internetinspiration logo internetinspiration.co.uk
Home Internet Guides Privacy & Security Must have software Internet Shopping Earn Money Fun & Games Freebies

Privacy and security
Unwanted Process List

All the time your P.C is switched on, process are running, not all of them are necessarily things you want to run. We have compiled a list of dangerous or undesirable processes that you can check to see if they are present on your system.
The list only contains known processes of viruses and other parasites, you will have many other processes running. We do not pretend it is a complete list, but we will try to keep up with the biggest and most persistent threats, and update regularly.
A word of caution, some viruses processes have similar names to essential windows processes, even have exactly the same name, but have a different file path. These are just a few of the tactics used to avoid detection, so if you choose to proceed, do so with caution.

In windows, a list of processes can be viewed in the task manager, you will find this by pressing Ctrl, Alt and Delete altogether. Click on the processes tab.

If you suspect you have any form of malware, you can stop the programme from running by using the end process button in the task manager.

DELETING OR ENDING THE WRONG PROCESS CAN SEVERELY DAMAGE YOUR COMPUTERS ABILITY TO FUNCTION CORRECTLY

There is a useful tool out there called Wintask5 that can give you information on all the processes running on your PC, even ones that hide from your windows process box, to help you identify bad or useless processes, Click Here for more details or Download a Free trial here

If you have any adware, spyware or parasite, you can use one of the many scanners available, but be careful, there are many commercial and free scanners that actually install 'information gathering' software, or spyware. see our Spyware section for reputable scanners. Past Patrol does not miss much. For a free scan, Click here,

Undesirable processes
Process Details Detect/remove with
100176br.exe Is the ADSplug, an adult content premium rate dialler Ewidow
Pest Patrol
Bit defender
A squared
Trojan Remover
180ax.exe You have one of the following
a) TROJ.ISTZONE.H downloader. Usually attached to a virus to download other viruses.
b) 180 solutions spyware.
c) Dyfuca spyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser
Pest Patrol
Kaspersy
Trend-Micro
A squared
Trojan Remover
180remove.exe Red V spyware. It secretly monitors internet activities and gathers personally identifiable information, Pest Patrol
Free online scan
1buu2qs7.exe
36o1ogv0.exe
56olj8bb.exe
6e9eh7oo.exe
70tovmto.exe
9cjqvgcs.exe
Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

196_150_NI.EXE Is Winfixer 2005. Pop ups delivered by a trojan, (the latest being Vundo) to suggest security threats and critical errors exist, and requests $39.95 to fix them. Manual removal instructions
A A B C D E F G H I J K L M N O P Q R S U V W Y Z
A+++.exe WIN32.VB.AVTrojan keylogger, it will record all keyboard input and send it to a designated email address. Some variants can also disable security software Ewidow
Pest Patrol
A squared
A0133191.EXE Is Adware Wheaterbug.A. It usually comes bundled with other malware Bit defender
Ewidow
A5281300.so Is the Smitfraud trojan, aka A5281300.so , to display fake warnings to trick the user into buying fake virus scanners. Difficult for security software to remove Manual removal instructions
a64sddd.exe
a65d.exe
Popuppers adware, AKA LowZone-AA trojan. Delivers pop up advertisements from mediamotors. It will also lower security settings by adding registry entries. Can also install other malware including 180solutions including abetterinternet Ewidow
a95kfrhe.exe
abasa5jrp_.exe
Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

Absr.exe
Ausvc.exe
BVT.exe
These are components of the Autoupder virus. Pest Patrol
McAfee Security
Kaspersy
actalert.exe Dyfucaspyware, sometimes referred to as a Trojan downloader, AKA Internet optimiser A squared
X-Cleaner
Spybot S&D
Trojan Remover
adp8038_siac.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

adprotector.exe Red V spyware. It secretly monitors internet activities and gathers personally identifiable information. Pest Patrol
Free online scan
Advert.exe Aureate now known as Radiate, comes attached to hundreds of 'Free' software programmes. It delivers their advertisements and monitors your surfing habits. Manual removal is very difficult. Pest Patrol
adaware.exe
aimaol.exe
A variant of the Rapid Blaster worm. Manual removal is not recommended.
IMPORTANT Do not confuse this with the Ad-Aware.exe (with the hyphen) process for the popular spyware scanner
removal Tool
A squared
Trojan Remover
aircity.exe E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
aimplugin.exe You have the W32/Guap-F worm, also known as W32.Allim and WORM_YIMP.A . It is spread via AOL, MSN and Yahoo Instant messengers as well as eDonkey2000 and LimeWire file sharing programs. It will disable many Security, Windows updates and the Windows Firewall to enable it to download other malicious software. eDonkey2000 A squared
McAfee
AIM reminder.exe Is the Buddy trojan, AKA W95/PennyTools.Trojan or PennyTools. It will steal AOL and other passwords and send gathered information by email Ewidow
McAfee
Aolfix.exe You have Qhosts trojan McAfee
Aornum.exe
Aornumsp.exe
Ornum.exe
A background process to collect information on your surfing habits and deliver pop up advertising. Installed with the iwon prize draw products.
To remove, use the Add/remove programmes to delete all iwon entries.
Note- This programme leaves certain components in your PC even after un-installation, in some cases under a different file name. Run a top quality spyware scanner.
Pest Patrol
AP9H4QMO.EXE Is either -
1)Shopathome adware. delivers advertising pop ups, Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.
2) Trojan-Clicker.JS.Linker.j AKA ADW_MULTISITE.A A trojan dropper that infects your PC with adware and spyware applications including Internet Optimizer (DyFuCA trojan), Media Access, ClickSpring and Avenue Media
1) Pest Patrol
Trojan Remover (Free trial)

2) McAfee
Kaspersy
A squared
Ewidow
Trojan Remover
Apropos.exe Add on for Internet Explorer, installed by POPS, (people on pages), to record internet activities and deliver pop up advertisements. Use Add/remove programmes to delete POP and AM server programmes. Run an anti spyware scanner to delete any components left behind. Ewidow
Pest Patrol
apphelp3.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, it hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol
Trojan Remover (Free trial)

aqadcup.exe You have the Backdoor.Agent.bg Pest Patrol
Zone labs
X-Cleaner
Trojan remover
ARUpdate.exe Adroar spyware. Ad-Aware SE
PC-cillin
Pest Patrol
McAfee
askearth17.exe E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
ATIUPDPL.EXE Is the TROJ_SMALL.AOS trojan Trojan remover(free trial)

Trend Micro
atrc8parb_.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

Au.exe You have either the Beagle.B AKA Bagle or Alua virus.
IMPORTANT This is also a process for Ace Utilities, a compilation of system cleaning utilities
Bit defender
Microsoft Malwaretool
Aurora.exe
aurora-wise1.exe
aurareco.exe
Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually Info and manual removal
av.exe W32/Alphx worm McAfee
Trojan Remover
AVGuard.exe You have the Netsky.G virus Bit defender
Microsoft Malware tool
avserv.exe
avserv2.exe
You have the Sasser virus McAfee
Panda
Pest Patrol
Zone labs
Bit defender
Kaspersy
Microsoft Malwaretool
Avsynmgr32.exe You have the Framar trojan, which can stop some Windows and Security processes. Opens port 2345 to allow an attacker unauthorised access to your PC. TDS 3
Avsynmgr32S.exe You have the remote access trojan Volac. It can disable security software and windows processes to allow remote access. Trend Micro
B A B C D E F G H I J K L M N O P Q R S U V W Y Z
backweb.exe backweb is used legitimately by logitec, Kodak, Compaq, HP, McAffee, F-Secure, Western Digital, IBM, Hewlett-Packard and Siemens for automatic updates. It has also been used maliciously to secretly download applications. Pest Patrol
bargains.exe Bargain buddy spyware from Exact advertising that records and analyses your computer activities and delivers advertising pop ups Pest Patrol
McAfee
Bbeagle.exe
d3dupdate.exe
You have the worm, Bagle or Bagle.A virus Bit defender
Microsoft Malware tool
belt.exe SearchV spyware McAfee
PC-cillin
Zone Labs
birep.exe 1)VX2 Trojan
2)Binet adware
3)Spyware from Gator.
4) Bispy trojan
1) VX2 plug in for Ad-aware
Trojan Remover
2) Symantec removal tool
3)Pest Patrol
4) Trojan Remover
blss.exe Connected to many spyware and viruses, including Backdoor.Blarul, CBlaster Trojan/dialer/downloader, Trojan/Downloader Dyfuca. Pest Patrol
A2 squared
Trojan Remover
Bmqnzkg.exe You have the Randex.BE virus. McAfee
Pest Patrol
Microsoft Malware tool
bokja.exe Second thought software that monitors internet activity and delivers pop up advertisements, sometimes referred to as a Trojan Pest Patrol
Trojan Remover
bootconf.exe Global finder browser hijacker, a cool web search variant that redirects search enquiries to its own advertisers websites CWS shredder
bpc.exe BroadcastPc application that displays videos, usually movie trailers intermittently and without warning. Installed with several programmes. On each start up it will check replace any damaged or deleted files, and check for updated versions. McAfee
Pest Patrol
brasil.exe You have the Opaserv virus, which exploits a vulnerability in the way Windows 95, 98, 98SE and ME verifies network share passwords. Once removed, a microsoft patch is available to prevent future infections from here McAfee
Zone Labs
Panda
Trojan Remover
Bravessentry.exe A rogue security product BraveSentry. Can come with a large trojan bundle. Cool web search related Information and removal
BUGSFIX.EXE You have the Loveletter Virus McAfee
Trend Micro
Kaspersy
bundle.exe
bundlelite_westfrontier1001.exe
Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your
internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.
Trojan Remover
Pest Patrol
bvt.exe you have the Backdoor.Autoupder virus. Pest Patrol
Trend Micro
C A B C D E F G H I J K L M N O P Q R S U V W Y Z
cashback.exe you have the Cashback/Bargainbuddy spyware from eXact advertising. It monitors your browsing habits which prompts pop up advertisements. Can resist removal. Pest Patrol
McAfee
cc6p7pug.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

