internetinspiration.co.uk
Privacy and security
Unwanted Process List
All the time your P.C is switched on, process are running, not all of them are
necessarily things you want to run. We have compiled a list of dangerous or undesirable processes
that you can check to see if they are present on your system.The list only contains known processes of viruses and other parasites, you will have many other processes running. We do not pretend it is a complete list, but we will try to keep up with the biggest and most persistent threats, and update regularly.
A word of caution, some viruses processes have similar names to essential windows processes, even have exactly the same name, but have a different file path. These are just a few of the tactics used to avoid detection, so if you choose to proceed, do so with caution.
In windows, a list of processes can be viewed in the task manager, you will find this by pressing Ctrl, Alt and Delete altogether. Click on the processes tab.
If you suspect you have any form of malware, you can stop the programme from running by using the end process button in the task manager.
DELETING OR ENDING THE WRONG PROCESS CAN SEVERELY DAMAGE YOUR COMPUTERS ABILITY TO FUNCTION CORRECTLY
There is a useful tool out there called Wintask5 that can give you information on all the processes running on your PC, even ones that hide from your windows process box, to help you identify bad or useless processes, Click Here for more details or Download a Free trial hereIf you have any adware, spyware or parasite, you can use one of the many scanners available, but be careful, there are many commercial and free scanners that actually install 'information gathering' software, or spyware. see our Spyware section for reputable scanners. Past Patrol does not miss much. For a free scan, Click here,
| Undesirable processes | ||
| Process | Details | Detect/remove with |
| 100176br.exe | Is the ADSplug, an adult content premium rate dialler | Ewidow Pest Patrol Bit defender A squared Trojan Remover |
| 180ax.exe | You have one of the following a) TROJ.ISTZONE.H downloader. Usually attached to a virus to download other viruses. b) 180 solutions spyware. c) Dyfuca spyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser |
Pest Patrol Kaspersy Trend-Micro A squared Trojan Remover |
| 180remove.exe | Red V spyware. It secretly monitors internet activities and gathers personally identifiable information, | Pest Patrol Free online scan |
| 1buu2qs7.exe 36o1ogv0.exe 56olj8bb.exe 6e9eh7oo.exe 70tovmto.exe 9cjqvgcs.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| 196_150_NI.EXE | Is Winfixer 2005. Pop ups delivered by a trojan, (the latest being Vundo) to suggest security threats and critical errors exist, and requests $39.95 to fix them. | Manual removal instructions |
| A | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| A+++.exe | WIN32.VB.AVTrojan keylogger, it will record all keyboard input and send it to a designated email address. Some variants can also disable security software | Ewidow Pest Patrol A squared |
| A0133191.EXE | Is Adware Wheaterbug.A. It usually comes bundled with other malware |
Bit defender Ewidow |
| A5281300.so | Is the Smitfraud trojan, aka A5281300.so , to display fake warnings to trick the user into buying fake virus scanners. Difficult for security software to remove | Manual removal instructions |
| a64sddd.exe a65d.exe | Popuppers adware, AKA LowZone-AA trojan. Delivers pop up advertisements from mediamotors. It will also lower security settings by adding registry entries. Can also install other malware including 180solutions including abetterinternet | Ewidow |
| a95kfrhe.exe abasa5jrp_.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Absr.exe Ausvc.exe BVT.exe |
These are components of the Autoupder virus. | Pest Patrol McAfee Security Kaspersy |
| actalert.exe | Dyfucaspyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser | A squared X-Cleaner Spybot S&D Trojan Remover |
| adp8038_siac.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| adprotector.exe | Red V spyware. It secretly monitors internet activities and gathers personally identifiable information. | Pest Patrol Free online scan |
| Advert.exe | Aureate now known as Radiate, comes attached to hundreds of 'Free' software programmes. It delivers their advertisements and monitors your surfing habits. Manual removal is very difficult. | Pest Patrol |
| adaware.exe aimaol.exe | A variant of the Rapid Blaster worm.
