootkit to hide itself. ... Read More ASUS PCI controller mi5035a5.sys X A variant of the Troj/Haxdor-Fam rootkit. lindow miamore32.dll X Identified as Trojan-Clicker.Win32.Agent.ct. Windows Service Agent miBot.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. microsoft update Micr0s0ft.exe X Added by the AGOBOT.AAR WORM! ... Read More ANTIVIRUS microAV.exe X Added by the Micro Antivirus 2009 rogue anti-spyware program. Microsoft Service microhost.exe X Added by the RBOT-LC WORM! SystemBackup MicroLog.exe X Added by the MICROLOG.A TROJAN! Required Service Drivers micront.exe X Added by the W32/Rbot-ABD trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Windows Logon Service micropoft.exe X Added by the W32/Rbot-FZY worm and IRC backdoor. W32/Rbot-FZY spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More Microsft Internet Explorer Microsft Internet Explorer.hta X Added by the JS/Unicle-A javascript virus. WinUpdate Microsoft Office Update for Windows XP.sys X Added by the VBS/AutoRun-UC removable media worm. system Microsoft Office.exe X Added by the Troj/Bancban-LH Internet banking Trojan. Microsoft Office Microsoft Office.hta X HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! ... Read More Microsoft Send Microsoft Send.exe X Added by the Troj/Small-DMY Trojan. Microsoft Webserver Microsoft Webserver.exe X Added by the Troj/Hupigon-FU backdoor Trojan. microsoft windows Microsoft Windows.hta X HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! ... Read More Configuration Loader microsoft.exe X Added by the GAOBOT.JB WORM! Microsoft Executing microsoft.exe X Added by the AGOBOT.UV WORM! Microsoft Update Microsoft.exe X Added by the GAOBOT.AFJ WORM! windows update Microsoft.exe X added by the Troj/PWSLmir-F TROJAN to steal information and send it out via email. ... Read More Microsoft Synchronization Manager microsoft.exe X Added by the W32/Sdbot-OM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Dcom System Patch microsoft.exe X Added by the W32/Sdbot-X worm. When started, this infection connects to a remote IRC server and waits for commands to execute. ... Read More Microsoft Office microsoft.exe X Added by the Troj/Banker-VF banking Trojan. blah service microsoft.exe X A variant of the IRCBot family of worms and IRC backdoors. WindowsSystem32 microsoft.exe X Identified by Kaspersky Antivirus as IRCBot.aac. {9B71D88C-C598-4935-C5D1-43AA4DB90836} microsoft.exe X Added by the Troj/Bifrose-UO Trojan. Win32KernelStart microsoft.exe X Added by the Troj/Delf-EWZ Trojan. microsoft.exe microsoft.exe X Added by the Troj/Goldun-GB Trojan. application microsoft.exe X Added by the W32.Kasimod.A worm. Microsoft Setup Initializazion Microsoft.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Win32KerenlStart microsoft.exe X Added by the Infostealer.Banbot Trojan. Infostealer.Banbot is a Trojan horse that downloads files from remote locations and steals sensitive informati ... Read More Microsoft Information Check microsoft.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. microsoft microsoft.hta X HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site! ... Read More microsoft32.exe Microsoft32.exe X Unidentified worm or trojan Microsoft Dll Manager microsoft32dll.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. microsoft420 microsoft420.exe X Added by the MENACE.B WORM! MicrosoftFirewall MicrosoftFirewall.exe X Added by the Downloader.Goobiz Trojan downloader. Downloader.Goobiz is a Trojan horse that downloads potentially malicious files on to the compromised ... Read More Microsoft Genuine Advantage MicrosoftGenuine.exe X Added by the Troj/Bancos-BEQ online banking Trojan. Windows Manager MicroSoft IMM MicroSoftImm.exe X Added by the Troj/Agent-GJL Trojan. mslog MicrosoftLog.exe X Added by a variant of the W32/SDBOT WORM! ... Read More Microsoftmsn32.exe microsoftmsn32.exe X Added by the CERTIF-C TROJAN! ms configuration microsoftsa32.exe X Added by the W32.KELVIR.X WORM! ... Read More Microsoft Scanreg microsoftscanreg.exe X Added by the FRANRIV.A WORM! win32 debug manager microsoftupd.exe X Added by a variant of the W32/WOOTBOT WORM! ... Read More MicrosoftUpdate MicrosoftUpdate.exe X Added by the Troj/Banker-EHC online banking Trojan. If you are infected with malware it is advised that you immediately change your online banking pas ... Read More Microsoft Update Microsoftx.exe X Added by a variant of the RBOT WORM! SYSTEMS MICROSYSTEM.EXE X Added by the WORM_MYDOOM.BL mass-mailing worm. Microupdate MICROUPDATE.EXE X Added by the WORM_MYTOB.PX mass-mailing worm. SetDefaultMIDI MIDIDef.exe ? Related to a Soundblaster Audigy soundcards. What does it do and is it required? ... Read More Firewall Policy MidiDef32.exe X Added by the Troj/Piebot-A worm and IRC backdoor. Winsystems miefotoieri.EXE X Added by the W32/Delf-DVT mass-mailing worm. mig2 mig2.exe X Added by the Trojan.Hiween Trojan. Trojan.Hiween is a Trojan horse that creates copies of itself and disables various system and security-related prog ... Read More Connection Sharing Networkection Mighng.exe X Added by the Troj/Delf-FBU Trojan. <not used> miglntma.dll X Added by the W32/Stratio-AP mass-mailing worm. jotl millenzje.exe ? ?? MimBoot mimboot.exe N Starts Musicmatch Jukebox at bootup - can be started manually {F418BAA4-0CCE-9FEF-710B-DB5BD78EF0FE} mimpatch.exe X Added by the Troj/Bifrose-PO backdoor Trojan. MouseImp MImpHost.exe U MouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device" ... Read More Mincer Mincer.exe X Added by the WM97/Minceme-A Word macro virus. Minerva minerva.com X Added by the W32.Minera.A worm. W32.Minerv.A is a worm that spreads through removable drives and network shares. ... Read More The Opposite Of Renova Minerva.exe X Added by the W32/Minerv-A worm. Microsoft Ming Service ming.exe X Added by the W32/Rbot-AWS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute ... Read More MINIBUG MINIBUG.EXE X Displays ads inside Weatherbug - see here MINIFERT.EXE MINIFERT.EXE N Part of Backweb minilog MINILOG.EXE U If you don't have ZoneAlarm or ZoneAlarm Pro running you don't need this. This must be enabled if programs such as VisualZone Report utility or ZoneLo ... Read More MiniMavis MiniMavis.exe N Mavis Beacon typing tutor MiniMinder MiniMind.exe U MiniMinder is a date reminder that provides countdowns to specified events. MiniNote MININOTE.EXE N Mini NoteTab was the first in the family of "NoteTab" text and HTML editors from Fookes Software ... Read More MiniPCI MiniPCI.sys X Added by the Troj/NtRootK-M rootkit. miniportrt miniport_mp.exe X Malware - see here ... Read More MiniServer.exe MiniServer.exe X Added by the Troj/LittleW-E backdoor Trojan. minix32 minix32.exe X Identified by Kaspersky as a variant of the Trojan.Win32.Scar.adsy malware. Typically found with Windows Police Pro infections. ... Read More inixs minix32.exe X Identified by Kaspersky as a variant of the Trojan.Win32.Scar.adsy malware. Typically found with Windows Police Pro infections. ... Read More miranda im miranda32.exe N Miranda Instant Messaging client ... Read More ToolbarInstall MirarSetup.exe X Added by the Mirar adware. This program will install a toolbar and display advertisements with the same subject matter as websites you are visiting. ... Read More Mirate Sp 2 Information miratesp2.exe X Added by the RBOT.QH WORM! ctfmon mIRC.dll X Added by the Troj/Delbot-E backdoor trojan. taskmgr.exe mirc.exe X Added by a variant of the AGENT.AH TROJAN! Nvidia mirc.exe X Added by Troj/Delbot-A, a TROJAN/IRC backdoor, and found in the windows system folder. ... Read More feelalright mirc.exe X Added by the W32/IRCFlood-M IRC worm. Startup mirc.exe X Added by the Troj/Flood-EU IRC backdoor Trojan. It also creates the follow files: Windows77804.reg, Windows909376.reg, Win ... Read More SYSTEM mirc.exe X Added by the Troj/Sobet-B backdoor Trojan. Microsoft Chat mIRC.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. mirc.exe mirc.exe X Added by the W32/SillyFDC-AY worm. Winsock2 driver MIRC32.exe X Added by the SPYBUZZ TROJAN! Microsoft Updatting miroupdate.exe X Added by a variant of the WIN32.RBOT WORM! misiCTRL misiCTRL.exe ? Miro video driver related. Is it required? miroVIDEO Tray Tool misitray.exe N Tool for quickly changing options for miro/Pinnacle capture cards during capture/playback/output. When this program is closed, another program (mv-ctr ... Read More misiTRAY misiTRAY.exe ? Miro video driver related. Is it required? <not used> MISuvstm.exe X Added by the Troj/Haoba-A Trojan. MisVh55 MisVh55.exe X Added by the W32/Autorun-BA removable media worm. {6625fc6c-731c-443a-b3f0-2c8c520a1766} mivmv.dll X Zlob Trojan that installs VirusProtectPro 3.7 and shows fake security alerts from your Windows taskbar. ... Read More Virus Mixa.exe X Added by the W32/Autorun-DH removable media worm. C-Media Mixer Mixer.exe N C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. ... Read More Mixer Mixer.exe N C-Media Mixer - C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change ... Read More Microsoft Update mixer.exe X Added by the W32/Rbot-AIR worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft mixers.exe X Added by the W32/Agobot-AHU worm and IRC backdoor. mixersel mixersel.exe N Related to Realtek_Audio_devices Provides additional configuration options for these devices. This program is non-essential process to the running of ... Read More Mixghost mixghost.exe N Management software for Altec Lansing speakers.  If a change is needed, the user can launch it from the Start menu ... Read More Fxoekm miyhart.exe X Added by the W32/Sdbot-CZQ worm and IRC backdoor. mjc mjc.exe X Identified as a variant of the Search Hijacker/Clicker malware. MemoKit MK.EXE U Memory optimizer. It loads from startup group and it goes off as soon as the program (memokit.exe) is loaded in the System Tray. Mk.exe does not run w ... Read More CHotKey MK9805.EXE U Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features ... Read More mkb.exe mkb.exe U Added by the Spyware.MomKnowsBest surveillance software. Spyware.MomKnowsBest is a spyware program that can be used to gather sensitive information fr ... Read More Skmxdb mkdrxz.exe X Identified by Kaspersky antivirus as IM-Worm.Win32.VB.aw. <unknown> mkey.sys X Rootkit used by the Troj/IRCBot-HG infection. mkwsqp mkwsqp.cur X Added by the Backdoor.Rustock backdoor rootkit. ml00!.exe ml00!.exe X Malware, detected by Panda antivirus as Trj/Downloader.BWD ml1helperstartup ML1Helper.exe U Midnight_Lake Screen saver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of do ... Read More ml1helperstartup ML1HEL~1.EXE U Midnight_Lake Screen saver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of do ... Read More mmsass mldmm.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Matador mlfbuddy.exe U MailFrontier - anti-spam application [not used] mlg1.exe X Added by the W32/Kelvir-I instant messaging worm. <not used> mljjk.exe ? Identified as either related to the Vundo Trojan or a variant of the TROJAN.AGENT.GEN malware. ... Read More mljkhhh mljkhhh.dll X Added by the Troj/Virtum-AH Trojan. ml34 mlm4.exe X Added by the Troj/Mailbot-BH Trojan. Troj/Mailbot-BH may be used to send unsolicited emails from an infected computer ... Read More Logitech QuickCam Manager mlqm.exe X Added by the W32/Sdbot-DIJ worm and IRC backdoor. m66 mlr66.exe X Added by the Troj/Agent-ACR Trojan. {9cc1c589-4b22-4dae-8e12-4c3b5fa12b3f} mlraakb.dll X A Trojan used by the rogue anti-spyware program VirusBursters. This Trojan, when installed, will display fake security alerts on your taskbar and inst ... Read More iriver autodb MLService.exe U Associated with the iRiver Music Manager ... Read More Gray_Pigeon_Server mm.exe X Added by the Troj/Feutel-AM backdoor Trojan. motoin mm15201518.Stub.exe X Delfin_Promulgate adware variant ... Read More Logitech MM50 Kernel Drivers mm50krnl.exe X Added by the W32/Spybot-NT worm and IRC backdoor. mm77lgn control service mm77lgn.sys X Added by a variant of the Troj/Haxdor-Gen. rootkit. <not used> mma.bat X Added by the W32/Autorun-AP removable media worm. Microsoft Movie Maker Mmaker.exe X Added by the IRCBOT.C TROJAN! Note that this is not a valid Microsoft program Microsoft all mmall.exe X Identified as a variant of the Proxy.Wopla.ac malware. USBHWINFO mmc.exe X Added by the Troj/LowZone-I trojan. Smart Card Supervisor mmc.exe X Added by the W32/Dzan-A removable storage device worm. MMC card reader mmccrd.sys X A variant of the HaxGen/Goldun rootkit. mmcdll mmcdll.dll X A variant of the Haxdoor and Goldun Trojan. This infection utilizes the mmccrd.sys rootkit to hide itself. ... Read More mmcndmgr mmcndmgr.exe X Added by an unidentified VIRUS, WORM or TROJAN! clre mmdc.exe X Added by the Troj/PurScan-AI ... Read More mmemdrv mmemdrv.exe U Added by the SecondSight. Spyware.SecondSight is a spyware program that captures keystrokes and screen shots, and logs user activity on the compromis ... Read More MMERefresh MMERefresh.exe U Part of Digidesgin Protools. Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firew ... Read More MinMaxExtender Mmext.exe U MinMaxExtender - window handling tool OpenMstart mmgr32.exe X "Switch" adult content dialler OpenMstart mmgr32.exe X Added by the Mal/Dial-U dialer. MMGSrv32 mmgsrv32.exe X Added by the Troj/LdPinch-AX TROJAN/backdoor! Mmgsvc mmgsvc.exe X Mmgsvc spyware MMhid mmhid.dll U This is the Human Interface Device Server for Win98, it is required only if you are using USB Audio Devices you can disable via Msconfig. See here. Ty ... Read More MMHK mmhk.exe ? A driver found on a Compaq Presario 800T notebook. Possibly something to do with multimedia hot keys? ... Read More KM9801U MMHotKey.exe U Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under W ... Read More MMHotKey MMHotKey.exe N Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under W ... Read More Microsoft hren1 mmhren1.exe X Identified as a variant of the Trojan-Downloader.Win32.Agent.iww Trojan. Activboard MMKeybd.exe U Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, C ... Read More DellTouch MMKeybd.exe U Dell multimedia keyboard manager. Required if you use the additional keys Keyboard Manager MMKeybd.exe U Multimedia keyboard manager. Required if you use the additional keys MMKeybd MMKeybd.exe U Multimedia keyboard manager. Required if you use the additional keys Multimedia KBD MMKeybd.exe U Multimedia keyboard manager. Required if you use the additional keys MULTIMEDIA KEYBOARD MMKeybd.exe U Multimedia keyboard manager. Required if you use the additional keys FLMK08KB MMKEYBD.EXE U Multimedia keyboard manager. Required if you use the additional keys Windows update mmln.exe X Added by the W32/Rbot-BIU worm and IRC backdoor. [Unknown] mmlogon.sys X A variant of the Haxdoor rootkit. eZmmod mmod.exe X Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information ... Read More mmod mmod.exe X Ezula - regarded as spyware/theftware and bundled with the popular iMesh and KaZaA file-sharing programs. Read here for more information ... Read More mmopl MMOPLIB.EXE X Added by the W32.Taripox@mm mass-mailing worm. Microsoft Security Monitor Process mmp.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Twain image mmp32.exe X DailyWinner adware related mmreminderservice MMReminderService.exe U Related to Mind_Manager from Mindjet - Easy way to organize ideas and information. ... Read More Realtime Audio Engine mmrtkrnl.exe U Associated with ALCATech BPM_Studio MMRun mmrun.exe ? ?? MS management console mms.exe ? Suspicious as the Microsoft Management Console is "mmc.exe" and doesn't normally run at startup ... Read More mms400 mms400.dll X Added by the Troj/Conhook-AF Trojan. Microsoft Manager Server Control mmsc.exe X Added by the W32/Tilebot-FH worm and IRC backdoor. sysmem mmsete.exe X Added by the W32/Nopir-D worm. mmsg mmsg.exe.exe X Added by the W32/Minusia-A worm. QuickSet mmspng.exe X Identified as a variant of the Backdoor.Win32.Iroffer.z backdoor. microsoft network services controller mmsvc32.exe X Added by the W32/NANPY-A WORM! ... Read More MicrosoftMultimediaTask Mmtask.exe X Adware downloader - not the valid MusicMatch Jukebox which shares the same filename ... Read More mmtask mmtask.exe N Part of MusicMatch Jukebox - digital music player / CD burner and ripper / music organizer / playlist creator ... Read More MMtask Service mmtask.exe X Added by the BACKGAT.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename ... Read More SchedulingAgant MMTASK.EXE X Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename ... Read More Mmtask mmtask.exe X Added by the W32.Burmec worm. W32.Burmec is a worm that spreads by copying itself to removable and mapped drives. ... Read More MMTASK mmtask.tsk Y A check on the file's properties reveals "Multimedia background task support module". MMTASK is a very simple 16-bit program used by certain multimedi ... Read More MMTray MMTray.exe N Part of Morgan Multimedia Codecs. Only required when the codecs are used MMTray2K MMTray2K.exe N Part of Morgan Multimedia Codecs. Only required when the codecs are used MMTrayLSI MMTrayLSI.exe N Part of Morgan Multimedia Codecs. Only required when the codecs are used mediamotor.exe mmups.exe X Roimoi/Media-Motor adware mmva mmvo.exe X Added by the W32/AutoRun-TD removable media worm. XiD mmx.exe X Added by the ANALOGX TROJAN! mmx17g mmx17g.dll X Added by a variant of the Troj/Haxdoor Trojan. This infection utilizes the mmx17g.sys and the mmx19g.sys rootkit to hide itself. ... Read More <unknown> mmx17g.sys X Added by a variant of the Troj/Haxdor-Gen rootkit. MMX2 virtualization service mmx19g.sys X A variant of the Troj/Haxdor-Fam rootkit. <unknown> mmx19g.sys X Added by a variant of the Troj/Haxdor-Gen rootkit. MMX virtualization service mmx19g.sys X A variant of the Troj/Haxdor-Fam rootkit. mmx432 mmx432.dll X Added by the Trojan.Goldun. password-stealing Trojan. MMX Virtualization Service mmx464.sys X Added by the Trojan.Goldun. password-stealing Trojan. MMX2 Virtualization Service mmx464.sys X Added by the Trojan.Goldun. password-stealing Trojan. mmxeroxk mmxeroxk.dll X Added by a variant of the Haxdoor Trojan. This infection utilizes the socketx113.sys rootkit. ... Read More mmxF32 mmxF32.dll X Added by the Troj/Haxdoor-BO backdoor rootkit. MMX2 virtualization service mmxF64.sys X Added by the Troj/Haxdor-Gen rootkit. mmxp2passion.exe mmxp2passion.exe X MediaMotor/Popuppers adware component ... Read More MMTray mm_tray.exe N MusicMatch Jukebox icon in the task tray - digital music player / CD burner and ripper / music organizer / playlist creator ... Read More Goldensoft_MndlSvr MndlSvr.exe U Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as ... Read More mFilter MNeck.exe X Added by the Troj/Clicker-AG Trojan. This infection also installs the files C:\log.log and c:\Windows\System32\noctrn.dll. ... Read More mlrnew4 mnew4win.exe X Added by the Trojan.Slapew Trojan that uses your computer to send spam. mlrnew6 mnew6win.exe X Added by the Troj/Mailbot-AJ Trojan. DRam prosessor mngr.exe X A variant of the RBot family of worms and IRC backdoor Trojans. Microsoft Norotn Anti Virus mnhpot.exe X Added by the W32/Rbot-GRO worm and IRC backdoor. Military Net Killer MNK.exe X Added by the W32/MillNet-A worm. mnklins mnklins.exe X Transponder parasite related ... Read More MNM Srv mnmsrv.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Fpx mnmsrvc.exe N Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations ... Read More MNPol mnpol.exe X Adult content dialler MNS MNS.exe U Mobile Net Switch enables you to use your computer on more then one network with the click of a button. It allows you to automatically select the corr ... Read More Microsoft Security Monitor Process mnsmp.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. mnsa mnso.exe X Added by the Troj/PWS-ANX password-stealing Trojan. mnsvc mnsvc.exe X Added by the AUTOUPDER TROJAN! mnsvcsp mnsvcsp.dll X Added by the Troj/SCLog-A Trojan. mnsvcsp mnsvcsp.exe X Added by the Troj/SCKeyLog-B keylogger. Microsoft Windows Update mnswinsx.exe X Added by the W32/Rbot-AWH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More VirusScanner mnsys.exe X Added by the W32/Sdbot-AFQ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft WinUpdate mntcgf032.exe X Added by a variant of the SDBOT WORM! [Various Names] MNTP.exe X Part of the Wareout infection as described here. HornetMonitor MntrHrnt.exe U Added by the Hornet_Monitor Monitoring System. Messenger Sharing Control mnwsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MoneyAgent mnyexpr.exe N Microsoft Money mobile phone suite MobilePhoneSuite.exe U Related to Mobile_Phone_Suite from Logitech. Details ... Read More MobilityService MobilityService.exe N This is a utility that comes preinstalled on Acer laptops. This utility combines mobile PC settings into one location such as power management, power ... Read More mobsync mobsync.exe N MS Syncrhonization Manager - updates the network copy of materials that were edited offline, such as documents, calendars, and e-mail messages ... Read More Synchronization Manager mobsync.exe N Find more information about its use here MOBSYNC32.EXE mobsync32.exe X Added by the FINERO TROJAN! Synchronization Agent mobsynca.exe X Added by the W32/Randex-E worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More ACCRA Mocih.exe X Added as a new service by the Troj/Chimo-B TROJAN, with a displayname of Trace network connections. ... Read More MODEMBTR MODEMBTR.EXE U Modem Booster from inKline Global to improve ISP connections Modeminf Modeminf.exe X Added by a variant of the CRYPTER.C TROJAN! AModemLockDown ModemLockDown.exe U See Here. modgzip modgzip.dll X Added by a variant of the Goldun.Fam Trojan. [unknown] modifiche.vbs X Added by the VBS/Haptime-E worm. ModPS2 ModPS2Key.exe U Hotkey software for Chicony keyboards. Windows Security Module module.exe X Added by a variant of the RBOT WORM! Microsoft Service module.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. tgbcde module32.exe X Added by the REIGN.R TROJAN! modzlib modzlib.dll X Added by a variant of the Goldun.Fam Trojan. MoeMonitor.exe MoeMonitor.exe Y Used by Microsoft Live Mesh. This program monitors the Mesh Operating Environment that you belong to. ... Read More flmoffice4dmouse moffice.exe U Mouse properties for Logytech Typhoon Office Mouse ModemOnHold MOH.EXE U NetWaiting Modem-on-Hold Application iPalm mon.exe N Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not ne ... Read More [Various Names] MON76234.exe X Part of the Wareout infection as described here. mondb mondb.dll X Identified as a variant of the Win32:PureMorph malware. This malware will issue fake security alerts on your computer. ... Read More MoneyAgent money express.exe N Part of MS Money. Available via Start -> Programs MoneyStartUp Money Startup.exe N Microsoft Money Money Express moneyexpress.exe N Part of MS Money. Available via Start -> Programs realone_nt2003 moniker.exe X Added by the SNONE.A WORM! [Various Names] moniter.exe X Part of the Wareout infection as described here. ENCMONITOR monitor.exe N The Encompass Monitor. This program is the Connect Direct Program.  It is more trouble than it is worth and few use it ... Read More Pagis Scheduler Monitor.exe N Scheduler for the Pagis scanning suite from Scansoft.  monitor monitor.exe X Browser hijacker, redirecting to NCM Search Windows USB Hub Manager Monitor.exe X Added by the W32/Rbot-BPN worm and IRC backdoor. Monitor Monitor.exe U Software for the PAC7311 USB Camera. OM_Monitor Monitor.exe N Monitors your computer for when your Olympus digital camera is plugged in. monitor1a monitor1a.exe X Added by the Troj/MsnAgen-A keylogging Trojan. Belkin PCMCIA WLAN Monitor monitorbk.exe N Belkin USB Network Adapter Management utility - can be started manually Monitormgt Monitormgt.exe X Added by the GEMA TROJAN! MP_STATUS_MONITOR monitr32.exe ? Related to Cannon Multi-Pass MonKbd MonKbd.dll X Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan. MonKernel MonKernel.dll X Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan. monln monln.dll Y Related to Comodo AntiVirus. mono.exe mono.exe X Added by the W32/Sdbot-DHV worm and IRC backdoor. Alps Electric USB Server Monserv.exe Y Alps Electric USB Server - required according to this article mbssm32 monstu.exe X Identified by Kaspersky Antivirus as a variant of the Trojan.Win32.Agent.cnm Trojan. ... Read More Microsoft System Monitor monsys.exe X Added by the Troj/IRCBot-YV worm and IRC backdoor. moon phase moon.exe N Moon Phase - tray icon that indicates the phases of the moon w32alanis mope.scr X Added by the SINALA WORM! ProgramWindow more comp.exe ? ?? Internet Send More log.exe X Unidentfied adware MSys32 morfitwe.exe X Added by the Adware.Webentrance adware. Adware.Webentrance is adware that alters Internet Explorer's home page to display a Web site for advertising p ... Read More Msys32 morfitwebentrance.exe X Morfit ADjectPager - "uses home page rental technology for generating revenues". Homepage hi-jacker that re-defines your IE or Netscape start page as ... Read More Morpheus morpheus.exe N MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the K ... Read More morphstb morphstb.exe X Adware downloader - detected by Kaspersky antivirus as Trojan-Downloader.Win32.Stubby.c ... Read More mosadl mosadl.exe X Added by the W32/Rbot-GWN worm and IRC backdoor. mosearch mosearch.exe X Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to ... Read More Microsoft Autorun5 mosou.exe X Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More Motive SmartBridge MotiveSB.exe N System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available ... Read More MotiveSB MotiveSB.exe N System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available ... Read More MotiveMonitor motmon.exe U Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used the suppliers on-line support and allows the agent at the far end to do ... Read More MotMon motmon.exe U Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used the suppliers on-line support and allows the agent at the far end to do ... Read More mustek mdc 3000 Mounter.exe ? Related to software for the Mustek MDC_3000 digital camera - what does it do and is it required? ... Read More DokanMounter mounter.exe Y This service allows you to mount filesystems that have been created by the Dokan user mode file driver library. ... Read More mouse mouse.exe X Added by the W32/Rbot-AHJ worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More FLMTRUSTMOUSE mouse32a.exe ? Mouse utility for a Trust brand mouse. What does it do and is it required? LWBMOUSE MOUSE32A.EXE U Mouse driver - required if you use non-standard Windows driver features Mouse 