Cfgdll32.exe You have the Randex.BD virus McAfee
Pest Patrol
Microsoft Malwaretool
Cissi.exe You have the Cissi.A virus McAfee
Zone Labs
cleansahagent.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (free trial)

Pest Patrol
cloudsim.exe E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
cmd32.exe You have the P2P.Tanked aka KWBOT.C worm if Cmd shows on the start up list or LOADCFG or SDBOT if Configuration loader shows on the start up list Trend Micro
Bit defender
Kaspersy
Cmesys.exe Comes with Gator software, intended to allow free use of software, but it delivers pop up ads according to tracking of your internet activities. Most top end spyware, and some anti virus scanners will delete this for you. Pest Patrol
CNFRM.exe You have the Mimail.D virus. Bit defender
Zone labs
Microsoft Malware tool
conime.exe You have the BFGhost remote access trojan. Aka Backdoor.DKangel Pest Patrol
Kaspersy
TDS 3
Trojan Remover
conscorr.exe You have 1) TrojanDownloader. Win32.Stubby.c which usually is bundles with another virus. Its function is to download more viruses.
2) VX2, abetterinternet trojan.
1) Pest Patrol
A squared
Trojan Remover
2)Trojan Remover
Ad-Aware SE
Csrss.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
Windows NT4, 2000, XP and 2003 uses this file for a part of the operating system. Do not delete it unless you are absolutely sure it is a virus.
If you use Windows 95, 98 or ME, or the file path is C:\windows\csrss.exe, you have got one of the many viruses that use csrss.exe. Some are capable of interfering with firewalls and virus scanners.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Panda
Pest Patrol
Zone labs
Bit defender
Kaspersy
TDS 3
Ctfmon.dll IMPORTANT  There is a windows process of a similar name which should not be deleted.
If the process is ctfmon.dll and NOT ctfmon.exe, then you have the Mydoon.B virus-easy to recognise as it opens notepad and displays what appears to be data.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Panda
Microsoft Malware tool
cxtpls.exe You have the AproposMedia spyware, distributed through peopleonpages.com, it has also been known to be installed by other parasites. Trend Micro
Pest Patrol
cyxipjsxdua.exe Aurora adware, can be very difficult to completely remove. Removal Instructions
D A B C D E F G H I J K L M N O P Q R S U V W Y Z
DateManager.exe A programme for a calendar and time management, also downloads Gator software to deliver pop up advertising windows. It has been put into computers with a pop up that appears whist surfing, apparently as a result of something you did, there is no 'close window' facility, just an 'ok' button, which then downloads the software.
To remove this software, use the Add/remove facility, to delete date manager or Precision time. Run a top quality spyware scanner to remove any bits left behind.
Pest Patrol
dcomx.exe You have the self-extracting cirebot trojan. McAfee
Panda
Trend Micro
dbaccess.exe Is the Derbiz premium rate dialler. It sets itself as the computers default internet connection and hijacks the homepage. Difficult to remove Pest Patrol
dfrgsrv.exe A rogue anti-spyware scanner, Spyware Quake that is downloaded by a CoolWebSearch trojan that gives false virus or system information. Information and removal tool
directs.exe You have the W32/Bagle.t@MM virus, aka BAGLE.T and PE_Bagle. T. A file infector virus that also has backdoor capabilities McAfee
Trend Micro
Microsoft Malwaretool
divx.exe You have one of a number of possibilities, the most common being 1) Mastak virus or 2) Naldem Trojan.
It is also a legitimate process for DivX video compression software
McAfee
Zone labs
Kaspersy
Djfgucxr.exe You have the Gluber.B virus. McAfee
Zone labs
Panda
dllreg.exe You have the Dumaru.c virus Pest Patrol
McAfee
dmserver.exe Is a component of the Win32.Comet spyware, from Gator A2 squared Pest Patrol
dpi.exe Spyware component of the DelFin project media viewer. It cannot be removed via Add/remove programmes and does not come with an uninstaller. Trojan Remover
Pest Patrol
Dssagent.exe Allows software developers to send you pop ups. Distributed with Borderbund, and a few other software titles. It constantly connects to the borderbund server, which slows down your internet connection. It is capable of sending information from your computer. If you un install this part, it is likely the software that brought it will not work. There is no un-install application, and add/remove programmes cannot be used. Pest Patrol
dvdkeyauth.exe You have the dvdkeyauth.exe premium rate dialler. A2 squared Pest Patrol
Panda
dxmpp.dll A rogue anti-spyware scanner that uses a CoolWebsearch trojan to display false/misleading information to generate sales Manual removal instructions
E A B C D E F G H I J K L M N O P Q R S U V W Y Z
e2g23.exe
e2g23[1].exe
ei.exe
E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
emsw.exe Is Attune help express spyware, from Alsnet Inc. It usually comes with other spyware from the same company. Panda
Pest Patrol
evov.exe 180 Search assistant. Delivers pop up advertisements based on your surfing habits. Can reinstall itself if incompletely deleted. Trojan Remover
Pest Patrol
exec.exe You have the Death Zone RAT. Aka Executor Trojan. Allows access from a remote PC, it can disable some windows functions including task manager. Kaspersy
AVG
McAfee
Panda
Pest Patrol
Trojan Remover
explore.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
Used by a number of worms and trojans. Do not mistake this for the legitimate Windows explorer.exe process.
Wintask5 Pro will help you. There is a free trial available.
AVG
McAfee
Panda
Pest Patrol
Zone labs
Bit defender
Kaspersy
A squared
Explore.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
You have the backdoor trojan Graybird.
A squared
McAfee
Trojan Remover
Zone labs
explored.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
A component of the W32/Nexiv worm.
McAfee
explorer.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
The Windows process is in the c:\windows\System32 folder, if it is anywhere else, you will have one of the many viruses that use this name in an attempt to avoid detection.
Use Wintask5 Pro to help you.
AVG
McAfee
Panda
Pest Patrol
Zone labs
Bit defender
Kaspersy
A squared
Explorer.scr IMPORTANT  There is a windows process of a similar name which should not be deleted.
If the process is explorer.scr and NOT explorer.exe, you have the Benjamin.A virus.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Zone labs
express.exe Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove Manual removal instructions
EZulaMain.exe
MMod.exe
The Ezula software is by TOPText and arrives alongside the Kazza file sharing programme. It not only sends you pop ups, and pop unders, it also hijacks your browser to change certain words in web pages you view into links, which will direct you to an advertisers site. A top level spyware detector will find and delete the spyware. Pest Patrol
X-Cleaner
F A B C D E F G H I J K L M N O P Q R S U V W Y Z
Fash.exe Is the IBIS toolbar hijacker. It loads the websearch meta search engine, it will also install a number of other applications and can prevent access to some security related web sites. Can be difficult to remove. Pest Patrol
filgmo.exe E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
Firedaemon.exe You have the NTHack virus. McAfee
Panda
Pest Patrol
Zone labs
fntldr.exe An advertising programme installed by Gator or a CoolWebSearch variant which can resist removal, creating a 'cannot find fntldr.exe' error message on start up Pest Patrol
CWS shredder
Fsb.exe You have the Yero virus, AKA Fesber. A worm with backdoor capabilities Trend Micro
McAfee
FSG_4104.exe Another one from the gator stables, this one transmits your surfing habits back to the programme vendor, who sells the details to advertisers. Downloaded with file sharing programmes such as KaZzA, imesh and others.
NOTE, disabling or deleting this process will usually prevent the software it came with from working.
Pest Patrol
FVProtect.exe You have the Netsky.P virus. Bit defender
Panda
McAfee
Microsoft Malwaretool
G A B C D E F G H I J K L M N O P Q R S U V W Y Z
game.exe Is the W32.Gaze@mm worm, aka Win32.Gaze. Spreads via e-mail McAfee
Zone labs
gator.exe Gator, a form filling application that installs spyware Pest Patrol
Spybot S&D
goidr.exe Another Gator process Pest Patrol
Spybot S&D
Gigabit.exe You have the Bagle.U virus. McAfee
Panda
Bit defender
Microsoft Malware tool
GMT.exe A Gator product which transmits your surfing habits, and displays advertisements. This is in return for you using free software.
NOTE, disabling or deleting this will prevent the software it came with from working.
Pest Patrol
grinstall.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

