Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

Key:

  • L = Legit, O = Open to Debate, X = Malware/Bad
Page 0 1 2 3 4 5 6 7 8 9 10 11
Startup Name Process Name Details
L D-Link IP servellience Launcher (D-Link_ST3402) Launcher_DL.exeRelated to D-link Software. Note: Located in C:Program FilesD-LinkIP surveillance
L DameWare Mini Remote Control DWRCS.EXERelated to DameWare Development
L DameWare NT Utilities 2.6 (DNTUS26) DNTUS26.EXERelated to Dameware_NT_Utilities program that allows remote access and control of a computer. This i
L dashsvc Dashsvc.exeMotion computer pen interface. :Owner: Motion Computing Inc.
L Data Protector Inet OmniInet.exeRelated to Hewlett-Packard OpenView OmniBack II
L Datakey's Log Service (DkLogger) DkLog.exeRelated to Datakey_Electronics_Inc Products. Made by Datakey Inc. This file is found in the System32
L Datakey's Token Service (DkTknSrv) dkcktkn.exeRelated to Datakey_Electronics_Inc Products. Made by Datakey Inc. This file is found in the System32
L DataSvr DataServer.exeRelated to Wave_Systems_Corp An identity protection application that is configured to use digital ce
L Datax Sagef Server (SagefServer) Datax.Sagef.Server.exeRelated to DataX Server. Note: Located in C:Program FilesDataxServidor Sagef
L DB2 - DB2 (DB2) db2syscs.exeRelated to IBM Corp.
L DB2 - DB2DAS00 (DB2DAS00) db2syscs.exeRelated to IBM Corp.
L DB2 Governor (DB2GOVERNOR) db2govds.exeRelated to IBM Corp.
L DB2 JDBC Applet Server db2ccs.exeUnknown.Found in an IBM application.
L DB2 JDBC Applet Server (DB2JDS) db2jds.exeUnknown found in a IBM application.
L DB2 Remote Command (DB2REMOTECMD) db2rcmd.exeRelated to IBM Corp.
L DB2 Security Server (DB2NTSECSERVER) db2sec.exeRelated to IBM Corp.
L DB2DAS - DB2DAS00 db2dasrrm.exeIBM DB2 related. The DB2 Admin Server process. This process supports both local and remote administr
L Dcfssvc dcfssvc.exeAssociated with digital cameras and can cause problems which disappear if disabled. If this program
X Dcom Helper (DcmHlp) dcmhelp.exeAddec by the W32/Sdbot-AJA WORM! Note: This worm rojan is located in C:%WINDIR%
X DCOM PC Service (mspcdcom) mspcdcom.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L DCPFLICS DCPFLICS.exeRelated to: Discreet Turbosquid/3dsmax Plugin Protection
L DCS Loader OPHALDCS.EXEPrint spooler service for Oki_Data printer
X dcznetv2 (dcznetv2) dcznetv2.exeAdded by the W32/Tilebot-O WORM! Note: This worm/trojan file is found in the Windows or Winnt folder
L DDE de red netdde.exeSpanish Windows 2000 network DDE
X Debug Config System lrsys.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L Deepsight Extractor ExtractorService.exeSymantec Security Analyser
L DeepSight Extractor CC Service ccExtractorService.exeRelated to Symentec corp.
L DeepSight Extractor Service for NPF03 ExtractorServiceNPF03.exeSymantec Security Analyser
L DeepSight Extractor Service for NPF04 ExtractorServiceNPF04.exeSymantec Security Analyser
Defragmentation Management Handler (FAT
X Defragmentation) dfrgfat32.exeAdded by the W32/Codbot-AB WORM! Note: This worm rojan file is found in the System32 folder.
L DefWatch defwatch.exeSymantec Antivirus related
L Dell Printer Status Database (DLSDB) DLSDBNT.EXERelated to Dell_Printers Note: Located in C:Program FilesDell PrintersAdditional Color Laser Softwar
L Dell Printer Status Watcher (DLPWD) DLPWDNT.EXERelated to Dell_Printers Note: Located in C:Program FilesDell PrintersAdditional Color Laser Softwar
L DellDmi DellDmi.exeRelated to Dell's OpenManage software.
L DEventAgent EventAgt.exeRelated to: Dell OpenManage and used for server management.
X DEVICEMAP DEVICEMAP.SYSAdded by the TROJ_ROOTKIT.O TROJAN! Read the link rootkit type stealth involved.
L DF5Serv DF5Serv.exeBy Faronics Corporation
X dgtsys (dgtsys) dgtsys.sysAdded by Adware-DigitalNames
X DHCP Client (Ulead Service) dhcpclient.exeAdded by the W32/Codbot-AG WORM!
