Filenames that start with U

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

BleepingComputer.com -> Startup Programs Database -> Filenames that start with U

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Other

HJT: F0, F1, F2, F3 · O4 · O20 · O21 · O22 · O23

Rootkit List · Submit a Startup · Top Submitters

Startup Index · Newest Entries · Mozilla Search Tools · WebMaster Site Tools · Status Key
Startup Database Forum · How to use the Startup Database

Enter the filename or keyword you would like to search for:

Advanced Search

Name	Filename	Status	Description
1qaw3edr5	userinit.exe	X	Added by the Troj/Kbroy-B keylogging Trojan.
3cpipe-USRpdA	USRmlnkA.exe	Y	Modem driver files from US Robotics
<non alphabetical characters>IPX/SPX	usbmini.sys	X	Added by the Troj/Proxy-CY rootkit.
<not used>	userini.exe	X	Added by the Troj/Proxy-HP proxy Trojan.
<not used>	UpDateWinc.exe	X	Added by the W32.Yahack.A worm. W32.Yahack.A is a worm that spreads through mapped drives. It logs keystrokes, gathers system information, and steals ... Read More
<not used>	userinit.exe	Y	The userinit.exe is a program that is launched directly after a user logs into Windows. This program restores your profile, fonts, colors, etc for you ... Read More
<not used>	updmngr.exe	X	Added by the Troj/Agent-JBX. Trojan.
<not used>	usrinit.exe	X	Added by the Troj/Calelk-A Trojan.
<random chars>	utilmanh.exe	X	Unknown malware.
aa bbcc dde effgghh jj	update.exe	X	A variant of the IRCBot family of worms and IRC backdoors.
ABIT uGuru	uGuru.exe	U	Provides quick access to several Abit motherboard utilities - such as monitoring cpu temperature, fan speeds, overclocking, flashing of BIOS ... Read More
AdobeReaderPro	updt.exe	X	Added by the W32/IRCBot-VQ worm and IRC backdoor.
AdvancedCleaner	UADC.exe	X	Added by the AdvancedCleaner rogue security software. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and pri ... Read More
AdvancedCleaner Free	UADC.exe	X	Related to AdvancedCleaner. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and privacy risks on a computer. ... Read More
Antivirus	uav.exe	X	Added by the Ultimate Antivirus 2008 rogue anti-spyware program.
ANTIVIRUS	UltraAV.exe	X	Added by the Ultra Antivirus 2009 rogue anti-spyware program.
Antivirus 2010	us?rinit.exe	X	Added by the Antivirus 2010 Security Centre and Antivirus 2010rogue anti-spyware programs. ... Read More
AntiVirus Update	updates.exe	X	Added by the W32/Rbot-JF trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Apple Mobile USB Driver	usbaapl64.sys	Y	Apple Mobile Device USB Driver.
ArcaBit Update Service	update.exe	U	Related to ArcaVir 2008.
ASDPLUGIN	uk_nm.exe	X	Added by Dialer.Asdplug dialer variant.
asejet	uyohuvax.exe	X	Added by the W32/Sdbot-VE WORM! Found in the Windows system folder.
Asynchronous UPnP Support Services	UPnPSvc.dll	X	Added by the Troj/PWS-ANB password-stealing Trojan.
Automatic Windows Updater	Update.exe	X	Added by the GAOBOT.AO WORM!
Autozncupdate	update_.exe	X	Added by the Troj/DownLdr-QT Trojan.
AV	UPDATE-28062004.exe[25 blank spaces].vbs	X	Added by the MIDFIN WORM!
AV UpDate	Update.exe	X	Added by the Troj/Furoot-A TROJAN!
AVG Grisoft Updater	updater.exe	X	Added by the AGOBOT-OT WORM!
avscan	Usbconeted.exe	X	Added by the Troj/Provis-A Trojan.
back updates	Uninstall.log.vbs	X	Added by the VBS.YPSAN.D WORM! ... Read More
boardwalk	ugbtna.dll	X	Added by a Zlob Trojan which installs AntiVirgear 3.8 and display fake security alerts in your Windows taskbar. ... Read More
BrowseZilla	update.exe	X	Added by the Downloader.Browsilla downloader Trojan.
Bulldog Service	upsd.exe	U	Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link ... Read More
C:\WINDOWS\userinit.exe	userinit.exe	X	An installer for the Troj/Haxdor infections.
CamMonitor	uCamMonitor.exe	Y	This is the service file for ArcSoft Magic-i Visual Effects 2 HD made by Arcsoft, Inc. which is a webcam application used with video chat. ... Read More
cbvcs	urretnd.exe	X	Added by the W32/Frethog-C worm.
Cleaner2009 Freeware	UCLN.exe	X	Added by the Cleaner2009 rogue anti-spyware program.
Comclg32	utlsrv.exe	X	Added by the Trojan.Checkraise password stealing Trojan for online poker sites.
Command Interpreter	ucmd.exe	X	A variant of the IRCBot family of worms and IRC backdoors.
Configuration Loader	update.exe	X	Added by the W32/Sdbot-OS worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Corporate Microsoft Update	uptask.exe	X	Added by the W32/Rbot-GVB worm and IRC backdoor.
cwriter	ucookw.exe	X	Added by the HardDriveGuard rogue anti-spyware program. This startup entry is used by other rogue anti-spyware products that are in this family. ... Read More
Cyber-Defender 2003	uwcdsvr.exe	U	Cyber Defender 2003
DC6_Check	uwasdc.exe	X	Added by the rogue anti-spyware program WinAntiSpyware.
Dcom Helper	utorrent.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
demobilisation	umhzwl.dll	X	Zlob Trojan which installs the AntivirusTrigger rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
Digital Patrol Update 5	update.exe	U	Added by the Digital Patrol anti-malware program.
DirectX Service	directx.exe	X	Added by the Troj/Crybot-B worm and IRC backdoor.
dorfgwe	uret463.exe	X	Added by the W32/AutoRun-XF removable media worm.
dorfgwe	uret463.exe	X	Added by the W32/AutoRun-AFV removable media worm.
DRam rare proc	updaterarwin.exe	X	Added by the W32/Rbot-GQW worm and IRC backdoor.
DriveCleaner 2006 Free	UDC2006.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated re ... Read More
DriveCleaner Free	UDC.exe	X	Added by the DriveCleaner rogue security product. DriveCleaner is a misleading application, which gives exaggerated reports of security and privacy ri ... Read More
enswathes	uyhjw.dll	X	Zlob Trojan that infects you with the VirusHeat rogue anti-spyware program. Please use the guide below to remove this infection. ... Read More
epoxusdm	USDM.EXE	N	EPoX Universal Serial Data Monitor - a diagnostics tool that shows Temps, Fan Speeds, Voltages...etc ... Read More
ERS_Check	uwasers.exe	X	Added by the rogue anti-spyware program WinAntiSpyware.
erwghjjrjt	ucbcg.exe	X	Identified as the Trojan-Downloader.Win32.Small.cul Trojan.
expler	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
explorer	UPMSN.exe	X	Identified as a variant of the Trojan-Downloader.Win32.Banload.woj malware.
