|
Name
|
Filename
|
Status
|
Description
|
|
$sys$crater
|
crater.sys
|
U
|
Added by the Sony/XCP DRM security software. This service is part of the digital rights management system utilized on certain Sony CDs. If you remove ... Read More
|
|
(3F143C3A-1457-6CCA-03A7-7AA23B61E40F)
|
child.dll
|
X
|
Added by the Troj/Small-EX backdoor Trojan.
|
|
(429F4BB8-7BF7-4152-8011-3C6F9EB7E892)
|
chp.dll
|
X
|
Added by the Troj/Spabot-E spam mailing Trojan.
|
|
(874e009f-7e1e-42b5-86df-b9cde35ad753)
|
comph.dll
|
X
|
Added by the Troj/Bdoor-QG backdoor Trojan.
|
|
(Default)
|
ctfmot.exe
|
X
|
Identified by Kaspersky as a variant of the Packed.Win32.Black.a malware.
|
|
(random 12 digit number)
|
cmpbk321.exe
|
X
|
Adsrv.com/IeDriver adware variant ... Read More
|
|
(random 12 digit number)
|
catsrvps.exe
|
X
|
Adsrv.com/IeDriver adware variant ... Read More
|
|
(Random Name)
|
csrssc.exe
|
X
|
Identified as a variant of the Win32/TrojanDownloader.Small.CYF malware.
|
|
*microsoft update
|
cxma.exe
|
X
|
Added by the W32.HLLW.STMU TROJAN! ... Read More
|
|
.svchost
|
csrss.exe
|
X
|
Added by a new Rbot variant. This infection when started connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
.TEXTCONV
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
.WMAudio
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
27
|
csrss32.exe
|
X
|
Added by the Troj/Slsorve-D Trojan.
|
|
2k6 updatz
|
crss3.exe
|
X
|
Added by the W32/Rbot-CPD worm and IRC backdoor.
|
|
<not used>
|
copy.pif
|
X
|
Added by the W32/Rufis-A worm.
|
|
<not used>
|
cabvh323.dll
|
X
|
Added by the W32.Stration.D@mm mass-mailing worm. W32.Stration.D@mm is a mass-mailing worm that gathers email addresses from the compromised computer. ... Read More
|
|
<not used>
|
ciscoutility.exe
|
X
|
Added by the Troj/Small-DIV Trojan.
|
|
<not used>
|
confbrw.dll
|
X
|
Added by the W32/Stratio-BN worm.
|
|
<not used>
|
confaud.dll
|
X
|
Added by the W32/Stration-CJ worm.
|
|
<not used>
|
crs.exe
|
X
|
Added by the Troj/Delf-ESL Trojan.
|
|
<not used>
|
crclan.exe
|
X
|
Added by the W32/Rungbu-E virus. W32/Rungbu-E searches for files with a DOC extension and appends them to itself. It then deletes the original file, a ... Read More
|
|
<not used>
|
confjpg.dll
|
X
|
Added by the W32/Stration-AN mass-mailing worm.
|
|
<not used>
|
cryptfg.exe
|
X
|
Identified as the Trojan.PWS.Zassan password-stealing Trojan.
|
|
<not used>
|
cchost.exe
|
X
|
Added by the Troj/Squatbot-B Trojan.
|
|
<not used>
|
czvhost.exe
|
X
|
Identified as Backdoor.IRC.Zapchast.
|
|
<not used>
|
ctftpscr32.exe
|
X
|
Added by the Troj/Agent-FPN Trojan.
|
|
<not used>
|
conime.exe
|
X
|
Added by the W32.Slurk.A worm. W32.Slurk.A is a worm that copies itself to all removable and shared drives, and drops other threats on to the comprom ... Read More
|
|
<not used>
|
corelnetwork.exe
|
X
|
Added by the Troj/Dial-DH Trojan.
|
|
<not used>
|
codeblocks.exe
|
X
|
Identified as a variant of the Trojan.Spambot.2424 malware.
|
|
<not used>
|
crase.exe
|
X
|
Added by the W32.Debanpass worm. W32.Debanpass is a worm that copies itself to all drives. It steals confidential information and account details when ... Read More
|
|
<not used>
|
commond.com
|
X
|
Added by the W32/Autorun-X removable media worm.
|
|
<not used>
|
ccEtvMgr.pif
|
X
|
Added by the W32.Roty.B@mm worm. W32.Roty.B@mm is a mass-mailing worm that also copies itself to shared folders and mapped network drives. ... Read More
|
|
<not used>
|
cert2app.dll
|
X
|
Added by the Troj/Agent-GSW Trojan.
|
|
<not used>
|
csmm.exe
|
X
|
Added by the Troj/VB-DZN Trojan.
|
|
<not used>
|
csrssm.exe
|
X
|
Added by the Troj/VB-EOU Trojan.
|
|
<not used>
|
conme.exe
|
X
|
Added by the Trojan.Heloag Trojan.
|
|
<not used>
|
ccmain.exe
|
X
|
Added by the Control Components rogue anti-spyware program.
|
|
<not used>
|
cc.exe
|
X
|
Added by the Control Center rogue anti-spyware program.
|
|
<not used>
|
cisvc.exe
|
X
|
Added by the Trojan.Downbot Trojan.
|
|
<random name>
|
crasos.exe
|
X
|
Added by the Troj/DropPS-A Trojan.
|
|
A1000 Settings Utility
|
cpqa1000.exe
|
U
|
Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use ... Read More
|
|
ABBYY Community Agent
|
CAGENT.EXE
|
N
|
Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appear ... Read More
|
|
absoluteshield internet eraser
|
cseraser.exe
|
Y
|
Related to AbsoluteShield_Internet_Eraser application. Note: located in C:\Program Files\SysShield Tools\Internet Eraser\ ... Read More
|
|
AbsoluteShield Internet Eraser
|
cseraser.exe
|
U
|
CuteShield Internet Eraser "Protects your privacy by cleaning up all the tracks of your Internet and computer activities (Free popup blocker included) ... Read More
|
|
accessoriesplus
|
clockplus.exe
|
U
|
"Clock Plus", part of Accessories_Plus allows you to select from dozens of alternatives for the Windows clock. ... Read More
|
|
Acer HomeMedia Connect Service
|
CLMSServer.exe
|
U
|
Related to Acer computers.
|
|
adgpfoxs
|
adgpfoxs.dll
|
X
|
Identified as a variant of the Adware.Agent malware.
|
|
AdobeCS4ServiceManager
|
CS4ServiceManager.exe
|
U
|
This service allows the proper functioning of a service like Adobe Drive and other network functions. ... Read More
|
|
AdobeCS5ServiceManager
|
CS5ServiceManager.exe
|
N
|
Manages online services using by Adobe CS5 applications.
|
|
AdobeReaderPro
|
chkdisk.exe
|
X
|
Added by the W32/Rbot-BDV worm and IRC backdoor.
|
|
Adobe_RLX
|
ccwap.exe
|
X
|
Added by the Troj/Bckdr-RCL backdoor Trojan.
|
|
AdRotator.Application
|
csrss.exe
|
X
|
AdRotator adware. Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, shutdown, and ha ... Read More
|
|
Advanced Internet Protocol
|
cerf.exe
|
X
|
Added by a variant of the SPYBOT WORM!
|
|
Alternative User Input Services
|
ctfmon.exe
|
X
|
Identified as the Tilebot-JR worm and IRC backdoor. This infection should not be confused with the legitimate C:\Windows\System32\ctfmon.exe file. ... Read More
|
|
altigraph
|
cxbrk.dll
|
X
|
Zlob Trojan which installs the AntiSpyCheck rogue anti-spyware program. This program displays fake security alerts stating that your computer has a s ... Read More
|
|
Antivirus Protection
|
CCapp1.exe
|
X
|
Added by the W32/Rbot-BMG worm and IRC backdoor.
|
|
AOL Companion
|
companion.exe
|
N
|
Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This progra ... Read More
|
|
AolCon
|
config.com
|
X
|
Added by the TAPLAK WORM!
|
|
Application
|
csrss.exe
|
X
|
Added by the W32.Beagle.EG@mm mass-mailing worm. The emails that are sent are written in Russian. ... Read More
|
|
Ares Chatroom server
|
chatServer.exe
|
U
|
Related to the Ares Galaxies P2P file sharing software.
|
|
argq32
|
csrss_32.exe
|
X
|
Added by the W32/Rbot-CPM worm and IRC backdoor.
|
|
ASDPLUGIN
|
canada.exe
|
X
|
Malware adult dialer.
|
|
ASDPLUGIN
|
czech.exe
|
X
|
AsdPlug premium rate adult content dialer variant
|
|
AsioThk32Reg
|
CTASIO.DLL
|
U
|
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this ... Read More
|
|
ASP.NET State Service
|
csrss.exe
|
X
|
Added by the Troj/Dloader-QI downloader trojan.
|
|
ASP.NET State Service
|
crsass.exe
|
X
|
Added by the Troj/Banload-M downloader Trojan.
|
|
Ass and titties
|
CMD32.EXE
|
X
|
Added by the Troj/SdBot-GG worm. When started, this infection connects to an IRC server where it waits for remote commands to execute. ... Read More
|
|
ATD Direct CD
|
cmssr.exe
|
X
|
Added by the Troj/Stinx-V IRC backdoor Trojan.
|
|
ati catalyst
|
CLI.exe
|
N
|
System Tray access to ATI's CATALYST™ CONTROL CENTER. Note that this has "SystemTray" appended to CLE.exe in the "Command" column of MSCONFIG. Not req ... Read More
|
|
ATI CATALYST System Tray
|
CLI.exe SystemTray
|
N
|
System Tray access to ATI's CATALYST™ CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not req ... Read More
|
|
ATICCC
|
cli.exe
|
U
|
ATI's CATALYST™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's ... Read More
|
|
ATICCC
|
CLIStart.exe
|
U
|
ATI's CATALYST™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's ... Read More
|
|
atisound
|
csrss.exe
|
U
|
Added by the WinSpy surveillance software. Uninstall this software unless you put it there yourself - NOTE - this file is placed in a %System%\ComRoo ... Read More
|
|
Auto CD-ROM Startup
|
cdaccess.exe
|
X
|
Added by the W32/Rbot-AAU WORM/IRC backdoor trojan!
|
|
Auto updat and other names
|
crsrs.exe
|
X
|
Added by the FORBOT-AK WORM!
|
|
autoload
|
cftmon.exe
|
X
|
Identified as a variant of the Trojan.Spy.XUL Trojan.
|
|
autoloaderaproposclient
|
cxtpls_loader.exe
|
X
|
AproposMedia adware ... Read More
|
|
Autorun CDROM Monitor
|
cdrom_mon.exe
|
?
|
Unknown cdrom driver?
|
|
autovirusprotection
|
ciscv.exe
|
X
|
Added by a variant of the WIN32.RBOT WORM! ... Read More
|
|
avagent3974
|
chnb8895.exe
|
X
|
Added by the AntiVirus ransomware program.
|
|
avast! servers
|
csrss.exe
|
X
|
Added by the Troj/Banker-CLW Internet banking Trojan. If you have this infection you should immediately change all of your online banking account inf ... Read More
|
|
AVManager
|
csrss.exe
|
X
|
Added by the W32/Autorun-DV removable media worm. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe file. ... Read More
|
|
b5700x drive
|
cnssr.exe
|
X
|
Added by the Troj/Maha-T Trojan.
|
|
BagleAV
|
csrss.exe
|
X
|
Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! ... Read More
|
|
Bingo Charm
|
charms.exe
|
?
|
Some kind of screen icon kind of like desk flag, but it gives you a choice of icons? ... Read More
|
|
BJ Printer Status Monitor
|
Cjstsr.exe
|
N
|
Canon BJ printer status monitor
|
|
BJ Status Monitor 5xx
|
CJSTRxx.EXE
|
N
|
Canon printer status monitor - where "xx" is different depending upon the version. Not required as you can check the printer status via My Computer -> ... Read More
|
|
BJCFD
|
CFD.exe
|
N
|
BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove prog ... Read More
|
|
BkavFw
|
controlsys.exe
|
X
|
Added by the Troj/Tiotua-S Trojan.
|
|
blah service
|
CCAPPS32.EXE
|
X
|
Added by the RBOT.TV WORM!
|
|
blah service
|
computer.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
boby
|
csrs.scr
|
X
|
Added by the Troj/Banker-BMA banking Trojan. If you are infected with this infection it is advised that you immediately change your online banking pas ... Read More
|
|
BootCom
|
C:\IO.COM
|
X
|
Added by the W32/VB-CRL mass-mailing worm.
|
|
bootstat
|
csrss.exe
|
X
|
Added by the Troj/Swysin-Gen Trojan.
|
|
Bron-Spizaetus
|
CVT.exe
|
X
|
Added by the W32.Rontokbro@mm mass-mailing worm.
|
|
Browser Launcher
|
Commandr.exe
|
U
|
Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the sh ... Read More
|
|
BuildLabs
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
c
|
c:\archiv~1\win.com
|
X
|
Added as a result of the CUYDOC VIRUS! ... Read More
|
|
C-DillaCdaC11BA
|
CDAC11BA.EXE
|
Y
|
Copy protection software used by companies to stop people from pirating their software. Disabling this service could cause any programs to rely on it ... Read More
|
|
C-DillaService
|
CDANSRV.EXE
|
X
|
Identified by Kaspersky Antivirus as a variant of the Trojan-Downloader.Win32.Agent.qzk malware. ... Read More
|
|
C2K
|
CYB2K.EXE
|
U
|
CYBERsitter 2000 or 2001 - anti-porn filter primarily. Required if you want the sites you visit filtered without having to load the software every ti ... Read More
|
|
C2K
|
Cyb10.exe
|
U
|
Added by the CyberSitter surveillance software. CyberSitter is a Parental Control application that allows a user to monitor system activity on the com ... Read More
|
|
c32cs2
|
c32cs2.exe
|
?
|
Part of the Cyber Sentinel Internet filtering software. Does anyone know if what this does? ... Read More
|
|
C:\Program Files\dfjdkjfdkjfldjf\dfjdkjfdkjfldjf\winlogin.exe
|
CritProc.exe
|
U
|
Added by the Spyware.KeyProwler surveillance software. Spyware.KeyProwler is a spyware program that logs keystrokes typed into the computer. This sof ... Read More
|
|
caavtray
|
CAVTray.exe
|
Y
|
|
|
Cabchk
|
Cabchk.exe
|
X
|
Added by the GEMA TROJAN!
|
|
Cabchk32
|
Cabchk32.exe
|
X
|
Added by the GEMA TROJAN!
|
|
CABCInstall
|
CABCInstall.exe
|
X
|
CABC content delivery software
|
|
cacaoweb
|
cacaoweb.exe
|
N
|
Cacaoweb is free software to watch, share and host videos and files online with no limits. You can also watch videos from platforms like Megavideo or ... Read More
|
|
CaCCProvSP
|
ccprovsp.exe
|
Y
|
Related to Computer Associate's eTrust Internet Security Suite.
|
|
Cacheman
|
Cacheman.exe
|
N
|
Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up ... Read More
|
|
CachemanXP
|
CachemanXP.exe
|
Y
|
"CachemanXP is a system service designed to improve the performance of your computer by optimizing several caches, auto-recovering RAM and fine tuning ... Read More
|
|
CacheMgr
|
CacheMgr.exe
|
Y
|
|
|
cachesentry pro
|
CacheSentry Pro.exe
|
U
|
Related to CacheSentry_Pro A program that takes over the management of the Internet Explorer (and AOL) web browser cache. ... Read More
|
|
CACStarter
|
cacstart.exe
|
N
|
Cash A Check - check writing software
|
|
cadenza
|
CdzSvc.exe
|
U
|
Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices ... Read More
|
|
CADS
|
cads.exe
|
U
|
Cyber Sentinel internet filtering software
|
|
cafestation
|
CafeStation.exe
|
U
|
Related to CafeSuite the solution for your internet cafe. ... Read More
|
|
cafwc
|
cafw.exe
|
Y
|
Part of the CA Personal Firewall application.
|
|
CAgent
|
CAgent.exe
|
N
|
Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents ... Read More
|
|
CahootWebcard
|
CahootWebcard.exe
|
N
|
"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over ... Read More
|
|
caissdt
|
caissdt.exe
|
U
|
Related to Computer_Associates Dashboard Tray Applet.
|
|
Cake
|
Cake.vbs
|
X
|
Added by the VBS/Sode-E worm.
|
|
Cal Reminder Shortcut
|
calrem.exe
|
N
|
Produces a pop-up reminder of events scheduled using the MS Office Calendar
|
|
calc
|
calc.dll
|
X
|
Added by the Opachki.a Trojan. Please note that rundll32.exe is a legitimate program and should not be deleted. ... Read More
|
|
calc.exe
|
calc.exe
|
X
|
Added by the W32.Ackpra.A worm. W32.Ackpra.A is a worm that spreads by copying itself to network shares and removable drives. It may also download pot ... Read More
|
|
CALC32
|
CALC32.EXE
|
X
|
Added by the W32/Spybot-EC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Calendar 200X Reminder
|
calendar.exe
|
N
|
Calendar 200X - shows holidays, reminders of various anniversaries,tasks etc
|
|
calendarscope
|
cs.exe
|
U
|
Calendarscope calendar software ... Read More
|
|
calk
|
calk.exe
|
X
|
The Troj/StartPa-FH TROJAN adds this to modify Internet Explorer settings.
|
|
CallBumping
|
cbpopw.exe
|
Y
|
Associated with the Gazel 128 PCI ISDN adapter. This program is required if you use the ISDN adapter. ... Read More
|
|
CamCheck
|
CamCheck.exe
|
N
|
NuCam camera software related
|
|
cameno
|
Cameno.exe
|
U
|
Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above ... Read More
|
|
Camera Detector
|
CAMDET~*.EXE
|
N
|
ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically ... Read More
|
|
Camera Detector
|
Camdetect.exe
|
N
|
ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically ... Read More
|
|
CameraFixer
|
CameraFixer.exe
|
?
|
May be related to Bestcam webcams.
|
|
Camfrog
|
Camfrog Video Chat.exe
|
N
|
Webcam and video chatroom software for use on the CamFrog site.
|
|
Canada
|
Canada.exe
|
N
|
Known to be a dialler - but is it maliscous or clean?
|
|
Canary
|
canary-std.exe
|
U
|
Added by the Spyware.Canary surveillance software. This program should be uninstalled if not installed by yourself. ... Read More
|
|
candy
|
command32.exe
|
X
|
Added by the RBOT-LV WORM!
|
|
CanerServer
|
caner.exe
|
X
|
Added by the Troj/Hupigon-ES backdoor Trojan.
|
|
Canon Camera Access Library 8
|
CALMAIN.exe
|
U
|
Installed as part of the Canon digital camera software. This service is required to start if you wish to use the Canon CameraWindow software. ... Read More
|
|
Canon PC1200 iC D600 iR1200G Status Window
|
CAPM1LAK.EXE
|
N
|
Canon P1200 printer status
|
|
Canon Printer Monitor BJCxxx
|
Cjstlst.exe
|
N
|
Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs
|
|
cap3on
|
CAP3ONN.EXE
|
?
|
Canon driver, purpose unknown - is it required in startup? ... Read More
|
|
capfaem
|
capfaem.exe
|
Y
|
This is the core engine for the CA Personal Firewall software.
|
|
Capfax
|
capfax.exe
|
N
|
|
|
capfupgrade
|
capfupgrade.exe
|
Y
|
Part of CA security suite.
|
|
caping
|
CAPing.exe
|
U
|
Citibank Citianywhere software
|
|
Capon
|
Capon.exe
|
Y
|
Canon printer driver
|
|
capon
|
Caponn.exe
|
Y
|
Canon printer driver
|
|
CAPPActiveProtection
|
CAPPActiveProtection.exe
|
Y
|
|
|
Captainhook
|
CaptainHook.exe
|
?
|
Part of the Novell Client.
|
|
Captcha7
|
captcha.dll
|
X
|
Added by the W32/Koobface.worm.gen.h worm. The W32/Koobface.worm.gen.h is a variant of Koobface worm, which infects users of Facebook who visit malici ... Read More
|
|
CaptionMgr32
|
crssr.exe
|
X
|
Added by the Zar.A infection. It attempts to spread itself through emails sent out with the subject "Tsunami Donation!". The file is found in the Wi ... Read More
|
|
capture
|
capture.exe
|
X
|
Added by the Troj/Theef-B keylogging Trojan.
|
|
Capture Express 2000
|
capexp.exe
|
N
|
Capture Express - screen capture utility
|
|
Carbonite Backup
|
CarboniteUI.exe
|
N
|
Added by the Cabonite online backup service.
|
|
Care20
|
Care20.exe
|
X
|
|
|
care2gtu
|
Care2GTU.exe
|
U
|
Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is, thanks ... Read More
|
|
CARPserver
|
CARPserver.exe
|
X
|
Added by the BANKER-AN TROJAN!
|
|
CARPservice
|
carpserv.exe
|
U
|
Associated with Zoltrix modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example ... Read More
|
|
cartao
|
cartao.exe
|
X
|
Added by the Troj/Banker-AY TROJAN, which will also use cartao2.exe.
|
|
cartao
|
conflicted.exe
|
X
|
Added by the Troj/Dadobra-DV trojan.
|
|
CAS Client
|
casclient.exe
|
X
|
|
|
cas2stub
|
cas2stub.exe
|
X
|
CasinoClient Adaware! ... Read More
|
|
CasAgnt
|
CasAgnt.exe
|
U
|
Program by Extended Systems which allows you to sync your Casio PDA with your PC ... Read More
|
|
caseyvideo
|
CaseyVideo.exe
|
X
|
Malware causing p0rn popups
|
|
caseyvideo
|
caseyvideo[*].exe [* = digit]
|
X
|
Malware causing p0rn popups
|
|
CashBack
|
cashback.exe
|
X
|
Part of eXact Advertising Software, consisting of "CashBack by BargainBuddy", BullsEye Network and NaviSearch ... Read More
|
|
cashfiesta
|
Cashfiesta.exe
|
X
|
CASHFIESTA.A pay-per-surf adware ... Read More
|
|
Cashsurfers Cashbar Navigator
|
Cashbar.Exe
|
N
|
Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers a ... Read More
|
|
CashToolbar
|
CD_Load.exe
|
X
|
CashToolbar Downloader-MY adware
|
|
Caspian-x27
|
Caspian-x27.exe
|
X
|
Added by the W32/Katomik-B worm.