Manual removal is not recommended. IMPORTANT Do not confuse this with the Ad-Aware.exe (with the hyphen) process for the popular spyware scanner |
removal Tool A squared Trojan Remover |
| aircity.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| aimplugin.exe | You have the W32/Guap-F worm, also known as W32.Allim and WORM_YIMP.A . It is spread via AOL, MSN and Yahoo Instant messengers as well as eDonkey2000 and LimeWire file sharing programs. It will disable many Security, Windows updates and the Windows Firewall to enable it to download other malicious software. eDonkey2000 | A squared McAfee |
| AIM reminder.exe | Is the Buddy trojan, AKA W95/PennyTools.Trojan or PennyTools. It will steal AOL and other passwords and send gathered information by email | Ewidow McAfee |
| Aolfix.exe | You have Qhosts trojan | McAfee |
| Aornum.exe Aornumsp.exe Ornum.exe |
A background process to collect information on your surfing habits and deliver
pop up advertising. Installed with the iwon prize draw products. To remove, use the Add/remove programmes to delete all iwon entries. Note- This programme leaves certain components in your PC even after un-installation, in some cases under a different file name. Run a top quality spyware scanner. | Pest Patrol |
| AP9H4QMO.EXE | Is either - 1)Shopathome adware. delivers advertising pop ups, Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. 2) Trojan-Clicker.JS.Linker.j AKA ADW_MULTISITE.A A trojan dropper that infects your PC with adware and spyware applications including Internet Optimizer (DyFuCA trojan), Media Access, ClickSpring and Avenue Media |
1) Pest Patrol Trojan Remover (Free trial) 2) McAfee Kaspersy A squared Ewidow Trojan Remover |
| Apropos.exe | Add on for Internet Explorer, installed by POPS, (people on pages), to record internet activities and deliver pop up advertisements. Use Add/remove programmes to delete POP and AM server programmes. Run an anti spyware scanner to delete any components left behind. |
Ewidow Pest Patrol |
| apphelp3.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, it hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| aqadcup.exe | You have the Backdoor.Agent.bg | Pest Patrol Zone labs X-Cleaner Trojan remover |
| ARUpdate.exe | Adroar spyware. |
Ad-Aware SE PC-cillin Pest Patrol McAfee |
| askearth17.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| ATIUPDPL.EXE | Is the TROJ_SMALL.AOS trojan |
Trojan remover(free trial) Trend Micro |
| atrc8parb_.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Au.exe | You have either the Beagle.B AKA Bagle or Alua virus. IMPORTANT This is also a process for Ace Utilities, a compilation of system cleaning utilities |
Bit defender Microsoft Malwaretool |
| Aurora.exe aurora-wise1.exe aurareco.exe | Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually | Info and manual removal |
| av.exe | W32/Alphx worm | McAfee Trojan Remover |
| AVGuard.exe | You have the Netsky.G virus |
Bit defender Microsoft Malware tool |
| avserv.exe avserv2.exe | You have the Sasser virus |
McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy Microsoft Malwaretool |
| Avsynmgr32.exe | You have the Framar trojan, which can stop some Windows and Security processes. Opens port 2345 to allow an attacker unauthorised access to your PC. | TDS 3 |
| Avsynmgr32S.exe | You have the remote access trojan Volac. It can disable security software and windows processes to allow remote access. | Trend Micro |
| B | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| backweb.exe | backweb is used legitimately by logitec, Kodak, Compaq, HP, McAffee, F-Secure, Western Digital, IBM, Hewlett-Packard and Siemens for automatic updates. It has also been used maliciously to secretly download applications. | Pest Patrol |
