Filenames that start with U

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

Name	Filename	Status	Description
DirectX Service	directx.exe	X	Added by the Troj/Crybot-B worm and IRC backdoor.
Office Monitor Word Exel R	u.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Ultra Antivir2009	UA2009.exe	X	Added by the Ultra Antivir2009 rogue anti-spyware program. The folder associated with this malware has a random name. ... Read More
UninstallAbility	uability.exe	N	UninstallAbility uninstaller
AdvancedCleaner	UADC.exe	X	Added by the AdvancedCleaner rogue security software. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and pri ... Read More
AdvancedCleaner Free	UADC.exe	X	Related to AdvancedCleaner. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and privacy risks on a computer. ... Read More
UADC_104911963	UADCcw.exe	X	Added by the AdvancedCleaner rogue security software. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and pri ... Read More
UADC_815790765	UADCcw.exe	X	Related to AdvancedCleaner. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and privacy risks on a computer. ... Read More
SecuROM User Access Service	UAService.exe	Y	User Access Service is a SecureROM service that enables users without Windows administrator rights to have the ability to access all SecuROM features. ... Read More
SecuROM User Access Service (V7)	UAService7.exe	Y	Used by virtual CD programs like Alcohol to access CD images protected by SecureROM. ... Read More
Antivirus	uav.exe	X	Added by the Ultimate Antivirus 2008 rogue anti-spyware program.
uazpiq	uazpiq.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
WD Backup Monitor	uBBMonitor.exe	U	Preinstalled on certain Western Digital external drives, WD Backup is a customized version of ArcSoft's TotalMedia Backup used to backup pictures, ... Read More
TotalMedia BackUp & Recorder Monitor	uBBMonitor.exe	U	Installed with ArcSoft's program TotalMedia Extreme, this file is part of the Backup & Record and Utilities part of the software. ... Read More
wblogon	ubpr01.exe	X	Added by the Troj/Agent-HFI Trojan.
UBSShell	UBSShell.exe	U	UBS (United Bank of Switzerland) banking software
ubstcw	ubstcw.exe	X	Related to the AlfaAntivirus rogue anti-spyware program.
SQUpdatesChecker	uc.exe	X	Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants ... Read More
CamMonitor	uCamMonitor.exe	Y	This is the service file for ArcSoft Magic-i Visual Effects 2 HD made by Arcsoft, Inc. which is a webcam application used with video chat. ... Read More
erwghjjrjt	ucbcg.exe	X	Identified as the Trojan-Downloader.Win32.Small.cul Trojan.
{c3786a8d-6426-4c29-a23f-f36e47b31e0c}	ucbrrt.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar. ... Read More
MyCashbag	uccbp.exe	X	Added by the Adware.Mycashbag adware. Adware.Mycashbag is an adware program that displays popup advertisements. ... Read More
ucdcw	ucdcw.exe	X	Added by the CryptDrive misleading security application. CryptDrive is a misleading application that may give exaggerated reports about potential risk ... Read More
suscheduler	UCLauncher.exe	U	Related to Lenovo ThinkVantage Technologies. ThinkVantage Technologies help make ThinkPad/ThinkCentre PCs less dependent on IT staff. ... Read More
ThinkVantage System Update	UCLauncherService.exe	N	ThinkVantage System Update service.
Cleaner2009 Freeware	UCLN.exe	X	Added by the Cleaner2009 rogue anti-spyware program.
groutiest	ucmbegr.dll	X	Zlob Trojan which installs the Virus Protect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your computer ha ... Read More
Command Interpreter	ucmd.exe	X	A variant of the IRCBot family of worms and IRC backdoors.
ucookw	ucookw.exe	X	The WinPCDoctor rogue anti-spyware program. This program is installed via the use of malware and display false or exaggerated infection results. ... Read More
cwriter	ucookw.exe	X	Added by the HardDriveGuard rogue anti-spyware program. This startup entry is used by other rogue anti-spyware products that are in this family. ... Read More
UC_SMB	ucstart.exe	N	Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) ... Read More
uc_start	ucstartup.exe	N	Auto updater feature for IBM machines that tries to connect to IBM to see if there are any new drivers, patches and etc ... Read More
Network List System Service	ucsvcsh.exe	X	Added by the ACCDFISA Ransomware.
Ucu24	Ucu24.sys	X	Added by the Troj/DwnLdr-HEI Trojan.
UD Agent.lnk	UD.EXE	U	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing yo ... Read More
Personal Player	ud.sarkilari_Web_Hottest_Videos_PersonalPlayer.exe	X	Added by a program that shows YouTube videos. From the research done by Paperghost we advise that you remove this program. This file is also detecte ... Read More
WInUpdate16	udate32.exe	X	A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
DriveCleaner Free	UDC.exe	X	Added by the DriveCleaner rogue security product. DriveCleaner is a misleading application, which gives exaggerated reports of security and privacy ri ... Read More
DriveCleaner 2006 Free	UDC2006.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated re ... Read More
UDC6cw	UDC6cw.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of securi ... Read More
PAS_Check	udcpas.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of secur ... Read More
SDR6_Check	udcsdr.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of secur ... Read More
windows update	uddater.exe	X	Added by the LEOX TROJAN!
USBDetector	UDetect.exe	?	USB detector, apparently for an MP3 player - any further information appreciated! ... Read More
MsUpdater System	udpsys32.exe	X	Added by the RBOT.AAA WORM!
udt	udt.dll	X	Added by the W32/Autorun-VO removable media worm.
udzok	udzou.exe	X	Added by the W32/Sdbot-CUS worm and IRC backdoor.
Ueproc32	UEPROC32.exe	U	Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions ... Read More
uerj45kj	uerj45kj.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
ni.uersm_0001_n68m1602	UERSM_0001_N68M1602NetInstaller.exe	X	Added by the ErrorSafe Installer ErrorSafe is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts ... Read More
UFD Monitor9382	ufdlmon.exe	?	Part of a USB Flashdisk software. Anyone know if it's required?
UFD Utility9382	UFDTool.exe	?	Part of a USB Flashdisk software. Anyone know if it's required?
IPSTK driver	ufgrbe.sys	X	A variant of the Troj/Haxdor-Fam of rootkits.
