| Name |
Filename |
Status |
Description |
|
SpywareKilla
|
SpywareKilla.exe
|
N
|
Spyware remover of ill repute. For more info about it do a search for 'SpyareKilla' at this web page on "Rogue/Suspect Anti-Spyware Products & Web Sites"
|
|
Spyware Vanisher
|
FreeScanner.exe
|
U
|
Spyware remover of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites
|
|
SpySweeper
|
SpySweeper.exe
|
U
|
Spy Sweeper anti-spyware program.
|
|
SpySpotter
|
SpySpotter.exe
|
X
|
Spyware remover of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites. SpySpotter is a security risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats.
|
|
Speedtouch USB Diagnostics
|
Dragdiag.exe
|
U
|
For an external Alcatel ADSL high-speed modem. A diagnostic tool and can be run from the Start menu when required. The only reason it might be useful on startup is if you like seeing an 'at-a-glance' status indicator on the taskbar (the icon is a different colour depending on the status of the device/line)
|
|
SoundMAXPnP
|
SMax4PNP.exe
|
U
|
SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
|
|
SoundMAX
|
SMax4.exe
|
N
|
System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
|
|
SoundFusion
|
cwcprops.cpl
|
?
|
Control panel item for the Terratec DMX Xfire 1024 soundcard (Start -> Settings -> Control Panel) based upon a Cirrus Logic "SoundFusion" DSP. Also foundswith CS4280 4 channel PCI Sound
cards. Does it need to run at start-up every time?
|
|
SMSS
|
smss.exe
|
X
|
Added by the FLOOD.F Trojan. This infection should not be confused with the legitimate C:\Windows\System32\smss.exe.
|
|
SMax4PNP
|
SMax4PNP.exe
|
U
|
SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
|
|
SMax4
|
SMax4.exe
|
N
|
System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
|
|
Smapp
|
smtray.exe
|
N
|
System Tray access for the Compaq/ADI SoundMAX integrated digital audio controller
|
|
SiS Windows KeyHook
|
keyhook.exe
|
U
|
SIS graphics cards related: "Super VGA Keyboard Daemon" - hooks into the keyboard processing chain in order to enable hotkey settings
|
|
ShStatEXE
|
SHSTAT.EXE
|
Y
|
From McAfee VirusScan NT 4.x. Handles program communication among VShield components, displays VShield icon. Can be started automatically or available via Start -> Programs
|
|
Showbehind
|
SHOWBEHIND.EXE
|
X
|
Advertisement display which can be stopped here
|
|
ShellEx
|
ShellEx.exe
|
X
|
Added by the ANAKHA TROJAN!
|
|
sginst
|
sginst.exe
|
N
|
eAcceleration Stop-Sign related - not recommended, see note
|
|
setdefprt
|
setdefprt.exe
|
N
|
Sets the Brother Printer to be the default printer after installation of the printer software.
|
|
Service Manager
|
sqlmangr.exe
|
N
|
SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs
|
|
Security iGuard
|
Security iGuard.exe
|
N
|
Spyware remover of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites
|
|
SearchSquire33
|
SearchUpdate33.exe
|
X
|
SearchSquire parasite
|
|
SchedulingAgent
|
mstask.exe
|
U
|
MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans
|
|
SCardSvr
|
scardsvr.exe
|
N
|
Related to SmartCard readers and sometimes uses lots of system resources
|
|
SA Service
|
SAservice.exe
|
?
|
Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required? The entry corresponding to Site Advisor can be found here.
|
|
Rundll32_7
|
MSIEFR40.DLL
|
X
|
BrowserAid "Featured Results" hijacker variant
|
|
rundll32
|
irprops.cpl
|
U
|
Associated with BlueTooth software, and registers the "Infrared Port properties" Control Panel applet. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup
|
|
rn4d
|
dirote.exe
|
X
|
Added by the BKDR_MAROON.A TROJAN!
|
|
RemoteControl
|
PDVDServ.exe
|
U
|
Remote Control background application for CyberLink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one
|
|
REGSVR32
|
ctasio.dll
|
U
|
ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality
|
|
RegisterDropHandler
|
REGIST~1.EXE
|
U
|
Part of the OCR software TextBridge Pro 9.0 (and possibly earlier versions). Typically used with imaging devices such as scanners and digital cameras for creating text documents from images. This item will probably be displayed twice and will re-instate itself whenever you start the main program so leave it - once started it frees the memory it used. Its purpose and an explanation of how to correct a problem it creates for "Send To" can be found here. Note that you don't have to uninstall TextBridge for this fix to work and the program works fine afterwards. Not used on later versions of the software - hence the 'U' recommendation
|
|
Red Swoosh EDN Client
|
RSEDNClient.exe
|
U
|
Red Swoosh is a piece of software that allows you to download videos from sites that utilize its technology quicker. It does this by using P2P technology so that you are downloading pieces of the video from multiple sources at the same time. When you install this osftware, your computer becomes a node on this P2P network as well which means that your computer's bandwidth may be utilized when other people download content that you have previously downloaded.