H A B C D E F G H I J K L M N O P Q R S U V W Y Z
HBInst.exe
HBSrv.exe
Installed with Hotbar, an enhancement programme for Internet explorer. It constantly transmits data from your PC (slowing down your internet connection) about your searching habits, and then changes buttons and links on the bar accordingly. A spyware scanner should find and delete the spyware. The web site downloads the programme as soon as you tick the 'I accept' box in the license agreement. Pest Patrol
hellz little spy 1.2.exe
hls15.exe
You have the Helz little spy trojan, a keylogger, which records your key strokes. This one has certainly lived up to its name, it sits in the windows system folder, making its removal difficult. Some spyware scanners can detect it, fewer can delete it. Trojan Remover
Pest Patrol
here.exe
here_half.exe
Is the Dsocks.10 Trojan downloader Ewidow
A squared
hochkaod3_.exe
hqrhil7kg_.exe
ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

hxdl.exe Spyware from the Gator applicaton Pest Patrol
Spybot S&D
hxiul.exe Is a part of the HelpExpress adware made by attune that promotes ink cartridges from its advertisers Pest Patrol
Panda
X-Cleaner
I A B C D E F G H I J K L M N O P Q R S U V W Y Z
ibecdbv8.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

iedll.exe This can be a number of things
1) a varient of the CoolWebSearch Hijacker
2) Avexp.A a Hack tool
3) DItoon trojan, aka Tooncom
1) CWS shredder
2)Panda
Pest Patrol
Kaspersy
3) A squared
Pest Patrol
Kaspersy
Pest Patrol
Zone labs
McAfee
iedriver.exe Cydoor spyware, aka Turbo download usually installed with programmes from URLBlaze. A squared
Pest Patrol
Spybot S&D
IEHost.EXE Another component of Cydoor, this one will download other malware. A squared
Pest Patrol
Spybot S&D
Trend Micro
IEWERSV.exe This one can be difficult because it constantly renames itself with random file names. It Comes from Winpop, X-Cleaner
iexplore.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
Iexplorer with a file path of C:\Program Files\Internet Explorer\Iexplore.exe is the genuine article, Iexplore.exe with a file path of anything else is one of the many malware/virus/trojans that use this file name to make removal difficult including Aphexdoor, Banker-AN, Randex, KillAV, CoolWebSearch and RapidBlaster.
Let Wintask5 Pro help you. Download a Free trial here
Trojan Remover
Zone labs
A squared
Pest Patrol
Spybot S&D
Trend Micro
infus.exe Is the Infus premium rate dialler Hijack This
infwin.exe Is a varient of VX2.transponder/TPS108 spyware Trojan Remover
Ad-Aware SE
Pest Patrol
installer_marketing12.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
intdel.exe
intdel.exe_2
Component of Internet Delivery software that delivers advertising pop ups Pest Patrol
McAfee
Intrenat.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
DO NOT confuse this with Internat.exe, a windows process. You have the Doomjuice virus
Let Wintask5 Pro help you. Download a Free trial here
Bit defender
McAfee
Panda
Microsoft Malware tool
Iosdt.exe You have a Trojan . It probably arrived with an illegal copy of Windows. To delete it, restart your PC in safe mode, search All files and folders for files beginning with IOSDT, delete them and empty your recycle bin and restart your PC in normal mode. Trojan Remover
isass.exe You have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal A squared
Trojan Remover
istsvc.exe ISTbar adware,can be difficult to remove, Kill the process with Windows task manager before using a scanner Trend Micro
Ad-Aware SE
Pest Patrol
J A B C D E F G H I J K L M N O P Q R S U V W Y Z
jawa32.exe Agent.bg trojan Pest Patrol
X-Cleaner
Spybot S&D
Trojan Remover
jdbgmrg.exe Is the TROJ_DASMIN.B virus, which connects to the web and downloads an adult premium rate dialler. Trojan Remover
Trend Micro
McAfee
K A B C D E F G H I J K L M N O P Q R S U V W Y Z
kazza.exe If it is located in windows/system (98, ME), Windows/winnit/system (NT, 2000) or Windows/system32 (XP) you have the Optix.Pro Remote access trojan, which can disable over 200 firewalls and security applications. It also carries a keylogger and can turn on or off your monitor, keyboard flash lights, screen saver, mouse, keyboard, clock and start button, or cause the CD drawer to open and close, reset home page, redirect searches and cause the speaker to sound 200 bleeps. Resists removal Trojan Remover
A squared
keenvalue.exe Spyware from Gator Pest Patrol
Spybot S&D
Kern32.exe
Kernel32.exe
Krnl32.exe
IMPORTANT  There is a windows process of a similar name which should not be deleted.
DO NOT mistake Kernel32.dll for a virus, this is the main windows process file. However if you have any of the processes to the left running, you have one of a number of possibilities including Batrans, Epon, Babylonia, Kernal, Hooker or Floodnet viruses.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Zone labs
A squared
Pest Patrol
Spybot S&D
Trend Micro
Bit defender
knightseven.10 ii.exe You have the Backdoor.Knightseven.10, a Remote Access Trojan. Difficult to detect as it can hide from the process list and use random file names in different locations of your PC. Kaspersy
Pest Patrol
L A B C D E F G H I J K L M N O P Q R S U V W Y Z
L32x.exe You have the Dumaru.Y or the Dumaru.Z virus. McAfee
Bit defender
lmu.exe Hyperlinker adware from Vertical Theories that turns keywords used on a web page into links directing users to their advertisers. Pages that are saved hold the amended page so can still show links on previously viewed paged even after removal. Trend Micro
loader.exe CoolWebSearch varient CWS shredder
Lockx.exe Sdbot-ADD, a worm that infects machines with links via the AOL instant messenger, installs a rootkit and a bundle of other malware. Difficult for scanners to detect and remove Manual removal instructions
Lsass.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
If the file path is NOT C:\WinNT\System32\LSASS.exe (Windows 2000) or C:\Windows\System32\LSASS.exe (Windows XP, 2003), then you have one of a number of possible viruses including Windang.worm, irc.ratsou.b, Webus.B, MyDoom.L, Randex.AR, Nimos viruses,
Let Wintask5 Pro help you. Download a Free trial here
AVG
McAfee
Panda
Pest Patrol
Zone labs
Bit defender
A squared
Trend Micro
and download all critical Windows updates
Lsasss.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
If the task is Lsasss and not Lsass you have the Sassar virus.
McAfee
Panda
Zone labs
Microsoft Malware tool
lssas.exe Is the W32.AGOBOT.RL trojan, Trend Micro
Microsoft Malware tool
M A B C D E F G H I J K L M N O P Q R S U V W Y Z
Maja.exe You have the Netsky.H virus. McAfee
Panda
Zone labs
Microsoft Malware tool
mapisvc32.exe You have the Backdoor.VB.kx trojan, aka KX virus or FPAI adware. Pest Patrol,
Kaspersy
mario.exe Is the mario remote access trojan McAfee
Zone labs
Pest Patrol
Trojan Remover
md.exe Is the SystemMD virus, a dialler and homepage hijacker Pest Patrol
mfin32.exe Is the MyFreeInternetUpdate adware Spybot S&D
mmod.exe Known as Ezula spyware, distributed via many file sharing programmes like KaZaA, Imesh etc. It adds links to their advertisers to web pages, effectively stealing the web space. Spybot S&D
Panda
Pest Patrol
mostat.exe Spyware from WurldMedia, tracks internet usage, delivers pop ups and redirects links through its own servers to steal any affiliate fees. Pest Patrol
X-Cleaner
msapp.exe You have the RSBOT trojan A squared
McAfee
Zone labs
MSBB.exe 1800 solutions have a product called n-case, a shopping comparison search engine that gets installed when you install some free software products. The software produces endless advertising pop ups, but it also tries to start up dial up internet connections, dramatically slows down your browser, and causes random error messages.
Pest Patrol
X-Cleaner
Trojan Remover
Msblast.exe You have the Blaster virus, also called Lovsan. McAfee
Bit defender
Microsoft Malware tool
mscache.exe Is ISTbar.MSCache spyware from Integrated Search Technologies that monitors internet activity and delivers pop up advertisements. Pest Patrol
msccn32.exe Is the Win32.Sobig.B@mm (Palyh) virus, which is spread via e-mail claiming to be from support@microsoft.com Bit defender
Trend Micro
Panda
Norman anti-virus
Microsoft Malware tool
Msckin.exe
Mscman.exe
Comes with the Clientman Internet explorer add on. It directs you to advertiser sites relating to words you type in your search engine. The software is know to cause boot up errors, it collects information from your pc, and even changes the settings in the Zone alarm firewall to ensure it has internet access. Pest Patrol
Panda
Kaspersy
mscornet.exe A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. Information and removal
mscvb32.exe Is The Sobig worm. Trend Micro
McAfee
Panda
Bit defender
Norman anti-virus
Microsoft Malwaretool
MSCVT.exe You have the Slideshow virus which spreads via file sharing programmes, KaZzA etc, and AOL instant messenger X-Cleaner
Trojan Remover
MSFind32.exe You have the Cayam virus. McAfee
Zone labs
Trojan Remover
msgfix.exe Is either the GAOBOT.AUS, SDBOT.J or SDBOT-QG worms. Trend Micro
Microsoft Malwaretool
Msgsrv32.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
Careful with this one, It is the name of an essential programme in windows 95, 98 and ME, but it only appears in the task list if the programme is 'hung'. If this appears in your task list and you keep getting strange error messages, you MAY have the Deadhat.B virus. To check, reboot your pc in safe mode and do a fully updated virus scan.
Let Wintask5 Pro help you. Download a Free trial here
Panda
McAfee
Zone labs
msiexec16.exe Is the OPTIX PRO trojan. It is programmed to close down security software every 60 seconds A squared
Pest Patrol
Trojan Remover
Msinfo.exe
MSInfo.exe
IMPORTANT  There is a windows process of a similar name which should not be deleted.
Do not mistake the essential windows component MSINFO32.exe, (with the '32'). Msinfo.exe is a browser highjack usually picked up from adult sites, a spyware scanner would detect and remove it.
MSInfo.exe is the Aladinz.M virus.
Let Wintask5 Pro help you. Download a Free trial here
Pest Patrol
Zone labs
X-Cleaner
CWS shredder
mslagent.exe Is either the
1)Wintrim.bn trojan or
2) Slagent spyware, aka MagicControl
1) Trend Micro
Pest Patrol
Trojan Remover
2) Ad-Aware SE
Pest Patrol
Spybot S&D
Trend Micro
MSlaugh.exe You have the Blaster virus, also called Lovsan, which exploits a Windows vulnerability. Unpatched machines can be infected just by being connected to the internet. Update your windows.
McAfee
Bit defender
Microsoft Malware tool
msmc.exe Is the Win32.Small.i ,or Sibco Trojan or Clientman parasite Ad-Aware SE
Pest Patrol
Spybot S&D
Trend Micro
msmgt.exe Total Velocity spyware, it monitors internet activity, reports back to its servers and delivers pop up advertisements Pest Patrol
Spybot S&D
Trend Micro
msmsgri32.exe You have the RANDEX.D worm which also carries a trojan Trend Micro
A squared
Pest Patrol
Microsoft Malwaretool
MSMQS.exe You have the Freefors virus. Trend Micro
MSN.exe IMPORTANT  There is a MSN process of the same name which should not be deleted.
The genuine MSN file is MSN/MSNcore/MSN.exe, if it is anywhere else, its one of a few possible nasties.
Wintask5 Pro can help you. Download a Free trial here
Trend Micro
A squared
Pest Patrol
Bit defender
McAfee
Msnet.exe You have the Mockbot.A Worm. or SDBOT trojan X-Cleaner
Trojan Remover
MSpatch.exe You have the Blaster virus, also called Lovsan. which exploits a Windows vulnerability. Unpatched machines can be infected just by being connected to the internet. McAfee
Bit defender
Microsoft Malware tool
msrexe.exe Is the SubSeven.2 remote access trojan. A widely used hacking tool with more than 100 variants. It hooks into the computer system in 4 ways, uses random file names and each installation is slightly different, making it difficult to remove.
It gives complete control of your computer to a cracker.
Trojan Remover
A squared
mssearchnet.exe A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. Information and removal
mssmmspgr.exe You have the W32.Kelvir.AJ worm which spreads via by sending the message 'lol, look at this' in the MSN instant messenger. it will drop a variant of the sdbot worm, which will itself attempt to spread as well as opening abackdoors to your PC, terminate processes, steal activation keys and install a keylogger Trojan Remover
Trend Micro
mssvc32.exe Is the W32/Gaobot.WU trojan. aka AGOBOT.ZJ, Win32:Gaobot-129;, Worm/Agobot.PJ, W32/Gaobot. It exploits a windows vulnerability, disables many anti-virus and firewalls, prevents access to security web sites, launches DOS attacks on web sites, steals passwords. Trend Micro
Kaspersy
McAfee
X-Cleaner
Pest Patrol
Microsoft Malwaretool
mssys.exe Is either
1) CWS.Svcinit Hijacker if your searches are redirected to xwebsearch.biz
2) Vanta.A Trojan if MsSystem is added to start up
3) MYSS.B trojan if mssys is added to start up
1) CWS shredder
Pest Patrol
2) Trend Micro
3) Zone labs
McAfee
Msvchost.exe IMPORTANT  There is a windows process of a similar name which should not be deleted.
You have the Xombe virus, also known as Trojan.Xombe, Downloader-GJ. Do not 'end process' or delete the windows file svchost.exe by mistake.
Let Wintask5 Pro help you. Download a Free trial here
Kaspersy
Bit defender
Pest Patrol
msvxd.exe Is the W32/Datom-A virus Trend Micro
McAfee
Panda
msxmidi.exe Trojan and Hijacker, CoolWebSearch variant Pest Patrol
CWS shredder
Mswkwrh.exe You have the Anavol hack tool, which may be installed with the Volac trojan Norton
Musirc4.71.exe You have the Randex.Q virus. Zone labs
Microsoft Malware tool
mwsoemon.exe MyWebSearch Hijacker. Can be difficult to remove. Spybot S&D
Trend Micro
Antispy
mwsvm.exe Is either
1) ADW_SCANPORTAL.A Adware. It monitors internet activity and delivers pop up advertisements.
2) SeekSeek BHO
1) Trend Micro
2) Pest Patrol
Spybot S&D
N A B C D E F G H I J K L M N O P Q R S U V W Y Z
Nail.exe Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually Info and manual removal
ncompat.tlm A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. Information and removal
netd32.exe Is the RANDEX.F virus. McAfee
Trend Micro
Microsoft Malware tool 
NetMon.exe You have the Mimail.M virus McAfee
Bit defender
Pest Patrol
Zone labs
Microsoft Malware tool
NetWatch.exe IMPORTANT  There is a windows process of the same name which should not be deleted.
This is a windows file name in windows 95, 98 and ME for a programme which allow you to view shared files and folders on one screen, but is only shows in the task manager if you have specifically opened the programme.
It is also a file name for the Mimail.C virus.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Pest Patrol
Bit defender
Microsoft Malware tool
netwrap.dll A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. Information and removal
NJG40.exe You have the PWSteal,Bancos.D virus. Trojan Remover
X-Cleaner
nls.exe Can be either
1)Navisearch adware from eXact advertising, the makers of BargainBuddy.
2)Webrebates spyware aka Win32.Agent.y
1) Spybot S&D
2) Zone labs
Pest Patrol
Kaspersy
NTOSA32.exe You have the Anig virus. McAfee
Zone labs
ns15bmii.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
nssys32.exe Is the nssy32 trojan, or netshagg adware from SJB enterprises which is distributed with bundles of malware and via mynetprotector.com, an apparent security related website. A squared
Pest Patrol
Spybot S&D
nstask32.exe Is The RPCSdbot.B virus, aka randex.e, and Spybot.worm.md Zone labs
Pest Patrol
Kaspersy
Microsoft Malware tool
nsupdate.exe Is the nsupdate trojan/dialler, aka Dialer.Lusval McAfee
Pest Patrol
NTOSA32.exe Is the Anig worm. It has backdoor capabilities to allow remote access and can record keystrokes removal tool