F5 Networks StoneWall Filter	urfltw2k.sys	Y	Added by the F5 networks VPN software for encrypted communication between your computer and a remote network. ... Read More
F5 Networks VPN Adapter	urvpndrv.sys	Y	Added by the F5 networks VPN software for encrypted communication between your computer and a remote network. ... Read More
foxhonz5568	unicox.exe	X	Added by the Troj/Bancos-BH password stealing TROJAN!
foxwudy9912	unicox.exe	X	Added by the Troj/Bancos-BT TROJAN!
Gene USB Monitor	USBMonit.exe	U	Monitors USB ports for insertion of Sandisk USB flashdrives
Genie USB Monitor	USBmonitor.exe	Y	Port monitor for an external USB hard drive. Required to enable access to the drive ... Read More
GLSetIT32	update1.exe	X	Identified as a variant of the OptixPro malware.
GPU HL interface	updB1.sys	X	Added by the TROJ_HANLO.J Trojan.
graphologists	uglgs.dll	X	Zlob Trojan which installs the VirusProtect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your computer has ... Read More
groutiest	ucmbegr.dll	X	Zlob Trojan which installs the Virus Protect 3.8 rogue anti-spyware program. This program displays fake security alerts stating that your computer ha ... Read More
Help	userinit.exe	X	Added by the W32.Degnax@mm worm. W32.Degnax@mm is a mass-mailing worm that gathers email addresses from the compromised computer. It also spreads via ... Read More
Help and Support Service	usnsvc.exe	X	Added by the WORM_RBOT.GEN worm and IRC backdoor.
HIPS Firewall Helper	UmxFwHlp.exe	Y	Related to the Computer Associate's Personal Firewall.
I-Worm.GiGu	uGiG.eXe	X	Added by the GINK WORM!
Icarus2	UpdateChk.exe	X	Added by the Trackware.Icarus spyware.
incestuously	urroxtl.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar. ... Read More
Install part II	updates.exe	X	Added by the W32.Relfeer worm. W32.Relfeer is a worm that spreads through network shares and file-sharing applications. It may also attempt to downloa ... Read More
Internet Exploere Services	urlmon32.dll.exe	X	Added by the EVIAN.C WORM!
Internet Service	Unknown	X	Added by the Adware.SweetBar adware that display pop-up ads.
IPSTK driver	ufgrbe.sys	X	A variant of the Troj/Haxdor-Fam of rootkits.
iRiver Updater	Updater.exe	N	Updates for the iRiver Music Manager - used with their digital music players
iut75	uzcx.exe	X	Added by the Troj/Agent-EOF Trojan.
Java Auto Update	ujm.exe	X	Added by the W32/Sdbot-ADH worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execute. ... Read More
LoadService	user32.com	X	Added by the W32.Burmec worm. W32.Burmec is a worm that spreads by copying itself to removable and mapped drives. ... Read More
M1cr0s0ft Upd4t4zS	update32.exe	X	Added by the RBOT-MI WORM!
McAfeeUpdaterUI	UpdaterUI.exe	?	Associated with McAfee VirusScan
McUpdate	Update.exe	X	Added by the Troj/Agent-TUH Trojan.
Media Codec Update Service	update.exe	Y	Windows Essentials Codec Pack is a collection of the most commonly needed video and audio codecs. This program allows keeps these codecs updated. ... Read More
Messenger Journel	usnsvc.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Messenger Sharing USN Journal Service	usnsv.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Microsoft	usbcontrol.exe	X	Added by the W32/Rbot-BJH worm and IRC backdoor.
Microsoft	updater.exe	X	Added by the W32/Rbot-GHP worm and IRC backdoor.
Microsoft (R) Windows Update Manager	updmgr.exe	X	Added by the Backdoor.Ranky backdoor Trojan.This infection also creates a Windows service using the same name and filename. ... Read More
Microsoft (R) Windows Update Manager Tool	updmgr.exe	X	Added by the Backdoor.Ranky backdoor Trojan. This infection also creates a Windows service using the same name and filename. ... Read More
Microsoft Internet Firewall Update	updater.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Svchost local services	updater.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
microsoft unpaccker system	unpak32.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
Microsoft Update	update_w.exe	X	Added by the W32/RBOT-EW WORM!
Microsoft Update	UPDATEX.EXE	X	Added by the W32/Rbot-FD trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. This ... Read More
Microsoft Update	update.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Microsoft Update Mechene	Updatez.exe	X	Added by the RBOT-GI WORM!
Microsoft Updater	UPDATER.EXE	X	Added by the W32/Rbot-AZ trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. It ... Read More
Microsoft Urlmon	urlmon.exe	X	Added by the Troj/Agent-GOO Trojan.
Microsoft USA Plug	usaplug.exe	X	Added by the W32/Rbot-DVC worm and IRC backdoor.
Microsoft USB Bus Controller	usbctl.exe	X	Added by the WORM_ASPXOR.AB worm.
Microsoft USB Windows2 Driver	usbautotuner.exe	X	Added by the W32.SillyFDC.BCL removable media worm.
Microsoft usnsvc Service	usnsvc.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
Microsoft windows FTPd	updtftpini.exe	X	Added by the W32/Rbot-GLV worm and IRC backdoor.
Microsoft Windows Software Update Scheduler	updtscheduler.exe	X	Added by the W32/Kebede-F backdoor mass-mailing worm.
Microsoft Windows Update XP64	updatexp64.exe	X	Added by the W32/Sdbot-AIM worm and IRC backdoor.
MicrosoftCorp	update.exe	X	Added by the W32/Autorun-ASG removable media worm.
Microsot NT Support	Unknown	X	Added by the W32/Rbot-CTI worm and IRC backdoor.
Micrsoft DerSystem	uqieelpb.exe	X	Added by the W32/Rbot-GRI worm and IRC backdoor.
miniport	usb2chk.exe	X	Added by the Troj/Lazar-A backdoor Trojan.
MoodLogic Updater	Updater.exe	N	Installed with iRiver software that comes with your iRiver device.
MouseDrv	update.exe	X	Added by the WORM_ZOTOB.N worm.
MS UPDATER	update.exe	X	Added by the W32/Rbot-VC worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
MS Windows Security Updater	updater.pif	X	Added by the W32/Rbot-AKY worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
msconfig.exe	uline.exe	X	Added by a variant of the AGENT.AH downloader TROJAN!
msmsn	upnp.exe	X	Added by the Troj/Dloadr-AMY Trojan.
MSN Manager	usnmsn.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Msn Update Service	userx.exe	X	Added by the W32.Mytob.JF@mm backdoor and IRC worm.
msupdate	update.exe	X	Added by a variant of the W32/SDBOT WORM!
