KEY:

L = Legit, O = Open to Debate, X = Malware/Bad

	Name	Process	Details
X	$sys$aries	aries.sys	Added by the SonyBMG_First4DRM ROOTKIT! Read the link rootkit type stealth involved. Thanks Sony.
L	%NVSVC.name%	nvsvc32.exe	NVidia driver
L	(AeXNSClientTransport)	AeXNSClientTransport.exe	Related to Altiris_eXpress NS Database and SVS (Software Virtualization Services).
O	(Any service name)	srvany.exe	This utility allows running Windows NT2000XP applications as services. Can also be used to load Malw
X	(ASCService)	ascserv.exe	Aluria Spyware Eliminator Spyware remover a rogue program of dubious repute - for more information s
L	(AuthSysSvc)	SysSvcNt.exe	Related to Cox High Speed Internet Security Suite System Service. Note: Located in C:Program FilesCo
L	(BackupExecAgentAccelerator)	beremote.exe	process that belongs to Backup Exec from Veritas http://www.liutilities.com/products/wintaskspro/pro
L	(BackupExecDeviceMediaService)	pvlsvr.exe	Related to Veritas Backup Exec and offers essential functionality for Backup Exec. http://www.proces
L	(BackupExecNotificationServer)	nsvr.exe	Related to Veritas Software backup tool.
L	(BeatJamMusicStreamingServer)	BeatJamHttpService.exe	See_BeatJam BeatJam Music Server Edition.
L	(brmfbags)	BrmfBAgS.exe	Related to Brother_BidiAgent Service products from Brother Industries. Note: Located in C:WINDOWSSys
L	(clr_optimization_v2.0.50215_32)	mscorsvw.exe	Related to Microsoft_NET_Framework NET Runtime Optimization Service.
L	(CTXCPUUsync)	ctxcpuusync.exe	Related to Citrix MetaFrame
L	(default))	SMAgent.exe	SoundMAX Sound Device
L	(DJSNETCN)	DJSNETCN.exe	Related to Norton/Symantec AntiVirus.
L	(ElnkFWPPService)	EFWPPS~1.EXE	Related to EarthLink_Firewall Process. Note: Located in C:Program FilesEarthLinkProtection Control C
L	(ELNKService)	ELNKServ.exe	Related to EarthLink_Protection_Control Center Service. Note: Located in C:Program FilesEarthLinkPro
L	(FAH@C:+FAH+fah-service+FAH502-Console.exe)	FAH502-Console.exe	Related to Stanford University - Folding@home is a distributed client computing effort by Stanford U
L	(GenericHidService)	HIDSERVICE.exe	Enhanced Driver for Keyboards and Windows http://www.microsoft.com/whdc/device/input/w2kbd.mspx
L	(https-admserv61)	webservd-wdog.exe	Related to Sun_ONE_Web_Server from Sun Microsystems inc. Note: located in C:SunWebServer6.1inhttps
L	(IBMCICSTransactionGateway)	CTGSERVICE.EXE	Related to IBM Corp.
L	(ibmsmbus)	ibmsmbus.exe	Related to SMBus on IBM computers. SMBus is the System Management Bus defined by Intel® Corporation
L	(IBMWAS5Service - server1)	wasservice.exe	Related to IBM WebSpere server.
L	(LightScribeService)	LSSrvc.exe	LightScribe related to Hewlett Packard
L	(McAfeeAntiSpyware)	Msssrv.exe	Related to Network Associates Inc.
L	(mi-raysat_3dsmax9_32)	raysat_3dsmax9_32server.exe	Related to Autodesk_3ds_Max_9_3D_animation Create rich and complex design visualization. Note: Locat
X	(non-roman characters)	sServer.exe	Added by the Troj/Feutel-AB TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
L	(odClientService)	odClientService.exe	Related to Odyssey_Client for Fujitsu Siemens Computers. Note: Located in C:ProgramFujitsu Siemens C
L	(OracleFormsServer-Forms60Server-OraForm)	ifsrv60.exe	Related to Oracle Corp. Forms server.
L	(OWSTimer)	OWSTIMER.EXE	Related to Microsoft_SharePoint Note: Located in C:Program Filesicrosoft OfficeOffice Files
L	(PersonalSecureDriveService)	PSDsrvc.EXE	Related to Personal_Secure_Drive_Service http://www.infineon.com/ Service from Infineon Technologies
L	(PinnacleSys.MediaServer)	pmshost.exe	Related to Pinnacle_Systems Inc.
X	(ProtectedContentSvc)	services.exe	Added by Oscarbot.IV TROJAN! (backdoor ranky) Note: This worm rojan is located in C:%WINDIR%ETC comp
L	(PRTG4Service)	prtg4.exe	Related to Paessler Router Traffic Grapher - http://www.paessler.com/
X	(random file name without extension)	(random file name).sys	Added by the TROJ_ROOTKIT.AI TROJAN! Read the link rootkit type stealth involved.
X	(Random) See description	irjit.dll	Added by the Backdoor.CVM TROJAN! Note: This trojan file is found in the System or System32 folder.
L	(RNADiagnosticsService)	RNADiagnosticsSrv.exe	Related to Rockwell_Automation Inc. FactoryTalk suite
X	(rpcsvc)	rpcsvc.exe	Added by the W32/Cuebot-I WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
L	(slapd-config52)	ns-slapd.exe	Related to Sun_One directory server
L	(SLEE_503_SERVICE)	SLEE503.exe	Related to Steganos live Encryption Engine.
X	(special characters) (myserver)	myserver.exe	Added by the Troj/Dropper-BR TROJAN!
L	(trlokom_rmhsvc)	RMHSvc.exe	Related to Trlokom_Central_Management provides security management capabilities to help meet applica
X	(wgavn)	wgavn.exe	Added by the W32/Cuebot-K WORM! Located in the Windows or WinntSystem32 folder.
X	(WMIDriverInc)	wmiprvse.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	(__AC_PROCESS_MGMT_DAEMON8)	pmd8.exe	Actuate_Enterprise Reporting Applications for business intelligence analytic services
X	*Microsoft Update	wuytc.exe	unknown virus
X	*Microsoft Update	wstcl.exe	No from Microsoft.
X	*windows update	wuaucrlt.exe	Added by the W32.Spybot.HUR WORM!
X	*windows update	wsctl.exe	malware virus. possibly Win32.Rbot.gen
X	*wuauclt.exe	random	Related to WORM_RBOT.AKU or variant.
X	.NET Framework Service	svchost.exe	Trojan-PSW.Win32.Sagic.15 Virus
X	.NET Framework Service (.NET Connection Service)	svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
	.NET Runtime Optimization Service v2.0.50215_X86
L	3Com DMI Agent	3CDMINIC.EXE	3Com DMI (DynamicAccess Desktop Management Interface) Agent associated with 3Com network cards
O	3dkeybd	3dkeybd.exe	Unknown... No answers on the net.
X	64Bit architecture emulation (wrmsrvice)	WRMSRVICE.SYS	Added by the TROJ_ROOTKIT.AG TROJAN! Read the link rootkit type stealth involved.
X	80xFire daemon (80xFire)	80xFire.exe	Added by the W32/Tilebot-BK WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	aaksrv	aaksrv.exe	Spydex Advanced Anti keylogger
L	AAMQDispatcher	AAMQDispatcherService.exe	Compuware Serversoftware
L	ABCSpell Helper Service	ABCSpellService.exe	Spell checker (Ect ect) for Outlook Express. For more information Click_Here
X	Abel	Abel.exe	Source: http://www.pestpatrol.com/PestInfo/C/Cain.asp
X	abhcop	abhcop.sys	Added by the PigSearch Adware. Read the link rootkit type stealth involved.
X	AC	acoustic.exe	Added by the SDBOT.CRN WORM! Read the link rootkit type stealth involved.
L	Ac Profile Manager Service (AcPrfMgrSvc)	AcPrfMgrSvc.exe	Related to the Ac_Profile_Manager_Service installed as a part of ThinkPad Access Connections suite o
X	AC-DNAME (AC-DNAME)	acoustic.exe	Added by the SDBOT.CFN WORM! Read the link rootkit type stealth involved.
L	Accenture Media Viewer (MediaViewer)	streamviewerservice.exe	Related to Accenture_Media_Viewer
O	Access Remote PC Service 4.3	rpcsetup.exe	Access_Remote_PC www.access-remote-pc.com remote access software. Legitimate but remote access could
L	ACMService (ACMService)		Added by the ACM SPYWARE! **Note this is a commercial computer monitoring software
L	ACNUSvc	acnupdatersvc.exe	Related to Accenture global management consulting technology services and outsourcing company Note:
L	Acronis Scheduler2 Service	schedul2.exe	http://www.acronis.com/homecomputing/products/trueimage/
L	ActiveXperts Network Monitor (AxsNmSvc)	AxsNmSvc.exe	Added by ActiveXperts_Network_Monitor allows administrators to monitor the network for failures and
	Actuate Process Management Daemon 8
L	Ad-Axis Client	aaclient.exe	Related to Lavasof's Ad-Aware SE Enterprise Edition 2005
L	Adaptador de rendimiento de WMI	wmiapsrv.exe	Windows Management Instrumentation Performance Adapter Service Windows XP and 2003. Note: Located in
L	Adaptec I/O Manager Server	iomgr.exe	Related to Adaptec product
L	Adaptec RAID Remote Services Agent	afaagent.exe	Related to Adaptec Inc.
L	Adaptec Storage Manager Notifier	notify.exe	Related to Adaptec procuct
L	Adaptec Web Server	arcpd.exe	Related to Adaptec procuct.
L	AdaptecStorageManagerAgent	StorServ.exe	Related to Adaptec Incorporated
L	Adapter Switching	RoamSvc.exe	Intel Adapter Switching
L	ADF Installer Service (ADF Installer)	AgentSVC.exe	Related to Citrix Installation Manager Service
L	AdministraciÃ³e aplicaciones	services.exe	Spanish Windows 2000 applications managing
L	Administrador de cuentas de seguridad	lsass.exe	Spanish Windows 2000 security accounts manager
L	Administrador de discos	services.exe	Spanish Windows 2000 disks manager
L	Administrador de sesiÃ³e Ayuda de escritorio remoto	sessmgr.exe	This service manages and controls Remote Assistance
L	Administrador de utilidades	UtilMan.exe	Spanish Windows 2000 utility manager
L	Adobe Active File Monitor	PhotoshopElementsFileAgent.exe	Related to Adobe photoshop.
L	Adobe LM Service	Adobelmsvc.exe	Required for PhotoshopCS
X	Adobe Update Manager (Adobe3M)	mshss.exe	Added by the Troj/Wollf-B TROJAN! Note: This worm rojan file is found in the System32 folder.
L	Adobe Version Cue CS2	VersionCueCS2.exe	Related to Adobe Products
L	AdobeVersionCue	VersionCue.exe	Adobe related
L	ADSService	ADSSER~1.EXE	Related to Aluria_Active_Defense_Shield Service. An EarthLink Co. Note: Located in C:Program FilesEa
L	Advantage Database Server	ADS.EXE	Related to Extended Systems' Advantage_Database_Server
L	AEClientHostService	AEClientHostService.exe	Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase
X	Age of Empires III: The WarChiefs	ageofempires.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windowsd
L	Agente de directivas IPSEC	lsass.exe	Spanish Windows 2000 IPSEC policy agent
L	Agere Service (AgrSrvce)	AgrSrvce.exe	Related to Proxim_Corp Client manager software associated with the ORiNOCO wireless LAN card.
X	AIM (AIM)	aim.exe	Added by the W32/Rbot-AGC or W32/Sdbot-BFX WORM! Read the link rootkit type stealth involved.
X	aim.ex	IEXPLORER.EXE	Added by the SDBOT.COW WORM! Read the link rootkit type stealth involved.
L	Alerter	svchost.exe	Notifies selected users and computers of administrative alerts. If the service is stopped programs t
X	AlfaCleanerService	ACServer.exe	AlfaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware
L	Almacenamiento protegido	services.exe	Spanish Windows 2000 protected storage
L	Altera JTAG Server (JTAGServer)	JTAGServer.exe	Related to Altera Quartus II Software. Note: Located in C:alteraquartus50in
L	Altiris Agent (AeXNSClient)	AeXNSAgent.exe	Related to Alteris services. http://www.altiris.com
L	Altiris Carbon Copy (CarbonCopy32)	ccsrvc.exe	Related to Alteris services. http://www.altiris.com
L	Altiris Client Service	ACLIENT.exe	Related to Altiris Inc.
L	Altiris eXpress NS Client (AeXNSClient)	AeXNSClient.exe	Related to Altiris_eXpress NS Database and SVS (Software Virtualization Services).
	Altiris eXpress NS Client Transport
	Aluria Security Center Spyware Eliminator Service
O	Aluria Spyware Eliminator Service	ASEServ.exe	Aluria Spyware Eliminator
X	AL_ADSService	AL_ADSService.exe	Aluria Spyware Eliminator Spyware remover a rogue program of dubious repute - for more information s
L	Amadeus Automatic Update	AutoUpdate.exe	Related to Amadeus powerful front office travel management tool. Note: Located in C:Program FilesAut
L	AMD PowerNow! . Technology Service (GemServ)	GemServ.exe	Related to Advanced Micro Devices Inc. - http://www.amd.com/
X	Ampi32 (wdfmgr)	msvcrt.exe	Added by the W32/Tilebot-Q WORM! Note: This worm file is found in the Windows or Winnt folder. Read
L	Analysis Server (MSSQLSERVER) (MSSQLServerOLAPService)	msmdsrv.exe	Related to Microsoft_SQL_server suite.
L	ANIWZCSd Service	ANIWZCSdS.exe	Related to Alpha_Networks
X	AntiSpyUltra (Zonelaps)	vsmom.exe	Added by the W32/Tilebot-E WORM! Read the link rootkit type stealth involved.
L	AntiVir Scheduler (AntiVirScheduler)	sched.exe	Related to AntiVir antivirus program.
L	AntiVir Service	AVGUARD.EXE	AntiVir antivirus
L	AntiVir Update	AVWUPSRV.EXE	AntiVir Antivirus
X	antivirus32	antivirus32.exe	Added by an unidentified TROJAN! Note: of the Win32/Rbot family. Note: This worm rojan is located in
L	ANTS Profiler service	RedGate.Profiler.Service.exe	Related to Red Gate Software Ltd
L	AnyPoint Service - Intel Corporation	APSERVER.EXE	Belongs to Intel_Anypoint home networking system
L	AOL Antivirus Update Service (aolavupd)	aolavupd.exe	Related to AOL Antivirus Update Service.
L	AOL Connectivity Service	AOLAcsd.exe	Owner: America Online. Description: AOL Connectivity Service - starts an automatic function that res
L	AOL Connectivity Service	acsd.exe	AOL related
X	aol software (Aol Software)	smss.exe	Added by the W32/Tilebot-FM WORM! Note: This is not the legitimate Windows process (Which is always
L	AOL Spyware Protection Service	aolserv.exe	Related to AOL
L	AOL TopSpeed Monitor	aoltsmon.exe	AOL Topspeed
L	Apache	Apache.exe	Apache Web Server Software
L	Apache2	Apache.exe	Apache Web Server
L	APACS+ NIM32 (NIM32)	Nim32.exe	Related to Siemens Energy & Automation Platform. Note: located in C:Program FilesProcessSuiteNIM
L	APC PBE Server	pbeserver.exe	APC PowerChute Business Edition Server (For UPS)
L	APC UPS Service	mainserv.exe	Related to American Power Conversion Corporation
L	AppExpress Client	ece.exe	Related to Endeavros Technology Inc and Microsoft_Encarta
X	Application Layer Gateway Manager (AppLayerGatewayMgr)	alg.exe	Added by W32/Tilebot-EU WORM! Note: not to be confused with see_Here located in C:WindowsSystem32 th
L	Application Layer Gateway Service	alg.exe	Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Co
X	Application Layer Gateway Services	alg.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Application Layer Gateway System (ALGS)	algsys.exe	Added by the W32/Rbot-DDF WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
X	Application State Service (AppSvc)	apsvc.exe	Added by the W32/Rbot-FWW WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
X	AppMgmt	svchost.exe -k AppMgmt	Added by the Fuwudoor TROJAN!
L	AppnNode	appnnode.exe	Related to IBM_Server Note: Located in C:WINDOWSsystem32Drivers
X	ARC Plugin (ARCPLUG)	arci.exe	Added by the W32/Tilebot-HB WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
L	ArcaBit NetMonitor (ABNetMon)	NetMonSV.exe	ArcaVir an AntiVirus software from Poland. A procuct of ArcaBit Sp. z o.o
L	ArchestrA Logger (aaLogger)	aaLogger.exe	Related to ArchestrA Software architecture for the integration of your automation systems.
L	Argos Billing Dialog	WorkstationMonitor.exe	Related to Argos_Billing_Dialog from Sepialine inc. Print Monitor. Note: Located in c:Program FilesS
L	ArGoSoft Mail Server Plus	mailservernt.exe	Related to ArGo Software Design Mail Server
L	Ascent Capture Service	acsvc.exe	Related to Kofax Image Products.
L	ASF Agent	ASFAgent.exe	Intel Alert Standard Format Console - asfagent.exe is a part of a systems management suite bundled w
L	AshampooDefragService	aDefragService.exe	Related to Ashampoo Magic Defrag Utility
L	ASMAgent	ASMAgent.exe	Related to ASAP_eSMART Smart Asset Management tool.
X	ASNFTP daemon (ASNFTPD)	AsnFtpd.exe	Added by the W32/Tilebot-BD WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	ASP.NET State Service (aspnet_state)	aspnet_state.exe	Related to Microsoft Windows Operating System and is the ASP State Service.
L	Asset Insight Client (AICLIENT)	Aiclient.EXE	Asset Insight from Tangram - http://castlecops.com/s1883-AICLIENT_EXE.html
L	Asset Management Agent	UMCSTUB.EXE	Related to Unicenter Asset Management by Computer_Associates
L	Asset Management Daemon	dtsslsrv.exe	Display configuration software used by several manufacturers under differing names such as Image Tun
X	Asus Motherboard Utility (Asus)	asus.exe	Added by the WORM_SPYBOT.IY WORM! Note: This worm rojan is located in C:%WINDIR% folder.
L	ASWLSVC	ASWLSVC.exe	Relate to the ASUS_Wireless_LAN_Card_Services
X	Asynchronous Load Balance (ySvcHst)	srvnst.exe	Added by ServiceThreadHandler.Process TROJAN! Note: located in C:WINDOWSSystem32
L	AT Host Service	atnthost.exe	Related to WebEx
L	Atheros Configuration Service	acs.exe	related to Atheros Wireless LAN
L	Ati HotKey Poller	Ati2evxx.exe	ATI Video Card Control Panel
L	ATI Smart	ati2sgag.exe	ATI Video Card Control Panel
X	ATIintergrated (ATIintergrated)	atigraphics.exe	Added by the SDBOT.CRX WORM! Read the link rootkit type stealth involved.
L	ATK Keyboard Service (ATKKeyboardService)	ATKKBService.exe	Related to ASUSTeK_Computer Inc. ASUS Keyboards and provides additional configuration options for th
L	AutoComplete Service	autocomp.exe	Tracks Eraser Pro
L	Autodata Limited License Service	ADCDLicSvc.exe	Related to Autodata Limited
L	Autodesk Data Management Job Dispatch	Connectivity.WindowsService.JobDispatch.exe	Related to Autodesk_Data_Management Web Server. Note: Located in C:Program FilesAutodeskData Managem
L	Autodesk EDM Server	Connectivity.EDMWS.Server.exe	Related to Autodesk_Data_Management Web Server. Note: Located in C:Program FilesAutodeskData Managem
L	Autodesk Licensing Service	AdskScSrv.exe	Related to Autodesk Inc.
L	Autodesk MapGuide® Server 6.3 (MapServer6.3)	MapServer.exe	Related to Autodesk Inc.
