| Name | Status | Filename | Description |
|---|
| Task Alert | X | cmosvc.exe | Added by a variant of the Backdoor.Win32.IRCbot.vic family of worms and IRC backdoor Trojans! Note: Located in \%WINDIR%\System32\ |
| Task Debugger | X | sysdll.exe | Added by the W32/RBOT-CQ WORM!
|
| Trashgrd | U | TRASHGRD.EXE | Part of McAfee Nuts & Bolts. Protects all the files you delete, even files deleted in DOS or in 16-bit Windows applications, by sending them to the Recycle Bin |
| TMESBS.EXE | U | TMESBS32.EXE | Related to Toshiba_Mobile_Extension Slim Select Bay Service. You can disable this task if you have no intention of ever taking the DVD CD-Writer out while the laptop is turned ON. Note: Located in \%Program Files%\TOSHIBA\TME3\ |
| TINTSETP | N | TINTSETP.EXE | Part of Microsoft\'s Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word |
| TomcatStartup 2.5 | U | hpbpsttp.exe | Related to HP_Toolbox_Startup It is bundled together with HP LaserJet printers. Note: Located in C:\Program Files\Hewlett-Packard\Toolbox\ |
| TANG_INA_MO | X | AutoRun.bat | Added by the W32.Filukin.A
WORM!
|
| TkBell.Exe | N | evntsvc.exe | Application Scheduler installed along with RealOne_Player Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK |
| TimeCalendar | N | tc.exe | TimeCalender - calendar reminder |
| TimeUp | N | Timeup.exe | TimeUp - internet online timer |
| Tau monitor | Y | Taumon.exe | " Tauscan is a powerful Trojan Horse detection and removal engine capable of catching every known type of backdoor that can threaten your system"
|
| TapiTNA | U | TapiTNA.exe | Telephony Location Selector allowing mobile users to change dialling locations - part of the Win95 Power Toys |
| The Easy Bee's Hive | U | ATCEgSvr.exe | The Easy Bee is a software that allows you to record Internet navigation sequences, which can include form filling and button clicking and to attach a replay schedule to each sequence |
| Tok-Cirrhatus-1959 | X | br4941on.exe | Added by the W32/Brontok-N Worm Read the link, allows remote access |
| TZ Spyware Remover | X | SpyRem.exe | TrackZapper - rogue "security software" using false positives as a goad to purchase. |
| tsrv | X | tsrv.exe | Warezov.W |
| taskmngr lptt01 | X | taskmngr.exe | RapidBlaster Variant |
| TabletWizard | U | SPLSHWRP.EXE | Microsoft
Tablet PC Component. File is located in the Windows\help or Winnt\help folder.
|
| Threaded | X | intcp32.exe | Added by the RANDEX.UG VIRUS! |
| TomTomHOME.exe | U | TomTomHOME.exe | Related to TomTom_Home from TomTom International BV. Navigation by GPS. Note: Located in C:\Program Files\TomTom HOME\ |
| TMOUSE | U | tmouse.exe | Component of the Toshiba Mouse Control that allows users with an AccuPoint mouse to scroll MS-scroll-compatible documents by holding CTRL ALT and moving the AccuPoint up or down. It also allows zooming by holding CTRL SHIFT and moving the AccuPoint up or down. Disabling this item has no adverse effects, except disabling the scroll/zoom features of the AccuPoint |
| TheSpyBot | X | TheSpyBot.exe | Added by the TheSpyBot rogue anti-spyware program. Note: Located in \%Program Files%\TheSpyBot\ Note: Use SDFix under supervision. |
| TPNF | N | TPTray.exe | Touchpad configuration tray icon for Toshiba laptops. Available via Start -> Settings -> Control Panel |
| TivoTransfer | U | TivoTransfer.exe | Related to Tivo_Transfer Service. TiVo Desktop is an easy-to-use application that lets you publish and share digital music, photos and TiVo recordings between your networked TiVo Series2 DVR and your computer. Note: located in C:\Program Files\Common Files\TiVo Shared\Transfer\ |
| Thumbs Plus X.X | X | thmbplusXX.exe | Added by the W32/Agobot-AAF
WORM! (XX is a combination of random digit and character.)
|
| Tweak Manager | ? | WinManager.Exe | WinGuides Tweak Manager. Is this required for the live updates feature and/or if settings are changed? |
| TSystem | X | (original,Trojan,filename) | Added by the Troj/Nsys-A
Trojan!