| bargains.exe | Bargain buddy spyware from Exact advertising that records and analyses your computer activities and delivers advertising pop ups | Pest Patrol McAfee |
| Bbeagle.exe d3dupdate.exe |
You have the worm, Bagle or Bagle.A virus |
Bit defender Microsoft Malware tool |
| belt.exe | SearchV spyware | McAfee PC-cillin Zone Labs |
| birep.exe | 1)VX2 Trojan 2)Binet adware 3)Spyware from Gator. 4) Bispy trojan |
1) VX2 plug in for Ad-aware Trojan Remover 2) Symantec removal tool 3)Pest Patrol 4) Trojan Remover |
| blss.exe | Connected to many spyware and viruses, including Backdoor.Blarul, CBlaster Trojan/dialer/downloader, Trojan/Downloader Dyfuca. | Pest Patrol A2 squared Trojan Remover |
| Bmqnzkg.exe | You have the Randex.BE virus. | McAfee Pest Patrol Microsoft Malware tool |
| bokja.exe | Second thought software that monitors internet activity and delivers pop up advertisements, sometimes referred to as a Trojan | Pest Patrol Trojan Remover |
| bootconf.exe | Global finder browser hijacker, a cool web search variant that redirects search enquiries to its own advertisers websites | CWS shredder |
| bpc.exe | BroadcastPc application that displays videos, usually movie trailers intermittently and without warning. Installed with several programmes. On each start up it will check replace any damaged or deleted files, and check for updated versions. | McAfee Pest Patrol |
| brasil.exe | You have the Opaserv virus, which exploits a vulnerability in the way Windows 95, 98, 98SE and ME verifies network share passwords. Once removed, a microsoft patch is available to prevent future infections from here | McAfee Zone Labs Panda Trojan Remover |
| Bravessentry.exe | A rogue security product BraveSentry. Can come with a large trojan bundle. Cool web search related | Information and removal |
| BUGSFIX.EXE | You have the Loveletter Virus | McAfee Trend Micro Kaspersy |
| bundle.exe bundlelite_westfrontier1001.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups,
installed with some shopping and file sharing programmes, which not only
records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. |
Trojan Remover Pest Patrol |
| bvt.exe | you have the Backdoor.Autoupder virus. | Pest Patrol Trend Micro |
| C | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| cashback.exe | you have the Cashback/Bargainbuddy spyware from eXact advertising. It monitors your browsing habits which prompts pop up advertisements. Can resist removal. | Pest Patrol McAfee |
| cc6p7pug.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| Cfgdll32.exe | You have the Randex.BD virus | McAfee Pest Patrol Microsoft Malwaretool |
| Cissi.exe | You have the Cissi.A virus | McAfee Zone Labs |
| cleansahagent.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (free trial) Pest Patrol |
| cloudsim.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| cmd32.exe | You have the P2P.Tanked aka KWBOT.C worm if Cmd shows on the start up list or LOADCFG or SDBOT if Configuration loader shows on the start up list | Trend Micro Bit defender Kaspersy |
| Cmesys.exe | Comes with Gator software, intended to allow free use of software, but it delivers pop up ads according to tracking of your internet activities. Most top end spyware, and some anti virus scanners will delete this for you. | Pest Patrol |
| CNFRM.exe | You have the Mimail.D virus. |
Bit defender Zone labs Microsoft Malware tool |
| conime.exe | You have the BFGhost remote access trojan. Aka Backdoor.DKangel | Pest Patrol Kaspersy TDS 3 Trojan Remover |
| conscorr.exe | You have 1) TrojanDownloader. Win32.Stubby.c which usually is bundles with another virus. Its function is to download more viruses. 2) VX2, abetterinternet trojan. | 1) Pest Patrol A squared Trojan Remover 2)Trojan Remover Ad-Aware SE |
| Csrss.exe | IMPORTANT There is a windows process of the same name which should not be deleted.