MsUpdater System	udpsys32.exe	X	Added by the RBOT.AAA WORM!
MyCashbag	uccbp.exe	X	Added by the Adware.Mycashbag adware. Adware.Mycashbag is an adware program that displays popup advertisements. ... Read More
NA1Messenger	UPSNA1Msgr.exe	N	Related to the UPS World Ship software.
navdflp8922	unicox.exe	X	Added by the Troj/Bancos-AVT Trojan. Troj/Bancos-AVT may attempt to steal account details for certain banking sites and for MSN Messenger, by dispalyi ... Read More
NAVMD25	UpdtNv28.exe	?	Added by Symantec for updating the MicroDefs for their AV products. Though this is a legitimate file, it is unknown whether or not it needs to be run ... Read More
ncao	urpo.exe	X	PurityScan/Clickspring adware ... Read More
NetLogon	userint.exe	X	Added by the SDBOT-BC WORM!
Network Windows Service	urdvxc.exe	X	Added by the W32.Rahack.W worm. W32.Rahack.W is a polymorphic worm that spreads to computers by exploiting weak passwords for Radmin servers and Windo ... Read More
ni.uersm_0001_n68m1602	UERSM_0001_N68M1602NetInstaller.exe	X	Added by the ErrorSafe Installer ErrorSafe is a Security Risk that may give exaggerated reports of threats on the computer. The program then prompts ... Read More
ni.uwfx5	UWFX5NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
ni.uwfx5lp_0001_0802	UWFX5LP_0001_0802NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
ni.uwfx5lp_0001_0803	UWFX5LP_0001_0803NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
NI.UWFX5T	UWFX5TNetInstaller.exe	X	Added by the Troj/DownLdr-BO Trojan. This infections is part of the Winfixer 2005 adware/malware. ... Read More
ni.uwfx5v_0001_0802	UWFX5V_0001_0802NetInstaller.exe	X	WinFixer web installer - Winfixer is "Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see he ... Read More
notepad.exe	upx.exe	X	Added by a variant of the AGENT.AH TROJAN!
np	upnp.exe	X	Added by the Troj/Dloadr-ANX downloading Trojan.
Office Monitor Word Exel R	u.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
OrbitUpdate	update.exe	X	Xupiter OrbitExplorer toolbar, drive-by foistware
PAS_Check	udcpas.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of secur ... Read More
PCPrivacyDefender Freeware	UPSPDAP.exe	X	Added by the PCPrivacy Defender rogue privacy program.
Personal Player	ud.sarkilari_Web_Hottest_Videos_PersonalPlayer.exe	X	Added by a program that shows YouTube videos. From the research done by Paperghost we advise that you remove this program. This file is also detecte ... Read More
PLoader	umsd.exe	?	USB Mass Storage Disk related tray icon. Is it required?
Plug and Play	umpnpmgr.dll	Y	This service enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will resul ... Read More
Print Scheduler	usnsvc.exe	X	Identified as a variant of the Oscarbot.PJ worm and IRC backdoor.
printer spool	updater.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
PrintScreen	UNWISE.EXE	N	Gadwin PrintScreen - utility to capture, print or save the current window
PrivacyProtector Free	UPRP.exe	X	Rogue privacy protection software that is advertised aggressively through the use of Trojans and other malware. ... Read More
qh live update scheduler	UPSCHD.EXE	Y	Program updater for the Quick Heal Anti-Virus program.
RealUpdate	update.exe	X	Added by the Troj/DwnLdr-FSR Trojan. Troj/DwnLdr-FSR includes functionality to : Access the internet and communicate wit ... Read More
Regexit	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
rfv	url_mon32.exe	X	Added by the PWSteal.Tarno.M infection. Found in the %Windir%z~c directory.
Rundil32	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
runner1	updater.exe	X	Identified as Trojan-Downloader.Win32.Agent.bls.
RunWindowsUpdate	uptodate.exe	X	BrowserAid/BrowserPal foistware
ScanRegistry	update.exe	X	Added by the Troj/DwnLdr-FSK Trojan.
Schedule	usbdrv.exe	X	Added by the . This infection also creates the file c:\Windows\System32\usbdrvw.dll. ... Read More
SDR6_Check	udcsdr.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of secur ... Read More
sdsr	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
SecuROM User Access Service	UAService.exe	Y	User Access Service is a SecureROM service that enables users without Windows administrator rights to have the ability to access all SecuROM features. ... Read More
SecuROM User Access Service (V7)	UAService7.exe	Y	Used by virtual CD programs like Alcohol to access CD images protected by SecureROM. ... Read More
Server Runtime Error	unsec.exe	X	Added by the W32/Sdbot-DFA worm and IRC backdoor.
Server Runtime Process	unsecapp32.exe	X	Identified by BitDefender as Backdoor.IRCBot.HBJ. This infection is a variant of the IRCBot familar of worms and IRC backdoors. ... Read More
Shell	UPSI_1.exe	X	Added by the W32/SillyFD-C worm that spreads to removeable storage devices.
SoundMax	userinit.exe	X	Added by the W32/Malas-J worm. This infection should not be confused with the legitimate C:\Windows\System32\userinit.exe file. ... Read More
SQUpdatesChecker	uc.exe	X	Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants ... Read More
sr1exe	updtSup3.exe	?	Found on a Dell computer, in a Documents and SettingsAll UsersApplication DataDellAlert2 subfolder ... Read More
SSC_UserPrompt	UsrPrmpt.exe	?	Part of Symantec (Norton) Security Centre. What does it do, and is it required?
Start Service	upssrv.exe	U	Cyber Power PowerPanelPlus software. "In the event of a power outage, PowerPanelPlus Software automatically saves and closes all open files, and then ... Read More
startkey	update.exe	X	Added by the Troj/Bifrose-DG Trojan.
startkey	Update32.exe	X	Added by the Backdoor.Bifrose backdoor.
SunshineSpy	UNWISE.EXE	X	Uninstall program for the rogue anti-spyware program called SunshineSpy.
suscheduler	UCLauncher.exe	U	Related to Lenovo ThinkVantage Technologies. ThinkVantage Technologies help make ThinkPad/ThinkCentre PCs less dependent on IT staff. ... Read More
svchost	Up100.exe	X	Added by the Troj/Dloader-KT trojan.
SVCHOST	updater32.exe	X	Added by the W32.Rants.A@mm mass-mailing worm.
svwin32	unninst32.exe	X	Added by the AGOBOT-NF WORM!
Sygate Personal Firewall	un1x.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
System	Updaterun.exe	X	Added by the Troj/QQHelp-Gen downloader Trojan.
system check	updater.exe	X	Unidentified adware downloader
system updata	updata.exe	X	Added by the Troj/Lineage-C password-stealing Trojan for the online game Lineage. ... Read More
System Update Service	update.pif	X	Added by the W32.Spybot.WOE worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
System Update2	update.exe	X	Added by the AUTOTROJ-C TROJAN!
