Name Filename Status Description
!1_pgaccount pgaccount.exe Y DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks. You will see one instant of pgaccount.exe for every active account on your system, and this is essential for PG to work properly
!1_ProcessGuard_Startup procguard.exe Y DiamondCS ProcessGuard security software - stops malicious worms and trojans from being executed silently in the background, as well as a variety of other attacks
AcerPowerkey Powerkey.exe U PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3
Acme.PCHButton pchbutton.exe N Used by HP Instant Support
Altnet points manager.exe N Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
AltnetPointsManager points manager.exe N Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
Ashampoo PopUpBlocker PopUpKiller.exe U Ashampoo popup blocker, part of Privacy Protector Plus - see here
AutoShutdown pssvc.exe ? Utility to fix vCard Export in MS Outlook 2000 - although why are these together?
AV Client patch31345.exe X Added by the MYDOOM.AD WORM!
AV Industry patch31345.exe X Added by the MYDOOM.AD WORM!
bin32hpu ppstub.exe X PrecisionPop adware
Clotusorgreg0 prtStart.exe Orgprt.exe ? Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?
CLSID plugin.exe X Adult content dialler
CompaqPrinTray printray.exe N Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop
Country Select pctptt.exe N Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
CountrySelection pctptt.exe N Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required
DevicePath Proyecto1.exe X Added by the GRUEL WORM!
Dialgo SDK PhoneAnswer.exe U Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis"
Dialog Helper PDDLGHLP.EXE N Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs
directx PipeCmd.exe X Added by the SDBOT.D TROJAN!
DocuMagix Init PWATCH.EXE N PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed
dregfix ph_finder.exe ? ??
DXM6Patch_981116 p_981116.exe N Win32 cabinet self extractor. More info here
eTrust PestPatrol Active Protection PPActiveDetection.exe U PestPatrol real-time protection feature. "Stops spyware before it infects your system"
Event Planner Reminders PLNRnote.exe N Sierra Event Planner tray icon
Event Reminder pmremind.exe N A calendar/alarm program that installs with Brøderbund Printmaster
Gadwin PrintScreen PrintScreen.exe N Gadwin PrintScreen - utility to capture, print or save the current window
gw port controller PORTCT95.EXE Y From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung
HP Presentation Ready PresRdy.exe N HP Omnibook related:  "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device"
HPU ProvenTactics.exe N Proven Internet Marketing software
Imonitor Plguni.exe N McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
InstantTray PCLETray.exe N Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually
Intel PDS pds.exe U Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
Intel PROSet Tray Icon promon.exe N System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
Keyboard Preload Check Preload.exe Y Millenium Multi-Function Keyboard driver
Kodak Batch Transfer pezdow1.exe N Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC
Kodak Picture Transfer Software pts.exe N Looks for Kodak camera connection and media insertion. Available via Start -> Programs
LexmarkPrinTray printray.exe N Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray
paintingroom smile monitor paintingroom.exe X Paintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
LifeScape Media Detector PicasaMediaDetector.exe N Media detector for Picasa's automatic photo organizer
paintingroom evidence monitor paintingroom.exe X Paintingroom.com smiley software - not recommended as the site tries to drop a trojan on you...
M Player Post Installer postinstallm.exe ? ??
Matrox Powerdesk PDesk.exe N For Matrox video cards. Quick access to tweak your card to your liking
McAfee QuickClean Imonitor Plguni.exe N McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
MediaPath Proyecto1.exe X Added by the GRUEL WORM!
Microsoft DirectX PDSched.exe X Added by the SDBOT.CN WORM!
Microsoft Update prowind32.exe X Added by a variant of the AGOBOT/GAOBOT WORM!
Microsoft© PID Lex PIDLex.exe X Added by the NIOVADOOR TROJAN!
mmusrstp procrun.exe ? ??
Mouse Suite 98 Daemon pelmiced.exe N Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
msconfig.exe proxy.exe X Added by a variant of the AGENT.AH downloader TROJAN!
MSNSysRestore pc32.exe X Added by a variant of the MASTAK VIRUS!
mspwr pupstman.exe U "Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me) 
No Credit Card plugin-[random].exe X Adult content pop-up dialler
NOD32POP3 Pop3scan.exe Y POP3 E-mail part of Eset's NOD32 virus-scanner
Norton AV Preload Premend.exe ? Norton Antivirus related. What does it do and is it required
Norton eMail Protect POPROXY.EXE Y Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
OfficeScan95 pccwin97.exe Y Trend Micro antivirus OfficeScan
OfficeScanNT Monitor pccntmon.exe Y Trend Micro OfficeScan Antivirus real-time scan monitor
P17Helper P17.dll U Low latency Creative Labs driver that allows you to use the card inputs, modify it, and play it back with no noticeable speed delay.
P2P NETWORKING P2P Networking.exe N Peer to Peer (P2P) sharing of files on the internet
P2P Networking3 P2P Networking3.exe N P2P Networking, a component bundled with Kazaa that enables other applications to use Peer-to-Peer functionality. Not required - see here
P3p4chk P3p4chk.exe X Added by the GEMA TROJAN!
p4mx4 p4mx4.exe X Added by the CRYPTER.A TROJAN!
PadTouch PadExe.exe N Toshiba Touch and Launch - offers easy movement and freedom of programs navigation with TouchPad
Pagekeeper Jobs pkjobs.exe U PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
Pagekeeper Lite pkjobs.exe U PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc
PAgent PAgent.exe X Scans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local filesystem for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found. See here for more info
Pagoo PAGOO.EXE N Pagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem
Palm.exe Palm.exe N Palm Desktop Software for use with Palm handheld devices. Available via Start -> Programs
PalNetaware pnetaware.exe X PalTalk adware - as included in Morpheus, see here towards the bottom of the page
PaltalkNetaware.exe PALNETAW~1.EXE N Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start -> Programs. Delete the shortcut in Start -> Programs -> StartUp as well otherwise it will be reinstated
Panda Scheduler pavsched.exe U Panda Antivirus scan scheduler. Required if this is your virus scanner program and you have scans scheduled on a regular basis. I recommend that you scan manually so you don't need this but if you tend to forget then leave it
PandaAVEngine PandaAVEngine.exe X Added by the NETSKY.R WORM!
PaperPort PTD pptd40nt.exe N "PaperPort" software associated with scanners
PaperQuote System Tray Icon PQTRAY.EXE N PaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation
Parallel Tasking ptask.exe X Added by unidentified adware - recognized by Kaspersky antivirus as Trojan-Downloader.Win32.Small.adg
PartSeal PartSeal.exe U System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere
Password Door Loader PDMonitor.exe U Password Door - password protection software
PasteLister plister.exe N PasteLister - clipboard extender. Start manually when required
Patch patch.exe X Added by the NETBUS WORM!
PAV.EXE PAV.EXE Y PER Antivirus
PAVFIRES PavFires.exe Y Panda Antivirus
PAVFNSVR PavFnSvr.exe Y Panda Titanium Antivirus
PavProc PavPrS9x.exe Y Panda Titanium Antivirus
PavProt PavProt.exe Y Panda Titanium Antivirus
PC Booster pcbooster.exe U PC Booster from inKline Global - "easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition"
PCBG PCBODYGUARD.EXE Y PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
PCBODYGUARD PCBODYGUARD.EXE Y PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc
PCCClient.exe PCCClient.exe Y PC-Cillin 2002 antivirus software
pccguide.exe pccguide.exe Y PC-Cillin 2002 antivirus software
PCCIOMON.EXE PCCIOMON.EXE Y PC-Cillin 2000 antivirus software. This is the actual virus-scanner
PCClient.exe PCClient.exe Y Trend Micro PC-Cillin Internet Security
PccPfw PccPfw.exe Y PC Cillin 2003 personal firewall
PcCtlCom Pcctlcom.exe Y Trend Micro PC-cillin Internet Security
PCHbutton PCHbutton.exe N Used by HP Instant Support
PCHealth pchschd.exe N This is a "scheduler" and does not turn off PC Health. For more information refer here
PCIMODEM pcimodem.exe ? Associated with Lucent based Aztech MDP7800-U PCI modems. Is it required?
PCLEPCI ppe.exe U Pinnacle Systems PCI Performance Enhancer. "This tool helps to increase the PCI Busmaster performance of all Pinnacle PCI boards."
PCMService PCMService.exe U Part of the Dell Media Experience software. Appears to be related to Power Cinema. Reports have shown that this program repeatedly checks your disk for a file. This could cause performance issues.
PCRecSA PCRecSA.exe U Part of the IBM/XPoint Rapid Restore backup utility. If you choose, you can use it to create a "clean" backup of your hard drive. The process involves the software partitioning your hard drive, making a compressed image of the working drive which will then allow you to revert to that should you need to
PCStart Pcm25.exe N Runs as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big
Pcsv pcsvc.exe X Delfin Media Viewer or "Promulgate" adware
PcSync PcSync.exe N If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start -> Programs
pctspk pctspk.exe U Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions
PCTVOICE pctvoice.exe U The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. It’s better to leave it
PDEngine PDEngine.exe U PerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot
pdexplo PDEXPLO.EXE N PowerDesk Pro by Ontrack. Enhanced desktop and file manager. Available via Start -> Programs
pdfSaver3 pdfSaver3.exe N PDF-XChange - create Adobe compatible PDF files from virtually any Windows software such as MS Word, Excel, AutoCAD, MS Publisher etc
PDirect PDirect.exe N IBM Presentation Director software
PDVDServ PDVDServ.exe U Remote Control background application for CyberLink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one
Peeramid PService.exe ? In a "Koptimizer" folder in Program Files. What does it do and is it required?
PeerGuardian PeerGuardian_1.99b_pr14.exe N PeerGuardian "is a tiny firewall program especially designed for P2P software users, but also for anyone who is concerned about the investigations that corporations and authorities perform on the internet. PeerGurdian blocks connections for the configured IP ranges and logs the blocked connections"
Pent@VALUE 3.2 Pent@VALUE.exe U Pent@VALUE Digital Satellite Internet PC Receiver
PeqBL100 PEQBL100.exe X Added by the ENVID.D WORM!
PER Email Protection pavmail.exe Y PER Antivirus
PerfectPrint pfppop70.exe N Print engine used by Corel WordPerfect 7 and Presentations 7
PersFw PersFw.exe Y Kerio or Tiny Personal Firewall
Personal Firwall ptmedsrv.exe X Added by the SDBOT.XY WORM!
PestPatrol Control Center PPControl.exe U PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
PestPatrolCL PestPatrolCL.exe U PestPatrol's command line scanner, combines with the Windows Task scheduler and is required in cases where schedules for regular scanning are set
PFW_CfgEngine PFWCFG~1.EXE ? Personal Firewall related?
PFW_PullSrv PULL.EXE ? Personal Firewall related?
PgMonitr PgMonitr.exe X Delfin Promulgate adware variant
PGPSDKSVC pgpsdkserv.exe Y PGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality
PGPSERVICE pgpservice.exe U PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a "fall-back" mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference
PGPtray pgptray.exe N PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start -> Programs
pgtaff pgtaff.exe X AdRotator adware variant
PhoneFree version 6.2 PHONEF??.EXE U An Internet telephony application. Complicated registration and ad banners tailored to your profile - see here
Photo Loader supervisory Plauto.exe N Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures
Picasa Media Detector PicasaMediaDetector.exe N Media detector for Picasa's automatic photo organizer
Pickatag pickatag.exe N Pick-a-tag - "Freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages"
PICPRTR PICPRTR.EXE N Program for viewing and measuring a variety of 3D CAD data formats
PiDunHK PIDUNHK.EXE U Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens
pilif pilif.exe X Added by the FILI WORM!
Pinger pinger.exe N Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification
PinnacleDriverCheck PSDrvCheck.exe Y Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
Piolet piolet.exe N Piolet - peer-to-peer file sharing client
Pixel32 Pixel32.exe X Added by the GEMA TROJAN!
Pixelpwr32 Pixelpwr32.exe X Added by the GEMA TROJAN!
Pixelsvr Pixelsvr.exe X Added by the GEMA TROJAN!
pjWebCam pjWebCam.exe U Webcam automation software that saves regular photos from webcam and can also act as HTTP server
PK Services pksvc.exe X Added by the FORBOT-BW WORM!
PktAnything PocketCompanion.exe U PocketAnything lets you save anything on your computer to your mobile, with one click
PLEAPCPUCPL pleapu.exe U CPU Control Panel for the Powerleap CPU upgrade
Plguni Plguni.exe N McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
plmg.exe plmg.exe U Paragon Last Minute Bidder - auction assistant software
Pluck Tray PluckTray.exe U RSS (XML TAGS) reader program
PLXSTART PLXSTART.EXE U Sets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW.
PLXTASK PLXTASK.EXE N Taskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files)
pm32ctrl pwr32crtl.exe X Added by the CRYPTER.A TROJAN!
pm32info pm32info.exe X Added by the CRYPTER.A TROJAN!
PmProxy PmProxy.exe ? Associated with Analog Devices "SoundMAX" audio chipset - often built-in to motherboards. What does it do and is it required?
pmr pmr.exe X Powerstrip foistware variant
PMTSHOOT pmtshoot.exe N MS tool for troubleshooting power management problems
PMXInit pmxinit.exe U Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma 
PNAgent PNAgent.exe N PhatNoise Music Manager - manages WMA, MP3, WAV, etc music files
Pnpchk Pnpchk.exe U Aztech Labs Sound 3 PnP driver
PNSetup PNSetup.exe U PopNot - pop-up killer
PNtask Services pntask.exe X Added by the LALA.C TROJAN!
Pocket Sheet Sync PSXLTRAY.EXE U Casio Pocket Sheet synchronization software
Poet Poet.exe X Added by the DOEP.A WORM!
point32 point32.exe U Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
POINTER point32.exe U Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
Points Manager points manager.exe N Altnet Points Manager - manages the new Kazaa Plus scheme for awarding you points if you share music files on your machine with others rather than simply getting files and not sharing their own. Start manually when required
POP PopSrv***.exe X PeopleonPage foistware, bundled with Grokster where *** are random digits
Pop-Up Smasher PopupSmasher.exe U Pop-Up Smasher - pop-up killer
