Bleeping Computer

Welcome Guide    Blogs    Chat    Help    Search    RSS

Welcome Guest (Log In | Create Account) New Member? Join for free.

  Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
  Do you have popups or other malware infecting your computer? If so, Start Here!
  Are you having trouble using this site? Then you should visit the New User Orientation Center!

BleepingComputer.com -> Startup Programs Database -> Filenames that start with W

A    B    C    D    E    F    G    H    I    J    K    L    M    N    O    P    Q    R    S    T    U    V    W    X    Y    Z    Other    HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23 Rootkit List · Submit a Startup · Top Submitters  Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key Startup Database Forum · Computer Help Forums · How to use the Startup Database Enter the filename or keyword you would like to search for: Advanced Search Name Filename Status Description {9311b8a8-0fd7-f849-5b42-67bbb89472f7} C:\windows:schost.exe X Identified as a variant of the Troj/Poison-K backdoor and keylogger. It is advised that once you remove this infection you immediately change all of ... Read More {B9BA1F0E-091E-ECF9-0A09-CC4C2EE29C62} task.exe X Identified as a variant of the Troj/Poison-K backdoor and keylogger. It is advised that once you remove this infection you immediately change all of ... Read More USB Hardware32c Monitoring USBHARDWARE32C.EXE X Added by the W32/Rbot-UU worm. When started, this infection connects to an IRC server where it waits for remote commands. ... Read More Windows Service Manager userint32.exe X Added by the W32/Oscabot-C worm. When started, this infection connects to an IRC where it waits for remote commands to execute. ... Read More w0rmname.exe w0rmname.exe X Added by the W32/Woned-C worm. winrun z W1NT45K.exe X Added by W32.Mytob.BL WORM! ... Read More Windows Updtee Mgnr W1NT45K.exe X Added by the W32.Mytob.DC@mm worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More w32 Wayang w32 Wayang.exe X Added by the W32.Yadurna.A worm. The user is presented with a password recovery dialogue once the malicious program is downloaded. ... Read More w32 w32.exe X Added by the SOKEVEN TROJAN! WIN ID SYS64 w3264.exe X Added by the W32/Mytob-BO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Windows Application Extension W32AppSrv.exe X Added by the Troj/GrayBrd-AX backdoor Trojan. Windows Updates w32dns.exe X Added by the W32/Sdbot-BFW worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Windows Services w32edus.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Systray w32explorer.exe X Added by the W32/Rbot-AJY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft Visual Studio w32mvs.exe X Identified by VBA32 as a variant of the Backdoor.Win32.Agent.cjo malware. A New Windows Updater w32NTupdt.exe X added by the W32/Mytob-AG WORM, which has IRC channel backdoor trojan functionality. ... Read More W32PT W32PT.dll.vbs X Identified by Kaspersky as a variant of the Worm.VBS.Solow.a worm. Windoxs Update Center W32RfSA.exe X Added by a variant of the W32/SDBOT WORM! windows update center W32RSA.exe X Added by an unidentified WORM or TROJAN! Windows Services w32service.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Services w32services.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. w32sup w32sup.exe X Adult content dialler Windows Network Firewall w32svc.exe X Added by the W32/Sdbot.worm!811a7027 worm and IRC backdoor. W32SYS w32sys.exe X Added by the W32/Jambu-A worm. W32/Jambu-A is a mass mailer for the Windows platform that also targets peer-to-peer file sharing networks and local sh ... Read More W32Time w32t.dll X Added by the Backdoor.Fuwudoor backdoor. w32tcomr w32tcomr.dll X Added by the WORM_STRATION.RE worm. W32Time w32time.exe X Added by the Troj/Bckdr-HLO backdoor Trojan. If there is another service called W32Time it will replace it. ... Read More Secboot w32tm.exe X Added by the Backdoor.Haxdoor.D backdoor. Found in the Windows system directory. ... Read More Win32 USB2.0 Driver w32usb2.exe X Added by the SPYBOT.DN WORM! win32 w32word.exe X Added by the Trojan.Gared Trojan that overwrites or deletes Word documents. mjd w32_mjd.dll X Identified as a variant of the W32.Mimbot malware. secboot w32_ss.exe X Added by the HaxDoor.B rootkit/backdoor Trojan. Microsoftf DDEs Control w33s.exe X Identified as a variant of the RBot family of worms and IRC backdoors. Pervasive.SQL Workgroup Engine W3dbsmgr.exe U Database Service Manager for Pervasive SQL 2000 Workgroup edition. Required if you use Pervasive SQL but it's recommended you start it manually before ... Read More <not used> w3sskbda.dll X Added by the W32/Stration-AG worm. w4y4n9 w4y4n9.exe X Added by the W32.Yadurna.A worm. The user is presented with a password recovery dialogue once the malicious program is downloaded. ... Read More W75P2PSERVER W75P2PS.EXE Y Printer utility which is required in order to make the printer work correctly w7zip w7zip.exe X Added by the Troj/Bancban-PX online banking information stealing Trojan. If you are infected with this, you should contact your banks and change any ... Read More W815DM W815DM.exe ? ?? Client agent for ARCserve W95AGENT.EXE ? Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required? ... Read More drmu W95Mm.exe X Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread ... Read More w98Eject w98Eject.exe ? Related to USB support for Sigmatel MP3 audio decoder -what does it do, and is it required? ... Read More [random name] w?auboot.exe X PurityScan/Clickspring adware [random name] w?auclt.exe X PurityScan/Clickspring adware [random name] w?nlogon.exe X PurityScan adware variant. [random name] w?nword.exe X PurityScan adware variant. wab.exe wab.exe X A variant of the SDBot.bhk family of worms and IRC backdoor Trojans. EXPLORER wab32res.exe X Added by the W32.Fubalca.B worm. W32.Fubalca.B is a worm that spreads through removable media and infects various file types, including .exe and .html ... Read More Mlcr0s0ftf DDEs C0ntr0i WAed.pif X Added by the W32/Rbot-BJW worm and IRC backdoor. Microsoftf DDEs Control waes.exe X Identified as a variant of the RBot family of worms and IRC backdoors. Windows Advance Firewall Protection Service wafps.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Advanced GFX Devolping Software wagfxds.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. wait4ip wait4IP.exe U Packard Bell net2Plug allows you to network PCs anywhere in your house ... Read More WebArmyKnife WAK.exe N Web Army Knife - a suite of web site developer's tools DomPlayer Service wakeservice.exe X Added by the DomPlayer. DomPlayer is a potentially unwanted application that may download another program and other security risks. ... Read More Wakoopa Wakoopa.exe N Wakoopa is a new social network that, when using this software, tracks what software and games you use on your computer. This information will then b ... Read More WinRegork Walcult.exe X Identified by Dr. Web as a variant of the Trojan.PWS.Banker.origin Trojan. Windows Application Layer Gateway walg32.exe X Added by the W32/Agobot-AAZ worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More windows application layer walg32.exe X Added by the AGOBOT.ATN WORM! ... Read More wallchgr.exe wstart Wallchgr.exe U Blue Tree Software ... Read More run= wallflip.exe ? Desktop wallpaper changer? wallpaperchanger Wallpaper.exe U A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version i ... Read More axel wam.exe X Added by the W32/Melo-E worm. Microsoft Updating WAMQUARD.EXE X Added by the W32/Rbot-BX trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More Wanadoo Messenger.exe Wanadoo Messenger.exe N Wanadoo ISP instant messenger client <not used> wandrv.exe X Added by the Troj/Bckdr-QHR backdoor Trojan. Microsoft Update wangard.exe X Added by the W32/Rbot-LH trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More wanman.exe wanman.exe X A variant of the Win32/Rbot.HDO family of worms and IRC backdoor Trojans. WanMPSvc WanMPSvc.exe Y An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling ... Read More quicken Waol.exe X CoolWebSearch parasite variant WTSS wap***.exe [* = random char] X PurityScan/Clickspring adware won update WAPDATE.EXE X Added by the WIN32.RBOT.N WORM! ... Read More win update wapdate.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More WTSI wapisvit.exe X PurityScan/Clickspring adware WTST wapisvtr.exe X PurityScan/Clickspring adware Wapp Wapp.exe X Added by the Troj/Banker-EIK information-stealing Trojan for online banks. If you are infected with this file you should immediately change your onli ... Read More war-ftpd.exe WAR-FTPD.EXE N War FTP Daemon from JGAA's Internet - FTP client WARSVR war-ftpd.exe N "War FTP Daemon - the original free FTP server for windows" WareOut WareOut.exe X Malware masquerading as a spyware and dialer remover, see here warez warez.exe N Warez P2P client ExeName32 Warm.scr X Added by the SCOLD WORM! SKRSpyWarn Warn.exe U Added by the Smart Keystroke Recorder keylogger and surveillance software. This program should be removed if it is found on your computer without you ... Read More 0190 Warner WARN0190.EXE X Anti-dialer program (Germany) 0900 Warner WARN0900.EXE X Anti-dialer program (Germany) Warner warner.exe U Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files ... Read More Warnet warnet.exe U Warnet - system cleanup software WarReg_PopUp WarReg_PopUp.exe