Taskman	ufxw.exe	X	Added by the Troj/VBInj-D Trojan.
ugac	ugac.exe	X	Related to the TrustedAntivirus rogue anti-spyware program. This program is sometimes used by other Rogue anti-spyware programs as well. ... Read More
boardwalk	ugbtna.dll	X	Added by a Zlob Trojan which installs AntiVirgear 3.8 and display fake security alerts in your Windows taskbar. ... Read More
ugcw	ugcw.exe	X	Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infec ... Read More
ugdccw	UGDCcw.exe	X	Added by the PCPrivacyTool security risk. PCPrivacyTool is a Security Risk that may give exaggerated reports of threats on the computer. The program t ... Read More
ugescw	ugescw.exe	X	Added by the ErrClean rogue security software. ErrClean is a misleading application that gives false reports of errors on the computer. ... Read More
I-Worm.GiGu	uGiG.eXe	X	Added by the GINK WORM!
graphologists	uglgs.dll	X	Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
{c704547b-26c0-4222-a034-81653c07b494}	ugofuq.dll	X	Zlob Trojan that installs VirusProtectPro 3.5 and shows fake security alerts from your Windows taskbar. ... Read More
ABIT uGuru	uGuru.exe	U	Provides quick access to several Abit motherboard utilities - such as monitoring cpu temperature, fan speeds, overclocking, flashing of BIOS ... Read More
Windows Service DC	uhpnjcjl.exe	X	Added by the W32/Rbot-GLY worm and IRC backdoor.
Uidler	Uidler.exe	N	Uniloc Titlewave Browser used with some shareware
Windows module	uient.exe	X	A variant of the W32.Spybot.Worm family of worms and IRC backdoor Trojans. This family of worms spread via mIRC and the Kazaa file sharing network ... Read More
{6ad686b9-ab56-4ebc-a804-9f70b55b4577}	uimcu.dll	X	A Trojan associated with the SpyLocked rogue anti-spyware application.
[various names]	Uint32.exe	X	Added by a NTRootKit TROJAN variant!
[Various Names]	Uint32.exe	X	Part of the Wareout infection as described here.
[Various Names]	uio.exe	X	Part of the Wareout infection as described here.
Transfer Service	uiops.exe	X	Added by the Trojan.Acdropper.C Trojan.
UIUCU	UIUCU.EXE	?	Universal Device Install Application from Conexant Systems, Inc.
UIWatcher	UIWatcher.exe	N	Ashampoo Uninstaller Suite - installation watcher. Available via Start -> Programs ... Read More
Java Auto Update	ujm.exe	X	Added by the W32/Sdbot-ADH worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More
Windows Task Manager-Emulator	ukenme.exe	X	Added by the W32/Rbot-CF trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
UKVideo2	ukvideo2.exe	X	Adult content dialler
ASDPLUGIN	uk_nm.exe	X	Added by Dialer.Asdplug dialer variant.
Ulead Sservice System Files	ulcdrsf.exe	X	Added by the W32/Codbot-S network worm and backdoor trojan.
Ulead Burning Helper	ULCDRSvr.exe	Y	This program is part of the Ulead DVD Workshop, and may be bundled with other products from this company. It should be left alone in order to guarant ... Read More
Ulead Systems	ULCDRSvr.exe	X	Added by W32/Codbot-H as a service, with a displayname of Ulead Systems System Files on Windows NT/2000/XP versions. ... Read More
UltraEdit	uledit.exe	X	Added by the W32/Sdbot-TO worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
msconfig.exe	uline.exe	X	Added by a variant of the AGENT.AH downloader TROJAN!
ULiveServer	ULiveServer.exe	Y	Related to the Unreal Media Server streaming server.
Ultimate Cleaner	UltimateCleaner.exe	X	Added by the Ultimate Cleaner rogue anti-spyware program.
Ultimate Defender	UltimateDefender.exe	X	Added by the rogue anti-spyware program called Ultimate Defender. This program is typically installed via other malware and through the use of aggres ... Read More
Ultimate Fixer	UltimateFixer.exe	X	Added by the UltimateFixer rogue security product. UltimateFixer is a misleading application that detects and removes privacy violations on the comput ... Read More
ANTIVIRUS	UltraAV.exe	X	Added by the Ultra Antivirus 2009 rogue anti-spyware program.
Ultra Edit v5.1	ultraedit.exe	X	Added by the W32/Sdbot-RK worm. When started, this infection will connect to a remote IRC server and wait for commands to execute. ... Read More
UltraMon	UltraMon.exe	U	UltraMon is a utility for multi-monitor systems, designed to increase productivity and unlock the full potential of multiple monitors. ... Read More
UltraMonMirror	UltraMonMirror.sys	U	Related to the UltraMon multi-monitor software.
UltraMon Utility Driver	UltraMonUtility.sys	U	UltraMon multi-monitor software.
UltimateServices	ultsvcs.exe	X	Added by the Troj/Agent-LGT Trojan.
{24c60b9b-26b5-4201-9f7a-fb9219356ae9}	ulztc.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar. ... Read More
UsrManagementConf	umcss.exe	X	Added by the Troj/IRCBot-W backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execu ... Read More
UMediaServer	UMediaServer	Y	Related to the Unreal Media Server streaming server.
demobilisation	umhzwl.dll	X	Zlob Trojan which installs the AntivirusTrigger rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
UMonit	umonit.exe	U	Alerts when USB device is plugged in
Plug and Play	umpnpmgr.dll	Y	This service enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will resul ... Read More
PLoader	umsd.exe	?	USB Mass Storage Disk related tray icon. Is it required?
umxagent	umxagent.exe	Y	Tiny Personal Firewall V4 - main engine
HIPS Firewall Helper	UmxFwHlp.exe	Y	Related to the Computer Associate's Personal Firewall.
umxldra	umxldra.exe	Y	User mode executive module DLL loader - part of Tiny Personal Firewall V4
UMXLDRW	UMXLDRW.exe	Y	Tiny Personal Firewall (pre V4)
Sygate Personal Firewall	un1x.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
un32info	un32info.Exe	X	Added by the CRYPTER.A TROJAN!
UNCFAT DMS	UNCFATDMS.exe	Y	UNC/FAT is an add-in by Microsoft to Windows Desktop Search for use on networks to index shared folders and FAT drives. Must run in order for the in ... Read More
foxhonz5568	unicox.exe	X	Added by the Troj/Bancos-BH password stealing TROJAN!
[random]	unicox.exe	X	Added by Troj/Bancos-BK. This TROJAN may be found in the Windows sytem folder, also as "Carteiro2.exe", and in the Windows help folder. ... Read More
foxwudy9912	unicox.exe	X	Added by the Troj/Bancos-BT TROJAN!
unicox.exe	unicox.exe	X	Added by the Troj/Bancos-LX Trojan.
navdflp8922	unicox.exe	X	Added by the Troj/Bancos-AVT Trojan. Troj/Bancos-AVT may attempt to steal account details for certain banking sites and for MSN Messenger, by dispalyi ... Read More
Unigray	Unigray Antivirus.exe	X	Added by the Unigray rogue anti-spyware program.
