internetinspiration.co.uk
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Privacy and security
All the time your P.C is switched on, process are running, not all of them are
necessarily things you want to run. We have compiled a list of dangerous or undesirable processes
that you can check to see if they are present on your system. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Undesirable processes | ||
| Process | Details | Detect/remove with |
| 100176br.exe | Is the ADSplug, an adult content premium rate dialler | Ewidow Pest Patrol Bit defender A squared Trojan Remover |
| 180ax.exe | You have one of the following a) TROJ.ISTZONE.H downloader. Usually attached to a virus to download other viruses. b) 180 solutions spyware. c) Dyfuca spyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser |
Pest Patrol Kaspersy Trend-Micro A squared Trojan Remover |
| 180remove.exe | Red V spyware. It secretly monitors internet activities and gathers personally identifiable information, | Pest Patrol Free online scan |
| 1buu2qs7.exe 36o1ogv0.exe 56olj8bb.exe 6e9eh7oo.exe 70tovmto.exe 9cjqvgcs.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| 196_150_NI.EXE | Is Winfixer 2005. Pop ups delivered by a trojan, (the latest being Vundo) to suggest security threats and critical errors exist, and requests $39.95 to fix them. | Manual removal instructions |
| A | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| A+++.exe | WIN32.VB.AVTrojan keylogger, it will record all keyboard input and send it to a designated email address. Some variants can also disable security software | Ewidow Pest Patrol A squared |
| A0133191.EXE | Is Adware Wheaterbug.A. It usually comes bundled with other malware |
Bit defender Ewidow |
| A5281300.so | Is the Smitfraud trojan, aka A5281300.so , to display fake warnings to trick the user into buying fake virus scanners. Difficult for security software to remove | Manual removal instructions |
| a64sddd.exe a65d.exe | Popuppers adware, AKA LowZone-AA trojan. Delivers pop up advertisements from mediamotors. It will also lower security settings by adding registry entries. Can also install other malware including 180solutions including abetterinternet | Ewidow |
| a95kfrhe.exe abasa5jrp_.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Absr.exe Ausvc.exe BVT.exe |
These are components of the Autoupder virus. | Pest Patrol McAfee Security Kaspersy |
| actalert.exe | Dyfucaspyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser | A squared X-Cleaner Spybot S&D Trojan Remover |
| adp8038_siac.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| adprotector.exe | Red V spyware. It secretly monitors internet activities and gathers personally identifiable information. | Pest Patrol Free online scan |
| Advert.exe | Aureate now known as Radiate, comes attached to hundreds of 'Free' software programmes. It delivers their advertisements and monitors your surfing habits. Manual removal is very difficult. | Pest Patrol |
| adaware.exe aimaol.exe | A variant of the Rapid Blaster worm.
Manual removal is not recommended. IMPORTANT Do not confuse this with the Ad-Aware.exe (with the hyphen) process for the popular spyware scanner |
removal Tool A squared Trojan Remover |
| aircity.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| aimplugin.exe | You have the W32/Guap-F worm, also known as W32.Allim and WORM_YIMP.A . It is spread via AOL, MSN and Yahoo Instant messengers as well as eDonkey2000 and LimeWire file sharing programs. It will disable many Security, Windows updates and the Windows Firewall to enable it to download other malicious software. eDonkey2000 | A squared McAfee |
| AIM reminder.exe | Is the Buddy trojan, AKA W95/PennyTools.Trojan or PennyTools. It will steal AOL and other passwords and send gathered information by email | Ewidow McAfee |
| Aolfix.exe | You have Qhosts trojan | McAfee |
| Aornum.exe Aornumsp.exe Ornum.exe |
A background process to collect information on your surfing habits and deliver
pop up advertising. Installed with the iwon prize draw products. To remove, use the Add/remove programmes to delete all iwon entries. Note- This programme leaves certain components in your PC even after un-installation, in some cases under a different file name. Run a top quality spyware scanner. | Pest Patrol |
| AP9H4QMO.EXE | Is either - 1)Shopathome adware. delivers advertising pop ups, Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. 2) Trojan-Clicker.JS.Linker.j AKA ADW_MULTISITE.A A trojan dropper that infects your PC with adware and spyware applications including Internet Optimizer (DyFuCA trojan), Media Access, ClickSpring and Avenue Media |
1) Pest Patrol Trojan Remover (Free trial) 2) McAfee Kaspersy A squared Ewidow Trojan Remover |
| Apropos.exe | Add on for Internet Explorer, installed by POPS, (people on pages), to record internet activities and deliver pop up advertisements. Use Add/remove programmes to delete POP and AM server programmes. Run an anti spyware scanner to delete any components left behind. |
Ewidow Pest Patrol |
| apphelp3.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, it hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| aqadcup.exe | You have the Backdoor.Agent.bg | Pest Patrol Zone labs X-Cleaner Trojan remover |
| ARUpdate.exe | Adroar spyware. |
Ad-Aware SE PC-cillin Pest Patrol McAfee |
| askearth17.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| ATIUPDPL.EXE | Is the TROJ_SMALL.AOS trojan |
Trojan remover(free trial) Trend Micro |
| atrc8parb_.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Au.exe | You have either the Beagle.B AKA Bagle or Alua virus. IMPORTANT This is also a process for Ace Utilities, a compilation of system cleaning utilities |
Bit defender Microsoft Malwaretool |
| Aurora.exe aurora-wise1.exe aurareco.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| av.exe | W32/Alphx worm | McAfee Trojan Remover |
| AVGuard.exe | You have the Netsky.G virus |
Bit defender Microsoft Malware tool |
| avserv.exe avserv2.exe | You have the Sasser virus |
McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy Microsoft Malwaretool |
| Avsynmgr32.exe | You have the Framar trojan, which can stop some Windows and Security processes. Opens port 2345 to allow an attacker unauthorised access to your PC. | TDS 3 |
| Avsynmgr32S.exe | You have the remote access trojan Volac. It can disable security software and windows processes to allow remote access. | Trend Micro |
| B | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| backweb.exe | backweb is used legitimately by logitec, Kodak, Compaq, HP, McAffee, F-Secure, Western Digital, IBM, Hewlett-Packard and Siemens for automatic updates. It has also been used maliciously to secretly download applications. | Pest Patrol |
| bargains.exe | Bargain buddy spyware from Exact advertising that records and analyses your computer activities and delivers advertising pop ups | Pest Patrol McAfee |
| Bbeagle.exe d3dupdate.exe |
You have the worm, Bagle or Bagle.A virus |
Bit defender Microsoft Malware tool |
| belt.exe | SearchV spyware | McAfee PC-cillin Zone Labs |
| birep.exe | 1)VX2 Trojan 2)Binet adware 3)Spyware from Gator. 4) Bispy trojan |
1) VX2 plug in for Ad-aware Trojan Remover 2) Symantec removal tool 3)Pest Patrol 4) Trojan Remover |
| blss.exe | Connected to many spyware and viruses, including Backdoor.Blarul, CBlaster Trojan/dialer/downloader, Trojan/Downloader Dyfuca. | Pest Patrol A2 squared Trojan Remover |
| Bmqnzkg.exe | You have the Randex.BE virus. | McAfee Pest Patrol Microsoft Malware tool |
| bokja.exe | Second thought software that monitors internet activity and delivers pop up advertisements, sometimes referred to as a Trojan | Pest Patrol Trojan Remover |
| bootconf.exe | Global finder browser hijacker, a cool web search variant that redirects search enquiries to its own advertisers websites | CWS shredder |
| bpc.exe | BroadcastPc application that displays videos, usually movie trailers intermittently and without warning. Installed with several programmes. On each start up it will check replace any damaged or deleted files, and check for updated versions. | McAfee Pest Patrol |
| brasil.exe | You have the Opaserv virus, which exploits a vulnerability in the way Windows 95, 98, 98SE and ME verifies network share passwords. Once removed, a microsoft patch is available to prevent future infections from here | McAfee Zone Labs Panda Trojan Remover |
| Bravessentry.exe | A rogue security product BraveSentry. Can come with a large trojan bundle. Cool web search related | Information and removal |
| BUGSFIX.EXE | You have the Loveletter Virus | McAfee Trend Micro Kaspersy |
| bundle.exe bundlelite_westfrontier1001.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups,
installed with some shopping and file sharing programmes, which not only
records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. |
Trojan Remover Pest Patrol |
| bvt.exe | you have the Backdoor.Autoupder virus. | Pest Patrol Trend Micro |
| C | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| cashback.exe | you have the Cashback/Bargainbuddy spyware from eXact advertising. It monitors your browsing habits which prompts pop up advertisements. Can resist removal. | Pest Patrol McAfee |
| cc6p7pug.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Cfgdll32.exe | You have the Randex.BD virus | McAfee Pest Patrol Microsoft Malwaretool |
| Cissi.exe | You have the Cissi.A virus | McAfee Zone Labs |
| cleansahagent.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (free trial) Pest Patrol |
| cloudsim.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| cmd32.exe | You have the P2P.Tanked aka KWBOT.C worm if Cmd shows on the start up list or LOADCFG or SDBOT if Configuration loader shows on the start up list | Trend Micro Bit defender Kaspersy |
| Cmesys.exe | Comes with Gator software, intended to allow free use of software, but it delivers pop up ads according to tracking of your internet activities. Most top end spyware, and some anti virus scanners will delete this for you. | Pest Patrol |
| CNFRM.exe | You have the Mimail.D virus. |
Bit defender Zone labs Microsoft Malware tool |
| conime.exe | You have the BFGhost remote access trojan. Aka Backdoor.DKangel | Pest Patrol Kaspersy TDS 3 Trojan Remover |
| conscorr.exe | You have 1) TrojanDownloader. Win32.Stubby.c which usually is bundles with another virus. Its function is to download more viruses. 2) VX2, abetterinternet trojan. | 1) Pest Patrol A squared Trojan Remover 2)Trojan Remover Ad-Aware SE |
| Csrss.exe | IMPORTANT There is a windows process of the same name which should not be deleted.