|
|
cassandra
|
cassandra.exe
|
X
|
Melkosoft_Cassandra adware - also detected as a variant of the WIN32.KREPPER TROJAN! ... Read More
|
|
CasStub
|
casstub.exe
|
X
|
Added by the Troj/Cass-A trojan.
|
|
cat
|
cat.exe
|
N
|
Added by the CodeAmber desktop ticker. This program displays a ticker on your desktop showing all of the current Amber Alerts. ... Read More
|
|
cavrid
|
CAVRID.exe
|
Y
|
|
|
CAVS
|
CAVS.exe
|
Y
|
Cheyenne (now eTrust) antivirus
|
|
caxchg
|
caxchg.exe
|
?
|
Installed by drivers associated with Flash card readers. Is it necessary to start automatically? ... Read More
|
|
CAZNOVAS
|
CAZNOVAS.exe
|
X
|
Added by the CAZNO TROJAN!
|
|
CBACK.EXE
|
CBACK.EXE
|
X
|
Added by the Troj/Penta-A downloader trojan.
|
|
CbEvtSvc
|
CbEvtSvc.exe
|
X
|
Identified by Kaspersky as a variant of the Trojan-Downloader.Win32.Agent.jhj Trojan. A link to download this malware is sent as email spam. The con ... Read More
|
|
cbidf2k
|
cbidf2k.sys
|
Y
|
CardBus/PCMCIA IDE Miniport Driver Added by Microsoft Corportation
|
|
CBWAttn
|
CBWAttn.exe
|
U
|
Required for Bitware to answer incoming faxes, can cause sleep mode problems
|
|
CBWHost
|
CBWHost.exe
|
U
|
Required for Bitware to answer incoming faxes, can cause sleep mode problems
|
|
CBWUser
|
CBWDial.exe
|
?
|
Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop ... Read More
|
|
cbxvssp
|
cbxvssp.dll
|
X
|
Identified by Kaspersky antivirus as a varient of the AdWare.Win32.Virtumonde.gen malware. ... Read More
|
|
CC2KUI
|
comet.exe
|
X
|
Comet Cursor - displays different mouse pointers dependent upon the site your visiting. Malware because it automatically installs. See here for more i ... Read More
|
|
ccagent.exe
|
ccagent.exe
|
X
|
Added by the Control Center rogue anti-spyware program.
|
|
ccagent.exe
|
ccagent.exe
|
X
|
Added by the Control Components rogue anti-spyware program.
|
|
ccApp
|
ccApp.exe
|
Y
|
Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this ... Read More
|
|
ccApp.exe
|
ccApp.exe
|
X
|
Added by the W32/Rbot-HJ trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
ccApps
|
ccApps.exe
|
X
|
Added by the W32/Kangaroo-B worm.
|
|
CCDoctorLogonTesting
|
ccdoctor.exe
|
Y
|
Checks your system to make sure it's configured properly for running Rational ClearCase, a source code management tool. ClearCase is fairly sophistica ... Read More
|
|
ccenter
|
CCenter.exe
|
Y
|
|
|
ccepic
|
ccepic.exe
|
X
|
Added by the Troj/MSIL-H Trojan.
|
|
CcEvtMgr
|
ccEvtMgr.exe
|
Y
|
Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and ... Read More
|
|
ccEvtMrg.exe
|
ccEvtMrg.exe
|
X
|
Added by the RBOT.GZ WORM!
|
|
CcEvtSvc
|
CcEvtSvc.exe
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.elr malware.
|
|
ccHelp
|
ccHelp.hta
|
X
|
|
|
ccleaner
|
ccleaner.exe
|
U
|
Related to CCleaner Tool to removes unused files from your system. TIFs, MRUs, cookies. etc... ... Read More
|
|
ccpApps
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
ccProxy
|
CCPROXY.EXE
|
U
|
Part of Norton Internet Security, proxy server that is used to support the parental controls. If you turn parental controls off at user level the proc ... Read More
|
|
ccPrxy.exe
|
ccPrxy.exe
|
X
|
Added by the Troj/ShipUp-A Trojan.
|
|
CcPxySvc
|
CCPXYSVC.exe
|
Y
|
Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall ... Read More
|
|
CcRegVfy
|
ccRegVfy.exe
|
Y
|
Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information ... Read More
|
|
ccSetMgr
|
ccSetMgr.exe
|
Y
|
Part of Norton AntiVirus 2004. What does it do?
|
|
ccsserv
|
CCSSERV.EXE
|
X
|
Added by the WORM_STRAT.GT worm.
|
|
ccSvcHst.exe
|
ccSvcHst.exe
|
X
|
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
|
|
ccsvit.exe
|
ccsvit.exe
|
X
|
Added by the Troj/StartPa-HP Trojan.
|
|
cctray
|
cctray.exe
|
Y
|
Windows taskbar tray icon for the CA Internet Security Suite. This icon allows you to manage all the products in that suite. ... Read More
|
|
ccUpdate
|
ccUpdate.exe
|
X
|
Added by the AGOBOT.YS WORM!
|
|
ccUpdMgr
|
ccUpdMgr.exe
|
U
|
Added by the Spyware.Parentis surveillance software. If you did not install this yourself, then you should uninstall this product. ... Read More
|
|
cd storage master
|
cdstorager.exe
|
N
|
CD_Storage_Master - a program designed to catalog CD information, boasts a number of handy features for organizing your collection. ... Read More
|
|
cd1
|
cd1.exe
|
X
|
Premium rate adult content dialler
|
|
CDANTSRV
|
CDANTSRV.exe
|
N
|
C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automaticall ... Read More
|
|
CdbgEvtSvc
|
CdbgEvtSvc.exe
|
X
|
Identified as as variant of the Trojan-Downloader.Win32.Exchanger.ms malware.
|
|
CDCD
|
CDCD.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
CDChk
|
CDChk.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
Cdcompat
|
Cdcompat.exe
|
X
|
Added by the GEMA TROJAN!
|
|
cddrv32
|
cddrv32.exe
|
X
|
Added by a variant of the CRYPTER.C TROJAN!
|
|
CDInterceptor
|
cdi.exe
|
N
|
CD indexer for measuring the speed of CD players
|
|
cdloader
|
cdloader2.exe
|
Y
|
Added by the MagicJack free phone service. This software connects to the MagicJack servers so that you can make free phone calls using its service. ... Read More
|
|
CDMon
|
CDMon.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
CdnCtr
|
cdnup.exe
|
X
|
Added by the Chinese program Yahoo! Assistant. This program is a controversial program released by Yahoo! China and should be removed. ... Read More
|
|
cdntran
|
cdntran.sys
|
X
|
Added by the Chinese program Yahoo! Assistant. This program is a controversial program released by Yahoo! China and should be removed. ... Read More
|
|
cdntran
|
cdnprot.sys
|
X
|
Added by the Chinese program Yahoo! Assistant. This program is a controversial program released by Yahoo! China and should be removed. ... Read More
|
|
cdrom controller
|
cdromcntrl.exe
|
X
|
Added by the TROJ/BATTRY-A TROJAN! ... Read More
|
|
CDRW overrun protection
|
cdscsix3r.sys
|
X
|
Added by a variant of the Troj/Haxdor-Gen rootkit.
|
|
cds
|
cds.exe
|
X
|
Added by the Backdoor.Spymon backdoor Trojan.
|
|
cdscsix3
|
cdscsix3.dll
|
X
|
Added by a variant of the Troj/Haxdoor Trojan. This infection utilizes the cdscsix3r.sys rootkit. ... Read More
|
|
CDSpeed.exe
|
CDSpeed.exe
|
X
|
Identified as the Backdoor.Win32.IRCBot.aex malware.
|
|
Cdsys
|
cdcd.sys
|
X
|
Added by the Troj/Agent-IA Trojan.
|
|
CDTray
|
CDTray.exe
|
N
|
On HP PCs, this is the small CD icon next to the time
|
|
CE-Infosys Security System
|
ceisvc.exe
|
Y
|
Added by the PC Security security software.
|
|
ceedabde
|
ceedabde.dll
|
X
|
Added by the Troj/Dropper-TV Trojan.
|
|
CeEKEY
|
CeEKey.exe
|
U
|
It is for Toshiba laptops and enables the use of some of the special Fn keyboard keys, such as speaker on/off, hybernate, powermanagement, etc. If not ... Read More
|
|
CeEPOWER
|
cepmtray.exe
|
U
|
Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed, Mo ... Read More
|
|
CEF-Seg
|
CefSeg.exe
|
X
|
Added by the Troj/Banker-ELG information-stealing Trojan for online banks.
|
|
Ceic
|
Ceic.exe
|
?
|
??
|
|
Certificate Propagation
|
certprop.dll
|
U
|
Windows service that copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart c ... Read More
|
|
certreg
|
certreg.exe
|
U
|
Related to Gemplus Card Reader.
|
|
CertStoreInit
|
CertStoreInit.exe
|
Y
|
Part of eToken's password management and authentication software.
|
|
cesmain.dll
|
cmail.dll, Rundll32
|
X
|
CnsMin " Chinese Keywords" hijacker related
|
|
cetix
|
cetix.exe
|
X
|
Added by the W32/Autorun-MZ removable media worm.
|
|
CEventMgr
|
Cell.exe
|
X
|
Added by the Troj/Bifrose-AK backdoor Trojan.
|
|
CFD
|
CFD.exe
|
N
|
BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove prog ... Read More
|
|
cfFncEnabler.exe
|
cfFncEnabler.exe
|
N
|
This file has two different commands, but the same file path in each case. Preinstalled on certain Toshiba laptops, this file launches the Config. Fr ... Read More
|
|
cfg
|
cfg.exe
|
X
|
Added by the W32/Bdoor-ZAR backdoor worm.
|
|
cfgboost
|
cfgboot.exe
|
X
|
Added by an unidentified WORM or TROJAN!
|
|
cfgintpr
|
cfgintpr.exe
|
Y
|
Configuration Interpreter - part of Tiny Personal Firewall V4
|
|
cfgmgr51
|
cfgmgr51.dll
|
X
|
A bookedspace malware variant. It is started with this command: RunDLL32.EXE C:\WINNT\cfgmgr51.dll,DllRun ... Read More
|
|
cfgwiz
|
cfgwiz.exe
|
N
|
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it ... Read More
|
|
cfkbyse
|
cfhskjn.exe
|
X
|
Added by the W32/Autorun.worm.e removable media worm.
|
|
cFosDNT
|
cFosDNT.exe
|
?
|
cFos DSL Modem driver related. What does it do and is it required?
|
|
cFosInst_Check
|
cfosinst.exe
|
?
|
cFos DSL Modem driver related. What does it do and is it required?
|
|
cfosspeed
|
cFosSpeed.exe
|
U
|
cFos_Software ... Read More
|
|
CFSServ.exe
|
CFSServ.exe
|
N
|
CFSServ.exe is a Toshiba Laptop utility that allows you to easily change computer settings in a quick manner. ... Read More
|
|
cftm
|
cftm.exe
|
X
|
Added by the W32.Harakit worm.
|
|
cftmonn
|
cftmonn.exe
|
X
|
Added by the W32/AutoRun-DJ removable media worm.
|
|
cfy
|
cfy.exe
|
X
|
Surfenhance.com SearchForIt adware variant ... Read More
|
|
CGI Firewall Script
|
CGIAGENT.EXE
|
X
|
Added by the W32/Bropia-U P2P worm. This infection also creates the file C:\Windows\System32\fatpammy.exe. ... Read More
|
|
CGServer
|
cgserver.exe
|
U
|
Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need ... Read More
|
|
Cgtask Services
|
cgtask.exe
|
X
|
Added by the LALA.B TROJAN!
|
|
Cgywin
|
cgywin32.exe
|
X
|
Added by the W32/Rbot-AEI worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
ChamClock
|
ChamClock.exe
|
U
|
Chameleon Clock - system tray clock replacement
|
|
ChangeLines
|
chngline.exe
|
?
|
??
|
|
Chaos Manager loader
|
cm2.exe
|
U
|
Chaos Manager is a Freeware Task Sheduler, Calender/Reminder Program.
The startup entry allows chaos manager to run in the system tray an ... Read More
|
|
Chatango
|
Chatango.exe
|
N
|
Chatango - "allows people to be connected in real time through their Web browsers. Include your Chatango contact link or button when you create eBay a ... Read More
|
|
Chcenter
|
chcenter.exe
|
N
|
IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files" ... Read More
|
|
chckntfs
|
chckntfs.exe
|
X
|
Added by the W32/Tilebot-EF worm and IRC backdoor.
|
|
chcp.exe
|
chcp.exe
|
X
|
A variant of the Backdoor.Win32.SdBot.bmh family of worms and IRC backdoor Trojans. ... Read More
|
|
che32
|
che.ocx.vbs
|
X
|
Added by the WM97/Adenu-B prepend virus.
|
|
Check
|
Check.exe
|
X
|
Added by the W32/VB-DRN virus and worm.
|
|
Check Messenger
|
cmesseng.exe
|
U
|
Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account ... Read More
|
|
CheckAvp
|
CheckAvp.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
checkcustomworksupdate
|
CheckCWupdate.exe
|
N
|
Update checker, part of CustomWorks - "customize any embroidery designs to design your own unique creations" ... Read More
|
|
CheckDialer
|
ChkDial.exe
|
U
|
Added by the CheckDialer modem connection monitoring tool.
|
|
checkers
|
checkers5.exe
|
X
|
Added by the W32.Formshared.A worm. W32.Formshared.A is a worm that attempts to spread a copy of Infostealer through peer-to-peer applications. ... Read More
|
|
CheckIt 86
|
CheckIt86.exe
|
U
|
Used to launch the CheckIt86 Popup blocker.
|
|
CheckSys
|
CheckSys.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
checktime
|
ct.exe
|
U
|
Related to the HP Select software on HP computers.
|
|
CheckWin
|
CheckWin.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
chiCkie
|
chiCkie.exe
|
X
|
Added by the W32.Chiko removable drive worm.
|
|
ChikkaDefault
|
ChikkaLauncher.exe
|
N
|
Added by the Chikka Messenger program. Chikka Messenger allows you to send text messages and MMS images to mobile phones from your computer. ... Read More
|
|
ChilyClient
|
ChilyClient.exe
|
U
|
Added by the Spyware.ChilyEMon surveillance software. This software should be removed if found on your computer without your knowledge. ... Read More
|
|
china11msn
|
CHINA11MSN.EXE
|
X
|
Added by the W32.ENVID.O WORM! ... Read More
|
|
ChineseStar
|
cstar.exe
|
U
|
Chinese language support software
|
|
Chipbus
|
Chipbus.sys
|
X
|
Added by the Backdoor.Hackersdoor backdoor. Backdoor.Hackersdoor is a Trojan horse that installs a malicious driver file and then opens a back door on ... Read More
|
|
chk
|
chke.dll
|
X
|
|
|
CHK Disker
|
chkdsker.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CHK NT
|
chkntf.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CHKADMIN
|
CHKADMIN.EXE
|
N
|
Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability" ... Read More
|
|
ChkBoot
|
ChkBoot.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
chkdsk
|
c:\autoexec.bat
|
X
|
|
|
chkext(chkext)
|
chkext.exe
|
X
|
Added by the W32/Sdbot-CRW worm and IRC backdoor.
W32/Sdbot-CRW spreads to other network computers by exploiting vulnerabilities, inclu ... Read More
|
|
chkhbci
|
chkhbci.exe
|
N
|
Smart Card reader software for Omnikey readers ... Read More
|
|
ChkVolume
|
ChkVolume.dll
|
X
|
Identified by Kaspersky as a variant of the Trojan.Win32.Agent.evy Trojan.
|
|
Choke
|
Choke.exe-blahh
|
X
|
|
|
chostsv
|
chostsv.exe
|
X
|
Added by the BANPAES.C TROJAN!
|
|
ChronitelInitTV
|
CHTVINIT.EXE
|
?
|
??
|
|
Chronograph
|
chrono.exe
|
U
|
Added by the Chronograph time syncronization utility.
|
|
Ci Svr
|
cisvr.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
ci1gnt
|
ci1gnt.exe
|
X
|
Identified by Kaspersky Antivirus as Trojan.Win32.Agent.dhu.
|
|
ciakaisen.exe
|
ciakaisen.exe
|
X
|
Added by the Dialer.BaciamiStupido premium dialer. Dialer.BaciamiStupido is a dialer program that accesses a Web site by dialing a high-cost number us ... Read More
|
|
CICache
|
CICache.exe
|
?
|
Unknown file. Possibly malware?
|
|
CIFPLogAggregator
|
CIFPLogAggregator.exe
|
Y
|
Related to the Cyclope Internet Filtering Proxy Internet site and content filtering software. ... Read More
|
|
cihost.exe
|
cihost.exe
|
X
|
Added by the LINST TROJAN!
|
|
CIJxP2PSERVER
|
CIJxP2PS.EXE
|
N
|
Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7 ... Read More
|
|
CIO
|
che7e1~1.exe
|
N
|
Added by the ChatItOut webcam chat program.
|
|
CISrvr Program
|
CISRVR.EXE
|
N
|
Related to internet setup on Compaq PC's
|
|
Cissi
|
Cissi.exe
|
X
|
Added by the CISSI.A WORM!
|
|
citiucs
|
CitiUCS.exe
|
U
|
Citibank Virtual_Account_Numbers ... Read More
|
|
CitiVAN
|
CitiVAN.exe
|
N
|
Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again ... Read More
|
|
cjamkm
|
cjamkm.sys
|
X
|
Added by a variant of the Troj/NTRootK-CM rootkit.
|
|
cjb
|
cjb.exe
|
X
|
Identified as a variant of the Trojan-Clicker.Win32.Small.BG Trojan.
|
|
CJET
|
CJet.exe
|
X
|
Added by the Adware.FFToolBar adware toolbar.
|
|
Cjstcom
|
Cjstcom.exe
|
Y
|
Canon printer BJ status language monitor
|
|
cjwriiigqazft
|
cjwriiigqazft.cat
|
X
|
Added by the Backdoor.Rustock backdoor rootkit.
|
|
ClamWin
|
ClamTray.exe
|
Y
|
|
|
class454~@#
|
class454.exe
|
U
|
Added by the Spyware.XPSpy commercial keylogging software. This software should be uninstalled if it was not installed by yourself.
Spy ... Read More
|
|
ClauerUpdate
|
ClUpdate.exe
|
Y
|
This file is installed with the Clauer Project, developed by the Universitat Jaume I, that converts a CD-ROM or a Flash drive into an authentication t ... Read More
|
|
ClauerUpdate
|
ClUpdate.exe
|
Y
|
This file is installed with the Clauer Project, developed by the Universitat Jaume I, that converts a CD-ROM or a Flash drive into an authentication t ... Read More
|
|
clbcatex
|
clbcatix.dll
|
X
|
Identified as Trojan-Clicker.Win32.Agent.ct.
|
|
clbdriver
|
clbdriver.sys
|
X
|
Identified as a variant of the Rootkit.Win32.Clbd.cx rootkit.
|
|
clboot32
|
CLBOOT32.EXE
|
U
|
PC-Duo_Remote_Control from Vector. "System Snapshot provides a detailed ... Read More
|
|
clcbt.exe
|
clcbt.exe
|
X
|
Added by the Troj/Agent-CBA downloader Trojan.
|
|
CLCLSet
|
CLCL.exe
|
U
|
CLCL clipboard caching utility
|
|
Clean Cookies
|
Cookies.exe
|
X
|
Added by the W32/VB-DZA worm.
|
|
Clean Mgr
|
cleanmg.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Cleanator
|
Cleanator.exe
|
X
|
Added by the Cleanator rogue security software. Cleanator reports false or exaggerated system security threats on the computer. ... Read More
|
|
Cleanator
|
Cleanator.exe
|
X
|
Added by the Cleanator rogue security tool.
|
|
CleanEasyImg
|
cleanall.exe
|
?
|
??
|
|
cleanhtm
|
cleanhtm.exe
|
X
|
Added by the Troj/Mdrop-DPE Trojan.
|
|
cleanmgr.exe
|
cleanmgr.exe
|
X
|
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
|
|
cleanregpath
|
CleanReg.exe
|
?
|
Apparently Annex A ADSL modem related - what does it do and is it required? ... Read More
|
|
CleanSweep Smart Sweep- Internet Sweep
|
Csinsm32.exe
|
U
|
Automatic logging of installs from Norton CleanSweep - available via Start -> Programs ... Read More
|
|
CleanSweep Smart Sweep-Internet Sweep
|
CsinsmNT.exe
|
N
|
|
|
CleanSweep Useage Watch
|
CSUSEM32.EXE
|
N
|
Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of tim ... Read More
|
|
cleansweep.exe
|
cleansweep.exe
|
X
|
Added by the Troj/Agent-NEU Trojan.
|
|
CleanTemp
|
CLEANT~1.EXEB
|
U
|
CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory ... Read More
|
|
CleanTemp
|
CleanTemp.exe
|
U
|
CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory ... Read More
|
|
cleantemp
|
CLEANT~1.EXEBCleanTemp.exe
|
U
|
CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory ... Read More
|
|
cleanup
|
corpstats.exe
|
X
|
Added by the Troj/Ransom-A ransoming Trojan.
|
|
CleanUp Antivirus
|
CU345d.exe
|
X
|
Added by the Cleanup Antivirus rogue anti-spyware program.
|
|
CleanupProgram
|
cleanup.exe
|
?
|
In a C:Sonysys folder - Sony Vaio related?
|
|
clean_service
|
clean_service.cmd
|
X
|
Added by the W32.Refaz WORM! ... Read More
|
|
CleverKeys
|
ClvrKeys.exe
|
N
|
Added by CleverKeys.