Pop-Up_Blocker Popup.exe U A Tweak-XP component, blocks advertisement pop-up windows in Internet Explorer. Can be enabled/disabled via Tweak-XP -> Internet Tweaks
Pop-Up_Scanner Popupscn.exe U Panicware popup blocker
pop3trap.exe pop3trap.exe Y PC-Cillin 2000 antivirus software -> E-mail scanner
PopNot PopNot.exe U PopNot - pop-up killer
PopOops PopOops.exe U PopOops - pop-up killer
Popopen popopen.exe U PopOpen makes your windows spring open with animation effects
Poproxy POPROXY.EXE Y Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it
popsrv146 popsrv146.exe X PeopleOnPage online dating browser enhancement - also adware and privacy issues, see here. For removal instructions see here
PopSubtract PopSub.exe U PopSubtract - pop-up killer
Popup Ad Filter PopFilter.exe U Popup Ad Filter - pop-up killer
Popup Defender PD.exe U Popup Defender - pop-up killer
PopupEliminator Popup Eliminator.exe U Popup Eliminator - pop-up killer
PopUpKiller PopUpKiller.exe U PopUpKiller - pop-up killer
PopUpStopperCompanion PSComp.exe U PopupStopper Companion popup blocker
PopUpStopperFreeEdition PSFREE.EXE U Panicware's Pop-Up Stopper - free limited features version
PopUpStopperProfessional PopUpStopperProfessional.exe U Panicware's Pop-Up Stopper - paid for version
PopupVanish PopupVanish.exe U Pop-up blocker
PopUpWasher PopUpWasher.exe U PopUpWasher pop-up killer
PopUpWatch PopUpWatch.exe U Part of BPS Trace Remover - made by the folks who "developed" BPS Spyware Remover which reportedly uses an old, "borrowed" SpyBot database. Read this and this. Do not support these guys!
Post-It(r) Software Psnotes.exe N Pop-up "yellow" notes on screen. Available via Start -> Programs
POW! pow.exe U Pop-up killer
Power Scan powerscan.exe X Foistware by Integrated Search Technologies - the people behind the ISTbar parasite
PowerBar Powerbar.exe N Part of CyberLink's PowerDVD software. Not sure what exactly it does, but not required in startup
PowerChute Pwrchute.exe Y "During a power outage, if you're not available to save your files & close down Windows....PowerChute will do that for you. PowerChute will save your application files, close your applications and shut down your computer just like you would...otherwise, the APC UPS (Uninterruptible Power Supply) unit would go to battery until it wore down, then your computer would shutoff"
PowerDOCSAPIHost papihost.exe U Hummingbird PowerDOCS - "delivers powerful enterprise document management functionality via a tightly integrated Microsoft WinNT/98/2K environment"
PowerDVD PowerDVD.exe N Launches Cyberlink's PowerDVD software and creates a system tray icon. If enabled, PowerDVD will open automatically when a DVD movie is inserted. Launch manually
PowerKey PowerKey.exe U Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610
PowerPanel POWPANEL.EXE Y Power management utility on notebooks/laptops - automatically switches modes when running on battery
PowerPro powerpro.exe U Part of the power professional program that loads the floating menu bar. Can be accessed from Start -> Programs, but I'd leave it alone if you use this program
PowerProf PowerProf.exe X Added by the LOREX.B TROJAN!
PowerQuest Startup Utility PQINIT.EXE N From a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems"
PowerReg Scheduler PowerReg Scheduler.exe N PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
PowerReg SchedulerV2 PowerReg SchedulerV2.exe N PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
PowerReg SchedulerV3 PowerReg SchedulerV3.exe N PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others
POWERR~1 POWERR~1.exe ? Power monitoring?
PowerS PowerS.exe ? ProlinkTest for either their AGP graphics card or TV/FM capture card. Is it required?
PowerStrip powerstrip.exe N PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
PowerStrip PSTRIP.EXE N PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings
PowerTools Tray Icon pttray.exe U PowerTools - add-on for AOL
Powertweak PT2.EXE U "Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Use predefined settings' is enabled in the programs options
Powertweak PTCTRL.EXE U "Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured." This item is added to startup if 'Configure system at logon' is enabled in the programs options
PP2000 Instaupdate PPInupdt.exe U Protector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually
PP2000 Real Time Scan PPVstop.exe Y Protector Plus anti-virus software - real time scanner
PP2000 Taskbar Control PPTbc.exe Y Protector Plus anti-virus software - system tray access
PPControl PPControl.exe U PestPatrol Control Terminal - launches PestPatrol features such as PPMemCheck and CookiePatrol
PPMemCheck ppmemcheck.exe U PPMemCheck - "extends PestPatrol's power so that the most dangerous Pests -- those that are about to execute -- are found, terminated, and cleaned from a user's system"
PProTray pprotray.exe N Part of the power professional program. Loads the System Tray control
pptd40nt pptd40nt.exe N "PaperPort" software associated with scanners
PPUpdate ppupdater.exe U PPUpdater - "is the update program that ships with PestPatrol. It is able to update licensed and evaluation versions, and presents a visual display of what it is doing". Run manually unless you think you'll forget to check for updates on a regular basis
PPWWebCap PPWebCap.exe N "PaperPort" software associated with scanners
pqhelper pqhelper.exe X Searchcentrix hijacker
PractiSearch PSearch.exe U PractiSearch web search software
Prayer PTW.EXE U Islamic Adhan program (call fpr daily prayers)
prdtect prdtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
PreAnnotate PreAnntt.exe ? Genius Wizard Pen Tablet driver related. Is it required?
Precision Time Clock Checker PrecisionTime.exe N Precision Time 2.0. Checks your computer clock time against the Naval Observatory or some other source to assure accurate time
Preload Preload.exe Y Millenium Multi-Function Keyboard driver
Premeter prmt.exe X NetRatings software by Opistat . "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
prgtect prgtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prxtect.exe, prdtect.exe and so forth!
Primsta Primsta.exe ? Linksys Wireless CompactFlash Card driver related. Is it required?
Print Master Event Reminder PMremind.exe N Print Master Gold - calander feature that pops up reminders, such as birthdays
Print Screen Deluxe psdeluxe.exe N Utility allows "Print Scrn" or "Print Screen" key to capture, print or save the current window
Printkey2000 printkey2000.exe N Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required
printnow printnow.exe N PrintNow - a utility that primarily allows "Print Srceen" or "Alt+Print Screen" screenshots to be sent directly to a printer
PrinTray Printray.exe N Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray
Printscreen 95 PRT95MIN.EXE N Printscreen 95 - utility to capture, print or save the current window
PRISMSTA.EXE PRISMSTA.EXE U Creates a system tray icon for accessing information about Intersil Prism Wireless Settings. Intersil silicon is used by Trendware/Trendnet for example
Privacy Eraser Pro PrivacyEraser.exe N Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities
PrivacyScanner pscan.exe X Privacy Champion, a stealth installed 'Privacy Scanner'. It purportedly scans your PC for links to porn websites, and then offers to "clean" them. Produces loads of False Positives as goad to purchase
Privoxy privoxy.exe U Privoxy - web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk
PrizeSurfer prizesurfer.exe X "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
prjtect prjtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prktect prktect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prltect prltect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prmt prmt.exe X NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!
prmtect prmtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prxtect.exe, prdtect.exe and so forth!
PrnSys Executable PrnSys.exe U Print screen utility bundled with some HP printer software - not required, but your choice if you like that feature
Pro PCL Status Monitor PENGSS.EXE U Xerox printer/fax/copier status monitor (PCL = printer control language)
ProArt ProArt.exe ? ??
ProcessGovernor processgovernor.exe U Process Supervisor "is a technology designed to automatically configure and manage processes on one or more computers for the goal of maintaining system stability and responsiveness, restricting executables from running, and logging of program executions"
ProcessSupervisorGUI ProcessSupervisor.exe U Process Supervisor "is a technology designed to automatically configure and manage processes on one or more computers for the goal of maintaining system stability and responsiveness, restricting executables from running, and logging of program executions"
procmon procmon.exe X Added by the BIONET.40A TROJAN!
ProdikeysAutorun Prodload.exe N Creative Prodikeys software. "an interactive music entertainment device which not only functions as a full-featured, ergonomic “QWERTY” keyboard but also comes equipped with 37 touch-sensitive music keys and accessible music controls for endless entertainment at your desktop. Coupled with the Sound Blaster audio card, you can explore a wide array of realistic instrument sounds and have non-stop fun making music right at your desktop"
ProDsl ProDsl.exe N Intel Pro/DSL 2100 modem connection manager. Available via Start -> Programs
Profile Profile.vbs X Added by the WHITEHO VIRUS or TRAPPY WORM!
Profiler Profiler.exe N Enables the "Profiler" to be launched from a System Tray icon for Saitek's game controllers. Available via Start -> Programs
Program File Progmon.exe X Added by the PEEPER TROJAN!
projselector projselector.exe N Roxio Project Selector - can be started manually
Promon.exe promon.exe N System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
PromulGate PgMonitr.exe X Delfin Promulgate adware variant
PRONoMgr.exe PRONoMgr.exe N System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
PRONoMgrWired PRONoMgr.exe U Intel’s Pro 100 Ethernet card manager
Propel Accelerator PropelAC.exe U Propel Internet Accelerator
ProPort Startup ProPort.exe U Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving
Protection Protection.exe X Added by the FEBELNECK-A WORM!
PROXOMITRON PROXOMITRON.EXE N HTML proxy
PROXOMITRON PROXOM~1.EXE N HTML proxy
PRPCMonitor PRPCUI.exe U Intel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40%
prrtect prrtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prstect prstect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prtcct prtcct.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prttect prttect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prxtect.exe, prdtect.exe and so forth!
prutcct prutcct.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prutdct prutdct.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prutgct prutgct.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
pruthct pruthct.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prutict prutict.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth!
prvtect prvtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prdtect.exe, prmtect.exe and so forth!
prxtect prxtect.exe X Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prdtect.exe, prmtect.exe and so forth!
PS2 ps2.exe U Multimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost.
PSDrvCheck PSDrvCheck.exe Y Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled
PSFree PSFree.exe U Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
PSIMSVC PSIMSVC.exe Y Panda Titanium Antivirus
PSIWin2.3 Connection Server Psconsv.exe N Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start -> Programs
PsMFCard PsMFCard.exe U Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use
PSNotify psnotify.exe Y Pharos SignUp Vx - "PC reservation and management application that addresses the PC scheduling needs of public libraries and higher education labs and libraries"
PsPCCard PsPCCard.EXE Y Background Power Saving task found on Toshiba laptops and which handles turning Power Saving ON and OFF on any inserted PC Card (PCMCIA card). Only ever disable if you do not use any power saving or hibernation settings (ie: they are all OFF)
PspContr pspcontr.exe U Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver
PsSound PsSound.exe U On a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay
PSTORES PSTORES.EXE ? Part of Windows Services Protected Storage?
ptfb ptfb.exe N Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
ptrun32 ptrun32.exe U Parent Tools for AIM
Ptsnoop Ptsnoop.exe N These descriptions I've come across - all valid as far as I can see :- (1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it (2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed) Note: If using AOL and you disable this you may lose your connection or lock up (4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists (5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems (6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows"
pttrun pttrun.exe U Transmeta Crusoe processor related. Reduces application launch times and makes the computer "more responsive"
PtUDFApp PtUDFApp.exe N Sony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start -> Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar
Pure Networks Port Magic PortAOL.exe N Pure Networks Port Magic, as available in the latest version of the AOL® 9.0 Optimized SE software; automatically configures most in-home Internet gateways, improving access and performance for applications such as instant messaging, online gaming, and streaming music and video. See here
Purgative PURGATIVE100.EXE U AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack
Push Client pull.exe N Client software from Interwise that MS use for their webcasts
Push The Freakin' Button ptfb.exe N Push the Freakin' Button - "When a dialog causes irritation, you simply tell PTFB which button should be pressed, and it will handle the dialog in future"
PUSH6599 PUSH6599.EXE N Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software
PutA!! PutA!!.exe X Added by the OPASERV.L WORM!
PutAS! PutA!!.com X Added by the OPASERV.Z WORM!
PVR PVR.exe N Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card
Pwr32ctr Pwr32ctr.exe X Added by the GEMA TROJAN!
Pwr32ctrl Pwr32ctrl.exe X Added by the GEMA TROJAN!
Pwr32mgt Pwr32mgt.exe X Added by the GEMA TROJAN!
Pwroff Pwroff.exe X Added by the GEMA TROJAN!
Pwrsave Pwrsave.exe U Toshiba Power Saver utilities. Required on a laptop if you run of a battery and want to conserve power
Pwruplogin pulogin.exe ? ??
PwrupTweakMe PUPXPTWK.EXE U "Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows® NT4, 2000 and XP configuration to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want." Boot-up options won't work if disabled 
PWS Tray PwsTray.exe U Microsoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start -> Programs
p_981116 p_981116.exe N Win32 cabinet self extractor. More info here
Ray Process Killer Prkill.exe N Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead
RemoteControl PDVDServ.exe U Remote Control background application for CyberLink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one.