Trend Micro
nvctrl.exe A CoolWebSearch trojan that gives false virus or system information in an attempt to sell a variety of rogue security software. Information and removal
Nwiz.exe IMPORTANT  There is a process for Nvidia graphics card drivers (2002 onward), of the same name
You may have the Gaobot.ZX or Agobot virus which hide behind a process used by a driver for the Nvidia graphics card. If you do not have a a Nvidia card, you will have the virus.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Pest Patrol
Microsoft Malwaretool
O A B C D E F G H I J K L M N O P Q R S U V W Y Z
offerdownline.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
omniscient.exe Is a Search assistant for BlazeFind spyware, it is also known as a trojan. Uses the explorer.exe file, improper removal can cause serious damage. Panda
Pest Patrol
Trend Micro
onoes.exe Is a varient of the Sdbot trojan, AKA Rbot. Kaspersy
Pest Patrol
Bit defender
Microsoft Malware tool
onsrvr.exe Is either
1)OnWebMedia spyware, aka Win32.SubSearch.b trojan
2) SearchSeekFind spyware
1) Pest Patrol
Spybot S&D
A squared

2) Pest Patrol
Ad-Aware SE
open_me.exe you haveW32 spybot worm Kaspersy
Panda
McAfee
Pest Patrol
optimize.exe Is the Optimize premium rate dialler, aka DyFuCA trojan. Often installed alongside or by trojans. Kaspersy
Panda
Pest Patrol
Trojan Remover
Outlook.exe IMPORTANT  There is a Windows process of the same name which you should not delete
If the full filepath for this process is C:\Windows\Outlook.exe or C:\WinNT\Outlook.exe then it is likely you have the Mimail.Q virus.
Let Wintask5 Pro help you Download a Free trial here