Other notes of interest in their EULA state that the software can be automatically updated without your consent, the software may download other published content that it feels may interest you without your knowledge, and non-Personally identifiable information may be shared with third-parties.
If you disable this software, you will not be able to use the video features of the sites that use this technoglogy.
|
|
RecoverFromReboot
|
RecoverFromReboot.exe
|
N
|
This program is used by installation programs to restart the installation from the previous point it was at it before the reboot. It is commonly used by Internet service providers to set up Internet access on a computer.
|
|
RCSync
|
RCSync.exe
|
X
|
PrizeSurfer related. "PrizeSurfer is the free software that automatically enters you to win cash and prizes just for surfing the web and shopping online!" Stealth installed malware
|
|
RamBooster2
|
rb.exe
|
X
|
Added by the AKAK TROJAN!
|
|
QuickTime Task
|
qttasks.exe
|
X
|
CoolWebSearch parasite variant.
|
|
QuickTime Task
|
Qttask.exe
|
N
|
System Tray access to Apple's "Quick Time" viewer from version 5 onwards
|
|
Quick Heal Startup Scan
|
QHSTRT32.EXE
|
Y
|
Quick Heal - virus scanner
|
|
Quick Heal On-Line Protection
|
Cateye.exe
|
Y
|
Quick Heal - virus scanner
|
|
qttask
|
Qttask.exe
|
N
|
System Tray access to Apple's "Quick Time" viewer from version 5 onwards
|
|
QMusic
|
QMAgent.exe
|
N
|
Resident process that launches the program BenQ Qmusic when a BenQ mobile phone, or a Joybee MP3 Player, is plugged in the computer. The program is installed by default in BenQ Joybook computers and laptops.
|
|
QD FastAndSafe
|
QDCSFS.exe
|
N
|
Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually
|
|
QBRSR
|
QuickBrowser.exe
|
X
|
top-banners.com adware
|
|
PSD Tools Channel
|
ChannelUp.exe
|
X
|
BuddyLinks adware
|
|
Program File
|
Progmon.exe
|
X
|
Added by the PEEPER TROJAN!
|
|
Privoxy
|
privoxy.exe
|
U
|
Privoxy - web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk
|
|
Printer
|
Spyassault.exe
|
X
|
Spyware remover" of dubious repute, see this list of Rogue/Suspect Anti-Spyware Products & Web Sites
|
|
PowerDOCSAPIHost
|
papihost.exe
|
U
|
Hummingbird PowerDOCS - "delivers powerful enterprise document management functionality via a tightly integrated Microsoft WinNT/98/2K environment"
|
|
Pop-Up Stopper
|
dpps2.exe
|
U
|
Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group
|
|
POINTER
|
point32.exe
|
U
|
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
|
|
PLFFAP
|
HotfixQ0306270.exe
|
N
|
Used by various key-chain USB drive's software for detecting and syncing the usb drive when inserted or retained. The flash drive works either way and the resources are minimal.
|
|
Pinger
|
pinger.exe
|
N
|
Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification
|
|
PHIME2002ASync
|
TINTSETP.EXE
|
N
|
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
|
|
Phime2002a
|
TINTSETP.EXE
|
N
|
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
|
|
PestPatrolCL
|
PestPatrolCL.exe
|
U
|
PestPatrol's
command line scanner, combines with the Windows Task scheduler and is
required in cases where schedules for regular scanning are set
|
|
PcSync
|
PcSync.exe
|
N
|
If a Nokia phone has been connected, synchronises the phone with MS Outlook or other organiser software. It is installed by the Nokia PC Suite, and the tray icon shows if a phone has been connected. Available via a desktop shortcut or Start -> Programs
|
|
Pcsv
|
pcsvc.exe
|
X
|
Delfin Media Viewer or "Promulgate" adware
|
|
PCMService
|
PCMService.exe
|
U
|
Part of the Dell Media Experience software. Appears to be related to Power Cinema. Reports have shown that this program repeatedly checks your disk for a file. This could cause performance issues.
|
|
PCHealth
|
pchschd.exe
|
N
|
This is a "scheduler" and does not turn off PC Health. For more information refer here
|
|
PccPfw
|
PccPfw.exe
|
Y
|
PC Cillin 2003 personal firewall
|
|
P17Helper
|
P17.dll
|
?
|
ASIO driver for the Sound Blaster Audigy & Audigy 2 series sound card - is it required in startup?
|
|
OWMngr
|
OWMngr.exe
|
X
|
OnWebMedia advertising foistware - see here for exactly what to look for
|
|
Outpost Firewall
|
outpost.exe
|
Y
|
Main executable for Outpost Firewall.
|
|
Opware12
|
Opware12.exe
|
N
|
OmniPage Pro 12 from ScanSoft
|
|
Optimum Online
|
Netsurf.exe
|
X
|
An Optimum Online application that is used to display advertisements.
|
|
OmniPage
|
Opware32.exe
|
N
|
Part of OmniPage Pro from Scansoft (was Caere) - "the fastest, easiest way to turn paper documents into digital files you can edit." Opware32.exe links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs
|
|
OfficeScanNT Monitor
|
pccntmon.exe
|
Y
|
Trend Micro OfficeScan Antivirus real-time scan monitor
|
|
ODBC BackUp
|
fdxxl.exe
|
U
|
G Data "PC Spion" - monitoring and surveillance software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself!
