Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Alert!  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
Stop!  Do you have popups or other malware infecting your computer? If so, Start Here!
Question?  Are you having trouble using this site? Then you should visit the New User Orientation Center!



A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other   
HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23
Rootkit List · Submit a Startup · Top Submitters
 Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · Computer Help Forums · How to use the Startup Database

Enter the filename or keyword you would like to search for:
Advanced Search

Name Filename Status Description
{9311b8a8-0fd7-f849-5b42-67bbb89472f7} C:\windows:schost.exe
X
Identified as a variant of the Troj/Poison-K backdoor and keylogger. It is advised that once you remove this infection you immediately change all of ... Read More
{B9BA1F0E-091E-ECF9-0A09-CC4C2EE29C62} task.exe
X
Identified as a variant of the Troj/Poison-K backdoor and keylogger. It is advised that once you remove this infection you immediately change all of ... Read More
USB Hardware32c Monitoring USBHARDWARE32C.EXE
X
Added by the W32/Rbot-UU worm. When started, this infection connects to an IRC server where it waits for remote commands. ... Read More
Windows Service Manager userint32.exe
X
Added by the W32/Oscabot-C worm. When started, this infection connects to an IRC where it waits for remote commands to execute. ... Read More
w0rmname.exe w0rmname.exe
X
Added by the W32/Woned-C worm.
winrun z W1NT45K.exe
X
Added by W32.Mytob.BL WORM! ... Read More
Windows Updtee Mgnr W1NT45K.exe
X
Added by the W32.Mytob.DC@mm worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
w32 Wayang w32 Wayang.exe
X
Added by the W32.Yadurna.A worm. The user is presented with a password recovery dialogue once the malicious program is downloaded. ... Read More
w32 w32.exe
X
Added by the SOKEVEN TROJAN!
WIN ID SYS64 w3264.exe
X
Added by the W32/Mytob-BO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Windows Application Extension W32AppSrv.exe
X
Added by the Troj/GrayBrd-AX backdoor Trojan.
Windows Updates w32dns.exe
X
Added by the W32/Sdbot-BFW worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Windows Services w32edus.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Systray w32explorer.exe
X
Added by the W32/Rbot-AJY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Microsoft Visual Studio w32mvs.exe
X
Identified by VBA32 as a variant of the Backdoor.Win32.Agent.cjo malware.
A New Windows Updater w32NTupdt.exe
X
added by the W32/Mytob-AG WORM, which has IRC channel backdoor trojan functionality. ... Read More
W32PT W32PT.dll.vbs
X
Identified by Kaspersky as a variant of the Worm.VBS.Solow.a worm.
Windoxs Update Center W32RfSA.exe
X
Added by a variant of the W32/SDBOT WORM!
windows update center W32RSA.exe
X
Added by an unidentified WORM or TROJAN!
Windows Services w32service.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Services w32services.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
w32sup w32sup.exe
X
Adult content dialler
Windows Network Firewall w32svc.exe
X
Added by the W32/Sdbot.worm!811a7027 worm and IRC backdoor.
W32SYS w32sys.exe
X
Added by the W32/Jambu-A worm. W32/Jambu-A is a mass mailer for the Windows platform that also targets peer-to-peer file sharing networks and local sh ... Read More
W32Time w32t.dll
X
Added by the Backdoor.Fuwudoor backdoor.
w32tcomr w32tcomr.dll
X
Added by the WORM_STRATION.RE worm.
W32Time w32time.exe
X
Added by the Troj/Bckdr-HLO backdoor Trojan. If there is another service called W32Time it will replace it. ... Read More
Secboot w32tm.exe
X
Added by the Backdoor.Haxdoor.D backdoor. Found in the Windows system directory. ... Read More
Win32 USB2.0 Driver w32usb2.exe
X
Added by the SPYBOT.DN WORM!
win32 w32word.exe
X
Added by the Trojan.Gared Trojan that overwrites or deletes Word documents.
mjd w32_mjd.dll
X
Identified as a variant of the W32.Mimbot malware.
secboot w32_ss.exe
X
Added by the HaxDoor.B rootkit/backdoor Trojan.
Microsoftf DDEs Control w33s.exe
X
Identified as a variant of the RBot family of worms and IRC backdoors.
Pervasive.SQL Workgroup Engine W3dbsmgr.exe
U
Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before ... Read More
<not used> w3sskbda.dll
X
Added by the W32/Stration-AG worm.
w4y4n9 w4y4n9.exe
X
Added by the W32.Yadurna.A worm. The user is presented with a password recovery dialogue once the malicious program is downloaded. ... Read More
W75P2PSERVER W75P2PS.EXE
Y
Printer utility which is required in order to make the printer work correctly
w7zip w7zip.exe
X
Added by the Troj/Bancban-PX online banking information stealing Trojan. If you are infected with this, you should contact your banks and change any ... Read More
W815DM W815DM.exe
?