L	AutoMate 5 (AutoMate5)	AutoMate5Svc.exe	Related to Automate from Network Automation Inc. A Task Service. Note: Located in C:Program Filesaut
L	AutoMate 6 (AutoMate6)	AMTS.exe	Related to AutoMate from Network Automation. Tools necessary to completely automate business process
L	Automatic LiveUpdate Scheduler	ALUSchedulerSvc.exe	Related to to the Symantec LiveUpdate service which updates your Symantec products periodically.
X	Automatic Update Service (Automatic Update)	wuapi.exe	Added by the W32/Codbot-AC WORM! Note: This worm rojan file is found in the System32 folder.
L	AutoStore (autostore)	batch.exe	Related to NSi's AutoStore from Notable Solutions Inc. Capture documents and securely saving the con
L	Av Update Monitor (AvSvcMonitor)	AvMonitor.exe	Avast
L	avast! Antivirus	ashServ.exe	Related to Avast AntiVirus
L	avast! iAVS4 Control Service	aswUpdSv.exe	Related to Avast AntiVirus
L	avast! Mail Scanner	ashMaiSv.exe	Related to Avast AntiVirus
L	avast! Web Scanner	ashWebSv.exe	Related to AWIL Software http://www.avast.com/
?	Avast32 Start as Service	avserver.exe	seems to belong to Avast anti-virus software
X	AVCore (SrvMain)	avservice.exe	As of yet Unknown Worm Trojan or Malware. The file (avservice.exe) is found in the Documents and Set
L	Aventail Connect (As32Svc)	as32svc.exe	Related to Aventail_Corp
L	AVG E-mail Scanner	avgemc.exe	Related to AVG anti-virus
L	AVG Firewall (AVGFwSrv)	avgfwsrv.exe	Related to AVG_Firewall Note: located in C:PROGRA~1GrisoftAVG7
L	AVG6 Service	avgserv.exe	AVG 6 Anti virus
L	AVG7 Alert Manager Server	avgamsvr.exe	Related to AVG Anti-Virus.
L	AVG7 Update Service	avgupsvc.exe	Used by the AVG 7 Antivirus program to keep your definitions up to do date. Note : For more informat
L	Avid SDM Service (AvidSDMService)	AvidSDMService.exe	Related to Avid_SDM_Service from Avid Technology Note: Located in C:WINDOWSsystem32
L	Avid Startup	AvidStartup.exe	Associated with Avid_Digital_Media Products
L	avinitnt	avinitnt.exe	Related to Command AntiVirus for Windows Component made by Command Software Systems Inc. Which merge
X	AVKernel	AVKernel.exe	Rouge Anti-Virus Program. Made by WinSoftware Ltd. For more information on WinAntiVirus 2005 Click_H
L	AVM FRITZ!web Routing Service (de_serv)	de_serv.exe	Installed alongside DSL drivers from AVM Fritz's range of modem products. http://www.liutilities.com
L	AVP Control Centre Service	avpcc.exe	Kaspersky AntiVirus
X	AVP UPDATE IONTERFACE A6 (avA6)	AVA6.SYS	Added by the DLOADER.AJQ TROJAN! Note: This has also been seen using the Display name AVP update int
X	AVPX TCP (avpx32)	avpx32.sys	Added by the Troj/Haxdoor-AH TROJAN! Read the link rootkit type stealth involved.
X	AVPX64 TCP (avpx64)	avpx64.sys	Added by the Troj/Haxdoor-AH TROJAN! Read the link rootkit type stealth involved.
L	avsinc
X	avsuite (mssuite)	msuite.exe	Added by the W32/Sdbot-ABC WORM! Read the link rootkit type stealth involved.
L	AVSync Manager	Avsynmgr.exe	From McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe) WebScanX (Webscanx.exe) V
X	AVupdate service interface X2 (avupdate2)	avupdate2.sys	Added by the Troj/Hanlo-A TROJAN! Note: This trojan file is located in the System32 folder.
L	AvUpdSvc	avupdsvc.exe	Part of Avast! anti-virus software
X	â€œRDRIVâ€Â (rdriv)	RDRIV.SYS	Added by the TROJ_ROOTKIT.E TROJAN! Read the link rootkit type stealth involved.
L	B's Recorder GOLD Library General Service (bgsvcgen)	bgsvcgen.exe	Related to B_H_A_Corp B' Recording Gold for CD/DVD burning and authoring software.
L	Backup Exec 8.x Alert Server (BackupExecAlertServer)	alertServer.exe	Related to Veritas Software backup tool.
	Backup Exec 8.x Notification Server
L	Backup Exec Agent Browser (BackupExecAgentBrowser)	benetns.exe	Related to the Backup Exec application from Veritas http://www.liutilities.com/products/wintaskspro/
	Backup Exec Device & Media Service
L	Backup Exec Job Engine (BackupExecJobEngine)	bengine.exe	Backup service for Veritas Backup Exec. This program is essential in keeping backups up to date and
L	Backup Exec Naming Service (BackupExecNamingService)	benser.exe	Veritas Software Corporation. This is the Backup Exec naming service which is needed in order to ach
	Backup Exec Remote Agent for Windows Servers
L	Backup Exec Server (BackupExecRPCService)	beserver.exe	Related to Veritas Backup Exec. This program is essential in keeping backups up to date and should n
L	BackupClientSvc	BackupClientSvc.exe	Related to NovaNet_WEB NovaStor Corp. Online Backup Services.
L	BackupLauncher)	OLlaunch.exe	Related to Intuit Inc. QuickBook - http://www.intuit.com/
X	bcrcogqrkyko	mueyzrua5.exe
	BeatJam Music Server - HTTP
L	BeatJam Music Server - UPnP (BeatJamUPnPMusicServer)	BeatJamUPnPService.exe	See_BeatJam Justsystem audio software BeatJam.
L	Bell & Howell Database Manager (dbmang)	DBMANG.EXE	Related to Bell_and_Howell
L	Bell & Howell Monitor Service (BHMonitorService)	monitor.exe	Related to Bell_and_Howell
L	BelMonitor Service (BelMonitorService)	BANTMonitorSvc.exe	Related to Belarc inc.
L	BES Client (BESClient)	BESClient.exe	Related to BESClient by BigFix Inc
L	BGS_SDService	BGS_SDservice.exe	Related BMC Software Inc. - http://www.bmc.com/
L	bh611	NT611SVC.EXE	Related to Bell_and_Howell
L	BigPond Broadband Cable Login	bpcService.exe	Telstra's BIGPOND_BROADBAND_CABLE
L	Biometric Authentication Service	DpHost.exe	Related to DigitalPersona Inc.
L	BitDefender Communicator	xcommsvr.exe	Related to bitdefender Antivirus
L	BitDefender Desktop Update Service	livesrv.exe	Update service for BitDefender_Antivirus
L	BitDefender Scan Server	bdss.exe	Related to Bitdefender antivirus
L	BitDefender Virus Shield	vsserv.exe	Related to bitdefender (Virusshield)
	Black Hole2005 Professional Version (Black Hole2005
	Black Hole2005 Professional Version (Black Hole2005
L	BlackICE	blackd.exe	Black Ice firewall
L	BlueSoleil Hid Service	BTNtService.exe	BlueSoleil is a Bluetooth device manager for Windows. Made by the IVT_Corporation The file associate
X	Bluetooth Notification Service (Btnfserv)	btserv.exe	Added by the W32/Sdbot-CSD WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
L	Bluetooth Service	btwdins.exe	Bluetooth Service
L	bobo	momo	panda platinium antivirus
L	Boeing Permissions Elevator	elevate.exe	The Boeing Company (internal use)
L	Boingo Monitor Service	wmonitor.exe	Boingo's Free_Wi-Fi_Software
L	Bonjour Service	mDNSResponder.exe	Create's a network of computers and smart devices. Made by Apple Computer Inc. For more information
X	BoolTern (BoolTern)	svch0st.exe	Added by the W32/Tilebot-U WORM! Note: This (svch0st.exe) is not the legitimate Windows process (Whi
X	Boonty Games	Boonty.exe	Boonty_Games Used with Boonty box. Will not uninstall from Add/Remove programs. This is from their P
L	Broadcom ASF IP monitoring service v3.0.1	basfipm.exe	Related to Broadcom communications - hardware.
	Brother BidiAgent Service for Resource manager
L	Brother Popup Suspend service for Resource manager	Brmfrmps.exe	Brother printer related
X	Browser	svchost.exe -k Browser	Added by the Fuwudoor TROJAN!
L	BrSplService	brsvc01a.exe	related to Brother Industries Ltd
L	BT Modem Lock	ModemLock.exe	Related to NetProtector Parental control.
L	BUFFALO Wireless Configuration Service (bwcsrv)	bwcsrv.exe	Related to BUFFALO_Wireless Configuration Service Note: Located in C:WINDOWSSystem32Drivers
L	Buffalo Wireless Service (BWSVC)	bwsvc.exe	Related to Buffalo_Wireless_Service The Multimedia Combo Set by SANSUN Industries. Note: Located in
L	BullGuard Email Monitoring (BsMailProxy)	svchost.exe	Related to BullGuard Antivirus. Note: located in C:Program FilesBullGuard Software
L	BullGuard File Monitoring (BsFileSpy)	svchost.exe	Related to BullGuard Antivirus. Note: located in C:Program FilesBullGuard Software
L	BullGuard Firewall (BsFirewall)	svchost.exe	Related to BullGuard Antivirus. Note: located in C:Program FilesBullGuard Software
L	BullGuard LiveUpdate (BGLiveSvc)	BullGuardUpdate.exe	Related to BullGuard Antivirus. Note: located in C:Program FilesBullGuard Software
L	BullGuard Main (BGMainSvc)	svchost.exe	Related to BullGuard Antivirus. Note: located in C:Program FilesBullGuard Software
X	BusinessC (BusinessContinuity)	msstl.exe	Added by the SDBOT.CJR WORM! Read the link rootkit type stealth involved.
L	Bytemobile Web Configurator (bmwebcfg)	bmwebcfg.exe	Related to Bytemobile Inc. Mobile Content Filtering.
O	C-DillaCdaC11BA	CDAC11BA.EXE	copy protection software
L	C-DillaSrv	CDANTSRV.EXE	C-Dilla License Management software from MacroVison
L	CA ISafe	isafe.exe	Related to Computer Associates virus software.
L	CA License Client	lic98rmt.exe	Computer Associates
L	CA License Server	lic98rmtd.exe	Computer associates
L	CA Pest Patrol Realtime Protection Service (ITMRTSVC)	ITMRTSVC.exe	Related to CA_Pest_Patrol Realtime Protection Service Note: Located in C:Program FilesCAPPRTin
L	CachemanXP	CachemanXP.exe	CachemanXP Memory Manager
L	CAILI	caili.exe	related to CarryIco Software installed by a flash card reader driver setup utility.
L	Canon BJ Memory Card Manager	Bjmcmng.exe	Canon Bubblejet Memory Card Utility
L	Canon Camera Access Library 8 (CCALib8)	CALMAIN.exe	Canon digital camera software that provides additional configuration options for the devices.
L	Canon Driver Information Assist Service	CnxDIAS.exe	CANON Driver Information Assist Core Module. This file should be found in the Program FilesCanonDIAS
L	Canon PIXMA iP6000D Memory Card Manager	PDUiP6000DMemCrdMgr.exe	Related to Canon PIXMA iP6000D Bubble Jet printer
L	Capture Service (CaptureService)	CaptureService.exe	Related to Impact_360 from Witness Systems Inc. Workforce management. Note: Located in C:WINDOWSsyst
L	Carbon Copy Scheduler (CarbonCopyScheduler)	schdsrvc.exe	Related to Alteris services. http://www.altiris.com
L	CarboniteService	carboniteservice.exe	Related to Carbonite_online_backup automatically backs up all the the files on your computer.
X	Card Adapter (NETDown)	smss.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This is not the legitimate Windows Proce
X	Cdsys (Cdsys)	cdcd.sys	Added by the Troj/Agent-IA TROJAN! Note: This trojan file is found in the System32 folder.
	CE-Infosys Security System (CE-Infosys Security
L	CeEPwrSvc	CeEPwrSvc.exe	Related to TOSHIBA and COMPAL ELECTRONIC INC.
L	CentennialClientAgent	CAgent32.exe	Related to Centennial UK Limited - http://www.centennial.co.uk/
L	CentennialIPTransferAgent	xferwan.exe	Related to Centennial UK Limited - http://www.centennial.co.uk/
L	cFosSpeed System Service (cFosSpeedS)	spd.exe	cFos_Software Internet acceleration program related. Note: May be necessary for the software to work
X	change me please (VIRUS)	sysdat.exe	Added by the W32/Tilebot-L WORM!
O	Charter High-Speed Security Suite	SERVIC~1.EXE	Related to F-Secure Backweb application
X	chckntfs	chckntfs.exe	Added by the W32/Tilebot-EF WORM! Note: This worm rojan is located in C:%WINDIR%
X	chkext(chkext) (chkext)	chkext.exe	Added by the W32/Sdbot-CRW WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Chong3 Me (MlCR0SOFTS UPDATE)	N0RTAN.EXE	Added by the SDBOT.CNM WORM! Read the link rootkit type stealth involved.
X	Chong3 Me (MlCR0SOFTS UPDATEe)	lexplarer.exe	Added by the SDBOT.CWB WORM! Read the link rootkit type stealth involved.
L	cics.REGION1	cicssvc.exe	Related to IBM Corp.
L	cics.REGION2	cicssvc.exe	Related to IBM Corp.
L	cicssfs.SCMMC223	cicssfssvc.exe	Related to IBM Corp.
L	cidaemon	cidaemon.exe	Microsoft Indexing Service filter daemon
L	cidaemon	.exe	Microsoft Indexing Service filter daemon
L	Cisco Configuration Service (CCS)	ccs.exe	Related to Related to Cisco_Systems Note: Located in C:WINDOWSsystem32
L	Cisco Systems Inc. STC Agent (STCAgent)	agent.exe	Related to Cisco Systems inc. SSL VPN Client Note: located in C:Program FilesCisco SystemsSSL VPN Cl
L	Cisco Systems Inc. VPN Service	cvpnd.exe	part of Cisco VPN
L	Citrix CPU Utilization Mgmt/CPU Rebalancer (CTXCPUBal)	ctxcpubal.exe	Related to Citrix MetaFrame
L	Citrix CPU Utilization Mgmt/Resource Mgmt (ctxcpuSched)	ctxcpusched.exe	Related to Citrix MetaFrame
	Citrix CPU Utilization Mgmt/User-Session Sync
L	Citrix Print Manager Service (cpsvc)	CpSvc.exe	Related to Citrix MetaFrame control Printer Management.
L	Citrix SMA Service	SmaService.exe	Related to Citrix MetaFrame
L	Citrix Virtual Memory Optimization	CtxSFOSvc.exe	Related to Citrix MetaFrame Monitors all DLLs on a server to find where collisions are occurring
L	Citrix WMI Service (CitrixWMIService)	ctxwmisvc.exe	Related to Citrix MetaFrame
L	Citrix XML Service (CtxHttp)	ctxxmlss.exe	Related to Citrix MetaFrame
L	Citrix XTE Server (CitrixXTEServer)	XTE.exe	Related to Citrix MetaFrame
L	CL500_510 Remote Server	KaNTSRV.exe	Related to Panasocic_Color_Laser_Printer server. Note: Located in C:PROGRAM FILESPANASONICREMOTE SER
L	Client Network (CdmService)	cdmsvc.exe	Related to Citrix MetaFrame maps client drives and peripherals for access in ICA sessions.
X	Client Server Runtime Proces	csrss.exe	Added by the WORM_SDBOT.BTI WORM! Note: This worm rojan is located in C:%WINDIR% folder. Malicious a
L	Client Server Runtime Process	csrss.exe	Microsoft Client Server Runtime Process
X	Client Server Runtime Service (csrss32)	csr.exe	Added by the W32/Sdbot-AFM WORM! Note: This worm file is found in the Windows or Winnt folder.
L	Client Update Service for Novell	cusrvc.exe	Related to Novel server.
L	Cliente de seguimiento de vinculos distribuidos	services.exe	Spanish Windows 2000 distributed links tracking client
L	Cliente DHCP	services.exe	Spanish Windows 2000 DHCP client
L	Cliente DNS	services.exe	Spanish Windows 2000 DNS client
X	Clients Server Runtime Process	csrss.exe	Added by the W32/Sdbot-CPF WORM! Note: This worm rojan is located in C:%WINDIR% This is not the legi
X	Clients Server Runtime Process (Windows Internet)	csrss.exe	Added by the W32/Sdbot-CPF WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	clmss (Content List Management Sub System)	clmss.exe	Added by the W32/Tilebot-AO WORM! Note: This worm file is found in the Windows or Winnt folder. Read
X	Codec	WINCODEC.EXE	Added by the SDBOT.CJO WORM! Read the link rootkit type stealth involved.
L	Cognos ReportNet	cogbootstrapservice.exe	Related to Cognos_ReportNet Business Intelligence software. Note: located in C:Program FilesCognoscr
L	ColdFusion Graphing Server	JRun.exe	Related to MacroMedia_ColdFusion products. Made by MacroMediaInc.
	ColdFusion Management Repository Server (ColdFusion
L	ColdFusion Management Service	CANamingAdapter.exe	Related to MacroMedia_ColdFusion products. Made by MacroMediaInc.
L	ColdFusion Monitoring Service (ClusterCATS Service)	ccmgr.exe	Related to MacroMedia_ColdFusion products. Made by MacroMediaInc.
L	ColdFusion MX Application Server	jrunsvc.exe	Related to Macromedia Cold Fusion software.
L	ColdFusion MX ODBC Server	swstrtr.exe	Related to Macromedia Cold Fusion software.
L	COM Host	comHost.exe	Related to Norton/Symantec Internet Security
X	COM Message Transfer (mscommt)	svchost.exe -k mscommt	Added by the Troj/Dbit-A TROJAN!
X	COM+ Component Service (COMCSVC)	winmgnt.exe	Added by unknown malware the file winmgnt.exe may be a Serv-U FTP server used to download other mali
X	COM+ Messages	svchosts.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	COM+ System Service (COMSS)	SSMS.EXE	Added by unknown malware. File location is in the System32 folder.
X	COM+ System Service (DLLHOST)	dllhost.exe	Added by the Backdoor.Win32.SdBot.xd as identified by Kaspersky TROJAN! Note: This worm rojan is loc
X	Command Service (cmdService)	command.exe	Adware
L	CommServer	CommSvr.exe	Related to the HiPath 1220 digital PBX system from Siemens. For more information Click_Here File loc
L	Comodo Application Agent (CmdAgent)	cmdagent.exe	Related to Comodo_Firewall from Comodo. Note: Located in C:Program FilesComodoFirewall
L	Compaq Advisor	compaq-rba.exe	Related to Compaq
L	Compaq DMI Web Agent	WebDmi.exe	Related to Compaq Computer.
L	Compaq Local Alerter	cpqalert.exe	Related to Compaq Computer. Allows for fault performance and configuration management. Recommended f
O	Compaq Remote Diagnostics Enabling Agent	Cpqdfwag.exe	Related to Compaq diagnostics utility.
X	Compatibil)	svchost.exe	Added by the Troj/Keylog-AT TROJAN! Note: This is not the legitimate Windows process svchost.exe (Wh
L	Compuware Open Server	cwjboss.exe	Compuware Serversoftware
X	comrepl	comrepl32.exe	Added by the W32/Rbot-DNH WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	comrepl	comreplsvc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Config Loader	scvhost.exe	several Agobot variants
L	ConfigFree Service	CFSvcs.exe	Toshiba related
X	Configuration Loader (bF)	wincrt32.exe	Virus and Trojan tools. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.