Windows NT4, 2000, XP and 2003 uses this file for a part of the operating system. Do not delete it unless you are absolutely sure it is a virus. If you use Windows 95, 98 or ME, or the file path is C:\windows\csrss.exe, you have got one of the many viruses that use csrss.exe. Some are capable of interfering with firewalls and virus scanners. Let Wintask5 Pro help you. Download a Free trial here | McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy TDS 3 |
| Ctfmon.dll | IMPORTANT There is a windows process of a
similar name which should not be deleted. If the process is ctfmon.dll and NOT ctfmon.exe, then you have the Mydoon.B virus-easy to recognise as it opens notepad and displays what appears to be data. Let Wintask5 Pro help you. Download a Free trial here | McAfee Panda Microsoft Malware tool |
| cxtpls.exe | You have the AproposMedia spyware, distributed through peopleonpages.com, it has also been known to be installed by other parasites. | Trend Micro Pest Patrol |
| cyxipjsxdua.exe | Aurora adware, can be very difficult to completely remove. | Removal Instructions |
| D | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| DateManager.exe | A programme for a calendar and time management, also downloads Gator software
to deliver pop up advertising windows. It has been put into computers with a pop up that appears whist surfing, apparently as a result of something you did, there is no 'close window' facility, just an 'ok' button, which then downloads the software. To remove this software, use the Add/remove facility, to delete date manager or Precision time. Run a top quality spyware scanner to remove any bits left behind. |
Pest Patrol |
| dcomx.exe | You have the self-extracting cirebot trojan. | McAfee Panda Trend Micro |
| dbaccess.exe | Is the Derbiz premium rate dialler. It sets itself as the computers default internet connection and hijacks the homepage. Difficult to remove | Pest Patrol |
| dfrgsrv.exe | A rogue anti-spyware scanner, Spyware Quake that is downloaded by a CoolWebSearch trojan that gives false virus or system information. | Information and removal tool |
| directs.exe | You have the W32/Bagle.t@MM virus, aka BAGLE.T and PE_Bagle. T. A file infector virus that also has backdoor capabilities | McAfee Trend Micro Microsoft Malwaretool |
| divx.exe | You have one of a number of possibilities, the most common being 1) Mastak virus or
2) Naldem Trojan. It is also a legitimate process for DivX video compression software |
McAfee Zone labs Kaspersy |
| Djfgucxr.exe | You have the Gluber.B virus. | McAfee Zone labs Panda |
| dllreg.exe | You have the Dumaru.c virus | Pest Patrol McAfee |
| dmserver.exe | Is a component of the Win32.Comet spyware, from Gator | A2 squared Pest Patrol |
| dpi.exe | Spyware component of the DelFin project media viewer. It cannot be removed via Add/remove programmes and does not come with an uninstaller. | Trojan Remover Pest Patrol |
| Dssagent.exe | Allows software developers to send you pop ups. Distributed with Borderbund, and a few other software titles. It constantly connects to the borderbund server, which slows down your internet connection. It is capable of sending information from your computer. If you un install this part, it is likely the software that brought it will not work. There is no un-install application, and add/remove programmes cannot be used. | Pest Patrol |
| dvdkeyauth.exe | You have the dvdkeyauth.exe premium rate dialler. | A2 squared
Pest Patrol Panda |
| dxmpp.dll | A rogue anti-spyware scanner that uses a CoolWebsearch trojan to display false/misleading information to generate sales | Manual removal instructions |
| E | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| e2g23.exe e2g23[1].exe ei.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| emsw.exe | Is Attune help express spyware, from Alsnet Inc. It usually comes with other spyware from the same company. |
Panda Pest Patrol |
| evov.exe | 180 Search assistant. Delivers pop up advertisements based on your surfing habits. Can reinstall itself if incompletely deleted. | Trojan Remover Pest Patrol |
| exec.exe | You have the Death Zone RAT. Aka Executor Trojan. Allows access from a remote PC, it can disable some windows functions including task manager. | Kaspersy AVG McAfee Panda Pest Patrol Trojan Remover |
| explore.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. Used by a number of worms and trojans. Do not mistake this for the legitimate Windows explorer.exe process. Wintask5 Pro will help you. There is a free trial available. |
AVG McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy A squared |
| Explore.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. You have the backdoor trojan Graybird. |
A squared McAfee Trojan Remover Zone labs |
| explored.exe | IMPORTANT There is a windows process of a
similar name which should not be deleted. A component of the W32/Nexiv worm. | McAfee |
| explorer.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. The Windows process is in the c:\windows\System32 folder, if it is anywhere else, you will have one of the many viruses that use this name in an attempt to avoid detection. Use Wintask5 Pro to help you. |
AVG McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy A squared |
| Explorer.scr | IMPORTANT There is a windows process of a
similar name which should not be deleted. If the process is explorer.scr and NOT explorer.exe, you have the Benjamin.A virus. Let Wintask5 Pro help you. Download a Free trial here | McAfee Zone labs |
| express.exe | Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove | Manual removal instructions |
| EZulaMain.exe MMod.exe |
The Ezula software is by TOPText and arrives alongside the Kazza file sharing programme. It not only sends you pop ups, and pop unders, it also hijacks your browser to change certain words in web pages you view into links, which will direct you to an advertisers site. A top level spyware detector will find and delete the spyware. | Pest Patrol X-Cleaner |
| F | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Fash.exe | Is the IBIS toolbar hijacker. It loads the websearch meta search engine, it will also install a number of other applications and can prevent access to some security related web sites. Can be difficult to remove. | Pest Patrol |
| filgmo.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| Firedaemon.exe | You have the NTHack virus. | McAfee Panda Pest Patrol Zone labs |
| fntldr.exe | An advertising programme installed by Gator or a CoolWebSearch variant which can resist removal, creating a 'cannot find fntldr.exe' error message on start up | Pest Patrol CWS shredder |
| Fsb.exe | You have the Yero virus, AKA Fesber. A worm with backdoor capabilities | Trend Micro McAfee |
| FSG_4104.exe | Another one from the gator stables, this one transmits your surfing habits back to the programme vendor, who sells the details to advertisers. Downloaded with file sharing programmes such
as KaZzA, imesh and others. NOTE, disabling or deleting this process will usually prevent the software it came with from working. |
Pest Patrol |
| FVProtect.exe | You have the Netsky.P virus. |
Bit defender Panda McAfee Microsoft Malwaretool |
| G | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| game.exe | Is the W32.Gaze@mm worm, aka Win32.Gaze. Spreads via e-mail | McAfee Zone labs |
| gator.exe | Gator, a form filling application that installs spyware | Pest Patrol Spybot S&D |
| goidr.exe | Another Gator process | Pest Patrol Spybot S&D |
| Gigabit.exe | You have the Bagle.U virus. | McAfee Panda Bit defender Microsoft Malware tool |
| GMT.exe | A Gator product which transmits your surfing habits, and displays
advertisements. This is in return for you using free software. NOTE, disabling or deleting this will prevent the software it came with from working. | Pest Patrol |
| grinstall.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| H | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| HBInst.exe HBSrv.exe |
Installed with Hotbar, an enhancement programme for Internet explorer. It constantly transmits data from your PC (slowing down your internet connection) about your searching habits, and then changes buttons and links on the bar accordingly. A spyware scanner should find and delete the spyware. The web site downloads the programme as soon as you tick the 'I accept' box in the license agreement. | Pest Patrol |
| hellz little spy 1.2.exe hls15.exe |
You have the Helz little spy trojan, a keylogger, which records your key strokes. This one has certainly lived up to its name, it sits in the windows system folder, making its removal difficult. Some spyware scanners can detect it, fewer can delete it. |
Trojan Remover Pest Patrol |
| here.exe here_half.exe | Is the Dsocks.10 Trojan downloader | Ewidow A squared |