??
Client agent for ARCserve W95AGENT.EXE
?
Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required? ... Read More
drmu W95Mm.exe
X
Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread ... Read More
w98Eject w98Eject.exe
?
Related to USB support for Sigmatel MP3 audio decoder -what does it do, and is it required? ... Read More
[random name] w?auboot.exe
X
PurityScan/Clickspring adware
[random name] w?auclt.exe
X
PurityScan/Clickspring adware
[random name] w?nlogon.exe
X
PurityScan adware variant.
[random name] w?nword.exe
X
PurityScan adware variant.
wab.exe wab.exe
X
A variant of the SDBot.bhk family of worms and IRC backdoor Trojans.
EXPLORER wab32res.exe
X
Added by the W32.Fubalca.B worm. W32.Fubalca.B is a worm that spreads through removable media and infects various file types, including .exe and .html ... Read More
Mlcr0s0ftf DDEs C0ntr0i WAed.pif
X
Added by the W32/Rbot-BJW worm and IRC backdoor.
Microsoftf DDEs Control waes.exe
X
Identified as a variant of the RBot family of worms and IRC backdoors.
Windows Advance Firewall Protection Service wafps.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Advanced GFX Devolping Software wagfxds.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
wait4ip wait4IP.exe
U
Packard Bell net2Plug allows you to network PCs anywhere in your house ... Read More
WebArmyKnife WAK.exe
N
Web Army Knife - a suite of web site developer's tools
DomPlayer Service wakeservice.exe
X
Added by the DomPlayer. DomPlayer is a potentially unwanted application that may download another program and other security risks. ... Read More
Wakoopa Wakoopa.exe
N
Wakoopa is a new social network that, when using this software, tracks what software and games you use on your computer. This information will then b ... Read More
WinRegork Walcult.exe
X
Identified by Dr. Web as a variant of the Trojan.PWS.Banker.origin Trojan.
Windows Application Layer Gateway walg32.exe
X
Added by the W32/Agobot-AAZ worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
windows application layer walg32.exe
X
Added by the AGOBOT.ATN WORM! ... Read More
wallchgr.exe wstart Wallchgr.exe
U
Blue Tree Software ... Read More
run= wallflip.exe
?
Desktop wallpaper changer?
wallpaperchanger Wallpaper.exe
U
A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version i ... Read More
axel wam.exe
X
Added by the W32/Melo-E worm.
Microsoft Updating WAMQUARD.EXE
X
Added by the W32/Rbot-BX trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Wanadoo Messenger.exe Wanadoo Messenger.exe
N
Wanadoo ISP instant messenger client
<not used> wandrv.exe
X
Added by the Troj/Bckdr-QHR backdoor Trojan.
Microsoft Update wangard.exe
X
Added by the W32/Rbot-LH trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
wanman.exe wanman.exe
X
A variant of the Win32/Rbot.HDO family of worms and IRC backdoor Trojans.
WanMPSvc WanMPSvc.exe
Y
An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling ... Read More
quicken Waol.exe
X
CoolWebSearch parasite variant
WTSS wap***.exe [* = random char]
X
PurityScan/Clickspring adware
won update WAPDATE.EXE
X
Added by the WIN32.RBOT.N WORM! ... Read More
win update wapdate.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
WTSI wapisvit.exe
X
PurityScan/Clickspring adware
WTST wapisvtr.exe
X
PurityScan/Clickspring adware
Wapp Wapp.exe
X
Added by the Troj/Banker-EIK information-stealing Trojan for online banks. If you are infected with this file you should immediately change your onli ... Read More
war-ftpd.exe WAR-FTPD.EXE
N
War FTP Daemon from JGAA's Internet - FTP client
WARSVR war-ftpd.exe
N
"War FTP Daemon - the original free FTP server for windows"
WareOut WareOut.exe
X
Malware masquerading as a spyware and dialer remover, see here
warez warez.exe
N
Warez P2P client
ExeName32 Warm.scr
X
Added by the SCOLD WORM!
SKRSpyWarn Warn.exe
U
Added by the Smart Keystroke Recorder keylogger and surveillance software. This program should be removed if it is found on your computer without you ... Read More
0190 Warner WARN0190.EXE
X
Anti-dialer program (Germany)
0900 Warner WARN0900.EXE
X
Anti-dialer program (Germany)
Warner warner.exe
U
Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files ... Read More
Warnet warnet.exe
U
Warnet - system cleanup software
WarReg_PopUp WarReg_PopUp.exe
N
Displays a popup asking you to register your Acert product.