{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666}	Uninstall.exe	X	Added by the W32/SillyFDC-V worm. W32/SillyFDC-V is a worm for the Windows platform that spreads via removeable shared drives. ... Read More
WinSecurity	uninstall.exe	X	Added by the W32.SillyFDC.BCJ worm. W32.SillyFDC.BCJ is a worm that spreads by copying itself to removable drives. ... Read More
back updates	Uninstall.log.vbs	X	Added by the VBS.YPSAN.D WORM! ... Read More
{Y479C6A0-OTRV-U5KH-S1UE-E0BC10B4E666}	UNINSTLV16.exe	X	Added by the TROJ_RANDSOM.A Trojan.
uninstx.exe	uninstx.exe	X	Added by the W32.Lecna.H worm. W32.Lecna.H is a worm that spreads by copying itself to mapped drives. It also opens a back door and may download poten ... Read More
UniSc	Unisc.exe	U	McAfee UnInstaller
{Y479C6A0-OTRV-U5KH-S1UE-E0BC10B4E666}	UNISNTLV32.exe	X	Added by the W32/Autorun-EK removable media worm.
unit	unit.exe	X	Unknown malware.
uniucu	uniucu.exe	?	??
Tiny	unknown	X	Added by the Troj/Small-DJ, which will sit on port 1 and allow a remote user to run a command prompt on an infected machine. ... Read More
Internet Service	Unknown	X	Added by the Adware.SweetBar adware that display pop-up ads.
Microsot NT Support	Unknown	X	Added by the W32/Rbot-CTI worm and IRC backdoor.
unldr16	unldr16.exe	X	Added by a variant of the CRYPTER.C TROJAN!
unldr32	unldr32.exe	X	Added by a variant of the CRYPTER.C TROJAN!
unlockerassistant	UnlockerAssistant.exe	U	Related to Unlocker utility to unlock files when the OS reports the file is being used by an other person or program. ... Read More
SYSTRAY	UNMT.EXE	X	Added by the SDBOT WORM!
svwin32	unninst32.exe	X	Added by the AGOBOT-NF WORM!
microsoft unpaccker system	unpak32.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
Windows USB Printer	unqgod.exe	X	A variant of the BKDR_RBOT.BKC family of worms and IRC backdoor Trojans.
UNrcJcrVSu.exe	UNrcJcrVSu.exe	X	Added by the Troj/Agent-PPD Trojan.
wmc_rebootcheck	unregmp2.exe	N	Related to Media_Player The main purpose of this software program is to update information in the registry related to the video player. More info ... Read More
{6BF52A52-394A-11d3-B153-00C04F79FAA6}	unregmp2.exe	Y	Microsoft Windows Media Player Setup Utility. This key creates the shortcuts from the WMP icon in the start menu to the player itself. ... Read More
Server Runtime Error	unsec.exe	X	Added by the W32/Sdbot-DFA worm and IRC backdoor.
Server Runtime Process	unsecapp32.exe	X	Identified by BitDefender as Backdoor.IRCBot.HBJ. This infection is a variant of the IRCBot familar of worms and IRC backdoors. ... Read More
unspypc	UnSpyPC.exe	X	The main executable for the rogue anti-spyware application UnSpyPC. UnSpyPC is a Security Risk that may give exaggerated reports of threats on the com ... Read More
unsrvc	unsrvc.exe	X	Identified by Kaspersky Anti-Virus as a variant of the Trojan.Win32.VB.bkz Trojan. ... Read More
untray	untray.exe	Y	Part of Command AntiVirus
System Updates	unve.exe	X	Added by the W32/Rbot-AWG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
UnVirex	UnVirex.exe	X	Added by the UnVirex rogue anti-virus program.
PrintScreen	UNWISE.EXE	N	Gadwin PrintScreen - utility to capture, print or save the current window
SunshineSpy	UNWISE.EXE	X	Uninstall program for the rogue anti-spyware program called SunshineSpy.
Uninstall	UNWISE.EXE	X	Uninstall program for the rogue anti-spyware program called SunshineSpy.
svchost	Up100.exe	X	Added by the Troj/Dloader-KT trojan.
Up Service	up32.pif	X	Added by the W32/Rbot-ARI worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
upascw	upascw.exe	X	Added by the PersonalAntiSpy rogue anti-spyware program.
Uninstall****	upd.exe	X	Adult content based screen saver where **** can be any number
uninstall####	upd.exe	X	Adult content based screen saver where #### can be any number
upd.exe	upd.exe	X	Added by the Troj/Delf-AJW backdoor Trojan.
upd32.exe	upd32.exe	X	Added by the Troj/Agent-PDS Trojan.
WebSUpdater	upda.exe	X	Related to the Adware.Deskbar adware program. This program will add a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com ... Read More
winhelp	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
expler	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
Rundil32	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
Regexit	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
sdsr	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
updat	updat.exe	X	Added by the W32/Rbot-AZZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
system updata	updata.exe	X	Added by the Troj/Lineage-C password-stealing Trojan for the online game Lineage. ... Read More
Windows Security Engine	updata32.exe	X	Added by the Trojan.Maocal trojan.
AV	UPDATE-28062004.exe[25 blank spaces].vbs	X	Added by the MIDFIN WORM!
Update	UPDATE-28062004.exe[25 blank spaces].vbs	X	Added by the MIDFIN WORM!
Automatic Windows Updater	Update.exe	X	Added by the GAOBOT.AO WORM!
OrbitUpdate	update.exe	X	Xupiter OrbitExplorer toolbar, drive-by foistware
System Update2	update.exe	X	Added by the AUTOTROJ-C TROJAN!
Update Service	Update.exe	Y	Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is run so best to leave it enabled. Prevent it dialling out ... Read More
Windows Update	Update.exe	X	Added by the DELF-FN TROJAN!
AV UpDate	Update.exe	X	Added by the Troj/Furoot-A TROJAN!
msupdate	update.exe	X	Added by a variant of the W32/SDBOT WORM!
MS UPDATER	update.exe	X	Added by the W32/Rbot-VC worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Configuration Loader	update.exe	X	Added by the W32/Sdbot-OS worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Windows Security Engine	update.exe	X	Added by the PWS-Hangame.
MouseDrv	update.exe	X	Added by the WORM_ZOTOB.N worm.
startkey	update.exe	X	Added by the Troj/Bifrose-DG Trojan.
Windows Updater	update.exe	X	Added by the Troj/YSpy-A constructor Trojan.
BrowseZilla	update.exe	X	Added by the Downloader.Browsilla downloader Trojan.
update82	update.exe	X	Added by the Troj/Dloadr-AJM downloader Trojan.
ScanRegistry	update.exe	X	Added by the Troj/DwnLdr-FSK Trojan.