| hochkaod3_.exe hqrhil7kg_.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| hxdl.exe | Spyware from the Gator applicaton | Pest Patrol Spybot S&D |
| hxiul.exe | Is a part of the HelpExpress adware made by attune that promotes ink cartridges from its advertisers | Pest Patrol Panda X-Cleaner |
| I | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| ibecdbv8.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| iedll.exe | This can be a number of things 1) a varient of the CoolWebSearch Hijacker 2) Avexp.A a Hack tool 3) DItoon trojan, aka Tooncom |
1) CWS shredder 2)Panda Pest Patrol Kaspersy 3) A squared Pest Patrol Kaspersy Pest Patrol Zone labs McAfee |
| iedriver.exe | Cydoor spyware, aka Turbo download usually installed with programmes from URLBlaze. |
A squared Pest Patrol Spybot S&D |
| IEHost.EXE | Another component of Cydoor, this one will download other malware. | A squared Pest Patrol Spybot S&D Trend Micro |
| IEWERSV.exe | This one can be difficult because it constantly renames itself with random file names. It Comes from Winpop, | X-Cleaner |
| iexplore.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. Iexplorer with a file path of C:\Program Files\Internet Explorer\Iexplore.exe is the genuine article, Iexplore.exe with a file path of anything else is one of the many malware/virus/trojans that use this file name to make removal difficult including Aphexdoor, Banker-AN, Randex, KillAV, CoolWebSearch and RapidBlaster. Let Wintask5 Pro help you. Download a Free trial here | Trojan Remover Zone labs A squared Pest Patrol Spybot S&D Trend Micro |
| infus.exe | Is the Infus premium rate dialler | Hijack This |
| infwin.exe | Is a varient of VX2.transponder/TPS108 spyware | Trojan Remover Ad-Aware SE Pest Patrol |
| installer_marketing12.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| intdel.exe intdel.exe_2 | Component of Internet Delivery software that delivers advertising pop ups | Pest Patrol McAfee |
| Intrenat.exe | IMPORTANT There is a windows process of a
similar name which should not be deleted. DO NOT confuse this with Internat.exe, a windows process. You have the Doomjuice virus Let Wintask5 Pro help you. Download a Free trial here |
Bit defender McAfee Panda Microsoft Malware tool |
| Iosdt.exe | You have a Trojan . It probably arrived with an illegal copy of Windows. To delete it, restart your PC in safe mode, search All files and folders for files beginning with IOSDT, delete them and empty your recycle bin and restart your PC in normal mode. |
Trojan Remover |
| isass.exe | You have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal |
A squared Trojan Remover |
| istsvc.exe | ISTbar adware,can be difficult to remove, Kill the process with Windows task manager before using a scanner |
Trend Micro Ad-Aware SE Pest Patrol |
| J | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| jawa32.exe | Agent.bg trojan | Pest Patrol X-Cleaner Spybot S&D Trojan Remover |
| jdbgmrg.exe | Is the TROJ_DASMIN.B virus, which connects to the web and downloads an adult premium rate dialler. | Trojan Remover Trend Micro McAfee |
| K | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| kazza.exe | If it is located in windows/system (98, ME), Windows/winnit/system (NT, 2000) or Windows/system32 (XP) you have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal |
Trojan Remover A squared |
| keenvalue.exe | Spyware from Gator | Pest Patrol Spybot S&D |
| Kern32.exe Kernel32.exe Krnl32.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. DO NOT mistake Kernel32.dll for a virus, this is the main windows process file. However if you have any of the processes to the left running, you have one of a number of possibilities including Batrans, Epon, Babylonia, Kernal, Hooker or Floodnet viruses. Let Wintask5 Pro help you. Download a Free trial here | McAfee Zone labs A squared Pest Patrol Spybot S&D Trend Micro Bit defender |
| knightseven.10 ii.exe | You have the Backdoor.Knightseven.10, a Remote Access Trojan. Difficult to detect as it can hide from the process list and use random file names in different locations of your PC. | Kaspersy Pest Patrol |
| L | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| L32x.exe | You have the Dumaru.Y or the Dumaru.Z virus. | McAfee Bit defender |
| lmu.exe | Hyperlinker adware from Vertical Theories that turns keywords used on a web page into links directing users to their advertisers. Pages that are saved hold the amended page so can still show links on previously viewed paged even after removal. | Trend Micro |
| loader.exe | CoolWebSearch varient | CWS shredder |
| Lockx.exe | Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove | Manual removal instructions |
| Lsass.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. If the file path is NOT C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP, 2003), then you have one of a number of possible viruses including Windang.worm, irc.ratsou.b, Webus.B, MyDoom.L, Randex.AR, Nimos viruses, Let Wintask5 Pro help you. Download a Free trial here |
AVG McAfee Panda Pest Patrol Zone labs Bit defender A squared Trend Micro and download all critical Windows updates |
| Lsasss.exe | IMPORTANT There is a windows process of
a similar name which should not be deleted. If the task is Lsasss and not Lsass you have the Sassar virus. | McAfee Panda Zone labs Microsoft Malware tool |
| lssas.exe | Is the W32.AGOBOT.RL trojan, |
Trend Micro Microsoft Malware tool |
| M | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Maja.exe | You have the Netsky.H virus. | McAfee Panda Zone labs Microsoft Malware tool |
| mapisvc32.exe | You have the Backdoor.VB.kx trojan, aka KX virus or FPAI adware. | Pest Patrol, Kaspersy |
| mario.exe | Is the mario remote access trojan | McAfee Zone labs Pest Patrol Trojan Remover |
| md.exe | Is the SystemMD virus, a dialler and homepage hijacker | Pest Patrol |
| mfin32.exe | Is the MyFreeInternetUpdate adware | Spybot S&D |
| mmod.exe | Known as Ezula spyware, distributed via many file sharing programmes like KaZaA, Imesh etc. It adds links to their advertisers to web pages, effectively stealing the web space. | Spybot S&D Panda Pest Patrol |
| mostat.exe | Spyware from WurldMedia, tracks internet usage, delivers pop ups and redirects links through its own servers to steal any affiliate fees. | Pest Patrol X-Cleaner |
| msapp.exe | You have the RSBOT trojan | A squared McAfee Zone labs | MSBB.exe | 1800 solutions have a product called n-case, a shopping comparison search engine that gets installed when
you install some free software products. The software produces endless advertising pop ups, but it also tries to start up dial up internet
connections, dramatically slows down your browser, and causes random error messages. | Pest Patrol X-Cleaner Trojan Remover |
| Msblast.exe | You have the Blaster virus, also called Lovsan. | McAfee Bit defender Microsoft Malware tool |
| mscache.exe | Is ISTbar.MSCache spyware from Integrated Search Technologies that monitors internet activity and delivers pop up advertisements. | Pest Patrol |
| msccn32.exe | Is the Win32.Sobig.B@mm (Palyh) virus, which is spread via e-mail claiming to be from support@microsoft.com |
Bit defender Trend Micro Panda Norman anti-virus Microsoft Malware tool | Msckin.exe Mscman.exe |
Comes with the Clientman Internet explorer add on. It directs you to advertiser sites relating to words you type in your search engine. The software is know to cause boot up errors, it collects information from your pc, and even changes the settings in the Zone alarm firewall to ensure it has internet access. | Pest Patrol Panda Kaspersy |
| mscornet.exe | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| mscvb32.exe | Is The Sobig worm. |
Trend Micro McAfee Panda Bit defender Norman anti-virus Microsoft Malwaretool |
| MSCVT.exe | You have the Slideshow virus which spreads via file sharing programmes, KaZzA etc, and AOL instant messenger | X-Cleaner Trojan Remover |
| MSFind32.exe | You have the Cayam virus. | McAfee Zone labs Trojan Remover |
| msgfix.exe | Is either the GAOBOT.AUS, SDBOT.J or SDBOT-QG worms. |
Trend Micro Microsoft Malwaretool |
| Msgsrv32.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. Careful with this one, It is the name of an essential programme in windows 95, 98 and ME, but it only appears in the task list if the programme is 'hung'. If this appears in your task list and you keep getting strange error messages, you MAY have the Deadhat.B virus. To check, reboot your pc in safe mode and do a fully updated virus scan. Let Wintask5 Pro help you. Download a Free trial here |
Panda McAfee Zone labs |
| msiexec16.exe | Is the OPTIX PRO trojan. It is programmed to close down security software every 60 seconds |
A squared Pest Patrol Trojan Remover |
| Msinfo.exe MSInfo.exe |
IMPORTANT There is a windows process of