Windows NT4, 2000, XP and 2003 uses this file for a part of the operating system. Do not delete it unless you are absolutely sure it is a virus. If you use Windows 95, 98 or ME, or the file path is C:\windows\csrss.exe, you have got one of the many viruses that use csrss.exe. Some are capable of interfering with firewalls and virus scanners. Let Wintask5 Pro help you. Download a Free trial here | McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy TDS 3 |
| Ctfmon.dll | IMPORTANT There is a windows process of a
similar name which should not be deleted. If the process is ctfmon.dll and NOT ctfmon.exe, then you have the Mydoon.B virus-easy to recognise as it opens notepad and displays what appears to be data. Let Wintask5 Pro help you. Download a Free trial here | McAfee Panda Microsoft Malware tool |
| cxtpls.exe | You have the AproposMedia spyware, distributed through peopleonpages.com, it has also been known to be installed by other parasites. | Trend Micro Pest Patrol |
| cyxipjsxdua.exe | Aurora adware, can be very difficult to completely remove. | Removal Instructions |
| D | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| DateManager.exe | A programme for a calendar and time management, also downloads Gator software
to deliver pop up advertising windows. It has been put into computers with a pop up that appears whist surfing, apparently as a result of something you did, there is no 'close window' facility, just an 'ok' button, which then downloads the software. To remove this software, use the Add/remove facility, to delete date manager or Precision time. Run a top quality spyware scanner to remove any bits left behind. |
Pest Patrol |
| dcomx.exe | You have the self-extracting cirebot trojan. | McAfee Panda Trend Micro |
| dbaccess.exe | Is the Derbiz premium rate dialler. It sets itself as the computers default internet connection and hijacks the homepage. Difficult to remove | Pest Patrol |
| dfrgsrv.exe | A rogue anti-spyware scanner, Spyware Quake that is downloaded by a CoolWebSearch trojan that gives false virus or system information. | Information and removal tool |
| directs.exe | You have the W32/Bagle.t@MM virus, aka BAGLE.T and PE_Bagle. T. A file infector virus that also has backdoor capabilities | McAfee Trend Micro Microsoft Malwaretool |
| divx.exe | You have one of a number of possibilities, the most common being 1) Mastak virus or
2) Naldem Trojan. It is also a legitimate process for DivX video compression software |
McAfee Zone labs Kaspersy |
| Djfgucxr.exe | You have the Gluber.B virus. | McAfee Zone labs Panda |
| dllreg.exe | You have the Dumaru.c virus | Pest Patrol McAfee |
| dmserver.exe | Is a component of the Win32.Comet spyware, from Gator | A2 squared Pest Patrol |
| dpi.exe | Spyware component of the DelFin project media viewer. It cannot be removed via Add/remove programmes and does not come with an uninstaller. | Trojan Remover Pest Patrol |
| Dssagent.exe | Allows software developers to send you pop ups. Distributed with Borderbund, and a few other software titles. It constantly connects to the borderbund server, which slows down your internet connection. It is capable of sending information from your computer. If you un install this part, it is likely the software that brought it will not work. There is no un-install application, and add/remove programmes cannot be used. | Pest Patrol |
| dvdkeyauth.exe | You have the dvdkeyauth.exe premium rate dialler. | A2 squared
Pest Patrol Panda |
| dxmpp.dll | A rogue anti-spyware scanner that uses a CoolWebsearch trojan to display false/misleading information to generate sales | Manual removal instructions |
| E | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| e2g23.exe e2g23[1].exe ei.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| emsw.exe | Is Attune help express spyware, from Alsnet Inc. It usually comes with other spyware from the same company. |
Panda Pest Patrol |
| evov.exe | 180 Search assistant. Delivers pop up advertisements based on your surfing habits. Can reinstall itself if incompletely deleted. | Trojan Remover Pest Patrol |
| exec.exe | You have the Death Zone RAT. Aka Executor Trojan. Allows access from a remote PC, it can disable some windows functions including task manager. | Kaspersy AVG McAfee Panda Pest Patrol Trojan Remover |