X	Configuration Loading	svchos1.exe	several Agobot variants
L	Connected Agent Service (AgentSrv)	AgentSrv.EXE	Related to Connected Corporation. - http://www.connected.com/
L	Connected Launcher	CBlaunch.exe	Connected backup software
L	Connected RegCap	CBRegCap.EXE	Connected backup software
X	Connection Rese	webadmin.exe	W32/Forbot-FY adds this with a display name of Website Administrator Info.
L	Content Index service	cisvc.exe	Microsoft Content Index service
L	Content Monitoring Tool	msCMTSrvc.exe	Compaq CMTS
L	ContentProtect (CwCpSvc20)	cwsvc.exe	Related to ContentWatch Parental Control Internet Filter.
L	Contivity VPN Service	Extranet_serv.exe	Related to Novel server.
L	Contour Shuttle Device Engine (ShuttleEngine)	ShuttleEngine.exe	Related to Contou_Design
L	COSIDS_TB	TbMux32.exe	Related to http://www.transaction.de/
O	coste	martinr.coste@neuf.fr	antivirus
	Cox High Speed Internet Security Suite System Service
X	cpanelx (Microsoft Control Panel)	cpanelx.exe	Added by a variant of the W32/SDBOT WORM! Note: This worm file is found in the Windows or Winnt fold
L	cpqdmi	cpqdmi.exe	Compaq version of the Desktop Management Interface
L	CQG Installation Service	cqginsts.exe	Related to CQG Inc. CQG provides extensive historical data online for charting and technical analysi
L	crauto	crauto.exe	Background task of the Paragon Encrypted Disk software which enables you to have encrypted virtual h
L	Creative Labs Licensing Service	CreativeLicensing.exe	Related to Creative Labs Licensing Service. Note: located in C:Program FilesCommon FilesCreative Lab
L	Creative Service for CDROM Access	CTsvcCDA.exe	Creative Service for CDROM Access
X	crss32.exe	crss32.exe	Added by the W32/Tilebot-GT WORM! Note: This worm rojan is located in C:%WINDIR%
L	Crypkey License	crypserv.exe	CrypKey Software Licensing System from Cobalt Systems
L	Cryptainer service (ssoftservice)	ssoftsrv.exe	Owner:Cypherix Cypherix Encryption Software
X	Cryptic Protected Storage (CryptProtectedService)	cpstorage.exe	Added by the W32/Tilebot-HO WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Cryptographic Engine (EngSvc)	csvc.exe	Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm rojan is located in
L	Crystal Cache Server	cacheserver.exe	Crystal Decisions Cache Server
L	Crystal Event Server	EventServer.exe	Crystal Decisions Event Server
L	Crystal Input File Repository Server	inputfileserver.exe	Crystal Decisions File Repository Server
L	Crystal Management Server	CrystalMS.exe	Crystal Decisions Management Server
L	Crystal Output File Repository Server	outputfileserver.exe	Crystal Decisions Output File Repository Server
L	Crystal Page Server (pageserver)	pageserver.exe	Related to Crystal Decisions Page Server. Now owned by Business_Objects Note: Located in C:Program F
L	Crystal Program Job Server	ProgramServer.exe	Crystal Decisions Job Server
L	Crystal Report Application Server	crystalras.exe	Crystal Decisions Report Application Server
L	Crystal Report Job Server	JobServer.exe	Crystal Decisions Report Job Server
L	Crystal Web Component Server (WebCompServer)	WebCompServer.exe	Related to Crystal Decisions Enterprise software. Now owned by Business_Objects Note: Located in C:P
X	CTI Central Management	cti.exe	Lowers IE security settings
L	Curtains for Windows System Service (CurtainsSysSvc)	CurtainsSysSvcNt.exe	Related to Authentium Inc. http://www.authentium.com/
L	CVSNT 2.5.01.1927 Dispatch service (cvsnt)	cvsservice.exe	Related to CVS_on_NT service Machines. From March Hare Software. Note: Located in C:Program FilesCVS
L	CVSNT 2.5.01.1927 locking service (cvslock)	cvslock.exe	Related to CVS_on_NT service Machines. From March Hare Software. Note: Located in C:Program FilesCVS
L	CWAFAdminController	CWAFAdminController.exe	Compuware Seversoftware
L	CWAFAdminMonitor	CWAFAdminMonitor.exe	Compuware Serversoftware
L	CWAFEventRouter	cwafservice.exe	Compuware Serversoftware
L	CWAFNotesService	CWAFNotesService.exe	Compuware Serversoftware
L	CWAFReportScheduler	CWAFSchedService.exe	Compuware Serversoftware
L	CWAFRmiRegistry	CWAFRmiRegistry.exe	Compuware Serversoftware
L	CWShredder Service	CWShredder.exe	CWShredder tool from Trend Micro.
L	CXPT_Service - Cyberspace Headquarters LLC	wcservice.exe	Related to Internet_Security Suite from COSMI Corp.
L	CyberArmor Run Service	casvc.exe	CyberArmor an Enterprise Class Personal Firewall
L	Cyberhawk	CHService.exe	Related to Cyberhawk from Novatix Protects against Viruses Spyware Identity Theft. Note: Located in
L	CyberLink Background Capture Service (CBCS) (CLCapSvc)	CLCapSvc.exe	Related to CyberPower Systems Inc. - http://www.powercinema.com/english/index.jsp
L	CyberLink Media Library Service	CLMLServer.exe	Related to CyberPower Systems Inc. - http://www.powercinema.com/english/index.jsp
L	Cyberlink RichVideo Service(CRVS) (RichVideo)	RichVideo.exe	CyberLink RichVideo is an advanced technology designed to save precious video editing time.
L	CyberLink Task Scheduler (CTS) (CLSched)	CLSched.exe	Related to CyberPower Systems Inc. - http://www.powercinema.com/english/index.jsp
L	CYGWIN cygserver (cygserver)	cygrunsrv.exe	Related to Cygwin_RedHat powerful tools to assist developers in migrating applications from UNIX®/Li
L	CypressLink	CypressLinkService.exe	Related to Related to CypressViewer from Siemens. Medical software. Note: Located in C:Program Files
L	D-Link IP servellience Launcher (D-Link_ST3402)	Launcher_DL.exe	Related to D-link Software. Note: Located in C:Program FilesD-LinkIP surveillance
L	DameWare Mini Remote Control	DWRCS.EXE	Related to DameWare Development
L	DameWare NT Utilities 2.6 (DNTUS26)	DNTUS26.EXE	Related to Dameware_NT_Utilities program that allows remote access and control of a computer. This i
L	dashsvc	Dashsvc.exe	Motion computer pen interface. :Owner: Motion Computing Inc.
L	Data Protector Inet	OmniInet.exe	Related to Hewlett-Packard OpenView OmniBack II
L	Datakey's Log Service (DkLogger)	DkLog.exe	Related to Datakey_Electronics_Inc Products. Made by Datakey Inc. This file is found in the System32
L	Datakey's Token Service (DkTknSrv)	dkcktkn.exe	Related to Datakey_Electronics_Inc Products. Made by Datakey Inc. This file is found in the System32
L	DataSvr	DataServer.exe	Related to Wave_Systems_Corp An identity protection application that is configured to use digital ce
L	Datax Sagef Server (SagefServer)	Datax.Sagef.Server.exe	Related to DataX Server. Note: Located in C:Program FilesDataxServidor Sagef
L	DB2 - DB2 (DB2)	db2syscs.exe	Related to IBM Corp.
L	DB2 - DB2DAS00 (DB2DAS00)	db2syscs.exe	Related to IBM Corp.
L	DB2 Governor (DB2GOVERNOR)	db2govds.exe	Related to IBM Corp.
L	DB2 JDBC Applet Server	db2ccs.exe	Unknown.Found in an IBM application.
L	DB2 JDBC Applet Server (DB2JDS)	db2jds.exe	Unknown found in a IBM application.
L	DB2 Remote Command (DB2REMOTECMD)	db2rcmd.exe	Related to IBM Corp.
L	DB2 Security Server (DB2NTSECSERVER)	db2sec.exe	Related to IBM Corp.
L	DB2DAS - DB2DAS00	db2dasrrm.exe	IBM DB2 related. The DB2 Admin Server process. This process supports both local and remote administr
L	Dcfssvc	dcfssvc.exe	Associated with digital cameras and can cause problems which disappear if disabled. If this program
X	Dcom Helper (DcmHlp)	dcmhelp.exe	Addec by the W32/Sdbot-AJA WORM! Note: This worm rojan is located in C:%WINDIR%
X	DCOM PC Service (mspcdcom)	mspcdcom.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L	DCPFLICS	DCPFLICS.exe	Related to: Discreet Turbosquid/3dsmax Plugin Protection
L	DCS Loader	OPHALDCS.EXE	Print spooler service for Oki_Data printer
X	dcznetv2 (dcznetv2)	dcznetv2.exe	Added by the W32/Tilebot-O WORM! Note: This worm/trojan file is found in the Windows or Winnt folder
L	DDE de red	netdde.exe	Spanish Windows 2000 network DDE
X	Debug Config System	lrsys.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L	Deepsight Extractor	ExtractorService.exe	Symantec Security Analyser
L	DeepSight Extractor CC Service	ccExtractorService.exe	Related to Symentec corp.
L	DeepSight Extractor Service for NPF03	ExtractorServiceNPF03.exe	Symantec Security Analyser
L	DeepSight Extractor Service for NPF04	ExtractorServiceNPF04.exe	Symantec Security Analyser
	Defragmentation Management Handler (FAT
X	Defragmentation)	dfrgfat32.exe	Added by the W32/Codbot-AB WORM! Note: This worm rojan file is found in the System32 folder.
L	DefWatch	defwatch.exe	Symantec Antivirus related
L	Dell Printer Status Database (DLSDB)	DLSDBNT.EXE	Related to Dell_Printers Note: Located in C:Program FilesDell PrintersAdditional Color Laser Softwar
L	Dell Printer Status Watcher (DLPWD)	DLPWDNT.EXE	Related to Dell_Printers Note: Located in C:Program FilesDell PrintersAdditional Color Laser Softwar
L	DellDmi	DellDmi.exe	Related to Dell's OpenManage software.
L	DEventAgent	EventAgt.exe	Related to: Dell OpenManage and used for server management.
X	DEVICEMAP	DEVICEMAP.SYS	Added by the TROJ_ROOTKIT.O TROJAN! Read the link rootkit type stealth involved.
L	DF5Serv	DF5Serv.exe	By Faronics Corporation
X	dgtsys (dgtsys)	dgtsys.sys	Added by Adware-DigitalNames
X	DHCP Client (Ulead Service)	dhcpclient.exe	Added by the W32/Codbot-AG WORM!
L	Diagnostic Facility COM Server (CdfSvc)	CdfSvc.exe	Related to Citrix MetaFrame Presentation Server
L	DiamondCS Process Guard Service v3.000	dcsuserprot.exe	process guard
L	DigiCtrl	digisc.exe	Related to Matrox_Electronic_Systems DigiSuite Service Control
L	Digidesign MME Refresh Service (DigiRefresh)	MMERefresh.exe	Related to Digidesgin Protocols Refreshes your midi ports on the 002(R) (the 002R is a hardware audi
L	digiSPTIService	digiSPTIService.exe	Related to Pro_Tools digital audio workstation (DAW) technology.
L	Digitizer Service (Digitizer)	digtizer.exe	Related to Digitizer_Service from Wacom Tech. Note: Located in C:%WINDIR%System32 (XP/WinNT/2K)
L	Dimension4	D4.exe	Related to Dimension4 Thinking Man Software - Note: Located in C:Program FilesD4
X	direct sound rss (dsrss)	dsrss.exe	Added by the Backdoor.SdBot.xd as identified by ewido. Note: This worm rojan is located in C:%WINDIR
L	DirectUpdate engine	DUService.exe	Direct Update - registers dynamic IPs to a fixed hostname
L	DirectX Debug Service (DXDebug)	DXDebugService.exe	Related to the Microsoft DirectX SDK and offers a debug facility for this development suite.
X	DirectX Drivers	D1rectX.exe	Added by the SDBOT.CIF WORM! This should not be confused with Microsoft DirectX files. Read the link
X	DirectX Graphics (dxdmain)	dxdmain.exe	Added by the W32/Codbot-O WORM!
X	DirectX Service (DirectService)	directx.exe	Added by the Troj/Crybot-B TROJAN! This should not be confused with Microsoft DirectX files. Note: A
X	directx.exe	directx.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	DIRECWAY Webcast (DPC_SRV_WEBCAST)	dpcproxy.exe	Related to DIRECWAY Webcast - http://www.directway.com/
L	DirMS_Defragmentation	DirmsService.exe	Related to DirMS_Defragmentation from DIRMS. Allows the user to defragment hard drives with a user-f
L	Disk Management Service (VxSvc)	VxSvc.exe	Related to Dell Open Management system. http://www.what-process.com/process-info.aspx?p=VxSvc.exe
X	Disk Manager Users Service)	chkdsk32.exe	Added by the Troj/Telemot-A TROJAN! Note: This trojan file is found in the System32 folder.
X	Disk Monitor Services (DiskMon32)	svchost.exe -k dmon	Added by the Hanmon TROJAN! Note: This trojan file is found in the System32 folder.
L	Diskeeper	DkService.exe	Executive Software's Diskeeper (Defragmenter)
X	Distributed Link Tracking Extensions	kernel32dll.exe	Added by the W32/Myfip-I worm.
X	Distributed Link Tracking Service (TrkWksvc)	TrkWksvc.exe	Added by the W32.Toxbot.B WORM!
X	distributed.net client	iosdt.exe	You have a Trojan virus on your PC . IOSDT.EXE is its main file. You most probably tried to download
L	distributed.net client (dnetc)	dnetc.exe	Client part of the dstributed.net general-purpose distributed computing project.
L	DK2 Network Server (DNServer32)	DNSrv32.exe	Related to DESkey_Hardware reliable and flexible means to protect your software from piracy. Note: L
L	DkeySync	syncservice.exe	Related to GE_Security_Supra Note: Located in c:program filesge security supra
L	dlbt_device	dlbtcoms.exe	Something by Dell Computers
L	dlbu_device	dlbucoms.exe	Related to Dell computers
L	dlbx_device	dlbxcoms.exe	Related to Dell computers.
L	dlcc_device	dlcccoms.exe	Dell printer related. File is found in the System32 folder.
L	dlcj_device	dlcjcoms.exe	Related to Dell Photo AIO Printer may be the driver.
X	DLL Manager (mswindll)	mswindll32.exe	Added by the W32/Tilebot-AQ WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	DLT - Dell Computer Corporation	DLT.exe	Related to Dell OpenManage system management software
L	DM Primer (DMPrimer)	dmprimer.exe	Related to Unicenter_Remote_Control_Host From Computer Associates Note: Located in C:Program FilesCA
L	DM1Service	DM1Service.exe	Related to OLYMPUS Corporation
L	dmisrv	dmisrv.exe	Appears to be part of Dell OpenManage_Client_Instrumentation Software.
X	dmserver	svchost.exe -k dmserver	Added by the Fuwudoor TROJAN!
X	DNS Server (DNS Server)	svchost.exe	Added by the Troj/Feutel-Y TROJAN! Note: This is not the legitimate Windows Process. (Which is found
L	DNS4Me Client (DNS4MeClient)	DNS4MeClient.exe	Related to Dynamic_DNS_service from RhinoSoft.com that makes it possible for you to start hosting yo
L	DNSexit	dnsexit_srv.exe	Provides reliable DNS Services free of charge to top level domains for both business and internet us
L	dnWhoDisp	dnwhodisp.exe	Related to Rockwell_Automation Inc. FactoryTalk suite
L	Documentum Desktop Component Installer	DcComponentInstaller.exe	Related EMC_Corporation Content management software.
L	Download Manager Lite Service (DownloadManagerLite)	dm.exe	Related to Net_Cable TV. Note: Located in C:Program FilesNCTVin
X	Dragon Age - Bioware	dragonage.exe	Added by the W32/Vanebot-M WORM! Note: This worm rojan is located in C:%WINDIR%System32 dllcache (XP
X	driver	msiisdrv.exe	Added by the Backdoor.Isen.Rootkit TROJAN! Read the link rootkit type stealth involved.
X	Driver Cache (Driver Cache)	Driver Cache.exe	Added by the Troj/Feutel-S TROJAN!
L	DSDM de DDE de red	netdde.exe	Spanish Windows 2000 network DDE DSDM
L	DTS Agent	tngdta.exe	Computer Associates Data Transport Service Agent
L	DTS Browser	tngdoba.exe	Computer Associates Data Transport Service Browser
L	DTS Metrics Gatherer	tngdtmg.exe	Computer Associates Data Transport Service
?	DUN Manager Service	dmservc.exe	Dial-up and routed networking enhancement - http://www.magsys.co.uk/dunman/
X	DUN_SERVICE3	dun3.exe	Added by the Trojan.Sokiron TROJAN!
L	DVD-RAM_Service	DVDRAMSV.exe	DVD driver
X	DVDrealm (DVDrealm)	DVDrealm.sys	Added by the Troj/Rootkit-AA TROJAN! Read the link rootkit type stealth involved.
L	DvpApi	dvpapi.exe	Command Software Systems Inc. - anti Virus
X	dx32hhec	dx32hhlp.exe	Added by the Nemog TROJAN!
X	Dynamic Library Host (DLLHOSTS)	dllhost.exe	Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: Note: This worm rojan is loca
X	DynamicHost (DLHOST)	dlhost.exe	Added by the W32/Tilebot-BO WORM! Note: This worm file is found in the Windows or Winnt folder.
	EarthLink Firewall Process Path Service
	EarthLink Protection Control Center Service
L	Easy File & Folder Protector (ACDService)	EFPAP.exe	Easy_File_&_Folder_Protector Deny access to certain files and folders or to hide them securely from
L	EC2007 Service 1.40 (EC2007Service)	ec27ser.exe	Electronic_Chart_Display_and_Information System (ECDIS). Data production for Electronic Navigational
X	ECA (cpanel)	javapanel.exe	Added by the W32/Tilebot-Y WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
L	eEye Application Bus (eeyeevnt)	eeyeevnt.exe	Related to eEye Digital Security
L	eEye Retina Engine (RetinaEngine)	RetinaEngine.exe	Related to eEye Digital Security
L	Electronic Arts Licensing Service	EA Licensing Service.exe	Related to EA_Licensing_Service.exe is installed with some games from Electronic Arts. It is require
L	EloSystemService	EloSrvce.exe	Elo TouchSystems Inc. - http://www.elotouch.com
L	EloTouchscreen	EloTouch.exe	Related to Elo TourchSystems Inc.
X	elpow_spy	elpow_spy.sys	Added by the ElpowKeylogger Spyware! Note: This file is found in the System32drivers folder. Read th
L	EMCliSrv	EMCliSrv.exe	Related to Express_Metrix PC inventory and software usage tracking. Note: Located in C:WINDOWSsystem
X	Enables Java Support (Java)	winjava.exe	Added by the W32/Codbot-AA WORM! Note: This worm/trojan file is found in the System32 folder. (May u
X	Enables Javascript Support (Javascript)	javascript.exe	Added by the W32/Codbot-V WORM!
L	Encryption Service	encsvc.exe	Related to Citrix MetaFrame
X	end task (Taskend)	Taskend.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	Entertainment	IcVzMon.exe	Related to Sony_VAIO computers.
L	Entrust Login Interface (ELIService)	etlisrv.exe	Related to Entrust Login Interface service Made by Entrust Technologies Ltd. This file is found in t
L	ENUFF Server (ENXPSVR)	ENSERVS.EXE	Enuff Parental Control Software by Akrontech
L	ENUFF XP Service (ENXPSVC)	CVSEXPSS.EXE	Enuff Parental Control Software by Akrontech
L	Environment (WS2IFSL)	ws2ifsl.sys	GuardMon is a commercial spyware program designed to monitor all forms of user activity on a compute
L	EPrint III Service	LPSVS03N.EXE	Related to LEADTOOLS_ePrint From Lead Tech. Perform additional processing to your print job before s
X	EPS Printer Driver	EPSONSYS.SYS	Added by the Goldun.I TROJAN! Note: This trojan file is found in the System32 (NT/2000/XP) folder. A
L	Epson Printer Status Agent (StatusAgent)	SAgentNT.exe	Related to Epson_Printer Status agent. Note: Located in C:Program FilesCommon FilesEPSONEBAPI
L	EPSON Printer Status Agent2	SAgent2.exe	detects and configures an Epson Printer Port where applicable
L	Epson Printer Status Agent4 (StatusAgent4)	SAgent4.exe	Related to Epson Corp.