SECURE SHELL access driver wartamd.sys
X
A variant of the Haxdoor Trojan rootkit.
wartamll wartamll.dll
X
Added by a variant of the Haxdoor Trojan family. This infection utilizes the wartamd.sys rootkit to hide itself. ... Read More
war ftpd tray icon wartray.exe
N
War-ftpd - FTP server
useful-soft wartsrv.exe
X
Added by the Troj/StartPa-WB IE startpage hijacker. This infection hijackthis your startpage to www.teengb.com. ... Read More
winantispyware 2005 was5.exe
X
WinAntiSpyware: MALWARE, posing as a spyware remover - for more information, search the Spywarewarrior_List of non-Recommended anti parasite sit ... Read More
WinAntiSpyware 2007 was7.exe
X
Added by the rogue anti-spyware program WinAntiSpyware.
was7cw was7cw.exe
X
Added by the rogue anti-spyware program WinAntiSpyware.
wasfsd wasfsd.sys
X
Trojan that create fake alerts and popups advertising rogue anti-spyware program. Though the guide below is not for this particular infection, it wil ... Read More
Washer washer.exe
U
Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More
Washerie.exe washerie.exe
N
Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available ... Read More
washindex washidx.exe
U
Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More
Index Washer WashIdx.exe
U
Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More
Wast wast.exe
X
Grokster ads updater
wast wast2.exe
X
Grokster ads updater
system checking wasul.exe
X
Added by the RBOT.BHM WORM! ... Read More
DLHelperEXE WATCH.exe
N
Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installatio ... Read More
Eicon NetworksLAN_DAEMON watch.exe
U
Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) ... Read More
Eicon TechnologyLAN_DAEMON watch.exe
U
Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) ... Read More
Restart Watch Watch.exe
?
Associated with an Eicon Networks Diva ISDN or ADSL modem. What does it do and is it required? ... Read More
Watch watch.exe
N
Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted ... Read More
Woowatch Watch.exe
N
Wanadoo ISP software, not required
Regrun2 WatchDog.exe
Y
Greatis Software's RegRun 3 Security Suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, v ... Read More
Watch Dog Program watchdog.exe
N
For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if y ... Read More
Watchdog Watchdog.exe
N
Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, ... Read More
WatchDog watchdog.exe
?
Part of Motorola "Mobile Phone Tools" v3 - in a "Mobiile Phone Tools" sub-directory of Program Files ... Read More
LoadWatcher watcher.exe
U
Added by the Watcher surveillance software. Spyware.Watcher is a remote surveillance application that can use a computer's webcam to secretly monitor ... Read More
YOW tuner WatchPNM.exe
?
??
WATCHPNP_Xerox watchPnp.exe
U
Printer software used by Xerox printers.
WATCHPNP_Samsung watchPnp.exe
U
Printer software used by Samsung printers.
Windows Account Alternation wauclt.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
sndpnpmix wauctlxp4.exe
X
Added by the WIN32.MUDROP.N TROJAN!
Windows Update AutoUpdate Client waucult.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Update wauguard.exe
X
Added by the RBOT.AEE WORM!
Windows Auto Update Tool wault.exe
X
Added by the W32/Tilebot-JQ worm with IRC backdoor Trojan functionality.
waults waults.exe
X
Added by the Backdoor.Bifrose.L backdoor.
system update wauluclt.exe
X
Added by the SDBOT.EF WORM! ... Read More
waumgr waumgr.exe
X
A variant of the W32/Sdbot.BNM family of worms and IRC backdoor Trojans.
Windows Guard WAUMGRD.EXE
X
Added by the W32/Rbot-GY trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
*windows update waurclt.exe
X
Added by a variant of the WIN32.RBOT WORM! ... Read More
Antivirus wav.exe
X
Added by the Windows Antivirus 2008 rogue anti-spyware program.
mIRC Exchanger wavasdw.exe
X
Added by the W32/Sdbot-UO worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. ... Read More
Bose Wave/PC Monitor wavepcmonitor.exe
N
System Tray access for this system (more info on the system here). Available via Start -> Programs ... Read More
WaveTop Launcher WaveTop.exe
N
WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More
waxw2k waxw2k.dll
X
A variant of the Troj/Haxdor-Fam Trojan.
[not used] wb.com
X
Added by the Backdoor.Beasty.E backdoor. This backdoor listens on port 666.
[not used] wb.com
X
Added by the Backdoor.Beasty.F backdoor. This backdoor listens on port 666.
Webcam Go Sti Service Application wbcgosvc.exe
?