a similar name which should not be deleted. Do not mistake the essential windows component MSINFO32.exe, (with the '32'). Msinfo.exe is a browser highjack usually picked up from adult sites, a spyware scanner would detect and remove it. MSInfo.exe is the Aladinz.M virus. Let Wintask5 Pro help you. Download a Free trial here | Pest Patrol Zone labs X-Cleaner CWS shredder |
| mslagent.exe | Is either the 1)Wintrim.bn trojan or 2) Slagent spyware, aka MagicControl |
1)
Trend Micro Pest Patrol Trojan Remover 2) Ad-Aware SE Pest Patrol Spybot S&D Trend Micro | MSlaugh.exe | You have the Blaster virus, also called Lovsan, which exploits a Windows vulnerability. Unpatched machines can be infected just by being connected to the internet. | Update your windows. McAfee Bit defender Microsoft Malware tool |
| msmc.exe | Is the Win32.Small.i ,or Sibco Trojan or Clientman parasite |
Ad-Aware SE Pest Patrol Spybot S&D Trend Micro |
| msmgt.exe | Total Velocity spyware, it monitors internet activity, reports back to its servers and delivers pop up advertisements | Pest Patrol Spybot S&D Trend Micro |
| msmsgri32.exe | You have the RANDEX.D worm which also carries a trojan |
Trend Micro
A squared Pest Patrol Microsoft Malwaretool | MSMQS.exe | You have the Freefors virus. | Trend Micro |
| MSN.exe | IMPORTANT There is a MSN process of
the same name which should not be deleted. The genuine MSN file is MSN/MSNcore/MSN.exe, if it is anywhere else, its one of a few possible nasties. Wintask5 Pro can help you. Download a Free trial here |
Trend Micro
A squared Pest Patrol Bit defender McAfee |
| Msnet.exe | You have the Mockbot.A Worm. or SDBOT trojan | X-Cleaner Trojan Remover |
MSpatch.exe | You have the Blaster virus, also called Lovsan. which exploits a Windows vulnerability. Unpatched machines can be infected just by being connected to the internet. | McAfee Bit defender Microsoft Malware tool |
| msrexe.exe | Is the SubSeven.2 remote access trojan. A widely used hacking tool with more than 100
variants. It hooks into the computer system in 4 ways, uses random file names and
each installation is slightly different, making it difficult to remove. It gives complete control of your computer to a cracker. |
Trojan Remover A squared |
| mssearchnet.exe | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| mssmmspgr.exe | You have the W32.Kelvir.AJ worm which spreads via by sending the message 'lol, look at this' in the MSN instant messenger. it will drop a variant of the sdbot worm, which will itself attempt to spread as well as opening abackdoors to your PC, terminate processes, steal activation keys and install a keylogger | Trojan Remover Trend Micro |
| mssvc32.exe | Is the W32/Gaobot.WU trojan. aka AGOBOT.ZJ, Win32:Gaobot-129;, Worm/Agobot.PJ, W32/Gaobot. It exploits a windows vulnerability, disables many anti-virus and firewalls, prevents access to security web sites, launches DOS attacks on web sites, steals passwords. |
Trend Micro Kaspersy McAfee X-Cleaner Pest Patrol Microsoft Malwaretool |
| mssys.exe | Is either 1) CWS.Svcinit Hijacker if your searches are redirected to xwebsearch.biz 2) Vanta.A Trojan if MsSystem is added to start up 3) MYSS.B trojan if mssys is added to start up |
1) CWS shredder Pest Patrol 2) Trend Micro 3) Zone labs McAfee |
| Msvchost.exe | IMPORTANT There is a windows process of
a similar name which should not be deleted. You have the Xombe virus, also known as Trojan.Xombe, Downloader-GJ. Do not 'end process' or delete the windows file svchost.exe by mistake. Let Wintask5 Pro help you. Download a Free trial here | Kaspersy Bit defender Pest Patrol |
| msvxd.exe | Is the W32/Datom-A virus |
Trend Micro McAfee Panda |
| msxmidi.exe | Trojan and Hijacker, CoolWebSearch variant | Pest Patrol CWS shredder |
| Mswkwrh.exe | You have the Anavol hack tool, which may be installed with the Volac trojan | Norton |
| Musirc4.71.exe | You have the Randex.Q virus. | Zone labs Microsoft Malware tool |
| mwsoemon.exe | MyWebSearch Hijacker. Can be difficult to remove. | Spybot S&D Trend Micro Antispy |
| mwsvm.exe | Is either 1) ADW_SCANPORTAL.A Adware. It monitors internet activity and delivers pop up advertisements. 2) SeekSeek BHO |
1)
Trend Micro 2) Pest Patrol Spybot S&D |
| N | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Nail.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| ncompat.tlm | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| netd32.exe | Is the RANDEX.F virus. | McAfee Trend Micro Microsoft Malware tool |
| NetMon.exe | You have the Mimail.M virus | McAfee Bit defender Pest Patrol Zone labs Microsoft Malware tool |
| NetWatch.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. This is a windows file name in windows 95, 98 and ME for a programme which allow you to view shared files and folders on one screen, but is only shows in the task manager if you have specifically opened the programme. It is also a file name for the Mimail.C virus. Let Wintask5 Pro help you. Download a Free trial here | McAfee Pest Patrol Bit defender Microsoft Malware tool |
| netwrap.dll | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| NJG40.exe | You have the PWSteal,Bancos.D virus. | Trojan Remover X-Cleaner |
| nls.exe | Can be either 1)Navisearch adware from eXact advertising, the makers of BargainBuddy. 2)Webrebates spyware aka Win32.Agent.y |
1) Spybot S&D 2) Zone labs Pest Patrol Kaspersy |
| NTOSA32.exe | You have the Anig virus. | McAfee Zone labs |
| ns15bmii.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| nssys32.exe | Is the nssy32 trojan, or netshagg adware from SJB enterprises which is distributed with bundles of malware and via mynetprotector.com, an apparent security related website. | A squared Pest Patrol Spybot S&D |
| nstask32.exe | Is The RPCSdbot.B virus, aka randex.e, and Spybot.worm.md | Zone labs Pest Patrol Kaspersy Microsoft Malware tool |
| nsupdate.exe | Is the nsupdate trojan/dialler, aka Dialer.Lusval |
McAfee Pest Patrol |
| NTOSA32.exe | Is the Anig worm. It has backdoor capabilities to allow remote access and can record keystrokes | removal tool Trend Micro |
| nvctrl.exe | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| Nwiz.exe | IMPORTANT There is a process for Nvidia graphics card drivers (2002 onward), of the same name You may have the Gaobot.ZX or Agobot virus which hide behind a process used by a driver for the Nvidia graphics card. If you do not have a a Nvidia card, you will have the virus. Let Wintask5 Pro help you. Download a Free trial here | McAfee Pest Patrol Microsoft Malwaretool |
| O | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| offerdownline.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| omniscient.exe | Is a Search assistant for BlazeFind spyware, it is also known as a trojan. Uses the explorer.exe file, improper removal can cause serious damage. |
Panda Pest Patrol Trend Micro |
| onoes.exe | Is a varient of the Sdbot trojan, AKA Rbot. | Kaspersy Pest Patrol Bit defender Microsoft Malware tool |
| onsrvr.exe | Is either 1)OnWebMedia spyware, aka Win32.SubSearch.b trojan 2) SearchSeekFind spyware |
1) Pest Patrol Spybot S&D A squared 2) Pest Patrol Ad-Aware SE |
| open_me.exe | you haveW32 spybot worm | Kaspersy Panda McAfee Pest Patrol |
| optimize.exe | Is the Optimize premium rate dialler, aka DyFuCA trojan. Often installed alongside or by trojans. | Kaspersy Panda Pest Patrol Trojan Remover |
| Outlook.exe | IMPORTANT There is a Windows process of the same name which you should not delete If the full filepath for this process is C:\Windows\Outlook.exe or C:\WinNT\Outlook.exe then it is likely you have the Mimail.Q virus. Let Wintask5 Pro help you Download a Free trial here | Kaspersy Panda McAfee Microsoft Malware tool |
| P | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| P2P Networking.exe | Is P2P Networking spyware, aka PPNETWORK.A. Installed with File sharing programmes | Pest Patrol Trend Micro |
| PCSvc.exe PGMonitr.exe |
Installed mainly with KaZzA, not only is it adware, it is also responsible for slowing down PC's and causing errors on boot up. however it is
likely to
prevent your KaZzA programmes working if you delete it. If you want to delete this adware, you need to follow this procedure- In the Control panel (Start/settings/control pannel), click Add/remove programmes, and delete any programme with Delfin or PromulGate in the filename, then reboot your PC. Click start, then search, click all files and folders. Then type pcsvc.exe into the search box, next click more advance options and make sure the search hidden files and folders is ticked, click search. Delete any folder remaining. Run a fully up to date spyware scanner to find any remaining components. |
Ad-Aware SE Pest Patrol Spybot S&D |
| Penis32.exe | You have the Blaster virus, also called Lovsan. | McAfee Bit defender Microsoft Malware tool |