Note - Also associated with Roxio and will have this file path and command:

%programfiles%\Roxio\Roxio DVDMax Player\PDVDServ.exe
ReproPRD PrdUsb.exe U Thrustmaster Corporation Presets application - a game controller driver, presumably necessary for certain functions to work
Run POPFile in background perl.exe U POPFile - E-mail spam blocker
run= pcfix2k.exe N pcfix2k splash screen
run= ptlseq.cpl X PhoenixNet BIOS adware. See here
Rundll32.exe Proyecto1.exe X Added by the GRUEL WORM!
Scan Detector Pmxdetect.exe ? Associated with PrimaScan scanners. Is it required?
Smartalec pcaccel.exe U Smartalec PC Accelerator - system optimization utility
SmartPCXL pcaccel.exe U Smartalec PC Accelerator - system optimization utility
Super Popup Blocker popkill.exe U Saga Super Popup Blocker - pop-up stopper
Sysctrls procdll.exe X Added by the WEEDBOTZ.14 TROJAN!
System Initialization payload.dat X Added by the RANDEX.D WORM or ROXY or ROXY.B TROJANS!
System Mechanic Popup Stopper Popupstopper.exe U Iolo "System Mechanic" popup stopper
SystemReg PROCES.EXE ? ??
System_Messages pprsen.exe U TerminatorX - "offers an easy and effective method of stopping users running predetermined file sharing programs like KaZaA, messenger programs, chat rooms and the like"
taskmgr.exe paint.exe X Added by a variant of the AGENT.AH downloader TROJAN!
taskmgr.exe paintms.exe X Added by a variant of the AGENT.AH TROJAN!
Tiny Personal Firewall persfw.exe Y Tiny Personal Firewall
tmax pupdate.exe X Adware pop-up generator
ToPassSrv Pktopass.exe ? Related to Caere Pagekeeper scanning software (now taken over by Scansoft), Disabling is known to cause problems
ToshibaPinger pinger.exe N Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification.
VAIO Recovery PartSeal.exe U System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere
windows auto update penis32.exe X Added by the BLASTER (or MSBLAST.A) WORM!
Winux Piriax Service PH32.EXE X Added by the RANDEX.G WORM!
WinXP plugin1.exe X Added by the Downloader-JW TROJAN!
Xecuter.bat psexec.bat X Added by the BOOHOO WORM!
YahooStock Prmvr.exe X Adtomi adware
\Pribi.exe Pribi.exe X FastFind parasite variant
PsnLite PsnLite.exe U Post-it® Software Notes - Lite. "You can use this digital version of the famous canary yellow® note to remind you to do something, to capture an idea or to organize all those important phone numbers -- all from your computer desktop."
process.exe process.exe X Added by Troj/Banker-JJ Found in the %WINDOWS% directory
statload pgjd83sa.exe X Added by the Backdoor.Sdbot.AO Infection!
penis.exe penis.exe X Added by the W32.Cissi.W backdoor! Found in the Windows system directory and adds a copy to the All Users startup group.
Vekio Startups Pnksvc32.exe X Added by the W32/Agobot-PZ Backdoor Trojan/Worm! Found in the Windows system folder.
Preview AdService PrevAdServ.exe X Ad delivery programs Found C:\Program Files\Preview AdService
MSPluginSrvc p3.exe X Added by W32/Rbot-WV, a WORM!
PerformCl perfcl.exe X Downloads and installs other adware onto your computer.
PopAdStop popadstop.exe X PopAdStop claims to be an ad blocker, but instead sends advertisements to other computers on your network via the Net Send command.
PcSync PCsync.exe X Added by the W32/Rbot-XJ WORM/IRC backdoor, the file will be hidden with system attributes. Unauthorised remote access is enabled by contact with an pre-determined IRC channel.
[not used] penis.exe X Added by the W32/Cissi-F WORM, the system .ini field {boot} will be modiified and remote access made available to an attacker(s) using an IRC channel(s).
PingTimeout Institution pingchek.exe X A variant of the Sbot WORM/IRC backdoor adds this file to run continuously and provide unauthorised access to the computer.
PDASCAN pdascan.exe X Added by the W32/Agobot-QY WORM/IRC backdoor, it will modify the HOSTS file, terminate processes, and allow an attacker to enact numerous other destructive actions.
PACSPTISVR Pacsptisvr.exe Y This service is related to Sony's OpenMG DRM software.
IntelliPoint point32.exe Y Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features.
privacykeyboard PrivacyKeyboard.exe U PrivacyKeyboard is a product "that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices, both known and unknown, currently in use or presently being developed worldwide."
MSNPluginSrvcs p6.exe X Added by the RBOT-VJ worm with backdoor functionality via IRC.
[different names] PasswdMon.exe X TROJAN! - part of Wareout, malware masquerading as a spyware and dialer remover, see here
Panda Antispam Server Service PasSrv.exe U AntiSpam software, part of Panda Platinum Internet Security
PPPOEO pingppac.exe X Added by the SPYBOT.KHC WORM!
Program Neighborhood Agent pnagent.exe U Citrix Program Neighborhood Agent
Telechips,Mass patch.exe U Removable disk driver for the Muro MP3 player
Windows Service prvdi.exe X Malware, recognized by Kaspersky antivirus as Trojan-Dropper.Win32.Small.rd.
PaciSoft pacis.exe X Added by a variant of the SMALL.ABD downloader TROJAN!
Windows System Configuration Passcfg16.exe X Added by the DOMWIS-E TROJAN!
Windows Service pd7.exe X Added by the TROJ_SMALL.VZ TROJAN!
picsvr picsvr.exe X Unidentified adware
Microsoft PSTCP32 Data pstcp32.exe X Added by a variant of the WIN32.RBOT WORM!
Service Drivers PC.EXE X Added by the W32/Sdbot-WK worm/backdoor!
profiler prof.exe X Added by the Troj/Zapchas-G TROJAN, one of two files run by a registry key it creates. The other is liteout.exe.
[not used] primary.exe X Added by the Troj/Sharp-G backdoor trojan.
Packet001 packet001.exe X Added by Backdoor.Asniffer.
notepad2.exe popuper.exe X Added by the Troj/AdClick-AO or Troj/Puper-E trojans!
Popup Blocker System PopUpBlocker.exe X Added by a variant of the WIN32.RBOT WORM!
Pollon pollone.exe X Added by the SPYBOT.FW WORM!
PayTime paytime.exe X Paytime is a Internet Explorer hijacker that changes your home page and search page to use hxxp://http://81.222.131.49/.
PROCESS SESSION MANAGER PIDSERV.EXE X Added by the W32/Rbot-AV trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands.
Windows Media Player Update PACKARD.EXE X Added by the W32/Rbot-ET trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This infection also creates a hosts file to block your accessing of security websites as well as the termination of antivirus programs.
Task Manager prcview.exe X Added by the W32/Agobot-RT. When started this infection connects to an IRC server where it waits for remote commands. It can log key strokes, list or terminate services and processes, harvest email addresses, flood a given IP address, locate product keys or execute arbitrary commands.
NortorUpdate patch802.exe X Added by the W32/Patco-A worm.
Update patch802.exe X Added by the W32/Patco-A worm.
Anskya PYSKY.NET.exe X Added by the Troj/Dloader-MW. While running as a background process, this trojan attempts to download and run a file and reduce the Windows firewall security.
Spool32 pool32.exe X Added by the Troj/Assasin-F to terminate security related processes and log keystrokes. It also enables backdoor access to a remote user.
ProjectX ProjectX.exe X Added by the W32/Cisum-A worm.
PornoTop PTOP.EXE X Added by the Troj/Delf-RX backdoor trojan.
PSoft1 psoft1.exe X PacerD_Media/Pacimedia.com adware installer
PaciSoft pacis.exe X PacerD_Media/Pacimedia.com adware installer
p2p networking P2P N Peer to Peer (P2P) sharing of files on the internet
prismsvr.exe PRISMSVR.EXE ? Siemens Gigaset USB Adapter software related. Is it required?
process.exe process.exe X Added by the PWSTEAL.BANCOS.P TROJAN!
profileamp Profile8 U WinAmp media player add-on; "will replace %s with the current Winamp song and %m with current memory stats every song change. Change the color of your links, have a count down to a certain date. Works for all versions of Winamp."
prutlct prutlct.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
prutqct prutqct.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
pruttct pruttct.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
ptech ptech.exe X Related to "Prutect" malware from e2Give
pwindicator pwic.exe N ParaWin XP - International Language Software for Windows XP/NT/2000
winxphome plugin2.exe X Added by the malicious VBS_INOR.T script!
data restore service prq8.exe X Added by the W32.Kelvir.AI WORM!
p2p networking2 P2P Networking2.exe X P2P Networking2.exe is an advertising program by Joltid. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.
pcanywhere agent pcamgt.exe U Part of pcAnywhere 9.0 or later. This process listens for incoming PC Anywhere connections if your PC is configured as a PC Anywhere host.
windows generic proc procmsg.exe X Added by the W32.ALLIM.B WORM!
winnt DNS ident pidchk32.exe X Added by the W32/Rbot-ACY worm. When started this infection connects to a remote IRC server where it waits for commands to execute.
data restore service prq8.exe X Added by the W32.Kelvir.AI WORM!
prutpct prutpct.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
p2pnetwork p2pnetwork.exe X Added by the W32/Rbot-ACZ worm. When started this infection will connect to a remote IRC server where it will wait for commands.
panda cleaner pavdr.exe Y Panda Antivirus related - possibly Panda ActiveScan
windows service pd14.exe X Adware, detected by TDS-3 as "TrojanDownloader.Win32.Delf.dg"
Winux Piriax Service PIRIAX32.EXE X Added by the W32/Randex-X worm. When started, this infection connects to an IRC server where it waits for remote commands to execute.
Microsoft Mouse Driver Ver 3.0 pointer32.exe X Added by the W32/Randex-AA worm. When started, this infection connects to an IRC server where it waits for remote commands to execute.
pwned pwned.exe X Added by the W32/Randex-Z worm. When started, this infection connects to an IRC server where it waits for remote commands to execute.
PLUGED.EXE PLUGED.EXE X Added by the W32/Randon-AC worm. This infection, when started, connects to an IRC server using a provided MIRC client.
microoft timing pupdate.exe X Added by a variant of the WIN32.RBOT WORM!
asmw soft popups burner popups burner.exe U Popup blocker, part of Asmw Soft PC_Optimizer
kodak picture easy *.* batch transfer PezDownload.exe N Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* represents the version
pbagent pbagent.exe U Probot keystroke logger/monitoring program - remove unless you installed it yourself!
pcqmqgn.exe pcqmqgn.exe ? ??
pphidpad pphidpad.exe U PenPower Chinese handwriting recognition software
proxyway proxyway.exe U ProxyWay anonymous proxy surfing software
Win Patch patch.exe X Added by the W32/SdBot-GL worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute.
ps1 ps1.exe X PacerD_Media/Pacimedia.com adware component
Configuration L0ader picorulez.exe X Added by the W32/SdBot-IN worm. When started this infection connects to an IRC server where it waits for remote commands.
Peer Manager peere32.exe X Added by the W32/Sdbot-JX worm. When started this infection connects to an IRC server where it waits for remote commands.
msgmsgs peremption.exe X Added by the W32/Sdbot-KU worm. When started this infection connects to an IRC server where it waits for remote commands.
PrismXL PRISMXL.SYS U The PrismXL service lets the Client deploy Tasks on a target computer regardless of the current user.s permissions.
Virtual NIC Service PackethSvc.exe ? Related to America Online, Inc.
psaload32 psaload32.exe X Added by the W32/Rbot-ADL
ControlPanel popcorn64.exe rundll.dll,LoadMouseProfile X Added by the Troj/Dloader-OI downloader trojan. When removing this infection, you only want to remove the popcorn64.exe file.
[2 words from a list] perfrptb.exe X Added by the Troj/PPdoor-I backdoor/proxy trojan.
p2pnetworking p2pnetworking.exe X Added by the W32/Rbot-AFL worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands.
Microsoft Windows DLL Services Configuration proxy.exe X Added by the W32/Sdbot-ZL worm. When started, this infection connects to a remote IRC server and waits for commands to execute.
ControlPanel popcorn.exe X Added by the Troj/Bizves-B downloader trojan.
psguard PSGuard.exe X Another smitfraud variant.
karen\'s once-a-day ii.lnk PTOAD.exe Y Karen's_Once_a_Day_II
000 pit.exe U Added by the Spyware.PrivateEye surveillance software. If you did not install this software, then uninstall it immediately.
Xtrem parental control pcx.exe U Added by the Spyware.ParentXtreme surveillance software. If you did not install this software, then uninstall it immediately.
POP PopSrv225.exe X Added by the Spyware.Apropos spyware.
PopeSvr PopeSvr.exe X Added by the Troj/LegMir-AJ keylogging trojan.
Microsoft Windows DLL Services Configuration poker.exe X Added by the W32/Sdbot-ZY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
psof1 PSof1.exe X PacerD_Media/Pacimedia.com adware installer
PTRUN32 ptr32w.exe U Added by the Spyware.ParentTools surveillance software. Uninstall this software if it was not installed by yourself.
Microsoft Windows DLL Services Configuration poker3.exe X Added by the W32/Sdbot-AAH worm. When started, this infections connects to a remote IRC server where it waits for commands to execute.
PCWatch pcwatch.exe U Added by the Spyware.PCWatch surveillance software. Uninstall this software if you did not install it yourself.
[blank] pathex.exe X Added by the Troj/Mkmoose-A trojan.
blocker system611 monitoring PopUpBlocker611.exe X Added by the RBOT.BLJ WORM!
kym control settings phqghum.exe X Added by the RBOT.BQD WORM!
microsoft update service phqghum.exe X Added by a variant of the WIN32.RBOT WORM!
popup blocker system326a monitoring PopUpBlocker6a.exe X Added by the RBOT.AUH WORM!
popup blocker system8 monitoring PopUpBlocker8.exe X Added by a variant of the WIN32.RBOT WORM!
prositefinder prositefinder.exe X Adware by 180Solutions
provan security psecure.exe X Added by the RBOT.BRV WORM!
prutsct prutsct.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
vcxd settings phqg.EXE X Added by the RBOT.BRF WORM!
view point drivers phqghum.exe X Added by the RBOT.BRX WORM!
win server updt pxckdla.exe X IEPlugin adware component
pathname pathname.exe X Added by the BACKDOOR.IRCCONTACT TROJAN!
precisiontime PrecisionTime.exe X PrecisionTime - clock synchronizing software containg spyware by Claria/GAIN
ControlPanel popcorn72.exe X Added by the Troj/Dloader-RA Trojan.
PeerGuardian pg2.exe N PeerGuardian 2 is an IP blocker for Windows. Used to protect privacy on P2P networks by blocking IP addresses specified in blocklists. Features support for multiple lists, a list editor, automatic blocklist updates, and blocking all of IPv4 (TCP, UDP, ICMP, etc).
softickppp PPPGate.exe U Softick_PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer.
lidpolicy pwrschem.exe U A utility for configuring certain HP notebook models to enter Standby mode when the lid is closed only when running on battery.
ppcrunonce PPCRunOnce.exe U Related to PeoplePC ISP software, may display advertising, see here.
prqtect prqtect.exe X "Prutect" malware from e2Give - attempts to tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. - NOTE: routinely uses alternative file names like prdtect.exe, prtcct.exe and so forth!
sureshotpopupkiller pusak.exe U Stop-the-Pop-Up popup blocker
system service62 pokapoka62.exe X Adware. EliteBarToolBar Program. For more information Click_Here. This file will not be visible in normal mode as it uses rootkit technology to hide itself. Reboot into safe mode to delete it.
systemservice pokapoka62.exe X Adware. EliteBarToolBar Program. For more information Click_Here. This file will not be visible in normal mode as it uses rootkit technology to hide itself. Reboot into safe mode to delete it.
trojanshield protector Port.exe U TrojanShield anti-hacker/anti-trojan software
ProtectedStorage protstrg.dll X Added by the Backdoor.Fuwudoor backdoor.
Interlinking Memory Support param32.dll X Added by the Troj/Warspy-D Trojan. This will hijack Internet Explorer to the following domains: hotoffers.info and newgenlook.info among others.
Windows PNP Server pnpsrv.exe X Added by the W32/Rbot-AKM worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