RealUpdate	update.exe	X	Added by the Troj/DwnLdr-FSR Trojan. Troj/DwnLdr-FSR includes functionality to : Access the internet and communicate wit ... Read More
{C0FB7D08-056E-1033-0501-03020730002c}	Update.exe	X	Added by the Troj/Mdrop-BLR Trojan.
Windows Update Managere	update.exe	X	Added by the Troj/GrayBir-EG backdoor Trojan.
aa bbcc dde effgghh jj	update.exe	X	A variant of the IRCBot family of worms and IRC backdoors.
{C0FB7D08-056E-1033-0501-03020730002c}	Update.exe	X	Added by the Troj/Agent-EOG Trojan.
Media Codec Update Service	update.exe	Y	Windows Essentials Codec Pack is a collection of the most commonly needed video and audio codecs. This program allows keeps these codecs updated. ... Read More
Microsoft Update	update.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Digital Patrol Update 5	update.exe	U	Added by the Digital Patrol anti-malware program.
WinUpdater	update.exe	X	Related to the Adware.Deskbar adware program. This program will add a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com ... Read More
ArcaBit Update Service	update.exe	U	Related to ArcaVir 2008.
MicrosoftCorp	update.exe	X	Added by the W32/Autorun-ASG removable media worm.
webags	update.exe	X	Webags adware.
McUpdate	Update.exe	X	Added by the Troj/Agent-TUH Trojan.
walarm	update.exe	X	A Korean rogue anti-spyware program.
System Update Service	update.pif	X	Added by the W32.Spybot.WOE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
update	Update.scr	X	Added by the W32/VB-FMT worm.
GLSetIT32	update1.exe	X	Identified as a variant of the OptixPro malware.
tlc	update13.js	X	Used by the searchcentral.cc hijacker to hijack your browser settings when you start your computer. ... Read More
zervpack2	update2.exe	X	Added by the SDBOT.WD WORM!
M1cr0s0ft Upd4t4zS	update32.exe	X	Added by the RBOT-MI WORM!
Windows	update32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Update	update32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
startkey	Update32.exe	X	Added by the Backdoor.Bifrose backdoor.
Windows Update Service	update32.pif	X	Added by the W32/Rbot-ALC worm.
tlc	update911.js	X	Hijacker installer
Update Center Service	UpdateCenterService.exe	U	Service that enables you to find and download updates to your system BIOS, drivers and firmware. ... Read More
Windows Debugging Tools	updatecfg.exe	X	Added by the W32/Rbot-AXU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Icarus2	UpdateChk.exe	X	Added by the Trackware.Icarus spyware.
winup32	updated.exe	X	Added by the Troj/Banload-IY Trojan.
Windows Firewall Updater	updatees.exe	X	Added by the W32/Rbot-GBX worm and IRC backdoor. W32/Rbot-GBX spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More
updatelavasoft	updatelavasoft.exe	X	Added by an unidentified Proxy Trojan variant. A PT is a backdoor trojan which allows a remote hacker to connect to other systems via the compromised ... Read More
windows update microsoft	updatem.exe	X	Added by the W32/Rbot-CHE worm and IRC backdoor
Update Manager	UpdateManager.exe	N	Searches for updates for the Rogers Yahoo! Browser - can be run manually
UpdateMedia	UpdateMedia.exe	X	MediaUpdate foistware
updatemgr.exe	updatemgr.exe	N	Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLi ... Read More
UPDATE~1	updatemgr.exe	N	Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLi ... Read More
Win32 USB2 Driver	updatemgr.exe	X	Added by a variant of the FORBOT WORM!
updater for windows	updater service windows.exe	X	Added by the Troj/Bckdr-QPE backdoor Trojan.
Windows Updater	updater.com	X	Added by the Troj/Agent-HUS Trojan.
AVG Grisoft Updater	updater.exe	X	Added by the AGOBOT-OT WORM!
iRiver Updater	Updater.exe	N	Updates for the iRiver Music Manager - used with their digital music players
system check	updater.exe	X	Unidentified adware downloader
updater	updater.exe	?	??
Microsoft Updater	UPDATER.EXE	X	Added by the W32/Rbot-AZ trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. It ... Read More
printer spool	updater.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
MoodLogic Updater	Updater.exe	N	Installed with iRiver software that comes with your iRiver device.
runner1	updater.exe	X	Identified as Trojan-Downloader.Win32.Agent.bls.
Microsoft	updater.exe	X	Added by the W32/Rbot-GHP worm and IRC backdoor.
Windowz Update V2.0	updater.exe	X	Added by the W32/Yodo-C worm.
Update Service	updater.exe	X	A variant of the RBot family of worms and IRC backdoor Trojans.
Microsoft Svchost local services	updater.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Internet Firewall Update	updater.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Skype Updater	updater.exe	U	Installed with the software for Skype, this is the service for automatically updating the software. The software may be updated manually. ... Read More
MS Windows Security Updater	updater.pif	X	Added by the W32/Rbot-AKY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
SVCHOST	updater32.exe	X	Added by the W32.Rants.A@mm mass-mailing worm.
update mon sys	updaterar.exe	X	Identified as the Rbot.cnh worm and IRC backdoor Trojan.
DRam rare proc	updaterarwin.exe	X	Added by the W32/Rbot-GQW worm and IRC backdoor.
McAfeeUpdaterUI	UpdaterUI.exe	?	Associated with McAfee VirusScan
UpdaterUI	UpdaterUI.exe	X	Added by the Troj/Agent-TM Trojan.
System	Updaterun.exe	X	Added by the Troj/QQHelp-Gen downloader Trojan.
Updates From HP	Updates from HP.exe	U	Associated with Lightscribe DVD-RW drive that come with certain HP computers.
xpupdate	updates.exe	X	Added by the W32.Bropia.L WORM!
AntiVirus Update	updates.exe	X	Added by the W32/Rbot-JF trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Install part II	updates.exe	X	Added by the W32.Relfeer worm. W32.Relfeer is a worm that spreads through network shares and file-sharing applications. It may also attempt to downloa ... Read More
engel	updates.exe	X	Added by the Mal/Cossta-F malware.
System Updates Service	updates.pif	X	Added by the W32/Rbot-AMA worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Updatestats	Updatestats.exe	N	Statblaster - "Get officially liscensed MLB pitch-by-pitch real time updates from every stadium around the league. StatBlaster provides live streaming ... Read More
SysUpdt	UpdatesWin.exe	X	Added by the Troj/Nopir-A TROJAN!
tpcupdater	updatetc.exe	X	Adware, probably 180Solutions related
updatev01	updatev01.exe	N	Ultra-networks.com software updater/downloader
<not used>	UpDateWinc.exe	X	Added by the W32.Yahack.A worm. W32.Yahack.A is a worm that spreads through mapped drives. It logs keystrokes, gathers system information, and steals ... Read More
winlocatorupdate	updatewinlocator.exe	X	Locator adult content toolbar related
Updatewiz	updatewiz.exe	?	??