Kaspersy
Panda
McAfee
Microsoft Malware tool
P A B C D E F G H I J K L M N O P Q R S U V W Y Z
P2P Networking.exe Is P2P Networking spyware, aka PPNETWORK.A. Installed with File sharing programmes Pest Patrol
Trend Micro
PCSvc.exe
PGMonitr.exe
Installed mainly with KaZzA, not only is it adware, it is also responsible for slowing down PC's and causing errors on boot up. however it is likely to prevent your KaZzA programmes working if you delete it.
If you want to delete this adware, you need to follow this procedure-
In the Control panel (Start/settings/control pannel), click Add/remove programmes, and delete any programme with Delfin or PromulGate in the filename, then reboot your PC. Click start, then search, click all files and folders. Then type pcsvc.exe into the search box, next click more advance options and make sure the search hidden files and folders is ticked, click search. Delete any folder remaining. Run a fully up to date spyware scanner to find any remaining components.
Ad-Aware SE
Pest Patrol
Spybot S&D
Penis32.exe You have the Blaster virus, also called Lovsan. McAfee
Bit defender
Microsoft Malware tool
pi1.exe
E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
Play_Game.exe Is the Backdoor.Win32.Prorat.19 trojan. McAfee
Bit defender
A squared
Trojan Remover
Poller.exe Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually Info and manual removal
powerscan.exe Is powerscan spyware. aka ISTbar Pest Patrol
Trend Micro
PrecisionTime.exe Gator software to deliver pop up advertising windows. It has been put into computers with a pop up that appears whist surfing, apparently as a result of something you did, there is no 'close window' facility, just an 'ok' button, which then downloads the software.
Pest Patrol
X-Cleaner
prizesurfer.exe Is prizesurfer spyware, aka Win32.RCSync trojan. Pest Patrol
Bit defender
Panda
McAfee
prmt.exe You have spyware from OpiStat, aka Netrating and Webhancer. Trend Micro
Ad-Aware SE
Spybot S&D
prmvr.exe Is YahooStock from adtomi, known for producing difficult to remove spyware Ad-Aware SE
Pest Patrol
McAfee
prutpct.exe
prutsct.exe
pruttct.exe
ptech.exe
E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
Q A B C D E F G H I J K L M N O P Q R S U V W Y Z
q17i9a4j.exe
qlep5ad6.exe
Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
R A B C D E F G H I J K L M N O P Q R S U V W Y Z
Rabbit.exe You have the Mimail.S virus. McAfee
Panda
Zone labs
Microsoft Malwaretool
rb32.exe Is the RapidBlaster Hijacker. Removal is sequence specific, otherwise it detects an un-installation attempt and will copy itself to a differently named file. Removal tool
Pest Patrol
Spybot S&D
RCSync.exe Installed mainly with software from Pirzesurfer.com who offer prize draw incentives for shopping online at certain shops, and a few other 'free' or file sharing programmes. It also delivers a stream of pop up ads all the time you are connected to the internet. Pest Patrol
Bit defender
Panda
McAfee
RegDefend-v2.000.exe Is the Trojan.Downloader.Istbar.JA Bit defender
Kaspersy
Regsysw.exe You have the Wilsef virus. McAfee
rk.exe NetSetter/Marketscore variant from Relevant Knowledge. It redirects and analyses all your web traffic, it even descrambles packets sent via SSL (secure, encrypted) by adding a trusted root certificate. Difficult to completely remove and it can hide when task manager opens. Use Wintask5 Pro Trojan Remover
Pest Patrol
run32dll.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You may have one of the following
1) Ftp_Ana trojan, if Winstro appears on the start up menu.
2)Pal PC spy keylogger if Klp appears on the start up menu.
3)Gates of Hell 1.2 remote access trojan, aka Gatehell
1) Trend Micro
McAfee
2) Anti-keylogger
3) Pest Patrol
Kaspersy
A squared
Trojan Remover
rundll.exe IMPORTANT  There is a Windows process of the same name which you should not delete
Is a Windows process in the 95, 98 and ME versions if the file path is C:\Windows\Rundll.exe
In Windows XP, 2000 or a different file path, it will be one of the following.
1) Loxoscam trojan.
2) Backdoor. schoolbus.B trojan
3) Agobot worm if Windows32 shows on the start up list.
4) Hako trojan with a start up entry of Wndows update.
5) Huya worm with a start up entry of RundllSvr
Trojan Remover will detect, remove and repair Windows for all these malware. Free trial is available.
Rundll16.exe Is used by many worms, trojans and malware. here are the most likely.
BrowserAid adware.
RDLL backdoor trojan.
Sobot.F trojan.
Domwis trojan.
Wootbot.H worm.
Subseven 1.9 trojan.
PSW.M2 password stealer.
Fenster trojan.
W32/oror.C Damaging mass mailing worm
Due to the number of possibilities, scan with a variety of virus/trojan/malware applications.
Pest Patrol
Kaspersy
A squared
Trend Micro
McAfee
TDS 3
Panda
Ad-Aware SE
Spybot S&D
Bit defender
Trend Micro
Trojan Remover
Rundll32.exe IMPORTANT  There is a Windows process of the same name which you should not delete
The windows process Rundll32.exe usually only appears in the task manager if you are having problems with your pc, if it constantly, or regularly appears on your process list, you should reboot in safe mode and do an up to date, or online virus scan as you may have one of a number of viruses including Miroot.Worm aka Legemer.Worm, or Sanker.
Let Wintask5 Pro help you. Download a Free trial here
McAfee
Panda
Zone labs
Kaspersy
ruxdll32.exe Is a mass mailing Mapson.D worm. A squared
Panda
Zone labs
S A B C D E F G H I J K L M N O P Q R S U V W Y Z
saap.exe
sais.exe.
salm.exe
Is spyware from 180Search Assistant aka n-case, AdLogix and Win32.IstBar.j . It monitors your internet activities, sends the details for their analysis and delivers advertising pop ups. Can be difficult to remove. A squared
Pest Patrol
Panda
Kaspersy
Spybot S&D Trend Micro
sacc.exe SurfAccuracy adware. It records search enquiries and delivers advertising pop ups Ewidow
Pest Patrol
A squared
SAHAgent.exe
sahagent-cdt1004.exe
sahdownloader.exe
sahhtml.exe
sahpackage.exe
sahuninstall_.exe
ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

saie.exe Is the
1) DyFuCA Internet Optimizer Hijacker, aka Active Alert, All-In-One Telcom, Proclaim Telcom, TrojanDownloader.Win32.Dyfuca
2) Spyware from 180 solutions, see saap.exe above.
Trojan Remover
A squared
Pest Patrol
Panda
Kaspersy
X-Cleaner
satmat.exe Is the Transponder/MSView parasite, now called abetterinternet from DirectRevenue, a company known for producing difficult to remove applications. Trojan Remover
A squared
Pest Patrol
Ad-Aware SE
SaveNow.exe
Save.exe
This can show as SAVENOW, SAVE, WHENUSAVE, SAVENOW.EXE or SAVE.EXE. This programme records what you type into search engines and send you advertising pop ups, lots of them, related to the sites you visit. Pest Patrol
X-Cleaner
A squared
Ad-Aware SE
scam32.exe Is the Sircam virus which spreads via e-mail. It can delete files from the hard drive, prevent processes from running, and use all available free space on a PC. removal tool
Trend Micro
McAfee
Panda
ScardSvr32.exe
Navpw32.exe
You have the Femot.Worm or MoFei.worm aka WORM_MOFEI.A or B virus. Trojan Remover
McAfee
Zone labs
ScrSvr.exe You have the OPASERV virus McAfee
Panda
Bit defender
Trojan Remover
SCVHOST.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You have one of the many viruses that use this name, the most detected being Sdbot.Nor Gaobot.
DO NOT confuse the virus SCVHOST.exe with the Windows process SVCHOST, which may appear several times. Let Wintask5 Pro help you Download a Free trial here
McAfee
Panda
Kaspersy Antivirus
Bit defender
Zone labs
Microsoft Malware tool
sd.exe ShopAtHomeAdware, aka Golden retriever installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Pest Patrol

Trojan Remover (Free trial)