System Updates	unve.exe	X	Added by the W32/Rbot-AWG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
System Updates Service	updates.pif	X	Added by the W32/Rbot-AMA worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
SYSTRAY	UNMT.EXE	X	Added by the SDBOT WORM!
SysUpdt	UpdatesWin.exe	X	Added by the Troj/Nopir-A TROJAN!
Taskman	ufxw.exe	X	Added by the Troj/VBInj-D Trojan.
ThinkVantage System Update	UCLauncherService.exe	N	ThinkVantage System Update service.
Tiny	unknown	X	Added by the Troj/Small-DJ, which will sit on port 1 and allow a remote user to run a command prompt on an infected machine. ... Read More
tlc	update911.js	X	Hijacker installer
tlc	update13.js	X	Used by the searchcentral.cc hijacker to hijack your browser settings when you start your computer. ... Read More
tpcupdater	updatetc.exe	X	Adware, probably 180Solutions related
Transfer Service	uiops.exe	X	Added by the Trojan.Acdropper.C Trojan.
UADC_104911963	UADCcw.exe	X	Added by the AdvancedCleaner rogue security software. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and pri ... Read More
UADC_815790765	UADCcw.exe	X	Related to AdvancedCleaner. AdvancedCleaner is a misleading application, which gives exaggerated reports of security and privacy risks on a computer. ... Read More
uazpiq	uazpiq.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
UBSShell	UBSShell.exe	U	UBS (United Bank of Switzerland) banking software
ubstcw	ubstcw.exe	X	Related to the AlfaAntivirus rogue anti-spyware program.
ucdcw	ucdcw.exe	X	Added by the CryptDrive misleading security application. CryptDrive is a misleading application that may give exaggerated reports about potential risk ... Read More
ucookw	ucookw.exe	X	The WinPCDoctor rogue anti-spyware program. This program is installed via the use of malware and display false or exaggerated infection results. ... Read More
Ucu24	Ucu24.sys	X	Added by the Troj/DwnLdr-HEI Trojan.
UC_SMB	ucstart.exe	N	Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) ... Read More
uc_start	ucstartup.exe	N	Auto updater feature for IBM machines that tries to connect to IBM to see if there are any new drivers, patches and etc ... Read More
UD Agent.lnk	UD.EXE	U	The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing yo ... Read More
UDC6cw	UDC6cw.exe	X	Added by the DriveCleaner security risk. According to Symantec, "DriveCleaner is a security assesment tool which gives exaggerated reports of securi ... Read More
udt	udt.dll	X	Added by the W32/Autorun-VO removable media worm.
udzok	udzou.exe	X	Added by the W32/Sdbot-CUS worm and IRC backdoor.
Ueproc32	UEPROC32.exe	U	Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions ... Read More
uerj45kj	uerj45kj.sys	X	Added by the Backdoor.Rustock backdoor rootkit.
UFD Monitor9382	ufdlmon.exe	?	Part of a USB Flashdisk software. Anyone know if it's required?
UFD Utility9382	UFDTool.exe	?	Part of a USB Flashdisk software. Anyone know if it's required?
uFnV32i	[random]	X	Added by the Adware.Envolo Adware downloader.
ugac	ugac.exe	X	Related to the TrustedAntivirus rogue anti-spyware program. This program is sometimes used by other Rogue anti-spyware programs as well. ... Read More
ugcw	ugcw.exe	X	Related to the rogue anti-spyware program called WinSecureAv. This program is installed via the use of malware and display false or exaggerated infec ... Read More
ugdccw	UGDCcw.exe	X	Added by the PCPrivacyTool security risk. PCPrivacyTool is a Security Risk that may give exaggerated reports of threats on the computer. The program t ... Read More
ugescw	ugescw.exe	X	Added by the ErrClean rogue security software. ErrClean is a misleading application that gives false reports of errors on the computer. ... Read More
Uidler	Uidler.exe	N	Uniloc Titlewave Browser used with some shareware
UIUCU	UIUCU.EXE	?	Universal Device Install Application from Conexant Systems, Inc.
UIWatcher	UIWatcher.exe	N	Ashampoo Uninstaller Suite - installation watcher. Available via Start -> Programs ... Read More
UKVideo2	ukvideo2.exe	X	Adult content dialler
Ulead Burning Helper	ULCDRSvr.exe	Y	This program is part of the Ulead DVD Workshop, and may be bundled with other products from this company. It should be left alone in order to guarant ... Read More
Ulead Sservice System Files	ulcdrsf.exe	X	Added by the W32/Codbot-S network worm and backdoor trojan.
Ulead Systems	ULCDRSvr.exe	X	Added by W32/Codbot-H as a service, with a displayname of Ulead Systems System Files on Windows NT/2000/XP versions. ... Read More
ULiveServer	ULiveServer.exe	Y	Related to the Unreal Media Server streaming server.
Ultimate Cleaner	UltimateCleaner.exe	X	Added by the Ultimate Cleaner rogue anti-spyware program.
Ultimate Defender	UltimateDefender.exe	X	Added by the rogue anti-spyware program called Ultimate Defender. This program is typically installed via other malware and through the use of aggres ... Read More
Ultimate Fixer	UltimateFixer.exe	X	Added by the UltimateFixer rogue security product. UltimateFixer is a misleading application that detects and removes privacy violations on the comput ... Read More
UltimateServices	ultsvcs.exe	X	Added by the Troj/Agent-LGT Trojan.
UltimateZip Quick Start	uzqkst.exe	N	UltimateZip - file compression utility
Ultra Antivir2009	UA2009.exe	X	Added by the Ultra Antivir2009 rogue anti-spyware program. The folder associated with this malware has a random name. ... Read More
Ultra Edit v5.1	ultraedit.exe	X	Added by the W32/Sdbot-RK worm. When started, this infection will connect to a remote IRC server and wait for commands to execute. ... Read More
UltraEdit	uledit.exe	X	Added by the W32/Sdbot-TO worm. When started this infection connects to an IRC server where it waits for remote commands. ... Read More
UltraMon	UltraMon.exe	U	UltraMon is a utility for multi-monitor systems, designed to increase productivity and unlock the full potential of multiple monitors. ... Read More
UltraMon Utility Driver	UltraMonUtility.sys	U	UltraMon multi-monitor software.
UltraMonMirror	UltraMonMirror.sys	U	Related to the UltraMon multi-monitor software.
UMediaServer	UMediaServer	Y	Related to the Unreal Media Server streaming server.
UMonit	umonit.exe	U	Alerts when USB device is plugged in
umxagent	umxagent.exe	Y	Tiny Personal Firewall V4 - main engine
umxldra	umxldra.exe	Y	User mode executive module DLL loader - part of Tiny Personal Firewall V4
UMXLDRW	UMXLDRW.exe	Y	Tiny Personal Firewall (pre V4)
un32info	un32info.Exe	X	Added by the CRYPTER.A TROJAN!
unicox.exe	unicox.exe	X	Added by the Troj/Bancos-LX Trojan.