Microsoft Update	UPDATEX.EXE	X	Added by the W32/Rbot-FD trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This ... Read More
USB 2.0 Driver	updateXP.exe	X	Added by W32/Agobot-QP, a Worm/IRC backdoor, found in the Windows system folder. ... Read More
wnxpupdate	updatexp.exe	X	Added by the Troj/Dadobra-H Trojan.
USB Driver4	updatexp2.exe	X	An SDBOT variant.
usb driver4	UpdateXP6.exe	X	Added by a variant of the W32/SDBOT WORM! ... Read More
Microsoft Windows Update XP64	updatexp64.exe	X	Added by the W32/Sdbot-AIM worm and IRC backdoor.
USB 2.0 Driver	UpdateXPSP.exe	X	Added by the W32/Agobot-QD worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
USB 2.0 Driver	updateXPSPC.exe	X	W32/Agobot-QU adds the file, acting much like othe variants of this WORM/IRC backdoor. ... Read More
Microsoft Update Mechene	Updatez.exe	X	Added by the RBOT-GI WORM!
Autozncupdate	update_.exe	X	Added by the Troj/DownLdr-QT Trojan.
Microsoft Update	update_w.exe	X	Added by the W32/RBOT-EW WORM!
Windows Updating Service	updating.pif	X	Added by the W32/Rbot-ALW backdoor and IRC worm.
Windows Updated	updatr.exe	X	Added by the W32/Rbot-AYB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
GPU HL interface	updB1.sys	X	Added by the TROJ_HANLO.J Trojan.
UPD Client	updclient.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Updmgr	updmgr.exe	X	eUniverse/KeenValue adware variant
updatemgr	updmgr.exe	X	Added by the SouthBeachTel premium rate adult content dialer. ... Read More
Microsoft (R) Windows Update Manager	updmgr.exe	X	Added by the Backdoor.Ranky backdoor Trojan.This infection also creates a Windows service using the same name and filename. ... Read More
Microsoft (R) Windows Update Manager Tool	updmgr.exe	X	Added by the Backdoor.Ranky backdoor Trojan. This infection also creates a Windows service using the same name and filename. ... Read More
<not used>	updmngr.exe	X	Added by the Troj/Agent-JBX. Trojan.
UpdReg	Updreg.exe	N	Reminder to register Creative Labs SoundBlaster Live! cards
Windows Update Drive	updrvs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
winupdate	updsys.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
AdobeReaderPro	updt.exe	X	Added by the W32/IRCBot-VQ worm and IRC backdoor.
Updt Service	updt.pif	X	Added by the W32/Rbot-AYU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Windows security FTPd update	updtftpini.exe	X	Added by the W32/Rbot-FUS worm and IRC backdoor.
Microsoft windows FTPd	updtftpini.exe	X	Added by the W32/Rbot-GLV worm and IRC backdoor.
NAVMD25	UpdtNv28.exe	?	Added by Symantec for updating the MicroDefs for their AV products. Though this is a legitimate file, it is unknown whether or not it needs to be run ... Read More
updtr.exe	updtr.exe	X	Added by the Troj/Agent-MXG Trojan.
[STRING 1]Software Update[STRING 2]	updtscheduler.exe	X	Added by the W32.Kedebe.I@mm mass-mailing worm. String 1 can be one of following: , Windows, Microsoft Windows and string 2 can consist of:# Checker, ... Read More*
Microsoft Windows Software Update Scheduler	updtscheduler.exe	X	Added by the W32/Kebede-F backdoor mass-mailing worm.
sr1exe	updtSup3.exe	?	Found on a Dell computer, in a Documents and SettingsAll UsersApplication DataDellAlert2 subfolder ... Read More
UPERVGAS	UPERVGAS.exe	?	??
Upfsfm	Upfsfm.exe	X	Added by the Troj/Mdrop-DVU Trojan.
UpConfgVer	UpgConf.exe	N	Panda Antivirus Platinum. Purpose unclear, but according to Panda Software not required for the AV to function ... Read More
yahoo groups	upgrdmgr.exe	X	Added by a variant of the RBOT WORM!
explorer	UPMSN.exe	X	Identified as a variant of the Trojan-Downloader.Win32.Banload.woj malware.
upnp	upnp.exe	X	Added by the Troj/Dloadr-YT downloading Trojan.
msmsn	upnp.exe	X	Added by the Troj/Dloadr-AMY Trojan.
np	upnp.exe	X	Added by the Troj/Dloadr-ANX downloading Trojan.
upnp manager	upnpman.exe	X	Added by a variant of the Win32.Agobot.gen WORM! ... Read More
UPnPDevService	upnpmngr.exe	X	Added by the Troj/Small-DMW Trojan.
Asynchronous UPnP Support Services	UPnPSvc.dll	X	Added by the Troj/PWS-ANB password-stealing Trojan.
UPNP	upnpsvc.exe	X	Added by the Troj/Clomp-B Trojan.
Universal Printer NT Service	upnt.exe	X	Added by the W32/Rbot-GKP worm and IRC backdoor.
UpperHost	UpperHost.dll	X	A variant of the Goldun Trojan.
Upromise0	Upromise0.exe	U	Software for the Upromise College Savings Program. If you have this software installed and visit an online store that is part of this program, it wil ... Read More
PrivacyProtector Free	UPRP.exe	X	Rogue privacy protection software that is advertised aggressively through the use of Trojans and other malware. ... Read More
uprpcw	uprpcw.exe	X	Rogue privacy protection software that is advertised aggressively through the use of Trojans and other malware. ... Read More
UPS	ups.exe	Y	PowerChute v5.02 - UPS Monitoring Module (which loads iconclnt - the tray icon)
Windows svchost	ups.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
ups	UPS32.exe	X	Added by the W32.Femot.O
qh live update scheduler	UPSCHD.EXE	Y	Program updater for the Quick Heal Anti-Virus program.
Uninterruptible Power Supply CRT	upscr.sys	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
upsctl	upsctl.dll	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
upsctrl0	upsctrl0.dll	X	Added by a variant of the Trojan.Goldun information stealing Trojan. This infection utilizes the upsctrl3.sys rootkit to hide itself. ... Read More
UPS COMcontrol	upsctrl3.sys	X	A variant of the Goldun rootkit.