N Displays a popup asking you to register your Acert product. SECURE SHELL access driver wartamd.sys X A variant of the Haxdoor Trojan rootkit. wartamll wartamll.dll X Added by a variant of the Haxdoor Trojan family. This infection utilizes the wartamd.sys rootkit to hide itself. ... Read More war ftpd tray icon wartray.exe N War-ftpd - FTP server useful-soft wartsrv.exe X Added by the Troj/StartPa-WB IE startpage hijacker. This infection hijackthis your startpage to www.teengb.com. ... Read More winantispyware 2005 was5.exe X WinAntiSpyware: MALWARE, posing as a spyware remover - for more information, search the Spywarewarrior_List of non-Recommended anti parasite sit ... Read More WinAntiSpyware 2007 was7.exe X Added by the rogue anti-spyware program WinAntiSpyware. was7cw was7cw.exe X Added by the rogue anti-spyware program WinAntiSpyware. wasfsd wasfsd.sys X Trojan that create fake alerts and popups advertising rogue anti-spyware program. Though the guide below is not for this particular infection, it wil ... Read More Washer washer.exe U Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More Washerie.exe washerie.exe N Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available ... Read More washindex washidx.exe U Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More Index Washer WashIdx.exe U Windows Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Pr ... Read More Wast wast.exe X Grokster ads updater wast wast2.exe X Grokster ads updater system checking wasul.exe X Added by the RBOT.BHM WORM! ... Read More DLHelperEXE WATCH.exe N Download helper distributed with some software that allows the software installation to redirect download locations. Not required once the installatio ... Read More Eicon NetworksLAN_DAEMON watch.exe U Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) ... Read More Eicon TechnologyLAN_DAEMON watch.exe U Associated with an Eicon Networks ISDN or ADSL modem. Watch protocols your connection with numbers and duration. You need callvu.exe (from Start Menu) ... Read More Restart Watch Watch.exe ? Associated with an Eicon Networks Diva ISDN or ADSL modem. What does it do and is it required? ... Read More Watch watch.exe N Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted ... Read More Woowatch Watch.exe N Wanadoo ISP software, not required Regrun2 WatchDog.exe Y Greatis Software's RegRun 3 Security Suite which amongst other things replaces MSCONFIG. The WatchDog check for registry changes caused by trojan's, v ... Read More Watch Dog Program watchdog.exe N For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if y ... Read More Watchdog Watchdog.exe N Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, ... Read More WatchDog watchdog.exe ? Part of Motorola "Mobile Phone Tools" v3 - in a "Mobiile Phone Tools" sub-directory of Program Files ... Read More LoadWatcher watcher.exe U Added by the Watcher surveillance software. Spyware.Watcher is a remote surveillance application that can use a computer's webcam to secretly monitor ... Read More YOW tuner WatchPNM.exe ? ?? WATCHPNP_Xerox watchPnp.exe U Printer software used by Xerox printers. WATCHPNP_Samsung watchPnp.exe U Printer software used by Samsung printers. Windows Account Alternation wauclt.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. sndpnpmix wauctlxp4.exe X Added by the WIN32.MUDROP.N TROJAN! Windows Update AutoUpdate Client waucult.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Microsoft Update wauguard.exe X Added by the RBOT.AEE WORM! Windows Auto Update Tool wault.exe X Added by the W32/Tilebot-JQ worm with IRC backdoor Trojan functionality. waults waults.exe X Added by the Backdoor.Bifrose.L backdoor. system update wauluclt.exe X Added by the SDBOT.EF WORM! ... Read More waumgr waumgr.exe X A variant of the W32/Sdbot.BNM family of worms and IRC backdoor Trojans. Windows Guard WAUMGRD.EXE X Added by the W32/Rbot-GY trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More *windows update waurclt.exe X Added by a variant of the WIN32.RBOT WORM! ... Read More Antivirus wav.exe X Added by the Windows Antivirus 2008 rogue anti-spyware program. mIRC Exchanger wavasdw.exe X Added by the W32/Sdbot-UO worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. ... Read More Bose Wave/PC Monitor wavepcmonitor.exe N System Tray access for this system (more info on the system here). Available via Start -> Programs ... Read More WaveTop Launcher WaveTop.exe N WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in ... Read More waxw2k waxw2k.dll X A variant of the Troj/Haxdor-Fam Trojan. [not used] wb.com X Added by the Backdoor.Beasty.E backdoor. This backdoor listens on port 666. [not used] wb.com X Added by the Backdoor.Beasty.F backdoor. This