Unigray	Unigray Antivirus.exe	X	Added by the Unigray rogue anti-spyware program.
Uninstall	UNWISE.EXE	X	Uninstall program for the rogue anti-spyware program called SunshineSpy.
uninstall####	upd.exe	X	Adult content based screen saver where #### can be any number
Uninstall****	upd.exe	X	Adult content based screen saver where **** can be any number
UninstallAbility	uability.exe	N	UninstallAbility uninstaller
uninstx.exe	uninstx.exe	X	Added by the W32.Lecna.H worm. W32.Lecna.H is a worm that spreads by copying itself to mapped drives. It also opens a back door and may download poten ... Read More
Uninterruptible Power Supply	USP.exe	X	Added by the Troj/Agent-GVT Trojan.
Uninterruptible Power Supply CRT	upscr.sys	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
UniSc	Unisc.exe	U	McAfee UnInstaller
unit	unit.exe	X	Unknown malware.
uniucu	uniucu.exe	?	??
Universal Printer NT Service	upnt.exe	X	Added by the W32/Rbot-GKP worm and IRC backdoor.
unldr16	unldr16.exe	X	Added by a variant of the CRYPTER.C TROJAN!
unldr32	unldr32.exe	X	Added by a variant of the CRYPTER.C TROJAN!
unlockerassistant	UnlockerAssistant.exe	U	Related to Unlocker utility to unlock files when the OS reports the file is being used by an other person or program. ... Read More
UNrcJcrVSu.exe	UNrcJcrVSu.exe	X	Added by the Troj/Agent-PPD Trojan.
unspypc	UnSpyPC.exe	X	The main executable for the rogue anti-spyware application UnSpyPC. UnSpyPC is a Security Risk that may give exaggerated reports of threats on the com ... Read More
unsrvc	unsrvc.exe	X	Identified by Kaspersky Anti-Virus as a variant of the Trojan.Win32.VB.bkz Trojan. ... Read More
untray	untray.exe	Y	Part of Command AntiVirus
UnVirex	UnVirex.exe	X	Added by the UnVirex rogue anti-virus program.
Up Service	up32.pif	X	Added by the W32/Rbot-ARI worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
upascw	upascw.exe	X	Added by the PersonalAntiSpy rogue anti-spyware program.
UpConfgVer	UpgConf.exe	N	Panda Antivirus Platinum. Purpose unclear, but according to Panda Software not required for the AV to function ... Read More
UPD Client	updclient.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
upd.exe	upd.exe	X	Added by the Troj/Delf-AJW backdoor Trojan.
upd32.exe	upd32.exe	X	Added by the Troj/Agent-PDS Trojan.
updat	updat.exe	X	Added by the W32/Rbot-AZZ worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Update	UPDATE-28062004.exe[25 blank spaces].vbs	X	Added by the MIDFIN WORM!
update	Update.scr	X	Added by the W32/VB-FMT worm.
Update Center Service	UpdateCenterService.exe	U	Service that enables you to find and download updates to your system BIOS, drivers and firmware. ... Read More
Update Manager	UpdateManager.exe	N	Searches for updates for the Rogers Yahoo! Browser - can be run manually
update mon sys	updaterar.exe	X	Identified as the Rbot.cnh worm and IRC backdoor Trojan.
Update Service	Update.exe	Y	Loaded by Handybits programs such as EasyCrypto. Re-instates itself every time the program is run so best to leave it enabled. Prevent it dialling out ... Read More
Update Service	updater.exe	X	A variant of the RBot family of worms and IRC backdoor Trojans.
update82	update.exe	X	Added by the Troj/Dloadr-AJM downloader Trojan.
updatelavasoft	updatelavasoft.exe	X	Added by an unidentified Proxy Trojan variant. A PT is a backdoor trojan which allows a remote hacker to connect to other systems via the compromised ... Read More
UpdateMedia	UpdateMedia.exe	X	MediaUpdate foistware
updatemgr	updmgr.exe	X	Added by the SouthBeachTel premium rate adult content dialer. ... Read More
updatemgr.exe	updatemgr.exe	N	Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLi ... Read More
updater	updater.exe	?	??
updater for windows	updater service windows.exe	X	Added by the Troj/Bckdr-QPE backdoor Trojan.
UpdaterUI	UpdaterUI.exe	X	Added by the Troj/Agent-TM Trojan.
Updates From HP	Updates from HP.exe	U	Associated with Lightscribe DVD-RW drive that come with certain HP computers.
Updatestats	Updatestats.exe	N	Statblaster - "Get officially liscensed MLB pitch-by-pitch real time updates from every stadium around the league. StatBlaster provides live streaming ... Read More
updatev01	updatev01.exe	N	Ultra-networks.com software updater/downloader
Updatewiz	updatewiz.exe	?	??
UPDATE~1	updatemgr.exe	N	Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLi ... Read More
Updmgr	updmgr.exe	X	eUniverse/KeenValue adware variant
UpdReg	Updreg.exe	N	Reminder to register Creative Labs SoundBlaster Live! cards
Updt Service	updt.pif	X	Added by the W32/Rbot-AYU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
updtr.exe	updtr.exe	X	Added by the Troj/Agent-MXG Trojan.
UPERVGAS	UPERVGAS.exe	?	??
Upfsfm	Upfsfm.exe	X	Added by the Troj/Mdrop-DVU Trojan.
upnp	upnp.exe	X	Added by the Troj/Dloadr-YT downloading Trojan.
UPNP	upnpsvc.exe	X	Added by the Troj/Clomp-B Trojan.
upnp manager	upnpman.exe	X	Added by a variant of the Win32.Agobot.gen WORM! ... Read More
UPnPDevService	upnpmngr.exe	X	Added by the Troj/Small-DMW Trojan.
UpperHost	UpperHost.dll	X	A variant of the Goldun Trojan.
Upromise0	Upromise0.exe	U	Software for the Upromise College Savings Program. If you have this software installed and visit an online store that is part of this program, it wil ... Read More
uprpcw	uprpcw.exe	X	Rogue privacy protection software that is advertised aggressively through the use of Trojans and other malware. ... Read More
UPS	ups.exe	Y	PowerChute v5.02 - UPS Monitoring Module (which loads iconclnt - the tray icon)
ups	UPS32.exe	X	Added by the W32.Femot.O
UPS COMcontrol	upsctrl3.sys	X	A variant of the Goldun rootkit.
upsctl	upsctl.dll	X	Identified as a variant of the Trojan.Rootkit.Gen rootkit.
upsctrl0	upsctrl0.dll	X	Added by a variant of the Trojan.Goldun information stealing Trojan. This infection utilizes the upsctrl3.sys rootkit to hide itself. ... Read More
UPSentry 2000	upsd.exe	Y	Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss ... Read More
UPSlim	upsd.exe	Y	Used with Belkin UPS (Uninterruptable Power Supply) for support in the event of a power-loss ... Read More
upsmon	UPSMON.exe	U	UPSMON Power Management software ... Read More
Uptimer4	Uptimer4.exe	U	Uptimer4 is an appbar which displays time, date, uptime, free ram, free pagefile, cpu usage, disk free space, battery power, IP addresses, TCP through ... Read More
UpToDate	uptodate.exe	X	BrowserAid/BrowserPal foistware
upxdnd	upxdnd.exe	X	Added by the Troj/JD-A password-stealing Trojan.