L	EPSON V3 Service2(02) (EPSON_PM_RPCV2_02)	E_S00RP2.EXE	Related to the EPSON Status Monitor 3
L	EPSON V3 Service2(03) (EPSON_PM_RPCV2_01)	E_S00RP1.EXE	Related to the EPSON Status Monitor 3
L	EpsonBidirectionalService	eEBSVC.exe	Related to Epson printers.
L	eScan Monitor Service	avpm.exe	eScan Antivirus
L	eScan Server-Updater	TRAYSSER.EXE	eScan antivirus
L	Escritorio remoto compartido de NetMeeting	mnmsrvc.exe	Spanish Windows 2000 Netmeeting remote desktop sharing service
L	Esker FTPD (ftpds)	WFTPDSNT.EXE	Related to Esker software
L	Esker License Control (EskerLicenseControl)	eslcbcst.exe	Related to Esker License control
L	Esker LPD (lpds)	WLPDSNT.EXE	Related to Esker software
L	Esker NFSD (nfsds)	WNFSDSNT.EXE	Related to Esker software
L	EstaciÃ³e trabajo	services.exe	Spanish Windows 2000 workstation
X	ET54FG	ET54FG.SYS	Added by the TROJ_ROOTKIT.N TROJAN! Read the link rootkit type stealth involved.
L	eToken Notification Service (ETOKSRV)	eTSrv.exe	Related to eToken Notification Service from Aladdin Knowledge Systems Ltd. Authentication and passwo
L	eTrust Antivirus Job Server	InoTask.exe	Associated with eTrust Antivirus/InoculateIT
L	eTrust Antivirus Realtime Server	InoRT.exe	Related to eTrust's AntiVirus Internet Security solution.
L	eTrust Antivirus RPC Server	InoRpc.exe	Associated with eTrust Antivirus/InoculateIT
L	Event Log Watch	LogWatNT.exe	Computer Associates
X	Event Monitor (evmon)	spoolcll.exe -netcvs	Added by the W32.Spybot.IVQ WORM!
L	EvtEng	EvtEng.exe	Related to Intel Corporation http://www.what-process.com/process-info.aspx?p=EvtEng.exe
L	ewido anti-spyware 4.0 guard	guard.exe	Related to ewido_suite Note: located C:Program Filesewido anti-spyware 4.0/
L	ewido security suite control	ewidoctrl.exe	Related to ewido networks
L	ewido security suite guard	ewidoguard.exe	Related to ewido networks
L	Examinador de equipos	services.exe	Spanish Windows 2000 computers browser
L	ExecView Communication Module (ECM) (ECM Service)	ECM.exe	Related to VERITAS_ExecView
L	Exten. controlador Instrumental de admon. de Windows	services.exe	Spanish Windows 2000 windows management instrumentation drive extension
	Extended Windows Security (Microsoft Extended Windows
X	Externtelecom	extel.exe	Added by the W32/Sdbot-AAX WORM! Read the link rootkit type stealth involved.
L	F-Prot Antivirus Update Monitor	fpavupdm.exe	F-Prot anti-virus background scanner by F-Risk Software. http:/
L	F-Prot Antivirus Update Monitor	fpavupdm.exe	Related F-Prot Antivirus Update Monitor by FRISK_Software_International
L	F-Secure 2006 (BackWeb Plug-in - 4476822)	SERVIC~1.EXE	Related to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
L	F-Secure Anti-Virus 2005 (BackWeb Plug-in - 4476822)	SERVIC~1.EXE	Related to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
L	F-Secure Anti-Virus Firewall Daemon	fsdfwd.exe	Related to F-Secure Corporation.
L	F-Secure Automatic Update Agent (FSAUA)	fsaua.exe	Related to F-Secure Corporation. Note: Located in C:Program FilesF-SecureFSAUAprogram
O	F-Secure BackWeb LAN Access	fsbwlan.exe	Related to F-Secure_BackWeb LAN Access. This File should be found in the Program FilesF-Secure Inter
L	F-Secure Gatekeeper Handler Starter	fsgk32st.exe	Related to F-Secure Anti-Virus Prog.
L	F-Secure HTTP Server (fshttps)	fshttps.exe	F-Secure Corporation http://www.what-process.com/process-info.aspx?p=fshttps.exe
L	F-Secure Management Agent	FSMA32.EXE	Related to F-Secure Anti-Virus Prog.
L	F-Secure Network Request Broker	FNRB32.EXE	Related to F-Secure_Anti-Virus software. This File should be found in the Program FilesF-SecureCommo
L	FactoryTalk Diagnostics CE Receiver (RNADiagReceiver)	RNADiagReceiver.exe	Related to Rockwell_Automation Inc. FactoryTalk suite
	FactoryTalk Diagnostics Local Reader
L	Fast Track Installer (FastTrackInstallerService)	GBInst.exe	Related to Fast_Track_USB from M-Audio. Note: Located in C:Program FilesM-Audio Fast Track
	FastUserSwitchingCompatibil (Fast User Switching
X	Fear Service (FSVC)	fear32.exe	Added by the W32/Tilebot-T WORM! Note: This worm file is found in the Windows or Winnt folder.
X	FIFA WORLD CUP 2007	fifa2007.exe	Added by the W32/Spybot-MQ WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache(XP/W
L	File and Folder Protector	ffpsrv.exe	Related to SoftHeap.Com a software shop of Atlantic Coast PLC http://www.softheap.com/
L	FileChecker	filechecker.exe	Related to FileChecker from Javacool software. Watches important system files for changes modificati
L	FileZilla Server FTP server (FileZilla Server)	FileZilla Server.exe	Related to FileZilla A FTP and SFTP client for Windows from SourceForge.net
L	Firebird Guardian	fbguard.exe	Firebird Guardian
L	Firebird Server	fbserver.exe	Firebird Database Server
X	FireDaemon Service: events (events)	FireDaemon.EXE	Reported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that
X	FireDaemon Service: rundll (rundll)	FireDaemon.EXE	Reported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that
X	firefox auto update	firefox.exe	Added by the W32/Tilebot-DN WORM! Note: Located in C:%WINDIR%
X	Firewall service (FWSvc)	FWSvc.exe	Related to WinAntiVirus Pro - rogue antivirus
L	Fix-It Task Manager (mxserver)	mxserver.exe	Related to Ontrack Inc. Data Recovery service.
L	Flash Communication Admin Service (FlashComAdmin)	FlashComAdmin.exe	Appears to be modem driver related Made by Macromedia Inc.
L	Flash Communication Server (FlashCom)	FlashCom.exe	Appears to be modem driver related Made by Macromedia Inc.
L	FLEXlm server for PTC	lmgrd.exe	lmgrd.exe is a process associated with the Macrovision application-generic license server.
L	FLEXnet Licensing Service	FNPLicensingService.exe	Related to FLEXnet_Publisher from Macrovision. Note: Located in C:Program FilesCommon FilesMacrovisi
L	Folder Size (FolderSize)	FolderSizeSvc.exe	Related to Folder_Size Adds an other column to your folder view. Note: Located in C:Program FilesFol
	Folding@Home
L	Font Cache Downlevel	FontCacheService.exe	Service installed by the Microsoft Avalon open beta.
L	ForceWare Intelligent Application Manager (IAM)	nSvcAppFlt.exe	Related to Nvidia Corp. Intelligent Application Manager.
L	ForceWare IP service (nSvcIp)	nSvcIp.exe	Related to Nvidia Corp. Network Access Manager.
L	ForceWare user log service (nSvcLog)	nSvcLog.exe	Related to Nvidia Corp. Network Access Manager.
L	Fortech Proxy+	ProxyPlus.exe	FORTECH Ltd. http://www.proxyplus.cz/
L	Fortinet Service Scheduler (FA_Scheduler)	scheduler.exe	Related to Fortinet security systems are the new generation of real time network protection systems.
O	Framework	srvany1234.exe	Unknown owner: Location C:WINDOWSsystem32srvany1234.exe
L	Freeloader Monthly Subscription Service	Freeloader Monthly Subscription Service File.exe	Related to freeloader.com Online game services.
L	FreePOPs	freepopsservice.exe	FreePOPs is distributed by the GNU General Public License is intended to guarantee your freedom to s
L	FreeSSHDService	FreeSSHDService.exe	Related to OpenSSH A free SSH/SecSH protocol suite providing encryption for network services like re
X	FreezeScreenSaver	FreezeScreenSaver.exe	FREEZESCREENSAVER.EXE_is_Adware Note: Located in C:WINDOWSsystem32
X	frepdll.exe	FREPDLL.EXE	Added by the W32/Tilebot-D WORM! Note: Gives the fake description ET dll Locator tool. Read the link
L	FS Service Control	NTServApp.exe	Related to ArchestrA Software architecture for the integration of your automation systems.
L	fsbwsys	fsbwsys.exe	Related to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program FilesF
X	FUS_Server (USEPigeonServer)	FTPServer.exe	Added by the Troj/Hunpigon-RO TROJAN! Note: This trojan file is found in the System32 folder.
L	FW Configuration Interpreter	UmxCfg.exe	Tiny Firewall
L	FW Event Manager	UmxAgent.exe	Tiny Firewall
L	FW Live Update	umxlu.exe	Tiny Firewall
L	FW Policy Manager	UmxPol.exe	Tiny Firewall
L	FW User to IP Address Translation	umxuta.exe	Tiny Firewall
L	FW User-Mode Helper (UmxFwHlp)	UmxFwHlp.exe	Tiny Software Firewall User-Mode Helper. Made by Tiny Software Inc. A subsidiary of Computer_Associa
X	fwnet64 (fwnet)	fwnet64.exe	Added by Backdoor.SDBot.gen Note: This worm rojan is located in C:%WINDIR%
L	FwSRService	fwsrservice.exe	CheckPoint SecuRemote
L	GBPoll	GBPoll.exe	Seems to be Roxio GoBack related
X	GCX Service	GCXSRVC.EXE	Added by the RBOT.CUE WORM! Read the link rootkit type stealth involved.
L	GEARSecurity	GEARSEC.EXE	Related to GEAR software.
L	Gene6 FTP Server	G6FTPSERVER.EXE	Related to Gene6 Sarl. http://www.g6ftpserver.com/
X	General Network Service	winsocks32.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	generic host process (svchost)	svchost.exe	Added by the W32/Tilebot-BB WORM! Note: This is not the legitimate Windows process svchost.exe (Whic
	Generic Host Process For Win32 Services (Generic Host
	Generic Service for HID Keyboard Input Collections
L	GFI LANguard System Integrity Monitor 3 agent service	cfservice.exe	GFI LANguard System Integrity Monitor is a utility that provides intrusion detection by checking whe
L	GhostStartService	GHOSTS~2.EXE	Related to Norton. GHOSTSTARTSERVICE is the background support task/service for Ghost for Windows.
L	Giga Pocket Hardware Detector	shwserv.exe	Sony computers
X	gldr	gldr.exe	Trojan Related
L	Google Updater Service	GoogleUpdaterService.exe	(gusvc) - Google - commonly found in a location like this: C:\Program Files (x86)\Google\Common\Goog
L	Google Updater Service (gusvc)	GoogleUpdaterService.exe	Related to Google_Updater_Service Note: Located in C:Program FilesGoogleCommonGoogle Updater
L	GoogleDesktopManager	GoogleDesktopManager.exe	Related to Google_Desktop_Manager Note: Located in C:Program FilesGoogleGoogle Desktop Search
L	GoToMyPC	g2svc.exe	Related to Citrix Online
L	GoverLAN Service (GOVsrv)	GOVsrv.EXE	Owner:PJ Technologies Inc. See_Here
X	Gray (Pigeon)	Scrsss.exe	Added by the Troj/GrayBrd-AM TROJAN! Note: This worm rojan file is found in the Windows or Winnt fol
X	Gray_Pigeon (GrayPigeon)	.exe	Added by the Troj/GrayBrd-EH TROJAN! Note: This worm rojan file is found in the Program Files folder
X	Gray_Pigeon_Serve (GrayPigeonServer)	G_Server.exe	Added by the Troj/Feutel-I or Troj/Feutel-AI TROJAN!
X	Gray_Pigeon_Server (GrayPigeonServer)	G_Server1.2.exe	Added by the Troj/GrayBrd-AP TROJAN! Note: This worm rojan file is found in the Windows or Winnt fol
X	Gray_Pigeon_Server2.0 (GrayPigeonServer2.0)	G_Server2.0.exe	Added by the Troj/GrayBird-O TROJAN!
L	GreenBorder Client Manager Service (clnt_ClientMan)	ClientMan.exe	Related to GreenBorder Secure your browsing activities on the internet. Note: Located in C:Program F
L	GridIron X-Factor After Effects Peer #1 (XFACTORAE1)	xlr8d.exe	Related to GridIron Nucleo For digital post production professionals using Adobe® After Effects® on
O	Groove Installer Service	GrooveInstallerService.exe	???
L	GS30s	GS30s.exe	Related to Gizmo!_Secure USB flash drive software by Crucial
X	handle (handle)	handle.exe	Added by the SDBOT.CDD WORM! Read the link rootkit type stealth involved.
X	Handling the DHCP requests (DHCP Client)	dhcpclient.exe	Most likely a W32.Toxbot_variant
X	Hardware Clock Driver (hwclock)	hwclock.exe	Added by the W32/Hwbot-A WORM!
X	Hardware Detection (Serv-U)	svchost.exe	Reported by Kaspersky Anti-Virus as Win32.Serv-U.gen Note: This is not the legitimate Windows proces
X	Hardware Monitor Service (Hardware Monitor)	mshms.exe	Added by the Troj/Wollf-A TROJAN!
L	Hardware Monitoring Program (ADMService)	admServ.exe	Related to Avocent Embedded Software and Solutions Division
L	Harmony	RSOBSERV.EXE	Related to Rockwell_Automation Inc. FactoryTalk suite
X	haxdrv	haxdrv.sys	Added by the Troj/Rootkit-U TROJAN! Read the link rootkit type stealth involved.
X	hcalway	hcalway.sys	Added by the PigSearch Adware. Read the link rootkit type stealth involved.
X	hexadecimal (HexadecimaRepresentation)	Edit.exe	Added by the W32/Sdbot-AAY WORM! Note: File name may be different. Read the link rootkit type stealt
L	Hibernation	hibserv.exe	Related to Compaq-Hewlett Packard hibernation service.
?	HICOM LAN Bridge VCapiDrv (vcapidrv)	vcapintsvc.exe	Could be related to a new version of HICOM LAN Bridge?
X	HID Output Service (HODSrv)	hpsvc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L	Horario de Windows	services.exe	Spanish Windows 2000 windows time
X	host (host)	host.exe	Added by the Troj/GrayBrd-AR TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	host Service For Windows (mshost)	mshost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Host Services (Host Services)	myhost.exe	Added by the W32/Tilebot-AT WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Host Services (Host Services)	svhosts.exe	Added by the W32/Tilebot-AC WORM! Note: This is not the legitimate Windows process svchost.exe (Noti
X	Hotplug Devices Manager	hotplug.exe	Added by the W32.Orpheus.A WORM!
L	Houdini License Client (HoudiniServer)	hserver.exe	Related to Houdini_License_Server from Side Effects Software Inc. Note: Located in C:WINDOWSsystem32
L	Houdini License Server (HoudiniLicenseServer)	sesinetd.exe	Related to Houdini_License_Server from Side Effects Software Inc. Note: Located in C:WINDOWSsystem32
L	HP Configuration Interface Service	HPConfig.exe	HPConfig Module
L	HP Hard Drive Thermal	HDThermal.exe	Related to Hewlett-Packard company.
L	HP OpenView Trace Service	OVTrace.exe	HP OpenView Internet Services
L	HP Port Resolver	hpbpro.exe	Related to Hewlett-Packard Company
L	HP RF Device Service	HpRfDev.exe	support for HP managing wireless devices
X	hp service (Hpsys)	hpsys.exe	Added by the W32/Codbot-AF WORM! Note: This service has nothing to do with HP. This worm rojan file
L	HP Status	hpb2ksrv.exe	Related to Hewlett-Packard Company
L	HP Status Print	hpbhksrv.exe	Related to Hewlett-Packard company.
L	HP Status Server	hpboid.exe	Related to Hewlett-Packard Company
L	HP WMI Interface (hpqwmi)	HPQWMI.exe	Related to Hewlett-Packard
?	hpdj	hpdj.exe	Maybe HP related? Sits in TEMP folder.
X	hpdriver	hpdriver.sys	Added by the Troj/Rootkit-AA TROJAN! Note: This trojan file is found in the System32 folder. Read th
X	HpPrinter	hpserver.exe	Added by the Troj/CmjSpy-W Trojan!
L	hpqwmiex	hpqwmiex.exe	Related to HP_ProtectTools security manager
X	HPR34K8	hpr34k8.sys	Added by the Troj/Rootkit-AA TROJAN! Read the link rootkit type stealth involved.
L	HPWirelessMgr	HPWirelessMgr.exe	Located in HP Notebook Utilities - guessing for wireless connection.
?	huapeak	huapeak.exe	Unknown origin.
L	Hummingbird Inetd (HCLInetd)	inetd32.exe	Related to Hummingbird Ltd. - http://www.hummingbird.com/
L	Hummingbird Jconfig Daemon (Jconfigd)	jconfigdnt.exe	Related to Hummingbird Ltd. - http://www.hummingbird.com/
X	HXD Service 100 (HackerDefender100)	newka.exe	Virus http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39265
X	H_Server (H_Server)	G_Server.exe	Added by the Troj/GrayBird-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	i386p	I386P.SYS	Added by the Backdoor.Rustock TROJAN! Found in the System32drivers folder. Read the link rootkit typ
L	IAA Event Monitor	iaantmon.exe	Intel related
L	Iap	Iap.exe	Related to Dell OpenManage Client Instrumentation.
L	IBM Automatic Server Restart Executable (ibmasrex)	ibmasrex.exe	Unknown owner :Location C:WINDOWSsystem32ibmasrex.exe Related to IBM servers.
	IBM CICS Transaction Gateway
L	IBM CICS Universal Client (CICSClient)	cclserv.exe	Related to IBM Corp.
L	IBM Enterprise Extender (ldlcserv)	ldlcserv.exe	Related to IBM Corp. - http://www.anti-spy.info/process/ldlcserv.exe.html
L	IBM HDD APS Logging Service (TPHDEXLGSVC)	TPHDEXLG.EXE	Related to IBM's Active_Protection_System Made by the IBM_Corporation The file associated with this
L	IBM KCU Service	TpKmpSVC.exe	related to IBM ThinkPad
L	IBM Mobility Client DHCP Control (artdhcp)	artdhcp.exe	Related to IBM_Mobility_Client DHCP Control Note: Located in C:Program FilesIBMMobility Client
L	IBM MQSeries	amqsvc.exe	IBM WebSphereÂ® MQ to exchange information across different platforms
L	IBM PM Service	ibmpmsvc.exe	Power management driver for IBM laptops
L	IBM PSA Access Driver Control	PsaSrv.exe	related to Professional Services Automation (PSA) from SharpOWL
L	IBM Rapid Restore Ultra Service	rrpcsb.exe	related to Xpoint Technologies
L	IBM Trace Facility (TrcBoot)	trcboot.exe	Related to IBM Corp.