| pi1.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| Play_Game.exe | Is the Backdoor.Win32.Prorat.19 trojan. | McAfee Bit defender A squared Trojan Remover |
| Poller.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| powerscan.exe | Is powerscan spyware. aka ISTbar | Pest Patrol Trend Micro |
| PrecisionTime.exe | Gator software
to deliver pop up advertising windows. It has been put into computers with a pop up that appears whist surfing, apparently as a result of something you did, there is no 'close window' facility, just an 'ok' button, which then downloads the software. | Pest Patrol X-Cleaner |
| prizesurfer.exe | Is prizesurfer spyware, aka Win32.RCSync trojan. | Pest Patrol Bit defender Panda McAfee |
| prmt.exe | You have spyware from OpiStat, aka Netrating and Webhancer. |
Trend Micro Ad-Aware SE Spybot S&D |
| prmvr.exe | Is YahooStock from adtomi, known for producing difficult to remove spyware |
Ad-Aware SE Pest Patrol McAfee |
| prutpct.exe prutsct.exe pruttct.exe ptech.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| Q | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| q17i9a4j.exe qlep5ad6.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| R | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Rabbit.exe | You have the Mimail.S virus. | McAfee Panda Zone labs Microsoft Malwaretool |
| rb32.exe | Is the RapidBlaster Hijacker. Removal is sequence specific, otherwise it detects an un-installation attempt and will copy itself to a differently named file. | Removal tool Pest Patrol Spybot S&D |
| RCSync.exe | Installed mainly with software from Pirzesurfer.com who offer prize draw incentives for shopping online at certain shops, and a few other 'free' or file sharing programmes. It also delivers a stream of pop up ads all the time you are connected to the internet. |
Pest Patrol Bit defender Panda McAfee |
| RegDefend-v2.000.exe | Is the Trojan.Downloader.Istbar.JA |
Bit defender Kaspersy |
| Regsysw.exe | You have the Wilsef virus. | McAfee |
| rk.exe | NetSetter/Marketscore variant from Relevant Knowledge. It redirects and analyses all your web traffic, it even descrambles packets sent via SSL (secure, encrypted) by adding a trusted root certificate. Difficult to completely remove and it can hide when task manager opens. Use Wintask5 Pro | Trojan Remover Pest Patrol |
| run32dll.exe |
IMPORTANT There is a Windows process with a
similar name which you should not delete You may have one of the following 1) Ftp_Ana trojan, if Winstro appears on the start up menu. 2)Pal PC spy keylogger if Klp appears on the start up menu. 3)Gates of Hell 1.2 remote access trojan, aka Gatehell | 1)
Trend Micro McAfee 2) Anti-keylogger 3) Pest Patrol Kaspersy A squared Trojan Remover |
| rundll.exe |
IMPORTANT There is a Windows process of the same name which you should not delete Is a Windows process in the 95, 98 and ME versions if the file path is C:\Windows\Rundll.exe In Windows XP, 2000 or a different file path, it will be one of the following. 1) Loxoscam trojan. 2) Backdoor. schoolbus.B trojan 3) Agobot worm if Windows32 shows on the start up list. 4) Hako trojan with a start up entry of Wndows update. 5) Huya worm with a start up entry of RundllSvr |
Trojan Remover will detect, remove and repair Windows for all these malware. Free trial is available. |
| Rundll16.exe | Is used by many worms, trojans and malware. here are the most likely. BrowserAid adware. RDLL backdoor trojan. Sobot.F trojan. Domwis trojan. Wootbot.H worm. Subseven 1.9 trojan. PSW.M2 password stealer. Fenster trojan. W32/oror.C Damaging mass mailing worm Due to the number of possibilities, scan with a variety of virus/trojan/malware applications. | Pest Patrol Kaspersy A squared Trend Micro McAfee TDS 3 Panda Ad-Aware SE Spybot S&D Bit defender Trend Micro Trojan Remover |
| Rundll32.exe | IMPORTANT There is a Windows process of the same name which you should not delete The windows process Rundll32.exe usually only appears in the task manager if you are having problems with your pc, if it constantly, or regularly appears on your process list, you should reboot in safe mode and do an up to date, or online virus scan as you may have one of a number of viruses including Miroot.Worm aka Legemer.Worm, or Sanker. Let Wintask5 Pro help you. Download a Free trial here |
McAfee Panda Zone labs Kaspersy |
| ruxdll32.exe | Is a mass mailing Mapson.D worm. | A squared Panda Zone labs |
| S | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| saap.exe sais.exe. salm.exe | Is spyware from 180Search Assistant aka n-case, AdLogix and Win32.IstBar.j . It monitors your internet activities, sends the details for their analysis and delivers advertising pop ups. Can be difficult to remove. | A squared Pest Patrol Panda Kaspersy Spybot S&D Trend Micro |
| sacc.exe | SurfAccuracy adware. It records search enquiries and delivers advertising pop ups | Ewidow Pest Patrol A squared |
| SAHAgent.exe sahagent-cdt1004.exe sahdownloader.exe sahhtml.exe sahpackage.exe sahuninstall_.exe |
ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| saie.exe | Is the 1) DyFuCA Internet Optimizer Hijacker, aka Active Alert, All-In-One Telcom, Proclaim Telcom, TrojanDownloader.Win32.Dyfuca 2) Spyware from 180 solutions, see saap.exe above. |
Trojan Remover A squared Pest Patrol Panda Kaspersy X-Cleaner |
| satmat.exe | Is the Transponder/MSView parasite, now called abetterinternet from DirectRevenue, a company known for producing difficult to remove applications. | Trojan Remover A squared Pest Patrol Ad-Aware SE |
| SaveNow.exe Save.exe |
This can show as SAVENOW, SAVE, WHENUSAVE, SAVENOW.EXE or SAVE.EXE. This programme records what you type into search engines and send you advertising pop ups, lots of them, related to the sites you visit. | Pest Patrol X-Cleaner A squared Ad-Aware SE |
| scam32.exe | Is the Sircam virus which spreads via e-mail. It can delete files from the hard drive, prevent processes from running, and use all available free space on a PC. | removal tool Trend Micro McAfee Panda |
| ScardSvr32.exe Navpw32.exe |
You have the Femot.Worm or MoFei.worm aka WORM_MOFEI.A or B virus. | Trojan Remover McAfee Zone labs |
| ScrSvr.exe | You have the OPASERV virus | McAfee Panda Bit defender Trojan Remover |
| SCVHOST.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete You have one of the many viruses that use this name, the most detected being Sdbot.Nor Gaobot. DO NOT confuse the virus SCVHOST.exe with the Windows process SVCHOST, which may appear several times. Let Wintask5 Pro help you Download a Free trial here | McAfee Panda Kaspersy Antivirus Bit defender Zone labs Microsoft Malware tool |
| sd.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| SearchUpdate33.exe | Is the SearchSquire spyware application | Pest Patrol A squared Trend Micro Ad-Aware SE |
| seeve.exe | A variant of media-motors adware, referred to as a trojan in some parts of the web. Re-installs is removed with scanners | Manual removal instructions |
| service.exe |
IMPORTANT There is a Windows process with a
similar name which you should not delete Do not mistake this dangerous process for the legitimate Windows process services.exe 1) Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. 2) Win32.Raleka worm. 3) Sdbot trojan. |
1) Trojan Remover (Free trial) Pest Patrol 2) McAfee Windows Patch 3)Trojan Remover |
| Services.exe | IMPORTANT There is a Windows process of the same name which you should not delete Careful with this one, in Windows NT4/2000/XP/2003, services.exe is a major player in the Windows system, which has a file path of C:\WINNT\System32\Services.exe or C:\Windows\System32\Services.exe, dependent on which Windows you run. The Netsky virus also uses this process name, with a file path of C:\WinNT\Services.exe or C:\Windows\Services.exe, if you have Windows 95, 98 or ME and this task is running, you will have the virus. Let Wintask5 Pro help you, Download a Free trial here | McAfee Panda Bit defender Microsoft Malware tool |
| Servics.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete You have the Xibo virus aka Backdoor.XLBH.b trojan. DO NOT confuse this with the windows process services.exe which should be present with the Windows NT4/2000/XP/ systems. Let Wintask5 Pro help you . Download a Free trial here | Trojan Remover A squared Kaspersy |
| sexy.exe | You have one of a number of viruses, including Linong, Pkasa and Ainjo | McAfee Zone labs |
| skytown.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| soap.exe | Is System Soap Pro, cleaning software. The free version also installs known spyware applications ZipClix and Httper | Pest Patrol Ad-Aware SE X-Cleaner |
| spoler.exe | You have the Randex.J virus. |
Trend Micro Zone labs Microsoft Malware tool |