"CleverKeys is free software that provides instant access to definitions at Dictionary.com, synonyms at Thesaurus. ... Read More
|
|
clfmon.exe
|
clfmon.exe
|
X
|
Added by the TROJ/AGENT-BJ TROJAN!
|
|
Cli Confg
|
cliconfig.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CLI Services
|
clisrv.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CLI32
|
cli32.exe
|
X
|
Identified by AVG antivirus as a variant of the Trojan horse Downloader.Zlob.NP Trojan. ... Read More
|
|
Click Radio Tuner
|
clickr~1.exe
|
N
|
ClickRadio - subscription service playing radio music via the internet
|
|
Click Tray Calendar
|
ClickT~1.EXE
|
N
|
ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc ... Read More
|
|
Click-N-Type Keyboard
|
Click-N-Type.exe
|
N
|
Click-N-Type is an on-screen virtual keyboard designed for anyone with a disability that prevents him or her from typing on a physical computer keybo ... Read More
|
|
ClickMe
|
ClickMe.exe
|
N
|
|
|
Clickoff
|
Clickoff.exe
|
U
|
Clickoff automatically dismisses annoying dialog boxes
|
|
ClickTheButton
|
CTB.EXE
|
X
|
ClickTheButton Downloader-MY adware
|
|
ClickTheButton
|
csrss.exe
|
X
|
ClickTheButton Downloader-MY adware. Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
CLICONFG
|
CLICONFG.EXE
|
X
|
Added by the OPASERV.T WORM!
|
|
client access api daemon
|
cwbappcd.exe
|
U
|
IBM iSeries Client Access, see here ... Read More
|
|
Client Access Check Version
|
cwbckver.exe
|
N
|
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks th ... Read More
|
|
Client Access Express Welcome
|
cwbwlwiz.exe
|
?
|
Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to ... Read More
|
|
Client Access Help Update
|
cwbinhlp.exe
|
N
|
Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and ... Read More
|
|
Client Access Service
|
CwbSvStr.Exe
|
N
|
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if ... Read More
|
|
client access taskbar
|
cwbuitsk.exe
|
U
|
IBM iSeries Client Access taskbar, see here.
|
|
Client Default
|
Client.exe
|
U
|
Samurize is a system monitoring and desktop enhancement engine for Microsoft Windows 2000/XP/2003. ... Read More
|
|
Client Server
|
csrcs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Client Server Control Process
|
crcss.exe
|
X
|
Added by the Troj/Agent-HR backdoor Trojan.
|
|
Client Server Run Time Proccess
|
csrsrv.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
Client Server Runtime Counter
|
crssc.exe
|
X
|
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
|
|
Client Server Runtime Proces
|
csrss.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Client Server Runtime Process
|
csrsss.exe
|
X
|
Added by the SDBOT-LD WORM!
|
|
Client Server Runtime Process
|
csrs.exe
|
X
|
Added by the W32.Linkbot.M worm.
|
|
Client Server Runtime Service
|
csr.exe
|
X
|
Added by the W32/Sdbot-AFM worm and IRC backdoor.
|
|
Client Update Service for Novell
|
cusrvc.exe
|
Y
|
Part of the Novell Client for Windows and is used to keep the client up to date. It has a service name of cusrvc and is found in the Windows system f ... Read More
|
|
Client/Server Runtime Server Subsystem
|
csrss.exe
|
X
|
Added by the W32/IRCBot-UN worm and IRC backdoor.
|
|
Client32
|
client32.exe
|
X
|
Part of the NetSupport line of remote control products.
|
|
Clients Server Runtime Process
|
csrss.exe
|
X
|
Added by the W32/Sdbot-CPF worm and IRC backdoor.
|
|
ClientServerRuntimeProcess
|
csrss.exe
|
X
|
Added by the Troj/Sufia-A Trojan. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe file. ... Read More
|
|
ClientServerRuntimeService
|
csrcc.exe
|
X
|
Added by the Trojan.Sufiage Trojan.
|
|
Clip Service Manager
|
clipmg.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Clip Servicer
|
clipsrvc.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Clip Srv
|
clipsv.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Clipbook Service
|
Clipsrv.exe
|
N
|
Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks ... Read More
|
|
ClipMate5x
|
ClipMt5x.exe
|
N
|
Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs ... Read More
|
|
Clipmate6
|
CLIPMT60.EXE
|
N
|
Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs ... Read More
|
|
ClipMate6
|
ClipMt63.exe
|
N
|
Clipmate allows you to store clips of text that you can then assign to hotkeys that will paste that information back to a document. ... Read More
|
|
ClipMate6
|
ClipMate.exe
|
U
|
Clipmate is a program that runs in your task bar and captures/saves any data you copy to the clipboard. You can then retrieve this data at a later da ... Read More
|
|
ClipMate7
|
ClipMate.exe
|
N
|
Added by the Clipmate 7 clipboard extender.
|
|
Clipomatic
|
Clipomatic.exe
|
N
|
Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to re ... Read More
|
|
Clipsrv
|
Clipsrv.exe
|
N
|
Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks ... Read More
|
|
ClipSrv
|
clipserv.exe
|
X
|
Added by the W32/Sdbot-AAV worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
ClipSrv
|
clipservr.exe
|
X
|
Added by the W32/Sdbot-AFE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
ClipTrak
|
ClipTrak.exe
|
N
|
ClipTrak - clipboard extender
|
|
ClipTrakker
|
ClipTrakker.exe
|
N
|
Cliptrakker - clipboard extender
|
|
CLMFrontPanel
|
clmpanel.exe
|
U
|
System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection s ... Read More
|
|
clmss
|
clmss.exe
|
X
|
Added by the W32/Tilebot-AO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
clock Loader
|
cls.exe
|
X
|
Added by the W32/Sdbot-AFT worm. When connected this infections connects to an IRC server where it waits for remote commands to execute. ... Read More
|
|
ClockWise
|
CLOCKWISE.EXE
|
U
|
ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It al ... Read More
|
|
ClocX
|
ClocX.exe
|
U
|
ClocX is analog clock application for Microsoft Windows 98/ME/NT/2000/XP/2003.
|
|
CloneCD
|
CloneCDTray.exe
|
U
|
System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions ... Read More
|
|
CloneCDTray
|
CloneCDTray.exe
|
U
|
System tray for CloneCD - the only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions ... Read More
|
|
CLSID
|
com.exe
|
X
|
Adult content dialler
|
|
cltmon
|
cltmon.exe
|
X
|
Added by the Troj/Dloadr-CHY Trojan downloader.
|
|
cma
|
cma.exe
|
U
|
DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
|
|
CMAPP
|
cmappclient.exe
|
X
|
Added by the Trojan.Cmapp Trojan.
|
|
Cmd
|
cmd32.exe
|
X
|
Added by the TANKED WORM!
|
|
cmd32
|
configs.exe
|
X
|
Hijacker, also detected as the QURL-2 TROJAN! ... Read More
|
|
cmdbcs
|
cmdbcs.exe
|
X
|
Added by the Troj/PWS-AFC information stealing Trojan.
|
|
cmdcon
|
cmdcon.exe
|
X
|
Added by the CRYPTER.A TROJAN!
|
|
cmdprompt32.pif
|
CmdPrompt32.pif
|
X
|
Added by the W32.Assiral.B WORM! ... Read More
|
|
cmdriver
|
cmdriver.sys
|
X
|
Added by the SecurityRisk.Cashmoa rootkit. SecurityRisk.Cashmoa is a security risk that hides any processes that are named cmc.exe. ... Read More
|
|
cmds
|
cmds.exe
|
X
|
Identified as W32/Malware.SHZ or Trj/Downloader.OLG.
|
|
CmdShell.exe
|
CmdShell.exe
|
X
|
Added by the Troj/Bckdr-QHY backdoor Trojan.
|
|
CME
|
cme.exe
|
X
|
Part of Gator advertising spyware - see here for removal instructions
|
|
CmeSYS
|
CMEsys.exe
|
X
|
Part of Gator advertising spyware - see here for removal instructions
|
|
CmeUPD
|
CMEupd.exe
|
X
|
Part of Gator advertising spyware - see here for removal instructions
|
|
cmflywavename
|
CmFlywav.exe
|
N
|
Driver for Linksys Wireless Music Bridge.
|
|
CMGrdian
|
CMGrdian.exe
|
?
|
One of the McAfee shared components. What does it do and is it required?
|
|
cmi4432
|
cmi4432.sys
|
X
|
Added by the RTKT_DUQU.A rootkit.
|
|
cmman
|
CMMan.exe
|
X
|
Added by the Trojan.Cmapp TROJAN! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. ... Read More
|
|
Cmmon32Sys
|
cmmon32.exe
|
X
|
Added by the SMALL.CL TROJAN!
|
|
cmonsvc322
|
cmonsvc322.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CMPDPSRV
|
CMPDPSRV.EXE
|
U
|
Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of ... Read More
|
|
cmrrs
|
cmrrs.exe
|
X
|
Added by the Troj/Dadobra-FO Trojan.
|
|
cmrss
|
cmrss.exe
|
X
|
Added by the Troj/Dloader-MR TROJAN!
|
|
cmrst
|
cmrst.scr
|
X
|
Added by the Troj/Dloader-FP TROJAN/downloader!
|
|
cmrst
|
cmrst.exe
|
X
|
Added by the PWSteal.Bancos.S TROJAN!
|
|
cmsettings
|
ctmn.exe
|
U
|
Part of NetNanny Chat_Monitor ... Read More
|
|
cmssSystemProcess
|
csmss.exe
|
X
|
Added by the AGENT-CO TROJAN!
|
|
cmsssystemprocess
|
csms.exe
|
X
|
Added by the AGENT-Y TROJAN! ... Read More
|
|
CmSTP
|
cmstp.exe
|
X
|
Added by the Troj/Cosmu-A Trojan.
|
|
cmsystem
|
CMSystem.exe
|
X
|
CASClient adware variant ... Read More
|
|
cmt101
|
cmt101.exe
|
X
|
Added by a variant of the CRYPTER.C TROJAN!
|
|
CmUCReye.exe
|
CmUCReye.exe
|
U
|
Related to devices by Medion Display.
|
|
cmutil
|
cmutil.exe
|
X
|
Added by the Troj/Agent-DFN downloading Trojan.
|
|
cmx32
|
cmx32.exe
|
X
|
Added by the GEMA.D TROJAN!
|
|
Cn323
|
cnfrm33.exe
|
X
|
Added by the MIMAIL.G WORM!
|
|
CNBABE
|
CNBABE.EXE
|
X
|
Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing ... Read More
|
|
Cnfrm32
|
cnfrm.exe
|
X
|
Added by the MIMAIL.D WORM!
|
|
CnwiDeviceAgent
|
cnwida.exe
|
Y
|
Part of the Canon imagePROGRAF W8400 printer software.
|
|
CnxAdslL
|
CnxAdslL.exe
|
Y
|
DLink, Zoom, or Conexant modem driver
|
|
CnxDslTaskBar
|
CnxDslTb.exe
|
N
|
Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems
|
|
Cobian Backup 8 interface
|
cbInterface.exe
|
U
|
User interface for Cobian Backup 8.
|
|
codecdirectx.exe
|
codecdirectx.exe
|
X
|
Added by the Troj/Banloa-AZY online banking Trojan. If you are infected with this it is advised that you immediately change your online banking passwo ... Read More
|
|
CodeClean
|
CCIntro.exe
|
X
|
Added by the CodeClean security risk. CodeClean is a potentially unwanted application described as a spyware removal utility that may give exaggerated ... Read More
|
|
CodeScanMain
|
CodeScan.exe
|
X
|
Added by the CodeScan rogue anti-spyware program.
|
|
cogad
|
cogad.exe
|
X
|
Added by the Troj/Dloadr-CEP downloading Trojan.
|
|
COH_Mon
|
COH_Mon.sys
|
Y
|
Related to Norton Internet Security 2008.
|
|
Cold Fusion Application Server
|
cfserver.exe
|
Y
|
The main ColdFusion program.
|
|
ColdFusion Executive
|
cfexec.exe
|
Y
|
Polls the ColdFusion Application Server service and, if it is not running, restarts it. ... Read More
|
|
ColdFusion Management Service
|
CANamingAdapter.exe
|
Y
|
Supports ColdFusion Management features, including Archive/Restore and Server Reporting. ... Read More
|
|
ColdFusion Monitoring Service
|
ccmgr.exe
|
Y
|
According to this page about ColdFusion, the ColdFusion Monitoring Service "monitors the performance and availability of the ColdFusion Server, the HT ... Read More
|
|
ColdFusion RDS
|
cfrdsservice.exe
|
Y
|
rovides security, directory and file browsing, and debugging services for ColdFusion Studio. ... Read More
|
|
coloreal
|
coloreal.exe
|
U
|
Makes colours sharper and brighter, but will only work with coloreal capable monitors ... Read More
|
|
ColtsScreenServer
|
ColtsScreenServer.exe
|
N
|
Software from the MercurySports for streaming information about the Indianapolis Colts US Football team. Slightly loose Terms or Use and Privacy poli ... Read More
|
|
ColtsScreenServerSvc
|
ColtsScreenServer.exe
|
N
|
Software from the MercurySports for streaming information about the Indianapolis Colts US Football team. Slightly loose Terms or Use and Privacy poli ... Read More
|
|
COM Host
|
comHost.exe
|
Y
|
|
|
Com+
|
COM+.EXE
|
X
|
Added by the W32/Randon-O worm. This infection, when started, connects to an IRC server using a provided MIRC client to receive commands. ... Read More
|
|
Com+ Sys
|
csrs.exe
|
X
|
Added by the FORBOT-BT WORM!
|
|
COM+ System Application
|
csrss.exe
|
X
|
Added by the W32.Banish.A@mm mass-mailing worm.
|
|
COM+ System Application
|
csrss.exe
|
X
|
Added by the W32.Banish.A@mm mass-mailing worm. Note: this should not be confused with the legitimate c:\windows\system32\csrss.exe or c:\windows\syst ... Read More
|
|
COM+ System Client
|
cmsvc.exe
|
X
|
Identified as the SdBot.bis worm.
|
|
COM-IP
|
COMIP.EXE
|
N
|
COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt h ... Read More
|
|
ComAgent
|
ComAgent.exe
|
U
|
ComAgent - MDaemon's instant messaging client
|
|
combo.exe
|
combo.exe
|
X
|
Unidentified mass-mailing spam malware. When run this file, and combop.exe, send spam from your machine. ... Read More
|
|
combop.exe
|
combop.exe
|
X
|
Unidentified mass-mailing spam malware. When run this file, and combo.exe, send spam from your machine. ... Read More
|
|
COMCFG
|
comcfg.exe
|
X
|
Added by the TOADCOM.A TROJAN!
|
|
comctl32
|
comctl32.exe
|
X
|
Adware - recognized by Kaspersky antivirus and others as TrojanDownloader.Win32.Agent.am ... Read More
|
|
comctsvc
|
comctsvc.exe
|
X
|
Added by the W32/Tilebot-CM worm and IRC backdoor.
|
|
Comm Driver
|
commh32.exe
|
U
|
G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yo ... Read More
|
|
COMMAND
|
command.exe
|
X
|
Added by the QQPASS.E TROJAN!
|
|
Command Service
|
command.exe
|
X
|
Identified as Adware.CommAd.A. This adware delivers popups to your computer. This infection also installs the file asappsrv.dll into the same folder ... Read More
|
|
command32
|
command32.exe
|
X
|
Added by the Troj/LineaDl-A Trojan.
|
|
CommCtr
|
commctr.exe
|
N
|
"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available ... Read More
|
|
Comodo Application Agent
|
cmdagent.exe
|
Y
|
The main control program for the free firewall, Comodo Firewall Pro.
|
|
COMODO Firewall Pro
|
CPF.exe
|
Y
|
The main control program for the free firewall, Comodo Firewall Pro.
|
|
COMODO Firewall Pro
|
cfp.exe
|
Y
|
The main control program for the free firewall, Comodo Firewall Pro.
|
|
COMODO Memory Firewall
|
cmf.exe
|
Y
|
Comodo Memory Firewall attempts to protect you from exploits that use buffer overflows. ... Read More
|
|
ComodoBackupService
|
CmdBkSvc.exe
|
Y
|
|
|
CompanionWizard
|
compwiz.exe
|
X
|
Related to the WinAntiVirus Pro 2007 rogue anti-spyware program.
|
|
Compaq Alerter
|
CPQAlert.exe
|
U
|
Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's ... Read More
|
|
compaq connections
|
COMPAQ~1.EXE
|
N
|
See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially ... Read More
|
|
Compaq DMI
|
cpqdmi.exe
|
N
|
Compaq version of the Desktop Management Interface
|
|
Compaq Message Server
|
COMPAQ-RBA.EXE
|
N
|
Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are ... Read More
|
|
Compaq PK Daemon
|
cpqkl.exe
|
U
|
For Compaq laptops for programming user configurable keys. Not required unless you use them ... Read More
|
|
Compaq Presario SSH
|
cpsd.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Compaq Print Fax
|
cpqa1000.exe
|
X
|
Added by the W32/Sdbot-WL WORM/IRC backdoor trojan!
|
|
compaq service drivers
|
compq.exe
|
X
|
Added by a variant of the W32/SDBOT WORM! ... Read More
|
|
compaq service drivers
|
compqs.exe
|
X
|
Added by a variant of the W32/SDBOT WORM! ... Read More
|
|
Compaq Service Drivers
|
compaq.exe
|
X
|
Added by the W32/Sdbot-AFU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Compaq Service Drivers 32
|
compq32.exe
|
X
|
Added by a variant of the W32/SDBOT WORM!
|
|
compaq service drivrs
|
copq.exe
|
X
|
Added by a variant of the WIN32.RBOT WORM! ... Read More
|
|
CompaqHW Comp Manager
|
cpqhcm.exe
|
?
|
Running on a Compaq laptop - any ideas?
|
|
compaqs service driver
|
copypad32.exe
|
X
|
Added by the SDBOT.CSO ... Read More
|
|
compaqs service drivers
|
compqs.exe
|
X
|
Added by a variant of the W32/SDBOT WORM! ... Read More
|
|
CompaqSystray
|
cpqpscp.exe
|
N
|
Compaq System Tray icon
|
|
compd service drivrs
|
codq.exe
|
X
|
Added by a variant of the W32/SDBOT WORM! ... Read More
|
|
Complete Antivirus
|
complete.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Compliant
|
compliant.exe
|
X
|
Added by the W32/Rbot-LB trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This i ... Read More
|
|
ComPlusSetup
|
catsrvut.dll
|
Y
|
Part of Microsoft Com+
|
|
compmgmt
|
CTFM0N.EXE
|
X
|
Added by the TROJ_INJECT.PT Trojan. Please note that this file should not be confused with the legitimate C:\Windows\System32\ctfmon.exe. Please note ... Read More
|
|
comproremote
|
ComproRemote.exe
|
U
|
Related to VideoMate TV tuner and capture card for your Computer.
|
|
comproschedulerdtv
|
ComproSchedulerDTV.exe
|
U
|
Related to VideoMate TV tuner and capture card for your Computer.
|
|
CompuSpy KeyLogger
|
cswin2008.exe
|
U
|
Added by the Spyware.CompuSpy surveillance software. Spyware.CompuSpy is a spyware program that attempts to record keystrokes on the computer. If this ... Read More
|
|
Computer Defender 2009
|
cd2009.exe
|
X
|
Added by the Computer Defender 2009 rogue anti-spyware program.
|
|
comrep
|
comrepl32.exe
|
X
|
Added by the W32/Rbot-DNH worm and IRC backdoor.
|
|
comrepl
|
comreplsvc.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
COMSMDEXE
|
comsmd.exe
|
N
|
3Com tray icon
|
|
COMSurrogate
|
char.exe
|
X
|
Added by the Troj/Erazer-A Trojan.
|
|
comxt
|
comxt.exe
|
X
|
Added by the COMXT TROJAN!
|
|
Config33.exe
|
Config33.exe
|
X
|
Added by the SDBOT.T TROJAN!
|
|
ConfigFree Service
|
CFSvcs.exe
|
U
|
Toshiba's wireless card configuration utility.
|
|
ConfiggLoader
|
cart322.exe
|
X
|
Added by the GAOBOT.DJ WORM!
|
|
ConfigSafe
|
CFGSAFE.EXE
|
U
|
ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system vers ... Read More
|
|
ConfigServices
|
Config.exe
|
N
|
Part of initial setup on a Compaq PC
|
|
configsetup
|
configsetup32.exe
|
X
|
Added by the W32/Agobot-AFP worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
Configuration Loader
|
cmd32.exe
|
X
|
Added by the LOADCFG or SDBOT TROJANS!
|
|
Configuration Loader
|
confgldr.exe
|
X
|
Added by the POLYBOT WORM!
|
|
Configuration Loader
|
ccSort.exe
|
X
|
Added by the AGOBOT.SR WORM!
|
|
Configuration Loader
|
configldr.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
Configuration Loader
|
cnfgld32.exe
|
X
|
A variant of the W32/SDBot.AWGY family of worms and IRC backdoor Trojans.
|
|
Configuration Loading
|
configldr.exe
|
X
|
Added by the AGOBOT-EC WORM!
|
|
Configuration Manager
|
CNFGLD32.EXE
|
X
|
Added by the SDBOT TROJAN!
|
|
Configuration Manager
|
Cnfgldr.exe
|
X
|
Added by the SDBOT TROJAN!
|
|
configuration manager
|
cfg32.exe
|
X
|
A BookedSpace variant. Found in running processes as: C:\WINDOWS\cfg32.exe and C:\WINDOWS\cfg32a.exe ... Read More
|
|
Configuration Utility
|
CONFIG.EXE
|
N
|
Controls linksys wireless connection. Available from the Desktop
|
|
Configuration win32
|
cnfgld32.exe
|
X
|
A variant of the W32/SDBot.AWGW family of worms and IRC backdoor Trojans.
|
|
Configuration Wizard
|
Cfgwiz32.exe
|
X
|
Added by a variant of the HACKTACK TROJAN! Not to be confused with the legitimate MS "ISDN Configuration Wizard" (Cfgwiz32.exe) ... Read More
|
|
conhost
|
conhost.exe
|
X
|
Added by the rogue anti-spyware program called Wolfram Antivirus.
|
|
Conmgr
|
conmgr.exe
|
N
|
Starts Winfax pro at startup
|
|
ConMgr.exe
|
conmgr.exe
|
U
|
Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating y ... Read More
|
|
conmswf
|
conrnbne.exe
|
X
|
Added by the W32/Sdbot-DEX worm and IRC backdoor.