L	IBM User Verification Manager	uvmserv.exe	Related to IBM_User_Verification_Manager (UVM) secure logon interface. Note: located in C:Program Fi
	IBM WebSphere Application Server V5 - server1
L	ICONICS License Server (GenRegistrar) (GenRegistrar)	GenRegistrarServer.exe	Related to ICONICS Inc. Visualization and Automation software products
X	ICQ Update Service (ICQUPD)	kpsf.sys	Detected as Backdoor.HackDefender. Rootkit type stealth involved.
L	ICRAplus	ICRAplus.exe	Related to ICRAplus internet filter parental control etc. Note: Located in C:Program FilesICRAplusIC
X	icrss manager 32bit (icrss)	icrss.exe	Added by the W32/Rbot-FZB WORM! Note: Located in C:WINDOWSsystem
L	icservice - ONTRACK Data International Inc.	icserv.exe	Related to SuperAdBlocker
L	iD2 Smart Card Server (id2scaps)	id2scaps.exe	iD2 is a client product that brings security user authentication and digital signatures to standard
X	ieupdater (Microsoft IE Updater)	ieupdate.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Document
X	iexplorer (iexplorer)	iexplorer.exe	Added by the Troj/Singu-U TROJAN! Note: This trojan file is found in the System32 folder
L	IgniteService.exe	IgniteService.exe	Related to Accenture_Media_Viewer
	Image Converter video recording monitor for VAIO
X	ImagePath (win32ssr)	win32ssr.exe	Added by the W32/Sdbot-AMA WORM! Read the link rootkit type stealth involved.
L	IMail FINGER Server (FINGRD32)	FINGRD32.exe	Related to Ipswitch Inc. Network Management.
L	IMail IMAP4 Server (IMAP4D32)	IMAP4D32.exe	Related to Ipswitch Inc. Network Management.
L	IMail LDAP Service (OpenLDAP-slapd)	slapd.exe	Related to Ipswitch Inc. Network Management.
L	IMail Monitor Service (IMONITOR)	IMonitor.exe	Related to Ipswitch Inc. Network Management.
L	IMail POP3 Server (POP3D32)	POP3D32.exe	Related to Ipswitch Inc. Network Management.
L	IMail PWD Server (PSERVE)	PSERVE.exe	Related to Ipswitch Inc. Network Management.
L	IMail Queue Manager Service (QUEUEMGR)	queuemgr.exe	Related to Ipswitch Inc. Network Management.
L	IMail SMTP Server (SMTPD32)	smtpd32.exe	Related to Ipswitch Inc. Network Management.
L	IMail Sys Logger Service (SYSLOGD)	SYSLOGD.exe	Related to Ipswitch Inc. Network Management.
L	IMail Web Calendar Service (IWEBCAL)	IWebCal.exe	Related to Ipswitch Inc. Network Management.
L	IMail Web Service (IWEBMSG)	iwebmsg.exe	Related to Ipswitch Inc. Network Management.
L	IMail WHOIS Server (WHOISD32)	WHOISD32.exe	Related to Ipswitch Inc. Network Management.
L	IMAPI CD-Burning COM Service	ImapiRox.exe	IMAPI CD-Burning COM Service
L	IMountSRV	IMountSRV.exe	Related to Paragon hard_disk_manager
L	Inbound Distributor Service	inbounddistributorservice.exe	Related to Inbound_Logistics
L	InCD File System	InCDsrv.exe	InCD Packet Writer related.
L	InCD Helper	InCDsrv.exe	InCD Packet Writer service from Nero Burning ROM (Ahead Software)
L	Independent Management Architecture (IMAService)	ImaSrv.exe	Related to Citrix MetaFrame
X	Index Service (b3)	dllhost32.exe	Added by the WORM_AGOBOT.CH WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Indexing Helps (Indexingbox)	svchest.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Indexing The System Files (Indexing Service)	winupdatez.exe	winupdatez.exe
L	Infrastructure)	cm.exe	Related to Trend Micro Inc.
L	Inicio de sesiÃ³n red	lsass.exe	Spanish Windows 2000 net logon
X	InstallDriver Service (ISDS)	csscv.exe	Added by the W32/Sdbot-CPL WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
L	InstallDriver Table Manager	IDriverT.exe	Related to Macrovision Corporation.
L	InstallShield Licensing Service	InstallShield Licensing Service.exe	Related to InstallShield_Licensing_Service from Macrovision. Create high-quality software installati
L	InstantÃ¡as de volumen	vssvc.exe	Volume Shadow Copy Service found in Windows XP and 2003.
L	Instrumental de administraciÃ³e Windows	WinMgmt.exe	Spanish Windows 2000 windows management instrumentation
L	Intel Alert Handler	hndlrsvc.exe	Related to Intel Corp.
L	Intel Alert Originator	iao.exe	Related to Intel Corp.
L	Intel CI Manager	CiMgrLdr.exe	Related to Intel Corp.
L	Intel Client Instrumentation for DMI (ni_nic)	ni_nic.exe	Intel Client Instrumentation for DMI
L	Intel File Transfer	xfr.exe	Related to Intel Corp.
L	Intel IIDS	IIDS.exe	Related to Intel Corp.
L	Intel Local Scheduler Service	LOCALSCH.EXE	Part of LANDesk Management Suite.
L	Intel NCS NetService (NetSvc)	NetSvc.exe	Intel NCS NetService
L	Intel PDS	pds.exe	Related to Intel Corp.
L	Intel QIP Client Service	QIPCLNT.EXE	Part of LANDesk Management Suite.
L	Intel SSM	ssm.exe	Related to Intel Corp.
L	Intel Targeted Multicast	tmcsvc.exe	Part of LANDesk Management Suite.
L	Intel(R) NMS	NMSSvc.exe	NIC Management Service - diagnostics program for Intel Pro family network cards
L	IntelÂ® Active Monitor (imonNT)	imonnt.exe	http://www.liutilities.com/products/wintaskspro/processlibrary/imonnt/
L	IntelÂ® NMS	NMSSvc.exe	Related to Intel Corp.
L	Intel® Desktop Utilities Service (iHCService)	IDUServ.exe	Related to Intel® Desktop_Utilities service from OSA Technologies. Inc. Note: Located in C:Program F
L	Intel® Quick Resume Technology Drivers (ELService)	ELService.exe	Related to Intel® _Quick_Resume_Technology Drivers. Note: Located in C:Program FilesIntelIntelDHInte
L	Interbase Guardian	ibguard.exe	Interbase database server related
L	InterBase InterClient Server	interserver.exe	Interbase database server related
L	InterBase Server	ibserver.exe	Interbase database server
L	Internet Connection Monitor Engine	ICMNT.EXE	User reports that it's for a Home Router from Deerfield Communications www.deerfield.com/
X	Internet Explorer (Internet Explorer)	Internet.exe	Added by the Troj/Feutel-AA TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
L	Internet Proxy	InternetProxy.exe	Related to ICRAplus internet filter parental control etc. Note: Located in C:Program FilesICRAplusIC
X	Internet Service Manager (INETSVC)	INETSVC.EXE	Added by the Backdoor.Win32.SdBot.xd detected by Kaspersky More: Here Note: This worm rojan is locat
X	Internet TCP Protocol (Win_ad)	TCPServer.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windowsw
X	internew (internew)	system.exe	Added by the Troj/Cmjspy-BN TROJAN!
L	InterPlot IMF Printer Driver Service	pidrpcs.exe	InterPlot device drivers - See Here InterPlot/Overview.htm
X	Intespention (Win32)	IEXPLORE.exe	Added by the W32/Forbot-FL WORM!
X	Intranet Service (IntranetService)	intranet.exe	Owner:Brought to you by the Bandwidth Bandits. Location: C:WINDOWSSYSTEM32intranet.exe
L	InVircible Scheduler (IVScheduler)	IVSCHED.EXE	Security software package to protect personal computers and PC networks. Owner: NetZ Computing Ltd.
L	iolo System Guard	IoloSGCtrl.exe	Related to System_Mechanic by Iolo
L	Iomega Active Disk	ADService.exe	Related to Iomega Corporation
L	Iomega Activity Disk2	ActivityDisk.exe	ActivityDisk Iomega Corporation SmartSoft ActivityDisk
L	Iomega App Services	AppServices.exe	Iomega related
L	IomegaAccess	IOMEGAACCESS.EXE	related to Iomega Backup
L	ION Java Daemon 2.0	ion_srv.exe	Related to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL
L	ION Java Daemon 6.1	ion_srv.exe	Related to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL
X	Ip4Sec (Ip4Sec)	ip.sys	Added by the Satiloler.E TROJAN! Read the link rootkit type stealth involved.
L	iPassConnectEngine	iPassConnectEngine.exe	Related to iPassConnect Universal Client. iPass addresses the needs of both users and IT by making s
L	iPod Service	iPodService.exe	Related to Apple iPod.
L	iPodSrv	iPodSrv.exe	Related to iPod Apple software. Note: located in C:Program FilesiPodin in Windows 2000/XP/2003.
X	IPRIP (IPRIP)	svchost.exe -k netsvcs	Added by the Backdoor.Ripgof TROJAN! Read the link rootkit type stealth involved.
L	IPS Core Service (IPSSVC)	IPSSVC.EXE	A VPN client service found in Lenovo Thinkpad. Note: located in C:WINDOWSsystem32
L	Ipswitch WS_FTP Queue (ftpqueue)	ftpsched.exe	Related to Part of WS_FTP Pro from Ipswitch. Note: Located in C:Program FilesWS_FTP Pro
X	IPtable	ipconfig32.exe	Added by the W32/Tilebot-AP WORM! Note: This worm file is found in the Windows or Winnt folder.
X	IPv6 Helper Driver	csass.exe	Added by the AGOBOT.TC WORM!
L	IrBridge User-Level Interface (USRBRIDG)	usrbridg.exe	Related to the Extended Systems infrared port made by Extended_Systems Inc. This file should be loca
L	ISAM SMT Service (ISAMsmt)	isamsmt.exe	Related to IBM Global Services - http://www.anti-spy.info/process/isamsmt.exe.html
L	iSeries Access for Windows Remote Command (Cwbrxd)	CWBRXD.EXE	Related to IBM Corporation. http://www.ibm.com/
X	ISEXEng	angelex.exe	Bargain Buddy variant
L	ISSI EZUpdate (ISSIMon)	issimsvc.exe	Related to Ibm_Global_Services Used internally by IBM for automatic updating of software and microso
L	ISSvc	ISSVC.exe	Related to Norton Internet Security
X	Italian Grand Prix	grand.exe	Added by the W32/Spybot-MK WORM! Note: C:%WINDIR%System32dllcache (XP/WinNT/2K)
X	iTunes Music Service (iTunesMusic)	iTunesMusic.exe	Added by W32.Spybot.NLX WORM! Rootkit Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32
L	Ixia Endpoint (IxiaEndpoint)	endpoint.exe	Added by Ixia_Endpoint Note: Located in C:PROGRA~1NetIQEndpoint
L	Jaguar	jagsrv.exe	Related to Sybase_EAServer Note: Located in C:SybaseEAServerin
X	Java development Services	windows.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Java development Services	logins32.exe	Added by the W32/Tilebot-HC WORM! Note: This worm rojan is located in C:%WINDIR% folder. Steal infor
X	Java inetice	realetin.exe	Added by the Troj/Bckdr-PQM TROJAN! Note: This worm rojan is located in C:Program FilesCommon FilesM
X	Java Sun Scheduler (JUSCHED)	jusched.exe	Added by the W32/Sdbot-CQC WORM! Note: This worm rojan is located in C:%WINDIR% folder. More here
X	JavaPlatform64	JavaPlatform	Added by the W32/Kassbot-M WORM! Note: Located in C:%WINDIR%
X	JiurlPortHide (JiurlPortHide)	JiurlPortHide.sys	Added by the Troj/Progent-A TROJAN!
L	jsdaemon	jsdaemon.exe	Related to fax service from JetFax Inc.
L	Juniper Network Connect Service (dsNcService)	dsNcService.exe	Related to Juniper Networks Inc. Networking Platform.
X	K4NV	k4nv.exe	Added by a variant of the Trojan.K4NV.Process WORM! Note: located in C:WINDOWSk4nv.exe
L	K9 Time Synchronization	k9nt.exe	Related to HC Mingham-Smith Limited http://www.kaska.demon.co.uk/history.htm
L	Kaseya Agent	AgentMon.exe	Related to Kaseya Inc.
L	Kaspersky Anti-Virus Service (KLBLMain)	kavmm.exe	Related to Kaspersky virus removal program.
L	KAV Monitor Service	avpm.exe	Kaspersky AntiVirus
L	kavsvc	kavsvc.exe	Kaspersky AntiVirus
X	kbdrv64	KBDRV64.SYS	Added by the TROJ_ROOTKIT.K TROJAN! Read the link rootkit type stealth involved.
X	kdc	svchost.exe -k kdc	Added by the Fuwudoor TROJAN!
L	Kerberos Key Transaction Coordinator (kerbkey)	kerb.exe	Verify one computer's identity to another and to set up encryption keys for a secure connection betw
L	Kerio MailServer (KerioMailServer)	mailserver.exe	Related to Kerio_MailServer Note: Located in C:Program FilesKerioMailServer
L	Kerio Personal Firewall	persfw.exe	Kerio Firewall
L	Kerio Personal Firewall 4 (KPF4)	kpf4ss.exe	Related to Kerio Personal FireWall.
X	Kernell32	termsv.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:WindowsSyste
X	Keyboard Service System Files (Keyboard Service)	navupdate64.exe	Added by a variant of the WIN32.RBOT WORM! Note: This worm file is found in the System32 folder.
L	Kingsoft Antivirus KWatch Service (KWatchSvc)	KWatch.EXE	Related to Kingsoft_Antivirus virus protection and content filtering. Note: located in C:KAV**** [*
L	Kingsoft Personal Firewall Service (KPfwSvc)	KPfwSvc.EXE	Related to Kingsoft_Antivirus virus protection and content filtering. Note: located in C:KAV**** [*
L	Knob Service (KNOBSERV)	KnobService.exe	File belongs to Acer_Inc
L	Kodak Camera Connection Software	KodakCCS.exe	Kodak Software to connect digital cameras
?	KService	KService.exe	Added by KService It's part of a peer to peer package people agree to when signing up with 'Sky By B
L	LANDesk Remote Control Service (ISSUSER)	issuser.exe	Related to LANDesk_Remote_Control Service. Note: Located in C:Program FilesLANDeskLDClient
L	LANDesk® Management Agent	residentagent.exe	Part of LANDesk Management Suite.
L	LanSafe Power Monitor (LanSafe PM)	PowerMonitor.exe	Related to LanSafe_Power_Monitor from Powerware. Uninterruptible Power Supply Note: Located in C:Pro
L	LanSafe Process Manager	xyntservice.exe	Related to LanSafe_Process_Manager from Powerware. Uninterruptible Power Supply Note: Located in C:P
L	Lavasoft Personal Firewall Service (LavasoftFirewall)	lpfw.exe	Related to Lavasoft_Personal_Firewall service. Note: Located in C:Program FilesLavasoftPersonal Fire
?	LckFldService	LckFldService.exe	? Could be related Proland Software. ? - http://www.pspl.com/
L	LEC TranslateDotNet Server	LogoMedia TranslateDotNet Server.exe	Translates email web pages documents and instant messages. Made by the Language Engineering Company
L	Leica Microsystems Data Container V1	LMSDataContainerServer.exe	Related to Leica_Microsystems Now Vistec_Semiconductor_Systems advanced technologies in optics.
L	Lexar JD31 (LxrJD31s)	LxrJD31s.exe	Lexar JumpDrive driver. From Lexar_Media_Inc
L	Lexar Secure II (LxrSII1s)	LxrSII1s.exe	Related to Lexar_Media Inc. removable flash memory cards USB flash drives card readers etc...
L	Lexar SG20	LxrSG20s.exe	Related to Lexar_Media Inc. Lexar offers a wide range of storage products. Note: Located in C:WINDOW
L	LexBce Server	LEXBCES.EXE	Lexmark Printer Service
L	LibUsb-Win32 - Daemon Version 0.1.8.0	libusbd-nt.exe	LibUsb open-source USB driver
L	LicCtrl Service	runservice.exe	Part of the eLicense Copy Protection scheme employed by some software and games. (Castlecops Startup
L	License Agent	cla.exe	License Agent for the HiPath 1220 digital PBX system from Siemens. For more information Click_Here F
L	License Management (CLMTomcatStarterSvc)	tomcat.exe	Related to Apache_Tomcat Owner: Alexandria Software Consulting.
L	License Management Service ESD	Licence Manager ESD.exe	Related to the Licence_Manager_ESD.exe is the element5 License Management Service used by some softw
	LightScribeService Direct Disc Labeling Service
L	LiveShare P2P Server	RoxLiveShare.exe	Related to Roxio_Inc
L	LiveShare P2P Server 9 (RoxLiveShare9)	RoxLiveShare9.exe	Related to Roxio_Inc
L	LiveUpdate	LUCOMS~1.EXE	Related to Norton Internet securty suite and provides up to date antivirus data for your Norton Anti
X	LmHosts	svchost.exe -k LmHosts	Added by the Fuwudoor TROJAN!
X	LMMng (memlow)	memlow.sys	Added by the Troj/Haxdoor-AA TROJAN!
X	Loader)	SVCHOST.EXE	Added by the RBOT.BZF WORM! Note: This is not the legitimate Windows process SVCHOST.EXE (Which is a
X	Loading Outpost Connections	cmdtel.exe	Win32.Bagz.i email virus
X	Local Security Authority Subsystem Service (lsass)	lsass.exe	Added by the W32/Tilebot-AK or W32.Spybot.ABDO WORM! Note: This is not the legitimate Windows proces
X	Local Security Authority System Service (lsass)	lsass.exe	Added by the W32/Rbot-AJA WORM! Note: This is not the legitimate Windows process lsass.exe (Which is
L	Logical Disk Manager Administrative Service	dmadmin.exe	Veritas logical disk manager
L	Logitech Process Monitor (LVPrcSrv)	LVPrcSrv.exe	Related to Logitech QuickCam Provides additional configuration options for these devices.
L	LogMeIn	LogMeIn.exe	Related to LogMeIn LogMeIn Rescue is used by IT helpdesks to provide instant remote support to custo
X	LOGON suport service	IES4SERVICE.SYS	Added by the Goldun.G TROJAN! Note: This trojan file is found in the System32 folder.
X	Logon Terminal Manager	spoolsc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L	LogonSvc (LogonSvcID)	logonsvc.exe	Related to E-Pop web conferencing Note: Located in C:Program FilesE-Pop
L	Lookout Citadel Server (LkCitadelServer)	lkcitdl.exe	Related to Lookout_Citadel_Server From National Instruments Inc. Note: Located in C:WINDOWSsystem32
L	Lotus Notes Single Logon	nslsvice.exe	IBM Lotus Notes Single Logon Service - http://www.anti-spy.info/process/nslsvice.exe.html
X	Lpdriver (Lpdriver)	lpdriver.sys	Added by the W32/Tilebot-H or W32/Sdbot-ADG WORM! Note: This worm file is found in the System32 fold
X	LSA Shel (Export Version)	lsass.exe	Added by the W32/Tilebot-HQ WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	lsass (lsass)	lsass.exe	Added by the W32/Rbot-AIC WORM! Note: This is not the legitimate Windows process. (Which is always f
X	lsass (Workstations)	autoexec.exe	Added by the W32/Sdbot-AFN WORM! Note: This worm file is found in the System32 folder.
X	LsassFTP daemon (LsassFTPD)	LsassFtpd.exe	Added by the SDBOT.CDW WORM! Read the link rootkit type stealth involved.
X	LsassFTPzz daemon (LsassFTPDzz)	LsassFtpdz.exe	Added by the W32/Rbot-ARL WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
L	LWWLicenseService	LWWLicenseService.exe	Related to Wolters_Kluwer The Professional's First Choice for information tools and solutions that h
L	lxbs_device	lxbscoms.exe	Related to LXB_Device LXB provides secure backup.