| Spoolsrv32.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete You have the Gaobot virus. DO NOT confuse this process with the Windows processes Spool32.exe or Spoolsv.exe Let Wintask5 Pro help you Download a Free trial here |
Panda McAfee Microsoft Malware tool |
| spyaxe.exe.exe | A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. | Information and removal |
| SpyFalcon.exe | A rogue anti-spyware scanner that uses a CoolWebsearch trojan to display false/misleading information to generate sales | Manual removal instructions |
| spywarestrike.exe | A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. | Information and removal |
| spywarequake.exe | A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. | Information and removal tool |
| sr.exe | A rogue anti-spyware scanner Winfixer or SysProtect that is downloaded by theVundo trojan that gives false virus or system information. | Information and removal |
| start.exe | Is Secret-Crush spyware/Hijacker | Pest Patrol Ad-Aware SE |
| Stcloader.exe | This is part of an 'add on' for the Internet explorer toolbar, from 2nd-thought.com. It downloads into your pc, software and advertising tool bars without informing you. It may also add the following processes from its partners. ClrSchP038, MWSVM, SLMSS, StatBlaster, STC, UpdateStats. | X-Cleaner Pest Patrol |
| Susp.exe | Is the Transponder/MSView parasite, now called abetterinternet from DirectRevenue, a company known for producing difficult to remove applications. | A squared Pest Patrol Ad-Aware SE Trojan Remover |
| svc.exe | Is Clientman spyware. aka Madfind |
Trend Micro Pest Patrol Panda Kaspersy |
| Svch0st.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete If in-between the 'h' and the 's' is the number '0', rather than the letter 'o', as in the windows process svchost.exe then you have the Graybird virus. Let Wintask5 Pro help you Download a Free trial here | Trojan Remover McAfee |
| svchost.exe | IMPORTANT There is a Windows process of the same name which you should not delete Many viruses hide behind the windows process svchost.exe, which may appear in your task list several times Important things to consider are- this process is in Windows 2000/XP/2003 only. If you use Windows 95, 98 or ME and this process shows in your task list, it is likely you have a virus. If the process file path is NOT C:\WinNT\System32\Svchost.exe or C:\Windows\System32\Svchost.exe then it is likely you have a virus. Let Wintask5 Pro help you Download a Free trial here |
Trojan Remover Kaspersy Bit defender Zone labs Panda McAfee |
| svchosts.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete Do not mistake this process with svchost (without the extra 's'), You have one of a number of Trojans including - Fructa, Spybot.GQ, Sdbot, Agobot or Faxbat | Pest Patrol A squared Trend Micro Kaspersy Antivirus Panda Spybot S&D Trojan Remover |
| Svchost32.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete You have a virus which could be one of a few, including including Goabot, Zcrew, Deborms.C, Mimail.J, or Paylap. Let Wintask5 Pro help you Download a Free trial here |
Panda Zone labs Kaspersy Microsoft Malware tool |
| svcmcrv12.exe | Is the Win32.Delf.cr trojan downloader | Ewidow A squared Trojan Remover |
| svcproc.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| Svhost.exe | IMPORTANT There is a Windows process with a
similar name which you should not delete You have a Trojan, usually picked up from file sharing programmes or pirate software. It can also be seen in the task manager as numbers and letters like 687AF68632. For some strange reason, not many anti virus scans pick this one up. Click End process. To delete it, find the file by typing svhost into the search box, (start/search), then delete all the files found. Reboot, and make sure it has not reappeared. Mydoom.I, SDBot and Rbot worms also uses a file with this name. Let Wintask5 Pro block/delete this for you. Download a Free trial here |
Trojan Remover A squared TDS 3 McAfee Microsoft Malware tool |
| SyncroAd.exe | Is Syncro ad spyware, removal can be difficult. It is a child process of the file winsync.exe which re-installs itself. To prevent re-installation use Task manager (ctrl, alt and delete keys altogether) right click on winsync and select end process tree prior to removing the files with a malware scanner or manually | A squared Spybot S&D Trend Micro Pest Patrol |
| Syscfg32.exe | You have the Kwbot.S virus. | Trojan Remover McAfee |
| sysfit.exe | Is Adshooter/searchforit BHO, aka Trojan.Win32.StartPage.ey | A squared Pest Patrol Ad-Aware SE Zone labs Kaspersy Trojan Remover |
| Sysload32.exe | You have the Mimail.E virus. | McAfee Panda Pest Patrol Microsoft Malware tool |
| sysprotect.exe | Sysprotect, an rogue application installed by the Vundo trojan shows false warnings that resemble the Windows Security Center, stating the PC is infected with the Bloodhound or Blackworm virus and system crippling errors, to trick the user into buying the program | Information and removal instructions |
| SysMonXP.exe | You have the Netsky.Q virus. | McAfee Panda Pest Patrol Microsoft Malware tool |
| SYP.exe | A rogue product SysProtect. Downloaded by the Vundo trojan that gives false Blackworm/Bagle virus or system information. | Information and removal tool |
| System.exe | IMPORTANT There is a Windows process of the same name which you should not delete You may have one of the many viruses that uses Windows system.exe in an attempt to avoid detection, and make removal difficult, like Revird, Mitglieder.C, Tuxder, Ciador viruses.If you are concerned you may have a virus, disable system restore in windows ME and XP, reboot in safe mode and do an updated virus scan. Let Wintask5 Pro help you Download a Free trial here | TDS 3 Kaspersy Bit defender Zone labs Pest Patrol Panda McAfee |
| system32.exe | Used by a number of trojans/viruses including Agobot, Backdoor.IRC.BOT, Kitro Kwbot logpole, netdevil, Rbot wootbot due to the wide range of possibilities, it is recommended a range of virus and trojan scanners are used. |
Pest Patrol Trend Micro Spybot S&D TDS 3 A squared Panda Bit defender Trojan Remover |
| Sysload32.exe | You have the Mimail.E virus. | McAfee Panda Pest Patrol Microsoft Malwaretool |
| systb.exe | TrojanDownloader.Win.32, OneClickNetSearch AKA trojandropper.Win32.Delf.av, BHO3Lib and IEPLUGIN. A Browser Helper object. |
Kaspersy Pest Patrol |
| Systray.exe | IMPORTANT There is a Windows process of the same name which you should not delete There are a few viruses that hide behind the Windows SysTray.exe process, including Mutebot. A fully updated virus scanner would find them. Let Wintask5 Pro help you Download a Free trial here | TDS 3 Bit defender Pest Patrol |
| T | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| TaskBar.exe | You have the Frethem.L virus. | McAfee Bit defender |
| TaskMon.exe | IMPORTANT There is a Windows process of the same name which you should not delete Taskmon.exe is a process in Windows 98 and ME only, If you have any other operating system and it shows in the task manager, it is likely you have either Novarg.A, Mydoom or Mimail.R virus, Let Wintask5 Pro help you Download a Free trial here |
Bit defender McAfee Microsoft Malware tool |
| tb_setup.exe | Is the Huntbar parasite | Spybot S&D Trojan Remover |
| Teekids.exe | You have the BLASTER.C virus, aka Lovesan and MSBlast. |
Panda Zone labs Trend Micro Microsoft Malwaretool |
| tibs3.exe | Is the Tibs adult content premium rate dialler, usually installed by the Small.SO trojan | Trojan Remover Trend Micro |
| trickler.exe | A process related to Gator software which monitors internet activity and delivers pop up advertisements. | A squared Spybot S&D Pest Patrol Ad-Aware SE |
| ts.exe | You have either 1)TimeGluk trojan, which appears to do nothing more than randomly change the time/date. 2) Travelling Salesman spyware. 3) BAT.Mumu.B, a collection of hacking tools and malicious codes. |
1) To deactivate - copy this to your clipboard KILLTIMESHAG 2) X-Cleaner 3) Trend Micro TDS 3 |
| ts2.exe tsl.exe tsm2.exe | Is either 1) Travelling Salesman spyware. 2) Target Saver adware, aka TSUpdate trojan downloader. |
1) X-Cleaner 2) Pest Patrol Kaspersy Trojan Remover |
| tsadbot.exe | Is Timesink adware from conducent, installed alongside various freeware, removing the freeware will leave behind the timesink components to monitor internet activities and deliver pop ups. | Pest Patrol Ad-Aware SE |
| Tskmg.exe | You have the Warpigs.C aka Spyboter virus, or the SDBOT.GEN trojan | Trojan Remover X-Cleaner |
| Tvm.exe | Is TVmedia search hook, from totalvelocity.com. It hijacks your browser, delivers pop ups and cause system crash when Windows service pack 2 is installed. Is is bundled with other parasites or by active x downloads. Can be difficult to remove because it hooks into the windows process explorer.exe | Microsoft have a removal tool for XP users here Ad-Aware SE Pest Patrol can remove it in Safe made or by ending the explorer.exe process first. |