backdoor listens on port 666. Webcam Go Sti Service Application wbcgosvc.exe ? Control software for the portable Creative Video Blaster Webcam Go digital camera/PC web cam. What does it do and is it required? ... Read More djuka wbchha.dll X Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More Wbcmgr wbcmgr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. Windows Messenger Panel wbcsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. {A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F} wbeconm.dll X Added by the Adware.TopAV which replaces the Windows wallpaper with a fake virus alert message containing links to topantivirus.biz or Spyaxe and issu ... Read More Server Runtime Process wbemstest.exe X Added by the W32/Sdbot-DDB worm and IRC backdoor. Wbiff Wbiff.exe N Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received ... Read More {10388970-0592-BCC4-1BCB-3147DA75A2F6} wblinds.exe X A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More WindowBlinds wbload.exe U WindowBlinds from Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object De ... Read More wbqxfpgl wbqxfpgl.dll X Added by the VAC, or Trojan.Win32.Vapsup.kfp Trojan. WinBackup Scheduler Wbsched.exe U LIUtilities WinBackup scheduler - backup software wbsecsvc wbsecsvc.exe ? Winbond Seurity Support Service related to Winbond Wireless LAN Adapters. twhe wbta.exe X PurityScan delivers advertisements to your computer. Wbutton Wbutton.exe ? Related to the Wacom Penabled driver on Acer Tablet PCs. Appears to do nothing so is it required? ... Read More Video Camera Frog wcamfrog.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. MSMSGNER wcbi.exe X Added by the Troj/Bckdr-QMS backdoor Trojan. OWCWebCamDV wcdvtray.exe U WebCamDV from Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam ... Read More WCESMngr WCEMNGR.EXE X The W32/Agobot-QX WORM/backdoor Trojan adds this, modifying the HOSTS file and terminating security-related/anti-virus processes also. ... Read More ActiveSync wcescom32.exe X Added by the Troj/MancSyn-E Trojan. H/PC Connection Agent WCESCOMM.EXE U Active sync for use with Windows CE based palm PC WCESCOMM WCESCOMM.EXE N Active sync for use with Windows CE based palm PC Windows Client Login Identafacation System wclis.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. stardust wallpaper control 2003 WCMain.exe N Related to Stardust_Software Screen Saver Control 2003 ... Read More Woods Inc wcmd.exe X Added by the Troj/KillFil-O Trojan. wcmdmgr.exe wcmdmgr.exe N Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More wcmdmgr wcmdmgrl.exe U Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More wcmdmgrl wcmdmgrl.exe U Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More WildTangent Web Driver updater wcmdmgrl.exe U Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note th ... Read More Windows Connection Extension wcmsvc.exe X A variant of the SDBot family of worms and IRC backdoor Trojans. Micsorosft Security Center wcnsfty.exe X Added by the W32/Rbot-AHU worm. When infected your computer will become an open mail relay which will allow your computer to be used to send out spam. ... Read More Windows Logical Connection wcnsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans. system32 wcntfy.exe X Added by the Troj/Banker-CSY Internet banking Trojan. If you have this infection you should immediately change all of your online banking account inf ... Read More WINT wcp****.exe [* = random char] X PurityScan/Clickspring adware WINT wcpcc.exe X PurityScan/Clickspring adware Registry Integritycheck WCPDT.EXE X Added by the W32/Agobot-RF WORM. WINT wcpsvit.exe X PurityScan/Clickspring adware some wcs.exe X Identified as a variant of the Adware/Netproject malware. Typically bundled with rogue anti-spyware programs and fake codecs. ... Read More smile wcs.exe X Identified as a variant of the FakeAlert/Zlob malware. hyperproduction wcscqa.dll X Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More Microsoft Update Services wcsnfty.exe X Added by the W32/Rbot-AGK worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More Microsoft wcsntfy.exe X Added by the W32/Agobot-AHT worm and IRC backdoor. Windows Client/Server Runtime Server Subsystem wcsrss.exe X Added by the W32/Tilebot-DA worm and IRC backdoor. wcsys wcsys.exe X Added by the Troj/Keylog-AP keylogging Trojan. Microsoft Intrenet Explorer wcumrg.exe X Added by the W32/Sdbot-AFD worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More wnxpupdate wcupshell.exe X Added by the W32/Combra-I mass-mailing worm. Worm Detector wd.exe U Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam ... Read More Windows Defender Adds wda*.exe X A variant of the Trojan.Fakealert malware. This in