L	lxbt_device	lxbtcoms.exe	Lexmark International services. http://www.lexmark.com/
L	lxbu_device	lxbucoms.exe	Related to Lexmark Printers. Provides additional configuration options for these devices
L	lxbx_device	lxbxcoms.exe	Related to Lexmark International Inc Printer service. Note: located in C:WINDOWSSystem32
L	lxby_device	lxbycoms.exe	Related to Lexmark Printer service. Note: located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (
L	lxcc_device	lxcccoms.exe	Related to Lexmark International inc. Communication module for Lexmark products. Disabling will caus
L	lxcd_device	lxcdcoms.exe	Related to Lexmar Lexmark International Inc. Printers Note: Located in C:WINDOWSSystem32
L	lxce_device	lxcecoms.exe	Related to Lexmark Inc. printers
L	lxcf_device	lxcfcoms.exe	Lexmark printer related
L	lxcg_device	lxcgcoms.exe	Related to Lexmark printer
L	Lync USB Auditor Service (LyncUSBServ)	lyncusb.exe	Related to Lync_USB A toolkit that delivers an integrated removable media device discovery and audit
L	M-Audio Ozone Installer (OzoneInstallerService)	ozinst.exe	Related to M-Audio_Ozone products. Note: Located in C:Program FilesM-AudioOzoneInstall
L	M-BUS/M-NET Administration (MCONTROL)	mcontrol.exe	Related to Siemens Energy & Automation Platform. Note: located in C:Program FilesProcessSuiteMBUSDRV
L	M1 Licensing Helper (iLicenseSvc)	iLicenseSvc.exe	Related to Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity an
X	mac128	mac128.sys	Added by the Troj/Klutz-A Trojan!
L	MacFormatService	FORMATM.EXE	Related to Conversions Plus from DataViz
L	Machine Debug Manager (MDM)	mdm.exe	Visual studio debuger if you install vs2003 mdm.exe is found in c:/program files/common files/micros
L	Macromedia Licensing Service	Macromedia Licensing.exe	Related to Macromedia products: Flash Dreamweaver etc.
L	Mailgate Mail/Proxy Service	mgatesvc.exe	Mailgate Internet Connectivity Server
X	Manage)	dfrgfat16.exe	Added by the W32/Codbot-N WORM!
X	Manageer Network Connections	telcmd.exe	BAD - Look how manager is spelled.
X	Manageer Network Connections (Kern32)	telcmd.exe	A new service added by the Troj/Agent-CP TROJAN with a display name of Manageer Network Connections.
L	Management Repository)	jrun.exe	Related to MacroMedia_ColdFusion products. Made by MacroMediaInc.
X	Manager (Windows XP Manager)	msnmgr.exe	Added by the W32/Kassbot-L Read the link rootkit type stealth involved.
	Managing FAT and NTFS partitions (Defragmentation
L	Mangomind Drive Repair (MindRepair)	dirtcon.exe	Related to Mangomind access your business critical files from anywhere at any time from any computer
L	mapi Helper	ImapiHelper.exe	ISO recorder
L	MarkVision Server (MvServer)	lexmvservice.exe	Related to MarkVison_Server From Lexmar. Note: Located in C:WINDOWSSYSTEM32
L	MarkVision Web Server (MvWebServer)	lexwebservice.exe	Related to MarkVison_Server From Lexmar. Note: Located in C:WINDOWSSYSTEM32
X	Mass Effect™ Xbox 360	mfxbox.exe	Added by the W32/Spybot-MS WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/
L	MATLAB Server (matlabserver)	matlabserver.exe	Related to The MathWorks Inc.
L	MaxBackServiceInt	MaxBackServiceInt.exe	Related to Maxtor_backup service. Note: Located in C:ProgramMaxtorMaxtor Backup
L	MaxSyncService (NTService1)	SyncServices.exe	Related to Maxtor_OneTouch service. Note: Located in C:ProgramMaxtorOneTouchUtils
L	Maya 6 PLE Documentation Server	wrapper.exe	Related to Alias Systems Corp.
L	MC/Empower i.collect	icserv.exe	an internet cleaning utility issued by various ISP's for their customers use
L	McAfee Agent	myAgtSvc.exe	Related to Network Associates Inc.
	McAfee AntiSpyware Real-Time Scanner
L	McAfee AntiSpyware Service	massrv.exe	Related to McAfee AntiSpyware service.
L	McAfee Desktop Firewall Service (FireSvc)	FireSvc.exe	Related to McAfee Desktop Firewall Service. Note: located in C:Program FilesNetwork AssociatesMcAfee
L	McAfee E-mail Proxy (Emproxy)	emproxy.exe	Related to McAfee_Email_Proxy c:program filescommon filesmcafeeEmProxy
L	McAfee Firewall	CPD.EXE	Related to Network Associates
L	McAfee Framework Service (McAfeeFramework)	FrameworkService.exe	McAfee/CA related
L	McAfee HackerWatch Service	HWAPI.exe	Related to McAfee_HackerWach Service installed by the McAfee Internet Security suite and whose role
L	McAfee Log Manager (McLogManagerService)	mclogsrv.exe	Related to McAfee_SecurityCenter Log Manager. Note: Located in C:Program FilesMcAfeeMSC
L	McAfee Network Agent (McNASvc)	mcnasvc.exe	Related to McAfee_Network_Agent Note: Located in c:program filescommon filesmcafeemna
L	McAfee Personal Firewall Service (MpfService)	MPFSrv.exe	Related to McAfee_Personal_Firewall Service. Note: Located in C:Program FilesMcAfeeMPF
L	McAfee Privacy Service (GuardDogEXE)	GUARDDOG.EXE	Belongs to the software McAfee Internet Security or McAfee Privacy Service. For more information Cli
L	McAfee Privacy Service (MPS9)	mps.exe	Related to McAfee_Privacy_Service Includes many features for families online including Internet cont
L	McAfee Protection Manager (mcpromgr)	mcpromgr.exe	Related to McAfee_Integrated_Security Platform. Note: Located in C:Program FilesMcAfeeMSC
L	McAfee Proxy Service (McProxy)	mcproxy.exe	Related to McAfee Proxy Service Note: Located in c:Program FilesCOMMON~1mcafeemcproxy
L	McAfee Real-time Scanner (McShield)	mcshield.exe	Related to McAfee_Virus_Shield Note: Located in C:Program FilesMcAfeeVIRUSSCAN
L	McAfee Redirector Service (McRedirector)	redirsvc.exe	Related to McAfee_Redirector Service Module. Note: Located in c:program filescommon filesmcafee edir
L	McAfee Scanner (McODS)	mcods.exe	Related to McAfee_VirusScan On Demand Scan. Note: Located in C:Program FilesMcAfeeVIRUSSCAN
L	McAfee SecurityCenter Update Manager	mcupdmgr.exe	McAfee Antivirus updater
L	McAfee SecurityCenter Update Manager (mcupdmgr.exe)	mcupdmgr.exe	McAfee Update manager - http://castlecops.com/s5681-MCUPDMGR_EXE.html
L	McAfee SiteAdvisor Service	McSvHost.exe	Mcafee Inc - commonly located at C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
L	McAfee SpamKiller Server (MskService)	MSKSrvr.exe	Part of McAfee Spamkiller. http://computercops.biz/s6154-MSKSrvr_exe.html
L	McAfee SpamKiller Service (MSK80Service)	MskSrver.exe	Related to McAfee SpamKiller Note: Located in C:Program FilesMcAfeeMSK
L	McAfee SystemGuards (McSysmon)	mcsysmon.exe	Related to McAfee_SystemGuards Service. Note: Located in C:Program FilesMcAfeeVIRUSSCAN
L	McAfee Task Scheduler (McTskshd.exe)	mctskshd.exe	Related to McAfee_Task_Scheduler Note: Located in C:Program FilesMcAfeeMSC
L	McAfee Update Manager (mcmispupdmgr)	mcupdmgr.exe	Related to McAfee_SecurityCenter Update Manager. Note: Located in C:Program FilesMcAfeeMSC
L	McAfee User Manager (mcusrmgr)	mcusrmgr.exe	Related to McAfee_SecurityCenter MISP User Manager. Note: Located in C:Program FilesMcAfeeMSC
L	McAfee Wireless Security Service (MwlSvc)	MwlSvc.exe	Related to McAfee_Wireless_Security_Service Note: located in C:PROGRA~1McAfeeMWL
L	McAfee WSC Integration (McDetect.exe)	mcdetect.exe	Related to McAfee WSC Integration.
L	McAfee.com McShield	mcshield.exe	Related to McAfee
L	McAfee.com Personal Firewall Service	MPFSERVICE.exe	Related to McAfee.com Personal Firewall
L	McAfee.com VirusScan Online Realtime Engine	mcvsrte.exe	McAfee AntiVirus
X	MCFservice (mcfdrv)	mcfdrv.sys	Added by the TROJ_ROOTKIT.R TROJAN! Read the link rootkit type stealth involved.
X	mchInjDrv	mc2A.tmp	Added by the Dialer.ICcontrol DIALER! Note: This malware can make the modem dials long-distance phon
X	mcmmng32 (Microsoft Control Manager)	mcmmng32.exe	Added by the W32/Tilebot-HK WORM! Note: This worm rojan is located in C:%WINDIR% folder. disabling t
L	McShield	Mcshield.exe	this process is associated with McAfee's Internet Security suite. More specifically it is essential
L	MD Simple Burner Service (NetMDSB)	NetMDSB.exe	Sony Corp. MiniDisk Simple Burner
L	MDaemon - Alt-N Technologies Ltd.	MDAEMON.EXE	Related to MDaemona Windows-based email server.
X	MdeRy	rpe.sys	Added by the Backdoor.Ryejet TROJAN! Read the link rootkit type stealth involved.
X	MEAOI Service (MEAOI)	_meaoi.exe	Added by the W32/Tilebot-AM WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	Mediabee (Mediabee Desktop Server)	MbXmlRpcServer.exe	Related to Mediabee Group Planner & Dashboard
L	MediaMax XL Service (MediaMaxXLService)	MediaMaxXLService.exe	Related to MediaMax_XL from Streamload Inc. An application that automatically backs up your files an
X	Medie Sariel Number Services	moviemk.exe	Added by the Troj/DownLd-AAP TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me)
X	MemDRV (vdnt32)	vdnt32.sys	Added by the Troj/Haxdoor-AA TROJAN!
L	Memeo (BMUService)	MemeoService.exe	Related to Memeo backup service. Note: Located in C:Program FilesTanagraMemeo
	mental ray 3.5 Satellite (32-bit)
L	Merak Mail Server Control (MerakControl)	control.exe	Related to Merak_Mail_Server Software. A high performance mail server software suite for Windows or
L	Merak Mail Server POP3/IMAP (MerakPOP3)	pop3.exe	Related to Merak_Mail_Server Software. A high performance mail server software suite for Windows or
L	Merak Mail Server SMTP (MerakSMTP)	smtp.exe	Related to Merak_Mail_Server Software. A high performance mail server software suite for Windows or
L	MERANT XDB Server for NX 3.1	xsrvnx.exe	Related to SERENA Software Inc. - http://www.serena.com/
X	Messenger	svchost.exe -k Messenger	Added by the Fuwudoor TROJAN!
X	Messenger	kernel32.exe	Added by the Troj/Kyth-A TROJAN! Note: Replaces any existing services named Messenger.
X	Messenger	sys.exe	Added by the Troj/PcClient-H TROJAN! Note: This worm rojan file is found in the System32 folder.
X	Messenger	KB08953265.exe	Added by the Esteems.F TROJAN! Note: Drops multiple files.
X	Messenger (Messenger)	(TROJAN FILE NAME)	Added by the Trojan.Neasemal TROJAN! Note: This trojan file will be found in the System32 folder and
X	Messenger (Messenger)	hacker.exe	Added by the Troj/PcClient-M TROJAN! Note: This trojan file is found in the System32 and Temp folder
L	MetaFrame COM Server (MFCom)	mfcom.exe	Related to Citrix MetaFrame
L	MGABGEXE	mgabg.exe	Matrox BIOS Guard. What does it do and is it required?
L	MICROS Backup Server	resbsm.exe	Related to MICROS Systems 3700d is a Sybase SQL Anywhere/Adaptive Server with a relational databa
X	Microsoft Agent	lpohost.exe	Added by the W32/Sdbot-CWQ WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/
X	Microsoft Agent	ffchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: Located in C:WindowsSystemdllcache (Win9
X	Microsoft Agent	snchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Microsoft Agent	qxchost.exe	Added by the W32/Sdbot-CWP WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/
X	Microsoft Agent	rschost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
L	Microsoft AntiSpyware (Beta 1)	gcasDtServ.exe	Microsoft AntiSpyware Data Service
L	Microsoft AntiSpyware (Beta 1)	gcasServ.exe	Microsoft AntiSpyware Service
L	Microsoft AntiSpyware (Beta 1)	GIANTAntiSpywareMain.exe	Microsoft AntiSpyware Main
X	Microsoft ASPI Manager (aspi113210)	aspi113210.exe	Added by the Troj/Danmec-T TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:
X	Microsoft authenticate service (MsaSvc)	msasvc.exe	Added by Worm_Ircbot_Gen Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WINDIR%Sy
X	Microsoft Bluetooth Support (BthSupp)	bthsupp.exe	Added by the W32/Btbot-A WORM!
X	Microsoft Client Agent Service (Microsoft Client Agent)	msclient.exe	Added by the W32/Tilebot-BP WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Microsoft Config (mscfg)	dczznet.exe	Added by the W32/Rbot-ARK WORM! Note: This is not the legitimate Windows process Msconfig.exe (Which
X	Microsoft Corporation	systemi32.exe	Variant of the W32.SPYBOT WORM
X	Microsoft Corporation (Windows Wordpad)	wordpad.exe	Added by the W32/Tilebot-GL WORM! Note: This worm rojan is located in C:%WINDIR% This is not Microso
L	Microsoft CTF Loader	ctfmon.exe	CTF Loader
X	Microsoft DHCPA Service	mshcp.exe	Added by the W32/Rbot-FNA WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/W
L	Microsoft Digital Identity Service (InfoCard Service)	infocard.exe	Related to Microsoft_NET_Framework .NET Framework is a development and execution environment that al
X	Microsoft Distributed Transaction (MSDT)	msdt.exe	Added by the W32/Tilebot-BQ WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Microsoft DLL System	smsc.exe	Added by the W32/Tilebot-FY WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Microsoft HDA Protocol (svhda)	svhda.exe	aDEED BY THE Backdoor.Win32.IRCBot.rr as detected by Kaspersky TROJAN! Note: This worm rojan is loca
X	Microsoft IIS helper	msiishlp.exe	Added by the Backdoor.Isen.Rootkit TROJAN! Read the link rootkit type stealth involved.
X	Microsoft information dll service (msidll)	msidll.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
	Microsoft Internet Information Services kernel mode
X	Microsoft Language Service (Windows Language Service)	alg.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Microsoft Logon Service	mslogon.exe	Added by the W32.Woredbot.C TROJAN! Note: This worm rojan is located in C:%WINDIR%System32dllcache (
X	Microsoft Logon User Interface Skining (LogonUInterf)	logonui.exe	Detected by Ewido as Backdoor.SdBot.aad. This worm file is found in the Windows or Winnt folder.
X	Microsoft Main Window Service	mainwin32.exe	Added by the W32/Spybot-MR WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/
X	MicroSoft Media Tools	MSMEDIA.EXE	Added by the SDBOT.CUH WORM! Note: This worm file is found in the System32 folder. (NT/2000/XP) Read
X	MicroSoft Media Tools (MicroSoft Media Tools)	MSmedia.exe	Added by the W32/Tilebot-BC WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Microsoft MSI Service	msi.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Microsoft Net API (NETAPI)	msapi.exe	Added by the W32/Tilebot-HJ WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Microsoft NetWork FireWall Services	NetServices.exe	http://www.sophos.com/virusinfo/analyses/w32lovgateaa.html
X	Microsoft NetWork FireWall Services	Net_Services.exe	http://www.sophos.com/virusinfo/analyses/w32lovgateaa.html
X	Microsoft Network RPC	msnetrpc.exe	Related to the Troj/Isen-B
X	Microsoft Networks DN (msndn)	msndn.exe	Added by the Backdoor.SdBot.AQZ A.K.A. Ircbot_Gen WORM! Allows a remote intruder to gain access and
X	Microsoft New Game 2 (svehost32)	svehost32.exe	Added by the W32/Tilebot-I TROJAN! Read the link rootkit type stealth involved.
X	Microsoft Null Development Monitor (msdevnull)	msdevnull.exe	Added by the W32/Rbot-AGE Worm! Read the link rootkit type stealth involved.
X	Microsoft Passport Network CyberShots	cybershots.exe	Added by the W32/Spybot-ND WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/
X	Microsoft Path Finder Service (MSpath)	mspath.exe	Added by the W32/Sdbot-AEO WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Microsoft Path Finder Service (mspathfinder)	mspathfinder	Added by the W32/Tilebot-AH WORM! Rootkit Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%Syst
X	Microsoft Performance WMI Adapter AddOn (WMIPervAddOn)	wmiapsv.exe	Added by the Backdoor.Win32.SdBot.aad TROJAN! Reported by Kaspersky More Note: This worm rojan is lo
X	Microsoft Print Spooler (WINDRIVER)	scvhost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Microsoft Registry Viewer (Dumpreg)	DUMPREG.EXE	Added by the SDBOT.BXI WORM! Read the link rootkit type stealth involved.
X	Microsoft SCC Host Protocol (POOLSVR)	poolsv.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	Microsoft SCC Host Protocol (TaskMGM)	taskmg.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	Microsoft sdk core (sdk)	lsass.exe	Added by the Troj/IRCBot-PF TROJAN! Note: Located in C:%WINDIR%
X	Microsoft Security Login Service	mssecure32.exe	Added by the W32/Vanebot-R WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/
X	Microsoft Service Manager (winmdgr)	winsvcmgr.exe	Added by the W32/Rbot-AAD WORM! Read the link rootkit type stealth involved.
X	Microsoft SQL Server Debug (sql)	sqldebug.exe	Added by the W32/Tilebot-FF WORM! Note: Located in C:%WINDIR%
X	Microsoft SSL (ssl)	ssl.exe	Added by the W32.Esbot.C WORM! Note: This WormTrojan file is found in the System32 folder and has no
X	Microsoft Star Window Service	starwin32.exe	Added by the W32/Rbot-FNT WORM! Note: This worm rojan is located in C:%WINDIR%System32 dllcache (XP/
X	Microsoft Star Window Service	svcshoter.exe	Added by the WORM_SDBOT.ANK WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x
X	Microsoft Star Window Service	starwksvc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windowsd
X	Microsoft Startup Manager. (Microsoft Startup Manager)	msput.exe	Added by the W32/Sdbot-BAY WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Microsoft Svc Services Dispatcher	svcsrv.ldr	unknown malware
X	Microsoft Terminal Service	msterminal.exe	Added by the W32/Sdbot-CPZ WORM! Note: This worm rojan is located in C:%WINDIR%System32DllCache (XP/
X	Microsoft Translation Service (MTServ)	mtserv.exe	Added by the W32/Rbot-GAL WORM! Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP/W
X	Microsoft Updata ver2005 (Microsoft Updata ver2005)	tw725.exe	Added by the Troj/Feutel-P TROJAN!
X	Microsoft update (msnupdate)	windupdate.exe	Added by the SDBOT.CGV WORM! Read the link rootkit type stealth involved.