Control software for the portable Creative Video Blaster Webcam Go digital camera/PC web cam. What does it do and is it required? ... Read More
djuka wbchha.dll
X
Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More
Wbcmgr wbcmgr.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Messenger Panel wbcsvc.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
{A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F} wbeconm.dll
X
Added by the Adware.TopAV which replaces the Windows wallpaper with a fake virus alert message containing links to topantivirus.biz or Spyaxe and issu ... Read More
Server Runtime Process wbemstest.exe
X
Added by the W32/Sdbot-DDB worm and IRC backdoor.
Wbiff Wbiff.exe
N
Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received ... Read More
{10388970-0592-BCC4-1BCB-3147DA75A2F6} wblinds.exe
X
A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
WindowBlinds wbload.exe
U
WindowBlinds from Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object De ... Read More
wbqxfpgl wbqxfpgl.dll
X
Added by the VAC, or Trojan.Win32.Vapsup.kfp Trojan.
WinBackup Scheduler Wbsched.exe
U
LIUtilities WinBackup scheduler - backup software
wbsecsvc wbsecsvc.exe
?
Winbond Seurity Support Service related to Winbond Wireless LAN Adapters.
twhe wbta.exe
X
PurityScan delivers advertisements to your computer.
Wbutton Wbutton.exe
?
Related to the Wacom Penabled driver on Acer Tablet PCs. Appears to do nothing so is it required? ... Read More
Video Camera Frog wcamfrog.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
MSMSGNER wcbi.exe
X
Added by the Troj/Bckdr-QMS backdoor Trojan.
OWCWebCamDV wcdvtray.exe
U
WebCamDV from Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam ... Read More
WCESMngr WCEMNGR.EXE
X
The W32/Agobot-QX WORM/backdoor Trojan adds this, modifying the HOSTS file and terminating security-related/anti-virus processes also. ... Read More
ActiveSync wcescom32.exe
X
Added by the Troj/MancSyn-E Trojan.
H/PC Connection Agent WCESCOMM.EXE
U
Active sync for use with Windows CE based palm PC
WCESCOMM WCESCOMM.EXE
N
Active sync for use with Windows CE based palm PC
Windows Client Login Identafacation System wclis.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
stardust wallpaper control 2003 WCMain.exe
N
Related to Stardust_Software Screen Saver Control 2003 ... Read More
Woods Inc wcmd.exe
X
Added by the Troj/KillFil-O Trojan.
wcmdmgr.exe wcmdmgr.exe
N
Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More
wcmdmgr wcmdmgrl.exe
U
Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More
wcmdmgrl wcmdmgrl.exe
U
Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More
WildTangent Web Driver updater wcmdmgrl.exe
U
Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More
Windows Connection Extension wcmsvc.exe
X
A variant of the SDBot family of worms and IRC backdoor Trojans.
Micsorosft Security Center wcnsfty.exe
X
Added by the W32/Rbot-AHU worm. When infected your computer will become an open mail relay which will allow your computer to be used to send out spam. ... Read More
Windows Logical Connection wcnsvc.exe
X
A variant of the IRCBot family of worms and IRC backdoor Trojans.
system32 wcntfy.exe
X
Added by the Troj/Banker-CSY Internet banking Trojan. If you have this infection you should immediately change all of your online banking account inf ... Read More
WINT wcp****.exe [* = random char]
X
PurityScan/Clickspring adware
WINT wcpcc.exe
X
PurityScan/Clickspring adware
Registry Integritycheck WCPDT.EXE
X
Added by the W32/Agobot-RF WORM.
WINT wcpsvit.exe
X
PurityScan/Clickspring adware
some wcs.exe
X
Identified as a variant of the Adware/Netproject malware. Typically bundled with rogue anti-spyware programs and fake codecs. ... Read More
smile wcs.exe
X
Identified as a variant of the FakeAlert/Zlob malware.
hyperproduction wcscqa.dll
X
Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More
Microsoft Update Services wcsnfty.exe
X
Added by the W32/Rbot-AGK worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More
Microsoft wcsntfy.exe
X
Added by the W32/Agobot-AHT worm and IRC backdoor.
Windows Client/Server Runtime Server Subsystem wcsrss.exe
X
Added by the W32/Tilebot-DA worm and IRC backdoor.
wcsys wcsys.exe
X
Added by the Troj/Keylog-AP keylogging Trojan.
Microsoft Intrenet Explorer wcumrg.exe
X
Added by the W32/Sdbot-AFD worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
wnxpupdate wcupshell.exe
X
Added by the W32/Combra-I mass-mailing worm.
Worm Detector wd.exe
U
Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam ... Read More
Windows Defender Adds wda*.exe
X
A variant of the Trojan.Fakealert malware. This in