| explore.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. Used by a number of worms and trojans. Do not mistake this for the legitimate Windows explorer.exe process. Wintask5 Pro will help you. There is a free trial available. |
AVG McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy A squared |
| Explore.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. You have the backdoor trojan Graybird. |
A squared McAfee Trojan Remover Zone labs |
| explored.exe | IMPORTANT There is a windows process of a
similar name which should not be deleted. A component of the W32/Nexiv worm. | McAfee |
| explorer.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. The Windows process is in the c:\windows\System32 folder, if it is anywhere else, you will have one of the many viruses that use this name in an attempt to avoid detection. Use Wintask5 Pro to help you. |
AVG McAfee Panda Pest Patrol Zone labs Bit defender Kaspersy A squared |
| Explorer.scr | IMPORTANT There is a windows process of a
similar name which should not be deleted. If the process is explorer.scr and NOT explorer.exe, you have the Benjamin.A virus. Let Wintask5 Pro help you. Download a Free trial here | McAfee Zone labs |
| express.exe | Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove | Manual removal instructions |
| EZulaMain.exe MMod.exe |
The Ezula software is by TOPText and arrives alongside the Kazza file sharing programme. It not only sends you pop ups, and pop unders, it also hijacks your browser to change certain words in web pages you view into links, which will direct you to an advertisers site. A top level spyware detector will find and delete the spyware. | Pest Patrol X-Cleaner |
| F | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Fash.exe | Is the IBIS toolbar hijacker. It loads the websearch meta search engine, it will also install a number of other applications and can prevent access to some security related web sites. Can be difficult to remove. | Pest Patrol |
| filgmo.exe | E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. | Information and removal instructions |
| Firedaemon.exe | You have the NTHack virus. | McAfee Panda Pest Patrol Zone labs |
| fntldr.exe | An advertising programme installed by Gator or a CoolWebSearch variant which can resist removal, creating a 'cannot find fntldr.exe' error message on start up | Pest Patrol CWS shredder |
| Fsb.exe | You have the Yero virus, AKA Fesber. A worm with backdoor capabilities | Trend Micro McAfee |
| FSG_4104.exe | Another one from the gator stables, this one transmits your surfing habits back to the programme vendor, who sells the details to advertisers. Downloaded with file sharing programmes such
as KaZzA, imesh and others. NOTE, disabling or deleting this process will usually prevent the software it came with from working. |
Pest Patrol |
| FVProtect.exe | You have the Netsky.P virus. |
Bit defender Panda McAfee Microsoft Malwaretool |
| G | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| game.exe | Is the W32.Gaze@mm worm, aka Win32.Gaze. Spreads via e-mail | McAfee Zone labs |
| gator.exe | Gator, a form filling application that installs spyware | Pest Patrol Spybot S&D |
| goidr.exe | Another Gator process | Pest Patrol Spybot S&D |
| Gigabit.exe | You have the Bagle.U virus. | McAfee Panda Bit defender Microsoft Malware tool |
| GMT.exe | A Gator product which transmits your surfing habits, and displays
advertisements. This is in return for you using free software. NOTE, disabling or deleting this will prevent the software it came with from working. | Pest Patrol |
| grinstall.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| H | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| HBInst.exe HBSrv.exe |
Installed with Hotbar, an enhancement programme for Internet explorer. It constantly transmits data from your PC (slowing down your internet connection) about your searching habits, and then changes buttons and links on the bar accordingly. A spyware scanner should find and delete the spyware. The web site downloads the programme as soon as you tick the 'I accept' box in the license agreement. | Pest Patrol |
| hellz little spy 1.2.exe hls15.exe |
You have the Helz little spy trojan, a keylogger, which records your key strokes. This one has certainly lived up to its name, it sits in the windows system folder, making its removal difficult. Some spyware scanners can detect it, fewer can delete it. |
Trojan Remover Pest Patrol |