|
|
Connect2Party
|
connect2party.exe
|
X
|
Adult content dialler
|
|
Connection Keeper
|
ConKeepM.exe
|
N
|
Added by Connection Keeper. This program simulates Internet traffic at random intervals so that you do not go idle and thus have your connection dropp ... Read More
|
|
Connection Manager
|
CManager.exe
|
N
|
SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall ... Read More
|
|
Cons
|
consol32.exe
|
X
|
Hijacker - redirects to a p0rn portal, where foistware like ISTBar gets stealth installed ... Read More
|
|
conscorr
|
conscorr.exe
|
X
|
Transponder parasite updater/installer
|
|
Console de Gerenciamento Microsoft
|
csrss.exe
|
X
|
Added by the Troj/Bancban-ET password-stealing Trojan.
|
|
ConSrvMgr
|
csmrsnv.exe
|
X
|
Added by the Troj/Stinx-J backdoor Trojan.
|
|
Contacte
|
contacte.exe
|
?
|
Some kind of driver?
|
|
Content List Management Subsystem
|
clmss.exe
|
X
|
Added by the W32/Spybot-EL worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
ContentTransferWMDetector
|
ContentTransferWMDetector.exe
|
N
|
Sony Content Transfer software allows you to transfer music, video, photos, and podcasts to the Walkman player. ... Read More
|
|
Contraviro
|
Contraviro.exe
|
X
|
Added by the Contraviro rogue anti-spyware program.
|
|
ContraVirus
|
ContraVirus.exe
|
X
|
Added by the ContraVirus rogue anti-spyware program. This program uses fake and exaggerated scan results to persuade you to purchase their software. ... Read More
|
|
ContraVirus
|
ContraVirusPro.exe
|
X
|
Added by the ContraVirus rogue anti-spyware program. This program uses fake and exaggerated scan results to persuade you to purchase their software. ... Read More
|
|
control center
|
Center.exe
|
U
|
Related to Asus WLAN Card ... Read More
|
|
control panel software service
|
cprs.exe
|
X
|
Added by the W32/Rbot-FPI worm and IRC backdoor.
|
|
Control Task Manager
|
cvsys.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Controlled Resource System Service
|
crss.exe
|
X
|
Added by the AGOBOT.GH WORM!
|
|
ControlPanel
|
cmd32.exe
|
X
|
Added by the Troj/Dloader-JW downloader TROJAN.
|
|
ControlServiceMgr
|
csmsv.exe
|
X
|
Added by the Troj/Agent-XC Trojan.
|
|
Cookie Cop 2
|
CookieCop.exe
|
U
|
Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time y ... Read More
|
|
Cookie Pal
|
CPBRWTCH.EXE
|
U
|
Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time y ... Read More
|
|
CookieJar
|
Cookiejar.exe
|
U
|
Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time y ... Read More
|
|
CookiePatrol
|
CookiePatrol.exe
|
U
|
CookiePatrol - PestPatrol's cookie interceptor stopping spyware cookies
|
|
CookieWall
|
cookie.exe
|
U
|
CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return ... Read More
|
|
Cool Desk
|
cdesk.exe
|
U
|
Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and off ... Read More
|
|
CoolKill
|
CoolKill.exe
|
U
|
Coolkill is a process killer.
|
|
Coolwallpaper
|
cwm_tray.exe
|
N
|
Cool Wallpaper software allows you to manage high quality photos as desktop wallpaper and screen savers ... Read More
|
|
coolwebprogram
|
clrssn.exe
|
X
|
CoolWebSearch parasite variant
|
|
copernic desktop search
|
CopernicDesktopSearch.exe
|
U
|
Copernic Desktop_Search - "Easily search your entire hard drive in less than a second to pinpoint the right file, e-mail, music or pictures." ... Read More
|
|
CopernicPerUserTaskMgr
|
CopernicPerUserTaskMgr.exe
|
U
|
Automatic tasking feature of Copernic Pro multi-search engine tool
|
|
Copy handler
|
Copy Handler.exe
|
U
|
Copy_Handler lets you copy between hard disks, floppies, local networks, CDs, and many other storage media. Copy Handler gives you the power to pause, ... Read More
|
|
copyex
|
copyex.exe
|
X
|
Added by the Troj/DwnLdr-IUD downloading Trojan.
|
|
core
|
core.sys
|
X
|
Identified by Spybot - Search and Destroy as Smitfraud-C.CoreService. This infection is a rootkit found with certain smitfraud infections. ... Read More
|
|
Core Process Aplication
|
ccapl.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
Core Process Aplication x16
|
ccapl16.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
Core Process Aplication x32
|
ccapl32.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
CoreCenter
|
CoreCenter.exe
|
U
|
MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking ... Read More
|
|
CoreCenter
|
CORECE~1.EXE
|
U
|
MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking ... Read More
|
|
Coreguard Antivirus 2009
|
Coreguard 2009.exe
|
X
|
Added by the CoreGuard Antivirus 2009 rogue anti-spyware program.
|
|
Corel Colleagues &Contacts Reminders
|
cffrem.exe
|
N
|
Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of Corel Print Office ... Read More
|
|
Corel Family &Friends reminders
|
CFFREM.EXE
|
N
|
Corel Family & Friends - all-in-one calender, address book and list manager. Part of Corel Print House Magic ... Read More
|
|
CorelDraw Toolbox
|
CorelDraw.exe
|
X
|
Sdbot WORM/IRC backdoor variant adds this, and will allow for a malicious attacker to exploit the computer. ... Read More
|
|
CoreSrv
|
coresrv.exe
|
X
|
Some IRC trojans/worms use this - see here for more information
|
|
CORESYS
|
coresys.exe
|
?
|
??
|
|
CorrectConnect
|
CConnect.exe
|
N
|
Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available ... Read More
|
|
cosine
|
cosine.exe
|
X
|
Added by the RBOT-SW WORM!
|
|
Counterstrike Service Agent
|
czrzns.exe
|
X
|
A variant of the Spybot family of worms and IRC backdoor Trojans.
|
|
couponica
|
couponica.exe
|
X
|
|
|
CowboysScreenServer
|
CowboysScreenServer.exe
|
N
|
Software from the MercurySports for streaming information about the Dallas Cowboys US Football team. Slightly loose Terms or Use and Privacy policy, ... Read More
|
|
CowboysScreenServerSvc
|
CowboysScreenServer.exe
|
N
|
Software from the MercurySports for streaming information about the Dallas Cowboys US Football team. Slightly loose Terms or Use and Privacy policy, ... Read More
|
|
cp
|
CopyProtectionNotifier.exe
|
?
|
Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition ... Read More
|
|
CP32NOT
|
CP32BTN.EXE
|
U
|
For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons ... Read More
|
|
CPA9P2PSERVER
|
CPA9P2PS.exe
|
?
|
Found on a Compaq Presario but what is it?
|
|
cpanelx
|
cpanelx.exe
|
X
|
Added by the W32/Tilebot-FC worm and IRC backdoor. This infection is bundled with the hpdriver.sys rootkit in order to remain hidden. ... Read More
|
|
CPATR10
|
CPATR10.EXE
|
U
|
Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast ... Read More
|
|
CPBrWtch
|
CPBrWtch.exe
|
U
|
Kookaburra Softwares Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time y ... Read More
|
|
cpds
|
cpds.exe
|
X
|
Added by the Troj/Ghudl-C Trojan.
|
|
CPD_EXE
|
CPD.EXE
|
Y
|
Firewall bundled with McAfee VirusScan 6.*
|
|
Cpl32ver
|
Cpl32ver.exe
|
X
|
Identified as a variant of the Trojan.Drop.Kobcka.EO malware.
|
|
cplbtq00
|
CplBTQ00.EXE
|
N
|
Related to EZbutton ... Read More
|
|
cpldbl10
|
CPLDBL10.exe
|
N
|
Related to the EZbutton quick launcher ... Read More
|
|
CPMP32 Settings
|
cpmp32.exe
|
X
|
A variant of the SDBot family of worms and IRC backdoors.
|
|
CPortPatch
|
cppatch.exe
|
?
|
CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though? ... Read More
|
|
cppsesys
|
cppsesys.exe
|
X
|
Added by the W32/Pasalavoz-A worm.
|
|
CPQAcDc
|
CPQAcDc.exe
|
Y
|
Compaq PowerCon power management software for laptops
|
|
CPQAlert
|
CPQAlert.exe
|
U
|
Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's ... Read More
|
|
CPQBootPerfDB
|
CPQBootPerfDB.EXE
|
N
|
See the entry for Compaq Message Server
|
|
CPQCalib
|
CPQCalib.exe
|
Y
|
Compaq PowerCon power management software for laptops
|
|
CPQDFWAG
|
CpqDfwAg.exe
|
N
|
For Compaq PC's. Runs Compaq diagnostics on every boot
|
|
CPQEASYACC
|
cpqeadm.exe
|
U
|
For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys ... Read More
|
|
cpqeaui
|
cpqeaui.exe
|
U
|
For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys ... Read More
|
|
CPQInet Runtime Service
|
CpqInet.exe
|
U
|
For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers ... Read More
|
|
CPQINKAGENT
|
cpqinkag.exe
|
N
|
That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they ... Read More
|
|
cpqns
|
cpqnpcss.exe
|
U
|
Related to Compaq.Net - not required if you don't use that
|
|
Cpqset
|
Cpqset.exe
|
N
|
Default settings software in Hewlett Packard notebook
|
|
CPQTEAM
|
cpqteam.exe
|
N
|
This program is bundled with HP servers. When loaded a system tray icon will be available that launches the HP Network Configuration Tool. ... Read More
|
|
cpr
|
cpr
|
X
|
Adroar.com adware downloader
|
|
CPU Manager
|
cpumgr.exe
|
X
|
Added by the PANDEM.B WORM!
|
|
CPU microcode correction
|
cpudev.sys
|
X
|
Added by the Troj/Haxdoor-AO Trojan.
|
|
cpu windows status
|
cpustats.exe
|
X
|
Added by a variant of the WIN32.RBOT WORM! ... Read More
|
|
CPUcool
|
Cpucool.exe
|
U
|
Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel ... Read More
|
|
Cpusave
|
Cpusave.exe
|
X
|
Added by the GEMA TROJAN!
|
|
Cpusave32
|
Cpusave32.exe
|
X
|
Added by the GEMA TROJAN!
|
|
CPVHOST Settings
|
cpvhost.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
cqpmxujjl.exe
|
cqpmxujjl.exe
|
X
|
Added by the Troj/StartP-BAI Trojan.
|
|
cracked_windows1
|
cracked_windows1.exe
|
U
|
|
|
crbroadcasting
|
CRBroadCasting.exe
|
U
|
Related to CardReader2 from On Track Inovations Ltd. USB Card Reader. ... Read More
|
|
CRC Protection
|
crc32.exe
|
X
|
Added by the Troj/Agent-PO Trojan.
|
|
CRC Value Verifier
|
crsss32.exe
|
X
|
Added by a variant of the RBOT WORM!
|
|
CRC Value Verifier
|
Crsss64.exe
|
X
|
Added by the RBOT-NY WORM!
|
|
CRC Value Verifier
|
crsss.exe
|
X
|
Added by the SPYBOT.UK WORM!
|
|
Crc32stats Dependencies
|
Crc32stats.exe
|
X
|
Added by the W32.Mytob.GT@mm worm. When started, this infections connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
CRCSS
|
crcss.exe
|
X
|
A variant of RBot, SDBot, or other IRCBot worm.
|
|
Create A Monster
|
createAMonster.exe
|
X
|
Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related ... Read More
|
|
CreateCD
|
Createcd.exe
|
N
|
Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs ... Read More
|
|
CreateCD50
|
Createcd50.exe
|
N
|
Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs ... Read More
|
|
Creates Files Systems Protections
|
csrs.exe
|
X
|
A variant of the Win32/Rbot.HIU family of worms and IRC backdoor Trojans.
|
|
Creates R Files Systems
|
crsss.exe
|
X
|
A variant of the W32/Sdbot.KYC.worm family of worms and IRC backdoor Trojans.
|
|
Creates Remote Systems
|
csrs.exe
|
X
|
A variant of the Win32/Rbot.HIU family of worms and IRC backdoor Trojans.
|
|
Creative Audio Drivers
|
creative.exe
|
X
|
Added by the W32/Rbot-FKR worm and IRC backdoor.
|
|
Creative Audio Engine Licensing Service
|
CTAELicensing.exe
|
Y
|
Provides licensing services for Creative Audio Engine.
|
|
Creative Audio Service
|
CTAudSvc.exe
|
Y
|
Creative Labs audio driver.
|
|
Creative Launcher
|
CTLauncher.exe
|
N
|
For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Pr ... Read More
|
|
Creative MediaSource Go
|
CTCMSGo.exe
|
N
|
"Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats" ... Read More
|
|
Creative Service for CDROM Access
|
Ctsvccda.exe
|
N
|
Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't ... Read More
|
|
Creative WebCam Tray
|
Camtray.exe
|
N
|
Creative WebCam tray control - can be started manually
|
|
Creative.exe
|
Creative.exe
|
X
|
Added by the PROLIN WORM!
|
|
CreativeDiscNotifier
|
CTNOTIFY.EXE
|
N
|
For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel ... Read More
|
|
CreativeMixer
|
CTMIX32.EXE
|
U
|
Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adju ... Read More
|
|
crehcjid
|
crehcjid.dll
|
X
|
Identified as a variant of the Email-Worm.Win32.Locksky.bp malware.
|
|
Critical Service
|
cscrs.exe
|
X
|
Added by the W32/Rbot-BFY worm and IRC backdoor.
|
|
crossmenu
|
CrossMenu
|
U
|
Toshiba CrossMenu Utility - allows the user to create their own menus
|
|
CRP386 Networking
|
crp386.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
crs
|
crs.exe
|
X
|
Added by the W32/Agobot-TJ worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More
|
|
CRSS
|
CRSS.exe
|
X
|
added by the W32/Agobot-RM WORM!
|
|
crss32.exe
|
crss32.exe
|
X
|
Added by the W32/Tilebot-GT worm and IRC backdoor.
W32/Tilebot-GT spreads to other network computers by exploiting common buffer overfl ... Read More
|
|
crssm.exe
|
crssm.exe
|
X
|
Added by the W32/Rbot-AFH worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
CRSSXP SysInfo
|
crssxp.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoors.
|
|
Crypkey License
|
crypserv.exe
|
Y
|
Used by certain software as copy protection. This should be left running otherwise the program that utilizes it may not work. ... Read More
|
|
crypt
|
crypts.dll
|
X
|
Added by the Troj/Agent-GJR Trojan.
|
|
crypt32
|
crypt32rt.dll
|
X
|
Unknown malware.
|
|
crypt32net
|
crypt32net.dll
|
X
|
Added by the Troj/Banworm-I Trojan.
Troj/Banworm-I may modify the HOSTS file which maps the URLs of selected websites to a loopback IP ... Read More
|
|
crypta
|
cryptsa.dll
|
X
|
Identified as the Trojan-Downloader.Win32.Agent.btd Trojan.
|
|
Cryptainer service
|
cryptainersrv.exe
|
Y
|
Related to the Cryptainer encryption software.
|
|
cryptdlg
|
cryptdlg.exe
|
X
|
Added by an unidentified TROJAN!
|
|
CryptDrive
|
cdr.exe
|
X
|
Added by the CryptDrive misleading security application. CryptDrive is a misleading application that may give exaggerated reports about potential risk ... Read More
|
|
cryptdrv
|
cryptdrv.sys
|
X
|
Added by the Backdoor.Rustock backdoor rootkit.
|
|
Cryptic Protected Storage
|
cpstorage.exe
|
X
|
Added by the W32/Tilebot-HO worm and IRC backdoor. W32/Tilebot-HO attempts to spread by copying itself to remote network shares or by exploiting any o ... Read More
|
|
cryptoexpert
|
cexpert.exe
|
U
|
Added by the CryptoExpert 2005 Lite file encryption software.
|
|
Cryptographic Engine
|
csvc.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Cryptographic Services
|
cryptsvc.dll
|
Y
|
Windows service that provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new progra ... Read More
|
|
cryptonet
|
cryptonet.dll
|
X
|
Added by the Troj/Oscor-M backdoor Trojan.
|
|
Crystal 3D Audio Control
|
CWD3DSND.EXE
|
?
|
Crystal 3D Audio sound driver. Is it required?
|
|
csc
|
csc.exe
|
?
|
??
|
|
cscripts
|
cscripts.exe
|
X
|
Added by the Troj/Bdoor-AAP backdoor Trojan.
|
|
CSCRS Value
|
cscrs.exe
|
X
|
|
|
CsdDriver
|
CsdDriver.sys
|
X
|
Added by the Troj/Goldun-EE password-stealing Trojan.
|
|
cserv32
|
cserv32.exe
|
X
|
Added by the W32/Stration-BQ mass-mailing worm.
|
|
CsimPlayer
|
CsimPlayer.exe
|
X
|
Added by the W32/Koobface-AD Worm.
|
|
CSINJECT.EXE
|
CSINJECT.EXE
|
U
|
Part of Quarterdeck/Norton CleanSweep. For a full description see here. An excerpt - "Csinject must be loaded in order for Smart Sweep to automaticall ... Read More
|
|
csm Win Updates
|
csm.exe
|
X
|
Added by the W32/Zotob-B worm and backdoor Trojan.
|
|
csos
|
csos.exe
|
X
|
Added by the W32/Sdbot-DFE worm and IRC backdoor.
|
|
csr
|
csrrs.exe
|
X
|
Added by the W32/Rbot-CKM worm and IRC backdoor.
|
|
csrcs
|
csrcs.exe
|
X
|
Added by the Troj/Agent-HUA Trojan.
|
|
csrsc
|
csrsc.exe
|
X
|
Added by an unidentified VIRUS, WORM or TROJAN!
|
|
csrse.exe
|
csrse.exe
|
X
|
Added by the Backdoor.Hesive Trojan backdoor.
|
|
CSRSS
|
CSRSS.EXE
|
X
|
Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, wh ... Read More
|
|
csrss
|
csrss.exe
|
U
|
Added by the Spyware.Keylog surveillance software. Uninstall this software if it was not installed by yourself. ... Read More
|
|
Csrss
|
csrss5.dll
|
X
|
Identified by Avira as a variant of the TR/Agent.rnn malware.
|
|
Csrss Host
|
csrhost.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
CSRSS Loader
|
csrsss.exe
|
X
|
Added by the AGOBOT.TX WORM!
|
|
csrsslevel4
|
csrss.exe
|
X
|
Unidentified malware - NOTE - this file is placed in a C:\Windows\SystemLevel4 folder, and should NOT be confused with the legitimate Windows Client ... Read More
|
|
CSRSSU
|
CSRSSU.EXE
|
X
|
CoolWebSearch parasite related - hijacking to Slawsearch.com. You are advised to ask for help in our HijackThis forum to remove it. Located in the Win ... Read More
|
|
csrssw
|
CSRSSW.EXE
|
X
|
Added by the TROJ/CWS-F TROJAN! ... Read More
|
|
csrvss
|
csrvss.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
css server
|
CSSServer.exe
|
U
|
Added by the ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself. ... Read More
|
|
cssauth
|
cssauth.exe
|
U
|
Related to IBM ThinkVantage Client Security Solution
|
|
cssrs
|
cssrs.exe
|
X
|
Added by the Troj/Bancban-DW ... Read More
|
|
cssrs
|
cssrs.scr
|
X
|
Added by the Troj/Banker-DAE Trojan. Troj/Banker-DAE attempts to steal confidential information entered into online banking websites. ... Read More
|
|
csss
|
Csss.exe
|
X
|
Added by the BALICK TROJAN!
|
|
CSS_Central
|
CSS_1631.EXE
|
U
|
CSS Communication Agent (95 Host) from Command Software Systems "CSS Central™ provides administrators with a powerfully proactive tool to effectively ... Read More
|
|
CSV10P70
|
CSv10P070.exe
|
X
|
ClearSearch adware related
|
|
CSV7P26
|
CSV7P26.exe
|
X
|
ClearSearch adware related
|
|
CSV7P70
|
CSV7P070.exe
|
X
|
ClearSearch adware related
|
|
CSV7P91
|
CSV7P91.exe
|
X
|
ClearSearch adware related
|
|
csvdea
|
csvdea.exe
|
U
|
Added by the Spyware.SpyArsenalLog surveillance software. This program should be uninstalled if it was not installed by yourself. ... Read More
|
|
csvhost.exe
|
csvhost.exe
|
X
|
Added by the Troj/Cimuz-BD Trojan.
|
|
cswiz
|
cswiz.dll
|
X
|
Added by the Troj/Opnis-E Trojan.
|
|
ct
|
ct.exe
|
Y
|
ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it ... Read More
|
|
CT Control Settings
|
CTSVCCD.EXE
|
X
|
Added by a variant of the WIN32.RBOT WORM!
|
|
CTAVTray
|
CTAvTray.exe
|
N
|
For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ ... Read More
|
|
CTCMonitor
|
CTCMonitor.exe
|
U
|
Click-to-Convert
- document-to-HTML or doc-to-PDF converter. Only required if you are
going to use the File -> Print method of using Click-to-Conver ... Read More
|
|
CTDVDDet
|
CTDVDDet.exe
|
N
|
Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource ... Read More
|
|
CTDVDDet
|
CTDetect.exe
|
N
|
Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource ... Read More
|
|
ctf.exe
|
ctf.exe
|
X
|
Identified as a variant of the Backdoor.Bifrose backdoor Trojan.
|
|
ctflog manager
|
ctflog.exe
|
X
|
Added by the Trojan.Spexta trojan. When infected your computer will become an open mail relay which will allow your computer to be used to send out s ... Read More
|
|
CTFM0N.exe
|
CTFM0N.exe
|
X
|
Added by the Trojan.StartPage.P browser hijacker.
|
|
ctfmen
|
cssrs.exe
|
X
|
Added by the Troj/Startp-DC Trojan.
|
|
ctfmgr
|
ctfmgr.exe
|
X
|
Added by the Troj/PWS-ATU password-stealing Trojan.
|
|
ctfmom
|
ctfnom.exe
|
X
|
Added by the Troj/Bckdr-QTA backdoor Trojan.
|
|
ctfmon
|
cftmon.exe
|
X
|
Added by the Troj/Delbot-B TROJAN/IRC backdoor!