SearchUpdate33.exe Is the SearchSquire spyware application Pest Patrol
A squared
Trend Micro Ad-Aware SE
seeve.exe A variant of media-motors adware, referred to as a trojan in some parts of the web. Re-installs is removed with scanners Manual removal instructions
service.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
Do not mistake this dangerous process for the legitimate Windows process services.exe
1) Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed.
2) Win32.Raleka worm.
3) Sdbot trojan.
1) Trojan Remover (Free trial)
Pest Patrol
2) McAfee
Windows Patch 3)Trojan Remover
Services.exe IMPORTANT  There is a Windows process of the same name which you should not delete
Careful with this one, in Windows NT4/2000/XP/2003, services.exe is a major player in the Windows system, which has a file path of C:\WINNT\System32\Services.exe or C:\Windows\System32\Services.exe, dependent on which Windows you run. The Netsky virus also uses this process name, with a file path of C:\WinNT\Services.exe or C:\Windows\Services.exe,
if you have Windows 95, 98 or ME and this task is running, you will have the virus.
Let Wintask5 Pro help you, Download a Free trial here
McAfee
Panda
Bit defender
Microsoft Malware tool
Servics.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You have the Xibo virus aka Backdoor.XLBH.b trojan. DO NOT confuse this with the windows process services.exe which should be present with the Windows NT4/2000/XP/ systems. Let Wintask5 Pro help you . Download a Free trial here
Trojan Remover
A squared
Kaspersy
sexy.exe You have one of a number of viruses, including Linong, Pkasa and Ainjo McAfee
Zone labs
skytown.exe E2Give gives 10% of affiliates fees earned from you to charity. It installs a BHO that monitors internet activity and gathers information about you and the programs you have installed in your PC. Information and removal instructions
soap.exe Is System Soap Pro, cleaning software. The free version also installs known spyware applications ZipClix and Httper Pest Patrol
Ad-Aware SE
X-Cleaner
spoler.exe You have the Randex.J virus. Trend Micro
Zone labs
Microsoft Malware tool
Spoolsrv32.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You have the Gaobot virus. DO NOT confuse this process with the Windows processes Spool32.exe or Spoolsv.exe Let Wintask5 Pro help you Download a Free trial here
Panda
McAfee
Microsoft Malware tool
spyaxe.exe.exe A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. Information and removal
SpyFalcon.exe A rogue anti-spyware scanner that uses a CoolWebsearch trojan to display false/misleading information to generate sales Manual removal instructions
spywarestrike.exe A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. Information and removal
spywarequake.exe A rogue anti-spyware scanner that is downloaded by a CoolWebSearch trojan that gives false virus or system information. Information and removal tool
sr.exe A rogue anti-spyware scanner Winfixer or SysProtect that is downloaded by theVundo trojan that gives false virus or system information. Information and removal
start.exe Is Secret-Crush spyware/Hijacker Pest Patrol
Ad-Aware SE
Stcloader.exe This is part of an 'add on' for the Internet explorer toolbar, from 2nd-thought.com. It downloads into your pc, software and advertising tool bars without informing you. It may also add the following processes from its partners. ClrSchP038, MWSVM, SLMSS, StatBlaster, STC, UpdateStats. X-Cleaner
Pest Patrol
Susp.exe Is the Transponder/MSView parasite, now called abetterinternet from DirectRevenue, a company known for producing difficult to remove applications. A squared
Pest Patrol
Ad-Aware SE
Trojan Remover
svc.exe Is Clientman spyware. aka Madfind Trend Micro
Pest Patrol
Panda
Kaspersy
Svch0st.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
If in-between the 'h' and the 's' is the number '0', rather than the letter 'o', as in the windows process svchost.exe then you have the Graybird virus. Let Wintask5 Pro help you Download a Free trial here
Trojan Remover
McAfee
svchost.exe IMPORTANT  There is a Windows process of the same name which you should not delete
Many viruses hide behind the windows process svchost.exe, which may appear in your task list several times Important things to consider are- this process is in Windows 2000/XP/2003 only. If you use Windows 95, 98 or ME and this process shows in your task list, it is likely you have a virus. If the process file path is NOT C:\WinNT\System32\Svchost.exe or C:\Windows\System32\Svchost.exe then it is likely you have a virus.
Let Wintask5 Pro help you Download a Free trial here
Trojan Remover
Kaspersy
Bit defender
Zone labs
Panda
McAfee
svchosts.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
Do not mistake this process with svchost (without the extra 's'), You have one of a number of Trojans including -
Fructa, Spybot.GQ, Sdbot, Agobot or Faxbat
Pest Patrol
A squared
Trend Micro
Kaspersy Antivirus
Panda
Spybot S&D
Trojan Remover
Svchost32.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You have a virus which could be one of a few, including including Goabot, Zcrew, Deborms.C, Mimail.J, or Paylap.
Let Wintask5 Pro help you Download a Free trial here
Panda
Zone labs
Kaspersy
Microsoft Malware tool
svcmcrv12.exe Is the Win32.Delf.cr trojan downloader Ewidow
A squared
Trojan Remover
svcproc.exe Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually Info and manual removal
Svhost.exe IMPORTANT  There is a Windows process with a similar name which you should not delete
You have a Trojan, usually picked up from file sharing programmes or pirate software. It can also be seen in the task manager as numbers and letters like 687AF68632. For some strange reason, not many anti virus scans pick this one up. Click End process. To delete it, find the file by typing svhost into the search box, (start/search), then delete all the files found. Reboot, and make sure it has not reappeared.
Mydoom.I, SDBot and Rbot worms also uses a file with this name.
Let Wintask5 Pro block/delete this for you. Download a Free trial here
Trojan Remover
A squared
TDS 3
McAfee
Microsoft Malware tool
SyncroAd.exe Is Syncro ad spyware, removal can be difficult. It is a child process of the file winsync.exe which re-installs itself. To prevent re-installation use Task manager (ctrl, alt and delete keys altogether) right click on winsync and select end process tree prior to removing the files with a malware scanner or manually A squared
Spybot S&D
Trend Micro
Pest Patrol
Syscfg32.exe You have the Kwbot.S virus. Trojan Remover
McAfee
sysfit.exe Is Adshooter/searchforit BHO, aka Trojan.Win32.StartPage.ey A squared
Pest Patrol
Ad-Aware SE
Zone labs
Kaspersy
Trojan Remover
Sysload32.exe You have the Mimail.E virus. McAfee
Panda
Pest Patrol
Microsoft Malware tool
sysprotect.exe Sysprotect, an rogue application installed by the Vundo trojan shows false warnings that resemble the Windows Security Center, stating the PC is infected with the Bloodhound or Blackworm virus and system crippling errors, to trick the user into buying the program Information and removal instructions
SysMonXP.exe You have the Netsky.Q virus. McAfee
Panda
Pest Patrol
Microsoft Malware tool
SYP.exe A rogue product SysProtect. Downloaded by the Vundo trojan that gives false Blackworm/Bagle virus or system information. Information and removal tool
System.exe IMPORTANT  There is a Windows process of the same name which you should not delete
You may have one of the many viruses that uses Windows system.exe in an attempt to avoid detection, and make removal difficult, like Revird, Mitglieder.C, Tuxder, Ciador viruses.If you are concerned you may have a virus, disable system restore in windows ME and XP, reboot in safe mode and do an updated virus scan.
Let Wintask5 Pro help you Download a Free trial here
TDS 3
Kaspersy
Bit defender
Zone labs
Pest Patrol
Panda
McAfee
system32.exe Used by a number of trojans/viruses including Agobot,
Backdoor.IRC.BOT,
Kitro
Kwbot
logpole,
netdevil,
Rbot
wootbot
due to the wide range of possibilities, it is recommended a range of virus and trojan scanners are used.
Pest Patrol
Trend Micro
Spybot S&D
TDS 3
A squared
Panda
Bit defender
Trojan Remover
Sysload32.exe You have the Mimail.E virus. McAfee
Panda
Pest Patrol
Microsoft Malwaretool
systb.exe TrojanDownloader.Win.32, OneClickNetSearch AKA trojandropper.Win32.Delf.av, BHO3Lib and IEPLUGIN. A Browser Helper object. Kaspersy
Pest Patrol
Systray.exe IMPORTANT  There is a Windows process of the same name which you should not delete
There are a few viruses that hide behind the Windows SysTray.exe process, including Mutebot. A fully updated virus scanner would find them.
Let Wintask5 Pro help you Download a Free trial here
TDS 3
Bit defender
Pest Patrol
T A B C D E F G H I J K L M N O P Q R S U V W Y Z
TaskBar.exe You have the Frethem.L virus. McAfee
Bit defender
TaskMon.exe IMPORTANT  There is a Windows process of the same name which you should not delete
Taskmon.exe is a process in Windows 98 and ME only, If you have any other operating system and it shows in the task manager, it is likely you have either Novarg.A, Mydoom or Mimail.R virus,
Let Wintask5 Pro help you Download a Free trial here
Bit defender
McAfee
Microsoft Malware tool
tb_setup.exe Is the Huntbar parasite Spybot S&D
Trojan Remover
Teekids.exe You have the BLASTER.C virus, aka Lovesan and MSBlast. Panda
Zone labs
Trend Micro
Microsoft Malwaretool
tibs3.exe Is the Tibs adult content premium rate dialler, usually installed by the Small.SO trojan Trojan Remover
Trend Micro
trickler.exe A process related to Gator software which monitors internet activity and delivers pop up advertisements. A squared
Spybot S&D
Pest Patrol
Ad-Aware SE
ts.exe You have either
1)TimeGluk trojan, which appears to do nothing more than randomly change the time/date.
2) Travelling Salesman spyware.
3) BAT.Mumu.B, a collection of hacking tools and malicious codes.
1) To deactivate - copy this to your clipboard KILLTIMESHAG
2) X-Cleaner
3) Trend Micro
TDS 3
ts2.exe
tsl.exe
tsm2.exe
Is either
1) Travelling Salesman spyware.
2) Target Saver adware, aka TSUpdate trojan downloader.
1) X-Cleaner
2) Pest Patrol
Kaspersy
Trojan Remover
tsadbot.exe Is Timesink adware from conducent, installed alongside various freeware, removing the freeware will leave behind the timesink components to monitor internet activities and deliver pop ups. Pest Patrol
Ad-Aware SE
Tskmg.exe You have the Warpigs.C aka Spyboter virus, or the SDBOT.GEN trojan Trojan Remover
X-Cleaner
Tvm.exe Is TVmedia search hook, from totalvelocity.com. It hijacks your browser, delivers pop ups and cause system crash when Windows service pack 2 is installed. Is is bundled with other parasites or by active x downloads. Can be difficult to remove because it hooks into the windows process explorer.exe Microsoft have a removal tool for XP users here
Ad-Aware SE
Pest Patrol
can remove it in Safe made or by ending the explorer.exe process first.
tvmd.exe
tvtmd.exe
Is Memery meter adware from totalvelocity.com. it will not uninstall whilst these processes are running, so either start PC in safe mode or end process tree with task manager or Wintask5 Pro, get a free trial here before running scanners to remove it. Ad-Aware SE
Pest Patrol
U A B C D E F G H I J K L M N O P Q R S U V W Y Z
u6f6uftuc_.exe
uabal85u.exe
ucmoreiex.exe
umqltg4cl_.exe
Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
uacupg.exe Aurora adware. By design, difficult to remove. Some scanners can do a partial uninstall but the only way to remove all of its components is manually Info and manual removal
UPD.exe Gets installed with screensavers like Capture Osma, StripSaver, VirtualGay, VirtualGirl and VirtualGuy, remove it with a fully updated, top end spyware scanner. Pest Patrol
Adware SE
updinstall.exe Is the running process for the BM2 spyware. From the NicTec stable, known for difficult to remove software. Spybot S&D
update.exe Is used by many malware/trojan/virus programmes, including -
1) Advsearch adware.
2) AproposMedia adware.
3) xxxtoolbar adware.
4) Adroar adware.
5) Autotroj-C trojan.
6) Bookmark express adware.
7) CoolWebSearch.msupdate Hijacker.
8) CoolWebSearch.sys Hijacker
9) Delf-fn Trojan.
10) Forbot trojan.
11) Gaobot.AO worm.
12)IEDriver adware.
13) Israz trojan.
14) Japanese key logger Keylogger.
15) NSupdate premium rate dialler.