|
| TkBellExe | N | realsched.exe | Application Scheduler installed along with RealOne_Player Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK |
| Tok-Cirrhatus | X | [path to file] | Added by W32/Brontok-F WORM! |
| TimeService | X | trun.exe | Added by the TlfLic-A premium rate adult content dialer. |
| taskmgr.exe | X | paintms.exe | Added by a variant of the WIN32.AGENT.AH TROJAN! |
| Tracks Eraser or Tracks Eraser Pro | U | te.exe | Tracks Eraser Pro from Acesoft - "Erases all tracks of your internet activity" |
| test | X | zistro.exe | Troj/Kimat-C |
| Torrent Management Service | X | TMANAGESVC.EX | Added by a variant of the W32.Spybot.Worm family of worms and IRC backdoor Trojans. This family of worms spread via mIRC and the Kazaa file sharing network. Note: Located in \%WINDIR%\System32\ |
| tinySpell | U | tinyspell.exe | Tinyspell - "allows you to easily and quickly check the spelling of words in any Windows application. Monitors your typing on the fly, alerts you whenever it detects a misspelled word, and checks the spelling of every word you copy to the clipboard" |
| tfswctrl | Y | tfswctrl.exe | Drive letter access to HP's and Veritas' version of DirectCD. Does the same thing as DirectCD. From HP - "This is a needed file as it controles the readability of the Combo drives. Without this file loading the end user will be able to burn CD's but wont be able to read them. The drive itself will be able to read store bought master Cd's without the file but not burnt ones" |
| TAG | ? | tag.exe | ?? |
| TCPServer | X | TCPServer.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\wadsys\ |
| TSService | ? | NSSERVICE.EXE | ?? |
| TrueImageMonitor.exe | N | TrueImageMonitor.exe | Related to Acronis_True_Image - backup software. Can be disabled without affecting TrueImage. |
| TMA distribution | U | cfinst.exe | Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients |
| Tvs | N | TvsTray.exe | Toshiba Virtual Sound on a notebook - allows you to change sound settings |
| TaskSwitchXP | U | TaskSwitchXP.exe | Related to TaskSwitchXP from NTWind Software. Advanced task management utility that picks up where the standard Windows Alt Tab switcher leaves off. It provides the same functionality, and adds visual styles to the dialog and also enhances it by displaying thumbnail preview of the application that will be switched to. Note: Located in C:\Program Files\TaskSwitchXP\ |
| Tgcmd | U | tgcmd.exe | This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. "tgcmdprovidersbc" is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation |
| TWBbtn | ? | N/A | Found on a Toshiba laptop |
| TEXTCONV | X | lsass.exe | Added by a Webus.B trojan infection. Note - this is not the legitimate Lsass.exe system file, which should normally NOT figure in Msconfig/Startup |
| TridentTVIcon | Y | tvicon.exe | Trident Microsystems, Inc Display driver |
| Taskmgr | X | Taskmgr.exe | System1060 homepage hi-jacker. Note - this is not a Windows file and is found in a WindowsSystem1060 directory |
| TSClientMSIUninstaller | U | tscuinst.vbs | Related to Terminal_Services_Client Remote Desktop Connection Software from Microsoft. Note: Located in \%ROOT%\Installer\TSClientMsiTrans\ |
| TB_setup | ? | TB_ANI~1.EXE | ?? |
| TrayServer | N | TrayServer.exe | For monitoring tray icons |
| The Assistant | U | eSched.exe | Related to WinTotal from a la mode inc. FormFiller for appraisers. Note: Located in \%Program Files%\a la mode\Sched\ |
| Tcp Application Manager | X | spoolsvc.exe | Added by the Troj/Dloader-NY
TROJAN!
Note: Spoolsvc.exe is not the legitimate Windows Process. (Notice the difference in the spelling.) The legitimate Windows Process (spoolsv.exe) is located in the System32 folder. |
| Toshiba Registration | N | ToshibaRegistration.exe | Related to Toshiba_Registration Register your product for warranty and product support. To register your product, please click on Start/All Programs/Toshiba Registration. Note: Located in \%Program Files%\Toshiba\Registration\ |
| Tesla | ? | TESLA.EXE | ?? |