| tvmd.exe tvtmd.exe | Is Memery meter adware from totalvelocity.com. it will not uninstall whilst these processes are running, so either start PC in safe mode or end process tree with task manager or Wintask5 Pro, get a free trial here before running scanners to remove it. |
Ad-Aware SE Pest Patrol |
| U | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| u6f6uftuc_.exe uabal85u.exe ucmoreiex.exe umqltg4cl_.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| uacupg.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| UPD.exe | Gets installed with screensavers like Capture Osma, StripSaver, VirtualGay, VirtualGirl and VirtualGuy, remove it with a fully updated, top end spyware scanner. | Pest Patrol Adware SE |
| updinstall.exe | Is the running process for the BM2 spyware. From the NicTec stable, known for difficult to remove software. | Spybot S&D |
| update.exe | Is used by many malware/trojan/virus programmes, including - 1) Advsearch adware. 2) AproposMedia adware. 3) xxxtoolbar adware. 4) Adroar adware. 5) Autotroj-C trojan. 6) Bookmark express adware. 7) CoolWebSearch.msupdate Hijacker. 8) CoolWebSearch.sys Hijacker 9) Delf-fn Trojan. 10) Forbot trojan. 11) Gaobot.AO worm. 12)IEDriver adware. 13) Israz trojan. 14) Japanese key logger Keylogger. 15) NSupdate premium rate dialler. Let Wintask5 Pro help you Download a Free trial here | 1) Pest Patrol 2)Spybot S&D Pest Patrol 3) Spybot S&D Pest Patrol Panda 4) A squared Spybot S&D Pest Patrol Trend Micro 5) Windows security 6) X-Cleaner 7&8)Spybot S&D CWS shredder 9) A squared 10) X-Cleaner Trojan Remover 11) Trend Micro Microsoft Malware tool 12) A squared 13) Trend Micro 14) Pest Patrol Anti-keylogger 15) Pest Patrol |
| updater.exe | Is connected with a number of malware applications- 1) Advsearch Adware. 2) Winshow Hijacker. 3) CoolWebSearch.msupdater hijacker. 4) Navhelper adware. 5) Scratch and win keylogger. 6) Aureate Group Mail spam generator. 7) Ehks keylogger. 8) Ashley trojan. |
1) Pest Patrol 2) A squared 3) CWS shredder 4) Pest Patrol Trend Micro 5) Pest Patrol Anti-keylogger 6) Pest Patrol 7)Anti-keylogger Pest Patrol 8) Pest Patrol A squared |
| Updmgr.exe | Software installed with file sharing programmes, most notably with KaZzA. Produces pop up advertisements when connected to the internet, but it also slows down your internet connection, can cause boot up errors and Internet Explorer to crash. Deleting this file will prevent KaZzA software working. If you want to delete it, click start, then run and type msconfig, click the Start up tag, then disable UPD.exe restart your pc, and restart your PC, click Start and search, type updmgr and search, remove all files found. | X-Cleaner Pest Patrol |
| Uprootkit.exe | You have the UpRootKit virus. | Pest Patrol Trojan Remover |
| uvv211ra.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| UWFX5LP_0001_0715NETINSTALLER.EXE UWFX5LP_0001_0614NETINSTALLER.EXE UWFX5LP_0001_0802NETINSTALLER.EXE UWFX5LP_0001_0803NETINSTALLER.EXE | Is Winfixer 2005. Pop ups delivered by a trojan, (the latest being Vundo) install this application which will suggest security threats and critical errors exist, and requests $39.95 to fix them. | Manual removal instructions |
| V | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| vp9inkbd.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| vsmon.exe | If the file location is windows/system32/zonelabs/vsmon.exe or Programme files/ zonealarm/repair/vsmon.exe it is the truevector service for Zone alarm firewall , if however the file path is windows/system32/vsmon.exe or you do not have the zone alarm firewall installed then you have the Win32.Rbot.GE worm | A squared Pest Patrol Kaspersy Microsoft Malware tool |
| Vxd32v.exe | You have the Dumaru virus. | Trojan Remover Zone labs McAfee |
| W | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Warm.scr | You have the Scold virus. |
Bit defender McAfee |
| wast.exe | Is either 1) TrojanDownloader.Win32.VB.ah trojan 2) Grokster adware. | 1) A squared Pest Patrol 2) Pest Patrol Spybot S&D |
| Wapicc.exe Wapisu.exe Wapisvit.exe Wcpcc.exe |
See wniservn.exe. | |
| web.exe | You have either - 1) W32.Gokar worm. 2) Coolwebsearch parasite | 1)
Bit defender Trend Micro 2) CWS shredder |
| WebAssist.exe | Ad serving software from 180Solutions, delivered with many free applications and file sharing programmes. A reputable spyware scanner will delete this. | Trojan Remover Pest Patrol |
| Webdev | Is an IRC DDoS bot, which allows an attacker full control of your computer | Free online scan at
Trend Micro . Then update Windows to prevent re-infection |
| webrebates.exe | Is Webrebates advertising programme, aka ebates money maker and HackTool/Jkill.A | Spybot S&D Panda Pest Patrol |
| webrebates0.exe webrebates1.exe | Is adware from Toprebates | Pest Patrol Panda Kaspersy Trend Micro |
| WHAgent.exe | You have webhancer installed, it comes packaged with some free or cheap software. It send information relating to
your surfing back to a central computer, in addition to being the cause of slow internet performance, as the outgoing information
hogs your
system, many boot up problems, and 'illegal operations' messages for 'whagent'. If you delete the file hoping it will just go away, it will prevent you connecting to the internet, or cause endless crashes. If this happens, you will have to reinstall the webhancer software, and try again. |
Spybot S&D Adware SE Pest Patrol X-Cleaner Trojan Remover |
| win-bugsfix.exe | Is the Loveletter virus, aka Iloveyou. Distributed by e-mail it will overwrite files with the following extensions VBS, VBE, JS, JSE, CSS, WSH, SCT, HTA, JPG, JPEG, MP3, and MP2. |
Panda Bit defender Zone labs |
| win_upd2.exe | Is the W32.Beagle.AO worm which has Bagle.A trojan attached |
Trend Micro Panda Kaspersy Microsoft Malwaretool |
| win32.exe | You have either- 1) ISRAZ.A worm, if win32 appears on the start up list. 2) W32.Mugly worm, if winprotect appears on the start up list 3) Troj/StartPa-GH trojan, if win32.exe shows on the start up list. Please note- Some games and movie players also are known to use win32.exe |
1)
Trend Micro Kaspersy 2) Trend Micro Kaspersy Zone labs Trend Micro |
| win32us.exe | Is either - 1) All in one telecom adult content dialler. 2) Dulca trojan. |
1)Spybot S&D Adware SE Pest Patrol 2) Trend Micro Kaspersy Zone labs |
| winactive.exe | Is the Lop/Active hijacker/keylogger. Re-sets homepage to
active-max.com, mysearchnow.com, searchwebnow.com or find-quick.com |
Trojan Remover Pest Patrol Panda Adware SE |
| winad.exe winadalt.exe winadctl.exe winadctlinstpack.exe WinAdTools.exe | Is the WinAd parasite, aka Win Advert Client. It Hijacks the browser and can connect to a premium rate number. | Spybot S&D Pest Patrol Trojan Remover |
| Winbackup.exe Winfi1e32.exe |
You have the Mertian virus. | McAfee |
| WINdirect.exe | Is a variation of the BAGLE virus, aka Mitglieder.M Trojan. |
Trend Micro Panda Pest Patrol Microsoft Malware tool |
| windows.exe | Is one of a number of parasites. 1) if windows is on the start up list, it will be either the ALADINZ.D, bobbins or Kazmor Trojans. 2) forbot-br trojan, if NDIS Adapter appears on the start up list. 3) PWS.QQPass.E password stealing trojan, aka QQDragon 4) RBOT worm if either Windows IT update or windows update show on the start up list. |
1) A squared TDS 3 Ewidow Trojan Hunter Trojan Remover 2) Trojan Hunter Ewidow TDS 3 Trojan Remover 3)Trojan Remover Zone labs McAfee 4) Trend Micro Panda Microsoft Malware tool |
| WinFixer2005ScannerInstall[1].exe | Is Winfixer 2005. Pop ups delivered by a trojan, the latest being Vundo, install this application which will suggest security threats and critical errors exist, and requests $39.95 to fix them. | Manual removal instructions |
| wingo.exe | Is the Bagle.at virus. |
Trend Micro Panda Kaspersy |
| wininetd.exe | Is the Winet Trojan. | McAfee Pest Patrol Trojan Hunter |
| wininit.exe | Yiu have either - 1) WOLLF.16 2) Bymer . |
1) Trojan Remover Trend Micro A squared 2) McAfee A squared Trojan Remover |
| Winkdrj, Winkezz, Winkhgw, Winkhr, Winkhy, Winklvr, Winkly, Winkmc, Winknk, Winknsj, Winkoc, Winkoq, Winkrlg, Winksuc, Winktn, Winkvhc, Winkxd, Winkxjm, Winkyb, |
You have the Klez virus | McAfee Panda Bit defender Trojan Remover |
| winlock.exe | Is either - 1) WinCommX 2) DOS-Winlock trojan. | 1) Spybot S&D 2) Trend Micro |
| winlogin.exe | Can be one of the following viruses Agobot.IX. Randex.E Spybot.C |
Trend Micro Kaspersy Panda Bit defender |
| WinLogon.exe | IMPORTANT There is a Windows process of the same name which you should not delete WinLogon.exe is a process for Windows NT, 2000, XP or 2003, with a file path of C:\WinNT\System32\Winlogon.exe or C:\Windows\System32\Winlogon.exe., dependent on which Windows you have. Winlogon.exe with a file path of C:\WinNT\Winlogon.exe or C:\Windows\Winlogon.exe , or Windows 95,95 or ME then you have the Netsky virus. Let Wintask5 Pro help you Download a Free trial here |