|
|
nwiz
|
nwiz.exe
|
N
|
Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system
|
|
NWEReboot
|
dummy.exe
|
Y
|
Temporary file used during the installation of Ahead Nero CD/DVD burning software.
|
|
NvMediaCenter
|
NvMCTray.dll
|
U
|
System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties
|
|
NvCplDaemon
|
NvCpl.dll
|
U
|
Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card
|
|
NvCplDaemon
|
NvQtwk.dll
|
N
|
System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again. Also disable the "NVIDIA Driver Helper Service" if enabled as it can cause this entry to be re-enabled on re-boot (note that this service can also cause extreme shutdown delays if enabled - see here)
|
|
NSupdate
|
NSupdate.exe
|
X
|
Added by the Dial/Laet-B premium rate dialer.
|
|
NPROTECT
|
nprotect.exe
|
U
|
Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. Can be listed twice which is valid - see here
|
|
Norton System Doctor
|
Sysdoc32.exe
|
N
|
Norton Disk Doctor from Norton Utilities. Automatically runs at start-up, major resource hog and best started manually form Start -> Programs. Delete the shortcut in the Start -> Programs -> Startup folder as well
|
|
NoAdware
|
NoAdware.exe
|
U
|
NoAdware Adware/Spyware remover - initially considerered a "rogue" program - see here . Has since apparently mended its ways: see note
|
|
New.net Startup
|
rundll32 [path], NewDotNetStartup -s
|
X
|
NewDotNet foistware
|
|
Network Associates Error Reporting Service
|
TBMon.exe
|
U
|
Network Associates Error Reporting Tool - tool traps errors and requests submission to NAI for the purpose of betatesting new software
|
|
NetShow Powerpoint Helper
|
NSPPTHLP.EXE
|
U
|
If disabled, user created fonts can no longer be seen by other programs
|
|
NDSTray
|
NDSTray.exe
|
U
|
ConfigFreeT Tray on a Toshiba laptop. Tray utility for their network switching application which permits switching network devices and settings with a click on the tray icon. While it is not required, for people who span multiple networks and want an easy way to go from wired to wireless and change addresses and other network settings, it's a must have
|
|
NCLAUNCH
|
NCLAUNCH.Exe
|
U
|
Part of SWF Studio from Northcode Inc - an extension to Flash. Bundled when you create a self-installing screen-saver on Win2K/XP.
|
|
NaviSearch
|
nls.exe
|
X
|
NaviSearch, eXact Advertising variant
|
|
MySoftware NewsFlash
|
Newsflsh.exe
|
N
|
A program that runs in your task bar and receives alerts and release information on MySoftware products.
|
|
Multimedia extensions
|
mservice.exe
|
X
|
EasySearch adware
|
|
MSwheel
|
mswheel.exe
|
U
|
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
|
|
MSUpdSrv
|
msupdsrv.exe
|
X
|
Browser hijacker, redirecting to a porn site
|
|
MSPY2002
|
ImScInst.exe
|
N
|
Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word
|
|
MSprotect.exe
|
MSprotect.exe
|
X
|
Added by the DABYREV.A VIRUS!
|
|
MSOleath32
|
winss.exe
|
X
|
Added by the Kather Trojan. This infection should not be confused with the legitimate winss.exe used by Windows Live One Care.
|
|
MsnMsgr
|
MsnMsgr.Exe
|
N
|
MSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
|
|
Msnarrator
|
msnarrator.exe
|
X
|
Added by the NARAT.A TROJAN! - also identified as MPGCOM Toolbar adware
|
|
MSN
|
msn.exe
|
X
|
Added by the Trojan.Minit Trojan. Troj/Cimuz-AQ attempts to steal information such as email account usernames and passwords, as well as creating screenshots to capture information such as banking details, and may send the stolen information to a remote user via FTP.
|
|
MSMSGS
|
msmsgs.exe
|
U
|
Windows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"
|
|
MsmqIntCert
|
mqrt.dll
|
?
|
Microsoft Message Queue Server - Internal Certificate - see here for more info and here for a potential problem.
|
|
MSKAGENTEXE
|
MskAgent.exe
|
U
|
Part of McAfee Spamkiller
|
|
MSAgent
|
mshtm.exe
|
X
|
Browser hijacker - redirecting to buldog-search.com
|
|
msadcheck
|
msadcheck32.exe
|
X
|
Browser hijacker, redirecting to search-system.com
|
|
Morpheus
|
morpheus.exe
|
N
|
MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it"
|
|
mnsvcsp
|
mnsvcsp.exe
|
X
|
Added by the Troj/SCKeyLog-B keylogger.
|
|
Microsoft System Checkup
|
Cool.exe
|
X
|
Added by the DONK.B WORM!
|
Disclaimer
Have a problem and would like to ask us for help? To learn how to ask your question Click Here!
Do you have popups or other malware infecting your computer? If so, Start Here!
Are you having trouble using this site? Then you should visit the New User Orientation Center!