L Diagnostic Facility COM Server (CdfSvc) CdfSvc.exeRelated to Citrix MetaFrame Presentation Server
L DiamondCS Process Guard Service v3.000 dcsuserprot.exeprocess guard
L DigiCtrl digisc.exeRelated to Matrox_Electronic_Systems DigiSuite Service Control
L Digidesign MME Refresh Service (DigiRefresh) MMERefresh.exeRelated to Digidesgin Protocols Refreshes your midi ports on the 002(R) (the 002R is a hardware audi
L digiSPTIService digiSPTIService.exeRelated to Pro_Tools digital audio workstation (DAW) technology.
L Digitizer Service (Digitizer) digtizer.exeRelated to Digitizer_Service from Wacom Tech. Note: Located in C:%WINDIR%System32 (XP/WinNT/2K)
L Dimension4 D4.exeRelated to Dimension4 Thinking Man Software - Note: Located in C:Program FilesD4
X direct sound rss (dsrss) dsrss.exeAdded by the Backdoor.SdBot.xd as identified by ewido. Note: This worm rojan is located in C:%WINDIR
L DirectUpdate engine DUService.exeDirect Update - registers dynamic IPs to a fixed hostname
L DirectX Debug Service (DXDebug) DXDebugService.exeRelated to the Microsoft DirectX SDK and offers a debug facility for this development suite.
X DirectX Drivers D1rectX.exeAdded by the SDBOT.CIF WORM! This should not be confused with Microsoft DirectX files. Read the link
X DirectX Graphics (dxdmain) dxdmain.exeAdded by the W32/Codbot-O WORM!
X DirectX Service (DirectService) directx.exeAdded by the Troj/Crybot-B TROJAN! This should not be confused with Microsoft DirectX files. Note: A
X directx.exe directx.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L DIRECWAY Webcast (DPC_SRV_WEBCAST) dpcproxy.exeRelated to DIRECWAY Webcast - http://www.directway.com/
L DirMS_Defragmentation DirmsService.exeRelated to DirMS_Defragmentation from DIRMS. Allows the user to defragment hard drives with a user-f
L Disk Management Service (VxSvc) VxSvc.exeRelated to Dell Open Management system. http://www.what-process.com/process-info.aspx?p=VxSvc.exe
X Disk Manager Users Service) chkdsk32.exeAdded by the Troj/Telemot-A TROJAN! Note: This trojan file is found in the System32 folder.
X Disk Monitor Services (DiskMon32) svchost.exe -k dmonAdded by the Hanmon TROJAN! Note: This trojan file is found in the System32 folder.
L Diskeeper DkService.exeExecutive Software's Diskeeper (Defragmenter)
X Distributed Link Tracking Extensions kernel32dll.exeAdded by the W32/Myfip-I worm.
X Distributed Link Tracking Service (TrkWksvc) TrkWksvc.exeAdded by the W32.Toxbot.B WORM!
X distributed.net client iosdt.exeYou have a Trojan virus on your PC . IOSDT.EXE is its main file. You most probably tried to download
L distributed.net client (dnetc) dnetc.exeClient part of the dstributed.net general-purpose distributed computing project.
L DK2 Network Server (DNServer32) DNSrv32.exeRelated to DESkey_Hardware reliable and flexible means to protect your software from piracy. Note: L
L DkeySync syncservice.exeRelated to GE_Security_Supra Note: Located in c:program filesge security supra
L dlbt_device dlbtcoms.exeSomething by Dell Computers
L dlbu_device dlbucoms.exeRelated to Dell computers
L dlbx_device dlbxcoms.exeRelated to Dell computers.
L dlcc_device dlcccoms.exeDell printer related. File is found in the System32 folder.
L dlcj_device dlcjcoms.exeRelated to Dell Photo AIO Printer may be the driver.
X DLL Manager (mswindll) mswindll32.exeAdded by the W32/Tilebot-AQ WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L DLT - Dell Computer Corporation DLT.exeRelated to Dell OpenManage system management software
L DM Primer (DMPrimer) dmprimer.exeRelated to Unicenter_Remote_Control_Host From Computer Associates Note: Located in C:Program FilesCA
L DM1Service DM1Service.exeRelated to OLYMPUS Corporation
L dmisrv dmisrv.exeAppears to be part of Dell OpenManage_Client_Instrumentation Software.
X dmserver svchost.exe -k dmserverAdded by the Fuwudoor TROJAN!