UrlLstCk	UrlLstCk.exe	Y	Part of Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in C:\Program Files\Norton Internet Security. ... Read More
urllstck.exe	UrlLstCk.exe	Y	Part of Norton Internet Security. From Symantec - "UrlLstCk.exe is a necessary file that will be present in C:\Program Files\Norton Internet Security. ... Read More
URLMAP	Urlmap.exe	N	Installed by MS Money, and runs whenever you start IE. All it does is bring up an annoying sidebar (kind of like the search window) with 'financial li ... Read More
URLy Warning	URLyWarning.exe	U	Added by the URLy Warning web page monitoring software.
UrtSvcExe	Urt95Svc.exe	Y	"Cisco Secure URT is a virtual LAN (VLAN) assignment service that enhances LAN security by actively identifying and authenticating users and then asso ... Read More
USA	usa.exe	X	Added by the USAntiSpy rogue anti-spyware program.
USAR	USAR.exe	X	Added by the UltimateSpyware rogue anti-spyware program. UltimateSpyware is a misleading application that may give exaggerated reports about potential ... Read More
Usb	Usb.exe	?	HP related - not sure whether it's required
USB 2.0 Driver	updateXP.exe	X	Added by W32/Agobot-QP, a Worm/IRC backdoor, found in the Windows system folder. ... Read More
USB 2.0 Driver	updateXPSPC.exe	X	W32/Agobot-QU adds the file, acting much like othe variants of this WORM/IRC backdoor. ... Read More
USB 2.0 Driver	UpdateXPSP.exe	X	Added by the W32/Agobot-QD worm. When started this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
USB Antivirus	USBGuard.exe	Y	Related to USB Disk Security. USB Disk Security protects removable media from becoming infected with malware. ... Read More
USB Device Server!	usbserver.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
USB Driver4	updatexp2.exe	X	An SDBOT variant.
usb driver4	UpdateXP6.exe	X	Added by a variant of the W32/SDBOT WORM! ... Read More
USB Hardware Monitoring	USBhardware.exe	X	Added by the RBOT-NN WORM!
USB Hardware326 Monitoring	USBhardware326.exe	X	Added by a variant of the W32.SPYBOT WORM!
USB Host Service	usbsvc.exe	X	Added by the RBOT-GG WORM!
USB MS Update	USBS.exe	X	A variant of the Rbot family of worms and IRC backdoor Trojans.
USB Safely Remove	USBSafelyRemove.exe	Y	USB Safely Remove is a replacement for the Windows safe removal tool for removable media devices. ... Read More
usb2	usb2.sys	X	Added by the Backdoor.Fuwudoor backdoor.
USBcillin	USBcillin.exe	X	Added by the Troj/USBcill-A removable media worm.
Usbd	usb_d.exe	X	Added by the CIDRA-A TROJAN!
USBDetector	USBDetector.exe	U	USBDetector sets up an icon in the System Tray for a USB card which is intended to be used to eject or unplug hardware ... Read More
USBDetector	UDetect.exe	?	USB detector, apparently for an MP3 player - any further information appreciated! ... Read More
USBDeviceService	USBDeviceService.exe	Y	Related to the MyDVD DVD authoring program.
usbdriverx.exe	usbdriverx.exe	X	Added by the TSPY_SPYEYE.CE spyware.
usbhdd	usbhdd.sys	X	Added by the Trojan.Drondog Trojan.
USBMMKBD	usbmmkbd.exe	U	USB multimedia keyboard for HP systems. Allows the use of special function keys on USB keyboards. The latest version (available here) no longer pings ... Read More
usbmon	usbmons.dll	X	Added by the W32/SillyFDC-AO worm.
USBMonit.exe	USBMonit.exe	U	Monitors USB ports for insertion of Sandisk USB flashdrives
usbn	usbn.exe	X	Adult content dialer, recognized by Kaspersky antivirus as Trojan-Downloader.Win32.Small.afa ... Read More
USBPNP	USBPNP.exe	Y	SiPix digital camera Twain USB driver
USBTA	usbtapnp.exe	N	System Tray access for the BeWAN Gazel 128 USB ISDN adapter
USBTest	USBTest.sys	X	Added by the Troj/Lecna-D backdoor Trojan.
usbtooltip	USBTip.exe	?	Related to Pinnacle_Systems Inc. What does it do and is it required?
USDR6cw	USDR6cw.exe	X	Part of the rogue anti-spyware application SystemDoctor 2006. This application is known to install with malware that issues fake security warnings in ... Read More
user	user32.exe	X	Added by the BINGHE backdoor Trojan! It has the ability to log your keystrokes, steal data, and execute commands. ... Read More
user	user.exe	X	Added by the Troj/Sivion-B Trojan.
user	users.exe	X	Added by the removable media worm.
User Debug Manager	usndebug.exe	X	Added by the W32.Spybot.Worm worm and IRC backdoor.
User Host	usnhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Hosting Service	usnhost.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Logger	UsrLog.exe	U	Added by the Spyware.UserLogger surveillance software. If you did not install this software you should remove it immediately. ... Read More
User Logon	usrh.exe	X	Added by the Troj/Junet-A password-stealing Trojan.
user logon	user logon.exe	X	Added by the W32.Pahatia.A worm.
User Messages	usrmsg.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Messages Manager	usnmsgs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Messenger Manager	usnmsgr.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Protection	usrprot.exe	X	Added by the User Protection rogue anti-spyware program.
User Services	usersvc.exe	X	Added by the REVCUSS.A TROJAN!
User Services	usnsvcs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing	usrshare.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Manager	usnsharen.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Server	usnsrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User Sharing Services	usnsvc.exe	X	A variant of the Win32:IRCBot-CHZ family of worms and IRC backdoor Trojans.
User Sharing Wizard	usnshare.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
User32	user32.exe	X	Added by the Troj/EzKilla-A backdoor Trojan.
Userfile Sharing Serv	usnsrv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Userfile Sharing Server	usnserv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
userinfo32	userinfo32.ggt	X	Added by the Backdoor.Rustock backdoor rootkit.
Userinit Logon Application	userinit.exe	X	Identified as a Spamtrojan variant.