Bulldog Service	upsd.exe	U	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link ... Read More
UPSentry 2000	upsd.exe	Y	Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss ... Read More
UPSlim	upsd.exe	Y	Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss ... Read More
Shell	UPSI_1.exe	X	Added by the W32/SillyFD-C worm that spreads to removeable storage devices.
upsmon	UPSMON.exe	U	UPSMON Power Management software ... Read More
NA1Messenger	UPSNA1Msgr.exe	N	Related to the UPS World Ship software.
PCPrivacyDefender Freeware	UPSPDAP.exe	X	Added by the PCPrivacy Defender rogue privacy program.
Start Service	upssrv.exe	U	Cyber Power PowerPanelPlus software. "In the event of a power outage, PowerPanelPlus Software automatically saves and closes all open files, and then ... Read More
Corporate Microsoft Update	uptask.exe	X	Added by the W32/Rbot-GVB worm and IRC backdoor.
Windows Services	upterd.exe	X	Added by the W32/Autorun-BNL removable media worm.
Uptimer4	Uptimer4.exe	U	Uptimer4 is an appbar which displays time, date, uptime, free ram, free pagefile, cpu usage, disk free space, battery power, IP addresses, TCP through ... Read More
RunWindowsUpdate	uptodate.exe	X	BrowserAid/BrowserPal foistware
UpToDate	uptodate.exe	X	BrowserAid/BrowserPal foistware
notepad.exe	upx.exe	X	Added by a variant of the AGENT.AH TROJAN!
upxdnd	upxdnd.exe	X	Added by the Troj/JD-A password-stealing Trojan.
Micrsoft DerSystem	uqieelpb.exe	X	Added by the W32/Rbot-GRI worm and IRC backdoor.
Network Windows Service	urdvxc.exe	X	Added by the W32.Rahack.W worm. W32.Rahack.W is a polymorphic worm that spreads to computers by exploiting weak passwords for Radmin servers and Windo ... Read More
dorfgwe	uret463.exe	X	Added by the W32/AutoRun-XF removable media worm.
dorfgwe	uret463.exe	X	Added by the W32/AutoRun-AFV removable media worm.
F5 Networks StoneWall Filter	urfltw2k.sys	Y	Added by the F5 networks VPN software for encrypted communication between your computer and a remote network. ... Read More
UrlLstCk	UrlLstCk.exe	Y	Part of Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in C:\Program Files\Norton Internet Security. ... Read More
urllstck.exe	UrlLstCk.exe	Y	Part of Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in C:\Program Files\Norton Internet Security. ... Read More
URLMAP	Urlmap.exe	N	Installed by MS Money, and runs whenever you start IE. All it does is bring up an annoying sidebar (kind of like the search window) with 'financial li ... Read More
Microsoft Urlmon	urlmon.exe	X	Added by the Troj/Agent-GOO Trojan.
Internet Exploere Services	urlmon32.dll.exe	X	Added by the EVIAN.C WORM!
URLy Warning	URLyWarning.exe	U	Added by the URLy Warning web page monitoring software.
rfv	url_mon32.exe	X	Added by the PWSteal.Tarno.M infection. Found in the %Windir%z~c directory.
ncao	urpo.exe	X	PurityScan/Clickspring adware ... Read More
Your Protection	urpprot.exe	X	Added by the Your Protection rogue anti-spyware program.
cbvcs	urretnd.exe	X	Added by the W32/Frethog-C worm.
incestuously	urroxtl.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar. ... Read More
UrtSvcExe	Urt95Svc.exe	Y	"Cisco Secure URT is a virtual LAN (VLAN) assignment service that enhances LAN security by actively identifying and authenticating users and then asso ... Read More
F5 Networks VPN Adapter	urvpndrv.sys	Y	Added by the F5 networks VPN software for encrypted communication between your computer and a remote network. ... Read More
winlogon service	urx.exe	X	Added by the SPYBOT.EN WORM!
Antivirus 2010	us?rinit.exe	X	Added by the Antivirus 2010 Security Centre and Antivirus 2010rogue anti-spyware programs. ... Read More
USA	usa.exe	X	Added by the USAntiSpy rogue anti-spyware program.
Microsoft USA Plug	usaplug.exe	X	Added by the W32/Rbot-DVC worm and IRC backdoor.
USAR	USAR.exe	X	Added by the UltimateSpyware rogue anti-spyware program. UltimateSpyware is a misleading application that may give exaggerated reports about potential ... Read More
Usb	Usb.exe	?	HP related - not sure whether it's required
usb2	usb2.sys	X	Added by the Backdoor.Fuwudoor backdoor.
miniport	usb2chk.exe	X	Added by the Troj/Lazar-A backdoor Trojan.
Windows USB 2.0 Driver	usb2ctrl.exe	X	Added by the W32/Rbot-BIW worm and IRC backdoor.
Win32 Usb Driver	usb32.exe	X	Added by the SDBOT-OV WORM!
Apple Mobile USB Driver	usbaapl64.sys	Y	Apple Mobile Device USB Driver.
{00212521-4FEF-4AD3-B3AA-E0531B8DC123}	usbadpt32.dll	X	Added by the Troj/Dloadr-EO Trojan.
Microsoft USB Windows2 Driver	usbautotuner.exe	X	Added by the W32.SillyFDC.BCL removable media worm.
USBcillin	USBcillin.exe	X	Added by the Troj/USBcill-A removable media worm.
avscan	Usbconeted.exe	X	Added by the Troj/Provis-A Trojan.
Microsoft	usbcontrol.exe	X	Added by the W32/Rbot-BJH worm and IRC backdoor.
v	USBController.exe	X	Added by the W32/Autorun-AGU removable media worm.
Microsoft USB Bus Controller	usbctl.exe	X	Added by the WORM_ASPXOR.AB worm.
USBDetector	USBDetector.exe	U	USBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware ... Read More
USBDeviceService	USBDeviceService.exe	Y	Related to the MyDVD DVD authoring program.
usbdriverx.exe	usbdriverx.exe	X	Added by the TSPY_SPYEYE.CE spyware.
Schedule	usbdrv.exe	X	Added by the . This infection also creates the file c:\Windows\System32\usbdrvw.dll. ... Read More
USB Antivirus	USBGuard.exe	Y	Related to USB Disk Security. USB Disk Security protects removable media from becoming infected with malware. ... Read More
USB Hardware Monitoring	USBhardware.exe	X	Added by the RBOT-NN WORM!
USB Hardware326 Monitoring	USBhardware326.exe	X	Added by a variant of the W32.SPYBOT WORM!
usbhdd	usbhdd.sys	X	Added by the Trojan.Drondog Trojan.
Windows USB Hub Manager	usbhub.exe	X	Added by the W32/Rbot-BJX worm and IRC backdoor. This infection also creates the C:\Windows\SoftWareProtector\Skonk_out.pr. ... Read More
<non alphabetical characters>IPX/SPX	usbmini.sys	X	Added by the Troj/Proxy-CY rootkit.