X DNS Server (DNS Server) svchost.exeAdded by the Troj/Feutel-Y TROJAN! Note: This is not the legitimate Windows Process. (Which is found
L DNS4Me Client (DNS4MeClient) DNS4MeClient.exeRelated to Dynamic_DNS_service from RhinoSoft.com that makes it possible for you to start hosting yo
L DNSexit dnsexit_srv.exeProvides reliable DNS Services free of charge to top level domains for both business and internet us
L dnWhoDisp dnwhodisp.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
L Documentum Desktop Component Installer DcComponentInstaller.exeRelated EMC_Corporation Content management software.
L Download Manager Lite Service (DownloadManagerLite) dm.exeRelated to Net_Cable TV. Note: Located in C:Program FilesNCTVin
X Dragon Age - Bioware dragonage.exeAdded by the W32/Vanebot-M WORM! Note: This worm rojan is located in C:%WINDIR%System32 dllcache (XP
X driver msiisdrv.exeAdded by the Backdoor.Isen.Rootkit TROJAN! Read the link rootkit type stealth involved.
X Driver Cache (Driver Cache) Driver Cache.exeAdded by the Troj/Feutel-S TROJAN!
L DSDM de DDE de red netdde.exeSpanish Windows 2000 network DDE DSDM
L DTS Agent tngdta.exeComputer Associates Data Transport Service Agent
L DTS Browser tngdoba.exeComputer Associates Data Transport Service Browser
L DTS Metrics Gatherer tngdtmg.exeComputer Associates Data Transport Service
? DUN Manager Service dmservc.exeDial-up and routed networking enhancement - http://www.magsys.co.uk/dunman/
X DUN_SERVICE3 dun3.exeAdded by the Trojan.Sokiron TROJAN!
L DVD-RAM_Service DVDRAMSV.exeDVD driver
X DVDrealm (DVDrealm) DVDrealm.sysAdded by the Troj/Rootkit-AA TROJAN! Read the link rootkit type stealth involved.
L DvpApi dvpapi.exeCommand Software Systems Inc. - anti Virus
X dx32hhec dx32hhlp.exeAdded by the Nemog TROJAN!
X Dynamic Library Host (DLLHOSTS) dllhost.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: Note: This worm rojan is loca
X DynamicHost (DLHOST) dlhost.exeAdded by the W32/Tilebot-BO WORM! Note: This worm file is found in the Windows or Winnt folder.
EarthLink Firewall Process Path Service
EarthLink Protection Control Center Service
L Easy File & Folder Protector (ACDService) EFPAP.exeEasy_File_&_Folder_Protector Deny access to certain files and folders or to hide them securely from
L EC2007 Service 1.40 (EC2007Service) ec27ser.exeElectronic_Chart_Display_and_Information System (ECDIS). Data production for Electronic Navigational
X ECA (cpanel) javapanel.exeAdded by the W32/Tilebot-Y WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
L eEye Application Bus (eeyeevnt) eeyeevnt.exeRelated to eEye Digital Security
L eEye Retina Engine (RetinaEngine) RetinaEngine.exeRelated to eEye Digital Security
L Electronic Arts Licensing Service EA Licensing Service.exeRelated to EA_Licensing_Service.exe is installed with some games from Electronic Arts. It is require
L EloSystemService EloSrvce.exeElo TouchSystems Inc. - http://www.elotouch.com
L EloTouchscreen EloTouch.exeRelated to Elo TourchSystems Inc.
X elpow_spy elpow_spy.sysAdded by the ElpowKeylogger Spyware! Note: This file is found in the System32drivers folder. Read th
L EMCliSrv EMCliSrv.exeRelated to Express_Metrix PC inventory and software usage tracking. Note: Located in C:WINDOWSsystem
X Enables Java Support (Java) winjava.exeAdded by the W32/Codbot-AA WORM! Note: This worm/trojan file is found in the System32 folder. (May u
X Enables Javascript Support (Javascript) javascript.exeAdded by the W32/Codbot-V WORM!
L Encryption Service encsvc.exeRelated to Citrix MetaFrame
X end task (Taskend) Taskend.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L Entertainment IcVzMon.exeRelated to Sony_VAIO computers.