Userinit Logon Verification	userinit.exe	X	Added by the W32/Tilebot-EV worm and IRC backdoor. This infection should not be confused with the legitimate file found at C:\Windows\System32\userini ... Read More
userinit.exe	userinit.exe	X	An installer for the Troj/Haxdor infections.
userint32	userint32.exe	X	Added by an unidentified TROJAN via an Instant Message that says, "This was cool, check it out here." Also contains Aurora popups ... Read More
userlog	userlog.exe	X	Added by the Troj/Luiha-AP Trojan.
userun32	userun32.exe	X	Added by the Troj/Lydra-B trojan.
USIUDF_Eject_Monitor	USISrv.exe	N	Added by Ulead DVD Moviefactory. This pgram monitors your DVD or CD drives and alerts when you eject the media or have no media present. ... Read More
usnsvc.exe	usnsvc.exe	X	A variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans.
UsrClassEx	UsrClassEx.exe	X	Added by the Troj/Agent-KPU Trojan.
UsrManagementConf	umcss.exe	X	Added by the Troj/IRCBot-W backdoor worm. When this infection starts it will connect to an IRC server where it will wait for remote commands to execu ... Read More
USRobotics 802.11g Wireless Network Utility	USRWLANG.exe	N	USRobotics Wireless Network Utility - used to configure security settings for connecting to WEP encrypted Access Point through the USR Wireless adapte ... Read More
USRSTA	USRSTA.exe	?	Wireless Card controller. What does it do and is it required?
USS	USS.exe	X	Trojan that create fake alerts and popups advertising rogue anti-spyware program. Though the guide below is not for this particular infection, it wil ... Read More
USSShReg	USSSHREG.EXE	N	Registration reminder for Ulead SmartSaver Pro - compacts large graphics for web designers ... Read More
UStorage Server Service	UStorSrv.exe	U	Used by certain USB flash drives that support encryption.
usxxxxxxxx.exe	usxxxxxxxx.exe	X	Added by the TSPY_SPYEYE.EXEI Trojan.
UTab	utab.exe	X	Identified as a variant of the Adware/UTab malware.
utasvc	utasvc.dll	X	Added by the W32/Akbot-AB worm and backdoor Trojan. This infection will also modify the HOSTS file. ... Read More
utgrbe	utgrbe.dll	X	Added by the Troj/Haxdoor-DJ backdoor Trojan. This infection is hidden by the ufgrbe.sys rootkit. ... Read More
Utility Mangserver	Utility Mang.exe	X	Added by the Mal/Kaukalo-A Trojan.
Utility Ping	UTILIT~1.EXE	?	??
UtilityPro	UtilityPro.exe	N	IE search toolbars as supplied by people such as Yellow Internet and SearchBoss and written by Rawhide Search Solutions ... Read More
uTorrent	utorrent.exe	N	µTorrent is a lightweight and efficient BitTorrent client for Windows with many features. ... Read More
uvnx	uvcx.exe	X	Added by the Troj/Dloadr-AWF downloader Trojan.
UVS10 Preload	uvPL.exe	N	Related to Ulead VideoStudio.
uvu-channel	uvu-channel.exe	X	Added by the Trojan.Hachilem.B Trojan.
uwa6pcw	uwa6pcw.exe	X	Part of WinAntivirus Pro. This program is fake, stealth installed, and bundled with other malware. It is also on the Rogue anti-spyware list. ... Read More
uwa7pcw	uwa7pcw.exe	X	Startup program associated with WinAntiVirus Pro 2007. WinAntiVirus Pro 2007 is a rogue anti-spyware program that displays fake alerts, and downloads ... Read More
uwanah	uwanah.exe	X	Added by the W32/Sdbot-VL infection! File is found in the Windows system folder. ... Read More
uwas6cw	uwas6cw.exe	X	Malware related to and installed with the rogue anti-spyware program called WinAntiSpyware 2006 or WinAntiSpyware 2007. ... Read More
uwasfsd	uwasfsd.sys	X	Added by the PersonalAntiSpy rogue anti-spyware program.
uwyrl	uwyrl.exe	X	Added by the PHEL.A TROJAN!
uxgrafj	uxgrafj.adm	X	Added by the Backdoor.Rustock backdoor rootkit.
uz	uz.exe	X	Added by the W32/Agent-GGH backdoor worm.
v	USBController.exe	X	Added by the W32/Autorun-AGU removable media worm.
wblogon	ubpr01.exe	X	Added by the Troj/Agent-HFI Trojan.
webags	update.exe	X	Webags adware.
WebSUpdater	upda.exe	X	Related to the Adware.Deskbar adware program. This program will add a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com ... Read More
WIN USB 2.0	usbsystem.exe	X	Added by an unidentified WORM of TROJAN!
Win32 Usb Driver	usb32.exe	X	Added by the SDBOT-OV WORM!
Win32 USB2 Driver	updatemgr.exe	X	Added by a variant of the FORBOT WORM!
Windows	update32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Debugging Tools	updatecfg.exe	X	Added by the W32/Rbot-AXU worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Windows Firewall Updater	updatees.exe	X	Added by the W32/Rbot-GBX worm and IRC backdoor. W32/Rbot-GBX spreads to other network computers by exploiting common buffer overflow vulnerabilities, ... Read More
Windows Generic Host Process	uvchost.exe	X	Added by the Troj/VB-FPI Trojan.
Windows Live Servicer	usrserv.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows module	uient.exe	X	A variant of the W32.Spybot.Worm family of worms and IRC backdoor Trojans. This family of worms spread via mIRC and the Kazaa file sharing network ... Read More
Windows Security Engine	update.exe	X	Added by the PWS-Hangame.
Windows Security Engine	updata32.exe	X	Added by the Trojan.Maocal trojan.
Windows security FTPd update	updtftpini.exe	X	Added by the W32/Rbot-FUS worm and IRC backdoor.
Windows Service DC	uhpnjcjl.exe	X	Added by the W32/Rbot-GLY worm and IRC backdoor.
Windows Service Hosting	USERINIT.exe	X	Added by the W32/Gommer-A worm.
Windows Services	upterd.exe	X	Added by the W32/Autorun-BNL removable media worm.
Windows svchost	ups.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Task Manager-Emulator	ukenme.exe	X	Added by the W32/Rbot-CF trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
Windows Task Manager-Emulator	uswtme.exe	X	Added by the W32/Rbot-CG trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
windows update	uddater.exe	X	Added by the LEOX TROJAN!
Windows Update	Update.exe	X	Added by the DELF-FN TROJAN!
Windows Update	usnsvc.exe	X	Added by the W32/Kobot-C worm and IRC backdoor.
Windows Update	update32.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Update Drive	updrvs.exe	X	A variant of the IRCBot family of worms and IRC backdoor Trojans.
Windows Update Managere	update.exe	X	Added by the Troj/GrayBir-EG backdoor Trojan.
windows update microsoft	updatem.exe	X	Added by the W32/Rbot-CHE worm and IRC backdoor
Windows Update Service	update32.pif	X	Added by the W32/Rbot-ALC worm.
Windows Updated	updatr.exe	X	Added by the W32/Rbot-AYB worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. ... Read More
Windows Updater	update.exe	X	Added by the Troj/YSpy-A constructor Trojan.