WINDOWS SYSTEM per.exe X Added by the W32/Zotob-C worm.
PC-cillin PersonalFirewall PCCPFW.exe Y Trend Micro's PC-Cilling Personal Firewall.
ptssvc PTSsvc.exe Y Kodak's picture transfer service is involved in the task of the transferring pictures from camera when it is connected to the PC.
intellectual_property PRODUCT.exe X Added by the Troj/Feutel-R Trojan.
pcmmrealtime pcmm.exe U PC MightyMax - diagnostic program that identifies and fixes problems. However, some users report it does the opposite and messes up their systems (see here) and they also have problems removing it (see here)
web drivers for win32 phqgh.exe X Added by a variant of the WIN32.RBOT WORM!
view point drivers for win32 phqghu.exe X Added by a variant of the WIN32.RBOT WORM!
local internet web drivers for win32 phqghume.exe X Added by a variant of the WIN32.RBOT WORM!
mspwr pupxpman.exe U Related to Ashampoo's PowerUp_XP
optional web drivers for win32 phqghume.exe X Added by a variant of the WIN32.RBOT WORM!
plook plook.exe X Affiliatetarget.com adware
pv92tray PV92Tray.exe U PCtel HSP V.92 modem Configuration Utility
pvuninst1 PVUnInst1.exe U Privacy_View is privacy software that ensures that all your private computer files, photos, documents, and websites remain secure from prying eyes.
system service61 pokapoka61.exe X EliteBar adware component
system service63 pokapoka63.exe X EliteBar adware component
PK Guard pkguard32.exe X Added by the W32.Guapim instant messenger worm.
Performance Logs Perfhmon.exe X Added by the W32/Codbot-W worm.
System Service62 pokapoka63.exe X EliteBar adware component
pshower pshwr.exe X SafeSurfing adware variant
tse_plutil PLBkMon.exe U Prolific USB Flash Disk Log On Application
Purgatory Purga.exe X Added by the W32/Purgory-B worm that spreads via the Kazaa file sharing network.
PictureTaker PCTKRNT.SYS U Part of LANovation's PictureTaker Enterprise Edition. This lets administrators deploy software update package to network PCs.
PMT personalmoneytree.exe N According to the web site Personal_Money_Tree is an automatic cash rebate program. Note: Not recommended.
Windows Virus Control plou.exe X Added by the W32/Sdbot-ACZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
PnP Driver playboy.exe X Added by the W32/Forbot-FR worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute.
System service66 pokapoka66.exe X EliteBar adware component
martini pinmart.exe X Added by a variant of the W32/SDBOT WORM!
pamela.exe pamela.exe U Pamela
pantera pantera.exe X Added by the SDBOT.AYN WORM!
plucksvr PluckUpdater.exe N Pluck Toolbar updater
protect protect.scr X Added by the Troj/Dloader-TQ
system service65 pokapoka65.exe X EliteBar adware component
system service67 pokapoka67.exe X EliteBar adware component
system service68 pokapoka68.exe X EliteBar adware component
system service69 pokapoka69.exe X EliteBar adware component
pmcqt pmcqt.exe X Added by the Troj/Dluca-V Trojan.
Playboy playavi.exe X Added by the PWSteal.Gamanlock password-stealing Trojan.
Newman playavi.exe X Added by the Troj/Lineage-AT password-stealing Trojan for the online game Lineage.
promptcast PromptCast.exe U Auto-download for viewing short films and movie trailers for Surveys - Membership to site is required and it 'background'-downloads the needed clips for the survey.
system service70 pokapoka70.exe X EliteBar adware component
Windows Packet Driver packet.exe X Added by the Troj/Hwbot-C Trojan.
system service71 pokapoka71.exe X EliteBar adware component
system service72 pokapoka72.exe X EliteBar adware component
system service73 pokapoka73.exe X EliteBar adware component
[not used] Phantom.exe X Added by the W32/Mytob-FT mass-mailing worm and IRC backdoor.
PIC SYSTEM picx.exe X Added by the W32/Mytob-EX worm. This infection will connect to a remote IRC server and wait for commands to be executed on the infected computer.
USB2Check PCLECoInst.dll N Pinnacle Systems CoInstaller. Used by the pinnacle 700-USB device.
MSN Messenger PIC1324.exe X Added by the W32.Annoying.Worm msn messenger Worm.
system service76 pokapoka76.exe X EliteBar adware component
system service74 pokapoka74.exe X EliteBar adware component
system service75 pokapoka75.exe X EliteBar adware component
system service77 pokapoka77.exe X EliteBar adware component
panda preventium+ service PREVSRV.EXE Y Panda_Titanium Antivirus
pavkre9x pavkre9x.exe Y Panda_Titanium Antivirus
pavprot9 Pavprot9.exe Y Panda_Titanium Antivirus
system service78 pokapoka78.exe X EliteBar adware component
system service79 pokapoka79.exe X EliteBar adware component
altnet points manager points manager.exe N Altnet TopSearch adware
psguard spyware remover PSGuard.exe X Bogus spyware remover - also known as the SmitFraud alias FAKEALE-C TROJAN!
ptiupbmd ptipbm.dll ? Installed with the miniport drivers for Promise hard drive controllers in both RAID and non-RAID installations. If used is it required?
Client Agent photes.exe X Added by the Troj/PPdoor-P Trojan.
IE6 porn.pif X Added by the W32/Rbot-ATF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
Panda Software Intrenet panda.pif X Added by the W32/Rbot-ATZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
Personal Firewall PFWall.exe Y Hotbrick Personal Firewall
P.S.Guard PSGuard.exe X Smitfraud variant.
PIPE SYSTEM pipe.exe X Added by the W32/Mytob-FF worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
pumcfgp proxycfg.exe U GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser
mspwr pwrupst.exe U Ashampoo PowerUp_XP is a tool for fine-tuning your Windows® NT4, 2000, 2003 Server and XP configuration.
PowerChute Pwrchute.exe X Added by the Troj/Lazar-A backdoor Trojan.
pcryptv3 pcryptv3.exe X Added by the W32/Tilebot-AS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
winbar.pif packe.pif X Added by the W32/Rbot-AVI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
polo.exe polo.exe X Added by the Troj/Agent-PE Trojan.
PClK PClK.exe X Added by the Troj/LegMir-BL password-stealing Trojan.
Microsoft Visual Studio plscdksxg.exe X Added by the W32/Rbot-AWV worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
MStask p2sys.dll X Added by the Troj/LdPinch-UE Trojan.
KernelFaultCheck ptool32.exe X Added by the Troj/LegMir-BN Trojan.
icrosoft Visual plscx.exe X Added by the W32/Rbot-AYO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.
NETVISIONPasse-partout Passe-partout.exe X Added by the Dial/DialCar-M premium rate dialler.
prevxone PXConsole.exe Y Prevx intrusion prevention software
pduip6000dtskbr PDUiP6000DTskbr.exe U Related to Canon iP6000D printer
pathnvidiatv patchnvidiaTVout.exe ? Appears to be related to Nvidia Gigabyte Video card.
pduip6000dmon PDUiP6000DMon.exe U Related to Canon iP6000D printer
uninstallhl PreUninstallHL.exe X LinkReplacer/FFinder adware component
uninstallql PreUninstallQL.exe X LinkReplacer/FFinder adware component
(8E3526E3-F160-437B-9095-46A011877CBE) pKerme12.dll X Added by the Troj/Ermeto-A Trojan.
<random CLSID> PREFX.DLL X Added by the TROJ_DROPPER.EI Trojan dropper.
explorer.exe perfmnt.exe X Added by the Troj/Agent-FJ Trojan.
puac v2.0.7 Puac.exe U "Peter's_Ultimate_Alarm_Clock"
Winsock2 driver PAC.EXE X Added by the W32/Spybot-ET worm and IRC backdoor.
ControlPanel priva.exe X Added by the Troj/Clicker-AZ Trojan.
printpnp PRINTPNP.DLL X Added by the Trojan.Goldun.I password-stealing Trojan for online banks. This infection utilizes the EPSONSYS.SYS rootkit to hide itself and its components.
plug plug.exe X Added by the Troj/Dloadr-ACX Trojan downloader.
[not used] PAVWAIT.DLL Y Part of Panda Antivirus.
Performance True Type Fonts perfont.exe X Identified as a Trojan.downloader.
printpn2 printpn2.dll X Identified as Trojan-Spy.Win32.Goldun.gs.
DRam prosessor plsccd.exe X Identified as a variant of Backdoor.Win32.Rbot.gen worm and IRC backdoor.
controlpanel private.exe X Reported by Norman Virus Control as W32/Downloader.
popup buster+ popupbuster.exe N PopUp Buster
run_pbnext PBNext.exe Y PBNext is virtual phone system which offers the same functionality as expensive PBX hardware
[Various Names] ParisM.exe X Part of the Wareout infection as described here.
[Various Names] progmen.exe X Part of the Wareout infection as described here.
[Various Names] prgsys0984.exe X Part of the Wareout infection as described here.
[Various Names] Preliminary.exe X Part of the Wareout infection as described here.
[Various Names] panel_its.exe X Part of the Wareout infection as described here.
[Various Names] pizda.exe X Part of the Wareout infection as described here.
[Various Names] prcmon.exe X Part of the Wareout infection as described here.
[Various Names] PrcIdle.exe X Part of the Wareout infection as described here.
[Various Names] powerdll.exe X Part of the Wareout infection as described here.
Sy21dsgate Personal Firewall playboy1.exe X Added by the W32/Rbot-BMO worm and IRC backdoor.
pnezhftx pnezhftx.sys X Added by the Troj/PcClien-AH Trojan. This infection also creates the file C:\Windows\pnezhftx.dll.
pcboost PcBoost.exe U PCBoost from PGWARE, LLC increases computer performance by allocating higher portions of CPU power to active applications and games.
pctavapp PCTAV.exe Y Related to PC_TOOLS Antivirus software.
pluginX pluginX.exe X Added by the Troj/Dloadr-KN Trojan.
Perfhmon Perfhmon.exe X Added by the Troj/Banklis-A Trojan.
pcvp pcvp.exe X Added by the Troj/Ranck-DT proxy Trojan.
StartKey pligde.exe X Added by the Backdoor.Bifrose.E Trojan backdoor.
1290a33c-85f5-4164-a1be-7dd299d4986a PBKScheduler.exe U Scheduler for CyberLink PowerBackup - archiving/backup utility
MagicKeyboard PreMKBD.exe U Related to Samsung laptops. Provides ability to program keys to perform specific functions.
pbkscheduler PBKScheduler.exe U Scheduler for CyberLink PowerBackup - archiving/backup utility
pdservice.exe pdservice.exe U Related to Utimaco Safeware Easy. Your electronic safe for protecting confidential data.
mspwr PuXpMan2.exe U Related to Ashampoo Magic Defrag Utility.
perfmon perfmon.vbs U Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices.
pptp32 pptp32.dll X Added by the Troj/Haxdoor-BK backdoor Trojan. This infection is hidden using the rootkit files c:\windows\system32\pptp64.sys and c:\windows\system32\pptp32.sys.
pptp32 pptp64.sys X Added by the Troj/Haxdor-Fam rootkit.
pptp64 pptp64.sys X Added by the Troj/Haxdor-Fam rootkit.
pobres pob2res.exe X Added by the Troj/DwnLdr-AYA Trojan.
Microsoft Plug and Play plugnplay32.exe X Added by the W32/Mytob-HF mass-mailing worm and IRC backdoor.
PictureViewer PictureViewer.exe X Added by the PWSteal.Marlap.C password-stealer..
polymorphreg polymorph.dll X Added by the Troj/Small-BNO backdoor Trojan.
PO system service poserv.exe X Added by the W32/Porex-C .exe virus.
pst pio12.dll X Added by the Troj/Dloadr-UZ Trojan downloader.
plgwiz32 plgwiz32.dll X Added by the Troj/Opnis-D Trojan.
PViever pviever.exe X Added by the Troj/DwnLdr-BYD Trojan.
USB prw76sks prw76sks.sys X Rootkit component of Backdoor.Haxdoor.L.
prwsks prwsks.dll X Added by the Backdoor.Haxdoor.L backdoor Trojan. This infection uses the rootkit prw76sks.sys to hide itself.
DhcpCep PYJJKIME.exe X Added by the Troj/Agent-BXQ downloading Trojan.
PYJJIME PYJJKIME.exe X Added by the Troj/Agent-BXQ downloading Trojan.
{aeabe83d-672b-4717-9154-45bd6283c610} posem.dll X A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.
MMX2 virtualization service pptp24.sys X Added as variant of the Troj/Haxdor-Gen family of rootkits.
pptp16 pptp16.dll X Added by the Troj/Haxdoor-HM Trojan. This infection utilizes the rootkit pptp24.sys to hide parts of this infection.
{93ac7c30-3878-4eaa-9420-7977285df5b1} pmnqguh.dll X A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar and download and install the SpywareQuake program.
USB p76xxsks p76xxsks.sys X Added by a variant of the Troj/Haxdor-Gen rootkit.
psksds psksds.dll X Added by a variant of the Troj/Haxdoor Trojan. This infection utilizes the p76xxsks.sys rootkit to hide itself.
PestTrap PestTrap.exe X Added by the rogue-antispyware application Pest Trap. This application is usually bundled with Trojans that change your desktop to a security warning, change your Internet Explorer homepage, and issue fake taskbar alerts as a scare tactics in order to have you purchase the commercial version of the software.
guardian pc security tools Pfft.exe U Related to PeerGuardian PC Security Tools. An Open Source Program. Note: located in C:\Program Files\Boomerang Software\Guardian PC Security Tools\
ibm_pwmgr pwmgr.exe Y Related to IBM_Password_Manager Note: located in C:\Program Files\IBM\Password Manager\
nexusserver PNXSERVR.exe U Related to Canopus Co., Ltd. Canopus has the solution to help you create, purpose and deliver great video. Note: located in C:\Program Files\Common Files\Canopus Shared\ProCoder 2\Kernel\
localproxy proxy4free.exe U Related to ProxyTools ProxyTools is a package of Perl network utilities designed mainly to assist those whose Internet access is censored, unreliable, or otherwise damaged. Uncensored access is provided to any outside service required (Usenet News, Web browsing, IRC, Socks etc.). Setup requires installation of Perl and some modules. Note: located in C:\Program Files\LocalProxy\
pcpitstoperaser PCPitStopErase.exe U Related to PCPitStop_Eraser privacy scanner that can help you avoid identity theft and just plain nosey people that try to find out what you've been doing. Note: located in C:\Program Files\PCPitstop\Erase\
pcthrust PcThrust.exe U Related to PCThrust from SwiftDog. PCThrust increases computer performance by allocating higher portions of CPU power to active applications and games. Note: located in C:\Program Files\PcThrust\
pecarlin PECarlin.exe X Added by Trojan_Downloader TROJAN! Note: located in C:\Program Files\PECarlin\
pop06ap pop06ap2.exe X Added by Adware.MediaMotor as reported by ewido suite. More Note: located in C:\Windows\
power2goexpress Power2GoExpress.exe U Related to Power2GoExpress All-Media Disc Burning Software. Note: located in C:\Program Files\CyberLink\Power2Go\
ppscheduler PPScheduler.exe U Related to ScanSoft_PaperPort_Scheduler What does it do, is it required? Should not be terminated unless suspected to be causing problems.
processtamer ProcessTamerTray.exe U Related to Process_Tamer is a tiny (140k) and super efficient utility for Microsoft Windows XP/2K/NT that runs in your system tray and constantly monitors the cpu usage of other processes. Note: located in C:\Program Files\ProcessTamer\
pwrisovm.exe PWRISOVM.EXE U Related to PowerISO a powerful CD/DVD image file processing tool. Note: located in C:\Program Files\PowerISO\
pwrmgrtr PWRMGRTR.DLL Y Related to the Power_Manager Background Monitor module for ThinkPad laptops. Leave it alone to ensure proper power management functions.
smart start up PnPDetect.exe U Related to Mr.Photo A Multimedia Suite with DVD Authoring! Note: located in C:\Program Files\NewSoft\Smart Start UP\
PMPro32 pmpro32.exe X Added by the Spyware.PrintMonitor spyware. This spyware monitors printer activity.
<not used> ppa.exe N Added by the PPAuditor password-recovery program. Though listed as a security risk by Symantec, we feel that this program has legitimate uses and thus needs to be classified as a valid program.
<not used> pushow[RANDOM].dll X Added by the Adware.Advertmen adware.
firstRabbit PurpleHaze.vbs X Added by the Troj/Tibba-A Trojan.
FASTTRACKPassepartout Passepartout.exe X Added by the Dial/DialCar-X dialer.
pmsngr.exe pmsngr.exe X Added by the Troj/Zlob-QK Trojan.
ControlPanel per.exe X Added by the Troj/DwnLdr-FDP Trojan. When removing this infection, you only want to remove the per.exe file.
PRT4701 Printer driver prt47sys.sys X A variant of the Troj/Haxdor-Gen rootkit.
USB p79bsksb p79bsksb.sys X Added by a variant of the Troj/Haxdor-Gen rootkit.
pasksa pasksa.dll X Added by a variant of the Troj/Haxdoor Trojan. This infection utilizes the p79bsksb.sys rootkit to hide itself.
picview picview.exe X Added by the Troj/DwnLdr-FPH Trojan.
Network Provision Managing Service provsvc.exe X Added by the W32/Sdbot-CRS worm and IRC backdoor.