X	Microsoft update Service	msiupdate32.exe	Added by the W32/Vanebot-S WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/
	Microsoft Virtual Private Network (MS Virtual Private
X	Microsoft VPS Service	msvps.exe	Added by the W32/Rbot-FNI WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/W
X	Microsoft Webserver (Microsoft Webserver)	Microsoft Webserver.exe	Added by the Troj/Hupigon-FU TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	Microsoft Windows (Microsoft Windows)	system.exe	Added by the W32/Rbot-AMQ WORM! Note: This worm file is found in the Windows or Winnt folder. Read t
X	Microsoft Windows Avantage Service (Windows Avantage)	avantage32.exe	Added by the W32/Tilebot-HE WORM! Note: This worm rojan is located in C:%WINDIR% folder. disables th
X	Microsoft Windows BDA Service	svhba.exe	Added by the W32/Vanebot-P WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP/
X	Microsoft Windows DMR Service (Windows DMR Service)	dmrproc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Microsoft windows FTPd	updtftpini.exe	Added by the W32/Rbot-FUS WORM! Note: This worm rojan is located in C:Windowsdllcache (Win9x/Me) C:%
X	Microsoft Windows HDA Service	svhda.exe	Added by the W32/IRCBot-SL WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/
X	Microsoft Windows HelpFile (Windows Helpfile)	services.exe	Added by the W32/Tilebot-FQ WORM! Note: This worm rojan is located in C:%WINDIR% folder. disabling t
X	Microsoft Windows Internet Connections Manager (net32b)	net32b.exe	Added by the W32/Cuebot-N WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
X	Microsoft Windows Man Service (Windows Man Service)	winmgr.exe	Added by the W32/Sdbot-DTL WORM! Note: This worm rojan is located in C:%WINDIR% folder.
	Microsoft Windows Protection (Windows Protection
X	Microsoft Windows Spool Service (Windows Spool Service)	services.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Microsoft Windows Spool Service (Windows Spool Service)	wdfmgr.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR% Not
	Microsoft Windows Spooler Service (Windows Spooler
	Microsoft Windows Spooler Service (Windows Spooler
X	Microsoft Windows System32	windll32.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Microsoft Windows System32	winservs.exe	Added by the W32/Tilebot-GU WORM! Note: This worm rojan is located in C:%WINDIR% Also been identifie
X	Microsoft Windows Update (Microsoft Update)	scvvhost.exe	Added by the W32/Forbot-FH WORM!
X	Microsoft Windows Update (Microsoft Windows Update)	msconfig32.exe	Added by the W32/Tilebot-P WORM! Read the link rootkit type stealth involved.
X	Microsoft Windows Update (msupdate)	csrss.exe	Added by an unknown TROJAN! Note: This has nothing to do with Microsoft Windows Update and this is n
	Microsoft Windows Validation Service (Windows
X	MicroSoft Windowz Update (MsFtUpd)	MsFtUpdateXP.exe	Added by the W32/Tilebot-BL WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Microsoft WMI Performance Adapter AddOn (WMIPerAddOn)	wmiapsrv.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR% NOT
X	Microsoft(R) Windows(R) Operat (Microsoft Corporation)	iexplorer.exe	Added by the Troj/Feutel-W TROJAN! Note: This is not the legitimate Windows Process (iexplore.exe) w
X	microsoftdvdhelp (MicrosoftDVD)	msdvd.exe	Added by the W32/Rbot-AWQ WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Microsoftkeysd	systemwin32.exe
L	MilShieldCleaner	ShieldService.exe	Related to Mil_Shield from Mil Incorporated. It protects your privacy by removing all tracks from yo
L	MindRetrieve Engine (MindRetrieve)	MindRetrieve.exe	MindRetrieve Appears to be a personal desktop search engine.
L	MindStorm Agent	srvpxa.exe	Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers ea
L	MindStorm AnalyzerPro Controller	srvctr.exe	Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers ea
L	MindStorm AnalyzerPro Correlation Engine	srvcor.exe	Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers ea
L	MindStorm Controller	srvctr.exe	Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers ea
L	MindStorm Correlation Engine	srvcor.exe	Related to MindStorm_AnalyzerPro from Secure Associates. A security management tool for customers ea
X	MINIServer (MiNiService)	MiniServer.exe	Added by the Troj/LittleW-E TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	Miscrosoft Updates Service 4	msupd4.exe	Trojan-Downloader.Win32.Agent.gn
X	Miscrosoft Updates Service 5	msupd5.exe	Trojan. TROJ_LODMEDUD.A
L	MkSUpdateInt	MkSUpdateInt.exe	ArcaVir an AntiVirus software from Poland. A procuct of ArcaBit Sp. z o.o
L	MkS_Scan	mks_scan.exe	ArcaVir an AntiVirus software from Poland. A product of ArcaBit Sp. z o.o
L	mks_vir antivirus monitor (MksVirMonSvc)	mksmonsv.exe	ArcaVir an AntiVirus software from Poland. A product of ArcaBit Sp. z o.o
O	MLKKBDNTDriver	MLKKBDNTService.exe	Unknown
X	MMX Virtualization Service	mmx464.sys	Added by the Goldun.J TROJAN! Read the link rootkit type stealth involved.
X	MMX2 Virtualization Service	mmx464.sys	Added by the Goldun.J TROJAN! Read the link rootkit type stealth involved.
L	Mobility Client (ArtourService)	artsvc.exe	Related to IBM_Mobility_Client Note: Located in C:Program FilesIBMMobility Client
X	MOBSYNC	MOBSYNC.EXE	Added by the SDBOT.CNT WORM! Read the link rootkit type stealth involved.
X	modlb (modlb)	modlb.exe	Added by the W32/Tilebot-BF WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	mondrv (mondrv)	mondrv.sys	Added by the TROJ_ROOTKIT.M TROJAN! Read the link rootkit type stealth involved.
X	MONDV	MONDV.SYS	Added by the Troj/Rootkit-Z TROJAN! Read the link rootkit type stealth involved.
?	Morrin Thumbnail Synchronized Service 5 (MrnTS_Sync5)	MrnTS_Sync5.exe	From Morrin Corporation? http://forums.spywareinfo.com/index.php?act=ST&f=18&t=43573
L	Motorola Digital Audio Player Manager	MotorolaDAP.exe	Related to Motorola Inc. Motorola Digital Audio Player.
X	Mouse Button Monitor (mousebm)	mousebm.exe	Added by the W32.Esbot.A WORM!
X	Mouse Click Monitor (mousecm)	mousecm.exe	Added by the W32/Sdbot-ZQ Worm!
X	Mouse Cursor Monitor (mousecrm)	mousecrm.exe	Added by the W32/Sdbot-ABQ WORM!
X	Mouse Hardware Sync (mousehs)	mousehs.exe	Added by the Troj/Bdoor-HU WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Mouse Movement Monitor (mousemm)	mousemm.exe	Added by the W32/Cuebot-E WORM!
X	Mouse Synchronization (mousesync)	mousesync.exe	Added by the W32/Esbot-A WORM!
X	Mouseb	MOUSEB.EXE	Added by the SDBOT.CRQ WORM! Read the link rootkit type stealth involved.
L	Movielink Core Service	MOVIEL~1.EXE	Associated with Movielink online movie download service with help from IBM. Has also been seen with
L	MozyBackup	mozybackup.exe	Related to Mozy Free backup at a secure remote location. Note: Located in C:Program FilesMozy
L	MpService	MPSERVIC.EXE	Related to Canon Inc. http://www.canon.com/
L	mr2kserv	mr2kserv.exe	Dell Open Management software installs this service http://www.anti-spy.info/process/mr2kserv.exe.ht
X	MRFCKDLL	MRFCKDLL.SYS	Added by the Troj/NtRootK-F TROJAN! Read the link rootkit type stealth involved.
L	MrobeService	MRobeService.exe	Related to Olympus_America_Inc Imaging products.
L	MrPostman	Wrapper.exe	Related to MrPostman: POP email access.
X	Ms Builders (Ms Builder)	Wupated.exe	Added by the W32/Agobot-SS WORM!
X	MS Common Service	mscomserv.exe	Added by the Troj/Zlob-RF TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	MS Dns Service	wincntrl.exe	Added by a variant of the Sdbot/Rbot worm
X	MS Dns Service (WinNet)	wincntrl.exe	Added by the W32/Rbot-AYH WORM! Note: This worm rojan file is found in the System32 folder.
X	MS DTC console	msdtc.exe	Added by the W32/Sdbot-DTO WORM! Note: This worm rojan is located in C:%WINDIR%
X	MS Internet Countermeasures Framework (ICF)	System32:svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note DO NOT delete the svchost.exe file.
X	MS Internet Countermeasures Framework (ICF)	icf.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	MS Office Updater Service	msrvs32.exe	Added by the W32/Tilebot-HM WORM! Note: This worm rojan is located in C:%WINDIR% folder
X	MS Software Shadow Download Provider (dnlsvc)	dnlsvc.exe	Added by DnlSvc.Process TROJAN!
X	Ms Valud Loader (Ms Valud Load)	Svhots.exe	Added by the W32/Agobot-SP WORM!
X	MSCom	mscom.exe	Added by the W32.Woredbot TROJAN! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP
X	MSCommmand	mswincom32.exe	Added by the W32/Rbot-FMM WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/M
X	MSCoolServ	mscolsrv.exe	Rahack virus
L	MSCSPTISRV	MSCSPTISRV.exe	Related to Sony Corporation.
X	Msdebugsrv	dbg32hlp.exe	Added by the SDBOT.CNG WORM! Read the link rootkit type stealth involved.
X	msdirectx	MSDIRECTX.SYS	Added by the Troj/NtRootK-F TROJAN! Note: This trojan file is dropped by various other worms and tro
X	MSDN Driver (msdndr)	msdndr.pif	Added by the Troj/HacDef-EQ TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C
X	Msdn Update 32 (msdnupdate32)	msdnupdate32	Added by the W32/Tilebot-M WORM! Read the link rootkit type stealth involved.
X	Msdn Update 32 (msdnupdate32)	msdnupdate32.exe	Added by the SPYBOT.AHT WORM! Read the link rootkit type stealth involved.
X	Msdtc Manager	winlogin.exe	Added by the W32/Rbot-FKU WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
X	msecure (mcsecure)	mcsecure.exe	Added by the SDBOT.BZJ WORM! Read the link rootkit type stealth involved.
X	mserv.exe	mserv.exe	Related to Trojan.Win32.Killav.br
L	msftesql	msftesql.exe	Related to Microsoft_SQL_server suite.
X	MsGrd32	MSYRD32.EXE	Added by the SDBOT.BYR WORM! Read the link rootkit type stealth involved.
X	MsHS64 or cvcworking setting (cvcWork or MsHS64)	syscvhost.exe or MsHS64.exe	Added by the W32/Tilebot-BU WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	msie7	msie701.exe	Identified as Trojan_Downloader by PREVX Note: This worm rojan is located in C:WindowsSystem (Win9x/
X	msinit (Microsoft Scheduling Agent)	msinit.exe	Added by the W32/Tilebot-BJ WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	MSI_WLAN_Service	WLAN_Service.exe	Part of Microstar's WLan card. File found in the C:Program FilesMicroStarWLANUtility folder.
X	mslogon (Microsoft System Logon Manager)	mslogon.exe	Reported as Trojan-Dropper.Win32.Delf.ng by Kaspersky Anti-Virus. Note: This file is found in the Wi
X	MsLS32 (MsLS32)	MsLS32.exe	Added by the W32/Tilebot-BS WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	MsLX32 (MsLX32)	MsLX32.exe	Added by the W32/Sdbot-AFS WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	MSMAPDEVICE	MSMAPDEVICE.SYS	Added by the TROJ_ROOTKIT.AK TROJAN! Read the link rootkit type stealth involved.
X	msmbios (Microsoft System Management BIOS Driver)	mssmbios.exe	Added by the W32/Tilebot-AI TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
L	MSMPSVC	MSMPSVC.exe	Related to Windows_OneCare_Live from Microsoft
L	MSR Collector	msrCollector.exe	Related to Black White Box Inc. Now owned by Vericept Corp. A Risk Management Platform
X	msriv1 (msriv1)	msriv1.sys	Added by the Troj/Rootkit-W TROJAN! Read the link rootkit type stealth involved.
X	msscmc43	msscmc43.exe	Added by the W32/Spybot-NB WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x/
X	MSSQL (MSSQL2K6)	sqlsrv.exe	Added by the SDBOT.CNY or MYTOB.NC WORM! Read the link rootkit type stealth involved.
L	MSSQLServerADHelper	sqladhlp.exe	Related to Microsoft SQL Server 2000 desktop engine.
X	MSSvc CRSS (CRSS)	MSSvc.EXE	Reported by Ewido security suite as Backdoor.SdBot.nj
L	mst Defrag Service	mstDfrgS.exe	Related to mst_Defrag
X	MSTCS	MSTCS.EXE	Reported as Backdoor.Iroffer TROJAN! by What-process.com
X	mstdel32 (mstdel32)	mstdel32.exe	Added by the W32/Tilebot-BE WORM! Note: This worm rojan file is found in the System (95/98/ME) or Sy
X	MsUpd	msupd5.exe	Added by the Lodmedud TROJAN!
X	MsUpd	msupd4.exe	Added by the Lodmedud TROJAN!
X	MsUpd	msupd6.exe	Added by the Lodmedud TROJAN!
X	MSUpdate (Microsoft Update Service for 2005)	msupdate24.exe	Added by the W32/Tilebot-H WORM!
X	msvbn	msvbn.exe	Added by the Backdoor.Win32.SdBot.auv TROJAN! Note: This worm rojan is located in C:%WINDIR% folder.
X	msvnc (msvnc)	msvnc.sys	Added by the TROJ_ROOTKIT.M TROJAN! Read the link rootkit type stealth involved.
X	msvrcs(msvrcs) (msvrcs)	msvrcs.exe	Added by the W32/Sdbot-CRX WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	muamgrd.exe	muamgrd.exe	Added by a variant of the AGOBOT.GEN WORM! Note: located in C:WindowsSystem (Win9x/Me) C:%WINDIR%Sys
L	Multi-user Cleanup Service	ntmulti.exe	Related to IBM Lotus Note software.
L	MWAgent	MWASER.EXE	Related to MicroWorld Technologies Inc. - Antivirus & Content Security suite. Note: Located in C:Pro
L	MWSarcpkt	MWSEtherpkt.exe	Related to Gateway Ticketing Systems Inc. http://www.gatewayticketing.com/
L	MWSejcap	MWSejcap.exe	Related to Gateway Ticketing Systems Inc. http://www.gatewayticketing.com/
L	MWSpollserver	PollServer.exe	Related to Gateway Ticketing Systems Inc. http://www.gatewayticketing.com/
L	MWSsched	sutmsced.exe	Related to Gateway Ticketing Systems Inc. http://www.gatewayticketing.com/
L	MWSTick	MWSTick.exe	Related to Gateway Ticketing Systems Inc. http://www.gatewayticketing.com/
X	MXS(mxs) (MXS)	mxs.exe	Added by the W32/Sdbot-CTT WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
L	My Firewall Plus	Smc.exe	Related to Webroot Firewall
L	MyMedia Server	MyMediaServer.exe	Related to FUJITSU LIMITED
L	MySql	mysqld-nt.exe	belongs to MySQL Daemon. It is a service that handles the access to MySQL databases
L	MySqlInventime	mysqld-max-nt.exe	Related to MySQL database a popular open source database.
X	MySrvShell Service (MySrvShell)	(Path to Trojan EXE)	Added by the Troj/WinterLv-C Trojan!
L	NAI ePolicy Orchestrator Agent (NAIMAGENT32)	naimas32.exe	Related to Network Associates anti-virus protection suite http://www.liutilities.com/products/wintas
L	NAV Alert	alertsvc.exe	Related to Symemtecn/Norton products
X	Navegador de red (ExpIorer)	ExpIorer.exe	Added by the Troj/Taladra-E TROJAN!
L	NBService	NBService.exe	Related to Nero Backup service. Note: Located in C:Program FilesNeroNero 7Nero BackItUp
L	NDAS Service (ndassvc)	ndassvc.exe	Related to XIMETA Inc. Smart Network Storage Solution.
X	NDIS Adapter (NDIS TCP Layer Transport Device)	ndis.exe	Added by the W32/Forbot-AX WORM! Note: This worm file is found in the System32 folder.
	ndserv	ndserv.exe	Related to NetDeploy_Launcher from Open Software Associates Ldt. a division of Managesoft.com Note:
X	neruo.exe (NeroFilterCheck)	Explore.exe	Added by the SDBOT.DIH WORM! Read the link rootkit type stealth involved.
X	Net Functions Library (Netlib)	Netlib.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C: folder.
X	Net Functions Monitoring (Netmon)	Netmon.exe	Added by the W32/Codbot-R WORM!
X	Net Service Monitor	netsvc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: Located in C:WINDOWS Note] Netsvc.exe: T
L	NetBackup Client Service (NetBackup INET Daemon)	bpinetd.exe	Related to VERITAS NetBackup Enterprise Server.
L	NetBackup Volume Manager	bevmd.exe	Related to VERITAS NetBackup Enterprise Server.
X	NetBIOS Helper	nbthlp.exe	Added by the W32.Toxbot.AL WORM! Note: Symantec has developed a removal tool to clean the infections
X	netbios helper service	altsvc.exe	adserver adtech.de redirects
X	NetBIOS Helper Service (NetBIOS Helper)	nbthlp.exe	Added by the W32/Codbot-AE WORM! Note: This worm rojan file is found in the System32 folder.
X	NetBTD(ntbtd) (NetBTD)	netbtd.exe	Added by W32/Sdbot-BLW WORM! Note: located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP/WinN
X	NetCN	netcn.sys	Added by the Hacktool.Rootkit TROJAN! Read the link rootkit type stealth involved.
X	NetconDDE Service (NetconDDE)	iisctrl.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	netconf32 (netconf32)	netconf32.exe	Added by the W32/Tilebot-BN WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	NetDDE Server (NetDDEsrv)	netddesrv.exe	Added by the W32/Codbot-Y WORM! Note: This worm rojan file is found in the System32 folder.
X	NetDDEipx (NetDDEipx)	random	Added by the NetDDEipx TROJAN! **note 3ylv.exe may be one of the random file names used
X	NETINFO	netinfo.exe	Added by the W32/Tilebot-J WORM! Read the link rootkit type stealth involved.
L	NetLimiter (nlsvc)	nlsvc.exe	NetLimiter_2 shows list of all applications communicating over network.
X	NetLogon	svchost.exe -k NetLogon	Added by the Fuwudoor TROJAN!
	NetOp Helper ver. 7.50 (2002343) (NetOp Host for NT
	NetOp Helper ver. 7.65 (2004242) (NetOp Host for NT
L	Netropa NHK Server	nhksrv.exe	Netropa Hotkey Server task seen only on DELL and Compaq PCs running Windows NT4/2000/XP
L	Netropa NHK Server	Nhksrv.exe	nhksrv.exe is a process that belongs to DELL and Compaq systems. It is used to halt any configured h
L	Netscape Update Service	ncupdatesvc.exe	Netscape Communications Corporation updater
X	NetSendServer (NetSendServer)	NetSend.exe	Added by the Troj/Hupigon-DQ TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
L	NetSign AutoUpdate Service (NsAUSvc)	NsAUSvc.exe	Related to SecurityFocus - http://www.securityfocus.com/
L	NetVeda Safety.Net (ipcSvc)	ipcsvc.exe	Related to Safety_net from Netveda. Security and advanced Internet firewall protection for all your
?	Network	nettcp.exe	Unknown owner: Location C:WINDOWSsystem32 ettcp.exe
X	Network ADSL Server (Network ADSL Server)	woaisaomm.exe	Added by the Troj/GrayBrd-AQ TROJAN! Note: This trojan file is found in the System32 folder.
L	Network Associates Task Manager	VsTskMgr.exe	VirusScan Task Manager
X	Network Client (nwclntg)	winlogon.exe	Added by the Boxed.E TROJAN!
L	Network Configuration Service (NetCfgSvr)	NetCfgSv.EXE	Related to AT&T http://www.anti-spy.info/process/netcfgsv.exe.html
X	Network Connections Sharing (RpcTftpd)	svchost.exe	Added by the W32.Welchia WORM! **Note - This service will be set to start manually
X	Network DDE Client (NetDDEclnt)	netddeclnt.exe	Added by the W32/Codbot-M WORM!