Let Wintask5 Pro help you Download a Free trial here
1) Pest Patrol
2)Spybot S&D
Pest Patrol
3) Spybot S&D
Pest Patrol
Panda
4) A squared
Spybot S&D
Pest Patrol
Trend Micro
5) Windows security
6) X-Cleaner
7&8)Spybot S&D
CWS shredder
9) A squared
10) X-Cleaner
Trojan Remover
11) Trend Micro
Microsoft Malware tool
12) A squared
13) Trend Micro
14) Pest Patrol
Anti-keylogger
15) Pest Patrol
updater.exe Is connected with a number of malware applications-
1) Advsearch Adware.
2) Winshow Hijacker.
3) CoolWebSearch.msupdater hijacker.
4) Navhelper adware.
5) Scratch and win keylogger.
6) Aureate Group Mail spam generator.
7) Ehks keylogger.
8) Ashley trojan.
1) Pest Patrol
2) A squared
3) CWS shredder
4) Pest Patrol
Trend Micro
5) Pest Patrol
Anti-keylogger
6) Pest Patrol
7)Anti-keylogger
Pest Patrol
8) Pest Patrol
A squared
Updmgr.exe Software installed with file sharing programmes, most notably with KaZzA. Produces pop up advertisements when connected to the internet, but it also slows down your internet connection, can cause boot up errors and Internet Explorer to crash. Deleting this file will prevent KaZzA software working. If you want to delete it, click start, then run and type msconfig, click the Start up tag, then disable UPD.exe restart your pc, and restart your PC, click Start and search, type updmgr and search, remove all files found. X-Cleaner
Pest Patrol
Uprootkit.exe You have the UpRootKit virus. Pest Patrol
Trojan Remover
uvv211ra.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
UWFX5LP_0001_0715NETINSTALLER.EXE
UWFX5LP_0001_0614NETINSTALLER.EXE
UWFX5LP_0001_0802NETINSTALLER.EXE
UWFX5LP_0001_0803NETINSTALLER.EXE
Is Winfixer 2005. Pop ups delivered by a trojan, (the latest being Vundo) install this application which will suggest security threats and critical errors exist, and requests $39.95 to fix them. Manual removal instructions
V A B C D E F G H I J K L M N O P Q R S U V W Y Z
vp9inkbd.exe Shopathome adware, AKA Shop at home select and Golden retriever delivers advertising pop ups, installed with some shopping and file sharing programmes, which not only records your online and off line activities, It hogs your internet connection, which is particularly noticeable with a 56K dial up connection. Manual removal is difficult and can reinstall, cause critical errors, loss of internet connection or prevent the PC from restarting if incorrectly or incompletely removed. Trojan Remover (Free trial)

Pest Patrol
vsmon.exe If the file location is windows/system32/zonelabs/vsmon.exe or Programme files/ zonealarm/repair/vsmon.exe it is the truevector service for Zone alarm firewall , if however the file path is windows/system32/vsmon.exe or you do not have the zone alarm firewall installed then you have the Win32.Rbot.GE worm A squared
Pest Patrol
Kaspersy
Microsoft Malware tool
Vxd32v.exe You have the Dumaru virus. Trojan Remover
Zone labs
McAfee
W A B C D E F G H I J K L M N O P Q R S U V W Y Z
Warm.scr You have the Scold virus. Bit defender
McAfee
wast.exe Is either
1) TrojanDownloader.Win32.VB.ah trojan
2) Grokster adware.
1) A squared
Pest Patrol
2) Pest Patrol
Spybot S&D
Wapicc.exe
Wapisu.exe
Wapisvit.exe
Wcpcc.exe
See wniservn.exe.
web.exe You have either -
1) W32.Gokar worm.
2) Coolwebsearch parasite
1) Bit defender
Trend Micro
2) CWS shredder
WebAssist.exe Ad serving software from 180Solutions, delivered with many free applications and file sharing programmes. A reputable spyware scanner will delete this. Trojan Remover
Pest Patrol
Webdev Is an IRC DDoS bot, which allows an attacker full control of your computer Free online scan at Trend Micro . Then update Windows to prevent re-infection
webrebates.exe Is Webrebates advertising programme, aka ebates money maker and HackTool/Jkill.A Spybot S&D
Panda
Pest Patrol
webrebates0.exe
webrebates1.exe
Is adware from Toprebates Pest Patrol
Panda
Kaspersy
Trend Micro
WHAgent.exe You have webhancer installed, it comes packaged with some free or cheap software. It send information relating to your surfing back to a central computer, in addition to being the cause of slow internet performance, as the outgoing information hogs your system, many boot up problems, and 'illegal operations' messages for 'whagent'.
If you delete the file hoping it will just go away, it will prevent you connecting to the internet, or cause endless crashes. If this happens, you will have to reinstall the webhancer software, and try again.
Spybot S&D
Adware SE
Pest Patrol
X-Cleaner
Trojan Remover
win-bugsfix.exe Is the Loveletter virus, aka Iloveyou. Distributed by e-mail it will overwrite files with the following extensions VBS, VBE, JS, JSE, CSS, WSH, SCT, HTA, JPG, JPEG, MP3, and MP2. Panda
Bit defender
Zone labs
win_upd2.exe Is the W32.Beagle.AO worm which has Bagle.A trojan attached Trend Micro
Panda
Kaspersy
Microsoft Malwaretool
win32.exe You have either-
1) ISRAZ.A worm, if win32 appears on the start up list.
2) W32.Mugly worm, if winprotect appears on the start up list
3) Troj/StartPa-GH trojan, if win32.exe shows on the start up list.
Please note- Some games and movie players also are known to use win32.exe
1) Trend Micro
Kaspersy
2) Trend Micro
Kaspersy
Zone labs
Trend Micro
win32us.exe Is either -
1) All in one telecom adult content dialler.
2) Dulca trojan.
1)Spybot S&D
Adware SE
Pest Patrol
2) Trend Micro
Kaspersy
Zone labs
winactive.exe Is the Lop/Active hijacker/keylogger. Re-sets homepage to active-max.com, mysearchnow.com, searchwebnow.com or find-quick.com
Trojan Remover
Pest Patrol
Panda
Adware SE
winad.exe
winadalt.exe
winadctl.exe
winadctlinstpack.exe
WinAdTools.exe
Is the WinAd parasite, aka Win Advert Client. It Hijacks the browser and can connect to a premium rate number. Spybot S&D
Pest Patrol
Trojan Remover
Winbackup.exe
Winfi1e32.exe
You have the Mertian virus. McAfee
WINdirect.exe Is a variation of the BAGLE virus, aka Mitglieder.M Trojan.
Trend Micro
Panda
Pest Patrol
Microsoft Malware tool
windows.exe Is one of a number of parasites.
1) if windows is on the start up list, it will be either the ALADINZ.D, bobbins or Kazmor Trojans.
2) forbot-br trojan, if NDIS Adapter appears on the start up list.
3) PWS.QQPass.E password stealing trojan, aka QQDragon
4) RBOT worm if either Windows IT update or windows update show on the start up list.
1) A squared
TDS 3
Ewidow
Trojan Hunter
Trojan Remover
2) Trojan Hunter
Ewidow
TDS 3
Trojan Remover
3)Trojan Remover
Zone labs
McAfee
4) Trend Micro
Panda
Microsoft Malware tool
WinFixer2005ScannerInstall[1].exe Is Winfixer 2005. Pop ups delivered by a trojan, the latest being Vundo, install this application which will suggest security threats and critical errors exist, and requests $39.95 to fix them. Manual removal instructions
wingo.exe Is the Bagle.at virus. Trend Micro
Panda
Kaspersy
wininetd.exe Is the Winet Trojan. McAfee
Pest Patrol
Trojan Hunter
wininit.exe Yiu have either -
1) WOLLF.16
2) Bymer .
1) Trojan Remover
Trend Micro
A squared
2) McAfee
A squared
Trojan Remover
Winkdrj,
Winkezz,
Winkhgw,
Winkhr,
Winkhy,
Winklvr,
Winkly,
Winkmc,
Winknk,
Winknsj,
Winkoc,
Winkoq,
Winkrlg,
Winksuc,
Winktn,
Winkvhc,
Winkxd,
Winkxjm,
Winkyb,
You have the Klez virus McAfee
Panda
Bit defender
Trojan Remover
winlock.exe Is either -
1) WinCommX
2) DOS-Winlock trojan.
1) Spybot S&D
2) Trend Micro
winlogin.exe Can be one of the following viruses
Agobot.IX.
Randex.E
Spybot.C
Trend Micro
Kaspersy
Panda
Bit defender
WinLogon.exe IMPORTANT  There is a Windows process of the same name which you should not delete
WinLogon.exe is a process for Windows NT, 2000, XP or 2003, with a file path of C:\WinNT\System32\Winlogon.exe or C:\Windows\System32\Winlogon.exe., dependent on which Windows you have. Winlogon.exe with a file path of C:\WinNT\Winlogon.exe or C:\Windows\Winlogon.exe , or Windows 95,95 or ME then you have the Netsky virus.
Let Wintask5 Pro help you Download a Free trial here
McAfee
Panda
Bit defender
Microsoft Malware tool
winmain.exe Is either-
1) Winmain BHO.
2) HTASploit trojan.
Pest Patrol
WinMgr32.exe You have the Mimail.P virus. McAfee
Pest Patrol
Bit defender
Microsoft Malware tool
WinMS05.exe_, Is the Exploit.Based.Worm.Gen, also known as Exploit.BindShell and Win32:Trojano-2260 Bit defender
AVG
Avast
Winnet.exe Commonname, browser Helper object that hijack the browser and delivers advertisements, WARNING - Improper removal of these files can result in you not being able to connect to the internet. Pest Patrol
A squared
Spybot S&D
Trojan Remover
winppr32.exe You have the Sobig.F virus. Trend Micro
Panda
Bit defender
Microsoft Malware tool
winrarshell32.exe Is the Salira password stealing trojan, aka PWSMafia, Manda.A, KillBill, Bugmaf. Bit defender Kaspersy
A squared
WinRatchet.exe
winsched.exe
wintaskad.exe
Is Windows Adtools adware, aka ADW_WUPD.A and WindUpdates Trend Micro
Spybot S&D
Winservn.exe,
Manage.exe,
Sear1.exe,
Wapicc.exe,
Wapisu.exe,
Wapisvit.exe,
Wapisvsu.exe,
Wcpcc.exe,
Winservs.exe,
Wnsapicc.exe,
Wnsapisu.exe,
Wnsapisv.exe,
Wnscpsu.exe,
Wnscpsv.exe,
Wnsintit.exe,
Wnsintsu.exe,
Wnsintsv.exe,
Wnstssv.exe,
Wtsit.exe
Process names that come with the pornography scanner from Purityscan.com, by Clickspring (A scanner claiming to remove traces of pornography from your PC) constantly change to avoid detection. .
These files have been known to appear on computers that have not even used the scanner, there also appears to be a link with the installation of this software and being infected with the Badtrans virus. If you try to remove these files manually, they will just re-appear on each re-boot.
Trojan Remover
Pest Patrol
Zone labs
Winldra.exe Is Srv.SSA-KeyLogger, a new variant of the Dumaru trojan designed to steal items from the Internet Explorer protected storage area, temporary files, windows clipboard, logins and passwords. hooks into Internet explorer, adds entries to Hosts file to prevent access to security websites.
Only affects Windows XP.
Removal tool from Sunbelt software
Winsrvc.exe You have the Friendgreet virus. McAfee
Zone labs
Pest Patrol
Etrust
winssk32.exe Is the Sobig.E virus. Trend Micro
Bit defender
Panda
Kaspersy
Microsoft Malware tool
winstart.exe Is either-
1) Earlybird virus.
2)IGetNetmalware, aka ADW_TENGET.A. It re-directs search enquiries to its advertisers.
1) McAfee
Trojan Remover
2) Trend Micro
WinStart001.exe An Internet explorer plug in, which limits the number of web sites you can visit by directing you to their advertising sites as opposed to a full scan of the world wide web. A top end spyware scanner should find and delete this. Pest Patrol
Bit defender
Winstat.exe Is the Kodorian trojan. A squared
WinStatKeep.exe Is Adstat adware. Trend Micro
Wintime.exe Is Downloader.Harnig trojan. A squared
Pest Patrol
Adware SE
Trojan Remover
wintools.exe Is the Huntbar. BHO, which hijacks your browser and delivers pop up advertisements. For more information, see BHO's and Hijackers Pest Patrol
X-Cleaner
McAfee
wintsk32.exe Is the Yaha.U Removal tool from Zone Labs
winupdate.exe Is added by a large number of worms and Trojans, including-
Rado.
Bizes
Nario
Spybot.EAS.
W32.Cult.
Litmus
SDBot.
W32.Warpig
Gaobot.BIA.
Trend Micro
A squared
Pest Patrol
Bit defender
Panda
Kaspersy
TDS 3
Ewidow
Trojan Remover
winupdt.exe Cab be one of the following-
1) Rbot-FP worm.
2)Winupdates adware.
3) 2nd thought (secondthought) adware
1) A squared
2) Spybot S&D
3) A squared
Pest Patrol
Trojan Remover
winupdtl.exe Is 2ndthought (second thought) adware. A squared
Pest Patrol
Trojan Remover
winxp.exe Is either
1) A variation of the Bagle worm
2) The Molotov AIM virus.
1) Trend Micro
Bit defender
Panda
Microsoft Malware tool
2)Removal tool
wmiprvse.exe IMPORTANT  There is a Windows process of the same name which you should not delete
The windows process has a full file path of C:\WINDOWS\system32\wbem\wmiprvse.exe, if it is anywhere else it may be either-
1) Sonebot-B virus, aka W32/Sdbot., Agobot.dr andW32.HLLW.Gaobot.gen. This will also show kernel_check on the start up list.
2) Gletta.A Trojan aka Wessy, Banker.aq and Stawin, which steals internet banking passwords.
1) Trend Micro
Pest Patrol
McAfee
Microsoft Malware tool
2) Pest Patrol
McAfee
Kaspersy
Zone labs
Trojan Remover
wmon32.exe Is a varient Agobot aka Gaobot Trojan. Trend Micro
A squared
Pest Patrol
McAfee
Microsoft Malwaretool
Wmplayer.exe IMPORTANT  There is a Windows process of the same name which you should not delete
WMPlayer.exe is the process for the Windows media player and will show in your task list if you have this application open. Otherwise you have the Gaobot.EF virus.
Let Wintask5 Pro help you Download a Free trial here
Kaspersy
McAfee
Microsoft Malware tool
WNAD.exe Adware which hides behind certain animations or joke downloads from Twistedhumor.com. It constantly sends your surfing information back to a server, hogging your internet connection, and serves you a constant stream of pop up advertisements. It can also be responsible for your computer crashing. Detect and remove it with a good quality spyware scanner. Ad-Aware SE
Pest Patrol
wo.exe Is Weboffers adware from Ezula Pest Patrol
WofE5.exe You have the Badtrans virus McAfee
Panda
wovax.exe Is the Daqa trojan, aka Agent.bg Pest Patrol
Kaspersy
TDS 3
Zone labs
Trojan Remover
Wqk.exe
Wqk.dll
You have the Klez virus McAfee
Panda
Bit defender
Trojan Remover
VVSN.exe Is WhenU adware, although a 'clean up' of their operational methods and a partnership with a security firm has resulted in it being removed from many security databases. Spybot S&D
A squared
Pest Patrol
wsup.exe
wtoolsa.exe
wtoolss.exe
Is the Ibis Toolbar, aka Huntbar Spybot S&D
Pest Patrol
wsxsvc.exe Is the Delfin Media Viewer adware, aka PromulGate Adware SE
Trend Micro
Pest Patrol
Trojan Remover
wuamgrd.exe Is as a result of having either-
1) A variant of Rbot Trojan.
2) Sdbot worm.
3) Spybot worm.
4) ShopatHome adware, AKA golden retriever
1) Trend Micro
Pest Patrol
Microsoft Malware tool
2) Panda
Trend Micro
Pest Patrol
Microsoft Malware tool
3) Trend Micro
McAfee
4) Pest Patrol
Trojan Remover
Wupdated.exe You have the Moega or Sdbot virus. Zone labs
Pest Patrol
WUpdater.exe Adware that delivers pop up advertisements. A top quality spyware scanner will find or delete it, alternatively, click start/search, then type wupdater, and delete the files. Make sure you have the search hidden files and folders ticked, in the more advanced options section. Ad-Aware SE
Pest Patrol
wupdt.exe Is the Imiserv parasite. It is installed by Drive by download to monitor computer activity both online and off, record form content and display pop ups, it will also contact its servers every few seconds. Sometimes called a trojan and also known as OneClickNetSearch, Oneclick, trojandropper.Win32.Delf.av, BHO3Lib and IEPLUGIN. Kaspersy
Pest Patrol
Trend Micro
Panda
TDS 3
McAfee
Trojan Remover
X A B C D E F G H I J K L M N O P Q R S U V W Y Z
Xhrmy.exe Is the BackDoor.Small.6.A aka Win32.SecondThought.aa,
Hyperlinker,
Adware/PortalScan .