W32/Sdbot-CRS spreads by copying itself to network shares protected by weak passwords. It will also attempt to exploit the following Microsoft software vulnerabilities:

RPC-DCOM (MS04-012), WKS (MS03-049)
p2k32reg p2k32.dll X Added by the Troj/Xorpix-V proxy Trojan.
PVModule pvmodule.exe X Adperform.com/adoptim.com adware. Detected by AntiVir as TR/Dldr.Agent.alb. This should not be confused with the legitimate PrintView PrintView program that resides in the C:\CBR folder.
<unknown> prt21sks.sys X Added by a variant of the Goldun.Fam rootkit.
prtsks prtsks.dll X Added by a variant of the Goldun.Fam Trojan. This infection also utilizes the prt21sks.sys rootkit to hide itself.
psydon FTP Server psydon.exe X Added by the Troj/Bdoor-ABJ backdoor Trojan.
psbamtxe psbamtxe.dll X Added by the W32/Stratio-BT worm.
pgpmjit pgpmjit.exe X Added by the W32/Stratio-BZ worm.
PSwitch proxyswitcher.exe U Added by the Proxy Switcher program. This program allows you to switch between various proxy servers.
ProAntiVirus ProAntiVirus.exe X Added by the W32/Rbot-FTP worm and IRC backdoor. W32/Rbot-FTP spreads to other network computers by exploiting common buffer overflow vulnerabilities, including: SRVSVC (MS06-040), LSASS (MS04-011), RPC-DCOM (MS04-012), ASN.1 (MS04-007) and Realcast. The worm may also spreads via network shares protected by weak passwords.
cmonitor pasmon.exe X Part of the rogue anti-spyware application SystemDoctor 2006. This application is known to install with malware that issues fake security warnings in your taskbar as a goad to scare you into purchasing the full version of this software. You should use the removal guide in the link below to remove this software.
phide_ex.sys phide_ex.sys X Added by the Troj/RusDrp-H rootkit.
PopWinIe PopWin.exe X Added by the Trojan.Popwin Trojan.
PGQL pgql.exe X Added by the Troj/Bckdr-PQN backdoor Trojan.
{000000-9485-7B32-0701-070407030307} PoisonIVY.scr X Added by the Troj/Small-DNB Trojan.
PrevX prevx.exe X Added by the W32/IRCBot-TF worm and IRC backdoor.
PestCapture PestCapture.exe X The main executable of PestCapture. This is an antispyware program currently listed on the rogue anti-spyware list. It is advised that you uninstall this program and instead use one of the programs listed here.
System Checker PCGuard.exe X Added by the W32.Bakain worm. W32.Bakain is a worm that spreads by copying itself to network shares protected by weak passwords.
Procedure Distribution Service prsvr.exe X Added by the Troj/Bckdr-PVA backdoor Trojan.
agent ppl.exe X Added by the W32/Dref-U virus with mass-mailing capability.
ProtexisLicensing PSIService.exe U Part of the Protexis copy protection and license management software. This will typically be installed by other software that uses this to protect itself from being illegally copied.
PersonalWeb PersonalWeb.exe U PersonalWeb is a program that creates a personalized homepage that contains information that it feels will interest you based on your surfing habits or other activity. Their privacy policy states that they do not collect any personal information. It does state that "The PersonalWeb software sends us anonymous information from your various Web browsers about how you use and search the Web and also identifies some of your computer settings and software applications. If you use the Internet Explorer and Firefox Web browsers, PersonalWeb will send us data from both Web browsers, not merely the Web browser you were using when you installed PersonalWeb."