32A Mouse32A.exe N Mouse driver to control mouse functions from Azona. Available via Start -> Programs ... Read More FLMLABTECMOUSE mouse32a.exe ? Mouse utility for a Labtec brand mouse. What does it do and is it required? Mouse Button Monitor mousebm.exe X Added by the W32/Sdbot-ACG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More mousebut mousebut.exe X Added by the CRYPTER.A TROJAN! Mouse Click Monitor mousecm.exe X Added by the W32/Sdbot-ZQ worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More Mousecntl mousecntl.exe X Added by a variant of the CRYPTER.C TROJAN! Mouse Cursor Monitor mousecrm.exe X Added by the W32/Sdbot-ABQ worm. mousedrv mousedrv.exe X Added by the CRYPTER.A TROJAN! mouseElf mouseElf.exe U System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features ... Read More Mouse Hardware Sync mousehs.exe X Added by the Troj/Bdoor-HU backdoor trojan. Mouse Button Monitor mousemm.exe X Added by the W32.Esbot.A worm. Mouse Movement Monitor mousemm.exe X Added by the W32/Cuebot-E worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More mousepad mousepad.exe X Added by the Troj/Winsysba-E Trojan. mousepad mousepad1.exe X Added by the Troj/Winsysba-E Trojan. <not used> mouser.exe X Added by the Troj/Agent-ETC Trojan. Mouse Synchronization mousesync.exe X Added by the W32/Esbot-A worm. Tips mousetips.exe N Suggests tips on using your mouse Windows Mouse Utilities mouseutils.exe X Added by the W32/Rbot-ABU worm. This infection connects to an IRC server on startup where it waits for remote commands to execute. ... Read More run= mouse_configurator.win X Added by the GAGGLE.E WORM! Mousinfo mousinfo.exe U MS mouse information tool - for troubleshooting mouse problems Medie Sariel Number Services moviemk.exe X Added by the Troj/DownLd-AAP downloading Trojan. MovieNetworks MovieNetworks.exe X MovieNetworks will connect you by DOMESTIC PREMIUM RATE TELEPHONE NUMBER 900-xxx-xxxx. So you get xxx rated pictures and junk. And it will allow you t ... Read More Movieplace Movieplace.exe X MoviePlace malware Microsoft Internet Explorer movies.exe X Added by the Troj/Bancos-DZ password-stealing Trojan. Sysdata moviex.exe X Added by the W32/VB-CVK worm. haeckel moywh.dll X Zlob Trojan which installs the Virus Protect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your comput ... Read More Mozila mozila.exe X Added by the W32/Delbot-AJ worm and IRC backdoor. [Various Names] mozilla-text.exe X Part of the Wareout infection as described here. Mozilla Quick Launch Mozilla.exe N Netscape 6 and Mozilla browsers Microsoft Windows Update mozilla.exe X Identified as the Rbot.cnj / VanBot.CD worm and IRC backdoor. DRam prmaessor mp2Ld.exe X Added by the Win32/Rbot.EYG worm and IRC backdoor Trojan. mp3 audio mp32s.sys X A variant of the TR/Rootkit.Gen rootkit. mp3res mp3res.dll X A variant of the Haxdoor Trojan. This infection is hidden by the xprot.sys rootkit. ... Read More mp3res mp3res.dll0 X Added by the Troj/Agent-GTN Trojan. abtu mp3serch.exe X Loads the executable for LOP. mp3serch.exe is the final version MP4 Player mp4Player.exe X MP4P Player allows you to view MP4 videos. Marked as undesirable due to the fact that it changes your homepage to a custom Google search engine, chang ... Read More {ilgpnuwy-ewxn-ddkl-oaiw-pehmlkjtqwam} mpayy.exe X Added by the Troj/BeastPWS-H keylogging Trojan. MPB MPB.exe Y Easy Start Button Application updated by Anderson Lee for Caiman 4 buttons File is found on Evesham computers and is used to assign programs to 4 dif ... Read More Motive SmartBridge mpbtn.exe N System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available ... Read More windows workstation mpci.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More sis mpc service mpcsvc.exe X Identified by Kaspersky Anti-Virus as Trojan-Proxy.Win32.Small.du. This infection is a socks proxy and will also modify your Windows HOSTS file. ... Read More Manager e01 sp mpcsvc.exe X Identified by Kaspersky Anti-Virus as Trojan-Proxy.Win32.Small.du. This infection is a socks proxy and will also modify your Windows HOSTS file. ... Read More [not used] mpdat.exe X Added by the W32/Rbot-WG worm. When started this infection connects to a remote IRC server where it waits for commands to execute. These infections ... Read More mpeg-video03.exe mpeg-video03.exe X Added by the W32.Vispat.A@mm worm. MPFExe mpf.exe Y McAfee Personal Firewall mpfanvqg mpfanvqg.dll X Identified as a variant of the Adware.Agent malware. Macfee Security Patch Mpfsheild.exe X Added by the RBOT-NP WORM! McAfee Personal Firewall Service MPFSrv.exe Y Main executable for Mcafee Personal Firewall. MPFExe MpfTray.exe Y McAfee Personal Firewall MPFTray MpfTray.exe Y McAfee Personal Firewall LTM2 MPGSRV32.EXE X Added by the LITMUS.201 TROJAN! MapiDrv mpisvc.exe X Added by the MIPSIV TROJAN! mypopupkiller mpk.exe U Related to MyPopupKiller User's utility to manage PopUps. ... Read More MPL32 driver MPL32.exe X Added by the LOONY-M TROJAN! MediaExport mplay32.dll X Identified as the Delf.acm Trojan Downloader.mplay32.dll mplay64 mplay64.exe X Added by the Trojan.MPlay64 TROJAN! ... Read More iLLeGaL Mplayer.exe X Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename ... Read More Win32 Configuration mplayer.exe X Added by the W32/Forbot-BZ WORM, and it sets up a service named Windows Manage using Win32 Configuration as it's displayname. ... Read More mplayer3 mplayer3.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. mplink mplink.dll X A variant of the Haxdoor Trojan. This infection is hidden by the fprot.sys rootkit. ... Read More MplSetup MplSetup.exe U Used by Ricoh network printers to enable network printing from the client windows update mplupdate.exe X Added by the W32.HLLW.MOEGA WORM! ... Read More myprint mileage mpm.exe U Reports battery status on a portable printer MPM manager MPM.exe X Added by the Trojan.Spexta trojan. When infected your computer will become an open mail relay which will allow your computer to be used to send out s ... Read More MPNet mpn.exe X Added by the W32/Delbot-W worm and IRC backdoor. MPower MPower.exe U MPower from MindBeat. "Defragments and frees your RAM giving more stability to your system and avoiding needless use of swap file. Willl also benchmar ... Read More mediapipe p2p loader mpp2pl.exe X Added by the Movieland adware. Movieland is a potentially unwanted application that has been reported as causing pop up advertisements on computers. U ... Read More mppdds mppdds.exe X Added by the Troj/PWS-AKZ password-stealing Trojan. mppds mppds.exe X Added by the Troj/WowPWS-AW password-stealing Trojan for the online game World of Warcraft. ... Read More mpppds mpppds.exe X Added by the Troj/Lineag-AJL password-stealing Trojan for the online game Lineage. ... Read More Microsoft (R) Windows Network Latency Controller mpreg.exe X Added by the Backdoor.Ranky backdoor Trojan. This infection also installs a Windows service of the same name and filename. ... Read More MPREXE MPREXE.EXE X Added by the OPASERV.T WORM! Note - this is not the legitimate Mprexe.exe system file ... Read More MPREXE.exe mprexe.exe Y WIN32 Network Service Interface Process. MPREXE.exe enables the computer to have multiple clients/protocols for networks. There are some problems with ... Read More MprHTML MprHTML.exe X Added by a variant of the VAGRNOCKER TROJAN! <not used> mprmdpnm.dll X Added by the W32/Stration-AP worm. rmmon mprmmon.exe N Resource Monitor for the now defunct Chromatic Research MPact2 3DVD graphics card ... Read More mpr msg mprmsg32.exe X Added by the W32.MYTOB.CF WORM! ... Read More mprocessor.exe mprocessor.exe X InstallDollars.com foistware McAfee Privacy Service mps.exe Y Mcafee service used to help protect your privacy and personal information. mpsonn MpsOnn.exe Y Canon printer driver MsPowerSvc MPSvcC.exe U Added by the Green Dam-Youth Escort surveillance program. This program is an Internet filtering software that the Chinese government will require to ... Read More MPT MPT.exe ? ?? mpt mpt.exe X Identified as a variant of the Trojan-Downloader.Win32.Agent.aaju malware. MPtask Services mptask.exe X Added by the LALA or AOT TROJANS! MPTBox MPTBOX.EXE N Cannon Multi-Pass toolbox - a button bar MP Tcloaks mptcloaks.exe X Added by the W32/SdBot-GK worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More MP Tcloaxs mptcloaxs.exe X Added by the RANDEX.CT WORM! MP Tclockvvv mptclockvvv.exe X Added by the W32/Sdbot-DJ backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More mptsgsvc.exe mptsgsvc.exe X Hacker_Tool - detected by TDS-3 antitrojan as "HackTool.Win32.Hidd.j" ... Read More Windows Media Player mpwe.exe X Added by the W32/RBOT-TT WORM! MPXTray mpxptray.exe N Windows Media Player PowerToy which is run from the taskbar. It can be used to hide Windows Media Player (when in use) and choose various standard but ... Read More SiSAudio MP_S3.exe N WinME patch for an older SiS 961 chipset FERR bug. Enable if you have audio problems ... Read More mqbkup mqbkup.exe X Added by the OPASERV.K WORM! qbkupdbs mqbkup.exe X Added by the OPASERV.K WORM! Windows Network Controller Mqguard.exe X Added by the FORBOT-CL WORM! MsmqIntCert mqrt.dll ? Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem. ... Read More WINDOWS SYSTEM mqSSl;.exe X Added by the W32/Mytob-GF worm and IRC backdoor. MQT Svc mqtsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. mqzprwe mqzprwe.log X Added by the Backdoor.Rustock backdoor rootkit. <random characters> mradll.exe X Added by the Green AV rogue anti-spyware program. MrAntispy MrAntispy.exe X Added by the MrAntiSpy rogue anti-spyware program. MrAntiSpy is a Security Risk that may give exaggerated reports of threats on the computer. The prog ... Read More Distributed Allocated Memory Unit mravsc32.exe X A variant of the W32/SDBot.AWGW family of worms and IRC backdoor Trojans. <not used> mrcmgr.exe X Identified as a variant of the Trojan-Banker.Win32.Banker.rqk malware. 1 mrcmgr.exe X Identified as a variant of the Trojan-Banker.Win32.Banker.rqk malware. {**-**-**-**-**} mrdsregp.exe X Added by a variant of the Zenosearch adware. Adware.ZenoSearch is an adware that displays pop-up ads based on searches the user performs on popular we ... Read More MREMPR5 NDIS Protocol Driver mrempr5.sys Y Network driver used by Motive connectivity software. This software was most likely installed along with your broadband ISP's software. ... Read More MRENDIS5 NDIS Protocol Driver mrendis5.sys Y Network driver used by Motive connectivity software. This software was most likely installed along with your broadband ISP's software. ... Read More MirrorFolderShell mrfshl.exe U MirrorFolder backup software Logical Disk Detection mrisvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. ecopy desktop printer service mrmlnc32.exe U eCopy Suite software connects your Canon imageRUNNER or document scanner to your company’s e-mail and other networked enterprise applications for easy ... Read More Syga432te Pe432rsonal Firewall MrNo4236.exe X Added by the W32/Rbot-AQY worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More MrobeService MrobeService.exe ? Installed by the Olympus M:Robe player software? Is this needed? runner1 mrofinu.exe X An unclassified Trojan. runner1 mrofinu1000106.exe X Added by the AdWare.Win32.Virtumonde.cli adware. runner1 mrofinu1188.exe X Unidentified Trojan. motorola desktop suite mrouter config mRouterConfig.exe U Related to mRouterConfig is for configuration of mRouterRuntime. Used by Datassuite Software from Nokia / Siemens Sybian-Based. Note: located in C:\P ... Read More klrun.exe mrowk.ex X Added by the W32/SillyKaza-A P2P worm. This worms spreads via the Kazaa file sharing network. ... Read More SVCHOST mrowyekdc.exe X Added by the GOTORM WORM! Explorer MRSA.exe X Added by the W32/Mirsa-A mass-mailing worm. Notepad MRSA.exe X Added by the W32/Mirsa-A mass-mailing worm. Keyboard MRSA.exe X Added by the W32/Mirsa-A mass-mailing worm. System MRSA.exe X Added by the W32/Mirsa-A mass-mailing worm. Microsoft register shield Mrshield.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. mrsvctr mrsvctr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MRSVSS Service mrsvss.exe X Added by the W32/IRCBot-AES worm and IRC backdoor. MRT MRT.exe U Microsoft' Malicious Software Removal Tool. MediaRing Talk mrtalk.exe N Media Ring Talk, voice recognition software, Resource hog. Available via Start -> Programs ... Read More Windows Service Agent 32 mrthd.exe X Added by the Troj/Agent-GAQ Trojan. mrtMngr mrtMngr.exe N Maintenance Release Task Manager for Intuit’s QuickBooks or Quicken Windows Layer mrtmoons.exe X Identified as a variant of the Net-Worm.Win32.Kolab malware. MRU-Blaster Silent Clean mrublaster.exe N MRU-Blaster - performs silent cleaning of MRU lists at boot MS Office.hta MS Office.hta X Added by the Troj/Psyme-CH Trojan. Ms Spool32 MS SPOOL32.EXE X Added by the ASASSIN TROJAN! MS-DOS Service MS-DOS.pif X Added by the W32/Rbot-AII worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More MS-DOS Windows Service MS-DOS.PIF X Added by the W32/Rbot-AJW worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MS-DOS Security Service ms-dos.pif X Added by the W32/Rbot-AMR worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More [Various Names] ms-its.exe X Part of the Wareout infection as described here. Windows Bootup ms-wks32.exe X Added by the W32/Rbot-AFM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More UpdateXpSp MS045-XP2.