| here.exe here_half.exe | Is the Dsocks.10 Trojan downloader | Ewidow A squared |
| hochkaod3_.exe hqrhil7kg_.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| hxdl.exe | Spyware from the Gator applicaton | Pest Patrol Spybot S&D |
| hxiul.exe | Is a part of the HelpExpress adware made by attune that promotes ink cartridges from its advertisers | Pest Patrol Panda X-Cleaner |
| I | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| ibecdbv8.exe | ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Pest Patrol Trojan Remover (Free trial) |
| iedll.exe | This can be a number of things 1) a varient of the CoolWebSearch Hijacker 2) Avexp.A a Hack tool 3) DItoon trojan, aka Tooncom |
1) CWS shredder 2)Panda Pest Patrol Kaspersy 3) A squared Pest Patrol Kaspersy Pest Patrol Zone labs McAfee |
| iedriver.exe | Cydoor spyware, aka Turbo download usually installed with programmes from URLBlaze. |
A squared Pest Patrol Spybot S&D |
| IEHost.EXE | Another component of Cydoor, this one will download other malware. | A squared Pest Patrol Spybot S&D Trend Micro |
| IEWERSV.exe | This one can be difficult because it constantly renames itself with random file names. It Comes from Winpop, | X-Cleaner |
| iexplore.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. Iexplorer with a file path of C:\Program Files\Internet Explorer\Iexplore.exe is the genuine article, Iexplore.exe with a file path of anything else is one of the many malware/virus/trojans that use this file name to make removal difficult including Aphexdoor, Banker-AN, Randex, KillAV, CoolWebSearch and RapidBlaster. Let Wintask5 Pro help you. Download a Free trial here | Trojan Remover Zone labs A squared Pest Patrol Spybot S&D Trend Micro |
| infus.exe | Is the Infus premium rate dialler | Hijack This |
| infwin.exe | Is a varient of VX2.transponder/TPS108 spyware | Trojan Remover Ad-Aware SE Pest Patrol |
| installer_marketing12.exe | Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. | Trojan Remover (Free trial) Pest Patrol |
| intdel.exe intdel.exe_2 | Component of Internet Delivery software that delivers advertising pop ups | Pest Patrol McAfee |
| Intrenat.exe | IMPORTANT There is a windows process of a
similar name which should not be deleted. DO NOT confuse this with Internat.exe, a windows process. You have the Doomjuice virus Let Wintask5 Pro help you. Download a Free trial here |
Bit defender McAfee Panda Microsoft Malware tool |
| Iosdt.exe | You have a Trojan . It probably arrived with an illegal copy of Windows. To delete it, restart your PC in safe mode, search All files and folders for files beginning with IOSDT, delete them and empty your recycle bin and restart your PC in normal mode. |
Trojan Remover |
| isass.exe | You have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal |
A squared Trojan Remover |
| istsvc.exe | ISTbar adware,can be difficult to remove, Kill the process with Windows task manager before using a scanner |
Trend Micro Ad-Aware SE Pest Patrol |
| J | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| jawa32.exe | Agent.bg trojan | Pest Patrol X-Cleaner Spybot S&D Trojan Remover |
| jdbgmrg.exe | Is the TROJ_DASMIN.B virus, which connects to the web and downloads an adult premium rate dialler. | Trojan Remover Trend Micro McAfee |
| K | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| kazza.exe | If it is located in windows/system (98, ME), Windows/winnit/system (NT, 2000) or Windows/system32 (XP) you have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal |
Trojan Remover A squared |
| keenvalue.exe | Spyware from Gator | Pest Patrol Spybot S&D |
| Kern32.exe Kernel32.exe Krnl32.exe |
IMPORTANT There is a windows process of a
similar name which should not be deleted. DO NOT mistake Kernel32.dll for a virus, this is the main windows process file. However if you have any of the processes to the left running, you have one of a number of possibilities including Batrans, Epon, Babylonia, Kernal, Hooker or Floodnet viruses. Let Wintask5 Pro help you. Download a Free trial here | McAfee Zone labs A squared Pest Patrol Spybot S&D Trend Micro Bit defender |
| knightseven.10 ii.exe | You have the Backdoor.Knightseven.10, a Remote Access Trojan. Difficult to detect as it can hide from the process list and use random file names in different locations of your PC. | Kaspersy Pest Patrol |
| L | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| L32x.exe | You have the Dumaru.Y or the Dumaru.Z virus. | McAfee Bit defender |