Windows Updater	updater.com	X	Added by the Troj/Agent-HUS Trojan.
Windows Updating Service	updating.pif	X	Added by the W32/Rbot-ALW backdoor and IRC worm.
Windows USB 2.0 Driver	usb2ctrl.exe	X	Added by the W32/Rbot-BIW worm and IRC backdoor.
Windows USB 2.0 Driver	usbtskmgr.exe	X	Added by the W32/Rbot-BKG worm and IRC backdoor.
Windows USB 2.0 Driver	usbservice.exe	X	Added by the W32/Rbot-BLF worm and IRC backdoor.
Windows USB Hub Manager	usbhub.exe	X	Added by the W32/Rbot-BJX worm and IRC backdoor. This infection also creates the C:\Windows\SoftWareProtector\Skonk_out.pr. ... Read More
Windows USB Printer	unqgod.exe	X	A variant of the BKDR_RBOT.BKC family of worms and IRC backdoor Trojans.
WindowsUpdate	USRINIT.EXE	X	Added by the MADDIS.B WORM!
Windows_VXD	user32.exe	X	Added by the PWSTEAL.PPORT TROJAN!
Windowz Update V2.0	updater.exe	X	Added by the W32/Yodo-C worm.
WinFixer2005	uwfx5.exe	X	"Spyware remover" of dubious repute - see the SpywareWarrior_List of Rogue/Suspect Anti-Spyware Products & Web Sites ... Read More
winfixer2006	uwfx6.exe	X	"Foistware", pretending to be system optimization, protection and recovery software - stealth installed, see here ... Read More
winhelp	Updadv.exe	X	Added by the Troj/QQPass-N password-stealing Trojan.
winlocatorupdate	updatewinlocator.exe	X	Locator adult content toolbar related
winlogon service	urx.exe	X	Added by the SPYBOT.EN WORM!
WinSecurity	uninstall.exe	X	Added by the W32.SillyFDC.BCJ worm. W32.SillyFDC.BCJ is a worm that spreads by copying itself to removable drives. ... Read More
winup32	updated.exe	X	Added by the Troj/Banload-IY Trojan.
winupdate	updsys.exe	X	Added by a variant of the WIN32.RBOT WORM! ... Read More
WInUpdate16	udate32.exe	X	A variant of the Backdoor.Bifrose backdoor Trojan. Backdoor.Bifrose is a Trojan horse that uses a backdoor server to send information to a remote serv ... Read More
WinUpdater	update.exe	X	Related to the Adware.Deskbar adware program. This program will add a search bar to your Windows taskbar which performs searches on www.w-w-w-dot-com ... Read More
winuser32k	usr32wink.exe	X	Added by the Win32.VB.hk backdoor TROJAN!
wmc_rebootcheck	unregmp2.exe	N	Related to Media_Player The main purpose of this software program is to update information in the registry related to the video player. More info ... Read More
wnxpupdate	updatexp.exe	X	Added by the Troj/Dadobra-H Trojan.
xpupdate	updates.exe	X	Added by the W32.Bropia.L WORM!
yahoo groups	upgrdmgr.exe	X	Added by a variant of the RBOT WORM!
Your Protection	urpprot.exe	X	Added by the Your Protection rogue anti-spyware program.
yx	uu.exe	X	Added by the W32/Agobot-YX ... Read More
zervpack2	update2.exe	X	Added by the SDBOT.WD WORM!
zerzvpack2	uzpdate2.exe	X	Added by the W32/Rbot-KA trojan backdoor. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. ... Read More
[not used]	userinit32.exe	X	Added by the W32/Rbot-YE irc backdoor trojan.
[not used]	userlogon.exe	X	Added by the Troj/Stawin-I keylogging Trojan.
[not used]	usrs445F8764.dll	X	Added by the Troj/Opnis-D Trojan.
[random]	unicox.exe	X	Added by Troj/Bancos-BK. This TROJAN may be found in the Windows sytem folder, also as "Carteiro2.exe", and in the Windows help folder. ... Read More
[STRING 1]Software Update[STRING 2]	updtscheduler.exe	X	Added by the W32.Kedebe.I@mm mass-mailing worm. String 1 can be one of following: , Windows, Microsoft Windows and string 2 can consist of:# Checker, ... Read More*
[various names]	Uint32.exe	X	Added by a NTRootKit TROJAN variant!
[Various Names]	Uint32.exe	X	Part of the Wareout infection as described here.
[Various Names]	UserSp1.exe	X	Part of the Wareout infection as described here.
[Various Names]	uio.exe	X	Part of the Wareout infection as described here.
[Various Names]	utsgmon.exe	X	Part of the Wareout infection as described here.
{00212521-4FEF-4AD3-B3AA-E0531B8DC123}	usbadpt32.dll	X	Added by the Troj/Dloadr-EO Trojan.
{24c60b9b-26b5-4201-9f7a-fb9219356ae9}	ulztc.dll	X	A file used by the rogue antispyware app, SpyFalcon, to issue fake security alerts on your taskbar. ... Read More
{6ad686b9-ab56-4ebc-a804-9f70b55b4577}	uimcu.dll	X	A Trojan associated with the SpyLocked rogue anti-spyware application.
{C0FB7D08-056E-1033-0501-03020730002c}	Update.exe	X	Added by the Troj/Mdrop-BLR Trojan.
{C0FB7D08-056E-1033-0501-03020730002c}	Update.exe	X	Added by the Troj/Agent-EOG Trojan.
{c3786a8d-6426-4c29-a23f-f36e47b31e0c}	ucbrrt.dll	X	A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar. ... Read More
{c704547b-26c0-4222-a034-81653c07b494}	ugofuq.dll	X	Zlob Trojan that installs VirusProtectPro 3.5 and shows fake security alerts from your Windows taskbar. ... Read More
{CD5AC91B-AE7B-E83A-0C4C-E616075972F3}	userinit.exe	X	Added by the JS_FEEBS.I malicious javascript file.
{D817EE47-6798-BA2D-1011-5B24CF1C7459}	usvr32.exe	X	A variant of the Backdoor.Bifrose backdoor Trojan.
{Y479C6A0-OTRV-U5KH-S1UE-E0BC10B4E666}	UNISNTLV32.exe	X	Added by the W32/Autorun-EK removable media worm.
{Y479C6A0-OTRV-U5KH-S1UE-E0BC10B4E666}	UNINSTLV16.exe	X	Added by the TROJ_RANDSOM.A Trojan.
{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666}	Uninstall.exe	X	Added by the W32/SillyFDC-V worm. W32/SillyFDC-V is a worm for the Windows platform that spreads via removeable shared drives. ... Read More

Status Key

Each entry in the database will have a Status assigned to it. The key to this status is the following:

Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware but could also be programs that are not desirable to run on your computer.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

If you require assistance in removing one of these files you can ask us in the Startup Database Forum.

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.