| Name | Status | Filename | Description |
|---|
| Apmsrv9x | ? | APMSRV9X.EXE | Intel AnyPoint Wireless II Home Network related. What does it do and is it required? |
| AVKTray | U | AVKTray.exe | Related to AntiVirenKit from G DATA Software AG. Tray control for the Virus software. Note: Located in \%Program Files%\G DATA AntiVirenKit\ |
| aimaol lptt01 | X | aimaol.exe | Variant of the RapidBlaster |
| Acer Tour Reminder
| N | Reminder.exe | Popup reminder to take the tour of your new Acer laptop. |
| azmodem | Y | azexe.exe | Aztech_Labs modem driver |
| AVWUpd32 | U | AVWUPD32.EXE | AntiVir updater. Useful, but can be run manually |
| avp | X | win*.tmp.exe (*,is a number) | Added by a variant of Trojan.Downloader.Alphabet More here Read the link, allows remote access Note: Located in \%WINDIR%\TEMP\ |
| atipatxx | X | atipatxx.exe | Added by the TROJ/SMALL-ED TROJAN! |
| AU Agent | U | AUagent.exe | Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon |
| Antivirus | X | vav.exe | Added by the Vista_Antivirus_2008 rogue anti-spyware program. Note: Located in \%Program Files%\VAV\ Note: Use Malwarebytes RogueRemover tool. |
| AdPopup | X | dcf5678.exe | Added by the Troj/Agent-FZ
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder. |
| Alchem | X | Alchem.exe | Related to Adware.ClickAlchemy is a Browser Helper Object (BHO) that connects to various adware Web sites and downloads advertisements. |
| AOL 9.0 Optimized | X | AOLClient.exe | Added by the Backdoor.Spyboter.gen TROJAN! Read the link, keylogger/password stealing trojan(s) involved. |
| AVStation premium | U | AVStation,agent.exe | Related to Samsung_AV_Station instant Playback of music photos, videos. |
| ahfpor and ahfprog | N | ahfp.exe | Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either" |
| AntiVirus Process | X | virprot.exe | A variant of the W32/Sdbot.KXO.worm family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\Com\ |
| Adobe Acrobat | N | READER~1.EXE | Speeds up the launch of Adobe (Acrobat) Reader 7
|
| asrupdate.exe | X | asrupdate.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\inet20000\ (Win9x/Me), C:\%WINDIR%\inet20000\ (XP/WinNT/2K) More here |
| AdslTaskBar | Y | rundll32.exe,stmctrl.dll, TaskBar | ISP software, initializes DSL modem |
| alkasr | X | ÎäÒíÑ.exe | Added by the BALKART VIRUS |
| appconn | X | appconn.exe | Added by the CARGAO trojan |
| AccessMedia P2P Loader | X | amp2pl.exe | My AccessMedia toolbar related, stealth installed! |
| AmazingTens | X | AmazingTens.exe | Premium rate adult content dialer |
| AntiSpyKit 5.2 | X | AntiSpyKit,5.2.exe | Added by AntiSpyKit Rogue software uses intentional false positives to convince the user that their system has been compromised and then demands money to remove these false threats. Note: Located in \%Program Files%\AntiSpyKit 5.2\ |
| AELaunch | N | AELaunch.exe | Audio Applications Launcher for the Philips Acoustic Edge soundcard |
| ALCFDRTM16 | ? | ALCFDRTM16.com | RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
| Aida | X | eetu.exe | PurityScan/Clickspring Adware |
| ASDPLUGIN | X | Austria.exe | AsdPlug premium rate adult content dialer variant |
| AttuneContentUpdater | X | attune_cu.exe | Added by helpdesk_software called Aveo Attune. This consists of programs that are misleading, harmful, or undesirable. Note: Located in C:\Program Files\AVEO\ATTUNE\Bin\ |
| Adaware lptt01 | X | adaware.exe | Variant of the RapidBlaster |
| avserve3.exe | X | avserve3.exe | Added by the SASSER.G worm |
| A4Proxy | U | A4Proxy.exe | Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites |
| AtiDisplayDrv | X | atidrvxx.exe | Added by the W32/RBOT-VZ WORM! Read the link, keylogger/password stealing trojan(s) involved. |
| Aqua Dock | Y | Aqua Dock.exe | Aqua_Dock "a free program that allows you to have an “OS X” style, nice animated launchbar / taskbar on your screen that reacts to your mouse when you mouse over it. Users can customize the look of each item on the dock and set various animation options for when the mouse is over an item on the dock. It is very easy to configure.
" |
| Ad-Aware-6 | X | WINDOWSUPDATER.EXE | Added by an unidentified WORM or TROJAN! |
| AvMaiSrv | Y | Avmaisrv.exe | Avast32 anti-virus - E-mail scanner |
| AJC Active Backup | U | AJCActBk.exe | Related to AJC_Active_Backup service. Backup your files using an intuitive visual display so you have complete control over what is going to happen. Note: Located in \%Program Files%\AJC Software\AJC Active Backup\ |
| AudioDrvEmulator | U | AudDrvEm.dll | Related to Creative DLL Module Loader. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems. |
| Application Layer Scheduler | X | agtsvc.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| AdAware | X | wini.exe | Added by the W32/RBOT-XN WORM! |
| AlcFDMonitor | ? | ALCFDRTM.EXE | RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
| AtiQiPcl | U | AtiQiPcl.exe | Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's |
| AV | X | UPDATE-28062004.exe(25,blank,spaces).vbs | Added by the MIDFIN WORM!
|
| AntiPopUp | U | AntiPopUp.exe | AntiPopUp for IE - pop-up stopper |
| aouei | X | sysrtmvs.exe | Added by Chivio_Dialer Note: Located in \%ROOT%\Documents and Settings\User name\Application Data\ratorefaci\ |
| Advanced Spyware Remover | U | Asr.exe | Related to Advanced_Spyware_Remover anti spyware tool Note: located in C:\Program Files\Evonsoft\Advanced Spyware Remover\ |
| Avg Antivirus | X | icpldrvx.exe | Added by the BANKER.BYU TROJAN! - also see here |
| Activation | N | Activation.exe | Part of Microsoft Money |
| AEZBProc | U | aptezbp.exe | IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
| AdobeReaderPros | X | sysmsn.exe | Added by the W32/Rbot-BGH WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| avserve2.exe | X | avserve2.exe | Added by the SASSER.B or SASSER.C VIRUSES! |
| Accelerate | U | accelerate.exe | Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection |
| Alexa | N | Alexa.exe? | Alexa Toolbar"is a downloadable toolbar that helps you navigate the Internet as you surf, by instantly providing you with related information about the site you're viewing". Available via Start -> Programs |
| ASDPLUGIN | X | netherlands.exe | AsdPlug premium rate adult content dialer variant |
| Acronis Popup Blocker | U | Blocker.dll,Run | Related to Acronis Privacy Expert - anti-spyware and security suite. |