L Entrust Login Interface (ELIService) etlisrv.exeRelated to Entrust Login Interface service Made by Entrust Technologies Ltd. This file is found in t
L ENUFF Server (ENXPSVR) ENSERVS.EXEEnuff Parental Control Software by Akrontech
L ENUFF XP Service (ENXPSVC) CVSEXPSS.EXEEnuff Parental Control Software by Akrontech
L Environment (WS2IFSL) ws2ifsl.sysGuardMon is a commercial spyware program designed to monitor all forms of user activity on a compute
L EPrint III Service LPSVS03N.EXERelated to LEADTOOLS_ePrint From Lead Tech. Perform additional processing to your print job before s
X EPS Printer Driver EPSONSYS.SYSAdded by the Goldun.I TROJAN! Note: This trojan file is found in the System32 (NT/2000/XP) folder. A
L Epson Printer Status Agent (StatusAgent) SAgentNT.exeRelated to Epson_Printer Status agent. Note: Located in C:Program FilesCommon FilesEPSONEBAPI
L EPSON Printer Status Agent2 SAgent2.exedetects and configures an Epson Printer Port where applicable
L Epson Printer Status Agent4 (StatusAgent4) SAgent4.exeRelated to Epson Corp.
L EPSON V3 Service2(02) (EPSON_PM_RPCV2_02) E_S00RP2.EXERelated to the EPSON Status Monitor 3
L EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) E_S00RP1.EXERelated to the EPSON Status Monitor 3
L EpsonBidirectionalService eEBSVC.exeRelated to Epson printers.
L eScan Monitor Service avpm.exeeScan Antivirus
L eScan Server-Updater TRAYSSER.EXEeScan antivirus
L Escritorio remoto compartido de NetMeeting mnmsrvc.exeSpanish Windows 2000 Netmeeting remote desktop sharing service
L Esker FTPD (ftpds) WFTPDSNT.EXERelated to Esker software
L Esker License Control (EskerLicenseControl) eslcbcst.exeRelated to Esker License control
L Esker LPD (lpds) WLPDSNT.EXERelated to Esker software
L Esker NFSD (nfsds) WNFSDSNT.EXERelated to Esker software
L Estacióe trabajo services.exeSpanish Windows 2000 workstation
X ET54FG ET54FG.SYSAdded by the TROJ_ROOTKIT.N TROJAN! Read the link rootkit type stealth involved.
L eToken Notification Service (ETOKSRV) eTSrv.exeRelated to eToken Notification Service from Aladdin Knowledge Systems Ltd. Authentication and passwo
L eTrust Antivirus Job Server InoTask.exeAssociated with eTrust Antivirus/InoculateIT
L eTrust Antivirus Realtime Server InoRT.exeRelated to eTrust's AntiVirus Internet Security solution.
L eTrust Antivirus RPC Server InoRpc.exeAssociated with eTrust Antivirus/InoculateIT
L Event Log Watch LogWatNT.exeComputer Associates
X Event Monitor (evmon) spoolcll.exe -netcvsAdded by the W32.Spybot.IVQ WORM!
L EvtEng EvtEng.exeRelated to Intel Corporation http://www.what-process.com/process-info.aspx?p=EvtEng.exe
L ewido anti-spyware 4.0 guard guard.exeRelated to ewido_suite Note: located C:Program Filesewido anti-spyware 4.0/
L ewido security suite control ewidoctrl.exeRelated to ewido networks
L ewido security suite guard ewidoguard.exeRelated to ewido networks
L Examinador de equipos services.exeSpanish Windows 2000 computers browser
L ExecView Communication Module (ECM) (ECM Service) ECM.exeRelated to VERITAS_ExecView
L Exten. controlador Instrumental de admon. de Windows services.exeSpanish Windows 2000 windows management instrumentation drive extension
Extended Windows Security (Microsoft Extended Windows
X Externtelecom extel.exeAdded by the W32/Sdbot-AAX WORM! Read the link rootkit type stealth involved.
L F-Prot Antivirus Update Monitor fpavupdm.exeF-Prot anti-virus background scanner by F-Risk Software. http:/
L F-Prot Antivirus Update Monitor fpavupdm.exeRelated F-Prot Antivirus Update Monitor by FRISK_Software_International
L F-Secure 2006 (BackWeb Plug-in - 4476822) SERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
L F-Secure Anti-Virus 2005 (BackWeb Plug-in - 4476822) SERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
L F-Secure Anti-Virus Firewall Daemon fsdfwd.exeRelated to F-Secure Corporation.
L F-Secure Automatic Update Agent (FSAUA) fsaua.exeRelated to F-Secure Corporation. Note: Located in C:Program FilesF-SecureFSAUAprogram
O F-Secure BackWeb LAN Access fsbwlan.exeRelated to F-Secure_BackWeb LAN Access. This File should be found in the Program FilesF-Secure Inter
L F-Secure Gatekeeper Handler Starter fsgk32st.exeRelated to F-Secure Anti-Virus Prog.