USBMMKBD	usbmmkbd.exe	U	USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version (available here) no longer pings ... Read More
Gene USB Monitor	USBMonit.exe	U	Monitors USB ports for insertion of Sandisk USB flashdrives
USBMonit.exe	USBMonit.exe	U	Monitors USB ports for insertion of Sandisk USB flashdrives
Genie USB Monitor	USBmonitor.exe	Y	Port monitor for an external USB hard drive. Required to enable access to the drive ... Read More
usbmon	usbmons.dll	X	Added by the W32/SillyFDC-AO worm.
usbn	usbn.exe	X	Adult content dialer, recognized by Kaspersky antivirus as Trojan-Downloader.Win32.Small.afa ... Read More
USBPNP	USBPNP.exe	Y	SiPix digital camera Twain USB driver
USB MS Update	USBS.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
USB Safely Remove	USBSafelyRemove.exe	Y	USB Safely Remove is a replacement for the Windows safe removal tool for removable media devices. ... Read More
USB Device Server!	usbserver.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows USB 2.0 Driver	usbservice.exe	X	Added by the W32/Rbot-BLF worm and IRC backdoor.
USB Host Service	usbsvc.exe	X	Added by the RBOT-GG WORM!
WIN USB 2.0	usbsystem.exe	X	Added by an unidentified WORM of TROJAN!
USBTA	usbtapnp.exe	N	System Tray access for the BeWAN Gazel 128 USB ISDN adapter
USBTest	USBTest.sys	X	Added by the Troj/Lecna-D backdoor Trojan.
usbtooltip	USBTip.exe	?	Related to Pinnacle_Systems Inc. What does it do and is it required?
Windows USB 2.0 Driver	usbtskmgr.exe	X	Added by the W32/Rbot-BKG worm and IRC backdoor.
Usbd	usb_d.exe	X	Added by the CIDRA-A TROJAN!
epoxusdm	USDM.EXE	N	EPoX Universal Serial Data Monitor - a diagnostics tool that shows Temps, Fan Speeds, Voltages...etc ... Read More
USDR6cw	USDR6cw.exe	X	Part of the rogue anti-spyware application SystemDoctor 2006. This application is known to install with malware that issues fake security warnings in ... Read More
user logon	user logon.exe	X	Added by the W32.Pahatia.A worm.
user	user.exe	X	Added by the Troj/Sivion-B Trojan.
LoadService	user32.com	X	Added by the W32.Burmec worm. W32.Burmec is a worm that spreads by copying itself to removable and mapped drives. ... Read More
Windows_VXD	user32.exe	X	Added by the PWSTEAL.PPORT TROJAN!
user	user32.exe	X	Added by the BINGHE backdoor Trojan! It has the ability to log your keystrokes, steal data, and execute commands. ... Read More
User32	user32.exe	X	Added by the Troj/EzKilla-A backdoor Trojan.
userinfo32	userinfo32.ggt	X	Added by the Backdoor.Rustock backdoor rootkit.
<not used>	userini.exe	X	Added by the Troj/Proxy-HP proxy Trojan.
1qaw3edr5	userinit.exe	X	Added by the Troj/Kbroy-B keylogging Trojan.
{CD5AC91B-AE7B-E83A-0C4C-E616075972F3}	userinit.exe	X	Added by the JS_FEEBS.I malicious javascript file.
Windows Service Hosting	USERINIT.exe	X	Added by the W32/Gommer-A worm.
Userinit Logon Verification	userinit.exe	X	Added by the W32/Tilebot-EV worm and IRC backdoor. This infection should not be confused with the legitimate file found at C:\Windows\System32\userini ... Read More
userinit.exe	userinit.exe	X	An installer for the Troj/Haxdor infections.
C:\WINDOWS\userinit.exe	userinit.exe	X	An installer for the Troj/Haxdor infections.
Userinit Logon Application	userinit.exe	X	Identified as a Spamtrojan variant.
Help	userinit.exe	X	Added by the W32.Degnax@mm worm. W32.Degnax@mm is a mass-mailing worm that gathers email addresses from the compromised computer. It also spreads via ... Read More
<not used>	userinit.exe	Y	The userinit.exe is a program that is launched directly after a user logs into Windows. This program restores your profile, fonts, colors, etc for you ... Read More
SoundMax	userinit.exe	X	Added by the W32/Malas-J worm. This infection should not be confused with the legitimate C:\Windows\System32\userinit.exe file. ... Read More
[not used]	userinit32.exe	X	Added by the W32/Rbot-YE irc backdoor trojan.
NetLogon	userint.exe	X	Added by the SDBOT-BC WORM!
userint32	userint32.exe	X	Added by an unidentified TROJAN via an Instant Message that says, "This was cool, check it out here." Also contains Aurora popups ... Read More
userlog	userlog.exe	X	Added by the Troj/Luiha-AP Trojan.
[not used]	userlogon.exe	X	Added by the Troj/Stawin-I keylogging Trojan.
user	users.exe	X	Added by the removable media worm.
[Various Names]	UserSp1.exe	X	Part of the Wareout infection as described here.
User Services	usersvc.exe	X	Added by the REVCUSS.A TROJAN!
userun32	userun32.exe	X	Added by the Troj/Lydra-B trojan.
Msn Update Service	userx.exe	X	Added by the W32.Mytob.JF@mm backdoor and IRC worm.
USIUDF_Eject_Monitor	USISrv.exe	N	Added by Ulead DVD Moviefactory. This pgram monitors your DVD or CD drives and alerts when you eject the media or have no media present. ... Read More
User Debug Manager	usndebug.exe	X	Added by the W32.Spybot.Worm worm and IRC backdoor.
User Host	usnhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Hosting Service	usnhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Messenger Manager	usnmsgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Messages Manager	usnmsgs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSN Manager	usnmsn.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Userfile Sharing Server	usnserv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Wizard	usnshare.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Manager	usnsharen.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Server	usnsrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Userfile Sharing Serv	usnsrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Messenger Sharing USN Journal Service	usnsv.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Messenger Journel	usnsvc.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Print Scheduler	usnsvc.exe	X	Identified as a variant of the Oscarbot.PJ worm and IRC backdoor.
Microsoft usnsvc Service	usnsvc.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
usnsvc.exe	usnsvc.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
User Sharing Services	usnsvc.exe	X	A variant of the Win32:IRCBot-CHZ family of worms and IRC backdoor Trojans.
Windows Update	usnsvc.exe	X	Added by the W32/Kobot-C worm and IRC backdoor.
Help and Support Service	usnsvc.exe	X	Added by the WORM_RBOT.GEN worm and IRC backdoor.