Disabling this startup will stop the transmission of your personal surfing habits, which also means that your home page will not update based on this information.
PrU Async Service pruas.exe X Added by the W32/IRCBot-UG worm.
POP Manager popmgr.exe X Added by the Troj/Bckdr-PYV Trojan backdoor.
Microsoft proxysys proxysys.exe X Added by the W32/Tilebot-JC worm and IRC backdoor.
MSPetServ PET32.EXE X Added by the W32/IRCBot-VE worm and IRC backdoor.
Personal Secure Drive Service PSDsrvc.EXE U Part of the Personal Secure Drive service that allows you to mount an encrypted filesystem as a normal Windows volume.
<unknown> pnpdrv.sys X Added by the Troj/RKProc-Fam rootkit. Can be installed with SmitFraud related Trojans.
<unknown> ppdriver.sys X Added by the Troj/RKProc-Fam rootkit. More info here.
PolicyVerifier policyverifier.exe X Part of the SmitFraud family of infections.
rare pmsnrr.exe X Added by a variant of the Zlob Trojan.
PSCMain pscmain2.exe X Added by the Trojan.Downloader-PSCMain.Process Trojan. This infection will display fake security alerts which are in fact advertising rogue anti-spyware products like Ultimate Cleaner, Ultimate Defender, and WinAntiSpyware.
Windows LoL Layer pyvnpt.exe X Added by the W32/Rbot-GKV worm and IRC backdoor.
{b0ded443-5e68-4001-a81b-0a0001621ab8} pkgvyg.dll X Part of the Zlob trojan that displays fake security alerts for the rogue anti-spyware program called SpywareLocked.
P2kAutostart P2kAutostart.exe N Tray icon program and phone connection detector for P2kCommander. P2kCommander is a utility suite for modding Motorola phones.
p4reg p432.dll X Unknown malware.
PCANotify PCANotify.dll Y Related to Symantec PcAnywhere.
ISPSERVICE psycho.exe X Added by the Troj/IRCFlood-O Trojan.
PlexTools Professional PlexTool.exe N PlexTools is Plextor's CD and DVD writing software.
PowerReg Scheduler V3.exe PowerReg Scheduler V3.exe X Added by the PowerReg adware program.
DRam prosessor plscd.exe X Added by the WORM_RBOT.CYA worm and IRC backdoor.
ATI Video Driver Control pixman.exe X A variant of the IRCBot family of worms and IRC backdoors.
Pag Windows Monitor pag.exe X Added by the Troj/Agent-EOT Trojan.
dstiosys plsitctl.exe X Added by the Troj/Mailbot-BX IRC backdoor Trojan.
PaSystem pasystem.exe X New Targetsaver adware variant.
pcmn891.exe pcmn891.exe U Added by the Spyware.FreeKeylogger surveillance software. If this software was installed without your knowledge, it should be removed immediately and all passwords changed.
psybnc server 3.1 psybnc321.exe X Identified as the Rbot-CSN worm and IRC backdoor.
Pest-Capture PestCapture.exe X The main executable of PestCapture. This is an antispyware program currently listed on the rogue anti-spyware list. It is advised that you uninstall this program and instead use one of the programs listed here.
PC Angel PCAngel.exe U The PC Angel backup and recovery software.
PxHelp20 PxHelp20.sys Y Driver used by Sonic Solutions’ CD burning software
ADDITIONAL Services pkgadd.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Process Sevices prsc32.exe X Added by the W32/Spybot-NR worm with IRC backdoor capabilities.
Microsoft Windows pwjbvphi.exe X Added by the W32/Rbot-GQK worm and IRC backdoor.
Windows Process Sevices prsc32.exe X Identified as Spybot-NR.
Performance Monitor Command Line Shell perfmon.exe X Identified by Kaspersky antivirus as Trojan-Proxy.Win32.Agent.mn.
Bart Station PPCOLink.exe U Software distrbibuted by the ISP PeoplePC.
value pgnmr.exe X Identified as the Rbot.na worm and IRC backdoor Trojan.
{e1d3b05d-4dd9-468d-982e-c342f05436e5} pkjcoxq.dll X Part of the Zlob trojan that displays fake security alerts for the rogue anti-spyware program called SpyLocked.
360Safe.exe pnvifj.exe X Added by the Troj/QQRob-ADM Trojan.
pppconfig pppconfig.dll X Identified as the Adware.Agent Trojan.
game patcher.scr X Added by the Troj/PWS-ED password-stealing Trojan.
<not used> perfc000.dat X Added by the Trojan.Perfcoo Trojan.
ProgramControl ProgramControl.exe X Added by the Troj/Dloadr-BAG Trojan downloader.
Pando Pando.exe U Panda allows you to send large media files to specific recipients.
Protections ProtEX32.exe X Associated with the UltimateDefender or UltimateFixer rogue antispyware program.
PowerPanel Personal Edition User Interaction pppeuser.exe U Added by the PowerPanel UPS monitoring software.
PcSync PcSync2.exe N If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected.
PDAgent PDAgent.exe U Scheduling agent for PerfectDisk.
PnkBstrA PnkBstrA.exe U Related to the PunkBuster anti-gamecheat program.
PnkBstrB PnkBstrB.exe U Related to the PunkBuster anti-gamecheat program.
PMJ151 AutoLaunch Service PMJ151LA.BIN ? Related to the Panasonic DVC Web Camera.
Microsoft prefinal.exe X A variant of the RBot.get family of worms and IRC backdoor Trojans.
PicoZip PicoZipTray.exe N System tray icon for PicoZip.
AntiSpywareSuite pgs.exe X Added by the AntiSpywareSuite rogue anti-spyware program. AntiSpywareSuite is a security risk that may give exaggerated reports of threats on the computer.
GoldenAntiSpy pgs.exe X Added by the GoldenAntiSpy rogue anti-spyware program. GoldenAntiSpy is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threat. This program is the same as AntiSpywareSuite.
MenaceRescue pgs.exe X Added by the MenaceRescue rogue anti-spyware program. MenaceRescue is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threat. This program is the same as AntiSpywareSuite.
AntiWorm2008 pgs.exe X Added by the AntiWorm2008 rogue anti-spyware program. AntiWorm 2008 is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threat. This program is the same as AntiSpywareSuite.
Pop32 message client PMZR5.exe X Added by the Troj/Clicker-EL Trojan.
{596e4935-4d3b-4a3c-842d-2efd1b3de598} pjgerka.dll X Part of the Zlob trojan that displays fake security alerts for the rogue anti-spyware program called SpyLocked.
Symantec PIF AlertEng PIFSvc.exe Y Part of Symantec's LiveConnect service that delivers large updates and patches for your software. There has been some controversy as to why this package was installed without users being notified.
Palfun palfun.exe N Added by the PalFun AOL instant messenger plugin.
PCSWvs PCSwvs.exe Y Related to the PCSafer 2007 security suite.
PCSafer PCSafer.exe Y Tray icon and real time protection for the PCSafer 2007 security suite.
Services prosys32.exe X Added by the Backdoor.Ranky backdoor Trojan.
PCTurboPro pctp.exe X Main executable for PC Turbo Pro. This software is considered a rogue security product due to its use of malware to advertise itself.
PCTurboPro pctp.exe X Related to PC Turbo Pro. This software is considered a rogue security product due to its use of malware to advertise itself.
ProfileWatcher profilewatcher.exe U Added by the ProfileWatcher myspace profile monitoring software.
AVSystemCare pgs.exe X Added by the AVSystemCare rogue anti-spyware program. AVSystemCare is a security risk that may give exaggerated reports of threats on the computer.
BM PSA Access Driver Control PsaSrv.exe U Related to IBM's Professional Services Automation products.
PDService.exe pdservice.exe U SafeGuard security software for IBM laptops.
{fa55d551-9698-48ac-b639-9b00cf1a6ea0} psndz.dll X Zlob Trojan that installs VirusProtectPro 3.4 and shows fake security alerts from your Windows taskbar.
PTBSync PTBSync.exe U Added by the Desktop Organizer which includes Atomic clock synchronization, Organizer, Desktop calendar and Trayclock.
PassLocker PassLocker.exe U Added by the PassLocker password manager.
<not used> perfsm.dat X Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007.
<not used> perfc000.dat X Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007.
p2pnkbdl p2pnkbdl.dll X Added by the W32/Stration-AT worm.
Windows Config pvphost.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
PC Registry Cleaner PCRegistryCleaner.exe N Added by the PC Registry Cleaner registry cleaning program. This program requires that you purchase it before it finds any of the problems it finds.
Think-Adz pwinsndt.exe X Added by a variant of the Zenosearch adware. Adware.ZenoSearch is an adware that displays pop-up ads based on searches the user performs on popular web search engines.
ExploreUpdSched pwinsndt.exe X Added by a variant of the Zenosearch adware. Adware.ZenoSearch is an adware that displays pop-up ads based on searches the user performs on popular web search engines.
Windows PC service pcsrv.exe X A variant of the SDBot.bhk family of worms and IRC backdoor Trojans.
<not used> PGPmapih.dll Y Used by a PGP to encrypt/decrypt emails. Reports state that there are compatibility problems with Office 2007.
sugi1 Status Monitor Service Program.exe X Unidentified malware.
direct parallel link driver ptilink.sys U Direct Parallel Link Driver from Microsoft. Bundled with the operating system.
<not used> printer.exe X Malware related to and installed with different rogue anti-spyware programs including WinAntiSpyware 2006 or WinAntiSpyware 2007. This Trojan is responsible for the fake security alerts being displayed in your Windows taskbar.
prodigy1 prodigys323.dll X Added by the W32/Delf-EXR worm.
Performance Monitor perfmon.exe X Identified as the Trojan-Downloader.Win32.Small.fee malware.
Privacy Guarantor PrivacyGuarantor.exe X Added by the PrivacyGuarantor misleading application. PrivacyGuarantor is a misleading application that provides false warnings about privacy violations.
Printer printer.exe X Malware typically bundled with Smitfraud infections.
protect Protect.sys X A variant of the Trojan.NtRootKit.361 rootkit.
adlhidp psncc32.exe X Identified as the TrojanProxy.Slaper malware.
{d6ef030a-a235-41ba-9ead-89b6ff542f00} pluwue.dll X Added by a Zlob Trojan which installs AntiVirgear 3.7 and display fake security alerts in your Windows taskbar.
CheckWinPerf perfinfo.exe X Identified by AntiVir antivirus as TR/Crypt.XPACK.Gen.
PD0620 STISvc P0620Pin.dll N Creative Technology software that allows you to access other tools related to your Creative product.
Application Layer Gateway Services psure.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
PCDAS pcd-as.exe X Added by the Defenza antispyware software. This software displays false positives and exaggerated results requiring you to purchase the software in order to fix anything.
MICROSOFT Windows update pdate.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Xp pdate.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
MS Domain Name Server Deamon p.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Ms System Config pcedit.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Net Monitor DDE plscd.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
plite731 plite731.exe X Added by the Poplite A adware.
pwipf6 pwipf6.sys Y Related to the Webroot Desktop Firewall.
PerfectCleaner PerfectCleaner.exe X The rogue security software called PerfectCleaner.
Advanced DHTML Enable prkc.exe X Added by the Backdoor.Ranky backdoor Trojan.
<not used> proper.exe X Fakealert Trojan which shows fake security alerts on your computer.
ParallelsToolsCenter ParallelsToolsCenter.exe Y This program is for Parallels Desktop for Mac OS X. This is a program that is run once installed in the guest operating system inside of the Parallels Desktop virtual machine.
freinst pgs.exe X Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infection results.
WinSecureAv pgs.exe X Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infection results.
procc procc32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
PackersScreenServer PackersScreenServer.exe N Software from the MercurySports for streaming information about the Green Bay Packers US Football team. Slightly loose Terms or Use and Privacy policy, so make sure you read it when installing.
PackersScreenServerSvc PackersScreenServer.exe N Software from the MercurySports for streaming information about the Green Bay Packers US Football team. Slightly loose Terms or Use and Privacy policy, so make sure you read it when installing.
Symantec PIF &#097;lertEng PIFSvc.exe Y Related to the Norton 360 security software.
CheckWinPerf perfm32.exe X Unidentified malware.
PCPOptimize PCPOptimize.exe U SCheduling program for PC Pitstop Optimize.
Window upadate pe2.exe X A variant of the Rbot family of worms and IRC backdoor Trojans.
pmkret pmkret.dll X Added by a variant of the MyGeek/CPVFeed adware.
ProSystem Prosystem.exe X Added by the W32/Mdrop-BPZ Spyware worm.
printfpool printfpool.exe X Added by the Troj/Spy-AE Trojan.
PCMM2007RT pcmm2007.exe X Added by the PC MightyMax rogue security program.
PC-Checkup PCCheckUp.exe N Added by SpeedItUp. PC optimizer that requires you to purchase the software in order to fix what it finds.
PTHOSTTR PTHOSTTR.EXE U Windows system tray icon for the Security Manager program installed on HP computers.
TrustedAntivirus pgs.exe X Added by the rogue security software called TrustedAntivirus. TrustedAntivirus is a misleading application that may give exaggerated reports of system performance problems on the computer.
PSUTY PSUWNP.dll ? Related to FUJITSU LIMITED.
psyBNC-2.1.4 Client Server psyBNC215.exe X A variant of the Rbot family of worms and IRC backdoor Trojans.
pmsxl pmsxl.exe X Added by the Troj/DwnLdr-HAA Trojan.
PrivacyControl PrivacyControl.exe X Added by the PrivacyControl rogue security software. PrivacyControl is a misleading application that may give exaggerated reports of errors on the computer.
PasswordInspector passinsp.exe X Added by the PasswordInspector potentially unwanted application. PasswordInspector is a potentially unwanted application that stores passwords for other applications. It may also download other security risks on to the computer.
Microsoft Update Machine ppabvg.exe X Added by the Troj/Ciadoor-DR Trojan.
PolicyKey PolicyKey.exe Y Added by the Safe-Connect network access control software. Commonly used by Colleges to create policies on how users can connect and use their network.
MasterBoot Switch popupkill.exe X A variant of the Rbot family of worms and IRC backdoor Trojans.
ptask ptask.exe X Related to the TrustedAntivirus rogue anti-spyware program.
overinstall pgs.exe X Related to the TrustedAntivirus rogue anti-spyware program. This program is used by other Rogue anti-spyware programs as well.
Windows Network Service prcsvc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
kebodohan P84K80W75T.exe X Added by the W32.Fishinflu@mm worm. W32.Fishinflu@mm is a mass-mailing worm that spreads through removable drives and by sending messages to mIRC users.
DF PHVGKEDD.exe X Added by the Troj/OnlineG-AK information-stealing Trojan for online games.
FullSystemProtection pgs.exe X Rogue anti-spyware program is installed and advertised through the use of malware and deceptive advertising.
SysPrnt prnsrv.vbs X Added by the W32/VBLame-H worm.
APC Power Management powerio.sys X Identified as a variant of the RKit/Agent.X.5 rootkit.
partnershipreg partnership.dll X Added by the Trojan-Proxy.Xorpix Trojan.
pup pup.exe X Added by the Adware-ClickStory adware.
Windows Audio Control ppnsvc.exe X Added by the Troj/DwnLdr-HAM Trojan.
px86emul px86emul.dll X Added by a variant of the Haxdoor Trojan family. This infection utilizes the x86emul.sys rootkit to hide itself.
PDVDDXSrv PDVDDXSrv.exe U UPNP Media server added by the Cyberlink PowerDVD software.
PPalUninstal PPalCleanUp.exe Y Uninstall routine for the the PeoplePal Toolbar.
p2pex p2pex.zip.exe X Added by the P2P-Worm.Win32.Agent.ag worm.
PD91Agent PD91Agent.exe U The Perfectdisk agent allows you to connect to remote computers running Perfectdisk and to control Perfectdisk operations on that computer.
{9B71D88C-C598-4935-C5D1-43AA4DB90836} pawi.exe X Added by the Backdoor.Win32.Bifrose.dmm backdoor.
{00D73551-3642-AEBA-A315-C64321947FE8} Plugins1.exe X Identified as a variant of the Trojan.Win32.Small.js malware. This infection uses Alternate Data Streams to hide itself. In order to remove these files you will need to use ADSSpy. The C:\Windows\System32 folder is legitimate and should not be deleted.
Antivirus PC Pluton.exe X Added by an Unknown malware.
PrxCheck PrxCheck.dll X Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
Microsoft Process Manager process32.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Profile Manager profile.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Pool Manager poolsc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
PTSShell PTSShell.exe X Added by the TSPY_ONLINEG.OXU password-stealing Trojan.
Advanced Power Management powermgmt.sys X Identified as a variant of the Rootkit.Agent.X rootkit.
AntivirusPCSuite pgs.exe X Added by the AntivirusPCSuite rogue anti-spyware program.
AntiSpywareControl pgs.exe X Added by the AntiSpywareControl rogue anti-spyware application.
AntivirusForAll pgs.exe X Added by the AntivirusForAll rogue anti-spyware application.
NoWayVirus pgs.exe X Added by the NoWayVirus rogue anti-spyware application.
Windows Pool Setup poolmc.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
pcximg pcximg.pif X Added by the Backdoor.Rustock backdoor rootkit.
msptlg ptlg.exe X This malware is identified as the Hoax.Win32.SpyWare.d adware. When you are infected with this malware, you will receive popups for a variety of services and an alert stating you are infected and should install SpywareRemover.
ptlg ptlg.exe X This malware is identified as the Hoax.Win32.SpyWare.d adware. When you are infected with this malware, you will receive popups for a variety of services and an alert stating you are infected and should install SpywareRemover.
Disk Defragmentation Loader pmsvcr.exe X A variant of the IRCBot family of worms and IRC backdoor Trojans.
Program Learning Management System plms.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
BestsellerAntivirus pgs.exe X Added by the BestsellerAntivirus rogue anti-spyware program.
PCAntiVirusPro pgs.exe X Added by the PCAntiVirusPro rogue anti-spyware program.
NetCom3 Service PscMonitor.exe X Added by the Netcom3 Cleaner adware. Netcom3 Cleaner claims to be a spyware scanner for the Windows platform. It is known to report clean systems as unhealthy and requires the user to register before providing removal.
Print2Email pdf.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
advap32 psyche.exe X Identified as a variant of the Trojan.Kobcka.DF malware.
pzqlp pzqlp.chm X Added by the Backdoor.Rustock backdoor rootkit.
ProAntispy ProAntispy.exe X Added by the ProAntispy rogue anti-spyware program.
Protector GB protectgb.exe X Added by the Trojan.Kassbot online banking keystroke logger.
PC-Cleaner PC-Cleaner.exe X Added by the PCClean rogue anti-spyware program. PCClean is a misleading application that may give exaggerated reports of threats on the computer.
PC-Antispyware PC-Antispyware.exe X Added by the PCAntiSpyware rogue anti-spyware program. PCAntiSpyware is a misleading application that may give exaggerated reports of threats on the computer.
Adobe Photoshop photoshop.exe X Added by the W32/Tilebot-KT worm.
prov prov.exe X A variant of the Rbot family of worms and IRC backdoor Trojans.
pmsoarbf pmsoarbf.dll X Identified as a variant of the Adware.Agent malware.
Microsoft Svchost local services pr1nc.exe X Added by the W32/Rbot-GWW worm and IRC backdoor.
Privacy Watcher Privacy Watcher.exe X Added by the Privacy Watcher. Privacy Watcher is a rogue security program that displays false positives and exaggerated results.
pjsapdg pjsapdg.sys X Added by the Backdoor.Rustock backdoor rootkit.
Pull Service PullService.exe ? Added by the WebEoc program.
pxgdslro pxgdslro.dll X Identified as a variant of the Adware.Agent malware.
AntivirusFiable pgs.exe X Added by a French rogue anti-spyware program called AntivirusFiable.
VirusEffaceur pgs.exe X Added by a French rogue anti-spyware program called VirusEffaceur.
VirusGarde pgs.exe X Added by a French rogue anti-spyware program called VirusGarde.
PrdMgr.exe PrdMgr.exe X A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Pest-Patrol Pest-Patrol.exe X Added by the Pest-Patrol rogue anti-spyware program.
Pest-Patrol 2.1.0 Pest-Patrol.exe X Added by the Pest-Patrol rogue anti-spyware program.
{512EABF9-6550-4B48-B46F-C6CE65F9D2C6} pctools.dll X Added by the TSPY_ONLINEG.XGS information stealing Trojan for certain online games.
PCPrivacyCleaner pcpc.exe X Added by the Troj/FakeAle-CD rogue security software.
CSIScanner prevxcsi.exe Y Related to Prevx CSI.
chaplin psqnuvo.dll X Zlob Trojan which installs the AntiSpyCheck rogue anti-spyware program. This program displays fake security alerts stating that your computer has a security problem and then downloads and install AntiSpyCheck onto your computer without permissions. This Trojan pretends to be a fake video codec required to watch videos online.
pqasghjd pqasghjd.sys X Added by the Backdoor.Rustock backdoor rootkit.
kiss pingy.exe X Identified as a variant of the W32/Cult.worm.gen malware.
PC Tools Auxiliary Service pctsAuxs.exe Y Part of the Spyware Doctor anti-malware program.
PC Tools Security Service pctsSvc.exe Y Part of the Spyware Doctor anti-malware program.
pntqkflv pntqkflv.dll X Identified as a variant of the Adware.Agent malware.
pctdf.exe pctdf.exe X Identified as a variant of the PCTotalDefender rogue anti-spyware program.
ProtexisLicensing PSIService.exe U Copy protection software to protect copyrighted software. If you disable this service, it may affect the proper running of the programs that installed it.
Notifications popuper.exe X Added by the InternetSecurityDeluxe rogue anti-spyware program.
pestsweeper pestsweeper.exe X Added by the PestSweeper rogue anti-spyware program.
PC-Antispy PC-Antispy.exe X Added by the PC Antispy rogue anti-spyware program.
pcantispy pcantispy.sys X Added by the PC Antispy rogue anti-spyware program.
PCTotalDefender pgs.exe X Identified as a variant of the PCTotalDefender rogue anti-spyware program.
BUFFALO PC-MDVD/U2 WDM Encoder p2usbwdm.sys Y Driver for the BUFFALO PC-MDVD mpeg video capture box.
Panda Process Protection Driver PavProc.sys Y Driver used by Panda Antivirus.
Power-Antivirus-2009 Power-Antivirus-2009.exe X Added by the Power Antivirus 2009 rogue antivirus program.
PyroAntiSpy PyroAntiSpy.exe X Added by the PyroAntiSpy rogue security software. PyroAntiSpy is a misleading application that may give exaggerated reports of threats on the computer.
PC Protection Center PcProtection.exe X Added by the PC Protection Center 2008 rogue anti-spyware program.
perfs Service perfs.exe X Identified as a variant of the Backdoor:Win32/Refpron.C malware.
Personal Personal.exe U Added by the Nexus Personal security software.
pdoskegl pdoskegl.dll X Identified as a variant of the VideoAccessCodec malware.
vr64 prnjobt.vbe X Added by the VBS/AutoRun-IT removable media worm.
PC Clean Pro PC Clean Pro.exe X The PC Clean Pro rogue security software.
Run Player.exe X Identified as a variant of the Backdoor.Win32.Frauder malware.
GW Port Controller PORTCTRL.EXE U Print driver for Samsung's SmarThru document management system.
VirtualPCGuard pgs.exe X Added by the VirtualPCGuard rogue anti-spyware program.
VirusGuardPlus pgs.exe X Added by the VirusGuardPlus rogue anti-spyware program.
PersonalAntiSpy Free pas.exe X Added by the PersonalAntiSpy rogue anti-spyware program.
PASMonitor pbm.exe X Added by the PersonalAntiSpy rogue anti-spyware program.
Poison.Ivy Poison Ivy.exe X Identified as a variant of the Backdoor.Win32.Poison.k keylogger.