|
|
ctfmon
|
ctfmon.exe
|
X
|
Added by the Troj/SDBot-06 backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execu ... Read More
|
|
ctfmon.exe
|
ctfmon.exe
|
U
|
CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run t ... Read More
|
|
Ctfmon.exe
|
ctfmon32.exe
|
X
|
CoolWebSearch parasite related - hijacking to Slawsearch.com
|
|
ctfmon.exe
|
ctfmon.exe
|
X
|
Added by the PWSteal.Raidys password-stealing trojan horse.
|
|
ctfmon16c
|
ctfmon16c.exe
|
X
|
Added by the W32/Sharp-C mass-mailing worm.
|
|
ctfmon32
|
CTFMON32.EXE
|
X
|
CoolWebSearch parasite related - also detected as the TROJ/CWS-E TROJAN! ... Read More
|
|
ctfmona
|
ctfmona.exe
|
X
|
Identified as a variant of the W32/Smalltroj.CJDX malware.
|
|
CTFMONSS
|
CTFMONSS.EXE
|
X
|
Added by the Troj/CWS-F hijacker. This infection will also install a Browser Helper Object with the filename WTLBASS32.DLL or SEHLP.DLL. ... Read More
|
|
ctfnnon
|
ctfmon.exe
|
X
|
Identified as a variant of the Backdoor.Win32.Turkojan.ake malware. Please note that C:\Windows\System32\ctfmon.exe is legitimate and should not be d ... Read More
|
|
cthelp
|
cthelp.exe
|
X
|
Added by the SDBOT TROJAN! ... Read More
|
|
CTHELPER
|
CTHELPER.EXE
|
U
|
CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in ... Read More
|
|
CTHelper
|
cthelper.exe
|
X
|
Added by a WORM, W32/Rbot-XB, and found in the Windows system folder.
|
|
CTin10
|
CTin10.exe
|
X
|
Added by the BANCOS.E TROJAN!
|
|
ctlsys
|
ctlsys.dll
|
X
|
Added by a variant of the Goldun.Fam Trojan.
|
|
ctl_w32
|
ctl_w32.sys
|
X
|
Identified as a variant of the Rootkit.Win32.Agent.pq rootkit.
|
|
CtModule
|
CtModule.exe
|
X
|
Added by the Troj/Clicker-EG Trojan.
|
|
CTMON.EXE
|
cfmon.exe
|
X
|
Added by the Troj/Clckr-AN Trojan.
|
|
ctnmrun
|
ctnmrun.exe
|
U
|
Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use ... Read More
|
|
CTPDPSRV
|
CTPDPSRV.EXE
|
?
|
Printer driver (in the WINDOWS\System32\spool\DRIVERS\W32X86 folder). Is it required? ... Read More
|
|
ctpmon
|
ctpmon.exe
|
X
|
Identified by BitDefender as Trojan.Agent.AIR. This infection will display alerts on your desktop stating The registry is corrupted. To help protect ... Read More
|
|
CTRegRun
|
CTRegRun.exe
|
N
|
For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative ... Read More
|
|
CtrlVol
|
CtrlVol.exe
|
U
|
Acer's on screen volume control using the Fn key
|
|
ctrmode
|
ctrmode.exe
|
X
|
A variant of the Win32/IRCBot.AAB variant family of worms and IRC backdoor Trojans. ... Read More
|
|
CTStartup
|
CTEaxSpl.exe
|
N
|
Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard ... Read More
|
|
CTsysVol
|
CTSYSVOL.exe
|
U
|
Creative sound card volume controls
|
|
cttdpsrv
|
cttdpsrv.exe
|
?
|
??
|
|
CTUpdate
|
ctupdclt.exe
|
X
|
Added by the W32/Rbot-ABG. This infection tries to delete the I$ network shares on the host computer every 2 minutes. ... Read More
|
|
ctxfihlp
|
CTXFIHLP.EXE
|
N
|
Added by the installation of a Creative Labs X-Fi sound card. This particular process provides the help functionality for your card. Note: located in ... Read More
|
|
CTZDetec.exe
|
CTZDetec.exe
|
N
|
Auto-detect and play a DVD when using a Creative Soundblaster card.
|
|
cuagentExe
|
Cuagent.exe
|
Y
|
|
|
cucore agent
|
ConfAgent.exe
|
U
|
First Virtual Communications, Inc., Now RADVISION Ltd Click_to_Meet videoconferencing software ... Read More
|
|
cuo
|
cuo.exe
|
X
|
Added by the BUGBEAR.A WORM!
|
|
Currency
|
Command.exe
|
X
|
Added by the Backdoor.Goster backdoor.
|
|
Current Security Config
|
csecure.exe
|
X
|
Added by the W32/Rbot-AMO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
CursorXP
|
CursorXP.exe
|
N
|
CursorXP from Stardock - tool for creating mouse cursors
|
|
CuteMX
|
CuteMX.EXE
|
N
|
File sharing utility
|
|
CuteShield Internet Eraser
|
cseraser.exe
|
U
|
CuteShield Internet Eraser "Protects your privacy by cleaning up all the tracks of your Internet and computer activities (Free popup blocker included) ... Read More
|
|
cvmonitor.exe
|
cvmonitor.exe
|
X
|
Added by the SDBOT.BV WORM!
|
|
CVPND
|
cvpnd.exe
|
Y
|
Sub-system used by Cisco VPN client for making a connection to a remote IPSec server ... Read More
|
|
cw
|
cw4.exe
|
U
|
|
|
CWatch
|
cw.exe
|
U
|
ChatWatch - chat monitoring tool
|
|
cwbckver
|
cwbckver.exe
|
N
|
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks th ... Read More
|
|
cwbinhlp
|
cwbinhlp.exe
|
N
|
Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and ... Read More
|
|
cwbsvstr
|
cwbsvstr.exe
|
N
|
Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if ... Read More
|
|
cwbwlwiz
|
cwbwlwiz.exe
|
?
|
Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to ... Read More
|
|
Cwcdschk.exe
|
Cwcdschk.exe
|
?
|
IBM Thinkpad related?
|
|
cwcptray
|
cwcptray.exe
|
U
|
Related to ContentWatch Parental Control Internet Filter.
|
|
cwriter
|
cwriter.exe
|
X
|
Added by the PcRaiser rogue security program. PcRaiser is a misleading application that claims to improve the performance of a computer. This executa ... Read More
|
|
cwupdate
|
cwupdate.exe
|
U
|
|
|
CxEvtSvc
|
CxEvtSvc.exe
|
X
|
Identified as a variant of the TrojanSpy:Win32/Festeal malware.
|
|
cybansos
|
cyban.exe
|
X
|
Added by the W32/Taterf-V password-stealing worm.
|
|
cybansos
|
cyban.exe
|
X
|
Added by the W32/Taterf-AE worm.
|
|
Cyber
|
cyberchk.exe
|
N
|
Part of Belkins "Multimedia Cleaning Kit" and is
automatically installed when you run their optical disk drive cleaning utility - to remind
you to c ... Read More
|
|
CyberLat Ram Cleaner
|
CLRamCleaner.exe
|
U
|
CyberLat RAM Cleaner is a program that Frees, Optimizes and Defrags your system's wasted memory (RAM). Some users swear by programs such as this but I ... Read More
|
|
CyberLink Background Capture Service (CBCS)
|
CLCapSvc.exe
|
U
|
Used by Cyberlink PowerCinema to record TV in the background while you were watching so that you can pause, rewind, etc. ... Read More
|
|
CyberLink Media Library Service
|
CLMLServer.exe
|
U
|
Part of the Cyberlink products and is used to manage your audio and video library. ... Read More
|
|
CyberLink Task Scheduler (CTS)
|
CLSched.exe
|
U
|
Used by Cyberlink PowerCinema to record scheduled shows.
|
|
CyberMedia Agent
|
CMAGENT.EXE
|
N
|
Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and ca ... Read More
|
|
CyberWolf
|
CyberWolf.exe
|
X
|
Added by the KICKIN.A (or CYDOG.C) WORM!
|
|
CyDoor
|
CD_Load.exe
|
X
|
Adware. Check here for information about Cy-Door and here for a program that can remove it ... Read More
|
|
CydoorUpdate
|
CD_Load.exe
|
X
|
Adware. Check here for information about Cy-Door and here for a program that can remove it ... Read More
|
|
cyg_win
|
cygwin.exe
|
X
|
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
|
|
CyphTray
|
CyphTray.exe
|
N
|
Cypherus - encryption software
|
|
CyService Service
|
cydll.dll
|
X
|
Added by the Backdoor.Murcy backdoor. Backdoor.Murcy is a Trojan horse that opens a back door on the compromised computer. Please note that C:\Windows ... Read More
|
|
czaq
|
czaqi.sys
|
X
|
Added by the Troj/QQHelp-Gen downloader Trojan.
|
|
czrss
|
czrss.exe
|
X
|
Added by the Troj/Agent-PAR Trojan.
|
|
D5586E6C
|
C107BE90.EXE
|
X
|
Added by the Troj/BDoor-AFB backdoor Trojan.
|
|
dark
|
csrs.scr
|
X
|
Added by the Troj/Bancban-GT password-stealing Trojan.
|
|
DBGA0EEG
|
Cokmgl32.dll
|
X
|
Added by the W32/Doxpar-F worm.
|
|
Debugger
|
csrss.exe
|
X
|
Added by the W32.Beagle.EA@mm mass-mailing worm. This infection should not be confused with the legitimate c:\windows\system32\csrss.exe file. ... Read More
|
|
Desksite CMA
|
cma.exe
|
U
|
DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"
|
|
DIECOX
|
csrss.exe
|
X
|
Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
DigiGuide
|
CLIENT.EXE
|
N
|
TV guide and reminder
|
|
DigiGuide
|
client01.exe
|
N
|
TV guide and reminder
|
|
digital dashboard
|
CPQMLDET.exe
|
N
|
For Compaq PC's. Loads Digital Dashboard options
|
|
dimanganous
|
chzbi.dll
|
X
|
Zlob Trojan which installs the Virus Protect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your computer ha ... Read More
|
|
Dir1
|
caKe
|
X
|
|
|
Disc Detector
|
CtNotify.exe
|
N
|
For Creative sound cards. Detects when you insert a CD, DVD, etc
|
|
disgorging
|
cjuvwa.dll
|
X
|
Zlob Trojan which installs the VirusProtect 3.9 rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
|
|
Disk check
|
chkdisk32.exe
|
X
|
Added by the Troj/DownLdr-IM Trojan.
|
|
Disk Check
|
chkdsk32_.exe
|
X
|
A variant of the Trojan-Downloader.Win32.VB.bai malware.
|
|
Disk Checker Service
|
chkdsk.exe
|
X
|
Added by the W32/Tilebot-IS worm and IRC backdoor.
|
|
Disk management service for users requests
|
CHKDSK64.exe
|
X
|
Added by the Troj/Telemot-B backdoor Trojan.
|
|
Diskstart
|
Code.exe
|
X
|
Adult content dialler
|
|
Diskstart
|
cat.exe
|
X
|
MS-Connect dialler
|
|
Display Drivers
|
cssrs.exe
|
X
|
Added by the AGOBOT.FX WORM!
|
|
Divx
|
codll.exe
|
X
|
Added by the Troj/Gravebot-A IRC backdoor. This infection also creates the file C:\Windows\System32\sum.tgz. ... Read More
|
|
DlDir1
|
caKe
|
X
|
|
|
Dluxjp
|
cnfrm.exe
|
X
|
Added by the DLUCA.D TROJAN!
|
|
Dos Prompt Loader
|
cygwin.exe
|
X
|
Added by W32/Sdbot-VV, A WORM/backdoor, and found in the Windows system folder.
|
|
Driver Control Manager v7.1
|
cetrdeje.exe
|
X
|
Added by the W32/Autorun-BKK removable worm.
|
|
Driver Control Manager v7.5
|
cetrdeosa.exe
|
X
|
Added by the W32/SillyFDC-FF removable media worm.
|
|
DriverModule
|
csrnvrt.exe
|
X
|
Added by the Troj/Stinx-Q backdoor Trojan. This infection also creates the files 557.bat and 989.bat in your Temp directory. ... Read More
|
|
Dynamic Dns Binary
|
CMD16.EXE
|
X
|
A R-Bot WORM variant functioning as a backdoor Trojan uses this file to terminate processes, among other actions. ... Read More
|
|
Eac_Cnry
|
canary.exe
|
X
|
Added by the CANARY TROJAN!
|
|
ecko
|
claro.exe
|
X
|
Added by the Troj/Dloadr-AQJ Trojan.
|
|
eixfi
|
china.bat
|
X
|
Added by the WCUP.A WORM!
|
|
EpromSystem
|
chvhost.exe
|
X
|
Added by the Troj/Bckdr-QKD backdoor Trojan.
|
|
erecoveryservice
|
check.exe
|
U
|
Acer Notebook related - Acer eRecovery allows the user to restore the operating system or backup the current system profile, thus ensuring system int ... Read More
|
|
eSettings Service
|
capuserv.exe
|
N
|
Acer's eSettings software allows you to view your system information, set configuration and boot options, and manage passwords. ... Read More
|
|
ethernet adapter
|
csrmss.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
ethernet adapter
|
cmsrrs.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
evacuative
|
cwegus.dll
|
X
|
Zlob Trojan which installs the AntivirusTrigger rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
|
|
Event Locator
|
ctst.exe
|
X
|
Added as a service by the W32/Forbot-DJ WORM!
|
|
Explorer
|
config_.com
|
X
|
Added by the W32/Floppy-D floppy drive worm.
|
|
Explorer
|
CRSVS.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Explorer
|
crs.exe
|
X
|
Added by the Troj/PWSteal-G password-stealing Trojan.
|
|
ez firewall
|
ca.exe
|
Y
|
eTrust EZ_Armor Internet Security ... Read More
|
|
FamilyKeyLogger
|
cisvc.exe
|
U
|
"Family Keylogger - is your best choice, if you want to know what other users on your machine are typing". Note! - this is not the cisvc.exe service. ... Read More
|
|
FiendlyType
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
FirewallActivies
|
csrss.exe
|
X
|
Added by the Troj/Banker-AQ TROJAN!
|
|
fortis secure layer config
|
cseinst.exe
|
U
|
Fortis Bank Home Banking part. Installed during the installation of the software necessary to run the Home Banking. According to Fortis Bank this will ... Read More
|
|
GARO Status Monitor
|
cnwism.exe
|
U
|
Print monitor for certain Epson printers.
|
|
Gearbox
|
confsvr.exe
|
N
|
NTL's Gearbox software for configuring internet connections with their NTLWorld software - does a similar job to the Internet Connection Wizard which ... Read More
|
|
Generic Host Process
|
camacttiv.exe
|
X
|
Identified by AVG Anti-Spyware as Backdoor.Ciadoor.13.
|
|
Geography TX 1.0 NT
|
CompuSpeed.vbs
|
X
|
Added by the VBS/Newley-A. The worm attempts to setup an administrator account, and if uninstalled using Add/Remove programs will likely delete SVCHOS ... Read More
|
|
gfxtray
|
ctccw32.dll
|
X
|
Added by the Troj/Clicker-EC Trojan. Do not delete C:\Windows\System32\rundll32.exe as it is a legitimate file. ... Read More
|
|
GigaByte
|
Cheatle.exe
|
X
|
Added by the SHODI.B VIRUS!
|
|
go
|
cvir.exe
|
X
|
Added by the W32/Silov-A overwriting virus. W32/Silov-A overwrites all files in the current and root drive folders with a copy of itself, adding the f ... Read More
|
|
GT15J4R49V
|
cpuserv.exe
|
X
|
Identified as a variant of the Trojan.Win32.Radi.gu malware.
|
|
Guardian
|
CMGrdian.exe
|
N
|
McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanu ... Read More
|
|
H2O
|
cledx.exe
|
Y
|
Related to copyright protection products by Syncrosoft.
|
|
hack1x2
|
C:\WINDOWS\system32:hlpnod32.exe
|
X
|
A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
|
|
HELLBOT3
|
coolbot.exe
|
X
|
Added by the W32/Mytob-S WORM/IRC backdoor Trojan!
|
|
High Definition Audio Property Page Shortcut
|
CHDAudPropShortcut.exe
|
Y
|
Realtek audio card related - probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required ... Read More
|
|
hola
|
call of duty.exe
|
X
|
Added by the W32.Nujama.B worm. W32.Nujama.B is a worm that spreads through mapped drives and shared folders, and lowers security settings on the comp ... Read More
|
|
Hotkey CD Eject
|
cdeject.exe
|
N
|
Added by the HotKey CD-Eject program. HotKey CD-Eject is a compact tool that lets you eject CDs with a hotkey combination or a double-click on the pro ... Read More
|
|
HP Desktop
|
ccappms.exe
|
X
|
Added by the W32/Sdbot-TG WORM/IRC backdoor trojan!
|
|
HP Insight Foundation Agents
|
cqmghost.exe
|
Y
|
HP Insight Management Agents perform in-depth monitoring of a device's state by collecting and measuring key parameters on the device. The HP Insight ... Read More
|
|
HP Insight NIC Agents
|
cpqnimgt.exe
|
Y
|
HP Insight Management Agents perform in-depth monitoring of a device's state by collecting and measuring key parameters on the device. The HP Insight ... Read More
|
|
HP Insight Server Agents
|
cqmgserv.exe
|
Y
|
HP Insight Management Agents help IT administrators rapidly respond to potential and actual system failures, increase system stability, reduce trouble ... Read More
|
|
HP Insight Storage Agents
|
cqmgstor.exe
|
Y
|
The HP Insight Storage Agent displays information about the Mass Storage Subsystems which consists of fibre channel, drive array and SCSI subsystems c ... Read More
|
|
HP ProLiant Remote Monitor Service
|
cpqrcmc.exe
|
Y
|
The HP ProLiant Remote Monitor Service provides support for HP ProLiant PCI Hot Plug devices and remote management utilities. This service gives hot p ... Read More
|
|
HP Smart Array SAS/SATA Event Notification Service
|
cissesrv.exe
|
Y
|
The HP Smart Array SAS/SATA Event Notification Service provides event notification to the Windows Server system event log and the HP ProLiant Integrat ... Read More
|
|
hpcmd
|
cmd.exe
|
X
|
Added by the Troj/AdClick-DS Trojan.
|
|
Hpscanner
|
codeme.exe
|
X
|
Added by the W32/Patco-A worm.
|
|
httpd
|
c_pan.exe
|
X
|
Added by a variant of the DELF-A TROJAN!
|
|
iCalendar
|
Calendar.exe
|
U
|
Desktop iCalendar is a desktop calendar for Windows that stays on your desktop and shows the days of the current month. It can sync your Google Calend ... Read More
|
|
ICompXpSp
|
cap.exe
|
X
|
Added by the Troj/Mdrop-DQO Trojan.
|
|
icq center
|
consoles.exe
|
X
|
Added as a result of the RANDIN VIRUS! ... Read More
|
|
ICQMsn
|
cbfks.exe
|
X
|
Added by the Troj/Ranck-AH proxy trojan. This infection allows a remote intruder to use your Internet connection to hide his location. ... Read More
|
|
IJNetworkScanUtility
|
CNMNSUT.EXE
|
Y
|
Software agent that allows your computer to receive scan from a network Canon scanner. ... Read More
|
|
IME
|
conime.exe
|
X
|
Added by the Troj/Dldr-G Trojan. This infection should not be confused with the legitimate C:\Windows\System32\conime.exe file. ... Read More
|
|
inquisitionist
|
clbrcek.dll
|
X
|
Added by a Zlob Trojan which installs AntiVirgear 3.8 and display fake security alerts in your Windows taskbar. ... Read More
|
|
InstallDriver Service
|
csscv.exe
|
X
|
Added by the W32/Sdbot-CPL worm and IRC backdoor.
|
|
Intel
|
csrss.exe
|
X
|
Unknown malware.
|
|
Intel Driver
|
csrs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
IntelProcNumUtility
|
cpunumber.exe
|
U
|
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You ... Read More
|
|
IomegaWare
|
COMMANDER.EXE
|
N
|
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs ... Read More
|
|
IPOT Service Drivers
|
compaq.exe
|
X
|
Added by a variant of the FUROOTKIT TROJAN!
|
|
IPv6 Helper Driver
|
csass.exe
|
X
|
Added by the AGOBOT.TC WORM!
|
|
IS CfgWiz
|
cfgwiz.exe
|
N
|
Norton Internet Security configuration wizard
|
|
iseeu.exe
|
C:\WINDOWS:iseeu.exe
|
X
|
A variant of the Backdoor:W32/PoisonIvy backdoor Trojan. Backdoor:W32/PoisonIvy is a family of backdoors that give a remote user extensive access to a ... Read More
|
|
iss_certtool
|
certtool.exe
|
Y
|
Related to IBM_Client_Security Certification Tool.
|
|
itweaku
|
Clear.exe
|
U
|
Related to ItweakU ... Read More
|
|
JVM0.12
|
caac.exe
|
X
|
Identified as Trojan-Downloader.Win32.Agent.jc.
|
|
kamsoft
|
ckvo.exe
|
X
|
Added by the Troj/Gamania-BW Trojan.
|
|
KernellApps
|
csrss.exe
|
X
|
Added by the BANCBAN-AC TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Key Logger
|
csrss.exe
|
X
|
Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Krnlcheck
|
csrss.exe
|
X
|
Added by Backdoor.Botnachala. This infection also adds entries to your HOSTS file. ... Read More
|
|
KV_HOST
|
cxjx.exe
|
X
|
Added by the Troj/LegMir-BB Trojan with password-stealing functionality.
|
|
lameshit
|
crash.exe
|
X
|
Added by the Troj/LowZone-H trojan.
|
|
LanGuard Auto Updater
|
csass.exe
|
X
|
Added by the W32/Rbot-DS trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
ldrsvc
|
clean_19d25.dll
|
X
|
Added by the Troj/Banker-EFL password-stealing Trojan for online banking sites. When fixing this services, do not delete C:\Windows\System32\svchost. ... Read More
|
|
ldrsvc
|
clean_4392d.dll
|
X
|
Added by the Troj/Torpig-BV Trojan.
|
|
LeapFrog Connect Device Service
|
CommandService.exe
|
Y
|
Allows your PC to communicate with Leapfrog handheld devices via a USB port.