McAfee Panda Bit defender Microsoft Malware tool |
| winmain.exe | Is either- 1) Winmain BHO. 2) HTASploit trojan. | Pest Patrol |
| WinMgr32.exe | You have the Mimail.P virus. | McAfee Pest Patrol Bit defender Microsoft Malware tool |
| WinMS05.exe_, | Is the Exploit.Based.Worm.Gen, also known as Exploit.BindShell and Win32:Trojano-2260 |
Bit defender AVG Avast |
| Winnet.exe | Commonname, browser Helper object that hijack the browser and delivers advertisements, WARNING - Improper removal of these files can result in you not being able to connect to the internet. | Pest Patrol A squared Spybot S&D Trojan Remover |
| winppr32.exe | You have the Sobig.F virus. |
Trend Micro Panda Bit defender Microsoft Malware tool |
| winrarshell32.exe | Is the Salira password stealing trojan, aka PWSMafia, Manda.A, KillBill, Bugmaf. |
Bit defender
Kaspersy A squared |
| WinRatchet.exe winsched.exe wintaskad.exe | Is Windows Adtools adware, aka ADW_WUPD.A and WindUpdates |
Trend Micro Spybot S&D |
| Winservn.exe, Manage.exe, Sear1.exe, Wapicc.exe, Wapisu.exe, Wapisvit.exe, Wapisvsu.exe, Wcpcc.exe, Winservs.exe, Wnsapicc.exe, Wnsapisu.exe, Wnsapisv.exe, Wnscpsu.exe, Wnscpsv.exe, Wnsintit.exe, Wnsintsu.exe, Wnsintsv.exe, Wnstssv.exe, Wtsit.exe |
Process names that come with the pornography scanner from Purityscan.com, by Clickspring (A scanner claiming to remove traces of pornography from your PC) constantly change to avoid detection. . These files have been known to appear on computers that have not even used the scanner, there also appears to be a link with the installation of this software and being infected with the Badtrans virus. If you try to remove these files manually, they will just re-appear on each re-boot. |
Trojan Remover Pest Patrol Zone labs |
| Winldra.exe | Is Srv.SSA-KeyLogger, a new variant of
the Dumaru trojan designed to steal items from the Internet Explorer protected storage area, temporary files, windows clipboard, logins and passwords. hooks into Internet explorer, adds entries to
Hosts file to prevent access to security websites. Only affects Windows XP. | Removal tool from Sunbelt software |
| Winsrvc.exe | You have the Friendgreet virus. | McAfee Zone labs Pest Patrol Etrust |
| winssk32.exe | Is the Sobig.E virus. |
Trend Micro Bit defender Panda Kaspersy Microsoft Malware tool |
| winstart.exe | Is either- 1) Earlybird virus. 2)IGetNetmalware, aka ADW_TENGET.A. It re-directs search enquiries to its advertisers. |
1) McAfee Trojan Remover 2) Trend Micro |
| WinStart001.exe | An Internet explorer plug in, which limits the number of web sites you can visit by directing you to their advertising sites as opposed to a full scan of the world wide web. A top end spyware scanner should find and delete this. | Pest Patrol Bit defender |
| Winstat.exe | Is the Kodorian trojan. | A squared |
| WinStatKeep.exe | Is Adstat adware. |
Trend Micro |
| Wintime.exe | Is Downloader.Harnig trojan. | A squared Pest Patrol Adware SE Trojan Remover |
| wintools.exe | Is the Huntbar. BHO, which hijacks your browser and delivers pop up advertisements. For more information, see BHO's and Hijackers | Pest Patrol X-Cleaner McAfee |
| wintsk32.exe | Is the Yaha.U | Removal tool from Zone Labs |
| winupdate.exe | Is added by a large number of worms and
Trojans, including- Rado. Bizes Nario Spybot.EAS. W32.Cult. Litmus SDBot. W32.Warpig Gaobot.BIA. |
Trend Micro A squared Pest Patrol Bit defender Panda Kaspersy TDS 3 Ewidow Trojan Remover |
| winupdt.exe | Cab be one of the following- 1) Rbot-FP worm. 2)Winupdates adware. 3) 2nd thought (secondthought) adware |
1) A squared 2) Spybot S&D 3) A squared Pest Patrol Trojan Remover |
| winupdtl.exe | Is 2ndthought (second thought) adware. | A squared Pest Patrol Trojan Remover |
| winxp.exe | Is either 1) A variation of the Bagle worm 2) The Molotov AIM virus. |
1)
Trend Micro Bit defender Panda Microsoft Malware tool 2)Removal tool |
| wmiprvse.exe | IMPORTANT There is a Windows process of the same name which you should not delete The windows process has a full file path of C:\WINDOWS\system32\wbem\wmiprvse.exe, if it is anywhere else it may be either- 1) Sonebot-B virus, aka W32/Sdbot., Agobot.dr andW32.HLLW.Gaobot.gen. This will also show kernel_check on the start up list. 2) Gletta.A Trojan aka Wessy, Banker.aq and Stawin, which steals internet banking passwords. |
1)
Trend Micro Pest Patrol McAfee Microsoft Malware tool 2) Pest Patrol McAfee Kaspersy Zone labs Trojan Remover |
| wmon32.exe | Is a varient Agobot aka Gaobot Trojan. |
Trend Micro A squared Pest Patrol McAfee Microsoft Malwaretool |
| Wmplayer.exe | IMPORTANT There is a Windows process of the same name which you should not delete WMPlayer.exe is the process for the Windows media player and will show in your task list if you have this application open. Otherwise you have the Gaobot.EF virus. Let Wintask5 Pro help you Download a Free trial here | Kaspersy McAfee Microsoft Malware tool |
| WNAD.exe | Adware which hides behind certain animations or joke downloads from Twistedhumor.com. It constantly sends your surfing information back to a server, hogging your internet connection, and serves you a constant stream of pop up advertisements. It can also be responsible for your computer crashing. Detect and remove it with a good quality spyware scanner. | Ad-Aware SE Pest Patrol |
| wo.exe | Is Weboffers adware from Ezula | Pest Patrol |
| WofE5.exe | You have the Badtrans virus | McAfee Panda |
| wovax.exe | Is the Daqa trojan, aka Agent.bg | Pest Patrol Kaspersy TDS 3 Zone labs Trojan Remover |
| Wqk.exe Wqk.dll |
You have the Klez virus | McAfee Panda Bit defender Trojan Remover |
| VVSN.exe | Is WhenU adware, although a 'clean up' of their operational methods and a partnership with a security firm has resulted in it being removed from many security databases. | Spybot S&D A squared Pest Patrol |
| wsup.exe wtoolsa.exe wtoolss.exe | Is the Ibis Toolbar, aka Huntbar | Spybot S&D Pest Patrol |
| wsxsvc.exe | Is the Delfin Media Viewer adware, aka PromulGate | Adware SE Trend Micro Pest Patrol Trojan Remover |
| wuamgrd.exe | Is as a result of having either- 1) A variant of Rbot Trojan. 2) Sdbot worm. 3) Spybot worm. 4) ShopatHome adware, AKA golden retriever |
1)
Trend Micro Pest Patrol Microsoft Malware tool 2) Panda Trend Micro Pest Patrol Microsoft Malware tool 3) Trend Micro McAfee 4) Pest Patrol Trojan Remover |
| Wupdated.exe | You have the Moega or Sdbot virus. | Zone labs Pest Patrol |
| WUpdater.exe | Adware that delivers pop up advertisements. A top quality spyware scanner will find or delete it, alternatively, click start/search, then type wupdater, and delete the files. Make sure you have the search hidden files and folders ticked, in the more advanced options section. | Ad-Aware SE Pest Patrol |
| wupdt.exe | Is the Imiserv parasite. It is installed by Drive by download to monitor computer activity both online and off, record form content and display pop ups, it will also contact its servers every few seconds. Sometimes called a trojan and also known as OneClickNetSearch, Oneclick, trojandropper.Win32.Delf.av, BHO3Lib and IEPLUGIN. |
Kaspersy Pest Patrol Trend Micro Panda TDS 3 McAfee Trojan Remover |
| X | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Xhrmy.exe | Is the BackDoor.Small.6.A aka Win32.SecondThought.aa, Hyperlinker, Adware/PortalScan . Should be removed in safe mode with system restore off. |
AVG Kaspersy Pest Patrol Trend Micro Panda Trojan Remover |
| XTCfgLoader.exe | A component of the Xupiter adware, which supplies pop up advertisments. | Pest Patrol |
| Y | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| y.exe | Is one of a number of things - 1)Win32.StartPage.y trojan. 2) Win32.Small.ka trojan downloader. 3) Coolwebsearch, Hijacker variant. | 1) Pest Patrol A squared Trojan Remover 2) A squared Pest Patrol Trend Micro 3) CWS shredder |
| Z | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Zonealarm.exe | IMPORTANT There is a another process of the same name which you should not delete If you have the Zone alarm firewall installed, you will see this process. If you do not have Zone alarm, or it appears in the process list more than once, you may have the Sdbot.T virus. Let Wintask5 Pro help you. Download a Free trial here | Ad-Aware SE Panda Pest Patrol |
| ZZCS1.21gc.exe | Is Trojan-Dropper.Win32.Delf.nm also known as Dropper.Generic.AEW and Win32.ExplorerHijack | AVG Kaspersy Bit defender |
The next button will take you to a an automatic analysis tool for log files produced by Hijack this

About us Contact us FAQ Links Privacy Statement Site Map Webmasters