| lmu.exe | Hyperlinker adware from Vertical Theories that turns keywords used on a web page into links directing users to their advertisers. Pages that are saved hold the amended page so can still show links on previously viewed paged even after removal. | Trend Micro |
| loader.exe | CoolWebSearch varient | CWS shredder |
| Lockx.exe | Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove | Manual removal instructions |
| Lsass.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. If the file path is NOT C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP, 2003), then you have one of a number of possible viruses including Windang.worm, irc.ratsou.b, Webus.B, MyDoom.L, Randex.AR, Nimos viruses, Let Wintask5 Pro help you. Download a Free trial here |
AVG McAfee Panda Pest Patrol Zone labs Bit defender A squared Trend Micro and download all critical Windows updates |
| Lsasss.exe | IMPORTANT There is a windows process of
a similar name which should not be deleted. If the task is Lsasss and not Lsass you have the Sassar virus. | McAfee Panda Zone labs Microsoft Malware tool |
| lssas.exe | Is the W32.AGOBOT.RL trojan, |
Trend Micro Microsoft Malware tool |
| M | A B C D E F G H I J K L M N O P Q R S U V W Y Z | |
| Maja.exe | You have the Netsky.H virus. | McAfee Panda Zone labs Microsoft Malware tool |
| mapisvc32.exe | You have the Backdoor.VB.kx trojan, aka KX virus or FPAI adware. | Pest Patrol, Kaspersy |
| mario.exe | Is the mario remote access trojan | McAfee Zone labs Pest Patrol Trojan Remover |
| md.exe | Is the SystemMD virus, a dialler and homepage hijacker | Pest Patrol |
| mfin32.exe | Is the MyFreeInternetUpdate adware | Spybot S&D |
| mmod.exe | Known as Ezula spyware, distributed via many file sharing programmes like KaZaA, Imesh etc. It adds links to their advertisers to web pages, effectively stealing the web space. | Spybot S&D Panda Pest Patrol |
| mostat.exe | Spyware from WurldMedia, tracks internet usage, delivers pop ups and redirects links through its own servers to steal any affiliate fees. | Pest Patrol X-Cleaner |
| msapp.exe | You have the RSBOT trojan | A squared McAfee Zone labs | MSBB.exe | 1800 solutions have a product called n-case, a shopping comparison search engine that gets installed when
you install some free software products. The software produces endless advertising pop ups, but it also tries to start up dial up internet
connections, dramatically slows down your browser, and causes random error messages. | Pest Patrol X-Cleaner Trojan Remover |
| Msblast.exe | You have the Blaster virus, also called Lovsan. | McAfee Bit defender Microsoft Malware tool |
| mscache.exe | Is ISTbar.MSCache spyware from Integrated Search Technologies that monitors internet activity and delivers pop up advertisements. | Pest Patrol |
| msccn32.exe | Is the Win32.Sobig.B@mm (Palyh) virus, which is spread via e-mail claiming to be from support@microsoft.com |
Bit defender Trend Micro Panda Norman anti-virus Microsoft Malware tool | Msckin.exe Mscman.exe |
Comes with the Clientman Internet explorer add on. It directs you to advertiser sites relating to words you type in your search engine. The software is know to cause boot up errors, it collects information from your pc, and even changes the settings in the Zone alarm firewall to ensure it has internet access. | Pest Patrol Panda Kaspersy |
| mscornet.exe | A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. | Information and removal |
| mscvb32.exe | Is The Sobig worm. |
Trend Micro McAfee Panda Bit defender Norman anti-virus Microsoft Malwaretool |
| MSCVT.exe | You have the Slideshow virus which spreads via file sharing programmes, KaZzA etc, and AOL instant messenger | X-Cleaner Trojan Remover |
| MSFind32.exe | You have the Cayam virus. | McAfee Zone labs Trojan Remover |
| msgfix.exe | Is either the GAOBOT.AUS, SDBOT.J or SDBOT-QG worms. |
Trend Micro Microsoft Malwaretool |
| Msgsrv32.exe | IMPORTANT There is a windows process of
the same name which should not be deleted. Careful with this one, It is the name of an essential programme in windows 95, 98 and ME, but it only appears in the task list if the programme is 'hung'. If this appears in your task list and you keep getting strange error messages, you MAY have the Deadhat.B virus. To check, reboot your pc in safe mode and do a fully updated viru | |