|
|
ledpointer
|
CNYHKey.exe
|
U
|
Chicony Electronics Multimedia Keyboard Hotkey Driver
|
|
LiveUpdate Notice
|
ccSvcHst.exe
|
Y
|
Part of Symantec/Norton security products.
|
|
LManager
|
CPLBCL53.EXE
|
U
|
A system tray icon found on Acer Travelmate laptops that allow you control access to the Internet and email buttons and other computer configurations. ... Read More
|
|
load=
|
cfgsys32.exe
|
?
|
??
|
|
LoadPowerScheme
|
chkreg.dll
|
X
|
Added by the Dialer.Ulubione premium adult dialer.
|
|
LocalSystem
|
clipsvr16.exe
|
X
|
|
|
LocalSystem
|
clipsvr32.exe
|
X
|
|
|
logitechcameraassistant
|
CameraAssistant.exe
|
N
|
Related to Logitech QuickCams and provides additional configuration options for these devices. This program is non-essential process to the running of ... Read More
|
|
LogitechCommunicationsManager
|
Communications_Helper.exe
|
U
|
Found on Acer laptops with webcams and Logitech webcams. Reports indicate that this process can use up a great deal of memory. If this is the case fo ... Read More
|
|
LogonAdministrator
|
CSRSS.EXE
|
X
|
Added by the W32.Korron.B worm. W32.Korron.B is a worm that replaces some file types with a copy of itself. It also copies itself to all accessible dr ... Read More
|
|
Logonrepclient1
|
CSRSS.EXE
|
X
|
Added by the W32/Brontok-BT worm. This infection should notbe confused with the legitimate C:\Windows\System32\CSRSS.EXE program. ... Read More
|
|
Logonsara
|
csrss.exe
|
X
|
Added by the W32/Brontok-BS worm. This infection should notbe confused with the legitimate C:\Windows\System32\csrss.exe program. ... Read More
|
|
LPTRDC server
|
ctfmon.exe
|
X
|
Identified as a variant of the TrojanDownloader:Win32/Fourta.A malware. This infection should not be confused with the legitimate C:\Windows\System32 ... Read More
|
|
MachineTest
|
CMagesta.exe
|
X
|
Added by the W32/Sdbot-NE worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
Management Consultants
|
clmcs.exe
|
X
|
A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
|
|
ManageProtoclCtrl
|
csmsv.exe
|
X
|
Added by the Troj/Stinx-B backdoor Trojan.
|
|
Mapa de caracteres para NT
|
charmmpxp.exe
|
X
|
Added by the Troj/Bancos-KG Internet banking Trojan.
|
|
MaxtorCombo
|
ComboButton.exe
|
Y
|
Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect) ... Read More
|
|
McAfee Firewall
|
CPD.EXE
|
Y
|
Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE
|
|
McAfee Guardian
|
CMGRDIAN.EXE
|
N
|
McAfee's QuickClean, an offline version of the one in their online Clinic. Normally run offline and not needed. Incidentally, incorporates more cleanu ... Read More
|
|
Meeting Connection
|
comsutil.exe
|
X
|
Added by the Troj/PPdoor-E TROJAN!
|
|
Memory Allocation Host
|
cihost.exe
|
X
|
Identified by Avast as a variant of the Win32:IRCBot-CHZ worm and IRC backdoor.
|
|
Memory Allocation Server
|
ciserv.exe
|
X
|
Unknown worm.
|
|
Memory Allocation Services
|
cisrv.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Messenger6
|
command.pif
|
X
|
Added by the INZAE.B WORM!
|
|
Micosoft Data Core stuff
|
cores.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Micrcsoft Certificate Services
|
cflmon.exe
|
X
|
Added by the W32/Rbot-FWV worm and IRC backdoor. W32/Rbot-FWV spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More
|
|
Microsft Corporation Version 2001.12.4414
|
comrel.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
Microsft Corporation Version 2002.12.2414
|
comserv.exe
|
X
|
Identified as a variant of the W32/IRCbot.AXS.worm worm and IRC backdoor.
|
|
Microsft Security Monitor Process
|
cmh.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Microsoft (R) Windows Client/Server Runtime Service
|
csrss.exe
|
X
|
Added by the Backdoor.Ranky backdoor Trojan. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe. ... Read More
|
|
Microsoft (R) Windows TCP/IP Socket Driver
|
csrss.exe
|
X
|
Added by the Backdoor.Ranky backdoor Trojan. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe file. This infect ... Read More
|
|
Microsoft ActiveX Component
|
crss.exe
|
X
|
Added by the Troj/Small-CR trojan downloader.
|
|
Microsoft Agent
|
cvchost.exe
|
X
|
Added by the W32/Sdbot-DFH worm and IRC backdoor.
|
|
Microsoft Agent
|
cychost.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojan
|
|
Microsoft Cab Manager
|
cab.exe
|
X
|
Added by the Troj/Delf-JJ Trojan! File is found in the root of the C: drive.
|
|
Microsoft Calculator
|
calc.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
microsoft client/server runtime server subsystem
|
csrs.exe
|
X
|
Added by a variant of the AGOBOT/GAOBOT WORM! ... Read More
|
|
microsoft client/server runtime server subsystem
|
csrssa.exe
|
X
|
Added by a variant of the AGOBOT/GAOBOT WORM! ... Read More
|
|
Microsoft Com Port Manager
|
COMPORT.EXE
|
X
|
Added by the W32/Sdbot-AT backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More
|
|
Microsoft Config File
|
config.exe
|
X
|
Added by the KILLFILES.GR TROJAN! This is malware that will attempt to delete all system dlls! ... Read More
|
|
Microsoft Connection Manager Monitor
|
cmmon.pif
|
X
|
Added by the W32/Rbot-AKV worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Microsoft Control Center
|
crtl.exe
|
X
|
|
|
Microsoft Corp. Critical Services
|
csrs.exe
|
X
|
Added by the W32/Rbot-GTJ worm and IRC backdoor.
|
|
Microsoft Corporation
|
codecdivxx.exe
|
X
|
Added by the TSPY_BANKER.CZK online banking Trojan.
|
|
Microsoft CPU Over Heat Manager
|
CPU.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Microsoft CPXP Protocol
|
cpxp.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Microsoft CRT Monitor Manager
|
crtmon.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Microsoft CSRSS32 Protocol
|
csrss32.exe
|
X
|
Added by a variant of the AGOBOT/GAOBOT WORM!
|
|
Microsoft CSRSS386 Protocol
|
csrss386.exe
|
X
|
Added by a variant of the SPYBOT WORM!
|
|
Microsoft Data Helper
|
cihost.exe
|
X
|
Malware, possibly a variant of the LINST TROJAN
|
|
Microsoft Data Machine
|
csdata32.exe
|
X
|
Added by a variant of the RBOT WORM!
|
|
Microsoft DLL Verifier
|
chkfile.exe
|
X
|
Added by the W32/Rbot-AOC worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More
|
|
Microsoft DLL Verifier
|
csrssv.exe
|
X
|
Added by the W32/Rbot-ATK worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Microsoft Driver Setup
|
cfdrive32.exe
|
X
|
Added by the Troj/Agent-OJR Trojan.
|
|
Microsoft Driver Setup
|
ccdrive32.exe
|
X
|
Added by the Troj/Agent-LYL Trojan.
|
|
Microsoft Driver Setup
|
cidrive32.exe
|
X
|
Added by the Troj/Agent-NES Trojan.
|
|
Microsoft Driver Setup
|
cwdrive32.exe
|
X
|
Added by the Troj/VBInjec-BT Trojan.
|
|
Microsoft Firewall Settings Loader
|
conf32.exe
|
X
|
Added by the W32/Sdbot-KM worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
|
|
microsoft internet explorer
|
crsys32.exe
|
X
|
Added by the RBOT.UZ WORM! ... Read More
|
|
Microsoft Intrenet Explorer
|
cnsg.pif
|
X
|
Added by the W32/Rbot-ARO worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
Microsoft Passport Network CyberShots
|
cybershots.exe
|
X
|
Added by the W32/Spybot-ND worm and IRC backdoor. W32/Spybot-ND spreads to other network computers by exploiting common buffer overflow vulnerabilitie ... Read More
|
|
Microsoft Registry
|
csrse.exe
|
X
|
Added by the RBOT-PC WORM!
|
|
Microsoft Runtime
|
CfgDll32.exe
|
X
|
Added by the RANDEX.BD WORM!
|
|
Microsoft Security Monitor Process
|
com.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Microsoft Server Applacations
|
CLI.exe
|
X
|
Added by the W32/Rbot-GAQ worm and IRC backdoor.
|
|
Microsoft service
|
cssrs.exe
|
X
|
Added by the Troj/Startp-DC Trojan.
|
|
Microsoft software
|
cdaccess.exe
|
X
|
Added by the RBOT.ABK WORM!
|
|
Microsoft SourceSafe
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Microsoft System Checkup
|
Cool.exe
|
X
|
Added by the DONK.B WORM!
|
|
Microsoft System Restore Configuration
|
CBRSS.EXE
|
X
|
Added by a variant of the SPYBOT WORM!
|
|
Microsoft System32 Update
|
cmsrg.exe
|
X
|
Added by the RBOT-GN WORM!
|
|
Microsoft task tray monitor
|
ctray.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Microsoft Update
|
cmss.exe
|
X
|
Added by the W32/Rbot-ATQ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Microsoft Update
|
CONlME.EXE
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Microsoft Update Machine
|
cssrssv.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Microsoft Update Service
|
csrss32.exe
|
X
|
Added by the AGOBOT-HC WORM!
|
|
Microsoft USB2 Driver
|
crmss.exe
|
X
|
Added by the W32/Rbot-VK worm. This infection connects to an IRC server where it waits for remote commands. ... Read More
|
|
Microsoft Vista Upgrade Validation Service
|
cfmon.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
microsoft windows csrss
|
csrss.exe
|
X
|
Added by the W32/KALEL-A WORM! - NOTE - this file should NOT be confused with the legitimate Windows Client Server Runtime Subsystem csrss.exe proce ... Read More
|
|
microsoft windows files loader
|
cgy32win.exe
|
X
|
Added by a variant of the WIN32.RBOT WORM! ... Read More
|
|
Microsoft Windows Update Client
|
csrss.exe
|
X
|
Added by the W32/Kebede-G worm.
|
|
Microsoft Word Profissional
|
csrss.exe
|
X
|
Added by the Troj/Bancban-DB password-stealing trojan. This infection targets Brazilian banks, so if you are a user of these banks you should check y ... Read More
|
|
MicrosoftROMDriverService
|
cdrss.exe
|
X
|
Added by the W32.IRCBot worm and IRC backdoor.
|
|
Microsofts
|
csrcs.exe
|
X
|
Added by the Mal/Malat-A malware.
|
|
Microsofts Updatez
|
cmsssr.exe
|
X
|
Added by an unidentified VIRUS, WORM or TROJAN!
|
|
mlibsysmc
|
comzcinc.exe
|
X
|
Added by the W32/Sdbot-CXS worm and IRC backdoor.
|
|
Modifiet Amateur
|
C:\WINDOWS\system32\msl.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Monitoring Service
|
CSSSWD.exe
|
U
|
Added by the SnoopStick surveillance software. SnoopStick comes on a USB Flash Drive and can be installed by inserting the USB Drive into the computer ... Read More
|
|
MP3 CD Extractor
|
CD-Extractor.exe
|
N
|
Starts a program called CD Extractor which is used for creating MP3 files.
|
|
MPEO
|
Csinsm32.exe
|
U
|
Automatic logging of installs from Norton CleanSweep - available via Start -> Programs ... Read More
|
|
MS taskbar
|
crssr.exe
|
X
|
Added by the W32/Rbot-AGO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
MS Unix Binary
|
cssrs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
MS-Connect
|
cdm.exe
|
X
|
Adult content dialler - see here
|
|
mscfs
|
cfsys.dll
|
X
|
Added by the Trojan.Ourxin adware Trojan. This infection will display popups on the compromised computer. ... Read More
|
|
MSControl28
|
crsss.exe
|
X
|
Added by the W32/Rbot-AQL worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
msennger
|
calling.com
|
X
|
Added by the Troj/Zapchas-EB Trojan.
|
|
MsgSvcMgr32
|
cmdzxdll.exe
|
X
|
Added by the W32/Rbot-AEK worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
MSN
|
ctfmoons.exe
|
X
|
Added by the SPYBOT.HI WORM!
|
|
MSN
|
csrsx.exe
|
X
|
Added by a variant of the Win32/Pushbot worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More
|
|
MSN
|
cssr.exe
|
X
|
Added by a variant of the Win32/Pushbot worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More
|
|
MSN
|
cssrs.exe
|
X
|
Added by a variant of the Win32/Pushbot worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More
|
|
MSN
|
cssrss.exe
|
X
|
Added by a variant of the Win32/Pushbot worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More
|
|
MSN
|
csssrss.exe
|
X
|
Added by a variant of the Win32/Pushbot worm and IRC backdoor. Win32/Pushbot is a family of worms that spread using MSN Messenger. ... Read More
|
|
MSN ang
|
cssrss.exe
|
X
|
Added by the FORBOT-CE WORM!
|
|
MSN Manager
|
cvss.exe
|
X
|
Added by a variant of the SPYBOT WORM!
|
|
Msn Messanger
|
crsss.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
mspaint.exe
|
check32.exe
|
X
|
Added by the AGENT.AH TROJAN!
|
|
Mspatch89
|
cnqmax.exe
|
X
|
Added by the RANDEX.P WORM!
|
|
msqn32.dll
|
C:\Windows\System32\msqn32.dll
|
X
|
Added by the W32/Feebs-P P2P worm.
|
|
mssysint
|
comime.exe
|
X
|
Added by the Troj/Netsnake-I backdoor trojan.
|
|
MSUpdate
|
criticalUpdate.exe
|
X
|
|
|
MSVersion
|
clrschp038.exe
|
X
|
Added by the POPMON.A TROJAN! - also known as PopMonster adware
|
|
MSWUpdate
|
csrss.exe
|
X
|
Added by the Mal/DrkBot-A malware.
|
|
My Computer
|
cqcags.exe
|
X
|
Added by the W32/Sdbot-TJ WORM/IRC backdoor trojan!
|
|
MyLife
|
CmdServ.exe
|
X
|
Added by the HOLAR.A WORM!
|
|
Myvirus
|
codeme.exe
|
X
|
Added by the W32/Patco-A worm.
|
|
NAV CfgWiz
|
cfgwiz.exe
|
N
|
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it ... Read More
|
|
NAV Configuration Wizard
|
cfgwiz.exe
|
N
|
Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it ... Read More
|
|
NAVUpdater
|
csrss.exe
|
X
|
Added by an unknown malware.
|
|
NB Common Dialog Enhancements
|
COMDLGEX.EXE
|
N
|
Part of McAfee Nuts & Bolts. With Common Dialog Enhancements, you can add MRU list box to open dialogs ... Read More
|
|
nClient
|
cnen.exe
|
X
|
Added by the W32.Rinbot.BF worm. W32.Rinbot.BF is a worm that spreads by exploiting vulnerabilities and opens a back door on the compromised computer. ... Read More
|
|
NCS_SS
|
Csinsm32.exe
|
N
|
Same as CleanSweep Smart Sweep-Internet Sweep
|
|
NDAv
|
CSNSS.EXE
|
X
|
Added by the W32/Sumom-C instant messenger and P2P worm.
|
|
netservices
|
csxrs.exe
|
X
|
Added by a variant of the W32/SDBOT WORM! ... Read More
|
|
NetWork
|
csrs.exe
|
X
|
Added by the AGOBOT.JJ WORM!
|
|
Network Gateway Manager
|
csrsc.exe
|
X
|
Added by the W32/Sdbot-CPE worm and IRC backdoor.
W32/Sdbot-CPE spreads
- to computers vulnerable to common exploits, including: ... Read More
|
|
new csnm manager
|
csmn.exe
|
X
|
Added by the SDBOT.BZS WORM! ... Read More
|
|
NOMAD Detector
|
ctmnrun.exe
|
U
|
Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use ... Read More
|
|
nomad detector
|
ctnmrun.exe
|
U
|
Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use ... Read More
|
|
Norton Auto-Protect
|
ccApp.exe
|
X
|
Added by the W32.Ahker.D WORM! **Note - for the valid Norton AV entry the filename is "navapexe". This is also not the valid Norton_AV_2003 file wi ... Read More
|
|
Norton Crashguard Monitor
|
cgmenu.exe
|
N
|
Troublesome program that doesn't actually work with WinME so Norton removed it from SystemWorks 2001 ... Read More
|
|
Norton Live Update Server
|
cpsdv.exe
|
X
|
Added by the AGOBOT.EW TROJAN!
|
|
Norton Live Updater
|
Cavapsvc.exe
|
X
|
Added by the GAOBOT.AO WORM!
|
|
Norton Protect Activies
|
csrss.exe
|
X
|
Added by the Troj/Banker-CZ Internet banking trojan. This infection has the ability to steal information and log keystrokes. if you are infected wit ... Read More
|
|
Norton Start
|
ccStart.exe
|
X
|
Added by the W32/Sdbot-OX worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
Norton System
|
csrs.scr
|
X
|
Added by the Troj/Banloa-AFM downloader Trojan.
|
|
Norton SystemWorks
|
cfgwiz.exe
|
N
|
Norton System Works configuration wizard. Reportedly a resource hog. Many users find they can live without loading it ... Read More
|
|
Norton Update
|
ccUpdate.exe
|
X
|
Added by a variant of the AGOBOT/GAOBOT WORM!
|
|
nortonav
|
CCUPD32.EXE
|
X
|
Added by an unidentified WORM or TROJAN!
|
|
nortonsantivirus
|
ccEvtMngr.exe
|
X
|
Added by the HZDOOR-A TROJAN!
|
|
Notepad
|
C:\ASAP!!!.txt
|
X
|
Added by the Trojan.Randsom.B ransoming Trojan. Trojan.Randsom.B is a Trojan horse that encrypts files on the compromised computer and then issues a r ... Read More
|
|
novavapp
|
ccsmn.exe
|
X
|
Related to rogue anti-spyware programs.
|
|
novavappr
|
ccsrr.exe
|
X
|
Related to rogue anti-spyware programs.
|
|
NT Printing Services
|
chkdsks.exe
|
X
|
Added by the Troj/Buzus-M Trojan.
|
|
NTdhcp
|
CiKewl.exe
|
X
|
Added by the Troj/QQRob-N backdoor Trojan.
|
|
NTDLM
|
csrss.exe
|
X
|
Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! ... Read More
|
|
NTFS Volume Maintenance
|
chkntfs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
NTP
|
CryptWan.dll
|
X
|
Added by the Troj/PWS-AZQ password-stealing Trojan.
|
|
ntuser
|
ctfmon.exe
|
X
|
Identified as a variant of the Trojan-Downloader.Win32.Agent variant malware.
|
|
ntuser
|
ctfmun.exe
|
X
|
Identified as a variant of the Trojan-Dropper.Agent.snu malware.
|
|
nvsv32.exe
|
cstr.exe
|
X
|
Added by a variant of the W32/SDBOT WORM!
|
|
Nvt32
|
complaint_7251.exe
|
X
|
Added by the TROJ_ARTIEF.B downloader Trojan. This infection downloads other malware onto your computer. ... Read More
|
|
Offline Files
|
cscsvc.dll
|
Y
|
Windows service that performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of ... Read More
|
|
OleExport
|
CertMgr.dll
|
X
|
Identified by Kaspersky Antivirus as the Trojan.Win32.BHO.gb malware.
|
|
OpenCom
|
C:\IO.COM
|
X
|
Added by the W32/VB-CRL mass-mailing worm.
|
|
ORiNOCO
|
Cmluc.exe
|
U
|
Client Manager software for an ORiNOCO wireless LAN card
|
|
OutPost FireWall
|
child.dll
|
X
|
Added by the Troj/Small-ER backdoor Trojan.
|
|
p2snetis
|
comippwa.exe
|
X
|
Added by the Troj/SpamToo-AL Trojan.
|
|
pagmstart
|
client.exe
|
?
|
Possibly related to this?
|
|
pal evidence eliminator
|
Cleaner.exe
|
N
|
Related to PAL_Evidence_Eliminator - cover the tracks of your browsing habits and E-mails if you think you need to. Run manually on a regular basis ... Read More
|
|
Palm MultiUser Config
|
Configtool.exe
|
?
|
MultiUser configuration for a Palm PDA device?. Is it required?
|
|
Paner cPanle
|
cPanere.exe
|
X
|
A variant of the W32.Spybot.Worm family of worms and IRC backdoor Trojans. This family of worms spread via mIRC and the Kazaa file sharing network. ... Read More
|
|
PC-Config32
|
corona.exe
|
X
|
Added by the CORONEX.A WORM!
|
|
pc-duo system snapshot
|
CLBOOT32.EXE
|
U
|
PC-Duo_Remote_Control from Vector. "System Snapshot provides a detailed ... Read More
|
|
PCprot
|
crcss.exe
|
X
|
Added by an unidentified WORM!
|
|
pdp Server
|
ctpdpsrvr.exe
|
U
|
Included and setup with the drivers for my Compaq A3000 all-in-one printer/scanner - maybe for networking. Works fine without it - but may be needed w ... Read More
|
|
Pe2ckfnt SE
|
chkfont.exe
|
N
|
Used to check whether the fonts are installed properly on your computer or not for a scanner. If you don't want to execute it, you can uncheck it in t ... Read More
|
|
PHIME2004C
|
CTFMDN.exe
|
X
|
Added by the Troj/Dloadr-AMV Trojan.
|
|
Photo Express Calendar Checker SE
|
CALCHECK.EXE
|
N
|
If you create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper, Photo Express will replace the wallpaper automatically. Photo Express ... Read More
|
|
piaoyes
|
client.exe
|
X
|
Added by the Backdoor.Djump backdoor.
|
|
Print Driver Helper Service
|
crsrr.exe
|
X
|
Added by the AGENT-BC TROJAN!
|
|
printer spooler
|
commonaccess.exe
|
X
|
Added by the Troj/Delf-LB browser hijacking trojan.
|
|
Printer Update
|
CFGREG.EXE
|
?
|
Maybe a registration reminder or automatically updates drivers or application software for a printer? ... Read More
|
|
Privacy Suite RiskMonitor
|
CSRiskmon.exe
|
U
|
Added by the Privacy Suite security software. Risk Monitor will alert you when the programs sees that your privacy is at risk. ... Read More
|
|
Prog
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Protection Center
|
cntprot.exe
|
X
|
Added by the Protection Center malware.
|
|
ProtocolEventTsk
|
csrwjd.exe
|
X
|
Added by the Troj/Stinx-N backdoor Trojan.
|
|
PSD Tools Channel
|
ChannelUp.exe
|
X
|
|
|
Quick Heal On-Line Protection
|
Cateye.exe
|
Y
|
Quick Heal - virus scanner
|
|
rdshost
|
cymdda.dll
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
real statics agent
|
ccreal.exe
|
X
|
Added by a variant of the WIN32.RBOT WORM! ... Read More
|
|
RegDone Ex
|
csrss.exe
|
X
|
Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Registry
|
class0117[random].exe
|
X
|
Added by the Spyware.Blackbox spyware.
|
|
Registry Startup Check
|
checkreg.exe
|
X
|
Added by the Troj/RemLoad-A Trojan.
|
|
RegistryCheck
|
chkreg.dll
|
X
|
Added by the Dialer.Ulubione premium adult dialer.
|
|
RegWrite
|
csrss.exe
|
X
|
Added by the SOKACAPS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
relinson
|
cmdno.exe
|
X
|
Added by the Troj/Dropper-PS Trojan.
|
|
Remndr
|
CsRemnd.exe
|
X
|
CasinoOnline foistware
|
|
Remote ClipBook Viewer
|
clipbk.exe
|
X
|
Added by the W32/Mofei-Q network worm.