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. win32servv ms1.exe X Added by an unidentified trojan or adware ms2src ms2src.exe X Added by a known Backdood_trojan TROJAN! Note: located in c:\program files\common files\system\ ... Read More ms32 ms32.exe X Added by the Troj/Nuclear-N backdoor Trojan. Ms Java for Windows NT MS32.exe X Added by the W32/Vanebot-H worm and IRC backdoor. W32/Vanebot-H spreads to other network computers by exploiting common buffer overflow vulnerabilitie ... Read More Compaq32 Service Drivers ms32.exe X A variant of the IRCBot family of worms and IRC backdoors. Windows Security ms32.pif X Added by the W32/Rbot-ARN worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft Features ms32cfg.exe X Added by the RBOT.HO WORM! <not used> ms32clod.dll X Added by the Troj/Spy-EC Trojan. MS32DLL MS32DLL.dll.vbs X Added by the VBS.Zodgila worm. VBS.Zodgila is a worm that copies itself to removable drives. ... Read More systemdrv ms32sys.exe X Added by an unidentified WORM or TROJAN - most likely GAOBOT variant Video Process MS32x16.exe X Added by the RBOT.RH WORM! Microsoft Update Control Ms64.exe X Added by a variant of the WIN32.RBOT WORM! ms64.exe ms64.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More MS7531 ms7531.exe X Homepage hijacker MSPQFile MSA****.TMP X Homepage hijacker. **** can be anything Windows Media Player msa.exe X Added by the RBOT-SI WORM! svchost msa.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Antivirus MSA.exe X Added by the MS Antivirus rogue anti-spyware program. NordBull msa.exe X Added by the Troj/Dloadr-CSV Trojan downloader. (1DC4096D-5B5F-479C-BC9C-EB70E4F613B3) MSA13g5.dll X Added by the Troj/Lineage-DW password-stealing Trojan for the online game Lineage. ... Read More msskye msaclue.sys X Added by an unknown malware. MSACM msacm.exe X Added by the OPASERV-O WORM! PostBootReminder msacm32.exe X A variant of the Nuwar/Storm worm dropper. Microsft Conf 32 msaconf.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. microsft confige 32 msaconfigurez.exe X Added by the RBOT.CLC WORM! ... Read More Microsoft Macro Protection SubSsy msacroprots386.exe X Added by the RBOT-KE WORM! msadcheck msadcheck32.exe X Browser hijacker, redirecting to search-system.com AboutSys msaddon.dll X Added by the Adware.BocaiToolbar search hijacker and popup delivery. Microsoft Admin Protocal MSADNIN.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. msadp32 msadp32.exe X Added as result of a Octa-B trojan infection ... Read More <not used> msafiasn.dll X Added by the WORM_STRATIO.QD mass-mailing worm. [not used] msag.com X Added by the Backdoor.Beasty.C backdoor. This backdoor listens on port 666. [Various Names] msag.exe X Part of the Wareout infection as described here. My Agent msagent.exe X Added by the NEGASMS.A TROJAN! msagentxp MSAgentXP.exe X Reported by Ewido_Security_Suite ... Read More Ahker Service msahker.exe X Added by the W32/Ahker-C mass-mailing worm. Windows Media Player msams.exe X Added by the RBOT.AHR WORM! Microsoft AOL Instant Messenger MSAOL32.exe X Added by the W32/Rbot-AAI WORM/backdoor trojan! AOL Instant Messenger dll runtime MSAOL32dll.exe X Added by the W32/Rbot-ATA worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MS Windows AOL Driver MSAOLdrv.exe X Added by the W32/Rbot-ASP worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More msaim msaolim.exe U MessageSpy keystroke logger/monitoring program - remove unless you installed it yourself! ... Read More [not used] msapi.exe X Added by the Troj/LegMir-W infection. Microsoft Net API msapi.exe X Added by the W32/Tilebot-HJ worm and IRC backdoor. Microsoft Application Manager msapl32.exe X Added by the Troj/Bropia-AE trojan. WinApp32 msapp.exe X Added by the RSBOT TROJAN! msnmsgs.exe msapp.exe X Added by the Troj/Dloader-IE TROJAN! This file can be found in the Windows system folder. ... Read More {44AE4113-C121-10CC-1F32-A0BC12E2014} msapplg.exe X Added by the Troj/Delf-KS Trojan. Microsoft SpA Service msapps.exe X Added by the W32/Rbot-VI worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More msappts32 msappts32.exe X Added by the Troj/Elburro-A backdoor Trojan. MS AntiSpyware 2009 msas2009.exe X Added by the MS Antispyware 2009 rogue anti-spyware program. Windows Defender User Interface MSASCu.exe X Added by the W32/Sdbot-DFW worm and IRC backdoor. Windows Defender MSASCui.exe Y Microsoft's Windows Defender Antispyware program. asnconsole msasn.exe X A variant of the IRCBot family of worms and IRC backdoors. MS Auto-IPSec Protection MSASP32.exe X Added by the W32/Rbot-AER worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Advance Service Process MSASP32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. boby. msass.scr X Added by the Troj/Banker-BZH Internet banking Trojan. If you are infected with this Trojan you should immediately change all your online banking pass ... Read More Windows Media Player msass43.exe X Added by the W32/Rbot-RT worm. This infection connects to an IRC server where it waits for remote commands. ... Read More Microsoft authenticate service msasvc.exe X A variant of the IRCBot family of worms and IRC backdoors. load= msater.exe X Added by the RETSAM TROJAN! MSWTL32 MSATL32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. lsass driver msauc.exe X Identified as a variant of the Trojan-Downloader.Win32.Agent.ahcx malware. Microsoft Corp TLS Certificates msauth.exe X Added by the W32/Rbot-GAC worm and IRC backdoor. ms autoloader 32 MSAuto32.exe X Added by the SPYBOT.BD WORM! ... Read More Microsoft Automatic Update Serivce msautou.exe X Added by the W32/Rbot-AOB worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More {316A0EE6-7F2B-59A7-A343-0056D0767B40} msav.exe X Added by the Troj/Agent-GKE Trojan. Microsoft Anti Virus Controller msavc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Anti Virus Controller msavc32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msavsc.exe msavsc.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Further analysis can be found here. ... Read More msavsc.exe msavsc.exe X Malware related to the rogue anti-spyware program named System Security. Microsoft AntiVirus User Service msavus.exe X Identified as a variant of the W32.Spybot.Worm. Microsoft Update msawindows.exe X Added by the GAOBOT.AFJ WORM! MS Backup Agent msbac.exe X Added by the Troj/IRCBot-HG worm and IRC backdoor. This infection also utilizes the rootkit file mkey.sys to hide itself. ... Read More MSBB msbb.exe X Advertising spyware System Information Manager Msbb.exe X Added by a variant of the BACKDOOR.IRC.BOT TROJAN! msbb.exe msbb.exe X nCase adware ... Read More msbcs msbcs.exe X Added by the Troj/Dadobra-G downloader Trojan. Microsoft Background Intelligent Transfer Update Version 2.0 msbitsec.exe X Added by the W32/Sdbot-AJS worm and IRC backdoor. {316A0EE6-78A6-EA6C-01C5-6C2E0001845D} msbl.exe X Added by the W32/Feebs-KP worm. windows auto update msblast.exe X Added by the BLASTER.B WORM! Msbn msbn.exe X Added by the WinFixer rogue anti-spyware application. [not used] msbnc.exe X Added by the Troj/Agent-PL backdoor Trojan. OLE Module msbnk.dll X Added by the Troj/Bankhof-B information stealing Trojan targetting German banks. ... Read More microsoft broadband networking MSBNTray.exe U Microsoft Broadband Networking Tray Application MsBootMgr.exe MsBootMgr.exe X Added by the W32/Verify-B WORM/backdoor, which also adds MsIdle32.exe to the %Root% and %System% folders. ... Read More Microsoft Core Support MSbz32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. NvCplScan msc32.exe X Added by the FORBOT-DD WORM! MS Updates mscache.exe X Spyware web downloader [not used] mscarrt32.exe X Added by the W32/Oscabot-K worm and IRC backdoor. Checkdisk mscas.exe X Added by the Troj/Vagon-A Trojan. System Tray msccn32.exe X Added by the PALYH.A WORM! Warning - spreading via infected E-mail attachments with the sender address faked as support@microsoft.com. Note - this is ... Read More msccr msccr.exe X Added by the Troj/PWS-AEA password-stealing Trojan. msccrt msccrt.exe X Added by the Troj/PSW-DL password-stealing Trojan. vcmicrec msccsed.exe X Added by the Troj/MailBot-CE spam Trojan. mscdex32 mscdex32.exe X Unknown malware. windows system mscdvvs mscdvvs.exe X Added by the MYTOB.MD WORM! ... Read More System Efficiency Monitor mscedit32.exe X Added by the SDBOT.P TROJAN! Ms System Config Mscfg.exe X Added by the W32/Sdbot-BUQ worm and IRC backdoor. Windows Local Hosting Service mscgy.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. mscheck mscheck.exe X Added by the Troj/Agent-ECP Trojan. star6 MscheldB.exe X Added by the Troj/DwnLdr-HLK downloading Trojan. star7 Mscheldncx.exe X Added by the Troj/DwnLdr-HLK downloading Trojan. mschkdf.exe mschkdf.exe X Added by the Troj/DwnLdr-GA downloader Trojan. windows shellext.32 mschost.exe X Added by the BLASTER.K WORM! (HKMLO03-II-DF45D-2FDFDG) mscidaemon.com X Added by the W32/Kwbot-L networm worm and IRC backdoor. W32/Kwbot-L spreads to shared drives and network shares protected by weak passwords. ... Read More MPSExe mscifapp.exe U McAfee.com Privacy Service - "combines personal identifiable information (PII) protection with online advertisement blocking and content filtering" ... Read More Client Man Msckin.exe X Added by the Spyware.ClientMan spyware. msclac msclac.exe X Added by the W32/SdBot-JM worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More Microsoft Client Agent Service msclient.exe X Added by the W32/Tilebot-BP worm and IRC backdoor. This infection will also install the rofl.sys rootkit file. ... Read More Microsoft Client msclient.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. client for microsoft networks msclient32.exe X Added by the W32/Sdbot-BXQ ... Read More Microsoft Clients msclients.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Digital Clock msclock.exe X Added by the NACKBOT-D WORM! Microsoft client for NT msclt.exe X Added by the W32/Rbot-DID worm and IRC backdoor. Microsoft Windows Client Firewall msclt.exe X Added by the W32/Vanebot-F worm and IRC backdoor. ClientMan1 mscman.exe X Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-cl ... Read More mscman mscman.exe X Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK, "able to trick ZoneAlarm, auto-cl ... Read More scan mscman.exe X Spyware/malware, included into the latest version of Grokster, among others. According to research by SpyBot's PMK,  "able to trick ZoneAlarm, auto-cl ... Read More msnmsg.exe mscmd32.exe X Added by a variant of the AGENT.AH TROJAN! MSN Manager mscmgr.exe X Unidentified malware - causes multiple browser windows to open mscms mscms.exe X Added by the Troj/Agent-MS Trojan. System Fetch DLL Runtime mscmtl32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.msnmgnr Content Monitoring Tool msCMTSrvc.exe N An application that is bundled with certain Compaq computers that downloads and displays "Hot Deals" when new merchandise is available from Compaq. ... Read More mscn mscn.exe U Part of the SafeChildNet internet filtering program - required if you use it Microsoft Update 32 mscnfg.exe X Added by the W32/Rbot-ALM worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Local Hosting Service mscnfg.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. microsoft config 32bit mscnfg32.exe X Added by the W32/RBOT-Z WORM! ... Read More Microszoft Update Machinezs mscnsz.exe X Added by the W32/Rbot-FO trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Mscnt mscnt.exe X Adult content dialler Mscolour mscolour.exe X Added by the GEMA TROJAN! MSCoolServ mscolsrv.exe X Added by the Troj/RaHack-A trojan. MSCom mscom.exe X Added by the W32.Woredbot worm. W32.Woredbot is a network-aware worm with back door capabilities. It spreads by exploiting the Microsoft Windows Serve ... Read More COM Service mscom32.com X Added by the BEASTY.H TROJAN! (23246306-E6FB-4869-88ED-B4D4B5041EC1) mscom32.dll X Added by the Troj/Agent-KZ downloader Trojan. Windows Dcom2 Fix mscom32.exe X Added by the RBOT-QT WORM! MicroSoftRun MSCOMM.dll X Added by the Troj/Agent-DJG Trojan. System Efficiency Monitor mscommand.exe X Added by the KWBOT.P WORM! MSCommX mscommx.exe X Added by a variant of the RBOT WORM! MS Common Service mscomserv.exe X Added by the Troj/Zlob-RF Trojan. When run, the Trojan installs and runs an application named "MSN Content Installer 4 Free". ... Read More Microsoft Update Schedule mscomt32.exe X A variant of the Rbot.aeu family of worms and IRC backdoor Trojans. MSN Update mscon.exe X Added by the RBOT-QA WORM! Microsoft Config msconf.exe X Added by the RBOT.PV WORM! Microsoft Config MSCONF.EXE X Added by the RBOT-LG WORM! Microsoft Configuration Utility msconf.exe X Added by the W32/Rbot-AFX worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More AppInit_DLLs msconfd.dll X Added by the Adware.CWSMSConfd hijacker! This is for the NT/XP/2000 version. Microsoft Update msconfg.exe X Added by the RBOT.H WORM! MSCONFG32.EXE MSCONFG32.EXE X Added by the OPTIX.04.C TROJAN! Win32 Cnfg32 msconfgh.exe X Added by the WORM_MYTOB.NB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More msconfig msconfig.bat X Added by the W32.Pahatia.B worm. W32.Pahatia.B is a worm that spreads through mapped network drives and attempts to restart the computer if certain pr ... Read More msconfig msconfig.com X Added by the W32/IRCBot-SM worm. W32/IRCBot-SM spreads to other network computers by exploiting common buffer overflow vulnerabilities, including RPC- ... Read More MSConfig msconfig.exe N Entry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be re ... Read More msconfig msconfig.exe X CoolWebSearch parasite related. Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning b ... Read More Msconfig msconfig.exe X Added by the WINUR WORM! Note - this is not the real msconfig.exe as it's located in C:winrun ... Read More Msconfig lptt01 msconfig.exe X Variant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Rap ... Read More Msconfig ml097e msconfig.exe X Variant of the RapidBlaster parasite (in a "msconfig" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Rap ... Read More MSConfigReminder msconfig.exe N Entry that appears when you uncheck an item in the MSConfig Startup group, and will disappear if on the next reboot you select the option to not be re ... Read More msdev msconfig.exe X Added by the AGOBOT.AAU WORM! Note - this is not the legitimate msconfig.exe which should only appear in Msconfig/Startup if you leave the warning box ... Read More winrun msconfig.exe X Added by the WINUR.A WORM! Note - this is not the real msconfig.exe as it's located in C:winrun ... Read More msconfig.exe msconfig.exe X A variant of the IRCBot family of worms and IRC backdoors. DRam prosessor msconfig.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. intel service drivers msconfig16.exe X Added by the Trojan_MSCONFIG16_Process TROJAN! ... Read More MSConfig MSCONFIG32.EXE X Unidentified adware, spyware or virus Microsoft Windows Update msconfig32.exe X Added by the W32/Tilebot-P worm. Compaq32 Service Drivers msconfig32.exe X Added by the W32/Sdbot-ADC worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More MS-patch msconfig32.exe X Added by the W32/Rbot-AUF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Update msconfig32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Intec Service Drivers msconfig32x.exe X Added by the W32/Rbot-BCR worm and IRC backdoor. msconfig MSCONFIG35.EXE X Added by a variant of the W32.SPYBOT WORM! ... Read More MSConfig45 MSConfig45.exe X Added by the SDBOT.OJ TROJAN! msconfigs MsConfigs.exe X Added by the W32/Alcra-A worm. This worm spreads by copying itself to folders shared for P2P applications. ... Read More Microsoft Configoration Service msconfigs.exe X Added by the W32/Rbot-ETT worm and IRC backdoor. Ms configsu msconfigsu.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. win32 secure msconfigsvc.exe X Added by a variant of the W32/SDBOT WORM! ... Read More Microsoft Configuewe msconfiguwe.exe X Added by the W32/Sdbot-BPK worm and IRC backdoor. microsoft config 32 msconfigx32.exe X Reported as Trojan.MSConfigX32.Process, possible Rbot variant. {1AD977CE-D626-8F6A-8016-257FA225337F} msconflg.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More Microsoft Updater msconsole.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. {5EB96953-7D02-4594-AC15-F55FC9AACFCB} mscont32.dll X Identified as a variant of the Downloader.Win32.FraudLoad.vbyn malware. wininet.dll mscornet.exe X Added by the Troj/Zlob-AO Trojan. msmc mscpbo.exe X ClientMan parasite variant microsoft crond service MSCRON.EXE X Unidentified AIM-based worm/trojan MSCRS(mscrs) mscrs.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. MSCSCLIENT mscsclient.exe X Added by the Adware.CashSaver spyware/redirector. File found in the Windows System folder. ... Read More Mscsgs MSCSGS.EXE X Added by the ZEZER WORM! Mscsgs32 MSCSGS32.EXE X Added by the ZEZER WORM! ClickTheButton MSCStat.exe X ClickTheButton Downloader-MY adware mscsvc.exe mscsvc.exe X Added by the Troj/Banker-CK. msctfg32 msctfg32.exe X Added by the W32/Rbot-RN worm. This infection connects to an IRC server where it waits for remote commands. ... Read More msctl32.dll msctl32.dll X Added by the Backdoor.Rustock backdoor. Nsdevice msctools.exe X Added by the W32/Sixem-A email worm. (0C81EA61-20F8-4DDC-81BF-AF0923078398) msctr.dll X Added by the Troj/Bankhof-E password-stealing Trojan. This infection installs the file C:\Windows\System32\rdrlib.dll. ... Read More msctrl.exe msctrl.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Further analysis can be found here. ... Read More msctrl.exe msctrl.exe X Malware related to the rogue anti-spyware program named System Security. Msctrl32 Msctrl32.scr X Added by the REDIST WORM! MediaSource MSCTRL32OCX.EXE X Added by the Troj/Bdoor-BK backdoor trojan. Internet Protocol MSCTRL32OCX.EXE X Added by the Troj/Bdoor-BK backdoor trojan. Microsoft Update Schedule mscunt32.exe X Added by the W32/Rbot-BLE worm and IRC backdoor. System MScvb mscvb32.exe X Added by the SOBIG.C WORM! Microsoft Cvrt mscvrt32.exe X Added by an unidentified VIRUS, WORM or TROJAN! Generic Host Process for Win Services mscvs.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. MSCVT MSCVT.exe X Added by the SLIDESHOW WORM! diskcheck msdarkend.exe X Added by an unidentified WORM or TROJAN! Testing 123 msdata.dat X Added by the NITS.A WORM! microsoft datalog application msdata.exe X Added by a variant of the W32/SDBOT WORM! ... Read More ms database MSDATA32.EXE X Added by a variant of the W32/SDBOT WORM! ... Read More msdatabase msdatabase.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Loading Service msdates.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. ms windows data list process MSDATLST.exe X Added by an unidentified WORM or TROJAN! msdbgm.exe msdbgm.exe X Added by the Troj/Cimuz-CQ Trojan. Zebus msdc32.exe N Runs a HTML tutorial on the Zebus web-site msdcom MSDcom.exe X Added by a variant of the W32/SDBOT WORM! ... Read More MS Config msdconfig.exe X Added by the W32/Rbot-CZH worm and IRC backdoor. msdde msdde.dll X Trojan typically installed with certain Rogue antispyware programs. msddll msddll.exe X Added by the W32/IRCBot-AAY worm and IRC backdoor. Microsoft Driver Setup msddrv42.exe X Added by the W32.Palevo worm. W32.Palevo is a worm that spreads by exploiting known vulnerabilities. ... Read More msddx msddx.dll X A variant of the MyGeek adware family. msdefender.exe msdefender.exe X Identified as a variant of the Trojan.Win32.Pakes.cmd malware. msdefender.sys msdefender.sys X Identified as a variant of the Win32:Rootkit-gen rootkit. microsoft desktop manager msdesk32.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More msdev msdev.exe X Added by the FORBOT-CR WORM! msvsc32 msdev.exe X Added by the RBOT-GJ WORM! Sygate Personal Firewall Startup msdev.exe X Added by the W32/Rbot-QY worm. This infection connects to an IRC server where it waits for remote commands. ... Read More microsoft development debugger msdev.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More WINDOWS SYSTEM msdev32.exe X Added by the W32.Mytob.EH@mm worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More Microsoft Development Services msdevelop.exe X Added by the W32/Rbot-FWS worm and IRC backdoor. msdelv msdevl.exe X Added by the W32/IRCBot-VJ worm and IRC backdoor. Microsoft Device Manager MSDEVMGD32.EXE X Added by W32/Domwis-F, a WORM/IRC backdoor TROJAN! Found in the Windows folder. Microsoft Device Manager msdevmgr32.exe X Added by the Backdoor.Lateda.B Backdoor infection! Found in the Windows directory. ... Read More Microsoft Null Development Monitor msdevnull.exe X Added by the W32/Rbot-AGE worm. When started, this infection connects to a remote IRC server and waits for commands to execute. This particular Rbot ... Read More Windows Update MSDEVS30.exe X Identified as the Spybot.AHC worm and IRC backdoor. msdf32.dll msdf32.dll X Added by the W32/Feebs-BH email worm. Microsoft HDCP for NT msdhcp.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. MS Dynamic Host Configuration Protocol MSDHCP32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft HDCP for NT and Win9x msdhcprs.exe X Identified as Worm.PeerBot. Microsoft Diagnostic msdiag.exe X Added by the W32/Rbot-RV worm. This infection connects to an IRC server where it waits for remote commands. ... Read More msdir32 msdir32.bat X Added by the VBS/Rookie-A Trojan. msdirect.exe msdirect.exe X Added by the Troj/Certif-L password-stealing Trojan. msdirect msdirect.sys X Added by the Troj/RKFu-C rootkit. msdirectx msdirectx.sys X This infection hijacks Internet Explorer to redirect to search-area.com. More information can be found here - Troj/Malche-A. ... Read More msdirectx msdirectx.sys X Added by the W32/Sdbot-XP, W32/Sdbot-XQ, and W32/Sdbot-XR worms as a new service. They will use the same display name, and exploit IRC channels. ... Read More Microsoft Networking Services msdlc.exe X Added by the W32/IRCBot-YN worm and IRC backdoor. msdll msdll.exe X A variant of the IRCbot family of worms and backdoors. *Bandook msdll.exe X Unknown malware. MsDLObjDrv MsDLObjDrv.sys X Added by the Hacktool.Rootkit rootkit. Media Plug x.1.2 msdm.exe X Added by the MULDROP.352 VIRUS! VnCplUpdate msdm.exe X Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory ... Read More Msdmxm msdmxm.exe X Adult premium rate dialler MSDN for Windows with NT's msdn-nt.exe X Added by the W32/Rbot-EWD worm and IRC backdoor. msdn help msdn.exe X Added by the AGOBOT.AIB WORM! ... Read More machine debug manager msdn.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More MSDN for Windows NT msdn.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. MSDN Driver msdndr.pif X Added by the Troj/HacDef-EQ rootkit. Microsoft DNS Query msdns.exe X Added by a variant of the WOOTBOT WORM! msdns msdns.exe X Added by Troj/Dloader-VK , a downloader Trojan. MS Domain Name Server Deamon MSDNSD32.exe X Added by the W32/Rbot-CMZ worm and IRC backdoor. Msdn Update 32 msdnupdate32 X Added by the W32/Tilebot-M worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MSDN for Windows NT & WinXP msdnxp.exe X Added by the W32/IRCBot-PE worm and IRC backdoor. {C0FB7D08-D593-85A4-45E2-7A20A3430056} msdo.exe X Added by the Troj/Agent-GOR Trojan. System Document Application msdocument.exe X Added by the W32.Randex.COX infection. File is found in the Windows system folder. ... Read More (3FDEB171-8F86-4669-B664-69B8DB553683) MsDos.DLL X Added by the Troj/Lineage-NS password-stealing Trojan for the online game Lineage. ... Read More MsSystem msdos.exe X Adult content downloader - see here MSDOS Service MSDOS.PIF X Added by the W32/Rbot-AIY worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More MSDOS Windows Service MSDOS.PIF X Added by the W32/Rbot-AKF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MSDOS Security Service msdos.pif X Added by the W32/Rbot-AMP IRC and backdoor worm. [various names] msdos32.exe X Added by a variant of the WIN32.AGENT.AH downloader TROJAN! Microsoft WIN32 DOS MSdos32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Msdos32 Msdos32.pif X Added by the RECORY WORM! msdos423 msdos423.exe X Added by the MENACE.A WORM! Windows msdos98.exe X Added by the PWSTEAL TROJAN! load system MSDOSDLL.EXE X Added by the Backdoor.Badcodor backdoor trojan. MSDosdrv msdosdrv.exe N Added by the BACROS WORM! Windows DotFix live msdotfix.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Distributed Process Service msdpsv.exe X Identified as Backdoor.SdBot.aad by AVG Anti-Spyware. COM Service msdrce.com X Added by the BEASTY.I TROJAN! Wintl msdred.exe X Identified as a variant of the Trojan-Spy.Win32.Agent.cch malware. {56E511A3-51E1-A4CD-E2C1-A3A1214AA1AC} msdred.tir X Identified as a variant of the Trojan-Spy.Win32.Agent.cch malware. Micrsoft Driver msdriver.exe X Added by the W32/Sdbot-XD WORM/IRC backdoor! Ms Sound Drivers msdrv.exe X Added by the W32/Sdbot-WR WORM/IRC backdoor Trojan! [not used] msdrv.exe X Added by the Troj/CmjSpy-U keylogger. msysdrv msdrv.exe X Added by the Win32.VB.wf backdoor TROJAN! msdrvctrl msdrvctrl X Added by the Troj/VidCach-A Trojan. MS DVD DirectX Sound Drivers msdrvdx.exe X Added by the W32/Sdbot-XJ WORM/IRC backdoor trojan. It will install msdirectx as a new service & displayname. ... Read More Windows Driver Services msdrvs32.exe X Added by the WOOTBOT.L WORM! Microsoft Display Service msds.exe X Added by the Troj/Spybot-NZ backdoor Trojan. Windows Automation msdspr.exe X Added by the SOLAME.A WORM! Microsoft Distributed Transaction msdt.exe X Added by the W32/Tilebot-BQ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Norton Drive Protection msdt32.exe X Added by the W32/Forbot-GB worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. ... Read More MSDTC msdtc.exe N MS Distributed Transaction Coordinator - handles transactions across multiple servers and is installed by MS Personal Web Server and MS SQL Server ... Read More ccrss MSDTC.exe X Added by the W32/Stap-A worm. MS DTC console msdtc.exe X Added by the W32/Sdbot-DTO worm and IRC backdoor. This infection should not be confused with the legitimate file C:\Windows\System32\msdtc.exe. ... Read More Mstask MSDTC.exe X Added by the W32/Stap-B worm. rundll32 MSDTC.exe X Added by the W32/Stap-B worm. SysCheck msdtc.exe X Added by the Trojan.Syginre Trojan. Trojan.Syginre is a Trojan horse that disables the Windows Firewall and may delete some files from the compromised ... Read More Distributed Transaction Server msdtc.exe X Added by the Troj/Hupigo-SJ Trojan. msdtc32 msdtc32.dll X Identified as a variant of the Trojan-Downloader.Win32.Small.hoa malware. Microsoft Distributed Transaction msdtce.exe X Added by the Troj/ServU-CT backdoor trojan that sets up a FTP server on your computer. ... Read More IECheck MSDTCs.exe X Added by the W32/Tirbot-D WORM/IRC backdoor trojan! Media Server msdts.