Should be removed in safe mode with system restore off.
AVG
Kaspersy
Pest Patrol
Trend Micro
Panda
Trojan Remover
XTCfgLoader.exe A component of the Xupiter adware, which supplies pop up advertisments. Pest Patrol
Y A B C D E F G H I J K L M N O P Q R S U V W Y Z
y.exe Is one of a number of things -
1)Win32.StartPage.y trojan.
2) Win32.Small.ka trojan downloader.
3) Coolwebsearch, Hijacker variant.
1) Pest Patrol
A squared
Trojan Remover
2) A squared
Pest Patrol
Trend Micro
3) CWS shredder
Z A B C D E F G H I J K L M N O P Q R S U V W Y Z
Zonealarm.exe IMPORTANT  There is a another process of the same name which you should not delete
If you have the Zone alarm firewall installed, you will see this process. If you do not have Zone alarm, or it appears in the process list more than once, you may have the Sdbot.T virus.
Let Wintask5 Pro help you. Download a Free trial here
Ad-Aware SE
Panda
Pest Patrol
ZZCS1.21gc.exe Is Trojan-Dropper.Win32.Delf.nm also known as Dropper.Generic.AEW and Win32.ExplorerHijack AVG
Kaspersy
Bit defender

The next button will take you to a an automatic analysis tool for log files produced by Hijack this

Privacy & Security

Information

E-mail

Viruses

hackers, crackers & firewalls

Trojans

Spyware

Keyloggers

Cookies

BHO's & Hijackers

Drive by downloads

diallers

Scams & Hoaxes

Hijack this-
automatic analysis


Free pest scan

Unwanted processes

How to-Tutorials

Clean up/repair after malware infection

Prevent malware installing

Install Hijackthis

Start in Safe mode

Show hidden files/folders

enable/disable Active X controls

Disable Messenger service pop-ups

Use the Host file

Roguefix -
Removal tool for Rogue spyware removers & Fake Warnings
removal tool


Kill E2Give

Kill MySearch

Kill Sdbot-ADD / lockx.exe

Kill seeve.exe / mediamotors pop ups

Kill Winfixer2005

Kill SysProtect

News/Articles

New Winfixer infection displays fake Blackworm warning

The real cost of Free security software

Wintask5

Scams and hoaxes PC clean up & repair after malware infection About us Contact us FAQ Links Privacy Statement Site Map Webmasters
Click here to add this page to your favorites
©Internet Inspiration, 2003.      All registered trademarks are observed and respected.
If you receive advertising pop ups whilst viewing this site, you are infected with an ad-serving parasite, because we don't use pop ups. See our Privacy & security section for help with detection and removal.