Please note that this infection is an Alternate Data Stream file attached to the legitimate C:\Windows\System32\ folder. Do not delete the C:\Windows\System32\ folder as Windows will not operate correctly without it. To delete the Alternate Data Stream you should read this tutorial.
{9670A6CE-B4AD-8EC3-0739-848F861C03BD} piji.exe X Identified as a variant of the Backdoor:Win32/Poisonivy.E malware.
PCVirusless pgs.exe X Added by the PCVirusless rogue anti-spyware program.
psyche psyche.exe X Identified as a variant of the Spammer:Win32/Cutwail.A malware.
PsycheEnqueue PsycheEnqueue.exe X Identified as a variant of the TrojanSpy:Win32/Festeal.D malware.
poison poison.exe X Added by the W32/Autorun-MZ removable media worm.
Personal Defender 2009 pdefendr.exe X Added by the Personal Defender 2009 rogue anti-spyware program.
vr64 prnjobt.vbe X Added by the VBS/AutoRun-IT removable media worm.
Pro Antispyware 2009 proas2009.exe X Added by the Pro Antispyware 2009 rogue anti-spyware program.
PLFSetL PLFSetL.exe Y Sonix chipset driver for various hardware devices used in Acer and other laptop manufacturers.
PLFSetI PLFSetI.exe N Related to the TV Tuner on certain Acer laptop.
pep pep.exe X Added by the Troj/Zlob-AQH Trojan.
prunnet prun.exe X Added by the Troj/VBDown-H Trojan.
priarsz priarsz.dll X Identified as a variant of the Goldun infection.
pidle pidle.exe X Added by the Troj/Matcash-A Trojan.
Uniblue ProcessQuickLink 2 ProcessQuickLink2.exe N Process Quick Link by Uniblue populates your taskmanager process list with links containing information about the various processes obtained from Uniblue's web site..
PMCLoader PMCLoader.exe U

This file is the launcher for Pinnacle TV Center developed by Pinnacle Systems GmbH.

fddi pbhha.dll X Zlob Trojan which installs the AntivirusTrigger rogue anti-spyware program. This program displays fake security alerts stating that your computer has a security problem and then downloads and install AntivirusTrigger onto your computer without permission. This Trojan pretends to be a fake video codec required to watch videos online.
Perfect Defender 2009 pdfndr.exe X Added by the Perfect Defender 2009 rogue anti-spyware program.
prunnet prunnet.exe X Added by the Troj/Dloadr-BHN Trojan.
defroster pgfshvp.dll X Zlob Trojan which installs the AntivirusTrigger rogue anti-spyware program. This program displays fake security alerts stating that your computer has a security problem and then downloads and install AntivirusTrigger onto your computer without permission. This Trojan pretends to be a fake video codec required to watch videos online.
APC PBE Server pbeserver.exe Y Related to APC PowerChute Business Edition. This startup allows you to monitor UPS connected to different computers and servers.
APC PBE Agent pbeagent.exe Y Related to APC PowerChute Business Edition. This startup allows the particular computer's UPS to be monitored by the APC PowerChute Business console.
Panasonic Device Manager for Multi-Function Station software PCCMFSDM.exe ? Panasonic MFS Device Manager. Related to Panasonic printers.
Panasonic IP Address Checker for Multi-Function Station software PccChgIP.exe ? Related to Panasonic printers.
Panasonic LPD Manager PCMFSMLM.exe ? Related to Panasonic printers.
PwdBank PwdBank.exe Y

This file is installed with TrueSuite Access Manager developed by AuthenTec Inc. This particular file is authored by Arachnoid Biometrics Identification Group and is connected with the password bank element of this software.

P Antispyware 09 pas.exe X Added by the PAntiSpyware09 rogue anti-spyware program.
Total Protect 2009 pcpc_starter.exe X Added by the Total Protect 2009 rogue security software.
HLServWinXPService printer.exe X Added by the Troj/Mdrop-BYD Trojan.
PrintSupervisor PSVService.exe Y PrintSuperVision network printer management software.
Panda anti-virus service pavsrv51.exe Y Related to Panda Anti-virus.
SUNHELP Ps3rm32.exe X Added by the TrojanDownloader:Win32/Sunacha.C Trojan. TrojanDownloader:Win32/Sunacha is a group of trojans that downloads and executes arbitrary files.
Win32.Pozarevac Pozarevac.exe X Added by the Troj/Delf-FBN Trojan.
PCCloneEX PCCloneEX.EXE N This program is used to perform back and restore operations with the PCClone Ex external USB harddrive.
Win32load ptssvc.exe X Added by the Troj/FakeAV-MK Trojan. This Trojan display fake security alerts on your computer.
{28ABC5C0-4FCB-11CF-AAX5-22CX3C644241} Perfume.exe X Added by the W32.SillyFDC.BBA worm. W32.SillyFDC.BBA is a worm that spreads by copying itself to removable drives.
pp pp2.exe X Identified by Kaspersky anti-virus as a variant of the Trojan.Win32.Agent.btvl malware.
Personal Antivirus PerAvir.exe X Added by the Personal Antivirus rogue anti-spyware program.
sysav pcdefender.exe X Added by the WinPC Defender rogue anti-spyware program.
pp pp04.exe X Identified by Sophos as a variant of the W32/Koobfa-Gen malware.
<Random name> peroruvo.dll X This file is associated with the Vundo infection.  Please note, C:\Windows\System32\rundll32.exe is a
legitimate program and should not be deleted.
PMCLoader PMCLoader.exe U This file is the launcher for Pinnacle TV Center developed by  Pinnacle Systems GmbH ;however, have been unable to determine what the "checktasks" part of this particular command is for.
Paramount Software Snapshot Filter pssnap.sys U Related to the Reflect disk imaging and backup software.
PCAntiMalware pcam.exe X Added by the PCAntiMalware rogue anti-spyware program.
PeachtreePrefetcher.exe PeachtreePrefetcher.exe N

Installed with different versions of Sage Peachtree Accounting products, this file loads several files Peachtree needs to run reducing the time the program needs to start.

Presto TuneUp PrestoTuneUp.exe X Added by the Presto Tuneup rogue program.
Hyper Files phfhost.exe X Added by the Troj/Agent-JQO Trojan.
Protection System psystem.exe X Added by the Protection System rogue anti-spyware program.
podmenadrv podmena.sys X Added by the Podmena malware.
podmena Podmena.dll X Added by the Podmena malware. Please note that C:\Windows\System32\svchost.exe is a legitimate program and should not be deleted.
PC Security 2009 PC_Security2009.exe X Added by the PC Security 2009 rogue anti-spyware program.
PersonalAV pav.exe X Added by the Personal Antivirus rogue anti-spyware program.
PC Antispyware 2010 PC_Antispyware2010.exe X Added by the PC AntiSpyware 2010 rogue anti-spyware program.
PersistenceThread PersistenceThread.exe Y PersistenceThread is a part of Intel (R) Graphics Media Accelerator 500 developed by Intel Corporation and is preinstalled on certain computers using Intel chips.
SafetyCenter protector.exe X Added by the Safety Center rogue security suite.
personalguard personalguard.exe X Added by the Personal Guard 2009 rogue anti-spyware program.
Proof Defender 2009 pdfndr.exe X Added by the Proof Defender 2009 rogue anti-spyware program.
Personal Anti Malware PAM.exe X Added by the unregistered version of the Personal Anti Malware Center rogue anti-spyware program.
PC Scout pcscout.exe X Added by the PC Scout rogue anti-spyware program.
AVR PAVRM.exe X Added by the Troj/FakeVir-PS Trojan.
photo_id photo_id.exe X Added by the Troj/Agent-LTF Trojan.
personalprotector personalprotector.exe X Added by the Personal Protector rogue security program.
pp pp12.exe X Added by the Troj/DwnLdr-HXV downloader Trojan.
PSecurity psecurity.exe X Added by the Personal Security rogue anti-spyware program.
PC Live Guard PC339.exe X Added by the PC Live Guard rogue anti-spyware program.
PrnShare prn_share.vbs X Added by the W32/Autorun-AWI removable media worm. Please note that wscript.exe is a legitimate program and should not be deleted.
sqlpdro providd.exe X Added by the Troj/Agent-LXF Trojan.
ProtectPcs.exe ProtectPcs.exe X Added by the ProtectPcs rogue anti-spyware program.
PersonalSec psecurity.exe X Added by the Personal Security rogue anti-spyware program.
PcsProtector PcsProtector.exe X Added by the PcsProtector rogue anti-spyware program.
ProtectDefender ProtectDefender.exe X Added by the ProtectDefender rogue anti-spyware program.
ProtectSoldier ProtectSoldier.exe X Added by the ProtectSoldier rogue anti-spyware program.
PcsSecure PcsSecure.exe X Added by the PcsSecure rogue anti-spyware program.
PcSecureNet PcSecureNet.exe X Added by the PcSecureNet rogue anti-spyware program.
peersvc Service PeerSvc.exe X Identified as a variant of the W32/Virut.n.gen virus.
Paladin Antivirus pav.exe X Added by the Paladin Antivirus rogue security program.
PersSecurity psecurity.exe X Added by the Personal Security rogue anti-spyware program.
PLFSet PLFSet.dll U Preinstalled on certain Acer laptops, this file is part of the Acer Crystal Eye webcam.  Research indicates this file is involved with the installation and setup of the camera.
PersSecurity personalsecurity.exe X Added by the Personal Security rogue anti-spyware program.
PersonSecurity psecurity.exe X Added by the Personal Security rogue anti-spyware program.
ProxyFirewall ProxyFirewall.exe U Proxy Firewall is an automatic proxy selector that will simply and easily manage proxy connections for you. Proxy Firewall also acts as a standard firewall for out-bound connections.
Prcgd Prcgd.exe X Added by the W32/AutoRun-BCJ removable media worm.
Hidup_Susah Pembantu.exe X Added by the W32.SillyFDC.BDM worm. W32.SillyFDC.BDM is a worm that spreads by copying itself to removable and mapped drives.
PDRV PDRV.sys X Added by the Troj/Mdrop-CQL Trojan.
postsos post.exe X Added by the W32/Taterf-Z worm.
Windows Presentation Foundation Font Cache 3.0.0.0 PresentationFontCache.exe Y Windows service that optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.
Performance Counter DLL Host perfhost.exe Y Windows service that enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.
VMservices panp.exe X Added by the Troj/Agent-OBM Trojan.
PCTV4Me pctv4me.exe N PCTV4ME allows you to watch TV on your PC..
HomeGroup Provider provsvc.dll Y Microsoft service that performs networking tasks associated with configuration and maintenance of homegroups. If this service is stopped or disabled, your computer will be unable to detect other homegroups and your homegroup might not work properly. It is recommended that you keep this service running.

Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
Peer Networking Identity Manager pnrpsvc.dll Y This service Provides identity services for the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services. If disabled, the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services may not function, and some applications, such as HomeGroup and Remote Assistance, may not function correctly.

Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
Peer Networking Grouping p2psvc.dll Y This service enables multi-party communication using Peer-to-Peer Grouping. If disabled, some applications, such as HomeGroup, may not function.

Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
Program Compatibility Assistant Service pcasvc.dll Y This service provides support for the Program Compatibility Assistant (PCA). PCA monitors programs installed and run by the user and detects known compatibility problems. If this service is stopped, PCA will not function properly.

Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
BranchCache peerdistsvc.dll Y This service caches network content from peers on the local subnet.

Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
Performance Logs & Alerts pla.dll Y Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.


Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
PsSdk31 pssdk31.drv X Added by the Troj/Mdrop-CVI Trojan.
PowerPanel Personal Edition User Interaction pppeuser.exe Y Configuration utility and status monitor for CyberPower PowerPanel Personal edition. PowerPanel Persona edition is a UPS monitoring and configuration program for CyberPower UPS devices.
PowerPanel Personal Edition Service ppped.exe Y Related to the CyberPower PowerPanel Personal edition monitoring and configuration program for CyberPower UPS devices.
plugsys.exe plugsys.exe X Added by the Troj/Agent-OVX Trojan.
Secunia PSI psi.exe Y Related to Secunia PSI. This software performs routine software inspections of the system, the results of which can be seen in your Secunia Customer Area account.
Windows UDP Control Center Presends0.exe X Added by the Mal/VBPit-A malware.
PC Suite Tray PCSuite.exe N Added by the Nokia PC Suite software.
Protect PrivacyGuard2010.exe X Added by the PrivacyGuard 2010 rogue antis-spyware program.
Protect PCoptimizer2010.exe X Added by the PCoptimizer 2010 rogue security software.
<not used> protect.exe X Added by the PrivacyCorrector rogue anti-spyware program.
Client Access PC5250 Sound pcssnd.exe U

Part of IBM's i Access Client Solutions, a communications suite that allows wireless access to iSeries servers, this file enables PC5250 sounds on client computers.  Unnecessary on standalone computers or if not connecting to iSeries servers.

Personal Security Sentinel PersonalSS.exe X Added by the Personal Security Sentinel rogue anti-spyware program.
PMHandler PMHandler.exe U

Preinstalled on many Lenovo laptops, notebooks etc., this file is connected with Lenovo's power management utility.  This is a separate power management than the one that comes with windows.

Note: other versions may have the command and file path as follows:

%programfiles%\Lenovo\PMDriver\PMHandler.exe

Personal Internet Security 2011 PersonalIS2011.exe X Added by the Personal Internet Security 2011 rogue anti-spyware program.
<not used> palladium.exe X Added by the Palladium Pro rogue anti-spyware program.
<not used> pc.exe X Added by the Privacy Components rogue security program.
picon PrivacyIconClient.exe U

Added by Intel® Active Management Technology used in network environments and bundled with many computers.  If your computer is a standalone computer, this software is not needed. When this specific file is running, it shows the Intel® Management & Security Status (IMSS) tool system tray icon.  It is up to the network administrator to choose whether to disable this startup on client machines.

PC SpeedDoctor PCSpeedDoctorTray.exe U A Windows Registry Optimization and junk file cleaner.
PDFHook pdfpro[version]hook.exe Y Added by various PDF products by ScanSoft now Nuance, this file must run to prevent trial watermarks from appearing on PDF documents.

Version numbers include:  3, 4, 5, 6 and 7

Note that pdfpro5hook.exe will appear in the following filepath if you have a Dell 1355 Multifunction Color Printer:

%programfiles%\Dell Printers\Dell 1355 Multifunction Color Printer\PDFViewer\pdfpro5hook.exe

This appears to be the case only with version 5 and only with this printer.
ISTray pctstray.exe Y This file is the tray application for both Spyware Doctor and PC Tools Internet Security both by PC Tools.

If you have the Internet Security program, the command and file location is:

%programfiles%\pc tools internet security\pctstray.exe
PostCopy postcopy.exe Y Added by software installed with Belkin F5U109 USB PDA Adapter
PostCopy postcopy.exe Y Added by software installed with Belkin F5U409 USB PDA Adapter
PostCopy postcopy.exe Y Added by software installed with Belkin F5D5050 USB 10/100 Ethernet Adapter
prohard.exe prohard.exe X Unknown malware.
Service Pervice.exe X Unknown malware.
PTIM.exe PTIM.exe U WebEx Productivity Tools make it very easy for users to start, schedule, invite, and join WebEx meetings from their desktop or from commonly used desktop applications.
ptmsgfrm.exe ptmsgfrm.exe U WebEx Productivity Tools make it very easy for users to start, schedule, invite, and join WebEx meetings from their desktop or from commonly used desktop applications.
PTOneClick ptoneclk.exe U WebEx Productivity Tools make it very easy for users to start, schedule, invite, and join WebEx meetings from their desktop or from commonly used desktop applications.
helperdll Pupw.sys X Added by the Adware.Henbang adware. Adware.Henbang displays pop-up advertisements on the compromised computer. Please note that C:\Windows\System32\rundll32.exe is a legitimate file and should not be deleted.
{2F9AF804-B2F1-4F2B-9093-D4C19C5DA9CE} pm.dll X Added by the TrojanSpy:Win32/Ambler.F Trojan.
Secunia PSI Agent PSIA.exe Y Related to Secunia PSI. This service performs routine software inspections of the system, the results of which can be seen in your Secunia Customer Area account
PDFCreatorClient PDFClient.exe U Added by the Jaws PDF Creator.
titi placax.sys X Unknown malware.
PSDiagnosticM PSDiagnosticM.exe ? Related to the Linksys Wireless-G Printer Server.
pctfw2 pctfw2.sys Y Driver for PCTools Firewall.
PS3 Media Server PMS.exe Y PS3 Media Server is a DLNA compliant Upnp Media Server for the PS3, written in Java, with the purpose of streaming or transcoding any kind of media files, with minimum configuration.
PowerAlert Port Manager Engine portmgr.exe Y Added by the PowerAlert power management software by Tripp Lite. This service is required for PowerAlert to properly monitor UPS ports.
Mouse Suite Driver pelmouse.sys Y Mouse driver for Primax computer mouse products.
USB Mouse Low Filter Driver pelusblf.sys Y Mouse driver for Primax computer mouse products.
PrnStatusMX PrnStatusMX.exe U Added with the software for HP Color LaserJet CP1210 Series, this file is the Status Monitor and part of the Toolbox. It will alert you to low ink levels, paper jams and much more.
Paint.exe Paint.exe X Added by the W32.Tapin worm. W32.Tapin is a worm that spreads by copying itself to network shares. It also downloads potentially malicious files on to the compromised computer.
privacynS privacynU.exe X Added by the Troj/FakeAv-EOE Trojan.
PxHlpa64 PxHlpa64.sys Y Sonic DVD/CD Driver.
Microsoft Driver Setup psreg.exe X Added by the W32/VBMato-C worm.
RemoteControl9 pdvd9serv.exe U Installed with Cyberlink's 9th version of Power DVD, this file is the remote background application that allows a user to use a remote control with the Bluray or DVD drive if the computer came with one.  Unneeded if you don't use remote control.
ProtectOn ProtectOn.exe X Added by the ProtectOn rogue anti-spyware program.
PLF2050 PLF2050.exe ? Developed by Sonix, this file is identified as the sonix DefaultSettingEXE.  Unable to determine what this file does or if it needs to run at startup.
PlusService PlusService.exe N Bundled with Messenger Plus! 5.02 and higher - an addin to Windows Live Messenger -  this file is part of Plus! World and automatically checks for updates and also to see if the installation was broken.
PDFCreHook pdfcreate7hook.exe Y The number in this file name will vary depending on software version.  It is installed with Nuance PDF creation software and also Nuance PDF Professional which includes the creation software.  If this file doesn't run, a watermark will appear on all your documents stating that the software is in trial mode.
Windows Plugin One plugin01.exe X Added by the Troj/Banker-FLG Trojan.
PureText PureText.exe N Executable for Pure Text which, via a hotkey, removes formatting from webpages and other documents to paste as plain text without going through Notepad.  This program does not install and is easily started from where-ever the user has placed the file by double-clicking on the icon.
Secunia PSI Tray psi_tray.exe N Tray icon for Secunia PSI.
regedit.exe P9KDMF.EXE X Added by the Troj/Matsnu-E Trojan.
NameClean PrivChkUpdate.exe X Added by the NameClean Korean rogue software.
Pelbegal Pelbegal.exe ? Made by Primax Electronics Ltd, this file appears to be associated with certain HP wireless keyboards.
Pianists Pianists.exe N Pianists.exe is installed with the Latvian and Lituanaian translation software, Tildes Birojs, developed by SIA Tilde.  In some cases, the year is not present in the command and file location or it may show a different year.
PureText PureText.exe N Executable for Pure Text which, via a hotkey, removes formatting from webpages and other documents to paste as plain text without going through Notepad.  This program does not install and is easily started from where-ever the user has placed the file by double-clicking on the icon.
ProtectBoan ProtectBoan.exe X Korean rogue anti-spyware program.
PrivacyGate PrivacyGate.exe X Korean rogue anti-spyware program.
PCScan Antispyware pcsp.exe X Korean rogue identified by Malwarebytes as Rogue.PCAntiSpyware.
PrivitizeVPN PrivitizeVPN.exe N Free VPN server that is bundled with numerous adware programs. Not malicious in itself, but you need to be careful you do not install any of the bundled programs.
pcguarderstart.exe pcguarderstart.exe X Korean rogue anti-spyware program.
atitool pwrwin.exe X Added by the W32.Yazz worm.
PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver pcdsrvc_x64.pkms Y PC Doctor driver that is part of the Dell Support Center for hardware diagnostics.
WinSATRestorePower powercfg.exe Y Restores a saved power configuration after performing a test via the Windows System Assessment Tool.
courts p1.exe X Added by the United States Courts ransomware.
PC Health Kit PCHKLauncher.exe X Related to the PC Health Kit rogue anti-spyware program.
PCSecureMain PCSecure.exe X Related to the Korean rogue anti-spyware program called PCSecureMain from the Ebiz family.
Prio Service prio_svc.exe Y Prio - Process Priority Saver allows you to save the priority you specify for any process.
PCEssenceMain PCEssence.exe X Korean rogue anti-spyware program called PC-Essence.
idefsvc pcdefender.exe X Added by the PC Defender 360 rogue anti-spyware program.
PP 1.10.0.21 Client Service ppsvc.exe X Added by the PhraseProfessor ad injector.
PhraseProfessor Auto Updater 1.10.0.21 Core PhraseProfessor Auto Updater 1.10.0.21 Core X Windows task added by the PhraseProfessor ad injector.
ppfd_vt_1_10_0_21 ppfd_vt_1_10_0_21.sys X Added by the PhraseProfessor ad injector.
IePlugin Service PluginService.exe X Related to the Adware.LinkHijacker family of browser hijackers.
IHProtect Service ProtectService.exe X Added by the XTab and SearchProtect browser hijackers.
PCTechHotlineService PCTechHotlineSvc.exe X Added by the PCTechHotline potentially unwanted program.
PCTechHotline PCTechHotline.exe X Added by the PCTechHotline unwanted program.
PC SpeedUp Service Deactivator PC SpeedUp Service Deactivator X Added by the PC Speed Up potentially unwanted program.
WindowsMangerProtect Service ProtectWindowsManager.exe X Added by the XTab and SearchProtect browser hijackers.
PCSpeedUp PCSUNotifier.exe X Added by the PC Speed Up system optimization program.
pfnfd_1_10_0_13 pfnfd_1_10_0_13.sys X Added by the PhraseFinder adware. PhraseFinder injects intrusive ads into web sites you visit.
Phrase Finder 1.10.0.13 Client Service pfsvc.exe X Added by the PhraseFinder adware. PhraseFinder injects intrusive ads into web sites you visit.
Service Mgr SearchWindow plugincontainer.exe X Added by the Search Window adware program.
Update Mgr SeeResultsHub plugincontainer.exe X Added by the See Results Hub adware program.
Service Mgr SearchMyWindow plugincontainer.exe X Added by the Search My Window browser hijacker.
Service Mgr OurSearchWindow plugincontainer.exe X Added by the Our Search Window browser hijacker.
Service Mgr GenerousDeal plugincontainer.exe X Added by the Generous Deal browser hijacker .
PCW Downloader PCW_downloader.exe X Added by the PC Backup Wizard potentially unwanted program.
PCW_9005 PCW_9005.exe X Added by the PC Backup Wizard potentially unwanted program. This task displays a Critical Alert every 10 minutes.
Service Mgr FindSearchWindow plugincontainer.exe X Added by the Find Search Window browser hijacker.
Service Mgr InnovateDirect plugincontainer.exe X Added by the Innovate Direct browser hijacker.
Service Mgr elementsperuse plugincontainer.exe X Added by the Elements Peruse browser hijacker.
Service Mgr CashKitten plugincontainer.exe X Added by the Cash Kitten browser hijacker.
Service Mgr JazzSpot plugincontainer.exe X Added by the Jazz Spot browser hijacker.
Service Mgr Buzzdoc plugincontainer.exe X Added by the Buzzdoc browser hijacker.
Service Mgr NextProgram plugincontainer.exe X Added by the Next Program browser hijacker.
Service Mgr nicertogether plugincontainer.exe X Added by the Nicer Together browser hijacker.
Service Mgr PopBubbles plugincontainer.exe X Added by the Pop Bubbles browser hijacker.
Service Mgr SearchMoreKnow plugincontainer.exe X Added by the SearchMoreKnow browser hijacker.
Service Mgr SearchKnow plugincontainer.exe X Added by the Search Know adware.
Service Mgr SearchWindowResults plugincontainer.exe X Added by the Search Window Results browser hijacker.
PlayGem PlayGem.exe X Added by the PlayGem adware.
Service Mgr OutrageousDeal plugincontainer.exe X Added by the Outrageous Deal browser hijacker.
Service Mgr StudySearchWindow plugincontainer.exe X Added by the Study Search Window browser hijacker.
Service Mgr SearchNewWindow plugincontainer.exe X Added by the Search New Window browser hijacker.
IMSS PIconStartup.exe N Added by Intel® Active Management Technology and launched by the Privacy Icon Client in network environments. If your computer is a standalone computer, this software is not needed.
Service Mgr SearchWebKnow plugincontainer.exe X Added by the Search Web Know browser hijacker.
Service Mgr TideSearch plugincontainer.exe X Added by the Tide Search browser hijacker.
Service Mgr SearchVoyage plugincontainer.exe X Added by the Search Voyage browser hijacker.
PCAcceleratePro PCAcceleratePro.exe X Added by the PC Accelerate Pro potentially unwanted program.
Service Mgr HooplaSearch plugincontainer.exe X Added by the the HooplaSearch browser hijacker.
Service Mgr SearchExpanse plugincontainer.exe X Added by the Search Expanse browser hijacker.
[not-used] Productkeyupdate.exe X Added by the Product Key tech support scam.
Service Mgr SearchAdventure plugincontainer.exe X Added by the Search Adventure browser hijacker.
Windows Policies Policies.exe X Added by the SysSecure adware and potentially unwanted program.
anonpop photosr.exe X Added by the AnonPop fake ransomware.

Login

Remember Me
Sign in anonymously