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSN Messenger msdtsc.exe X Added by the Troj/Keylog-BM keylogging Trojan. <not used> msdun.exe X Identified as Trojan-Downloader.Win32.Small.ewt. MSNS PLUS XP2 msdupd.exe X Added by the W32/Rbot-BCE worm and IRC backdoor. Device Configuration Loader msdvc32.exe X Added by a variant of the AGOBOT/GAOBOT WORM! microsoftdvdhelp msdvd.exe X Added by the W32/Sdbot-AFG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More MSDV Driver msdvdr.pif X A variant of the HackerDefender rootkit. SoundView msdview32.exe X Trojan downloader msdvm msdvm.exe X Added by the Troj/Dluca-AD Trojan. Micr0s0ft Ms D0s msdx.exe X Added by the W32/Rbot-AON worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More msdy32.dll msdy32.dll X Added by the W32/Feebs-M worm. This infection also creates the following files: C:\Windows\System32\msoe.exe and C:\Windows\System32\msry.exe. ... Read More MICROSFT RAMA UPDATE SUPPORT MSED32.EXE X Added by the W32/Rbot-AWR worm. When started, this infection connects to a remote IRC server where it waits for commands to execute ... Read More System Efficiency Monitor msedit32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msiew mseiw.exe X Added by the LITTLOG TROJAN! ... Read More Ms Java Update For Windows NT/XP msejavaupdt32.exe X Added by the W32/Rbot-FML worm and IRC backdoor. Msemu32 Msemu32.exe X Unidentified spyware/adware/hijacker blahh service msengine.exe X Added by a variant of the WIN32.RBOT WORM! mserv.exe mserv.exe X Added by the Troj/KillProc-E trojan. This program is used to terminate security related software so they can not run on your computer. ... Read More Multimedia extensions mservice.exe X EasySearch adware Multimedia extensions mservice1.exe X Identified by Kaspersky Antivirus as Trojan-Downloader.Win32.Small.ase. USB Updates mservices.exe X Added by a variant of the RBOT WORM! mservices.exe mservices.exe X Added by the SDBOT.WJ WORM! ... Read More Configuration Loader mservs.exe X Added by the W32/Sdbot-NM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft Exchange Server Resource msese.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft EV32 Service MSev32.exe X Added by a variant of the WIN32.RBOT WORM! mswkork Service msework.exe X Added by a variant of the WIN32.RBOT WORM! Microsoft Excel msexcel.exe X Added by the RBOT-TQ worm with backdoor trojan functionality. msexe.exe msexe.exe X Identified by Symantec as a variant of the Infostealer.Gampass malware. Update msexplore.exe X Added by the W32/Sdbot-JG worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More Microsoft Explorer Service msexplore.exe X Unknown malware. SvcH0st msexploren.exe X Added by the BACKDOOR-CGZ TROJAN! MsnExplorer MSEXPLOREN.EXE X Added by the TROJ/BDOOR-EB TROJAN SheduIer msexploren.exe X Added by the Win32.Tactslay backdoor Trojan. WinAmpAgent msexploren.exe X Added by the Win32.Tactslay backdoor Trojan. ms msn menssenger 7.0 MSEXPORT.exe X Added by a variant of the W32/SDBOT WORM! ... Read More Windows Internet Connection Sharing Service msfav32.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Microsoft Decryption Technology Msfenoe.exe X Added by the SPYBOT-DG WORM! USB Drivers1 msfierwall.exe X An SDbot variant. Msfind Msfind.exe X CoolWebSearch parasite variant MSFind32 msfind32.exe X Added by the CAYAM WORM! file indexing service msfindfile.exe ? New version of MS FindFast and still a resource hog? msfindosa.exe msfindosa.exe X Added by the DOWNLOADER-BS TROJAN! MsServer msfir80.exe X Added by the Troj/VB-CYJ Trojan. USBDrives msfirewali.exe X An SDBot variant. These infections connect to IRC servers and wait for remote commands to execute. ... Read More MS FIREWALL msfirewall.exe X Added by the SDBOT-QH WORM! network device driver msfirewall.exe X Added by the Troj/Delf-LB browser hijacking trojan. Microsoft Personal Firewal MsFirewall.exe X Added by the W32/SillyFD-K worm. USB Updates msfirewalls.exe X Added by a variant of the RBOT WORM! When started, this infection will connect to an IRC server where it will wait for remote commands to execute. ... Read More COM Service msflyx.com X Added by the Troj/BeastDo-O backdoor Trojan. MSFMON MSFMON.exe Y Hot key program required to access folder hidden by MySecretFolder. If you disable this startup your hot keys will not work. ... Read More {9B71D88C-C598-4935-C5D1-43AA4DB90836} msfolder.exe X Identified as a variant of the Troj/Bifrose-UZ malware. Win32 FRT Driver msfr32.exe X Added by a variant of the FORBOT WORM! MS Configuration MSFramer.exe X Added by the RANDEX.OL WORM! MS FIREWALL msfrewall.exe X Added by the SDBOT-PU WORM! msfsr msfsr.sys X Added by the Troj/NTRootK-BB rootkit. TCPservice msftcpip.sys X Added by a variant of the Troj/Haxdor-Gen rootkit. {51E24AC2-BA5C-A1E2-12D1-D322A14AA1BD} msftil.exe X Added by the Troj/BDoor-AXL Backdoor Trojan. Microsoft Kinetik Svc msftksvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. ethernet msftp.exe X Added by the SDBOT.BXJ WORM! ... Read More MicroSoft FTPCheck msftp.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. MicroSoft Windowz Update MsFtUpdateXP.exe X Added by the W32/Tilebot-BL worm and IRC backdoor. MsServer msfun80.exe X Added by the W32/VB-CYG removable storage device worm. Windows Firewall Manager msfw.exe X Added by the RBOT.WR WORM! msfw.exe msfw.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Further analysis can be found here. ... Read More msfw.exe msfw.exe X Malware related to the rogue anti-spyware program named System Security. NAV Auto Protect msfwe1.exe X Added by a variant of the RBOT WORM! configuration loader msg.exe X Added by the SDBOT.BT WORM! ... Read More EW Message Server msg32.exe U Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices ... Read More Promise RAID message agent MsgAgt.exe Y An application that monitors the raid conditions for Promise Raid controllers. If this application is disabled you will not be notified of status cha ... Read More microsoft windows game updater msgame32.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Messanger msgaol.exe X Added by the WIN32.TACTSLAY.C TROJAN! httpd msgaol.exe X Added by the Win32.Tactslay backdoor Trojan. browser msgaol.exe X Added by the Win32.Tactslay backdoor Trojan. StartMenu msgaol.exe X Added by the Win32.Tactslay backdoor Trojan. cpl msgaol.exe X Added by the Win32.Tactslay backdoor Trojan. msgate msgate.exe X Added by the W32/Sdbot-OK worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More msgb1 msgb1.exe X Added by the DLUCA.GEN TROJAN! realplayer2 MsgCenterExe N RealNetworks RealPlayer related - disabling this application will not affect Real Player in any way. ... Read More microsoft configure 32 msgconfigre.exe X Added by a variant of the GAOBOT/AGOBOT WORM! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. ... Read More microsoft configs 32 msgconfigrs.exe X Added by a variant of the W32/SDBOT WORM! ... Read More msmc msgdmf.exe X ClientMan parasite variant msgex32 msgex32.exe X Added by the W32/Appflet-A mass mailing worm. Configuration Loader msgfix.exe X Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS! Event Monitor msgfix.exe X Added by the W32/Sdbot-DY. When started this infections connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Configuration Loader msgfix.exe X Added by the W32/Sdbot-NP worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More activex streamer msgfix.exe X Added by the SDBOT.NQ WORM! ... Read More change-me-now msgfix1.exe X Added by the SDBOT.ZD WORM! Messenger Fix msgfix16.exe X Added by the W32/Randex-JJ worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More Configuration Loader msgfix32.exe X Added by the W32/Sdbot-AGH worm and IRC backdoor. Msg Fixage msgfixed.exe X Added by the SDBOT.ZD WORM! Msg Fixage msgfixing.exe X Added by the W32/Sdbot-IP worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More Configuration Loader MSGFIXP.EXE X Added by the W32/Sdbot-HS worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More Configuration msgfixs.exe X Added by the W32/Sdbot-NN worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More (52EA44C3-AD1E-11CA-DC41-AEA244EB042E) msgiln.exe X Added by the Troj/BeastPWS-D keylogging Trojan. Microsoft Gina V Encryption MSGINAV.EXE X Added by an unidentified VIRUS, WORM or TROJAN! WM_LOGIN MSGLOGIN.EXE ? Part of McAfee Firewall. What is it for and is it needed? Win TaskLoader msgmr.exe X Added by the W32/Mytob-D WORM/IRC backdoor Trojan! Windows Live Messages msgnlive.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Live msgnms.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSREGIT Msgp.exe X Added by the KRYPGHOS.13 TROJAN! CLSID msgplus.exe X Adult content dialler CLSID msgplus.exe X Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension ... Read More MessengerPlus MsgPlus.exe N MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software ... Read More MessengerPlus2 MsgPlus.exe N MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software ... Read More MessengerPlus3 MsgPlus.exe N MessengerPlus - third party MSN Messenger extension that adds a number of useful features. Bundles the hard to remove C2Media LOP adware. The software ... Read More MsgPlus MsgPlus.exe X Identified by Kaspersky as Trojan-Spy.Win32.Banker.ccc. Microsoft MSGPLUS32 Protocol msgplus32.exe X Added by a variant of the SPYBOT WORM! CheckMsgPlus MsgPlusH.dll, VerifyInstallation Y Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info. ... Read More updater msgqueuelist.exe X Added by the Trojan.Popuper Trojan. Microsoft Taskbar Manager MSGR.EXE X Added by the BKDR_SDBOT.JD worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. This ... Read More Messenger start-up Msgran.exe X Added by the GRAMOS WORM! Windows Live Messenger Services msgrlive.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Live Messenger! msgrlive.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Update Msgrss.exe X Identified as a variant of the Trj/Shark.AY Trojan. svshost32 msgrsv32.exe X Added by the RANKY.AJ TROJAN! Svchost32 msgrsv32.exe X Added by Troj/Ranck-BH, which functions as an HTTP proxy TROJAN! WinCSRSS MSGRT32.EXE X Added by the REWINDO-A TROJAN! Windows Service Manager msgs.exe X Added by the W32/Oscabot-E worm. When started, this infection connects to an IRC where it waits for remote commands to execute. ... Read More Messanger 7 msgs7.exe X Added by the Troj/Diazom-B Trojan. msgsm32 msgsm32.exe X Added by the W32/Rbot-ASG worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. ... Read More load msgsr32.exe X Added by the W32/Sdbot-QR WORM/IRC backdoor trojan. <not used> MSGSRV16.COM X Added by the W32/Burmec-A worm. Msgsrv16 Msgsrv16.exe X Added by the DELF family of TROJANS! Internat msgsrv32 X Added by the Troj/Nyrubot-A backdoor trojan. LTM2 MSGSRV32.EXE X Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:\Win ... Read More MSGSRV32.exe msgsrv32.exe Y Windows 32-bit VxD Message Server. For more information on its function and why it's needed, see here. Note - why some people have it listed in start- ... Read More Internat msgsrv32.exe. X Added by the Troj/Nyrubot-A backdoor trojan. LTM2 MSGSRV320.EXE X Added by the LITMUS.C TROJAN! <not used> msgsvc.exe X Added by the W32.Iretsim worm. W32.Iretsim is a worm that spreads by copying itself to removable drives. It also attempts to end security-related proc ... Read More msgsvr32 msgsvr32.exe X Added by the DEADHAT.B WORM! Note - not to be confused with the valid "msgsrv32.exe" file which resides in the same directory (C:\Windows\System) on a ... Read More msgtag MSGTAG.exe U MSGTAG is an application that tells you when your emails have been received and opened. ... Read More Windows firewall manager msguard.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MICROSFT RAMA UPDATE SUPPORT MSGUPDAT32.EXE X Added by the W32/Rbot-BBB worm and IRC backdoor. MICROSFT ANTIVIRUS UPDATE SUPPORT MSGUPDATED.EXE X Added by the W32/Rbot-APZ worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More windows firewall msgupdater.exe X Added by the W32/Sdbot-ADZ worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer. ... Read More Loader msgzl msgzl.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft DHCPA Service mshcp.exe X Added by the W32/Rbot-FNA worm and IRC backdoor. W32/Rbot-FNA spreads using a variety of techniques including exploiting weak password ... Read More microsoft idcn mshe1p.exe X Added by an unidentified TROJAN! Microsoft Help Process for Win32 Services mshelp.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Generic Host Process for WinXP Services mshelp.exe X Added by the Troj/Agent-GQP Trojan. Microsoft Help System mshelp32.exe X Added by a variant of the RBOT WORM! mshelp32 mshelp32.exe X Added by a CoolWebSearch parasite variant ... Read More Hardware Monitor Service mshms.exe X Added by the Troj/Wollf-A backdoor trojan. microsoft driver update Mshome.exe X Added by the SDBOT.BL WORM! XP_CORE mshost.exe X Added by the Troj/LanFilt-J trojan. Microsoft Client mshost.exe X Added by the W32/Rbot-AND worm and IRC backdoor. mssp3 mshost32.exe X Added by the Troj/IBank-E Trojan. sconfig mshosts.