W32/Mofei-Q provides backdoor access and control over the computer by creating
a port (ba ... Read More
|
|
Remote Themes
|
cmutfilt.exe
|
X
|
Unknown malware. Possible trojan downloader and backdoor.
|
|
Removabie Storage
|
csrss.exe
|
X
|
Added by the Troj/GrayBrd-CM backdoor Trojan. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe file. ... Read More
|
|
Resume Copy
|
copyfstq.exe
|
U
|
Part of Total Copy - an improved version of the Windows copy function. Allows for resumption file copies or moves in progress when computer was shut d ... Read More
|
|
Rising Process Communication Center
|
CCenter.exe
|
Y
|
|
|
Run TaskMrg
|
csrss.exe
|
X
|
Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
run=
|
cmmpu.exe
|
N
|
MIDI emulator driver for the integrated sound chip by C-Media based on the CMI-8330 chip set normally found in cheap motherboards. Also installed as p ... Read More
|
|
run=
|
cyxid98.exe
|
X
|
Unidentified malware
|
|
rundll32
|
csrss.exe
|
X
|
Added by the GUTTA TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
Runner
|
csrss.exe
|
X
|
Added by the Troj/AdClick-AG Trojan! File is found in the Windows folder.
|
|
safe360
|
coiome.exe
|
X
|
Unknown malware.
|
|
Safer Networking Limited
|
csrss.exe
|
X
|
Identified by ESET Nod32 as a variant of the Trojan.Generic.KD.373098 malware.
|
|
Sametime Connect
|
Connect.exe
|
U
|
IBM Lotus Instant Messaging and Conferencing software
|
|
SandboxieControl
|
Control.exe
|
Y
|
Installed by the Sandboxie security software.
|
|
sbc yahoo! connection manager
|
ConnectionManager.exe
|
N
|
The cmanager.exe process is used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. ... Read More
|
|
sbthostyazzz
|
ctxmon.exe
|
X
|
Added by the W32/Yaz-A worm.
|
|
SDAv
|
CSNSS.EXE
|
X
|
Added by the W32/Sumom-C instant messenger and P2P worm.
|
|
SernellApp.pcx
|
csrss.exe
|
X
|
Added by the Troj/Bancban-BJ trojan. Located in Windows system folderD5133csrss.exe. ... Read More
|
|
Service Controller
|
Csrrs.exe
|
X
|
Added by the GAOBOT.AO WORM!
|
|
Service Drivers
|
Compt.exe
|
X
|
Added by the W32/Rbot-ZJ WORM/IRC backdoor Trojan!
|
|
Service Monitor
|
csnss.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
ServicesLog
|
ccapp32.exe
|
X
|
Added by the W32/Rbot-AMX worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
SetecCertUtil
|
Certutil.exe
|
U
|
Setec Web and Email Security. Setec PKI smart card software. The PKI technology enables secure and reliable user identification in services offered th ... Read More
|
|
setFTPBack
|
createsw.exe
|
X
|
Added by the FTP_BMAIL TROJAN!
|
|
SettingValue
|
casd.exe
|
X
|
Added by the W32/Sdbot-PGworm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
SFtrb Service
|
cftrb32.exe
|
X
|
Added by the SOBIG.D WORM!
|
|
shambl3r
|
cnf.bat
|
X
|
Added by the REMABL WORM!
|
|
SharePort Utility
|
Connect.exe
|
U
|
Allows you to connect to USB devices plugged into compatible D-Link routers that have a SharePort USB port. ... Read More
|
|
Shcenter
|
chcenter.exe
|
N
|
IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files" ... Read More
|
|
Shockwave
|
csrss.exe
|
X
|
Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! ... Read More
|
|
SIMO.exe
|
C:\WINDOWS:slm.exe
|
X
|
A variant of the Backdoor:W32/PoisonIvy backdoor Trojan. Backdoor:W32/PoisonIvy is a family of backdoors that give a remote user extensive access to a ... Read More
|
|
siscolor
|
color.exe
|
U
|
Probably on-board graphics related based upon the SiS chipsets. Has been seen on ASUS motherboards with SiS chipsets and known to cause conflicts if y ... Read More
|
|
Sistema de Comm
|
conmsyrtl.exe
|
X
|
Added by the Troj/Agent-LMV Trojan.
|
|
Sistema de Comm
|
coxdsyrtl.exe
|
X
|
Added by the Troj/Agent-NDQ Trojan.
|
|
SmCtrlDrv
|
cdnprh.dll
|
X
|
Added by the Troj/Tiny-DA Trojan. Do not delete C:\Windows\System32\rundll32.exe as it is a legitimate file. ... Read More
|
|
smr
|
cvshost.exe
|
U
|
Added by the Spyware.SilentMonitor surveillance software. This software should be uninstalled if found on your computer without your knowledge. ... Read More
|
|
SMS Client Service
|
clisvc95.exe
|
U
|
When the SMS Client service starts on a domain controller, the Client service modifies the SMSCliToknAcct & user account group membership, user rights ... Read More
|
|
SMSERIALWORKSTARTER
|
comsysobj.exe
|
X
|
Trojan installed with the SpyBurner rogue anti-spyware program.
|
|
Software\Microsoft\Windows\CurrentVersion\Runprocess
|
cipsn.exe
|
X
|
Added by the W32/Forbot-DM worm. This infection spreads using the LSASS vulnerability. ... Read More
|
|
Sound Sservice Driver
|
cfmon.exe
|
X
|
Added by a CodBot variant.
|
|
sp2 firewall/internet updater
|
crssrs.exe
|
X
|
Added by the RBOT.BJO WORM! ... Read More
|
|
Speed racer
|
CTSRReg.exe
|
N
|
Software for a Creative sound card
|
|
spoolsvr32
|
csmss.exe
|
X
|
Added by the AGENT-AU TROJAN!
|
|
spoolsvr32
|
csmss32.exe
|
X
|
Added by a variant of the AGENT-AU TROJAN!
|
|
spup.exe
|
chater.exe
|
X
|
Unknown malware.
|
|
SQConfigChecker
|
cc.exe
|
X
|
Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants ... Read More
|
|
Srv32Win
|
csrss.exe
|
X
|
Identified as a variant of the Trojan-Downloader.Win32.SpyAgent.r malware. This infection should not be confused with the legitimate C:\Windows\Syste ... Read More
|
|
SRVState_REPCLIENT
|
capslock.exe
|
X
|
Added by the Troj/Hasik-A Trojan.
|
|
SSWPlauncher
|
comet.exe /app:SSWPlauncher
|
X
|
CometCursor by Comet Systems
|
|
Start CurePCSolution.exe
|
CurePCSolution.exe
|
X
|
A rogue anti-spyware product that uses false positives, misleading reports, and deceptive advertising in order to scare you into purchasing the full v ... Read More
|
|
start extracting
|
car.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Start RF Wireless Mouse
|
cm20.exe
|
Y
|
Yuanxun Electronics RF wireless mouse driver
|
|
start uploading
|
crsss.exe
|
X
|
Added by the W32/Rbot-SZ worm. This infection connects to an IRC server where it waits for remote commands. ... Read More
|
|
StartCCC
|
CLIStart.exe
|
U
|
ATI's CATALYST™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's ... Read More
|
|
startkey
|
CKOTS.exe
|
X
|
Added by the Troj/Bifrose-HM backdoor Trojan.
|
|
Startup Update
|
Cvshost.exe
|
X
|
Added by the GAOBOT.AO WORM!
|
|
State Service
|
csrss.exe
|
X
|
Added by the Troj/Dadobra-CP trojan.
|
|
Sun Java
|
cpu.exe
|
X
|
Identified as a variant of the Backdoor.Win32.Rbot.gen malware.
|
|
sunjavasched
|
ccEvtMngr.exe
|
X
|
Added by the W32/Sdbot-YP ... Read More
|
|
SunJavaSched
|
ccEvtMngr.exe
|
X
|
Added by the W32/Sdbot-YP worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
|
|
Svchost
|
csrss.exe
|
X
|
Identified by Avira as a variant of the BDS/Bandok.HR backdoor Trojan. This infection should not be confused with the legitimate C:\Windows\System32\c ... Read More
|
|
svchost
|
conhost.exe
|
X
|
Identified as an unknown malware. This infection should not be confused with the legitimate C:\Windows\System32\conhost.exe file. ... Read More
|
|
svchost.exe
|
C:\WINDOWS\system32:hh2.exe
|
X
|
A variant of the Backdoor:W32/PoisonIvy backdoor Trojan. Backdoor:W32/PoisonIvy is a family of backdoors that give a remote user extensive access to a ... Read More
|
|
svcshare
|
CTMONTv.exe
|
X
|
Added by the W32/Fujacks-AJ removable storage device worm.
|
|
Sygate Personals Firewalls
|
ccsrn.exe
|
X
|
Added by a variant of the RBOT WORM!
|
|
Symantec
|
ccapp.exe
|
X
|
Added by the W32/Lebreat-A backdoor worm.
|
|
Symantec Configuration Loader
|
ccApp32.exe
|
X
|
Added by a variant of the GAOBOT WORM!
|
|
Symantec Event Manager
|
ccSvcHst.exe
|
Y
|
Related to Symantec products.
|
|
Symantec Lic NetConnect service
|
ccSvcHst.exe
|
Y
|
Related to Symantec products.
|
|
Symantec Password Validation Service
|
ccPwdSvc.exe
|
Y
|
Used by Symantec products 2003/2004 possibly to allow certain users Internet access. ... Read More
|
|
Symantec Settings Manager
|
ccSvcHst.exe
|
Y
|
Related to Symantec products.
|
|
SymKeepAlive
|
CKA.exe
|
U
|
Part of Norton SystemWorks 2003 - keeps a dial-up modem connection alive
|
|
SymRun
|
ccApps.exe
|
X
|
Added by the Troj/Kagen-A Trojan. The Trojan also creates and then opens the file kangen.doc which contains a message in Indonesian. ... Read More
|
|
System
|
csrss.exe
|
X
|
Added by the PWSteal.Ldpinch.E TROJAN!
|
|
system
|
cber.exe
|
X
|
Added by an unidentified TROJAN!
|
|
System
|
csvyj.exe
|
X
|
Added by the Troj/Agent-DJT Trojan.
|
|
System Config Manager
|
crss.exe
|
X
|
Added by the AGOBOT.GH WORM!
|
|
System DLF
|
cpqdiaga.exe
|
N
|
Compaq Diagnostic record system utility which allow you to view information about your computer's hardware and software configuration. Available via S ... Read More
|
|
system drivers
|
cpsq32.exe
|
X
|
Added by the SDBOT.AXH ... Read More
|
|
System Failure Statistic
|
cnstat.exe
|
X
|
Added by the RBOT-LF WORM!
|
|
System Log Event
|
csrss32.exe
|
X
|
Added by the AGOBOT-JI WORM!
|
|
System Monitoring
|
cute.exe
|
X
|
Added by the W32.Rahiwi.A. W32.Rahiwi.A is a worm that spreads by copying itself to the root of all drives, including removable and shared drives. ... Read More
|
|
system performance logging for TrueTime Driver Edition
|
chkzero.ex
|
X
|
Added by the Troj/Hackda-A Trojan & Rootkit.
|
|
System Process
|
csrss.exe
|
X
|
Added by the Troj/AdClick-AG Trojan! File is found in the Windows folder.
|
|
system process
|
CSRSR.exe
|
X
|
Added by the W32/AGOBOT-SQ WORM! ... Read More
|
|
System Service
|
coderxt.exe
|
X
|
Added by the W32/Rbot-ALD worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
System Services
|
connection.exe
|
X
|
Added by an unidentified WORM or TROJAN!
|
|
System startup
|
charmapx.exe
|
U
|
Only required if using an oriental language
|
|
System time updator
|
CSysTime.exe
|
X
|
Added by the RANDEX.S WORM!
|
|
System Updater Machine
|
crhwss.exe
|
X
|
Added by the Troj/Ciadoor-DQ Trojan.
|
|
System132
|
Csrtss.exe
|
X
|
Added by the Troj/LanFilt-I. This infection connects to an IRC server where it waits for remote commands to execute, it can also log keystrokes, down ... Read More
|
|
system32
|
crsvvc.exe
|
X
|
Added by the RBOT.BLY WORM! ... Read More
|
|
System32-Driver
|
csrs32.exe
|
X
|
Added by the W32/Sdbot-CP backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execut ... Read More
|
|
SystemCleaner
|
Clean2.exe
|
X
|
Added by the W32/Autorun-AZE removable media worm.
|
|
systemdriver
|
csrss.exe
|
X
|
Added by the ASCETIC.B TROJAN - Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, ... Read More
|
|
SystemGent
|
CVT.exe
|
X
|
Added by the W32/Brontok-H worm.
|
|
SysTemperatureNotRemove
|
cmmput.exe
|
X
|
Added by the W32.Nujama.B worm. W32.Nujama.B is a worm that spreads through mapped drives and shared folders, and lowers security settings on the comp ... Read More
|
|
SystemProcEvent
|
csrwnd.exe
|
X
|
Added by the Troj/Stinx-O backdoor Trojan.
|
|
SYSTEMSars32
|
csrss.exe
|
X
|
Added by the AHLEM.A WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! ... Read More
|
|
SystemTra
|
CDPlay.EXE
|
X
|
Added by a variant of the LOVGATE WORM!
|
|
systrasx
|
CONSOLES.EXE
|
X
|
Added by the W32/Sdbot-NW worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
|
|
SysTray
|
cfustums.dll
|
X
|
Added by the Troj/Small-XG dropper Trojan.
|
|
SysW8
|
csta.exe
|
U
|
Clean Space - privacy and perfomance enhancer
|
|
Szservice
|
czsrv.exe
|
X
|
A variant of the Backdoor.Win32.SdBot.bhk family of worms and IRC backdoor Trojans. ... Read More
|
|
Task alert
|
cmosvc.exe
|
X
|
A variant of the Backdoor.Win32.IRCbot.vic family of worms and IRC backdoor Trojans. ... Read More
|
|
Task Manager
|
controlsys.exe
|
X
|
Added by the Troj/Tiotua-S Trojan.
|
|
Task Manager
|
chucem.exe
|
X
|
Added by the W32/Chucem.worm worm.
|
|
Task Scheduler
|
ctfmon.exe
|
X
|
Identified as a variant of the Trojan-Downloader.Win32.Agent variant malware.
|
|
Task Scheduler
|
ctfmun.exe
|
X
|
Identified as a variant of the Trojan-Dropper.Agent.snu malware.
|
|
TaskBar
|
CTLTask.exe
|
N
|
Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects, not required in startup. NOTE: if you get a ctltask.exe ... Read More
|
|
TaskControlLog
|
csrdeu32.exe
|
X
|
Added by the BKDR_BREPLIBOT.M worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
TaskMrg
|
csrss.exe
|
X
|
Added by the Troj/LdPinch-W trojan.
|
|
Tasktray
|
CTLTray.exe
|
N
|
Installed with the Sound Blaster Audigy range of soundcards. Allows you to set EAX effects or equalizer settings for the Sound Blaster Audigy from a s ... Read More
|
|
Test
|
Cmm32.exe
|
U
|
Added by the Spyware.Bemonitor surveillance program. Spyware.Bemonitor is a spyware program that may log keystrokes on the compromised computer. If t ... Read More
|
|
Tibiabot
|
calc.exe
|
X
|
Added by the BackDoor-CEP!ic backdoor Trojan. This infection uses Alternate Data Streams to hide itself. In order to remove these files you will nee ... Read More
|
|
Timer
|
comm.exe
|
X
|
Added by the Troj/Bdoor-IP trojan backdoor.
|
|
TMA distribution
|
cfinst.exe
|
U
|
Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients ... Read More
|
|
Topic cPanr
|
cPaner.com
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Total PC Defender
|
Total PC Defender.exe
|
X
|
Added by the Total PC Defender rogue anti-spyware program.
|
|
TurboNet
|
c.exe
|
X
|
Added by the Troj/Renos-EA Trojan associated with rogue security programs.
|
|
twin
|
ctfnom.exe
|
X
|
Added by the W32.Ogleon.A worm. W32.Ogleon.A is a worm that spreads through removable storage devices. It also drops a copy of Infostealer.Gampass, on ... Read More
|
|
Ulead Photo Express x.0 Calendar
|
calcheck.exe
|
N
|
Ulead Calendar Checker - part of Ulead Photo Express, where "x" represents the version number. Automatically replaces your calendar desktop wallpaper ... Read More
|
|
updata_server
|
Coson.exe
|
X
|
Added by the Troj/GrayBir-BO backdoor Trojan.
|
|
Update
|
CDUpdater.exe
|
X
|
"Carpe Diem" adult premium rate dialler related
|
|
Update
|
csrss.exe
|
X
|
Added by the Troj/AdClick-AG Trojan! File is found in the Windows folder.
|
|
Update Browser
|
cmutfilt.exe
|
X
|
Unknown malware. Possible trojan downloader and backdoor.
|
|
update32
|
configs.exe
|
X
|
Hijacker, also detected as the QURL-2 TROJAN! ... Read More
|
|
UpdateComponent
|
CNF UPD.EXE
|
X
|
Added by the SPYBOT.GEN VIRUS!
|
|
UpromiseRemindU
|
Code
|
U
|
Part of the Upromise college savings program.
|
|
User Input Services
|
CTFMON32.EXE
|
X
|
Added by the TROJ_MANCSYN.AK Trojan.
|
|
Userinit
|
cologsver.exe
|
X
|
Identified by Kaspersky antivirus as the Virus.Win32.Agent.ad virus.
|
|
Users service for disk management requests
|
CHKDSK32.EXE
|
X
|
Added by the Troj/Telemot-A backdoor Trojan.
|
|
VbDLL
|
COMUSG.EXE
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
VB_run
|
comctl_32.exe
|
X
|
Dubious downloader from densmail.com
|
|
VC5MediaPlayer
|
csmss.exe
|
X
|
Added by the DEDLER-B WORM!
|
|
Verificador do sistema
|
cssrs.exe
|
X
|
Added by the W32.Mocon worm. W32.Mocon is a worm that logs keystrokes and steals information from the infected computer. It spreads by copying itself ... Read More
|
|
Verizon Control Pad
|
cpad.exe
|
N
|
Control Pad - installed with Verizon DSL accounts. Tool designed to streamline the online experience ... Read More
|
|
VideoDriver
|
csrss.exe
|
X
|
Added by the Troj/WinSpy-K backdoor Trojan. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe. ... Read More
|
|
Videohost
|
c.exe
|
X
|
Unknown malware. Most likely a variant of the Trojan.Win32.FraudPack.gen malware. ... Read More
|
|
VMware, Inc.
|
csrss.exe
|
X
|
Unknown malware. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe file. ... Read More
|
|
Volume Shadow Installer
|
cvisvc.exe
|
X
|
Unknown malware.
|
|
Vonage
|
click2call.exe
|
U
|
Vonage Voice over IP Internet phone service
|
|
warning: do not remove it! (system)
|
cfpsys.exe
|
Y
|
Folder_Password_Protect A program that lets you set a password on folders of your choice ... Read More
|
|
WashAndGo - Cleanup of old Backupfiles
|
checker.exe
|
U
|
WashAndGo - temp file cleaner
|
|
WCOLOREAL
|
coloreal.exe
|
U
|
Makes colours sharper and brighter, but will only work with coloreal capable monitors ... Read More
|
|
WDNDrive
|
chgsprt.sys
|
X
|
Added by the Troj/Haxspy-A backdoor.
|
|
Win Command
|
command32.exe
|
X
|
Added by the AGOBOT.XQ WORM!
|
|
Win Command
|
command32.exe
|
X
|
Added by the AGOBOT.XQ WORM!
|
|
Win Updator Services
|
ctfnom.exe
|
X
|
Added by a variant of the W32/WOOTBOT WORM!
|
|
Win32 FireWire Driver
|
CTHELPER32.EXE
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Win32 Information Service
|
crsrs.exe
|
X
|
Added by the W32/Delbot-S worm and IRC backdoor. W32/Delbot-S spreads to other network computers by scanning network shares for weak passwords and by ... Read More
|
|
Win32 Network Driver
|
crss.exe
|
X
|
Added by a variant of the AGOBOT/GAOBOT WORM!
|
|
Win32 Security Service
|
crsss.exe
|
X
|
Added by the W32/Delbot-O worm and IRC backdoor.
|
|
WIN32DS
|
clienttimer.exe
|
X
|
Added by the Adware.Eziin homepage hijacker.
|
|
WIN32i
|
clienttimer.exe
|
X
|
Added by the Adware.Eziin homepage hijacker.
|
|
win32io
|
clienttimer.exe
|
X
|
Added by Eziin adware ... Read More
|
|
WIN95DEFVIEW
|
csmss.exe
|
X
|
Added by the TROJ/DEDLER-D TROJAN!