L F-Secure HTTP Server (fshttps) fshttps.exeF-Secure Corporation http://www.what-process.com/process-info.aspx?p=fshttps.exe
L F-Secure Management Agent FSMA32.EXERelated to F-Secure Anti-Virus Prog.
L F-Secure Network Request Broker FNRB32.EXERelated to F-Secure_Anti-Virus software. This File should be found in the Program FilesF-SecureCommo
L FactoryTalk Diagnostics CE Receiver (RNADiagReceiver) RNADiagReceiver.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
FactoryTalk Diagnostics Local Reader
L Fast Track Installer (FastTrackInstallerService) GBInst.exeRelated to Fast_Track_USB from M-Audio. Note: Located in C:Program FilesM-Audio Fast Track
FastUserSwitchingCompatibil (Fast User Switching
X Fear Service (FSVC) fear32.exeAdded by the W32/Tilebot-T WORM! Note: This worm file is found in the Windows or Winnt folder.
X FIFA WORLD CUP 2007 fifa2007.exeAdded by the W32/Spybot-MQ WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache(XP/W
L File and Folder Protector ffpsrv.exeRelated to SoftHeap.Com a software shop of Atlantic Coast PLC http://www.softheap.com/
L FileChecker filechecker.exeRelated to FileChecker from Javacool software. Watches important system files for changes modificati
L FileZilla Server FTP server (FileZilla Server) FileZilla Server.exeRelated to FileZilla A FTP and SFTP client for Windows from SourceForge.net
L Firebird Guardian fbguard.exeFirebird Guardian
L Firebird Server fbserver.exeFirebird Database Server
X FireDaemon Service: events (events) FireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that
X FireDaemon Service: rundll (rundll) FireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that
X firefox auto update firefox.exeAdded by the W32/Tilebot-DN WORM! Note: Located in C:%WINDIR%
X Firewall service (FWSvc) FWSvc.exeRelated to WinAntiVirus Pro - rogue antivirus
L Fix-It Task Manager (mxserver) mxserver.exeRelated to Ontrack Inc. Data Recovery service.
L Flash Communication Admin Service (FlashComAdmin) FlashComAdmin.exeAppears to be modem driver related Made by Macromedia Inc.
L Flash Communication Server (FlashCom) FlashCom.exeAppears to be modem driver related Made by Macromedia Inc.
L FLEXlm server for PTC lmgrd.exelmgrd.exe is a process associated with the Macrovision application-generic license server.
L FLEXnet Licensing Service FNPLicensingService.exeRelated to FLEXnet_Publisher from Macrovision. Note: Located in C:Program FilesCommon FilesMacrovisi
L Folder Size (FolderSize) FolderSizeSvc.exeRelated to Folder_Size Adds an other column to your folder view. Note: Located in C:Program FilesFol
Folding@Home
L Font Cache Downlevel FontCacheService.exeService installed by the Microsoft Avalon open beta.
L ForceWare Intelligent Application Manager (IAM) nSvcAppFlt.exeRelated to Nvidia Corp. Intelligent Application Manager.
L ForceWare IP service (nSvcIp) nSvcIp.exeRelated to Nvidia Corp. Network Access Manager.
L ForceWare user log service (nSvcLog) nSvcLog.exeRelated to Nvidia Corp. Network Access Manager.
L Fortech Proxy+ ProxyPlus.exeFORTECH Ltd. http://www.proxyplus.cz/
L Fortinet Service Scheduler (FA_Scheduler) scheduler.exeRelated to Fortinet security systems are the new generation of real time network protection systems.
O Framework srvany1234.exeUnknown owner: Location C:WINDOWSsystem32srvany1234.exe
L Freeloader Monthly Subscription Service Freeloader Monthly Subscription Service File.exeRelated to freeloader.com Online game services.
L FreePOPs freepopsservice.exeFreePOPs is distributed by the GNU General Public License is intended to guarantee your freedom to s
L FreeSSHDService FreeSSHDService.exeRelated to OpenSSH A free SSH/SecSH protocol suite providing encryption for network services like re
X FreezeScreenSaver FreezeScreenSaver.exeFREEZESCREENSAVER.EXE_is_Adware Note: Located in C:WINDOWSsystem32
X frepdll.exe FREPDLL.EXEAdded by the W32/Tilebot-D WORM! Note: Gives the fake description ET dll Locator tool. Read the link
L FS Service Control NTServApp.exeRelated to ArchestrA Software architecture for the integration of your automation systems.
L fsbwsys fsbwsys.exeRelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
Copyright 2003-2013 iamnotageek &/or Martin Krohn.