User Services	usnsvcs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Uninterruptible Power Supply	USP.exe	X	Added by the Troj/Agent-GVT Trojan.
winuser32k	usr32wink.exe	X	Added by the Win32.VB.hk backdoor TROJAN!
UsrClassEx	UsrClassEx.exe	X	Added by the Troj/Agent-KPU Trojan.
User Logon	usrh.exe	X	Added by the Troj/Junet-A password-stealing Trojan.
WindowsUpdate	USRINIT.EXE	X	Added by the MADDIS.B WORM!
<not used>	usrinit.exe	X	Added by the Troj/Calelk-A Trojan.
User Logger	UsrLog.exe	U	Added by the Spyware.UserLogger surveillance software. If you did not install this software you should remove it immediately. ... Read More
3cpipe-USRpdA	USRmlnkA.exe	Y	Modem driver files from US Robotics
User Messages	usrmsg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
SSC_UserPrompt	UsrPrmpt.exe	?	Part of Symantec (Norton) Security Centre. What does it do, and is it required?
User Protection	usrprot.exe	X	Added by the User Protection rogue anti-spyware program.
[not used]	usrs445F8764.dll	X	Added by the Troj/Opnis-D Trojan.
Windows Live Servicer	usrserv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing	usrshare.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
USRSTA	USRSTA.exe	?	Wireless Card controller. What does it do and is it required?
USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	N	USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapte ... Read More
USS	USS.exe	X	Trojan that create fake alerts and popups advertising rogue anti-spyware program. Though the guide below is not for this particular infection, it wil ... Read More
USSShReg	USSSHREG.EXE	N	Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers ... Read More
UStorage Server Service	UStorSrv.exe	U	Used by certain USB flash drives that support encryption.
{D817EE47-6798-BA2D-1011-5B24CF1C7459}	usvr32.exe	X	A variant of the Backdoor.Bifrose backdoor Trojan.
Windows Task Manager-Emulator	uswtme.exe	X	Added by the W32/Rbot-CG trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
usxxxxxxxx.exe	usxxxxxxxx.exe	X	Added by the TSPY_SPYEYE.EXEI Trojan.
UTab	utab.exe	X	Identified as a variant of the Adware/UTab malware.
utasvc	utasvc.dll	X	Added by the W32/Akbot-AB worm and backdoor Trojan. This infection will also modify the HOSTS file. ... Read More
utgrbe	utgrbe.dll	X	Added by the Troj/Haxdoor-DJ backdoor Trojan. This infection is hidden by the ufgrbe.sys rootkit. ... Read More
Utility Mangserver	Utility Mang.exe	X	Added by the Mal/Kaukalo-A Trojan.
UtilityPro	UtilityPro.exe	N	IE search toolbars as supplied by people such as Yellow Internet and SearchBoss and written by Rawhide Search Solutions ... Read More
Utility Ping	UTILIT~1.EXE	?	??
<random chars>	utilmanh.exe	X	Unknown malware.
Comclg32	utlsrv.exe	X	Added by the Trojan.Checkraise password stealing Trojan for online poker sites.
uTorrent	utorrent.exe	N	µTorrent is a lightweight and efficient BitTorrent client for Windows with many features. ... Read More
Dcom Helper	utorrent.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
[Various Names]	utsgmon.exe	X	Part of the Wareout infection as described here.
yx	uu.exe	X	Added by the W32/Agobot-YX ... Read More
Windows Generic Host Process	uvchost.exe	X	Added by the Troj/VB-FPI Trojan.
uvnx	uvcx.exe	X	Added by the Troj/Dloadr-AWF downloader Trojan.
UVS10 Preload	uvPL.exe	N	Related to Ulead VideoStudio.
uvu-channel	uvu-channel.exe	X	Added by the Trojan.Hachilem.B Trojan.
uwa6pcw	uwa6pcw.exe	X	Part of WinAntivirus Pro. This program is fake, stealth installed, and bundled with other malware. It is also on the Rogue anti-spyware list. ... Read More
uwa7pcw	uwa7pcw.exe	X	Startup program associated with WinAntiVirus Pro 2007. WinAntiVirus Pro 2007 is a rogue anti-spyware program that displays fake alerts, and downloads ... Read More
uwanah	uwanah.exe	X	Added by the W32/Sdbot-VL infection! File is found in the Windows system folder. ... Read More
uwas6cw	uwas6cw.exe	X	Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007. ... Read More
DC6_Check	uwasdc.exe	X	Added by the rogue anti-spyware program WinAntiSpyware.
ERS_Check	uwasers.exe	X	Added by the rogue anti-spyware program WinAntiSpyware.
uwasfsd	uwasfsd.sys	X	Added by the PersonalAntiSpy rogue anti-spyware program.
Cyber-Defender 2003	uwcdsvr.exe	U	Cyber Defender 2003
WinFixer2005	uwfx5.exe	X	"Spyware remover" of dubious repute - see the SpywareWarrior_List of Rogue/Suspect Anti-Spyware Products & Web Sites ... Read More
ni.uwfx5lp_0001_0802	UWFX5LP_0001_0802NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
ni.uwfx5lp_0001_0803	UWFX5LP_0001_0803NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
ni.uwfx5	UWFX5NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
NI.UWFX5T	UWFX5TNetInstaller.exe	X	Added by the Troj/DownLdr-BO Trojan. This infections is part of the Winfixer 2005 adware/malware. ... Read More
ni.uwfx5v_0001_0802	UWFX5V_0001_0802NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
winfixer2006	uwfx6.exe	X	"Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here ... Read More
uwyrl	uwyrl.exe	X	Added by the PHEL.A TROJAN!
uxgrafj	uxgrafj.adm	X	Added by the Backdoor.Rustock backdoor rootkit.
enswathes	uyhjw.dll	X	Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More
asejet	uyohuvax.exe	X	Added by the W32/Sdbot-VE WORM! Found in the Windows system folder.
uz	uz.exe	X	Added by the W32/Agent-GGH backdoor worm.
iut75	uzcx.exe	X	Added by the Troj/Agent-EOF Trojan.
zerzvpack2	uzpdate2.exe	X	Added by the W32/Rbot-KA trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
UltimateZip Quick Start	uzqkst.exe	N	UltimateZip - file compression utility
uFnV32i	[random]	X	Added by the Adware.Envolo Adware downloader.

Status Key

Each entry in the database will have a Status assigned to it. The key to this status is the following:

Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware but could also be programs that are not desirable to run on your computer.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

If you require assistance in removing one of these files you can ask us in the Startup Database Forum.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search for a Startup

Advanced Search

Startup Database Navigation

HijackThis Startup Categories

F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23