|
|
WinAntiSpyware 2006 Scanner
|
was6.exe
|
X
|
Added by the WinAntiSpyware rogue antispyware program.
|
|
WinApp
|
clipuser32.dll
|
X
|
Identified as a variant of the TR/Spy.Agent malware.
|
|
WinCheck
|
check.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Wind0ws Ser7ice Agent
|
colwindos.exe
|
X
|
Added by the W32/Rbot-GQO worm and IRC backdoor. This infection will connect to an IRC channel where it will await commands to execute. ... Read More
|
|
Windows
|
Cfreer.exe
|
X
|
Added by the W32/Culler-C worm that spreads via MSN Messenger.
|
|
Windows (ICS) Spooler
|
crtss.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
windows 2004
|
CSRSS.exe
|
X
|
Added as result of a Troj/Banker-DY trojan infection ... Read More
|
|
Windows Action
|
csrs.exe
|
X
|
Added by the W32/Seccmu-A worm.
|
|
Windows Client
|
client.exe
|
X
|
Added by the Troj/Backdr-AM Trojan.
|
|
Windows Client Service 32
|
csrss.exe
|
X
|
Added by the W32/Rbot-ALB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
windows client/server runtime server
|
csrs.exe
|
X
|
Added by the RBOT.KD WORM! ... Read More
|
|
Windows CMS Protocol
|
cmss.exe
|
X
|
Added by the W32/Rbot-BFT worm and IRC backdoor.
|
|
Windows Common Files Manager
|
Commgr.exe
|
X
|
Added by the Mal/Agent-DK malware.
|
|
Windows Config System
|
config.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Control
|
Control.exe
|
X
|
Browser hijacker. NOTE - On Win9x systems it will overwrite the Windows file of the same name in the Windows directory, so therefore it will be necess ... Read More
|
|
Windows Cron Service
|
crons.exe
|
X
|
Added by the Troj/Hupigon-SR backdoor Trojan.
|
|
Windows CTF Loader
|
ctfmon.exe
|
X
|
Added by the W32/Sdbot-DFS network worm and IRC backdoor. This infection should not be confused with the legitimate C:\Windows\System32\ctfmon.exe. ... Read More
|
|
Windows Custom Services
|
CSRCS.EXE
|
X
|
Added by the W32/Spybot-EI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Windows Disk Manager
|
cmnvc.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Executable Dir
|
crsrs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Explorer SP2
|
csrss.exe
|
X
|
Added by the Troj/Banker-DM password-stealing trojan for Brazilian banks.
|
|
Windows firewall manager
|
chh.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Firewall Updater
|
ctfcom.exe
|
X
|
Added by the W32/Rbot-GCB worm and IRC backdoor.
|
|
Windows Firewall Updater
|
cronos.exe
|
X
|
Added by the W32/Rbot-GBY worm and IRC backdoor. W32/Rbot-GBY spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More
|
|
Windows Firewall Updater
|
cftpn0ne.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Hijack Protection
|
comngr.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
Windows Hijack Protection System
|
commngr.exe
|
X
|
A variant of the RBot family of worms and IRC backdoor Trojans.
|
|
Windows Live Messenger 8.12
|
ctfmon.exe
|
X
|
Added by the W32/LiPark-A worm. This infection should not be confused with the legitimate C:\Windows\System32\ctfmon.exe file. ... Read More
|
|
Windows Loader Service
|
civsc.exe
|
X
|
Added by a variant of the RBOT WORM!
|
|
Windows Management Network (WMN)
|
conime.exe
|
X
|
Unknown malware.
|
|
Windows media service
|
crvss.exe
|
X
|
Added by the SDBOT.VP WORM!
|
|
Windows media service
|
crsss.exe
|
X
|
Added by the RBOT.ACY WORM!
|
|
Windows media services
|
cvrsss.exe
|
X
|
Added by the RBOT-MW WORM!
|
|
Windows Media Updater
|
crease.exe
|
X
|
Added by the W32/Rbot-ATI worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Windows modez Verifier
|
ctfn0n3z.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Registry Security
|
crss.exe
|
X
|
Added by a variant of the IRC.BOT TROJAN!
|
|
Windows RPC Host Service
|
csrssr.exe
|
X
|
Added by the Troj/Agent-QRP Trojan.
|
|
Windows Service Agent
|
czf.exe
|
X
|
Added by the W32/Rbot-GAJ worm and IRC backdoor.
|
|
Windows Service Agent
|
co0l.exe
|
X
|
Added by the W32/Rbot-GQY worm and IRC backdoor.
|
|
Windows Service Update
|
crsss.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Services
|
csrss.exe
|
X
|
Added by the W32.Nujama worm. W32.Nujama is a worm that spreads through mapped drives, hides file extensions, and changes system information. ... Read More
|
|
Windows Services
|
csrsrss.exe
|
X
|
Added by the W32.Nujama.B worm. W32.Nujama.B is a worm that spreads through mapped drives and shared folders, and lowers security settings on the comp ... Read More
|
|
Windows Services Layer
|
configure.exe
|
X
|
Added by the W32/Rbot-GAK worm and IRC backdoor. W32/Rbot-GAK spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More
|
|
Windows Services Layer
|
ctfnon.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Services M7
|
ctfmon32.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Smrss Service
|
cmdpipe.exe
|
X
|
Added by the W32/Tilebot-AE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Windows Spooler
|
csrss.exe
|
X
|
Added by the W32/Tilebot-AL worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. This should no ... Read More
|
|
Windows svchost
|
ctfmon32.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
WINDOWS SYSTEM
|
ctech.exe
|
X
|
Added by the W32/Mytob-KD mass-mailing worm and IRC backdoor. W32/Mytob-KD is capable of spreading through email and through various operating system ... Read More
|
|
Windows System Controller
|
chkdsk.exe
|
X
|
Added by the W32/Tilebot-IR worm and IRC backdoor.
|
|
Windows System Devices Manager
|
csrss.exe
|
X
|
Added by the Troj/Inject-PX Trojan.
|
|
Windows System File
|
cmxp.exe
|
X
|
Added by the SPYBOT.KHO WORM!
|
|
Windows System Manager
|
CRSL.EXE
|
X
|
Added by the WORM_SDBOT.MG worm. This infection connects to an IRC server where it waits for remote commands. ... Read More
|
|
Windows System Manager
|
crssm.exe
|
X
|
Added by the W32/Rbot-AFH worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Windows System32
|
clsas32.exe
|
X
|
Added by the W32/Rbot-AZO worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
Windows System32 Driver
|
clsass32.exe
|
X
|
Added by the W32/Sdbot-AGG worm and IRC backdoor.
|
|
Windows Taskmanager Data
|
csrrss.exe
|
X
|
Added by the W32/Rbot-BBH worm and IRC backdoor.
|
|
Windows Time Service
|
csrrs.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Time Sync
|
csrs.exe
|
X
|
Added by the W32/Tilebot-N backdoor and IRC worm.
|
|
Windows Time Sync
|
csrss.exe
|
X
|
Added by the W32/Tilebot-W worm and IRC backdoor.
|
|
Windows Tracking Client
|
ctwsvc.exe
|
X
|
Added by the Troj/Agent-GMB Trojan.
|
|
Windows Update
|
csrss.exe
|
X
|
Added by the Troj/Banker-IA Trojan.
|
|
Windows Update
|
cutix.exe
|
X
|
A variant of the Rbot family of worms and IRC backdoor Trojans.
|
|
Windows Update Firewall System
|
ctfmom.exe
|
X
|
Added by the W32.Spybot.ANDM worm. W32.Spybot.ANDM is a worm that spreads through mIRC and to network shares protected by weak passwords. It also spre ... Read More
|
|
Windows Update Firewall System
|
ctfm0Unz.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Update Firewall System
|
ctfmoom.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Windows Update Service
|
csrs.exe
|
X
|
Added by the AGOBOT-NI WORM!
|
|
Windows Update Service
|
cdfs.exe
|
X
|
Added by the W32/Tilebot-HG worm and IRC backdoor. This infection utilizes the rdriv.sys rootkit. ... Read More
|
|
Windows USB 2.0 Driver
|
cpufanctrl.exe
|
X
|
Added by the W32/Rbot-CLP worm and IRC backdoor. This infection also creates the file C:\Windows\SoftWareProtector\424.pr. ... Read More
|
|
Windows xmutler
|
cftmon32.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
WindowsDiskLog
|
cstsm.exe
|
X
|
Added by the Troj/Stinx-C backdoor Trojan.
|
|
WindowsExplorer
|
csrss.exe
|
X
|
Added by the MessengerBlocker rogue security software. MessengerBlocker is a misleading application that may periodically spam the user's computer wit ... Read More
|
|
WindowsFileSystem
|
cidaemon32.exe
|
X
|
Added by the W32/Rbot-FSP worm and IRC backdoor.
|
|
WINDOWSNT
|
csrss.exe
|
X
|
Added by the Backdoor.Olourk backdoor. This infection should not be confused with the legitimate C:\Windows\System32\csrss.exe infection. ... Read More
|
|
WindowsSysBoot
|
cytob.exe
|
X
|
Added by the W32/Tilebot-AY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
|
|
WindowsTaskStat
|
csrcmd.exe
|
X
|
Added by the Troj/Brepbot-B backdoor Trojan. This infection also creates the files 466.bat and 755.bat. ... Read More
|
|
WindowsUpdate
|
cmd32.exe
|
X
|
Identified as a variant of the Backdoor:Win32/Coolvidoor.D malware.
|
|
Windowsupdate Service
|
csrss.exe
|
X
|
W32/Baba-E WORM creates this file, not to be mistaken for the legitimate Windows file documented here. ... Read More
|
|
WINDVDpatch
|
CTHELPER.EXE
|
U
|
CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in ... Read More
|
|
WinFX
|
cssrs.exe
|
X
|
Added by the AGOBOT.FX WORM!
|
|
winlogon
|
cleanmg.exe
|
X
|
Added by the Troj/Agent-ICR Trojan.
|
|
WinMX share
|
CSDVqs.exe
|
X
|
Added by the W32/Sdbot-UU worm. When started, this infection connects to a remote IRC server and waits for commands to execute. ... Read More
|
|
WinProfile
|
Command.exe
|
X
|
Added by the BUDDY TROJAN!
|
|
winprotection
|
ccsrss.exe
|
X
|
Added by the W32.SillyFDC.BBT removable media worm.
|
|
winprotection
|
ccIsass.exe
|
X
|
Added by the W32.SillyFDC.BBT removable media worm.
|
|
winservit
|
cassl.exe
|
X
|
This is an Rbot variant. This infection connects to an IRC server where it will await commands from a remote user. ... Read More
|
|
WinShowUpdate
|
copy C:\WINDOWS\winshow.new C:\WINDOW\Swinshow.dll
|
X
|
Winshow parasiate related - from the "RunOnce" keys it replaces "winshow.dll" with a new version ... Read More
|
|
Winsock2 driver
|
crizak.exe
|
X
|
A variant of the IRCBot family of worms and IRC backdoor Trojans.
|
|
Winsock2 driver
|
CFTMON.EXE
|
X
|
A variant of the W32.Spybot.Worm family of worms and IRC backdoor Trojans. This family of worms spread via mIRC and the Kazaa file sharing network. ... Read More
|
|
winsystem.sys
|
CSRSS.EXE
|
X
|
Added by the W32/Sober-K infection! File will be found in the %WINDIR%msagentwin32 folder. ... Read More
|
|
WINTASKMGR
|
ccsrs.exe
|
X
|
a Mytob WORM variant adds this file.
|
|
WinUpdateAdministrator
|
CSRSS.EXE
|
X
|
Added by the W32/Punya-A worm. This infection should not be confused with the legitimate C:\Windows\System32\CSRSS.EXE file. ... Read More
|
|
WinUpdateProtection
|
csrss.exe
|
U
|
ICE Remote Spy monitoring software, "secretly monitors everything your spouse, kids or employees do on the Internet and emails the data to you." Note ... Read More
|
|
winupdateprotection
|
csrss.ex
|
U
|
EmployeeWatch is a commercial spyware program designed to monitor user activity on a computer. ... Read More
|
|
WinXP-98
|
CSRSS.exe
|
X
|
Added by the Troj/Banker-AZ password-stealing trojan that targets Brazilian banks. ... Read More
|
|
wise
|
clockwise.exe
|
X
|
Added by the Troj/Lazar-A backdoor Trojan.
|
|
WMDM PMSP Service
|
cssrss.exe
|
X
|
Added by the Troj/Knockit-A backdoor Trojan.
|
|
WooCnxMon
|
CnxMon.exe
|
N
|
Wanadoo ISP software related - not required - here's how to bypass it
|
|
wsaconfiguration
|
csrsvcs.exe
|
X
|
Added by the AGOBOT.VI WORM! ... Read More
|
|
WSAConfiguration1
|
csass.exe
|
X
|
Added by the AGOBOT.WH WORM!
|
|
XCP CD Proxy
|
CDProxyServ.exe
|
U
|
Added by the Sony/XCP DRM security software. This service is part of the digital rights management system utilized on certain Sony CDs. If you remove ... Read More
|
|
XPSoft
|
CVDAsDW.exe
|
X
|
Added by the SDBOT-SY WORM!
|
|
Xvid
|
CheckUpdate.exe
|
N
|
Checks for the updates of the Xvid codec.
|
|
xware
|
cskware.exe
|
X
|
Malware downloader from xxsware.com, produces porn popups.
|
|
XXXCodec Service
|
casrv.exe
|
X
|
Identified by Kaspersky as Trojan-Downloader.Win32.Small.czh
|
|
Yahoo Messengger
|
chrome.exe
|
X
|
Added by the W32/Autorun-NG removable media worm.
|
|
Zacker
|
Christmas.exe
|
X
|
Added by the W32/Maldal-C mass-mailing worm. This infection displays a picture of Santa with the words "From the heart, Happy new year!". ... Read More
|
|
zBrowser Launcher
|
Commandr.exe
|
U
|
For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indi ... Read More
|
|
zBrowser Launcher
|
Commandr.exe
|
U
|
For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indi ... Read More
|
|
Zekio Startups
|
condll.exe
|
X
|
W32/Agobot-AGD is an IRC backdoor Trojan and network worm. This file is located in the Windows system directory. ... Read More
|
|
zstart
|
cxdxregt.exe
|
X
|
ZenoSearch adware component ... Read More
|
|
Zstart.lnk
|
cxdxregt.exe
|
X
|
Added by the Adware.ZenoSearch adware.
|
|
ZTEMT Legacy Serial Communication
|
CT_ZTEMT_U_USBSER.sys
|
Y
|
Driver for USB broadband modems that contain ZETMT chipsets.
|
|
[not used]
|
Celine.scr
|
X
|
Added by the Troj/Celine-A backdoor trojan.
|
|
[not used]
|
csvc.com
|
X
|
Added by the Backdoor.Beasty backdoor.
|
|
[not used]
|
cinderawasih-4321427.exe
|
X
|
Added by the W32/Brontok-R mass-mailing worm.
|
|
[not used]
|
Cable.exe
|
X
|
Added by the W32/Cablenet-A worm.
|
|
[not used]
|
clicnt40.exe
|
X
|
Added by the Troj/PPdoor-AT backdoor Trojan.
|
|
[not used]
|
CulaterLoader.exe
|
X
|
Added by the Spyware.Mom spyware.
|
|
[random 12 digit number]
|
cabview1.exe
|
X
|
|
|
[unknown]
|
crss32.exe
|
X
|
Added by the W32/Randon-X worm. This infection, when started, connects to an IRC server using a provided MIRC client to receive commands. ... Read More
|
|
[value]
|
charmapnt.exe
|
X
|
Added by the Troj/Bancos-DR password-stealing Trojan.
|
|
[Various Names]
|
cloaker.exe
|
Y
|
Used by HP and Compaq computers to hide the windows of programs passed as arguments to it. ... Read More
|
|
[Various Names]
|
control64.exe
|
X
|
Part of the Wareout infection as described here.
|
|
[Various Names]
|
cmon14.exe
|
X
|
Part of the Wareout infection as described here.
|
|
[Various Names]
|
clamav.exe
|
X
|
Part of the Wareout infection as described here.
|
|
[Various Names]
|
cmon14.exe
|
X
|
Part of the Wareout infection as described here.
|
|
[Various Names]
|
cnftips.exe
|
X
|
Part of the Wareout infection as described here.
|
|
[Various Names]
|
CToolBar.exe
|
X
|
Part of the Wareout infection as described here. This infection is not the same as the legitimate Internet Explorer Toolbar called Crawler Toolbar wh ... Read More
|
|
[Various Names]
|
corrida.exe
|
X
|
Part of the Wareout infection as described here.
|
|
_systemdriver
|
csrss.exe
|
X
|
Added by the ASCETIC.B TROJAN - Note - this is not the valid Client Server Runtime Subsystem csrss.exe process, which provides text window support, ... Read More
|
|
_winsystem.sys
|
CSRSS.EXE
|
X
|
Added by the W32/Sober-K infection! File will be found in the %WINDIR%msagentwin32 folder. ... Read More
|
|
{0e4e5110-a772-4c4a-a7dc-137fe10abd6e}
|
czxtyx.dll
|
X
|
Part of the Zlob trojan that displays fake security alerts for the rogue anti-spyware program called SpywareLocked. ... Read More
|
|
{1152a0e8-5be5-41cc-8312-556581690a61}
|
cfqbw.dll
|
X
|
Zlob Trojan that installs VirusProtectPro 3.5 and shows fake security alerts from your Windows taskbar. ... Read More
|
|
{1157A4A6-3A8E-3D98-0301-050000030002}
|
cmrs.exe
|
X
|
Added by the Troj/Rootkit-DH rootkit.
|
|
{1ED51D31-70E9-FE03-0103-060602070407}
|
chups.exe
|
X
|
Added by the Troj/DwnLdr-GXN downloader Trojan.
|
|
{29F97553-FBD6-33D1-BFC1-47A024D1875C}
|
c2c.dll
|
X
|
Added by the Troj/Sifr-A information-stealing Trojan. This file also installs the following files in the same folder as c2c.dll: Nero7Keygen.exe, Read More
|
|
{2acf3add-34a1-4f2f-99cf-cc69785d1e90}
|
cwgppb.dll
|
X
|
A Trojan used by the rogue anti-spyware program AntiVermeans. This Trojan, when installed, will display fake security alerts on your taskbar and insta ... Read More
|
|
{3afa7405-68e8-4bdb-920e-0d506f552826}
|
cdwvhbf.dll
|
X
|
Zlob Trojan that infects your computer with SpyCrush and displays fake security alerts in your Windows taskbar. ... Read More
|
|
{4E854318-1FFB-B264-1032-711E005C6AAA}
|
cdp.exe
|
X
|
Identified as a variant of the Backdoor.Win32.Agent.fzy malware.
|
|
{5bf53d50-b1ec-47b6-a00a-0bd32baeb7ef}
|
ckimzeb.dll
|
X
|
Zlob Trojan that infects your computer with SpyCrush and displays fake security alerts in your Windows taskbar. ... Read More
|
|
{7bcd1ddf-1d68-751a-15f8-4900acc0df46}
|
C:\WINDOWS\system32:cmd.exe
|
X
|
Identified as a variant of the Backdoor.Win32.Poison.k keylogger.
Please note that this infection is an Alternate Data Stream file attach ... Read More
|
|
{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
|
ccyszwl.dll
|
X
|
Zlob Trojan that installs VirusProtectPro 3.7 and shows fake security alerts from your Windows taskbar. ... Read More
|
|
{9A0CFC58-5A6F-41ba-9FFE-4320F4F621BA}
|
Cnscheck001.dll
|
X
|
Added by the Troj/LegMir-AHT password-stealing and keylogger for the online game Legend of Mir. ... Read More
|
|
{9B71D88C-C598-4935-C5D1-43AA4DB90836}
|
ctf.exe
|
X
|
Identified as a variant of the Backdoor.Bifrose backdoor Trojan.
|
|
{9B71D88C-C598-4935-C5D1-43AA4DB90836}
|
cam.exe
|
X
|
Added by the Troj/Bifrose-VM Trojan.
|
|
{9B71D88C-C598-4935-C5D1-43AA4DB90836}
|
caam.exe
|
X
|
A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
|
|
{9D71D88C-C598-4935-C5D1-43AA4DB90836}
|
cam2.exe
|
X
|
A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
|
|
{a1c16871-b797-4ec7-bbee-83852379c390}
|
cefrjsh.dll
|
X
|
Zlob Trojan that installs VirusProtectPro 3.4 and shows fake security alerts from your Windows taskbar. ... Read More
|
|
{A24CDBE1-DE51-32C9-7C14-F7DF9AD1BA9E}
|
Component.exe
|
X
|
A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
|
|
{b59f3ba4-98da-4b5f-8a2d-7b56fb11140b}
|
cthkpcv.dll
|
X
|
A Trojan used by the rogue anti-spyware program AntiVermins. This Trojan, when installed, will display fake security alerts on your taskbar and instal ... Read More
|
|
{BC0CFA58-3A6F-51ba-9EFE-B320F4F621BA}
|
cxscheca001.dll
|
X
|
Added by the Troj/PWS-AMU password-stealing Trojan.
|
|
{C536ECD6-4AE9-5C39-E359-F046B948DA4E}
|
mstscmles.exe
|
X
|
Added by the Troj/Keylog-LA Trojan.
Please note that this infection is an Alternate Data Stream file attached to the legitimate C:\Window ... Read More
|
|
{cea2e5cd-e849-427b-80f0-59298caef1c4}
|
cqsfk.dll
|
X
|
Zlob Trojan that installs VirusProtectPro 3.4 and shows fake security alerts from your Windows taskbar. ... Read More
|
|
{fe288882-f661-4522-88f3-20cfb7866fa4}
|
cvnzie.dll
|
X
|
A Trojan used by the rogue anti-spyware program AntiVermins. This Trojan, when installed, will display fake security alerts on your taskbar and instal ... Read More
|
|
{ff170564-36c8-43f7-9100-559e166405cf}
|
cfltygd.dll
|
X
|
A Trojan used by the rogue anti-spyware program VirusBursters. This Trojan, when installed, will display fake security alerts on your taskbar and inst ... Read More
|