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More Microsoft Security Hot Fix Update mshotfix.exe X Affilred adware microsoft hotmail monitor mshotmon.exe U Added by the MYTOB.LY WORM! ... Read More Adobe Update Manager mshss.exe X Added by the Troj/Wollf-B backdoor Trojan. MSHT@ MSHT@.EXE X Added by the MAGISTR.A VIRUS! SystemBoot Mshta.exe ...filename.hta X Adult content dialler microsoft hyptertext helper mshtha.exe X Added by a variant of the W32.SPYBOT WORM! ... Read More MSAgent mshtm.exe X Browser hijacker - redirecting to buldog-search.com Update mshtm.exe X Browser hijacker - redirecting to buldog-search.com MS HTML msHtml.exe X Added by the PESTDOOR.31 TROJAN! MS HTML Location Class MSHTML32.exe X The W32/Rbot-YD WORM/IRC backdoor adds this to allow a remote operater to setup a SOCKS4 server, download and run files and enact DoS attacks. ... Read More Services Start mshtmldat32.exe X Added by the W32/Pykse-C worm. [not used] mshttcpl.exe X Added by the Troj/PPdoor-AR backdoor Trojan. msi.exe msi.exe X Added by the Troj/Bancban-CT trojan. If you are infected with this you should immediately change all of your online banking passwords and look for un ... Read More Compaq Service Drivers msi.exe X A new variant of the Rbot worm and IRC backdoor. Windows Update msi.exe X Added by the Troj/Banker-XB Internet banking Trojan. Ms Java for Windows NT msi32info.exe X A variant of the RBot.bhb family of worms and IRC backdoor Trojans. WindowsRegKey%$ update msi332.exe X Added by the RBOT-IX WORM! Windows Config Connection msicll.exe X Added by the W32/Rbot-EXQ worm and IRC backdoor. msiconf.exe msiconf.exe X Identified as a variant of the Trojan.Fakealert Trojan. MSI Configuration msiconf.exe X Identified as a variant of the Trojan.FakeAlert Trojan. This Trojan will display fake security alerts in your Windows taskbar. ... Read More Microsoft Sata emulation mside.exe X Added by the W32/Tilebot-IM worm and IRC backdoor. W32/Tilebot-IM spreads to other network computers by exploiting common buffer overflow vulnerabilit ... Read More msident msident.exe X Unidentified adware or trojan MS Security Update 993 msident.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msidle msidle.exe X Added by the OPASERV-O WORM! MsIdle32.exe MsIdle32.exe X Added by the W32/Verify-B WORM/backdoor, which also adds MsBootMgr.exe to %Root% and %System% file locations. ... Read More dxdiag diagnose msidxdia.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Microsoft Ansti Update msie.exe X Added by the RBOT-LE WORM! Microsoft upnp Update msie.exe X Added by the RBOT-LQ WORM! Microsoft Features msie.exe X Added by a variant of the WIN32.RBOT WORM! Microsoft Windowz Update msie.exe X Added by the W32/Tilebot-CT worm and IRC backdoor. msie parsers MSIE32ab.exe X Added by the SDBOT.MV WORM! ... Read More [unknown] msie32c.exe X Added by the W32/SdBot-FY worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More IEXPLORER msiecfg.exe X Added by the Troj/Bdoor-JU backdoor Trojan. Internet Explorer Helper msiehelp.exe X Added by the Troj/Iyus-P Trojan. msiemon.exe msiemon.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Further analysis can be found here. ... Read More msiemon.exe msiemon.exe X Malware related to the rogue anti-spyware program named System Security. MS Internet Explore MSIEx.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. MSIEXEC MSIEXEC.EXE X Added by VBS/Yosenio-A. The VIRUS will overwrite files on the infected computer, adding .vbs to the file extension. ... Read More GLSetIT32 msiexec16.exe X Added by the OPTIX PRO TROJAN! MSIEXEC MSIEXEC32.exe X Added by the AINESEY.A WORM! Windows TM msiexec32.exe X Added by the W32/Forbot-DV WORM/BACKDOOR! The file is found in the Windows system folder. This infection also installs a service called draeco.sytes ... Read More msiexecs msiexecs.exe X Added by the W32.SillyFDC.BBB removable media worm. Threaded MSIExxx.exe X Added by the W32/Sdbot-MY worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More windows usbd msifirewall.exe X Added by an unidentified WORM or TROJAN! msiishlp MSIISHLP.EXE X A service added by the Troj/Bdoor-GML TROJAN/backdoor, it's display name is "Microsoft IIS helper". ... Read More Ms Java for Windows N msijavaup32.exe X Added by the W32/Vanebot-I worm and IRC backdoor. W32/Vanebot-I attempts to spread via MSN Messenger, by copying itself to remote network shares with ... Read More Ms Java Update For Windows NT/XP msijavaupdt32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. DLMonF msimain.dll X Added by the Troj/Agent-ECR Trojan. KernelFaultCheck msime.exe X Added by the Troj/Tiny-P Trojan. KernelFeultCess msime.exe X Added by the Troj/LegMir-AAE Trojan. IMJPMIG8.2 msime82.exe X Added by the W32/VB-CYG removable storage device worm. MsIMMs32 MsIMMs32.exE X Identified by Trend Micro as the TSPY_ONLINEG.GCH Trojan. msimn.exe MSIMN.EXE X Added by the W32/Forbot-TY worm/backdoor. msimn.exe msimn.exe X A variant of the SDBot worm and IRC backdoor. MSIMN32 MSIMN32.EXE X Hijacker - recognized by Kaspersky antivirus as Trojan.Win32.Agent.cx MSIN MSin.exe ? ?? msindeo.dll msindeo.dll X Added by a variant of the Goldun.Fam Trojan. FltProcess msinet.exe Y Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask ho ... Read More Msinet Msinet.exe X Added by the W32/Rbot-AOA worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More Microsoft security update service msinet.exe X Identified as a variant of the Trojan.Win32.Agent.xmm malware. Microsoft Internet Traffic Control Msinet32.exe X Added by the W32/AutoRun-XU removable media worm. Microsoft Info msinf0.exe X Added by the Troj/Sdbot-ET backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execu ... Read More MSInfo Framework Service MSInfnd.exe X Identified as a variant of the Win32/Hupigon malware. MSInfo msinfo.exe X Added by the ALADINZ.M TROJAN! MsInfo Service MsInfo.exe X Added by the W32.Usbalex worm. msinfmgr msinfomgr.sys X Added by the W32.Naras virus with keylogging and rootkit functionality. Bymer.Scanner Msinit.exe X Added by the BYMER WORM! msinit msinit.exe X Added by the W32/Tilebot-BJ worm and IRC backdoor. Outlook Express msinm.exe X A variant of the RBot family of worms and IRC backdoor Trojans. Win32 msinnt.exe X Identified as the Backdoor.Rbot.bvz worm and IRC backdoor. Internet Loader1 MSInstall61.exe X Added by the KWBOT.B WORM! TaskMonitor Msinter.exe X Added by Backdoor.DarkSky.C MsClock msinter.exe X Added by the Troj/Dloadr-AEI Trojan. Intrenet Explorer msints.exe X Added by a Rbot variant. microsoft int service MsIntSrv.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More {316A0EE6-87B7-6B9C-01C7-CF0200018008} msir.exe X Added by the W32/Feebs-BY worm. SCANREGW msisexec.exe X Added by the roj/GWGhost-BA password-stealing backdoor Trojan. msisrv msisrv.exe X Added by the Troj/Agent-IQV Trojan. Microsoft Service InstallShield msisrv32.exe X Added by the W32/Rbot-ML trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. These ... Read More {3B5C01D2-3541-080B-0602-050403070505} msisv.exe X Identified as a variant of the Backdoor:Win32/Poison malware. AntiVirus Update msisvc.exe X Added by the W32/Rbot-HX trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More MS-Connect msite18.exe X Adult content dialler - see here Microsoft update Service msiupdate32.exe X Added by the W32/Vanebot-S. W32/Vanebot-S spreads to computers vulnerable to common exploits, including: SRVSVC (MS06-040) to MS ... Read More Microsoft Windows Visual V2.0 msiutil.exe X Added by the TROJ_DELF.JPH Trojan. Microsoft Update msiwin84.exe X Added by the GAOBOT.AFJ WORM! MS Internet Executor 32 MSIXEC32.exe X Added by the W32/Rbot-AEQ worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Microsoft JavaVM msjarun.exe X Added by the RBOT-JW WORM! Ms Java for Windows NT & XP msjava.exe X Added by the W32/Vanebot-E worm and IRC backdoor. Ms Java for Windows NT msjava.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Ms Java for Windows 98, NT, ME & XP msjavames.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Java Virtual Machine msjavarxp.exe X Added by the W32/Forbot-DL, using the servicename of Norton Anti-hacker. Ms Java for Windows 98, NT, XP & ME msjavaxps.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. UsB driver msjavx86.exe X Added by W32/Agobot-PQ. MSOffice32 msjcf.exe X Added by the Troj/Raker-A Trojan. COM Service msjclh.com X Added by the PLUX TROJAN! Portable Media Serial Number Service msjet62.dll X Added by the W32/Dbit-B virus and backdoor Trojan. <not used> msji449c14b7.dll X Added by the W32/Stration-B worm and backdoor Trojan. W32/Stration-B spreads by sending emails with itself as an attachment to email addresses harvest ... Read More msjp MSJP32.exe X Added by the Troj/Ranck-DE backdoor Trojan. Microsoft Java Virtual Machine msjvm.exe X Added by a variant of the W32/SDBOT WORM! {52ED14AE-AB22-2CCA-CD3A-1AA4221E022C) msjwer.exe X Added by the Troj/DelSpy-E Trojan. Troj/DelSpy-E may inject code into other processes and includes functionality to steal passwords and email the info ... Read More MSKAGENTEXE MskAgent.exe U Part of McAfee Spamkiller default mskbw.exe U Added by the Spyware.PCSurveilPro surveillance software. If this software is found on your computer without your knowledge, you should uninstall it. ... Read More MSKDetectorExe MSKDetct.exe U Part of McAfee Spamkiller Internet Explorer Plugin Mskernel16.exe X Added by the Backdoor.Backage backdoor. MSKernel32 MSKernel32.vbs X Added by the LOVELETTER (I LOVE YOU) VIRUS! MSKernelAutoUpdater MSKernelUpdate_435353.vbs X Added by the VBS/Ediboy-C Visual Basic script WORM! Windows kev Messenger mskev.exe X Added by the W32/Sdbot-XV worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft Spooler SubSystem mskik32c.exe X Added by the W32/Rbot-BBR worm and IRC backdoor. Microsoft WinXP Spooler SubSystem mskiks.exe X Added by the W32/Rbot-CWU worm and IRC backdoor. mskj mskj.exe X Added by the Kaemon TROJAN! ... Read More mskk32.dll mskk32.dll X Added by the W32/Feebs-Q worm. McAfee SpamKiller Service MskSrver.exe Y Mcafee e-mail spam filtering program. MSKServerExe MSKSrvr.exe U Part of McAfee Spamkiller McAfee SpamKiller Server MSKSrvr.exe Y Related to McAfee SpamKiller. Windows Portable Devices MSKSVRTSS.EXE X Added by the W32.Spybot.APEO worm and IRC backdoor. Windows Portable Device Drivers MSKSVRVS.EXE X Added by a member of the IRCbot family. This infection is a networm worm and IRC backdoor. ... Read More {316A0EE6-391A-F082-01C7-C9CE000181CD} msKY.exe X Added by the W32/Feebs-BW worm. mslagent mslagent.exe X Added by SIMCSS.B adware! windows workstation start service mslanmgr.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More mslarissa MSLARISSA.pif X Added by the ASSIRAL.B WORM! ... Read More MS HTML mslat.exe X Added by the LATINUS.SVR TROJAN! Microsoft WinUpdate mslatest_updt.exe X Trojan that causes 16-bit application errors. windows automation mslaugh.exe X Added by the BLASTER.E WORM! CiaBackdoor msldr.com X Added by a VIRUS! UrlMon mslfmpk.dll X Added by the Troj/Bckdr-QES backdoor Trojan. SecureLogin Mslg32.exe X Added by the REDZED WORM! msliksurserv msliksurserv.sys X Added by the Troj/Agent-HFC Trojan. Runmsni Msline32.exe X Added by the Backdoor.Omed.B trojan. mslm mslm32.dll X Added by the W32/Feebs-BO email and P2P worm. LoadManager msload.exe X Added by the OPASERV.T WORM! msload msload.exe X Added by the Troj/Banker-DAH Trojan. LoadingAgent msload32.exe X Added by the OBLIVION TROJAN! This executable is one of the most common but there are more ... Read More Zip Driver Loader msload32.exe X Added by the OBLIVION TROJAN! This executable is one of the most common but there are more ... Read More MS Config Service Msloader32.exe X Added by the RBOT-KJ WORM! Internet Explorer mslog.exe X Unknown malware that is typically hidden by a rootkit. <not used> mslogon.dll X Added by the W32.Vapka.A worm. W32.Vapka.A is a worm that spreads by copying itself to removable media and steals confidential information. ... Read More Mslogon lptt01 mslogon.exe X Variant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Rapi ... Read More Mslogon ml097e mslogon.exe X Variant of the RapidBlaster parasite (in a "Mslogon" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use Rapi ... Read More Microsoft Logon Service mslogon.exe X Added by the W32.Woredbot.C worm. W32.Woredbot.C is a worm with back door capabilities that exploits the Microsoft Windows Server Serv ... Read More MsLS32 MsLS32.exe X Added by the W32/Tilebot-BS worm and IRC backdoor. Microsoft LSA layer MSLSA32.exe X Added by the W32/Rbot-AKZ worm. Microsoft Driver Setup mslsrv32.exe X Added by the Troj/Sdbot-DPF worm and IRC backdoor. Microsoft AUT Update MSlti16.exe X Added by the RBOT.EB WORM! Microsoft AUT Update MSlti32.exe X Added by the RBOT-X WORM! Microsoft Update Mslti32.exe X Added by the RBOT-LX WORM! Microsoft Update Machine MSlti32.exe X A variant of the W32/Rbot-BN family of worms and IRC backdoor Trojans. Video Process MSlti64.exe X Added by the AGOBOT.UE WORM! MsLX32 MsLX32.exe X Added by the W32/Sdbot-AFS worm and IRC backdoor. Microsoft Netview mslynx32.exe X Added by the W32/Randex-R worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More msm msm.scr X Added by the Troj/Banker-EHJ online banking Trojan. If you are infected with this Trojan you should immediately change your online banking passwords a ... Read More Microsoft Protection Subsystems msm32.exe X Added by the W32/Rbot-JU trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More 27 msm32.exe X Added by the Troj/Slsorve-E Trojan. msmacro32 msmacro32.exe X Identified as a variant of the Trojan.Proxy.Win32.Agent.qb malware. Microsoft Macro Protection Subsystems Msmacroprot32.exe X Added by the RBOT.KN WORM! Microsoft Macro Protection Subsystems msmacroprotxz.exe X Added by a variant of the SPYBOT WORM! Microsoft Manager msmanager.exe X Added by the W32/Mytob-EV worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More .lnk msmapiax32.exe X Identified as a variant of the Rootkit.Win32.Agent.uj rootkit. .lnk msmapibx32.exe X Identified as a variant of the Rootkit.Win32.Agent.uj rootkit. serpe msmbw.exe X Added by the W32.Serflog.A worm. This worms spreads through file sharing networks and MSN messenger. ... Read More ltwob msmbw.exe X Added by the W32.Serflog.A worm. This worms spreads through file sharing networks and MSN messenger. ... Read More avnort msmbw.exe X Added by the W32.Serflog.A worm. This worms spreads through file sharing networks and MSN messenger. ... Read More msmc msmc.exe X ClientMan parasite variant msmdev msmdev.dll X Identified by Nod32 as Win32/Adware.Agent.NBD. msmduo msmduo.dll X Added by a variant of the MyGeek/CPVFeed adware. msmduo2 msmduo2.dll X Added by a variant of the MyGeek/CPVFeed adware. MicroSoft Media Tools MSmedia.exe X Added by the W32/Tilebot-BC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. This infection ... Read More microsoft media player 9 msmedia32.exe X Added by the W32/RBOT-ADO WORM! ... Read More Microsoft Message Machine msmesg32.exe X Added by the SPYBOT.BI WORM MSMsgs msmessgs.exe X Added by the Troj/Small-EW Trojan. Microsoft Messenger Management Controls msmgmctl.exe X Added by the W32/Rbot-APA worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More msmgr msmgr.exe ? ?? MsManager msmgr32.exe X Added by the YAHA.AF WORM! WINTASK msmgrxp.exe X Added by the W32/Mytob-Z WORM/IRC backdoor trojan! Windows web messenger Msmgs.exe X Added by the W32/Sdbot-BSL worm and IRC backdoor. Windows Live Messenger Servicer msmgslive.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Msmgt msmgt.exe X Total Velocity adware/hijacker msmhost msmhost.dll X Identified by Nod32 as Win32/Adware.Agent.NBD. Service Monitor msmisso.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. b99 msmm.exe X ClientMan parasite variant msmmi msmmi.exe X Added by the Mal/Dial-F Trojan. Network Host Service msmnart32.exe X Added by the W32/Rbot-CJV worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More msmanager32 msmngr32.exe X Added by the RANDON-R (or WOMANIZ.A) WORM! Roxio Engine MSMNGR32.EXE ? Not believed to be a valid Roxio program - more likely a variant on the WOMANIZ.A TROJAN! ... Read More Microsoft Database Service msmnsg.exe X Identified by Norman antivirus as a variant of the W32/Downloader.STY malware. MSMNTGNT MSMNTGNT.EXE X Added by the Troj/Banker-IE Internet banking Trojan. MSMNTJBE MSMNTJBE.EXE X Added by the Troj/Bancos-EF Trojan. MSMNTJNG MSMNTJNG.EXE X Added by the Troj/Graber-G Trojan. MSMNTMTS MSMNTMTS.EXE X Added by the Troj/Banker-GZ password-stealing Trojan. MSMNTUSH MSMNTUSH.EXE X Added by the Troj/Banker-IC Trojan. MSN Registry loader msmnwin.exe X Added by the Troj/Bropia-N trojan. msmon msmon.exe X Added by a variant of the GEMA.D TROJAN! Microsoft Windows GUI msmonk32.exe X Added by the SDBOT-PE WORM! msmovies MsMovies.exe X Malware - detected by Kaspersky antivirus as Trojan-Dropper.Win32.WinAD.h ... Read More Microsoft Security Monitor Process msmp.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. rollbk msmpatch.exe X Added by the W32.Serflog.B worm. This worms spreads through file-sharing networks and MSN Messenger. ... Read More DsmSer msmpatch.exe X Added by the W32.Serflog.B worm. This worms spreads through file-sharing networks and MSN Messenger. ... Read More AvSer msmpatch.exe X Added by the W32.Serflog.B worm. This worms spreads through file-sharing networks and MSN Messenger. ... Read More MS Unix Binary msmq2inst.exe X Added by the W32/Rbot-YF WORM/IRC backdoor, it will allow remote control to an attacker. ... Read More Message Queuing msmqs.exe X Added by the FREEFORS TROJAN! MSrui msmrtmon.exe X Identified as the Trojan.Win32.Optix.Pro.NAE malware. mackfy.exe msms.exe X Added by the W32/Sdbot-DID worm and IRC backdoor. mssoul msmscc2.exe X Added by the DAPIZL.A banker WORM! (A "banker worm" is designed to pillage banking information and send it back to the perpetrators!) ... Read More msmsg msmsg.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More microsoft messenger service msmsg32.exe X Added by the RBOT.BOK WORM! ... Read More Microsoft msmsger.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Office MSMSGR.exe X Added by the GAOBOT.BB WORM! Microsoft System Services msmsgr.exe X Added by the W32/Rbot-ZH WORM/IRC backdoor Trojan! MSN service msmsgr.exe X Added by a variant of the RBOT WORM! MSN Messenger msmsgr.exe X Added by the W32/Rodal-A worm. This worm spreads via MIRC and uses IRC to get commands to execute. ... Read More MSN Messenger User Controls msmsgr.exe X Added by the W32.Kelvir.HI MSN Messenger worm. Intec Service Drivers msmsgr.exe X Added by the W32/Sdbot-ADN worm and IRC backdoor. Microsoft System Firewall 2006.2 msmsgr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft System Services msmsgr.exe X A variant of the W32/Rbot-ZH family of worms and IRC backdoor Trojans. [random] msmsgr2.exe X Added by the Troj/Small-EB TROJAN! _cat4 msmsgr2.exe X Added by the TROJ/SMALL-EB TROJAN! ... Read More Intec Service Drivers msmsgredss.exe X Added by the W32/Sdbot-AGL worm and IRC backdoor. mssyslanhelper msmsgri32.exe X Added by the RANDEX.D WORM! System Initialization msmsgri32.exe X Added by the RANDEX.D WORM or ROXY or ROXY.B TROJANS! intec service drivers msmsgrs.exe X Added by the W32/Sdbot-ADN worm and IRC backdoor. NvCplDaemon msmsgrs.exe X Added by the Troj/Dloader-YI Trojan. MsnLiveMessenger msmsgrs.exe X Added by a variant of the Backdoor.Win32.PBot.b worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More Windows Rundll Center msmsgrs.exe X Added by the W32/IRCBot-AFA worm and IRC backdoor. _cat3 msmsgrxp.exe X Added by a variant of the TROJ/SMALL-DT downloader TROJAN ... Read More msmsgs msmsgs.dll X Added by the Troj/SCLog-AL Spyware Trojan. MSMSGS msmsgs.exe U Windows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools ... Read More Msn Update Manager (Sp2) MSMSGS.EXE X Added by the AGOBOT-NL WORM! Scheduler MSMSGS.EXE X Troj/Hostbank-A modifies the HOSTS file to redirect certain banking and ebay sites. Found in %windir%system32config. ... Read More IPfigre msmsgs.exe X Added by a SDBot variant. This type of infection is known to act as a backdoor. it also creates a Windows service if you have XP,NT,2000 or 20003. ... Read More [not used] MSMSGS.EXE X Added by the Troj/Bancban-BW password stealing trojan. This trojan affects users of Brazillian banks. ... Read More Messenger Service msmsgs.exe X Added by the W32/Sdbot-ZB. When started this infection connects to an IRC server where it waits for remote commands. ... Read More MSN Messenger msmsgs.exe X Added by the Troj/Dloader-LN trojan downloader. This infection also adds itself to the HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonShell ke ... Read More notepad.exe msmsgs.exe X Added by the Troj/Zlob-I. The trojan may register itself as a service process or inject itself into EXPLORER.EXE to escape detection. ... Read More windows messenger msmsgs.exe X Added as result of a W32/Forbot-BD worm infection ... Read More RegSvr32 msmsgs.exe X Added by the Trojan.Zlob.B trojan backdoor. It is also adds itself to the key: HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersi ... Read More wininet.dll msmsgs.exe X Added by the Troj/Zlob-CJ Trojan. Office Source Engine Help msmsgs.exe X Added by the Troj/Hupigo-SE Trojan. This infection does not get properly installed, though, so you may see this as the command: C:\Program. ... Read More msmsgs msmsgs.exe X Added by the Troj/SCLog-AL Spyware Trojan. Microsoft Oftice msmsgs.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. Microsoft Excele msmsgs.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Msn Messenger msmsgs.exe X Added by the Troj/Start-B Trojan. msmsgsrv msmsgsrv.exe X Added by the BACKDOOR-CQO TROJAN! ... Read More msmsgr msmsgss.exe X Reported by Kaspersky Anti-Virus as Backdoor.Win32.Rbot.ajj. MSMsgSvc MSMSGSVC.exe X Browser hijacker, identified by some antiviruses as a variant of the StartPage.QC TROJAN! ... Read More windows32 messenger service msmsgv.exe X Added by the RBOT.ANS WORM! ... Read More msmsn msmsn.exe X Added by the Troj/Dloadr-WP downloader Trojan. Microsoft Messenger XP MSMSN32.exe X Added by the W32/Rbot-ZP. MS MSN Menssenger 7.0 MSMSN7.exe X Added by the W32/Rbot-ACA worm. This infection connects to an IRC server where it waits for remote commands. ... Read More msmsngr msmsngr.exe X Added by a variant of the AGOBOT/GAOBOT WORM! ... Read More MSN Serv msmsnserv.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSN Server msmsnserver.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msmautoprotect msmssgs.exe X Added by the Troj/Bifrose-AJ TROJAN! MsMsSrv MsMsSrv.DLL X Identified as a variant of Trojan.WinlogonHook.Delf.A. <not used> msn.com X Added by the Troj/Agent-DIH downloader Trojan. MSN Messenger msn.com X Added by the W32/MSNemy-B spyware worm. Windows live Messenger msn.com X Added by the W32/IRCbot-AAV worm and IRC backdoor. printers msn.dll X Added by the Troj/IRCbot-WX Trojan. MSN msn.exe X Added by the Trojan.Minit Trojan. Troj/Cimuz-AQ attempts to steal information such as email account usernames and passwords, as well as creating scree ... Read More Control msn.exe X Added by Backdoor.Ducy. Win32 USB2 Driver msn.exe X Added by the W32/Forbot-EX worm. When started, this infection connects to an IRC where it waits for remote commands to execute. ... Read More MSN msn.exe X Added by the Troj/Cimuz-AQ Trojan. Troj/Cimuz-AQ attempts to steal information such as email account usernames and passwords, as well as creating scre ... Read More <not used> msn.exe X Added by the W32.Eliles.A@mm worm. Windows Registry Name Msn.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Update msn.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. {9B71D88C-C598-4935-C5D1-43AA4DB90836} msn.exe X Added by the Troj/Bckdr-QJV backdoor Trojan. Microsoft Oftice msn.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. symanteccsysconf msn.exe X Added by the Infostealer.Bancos information-stealing Trojan for online banks. If you are infected with this malware it is advised that you change all ... Read More Msn 8.0 Live msn.exe X Added by the Trojan.Kassbot online banking keystroke logger. Internet msn.exe X A variant of the Rbot family of worms and IRC backdoor Trojans. MSN Setup MSN.msn X Added by the W32.Jambu worm. W32.Jambu is a worm that spreads through removable storage devices and network shares. ... Read More Msn Messenger msn.scr X Added by the W32.Imcontactspam@mm worm. W32.Imcontactspam@mm is a mass-mailing worm that emails MSN Messenger contacts with a fake e-card greeting. It ... Read More MSN msn16.exe X W32/Sbbot-VN is a network worm with backdoor Trojan functionality found in the Windows system folder. ... Read More Media Load msn32.exe X Added by a unidentified WORM or TROJAN! win32 regedit msn32.exe X Added by an unidentified WORM or TROJAN! MICROSFT RAMA UPDATE SUPPORT MSN32.EXE X Added by the W32/Rbot-AWJ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows System msn32.exe X Added by the W32/Mytob-FX worm and IRC backdoor. OfficeWord Monitor msn32.exe X Added by the W32/Rbot-GUE worm and IRC backdoor. msn32 x service MSN32x.EXE X Added by an unidentified WORM! Video Process msn5.exe X Added by the W32/Agobot-TW worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Media Service msn64.exe X Added by the SPYBOT.EV WORM! msn8m startup msn8m.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More microsoft networking agent for sp2 msnac32.exe X Added by the W32.SPYBOT.PEN WORM! ... Read More msn administration for windows msnadp32.exe Added by the BROPIA.W WORM! ... Read More MSN Application msnapp.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. msnappau msnappau.exe N Updater for the MSN toolbar that can be downloaded onto IE. Calls home every day or so to "update" the toolbar ... Read More MSN Applet msnapplet.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Msnarrator msnarrator.exe X Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware MSN Auto-Updater msnaupdater.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. App32dll msnavc32.exe X Unknown adware! MSNS PLUS XP2 msnbeta.exe X Added by the W32/Rbot-EED worm and IRC backdoor. Windows NetBalance Monitor msnbm32.exe X Identified as a variant of the Trojan.AVKiller.AW malware. MSN Booster msnbooster.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSN Booter msnbootcf.exe X Added by the Troj/Delf-FAS Trojan.