X	Network dde connections	service.exe	adtech.de redirections
X	Network DDE Connections (NETDDEC)	winmgnt.exe	Added by unknown malware the file winmgnt.exe may be a Serv-U FTP server used to download other mali
X	Network DDE DSMA (NetDDEdsma)	svchost.exe	Added by the W32/Sdbot-BMG WORM! Note: This is not the legitimate Windows Process. (Which is found i
X	Network DDS (NetDDS)	NetDDS.exe	Reported as Troj/ServU-Gen See Sophos Unknown owner :Location: C:WINDOWSsystem32NetDDS.exe
X	Network Devices Controller (ndcsvc)	random file name	Added by the Alnica TROJAN!
X	Network Devices Controller (ndcsvc)	random.$$$	Added by the Alnica TROJAN!
	Network Distributed Transaction Coordinator for
X	Network DRV (NTDRV)	netdrvr.exe	Added by the W32/Sdbot-AZK WORM! Note: This worm file is found in the System or System32 folder.
X	Network Gateway Manager (npx)	csrsc.exe	Added by the W32/Sdbot-CPE WORM! Note: This worm rojan is located in C:%WINDIR%
X	Network helper Service (MSDisk)	irdvxc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Network Location Manager	lssc.exe	Added by the Trojan.Backdoor.Gen TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/
X	Network Management Center Time (W32Times)	TIMEMAN32.EXE	Added by the Troj/GrayBrd-AA TROJAN! Note: This worm rojan file is found in the Program FilesInterne
L	Network Messenger (MStdc )	mstdc.exe	Related to Microsoft Personal Web Server and Microsoft SQL Sever software http://www.2-files.com/pro
X	Network Monitor	netmon.exe	Reported by Panda as the Trj/Cicos.H TROJAN! This trojan if found in the Program FilesNetwork Monito
X	Network Provision Managing Service (xmlprovman)	provsvc.exe	Added by the W32/Sdbot-CRS WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Network Security Service	random	CoolWebSearch res:// variant
X	Network Security Service (NSS)	random	CoolWebSearch res:// variant
X	Network Station Task Manager (TASKSQ)	tasksch.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	Network Station Task Manager (TSKIB)	taskib.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	Network Windows Service (MSWindows)	urdvxc.exe	Added by the W32/Allaple-B WORM! Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP/
X	Network)	MSVPN32.exe	Added by the W32/Rbot-AIO WORM!
L	NI Service Locator (niSvcLoc)	niSvcLoc.exe	Related to National_Instruments corp.
L	NICCONFIGSVC	NICCONFIGSVC.exe	NICCONFIGSVC.exe is a process associated with the power management settings for network adapters on
L	NICSer_WMP11	NICServ.exe	Related to Linksys config utility.
X	ninsvc	ninsvc.exe	Added by the W32/Akbot-AL WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
L	nipxirmu	nipalsm.exe	Related to National_Instrument Corp.
L	NMap	nmapserv.exe	NMapWin Port Scanner utility service.
L	NMSAccess	NMSAccess.exe	Related to Cheetah_DVD_Burner Note Must only be used on NT4/2000/XP
L	NNSvc	nnsvc.exe	NetNanny Internet Filter
L	NobleNet Portmapper for TCP	portserv.exe	Actuate_Enterprise Reporting Applications for business intelligence analytic services
X	NOD AV service (nodantivir)	nodantivir.sys	Added by the Troj/Haxdoor-AK TROJAN! Note: This trojan file is found in the System32 folder. The fil
L	NOD32 Kernel Service (NOD32krn)	nod32krn.exe	NOD32 Antivirus
L	Nofeel FTP Server Service	nftpdsvc.exe	Related to Nofeel_FTP_Server
L	NoIPDUCService	DUC20.exe	Related to Vitalwerks Internet Solutions
L	Norman API-hooking helper	nipsvc.exe	Norman Anti-Virus
L	Norman NJeeves	NJEEVES.EXE	Norman Anti Virus
L	Norman Type-R	NPFSVICE.EXE	Norman Virus Control Service. Made by Norman Data Defense Systems Inc. For more information Click_He
L	Norman Virus Control on-access component	nvcoas.exe	Norman Virus Control on-access component
L	Norman Virus Control Scheduler	NVCSCHED.EXE	Norman Virus Control Scheduler
L	Norman ZANDA	Zanda.exe	Norman Anti Virus
L	Nortel Networks TunnelGuard (tunnelguardservice)	CueAgent_srv.exe	Related to Nortel_Networks_TunnelGuard designed to ease the deployment of very large site-to-site an
X	Norton antivirus and Firewall (it)	fime.exe	Bogus Norton Antivirus and Firewall service. Unknown owner.
L	Norton AntiVirus Auto-Protect	navapsvc.exe	Norton AV leave it running.
L	Norton AntiVirus Auto-Protect Service (navapsvc)	navapsvc.exe	Related to Norton/Symantec AntiVirus.
L	Norton AntiVirus Client	rtvscan.exe	Norton Anti-virus related
L	Norton AntiVirus Firewall Monitor Service (NPFMntor)	NPFMntor.exe	Norton Internet Worm Protection
L	Norton Ghost	PQV2iSvc.exe	symantec Norton Ghost Image related
L	Norton Internet Security Accounts Manager	NISUM.EXE	Related to Norton Internet Security
L	Norton Internet Security Proxy Service	SymProxySvc.exe	Related to Symantec Corporation
L	Norton Internet Security Service	NISSERV.EXE	Related Symantec Corporation
X	Norton Online Anti Virus	avll32.exe	Added by the Backdoor.Win32.SdBot.aad reported by Kaspersky TROJAN! Note: This worm rojan is located
L	Norton Personal Firewall Proxy Service	SymProxySvc.exe	Related to Norton Firewall Proxy service
L	Norton Personal Firewall Service	NISSERV.EXE	Related to Norton Personal Firewall service
L	Norton Program Scheduler	npssvc.exe	Related to Norton Scheculer
L	Norton Protection Center Service (NSCService)	NSCSRVCE.EXE	Related to Norton Internet Security 2006 and Norton AntiVirus 2006. Made by Symantec_Corporation
L	Norton Unerase Protection	NPROTECT.EXE	Norton Protected Recycle Bin
L	Notebook Manager Service (anbmService)	anbmServ.exe	Related to Acer Notebooks Hardware Monitoring program. Made by OSA_Technologies Inc.
L	Novell Application Launcher (NALNTSERVICE)	NALNTSRV.EXE	Novell NAL NT service
L	Novell Workstation Manager (WM)	wm.exe	Novell Workstation Manager
L	Novell XTier Agent Services	XTAgent.exe
L	Novell ZfD Remote Management	ZenRem32.exe
L	NPDOR File Monitor Service (NFMService)	NPDORNT.exe	Related to NPD Online Research.
X	NPF	npf.sys	Added by the Troj/NtRootK-I TROJAN! Note: This trojan file is found in the System32 folder.
L	npkcsvc	npkcsvc.exe	INCA Internet
X	NS (MSLLR)	ns.exe	W32/Agobot-HS
L	NsEngine	NSENGINE.exe	Scheduling engine of NovaSTOR Backup Service
X	NT login service (ntlogin32)	libsys32.exe	Added by the W32/Sdbot-ACK WORM!
X	NT login service - Unknown	libsysmgr.exe	Added by the W32/SDBOT-CAF WORM! (Castle Cops)
L	NT Online Protection	ONLNSVC.EXE	Related to AntiVirus_Quick Heal Virus protection. Note: located in C:Program FilesQUICKH~1
X	Nt System Kernel	ntsyskrnl.exe	related to WORM_AGOBOT.IK
X	NTBOOTMGR	ntuser.exe	Flagged as Backdoor.Iroffer / Backdoor.Noer
L	NTCHARGE	winlogon.exe	Related to Microsoft Internet Information Services (IIS).
X	NTFS Crypto Technology (NTFSCrypt)	ntfscrypt.exe	Added by the W32/Spybot-NC WORM! Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP/
X	NTFS File Location Service (NTFSFLS)	ntfsloc.exe	Added by the W32/Sdbot-CSG WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	NTFSprotect (ntfsdiscman)	ntfsprotect.exe	Added by the SDBOT.CCF WORM! Read the link rootkit type stealth involved.
X	Ntlm_Drive_Connect (Ntlm_Drive_Connect)	TimerU.sys	Added by the Tuimer TROJAN!
X	NTLOAD	ntsrv.exe	Flagged as Backdoor.Iroffer / Backdoor.Noer
X	NTLOAD	winlogon.exe	Other files in the same directory identified as Win32.Iroffer.b by Kaspersky
X	ntmssvc	svchost.exe -k ntmssvc	Added by the Fuwudoor TROJAN!
X	NTP (Network Time Protocol)	winlogon.exe	Added by the Troj/Jtram-D TROJAN! Note: This trojan file is found in the System32Client folder.
L	NTRU Hybrid TSS v1.05 TCSD (tcsd_win32.exe)	tcsd_win32.exe	Related to NTRU_Cryptosystems Inc. Provider a public key cryptography system (PKCS)
X	NTSec(ntsec) (NTSec)	ntsec.exe	Identified as Trojan-Dropper.VB.22 by VBA32 Note: located in C:WindowsSystem (Win9x/Me) C:%WINDIR%Sy
O	NTSecure	srvany1234.exe	Unknown owner: Location C:WINDOWSsystem32srvany1234.exe
X	NTSVCMGR	winlogon.exe	Other files in the same directory identified as Win32.Iroffer.b by Kasperksy
O	NTSVCMGR	winlogon.exe	Creates a file win32.dll C:windowssystem32 and the old one is renamed win32.dll.bkup
X	NTSVCMGR	ntsrv.exe	Flagged as Backdoor.Iroffer / Backdoor.Noer
L	NTsyslog	ntsyslog.exe	Related to Open_Source_Technology Group. An application logging functionality.
L	nTune Service (nTuneService)	nTuneService.exe	Related to NVIDIA Access Manager. Note: Located in C:Program FilesNVIDIA Corporation Tune
L	NuTCRACKER Kernel	nutkserv.exe	Related to openUTM from Fujitsu Siemens Computers
L	NuTCRACKER Service	nutsrv4.exe	Related to Rational Rose MKS Toolkit for Enterprise Developers
X	NvCplScan	msc32.exe	Related to the W32/FORBOT-DD
X	NvCplScan	nvsc32.exe	another example added by Forbot_ET.
L	Nvedavt	ousbehci.sys	Related to OrangeWare Corp.
X	nvidGUIv (nvidGUIv2)	NVIDGUIV.EXE	Added by the SDBOT.CTQ WORM! Read the link rootkit type stealth involved.
L	NVIDIA Display Driver Service	nvsvc32.exe	NVidia
L	NVIDIA Driver Helper Service	nvsvc32.exe	Related to NVIDIA drivers.
X	NVIDIA Driver Service¡¡ (NVSv )	svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Nvidia Graphic Displacement (nvideoGUI)	nvideogui.exe	Added by the SDBOT.CQD WORM! Read the link rootkit type stealth involved.
L	NVIDIA PVR Schedule Monitor (nvpvrmon)	nvpvrmon.exe	Related to NVIDIA ForceWare driver. Note: Located in C:Program FilesNVIDIA CorporationForceWareMulti
X	nvsec(nvsec) (NvSec)	nvsec.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	nvsvc32.exe	wmisp.exe	Added by the Backdoor_Win32_SdBot_aad WORM! - Reported by KASPERSKY ON-LINE SCANNER
L	O&O CleverCache Agent (OOCleverCacheAgent)	ooccag.exe	Related to O&O_Software Products. Located in folder: OO SoftwareCleverCache
L	O&O ComponentInstaller Agent	oocinst.exe	Related to O&O software Protection Software
L	O&O Defrag	oodag.exe	www.oo-software.com
L	O2Micro Flash Memory (O2Flash)	o2flash.exe	Related to O2Micro_Flash Memory Card. Note: Located in C:WINDOWSsystem32
	Odyssey Client for Fujitsu Siemens Computers
X	OESH (Office Source Engine Help)	Program.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C: folder.
	Office Server Extensions Notification Service
L	Office Source Engine (ose)	OSE.EXE	Microsoft Office Source Engine
L	OfficeScanNT Listener	tmlisten.exe	part of the Trend Micro Anti Virus application (WinTasks Process Library)
L	OfficeScanNT Personal Firewall (OfcPfwSvc)	OfcPfwSvc.exe	Related to Trend Micro Inc. - http://www.trendmicro.com/
L	OfficeScanNT RealTime Scan	ntrtscan.exe	a process associated with the Trend Micro Antivirus application (WinTasks Process Library)
L	OlCamSrv	OlCamSrv.exe	Related to: Olympus_America Inc. Imaging services
L	OM Common Services (omsad)	omsad32.exe	Related to Dell Open Management system.
L	OmniForm Printer	ofps.exe	Related to Nuance_Communications Inc. (Peviously Scansoft Inc.) A leading supplier of imaging speech
L	Omniquad MyPrivacy	mpsvc.exe	Related to Omniquad Security's MyPrivacy Internet tracks cleaning tool.
L	ONC/RPC Portmapper	PORTMAP.EXE	Related to Bell_and_Howell
L	Online Backup Service	nts.exe	Related to Online_Backup_Service From Acpana Business Systems. Note: Located in C:Program FilesAcpan
L	OpcEnum	OpcEnum.exe	OPC_Foundation Sets Industry standards in Interoperability of Automation.
X	Open GL Drivers	openGLD.exe	Added by the SDBOT.CLW WORM! Read the link rootkit type stealth involved.
L	OpenAFS Client Service (TransarcAFSDaemon)	afsd_service.exe	OpenAFS is a distributed filesystem product pioneered at Carnegie Mellon University
X	openSSL	openSSL32.exe	Added by the W32/Spybot-MY WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
L	OpenVPN Service (OpenVPNService)	openvpnserv.exe	Belongs to Open VPN that seems to be a Linux VPM program that runs under Windows. File found in the
	Oracle Forms Server [Forms60Server-OraForm]
L	Oracle OLAP 9.0.1.0.1 (OLAPServer)	xsolap.exe	Related to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:oracl
L	Oracle OLAP Agent	xsaagent.exe	Related to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:oracl
L	Oracle Reports Server [Rep60_PDB-LAPTOP-OraDevHome]	rwmts60.exe	Related to Oracle products
L	Oracle WebDb Listener	wdblsnr.exe	Related to Oracle products
L	Oracle%ORACLE_HOME_SERVICE%ClientCache80	ONRSD80.EXE	Related to Oracle Networking (Net8 Server Executable)
L	OracleDBConsoleorcl	nmesrvc.exe	Related to Oracle_DB_10g Database. Note: Located in C:...oracle10gin User can install in own folder
L	OracleMTSRecoveryService	omtsreco.exe	Related to Oracle SQL database application
L	OracleOraDb10g_home1iSQL*Plus	isqlplussvc.exe	Related to Oracle_DB_10g Database. Note: Located in C:...oracle10gin User can install in a folder o
L	OracleOraHome90Agent	agntsrvc.exe	Related to Oracle Intelligent Agent used to run on a remote node in the network to make the node OEM
L	OracleOraHome92PagingServer	pagntsrv.exe	Related to Oracle products
L	OracleOraHome92TNSListener	TNSLSNR.exe	Related to Oracle products
L	OracleOraHomeAgent	dbsnmp.exe	Related to Oracle products
L	OracleOraHomeClientCache	ONRSD.EXE	Related to Oracle products
L	OracleOraHomeDataGatherer	vppdc.exe	Related to Oracle products
L	OracleOraHomeHTTPServer	Apache.exe	Related to Oracle products
L	OracleOraHomeManagementServer	OMSNTsrv.exe	Related to Oracle products
L	OracleOraHomePagingServer	pagntsrv.exe	Related to Oracle products
L	OracleOraHomeTNSListener	TNSLSNR.exe	Related to Oracle products
L	OracleServiceLOCALORA	ORACLE.EXE	Related to Oracle products
L	OracleServiceSECINST	ORACLE.EXE	Related to Oracle products
L	OracleWebAssistant	OWASTsvr.exe	Related to Oracle products
L	OracleXEClrAgent	OraClrAgnt.exe	Related to Related to Oracle products Note: Located in C:oraclexeapporacleproduct10.2.0serverin
X	ORAN	ORAN.SYS	Added by the TROJ_ROOTKIT.N TROJAN! Read the link rootkit type stealth involved.
X	orans (orans)	orans.sys	Added by the Troj/Rootkit-AA TROJAN! Read the link rootkit type stealth involved.
L	OrbMediaService	OrbMediaService.exe	Owner:Orb Networks
L	ORBPVR	OrbPVR.exe	Owner: Unkown http://www.orb.com/
L	OSCM Utility Service	OSCMUtilityService.exe	Related to Novatel Wireless Service from Sprint phones and connectivity cards. Note: Located in C: P
L	OTi Card Reader Service	OTiReader.exe	OTI_Globals contact/contactless smart card reader. Location: Program FilesCardReader2.0 folder.
L	Outpost Firewall Services	outpost.exe	Agnitum Outpost firewall service
L	OvEpStatusEngine	OvEpStatusEngine.exe	HP OpenView Status Engine
L	OvMsmAccessManager	OvMsmAccessManager.exe	HP OpenView Access Manager
L	OvSecurityServer	OvSecurityServer.exe	HP OpenView Security Server
L	OwnershipProtocol	OProtSvc.exe	Related to PROSet Wireless Software from Intel
X	P correction service (msrdr2)	msrdr2.sys	Added by the Troj/Haxdoor-AJ TROJAN! Note: This trojan file is found in the System32 folder.
X	P-SYS (P-SYS Service)	TERMSVRS.EXE	Added by the SDBOT.DEO WORM! Read the link rootkit type stealth involved.
L	Pacific Image Comm. Fax Server	PICPMON.EXE	Related to SuperVoice Specialists in Voice Mail and Fax systems
X	Pack 2 Services)	servicepack2	Added by the SDBOT.COP WORM! Read the link rootkit type stealth involved.
L	Packet Scheduler	Service.exe	Related to Packet_Scheduler from Microsoft. The packet scheduler decides the order in which packets.
L	PACSPTISVR	PACSPT~1.EXE PACSPTISVR.exe	Sony computers
L	Panasonic Trap Monitor Service	Trapmnnt.exe	Related to Panasocic_Trap_Monitor for printer service. Note: Located in C:PROGRAM FILESPANASONICTRAP
L	Panda AdminSecure Administration Server (AdminServer)	AdminServer.exe	Related to Panda Security programs.
L	Panda AdminSecure Communications Agent (PAVAGENTE)	Pagent.exe	Related to Panda Security programs.
L	Panda AdminSecure Distribution Server (PadFSvr)	PadFSvr.exe	Related to Panda Security programs.
L	Panda AdminSecure Scheduler (PavAtScheduler)	pavsched.exe	Related to Panda Security programs.
L	Panda anti-virus service	pavsrv51.exe	Panda Anti-virus Service
L	Panda anti-virus service (PAVSRV)	pavsrv50.exe	Related to Panda Security programs.
L	Panda Antispam Engine (pmshellsrv)	pskmssvc.exe	Related to Panda Platinum 2006 Internet Security.
L	Panda Antispam Server Service	PaSSrv.exe	Related to Panda Protection Software.
L	Panda Antivirus Report Service (PavReport)	PavReport.exe	Related to Panda Security programs.
L	Panda Firewall	PavFires.exe	Panda Firewall Service
L	Panda Firewall Service	PavFires.exe	Related to Panda Firewall
L	Panda Function Service	PavFnSvr.exe	RElated to Panda Antovirus software
L	Panda Function Service (PAVFNSVR)	PavFnSvr.exe	Related to Panda Security programs.
L	Panda IManager Service	PsImSvc.exe	Related to Panda Titanium Antivirus
L	Panda Network Manager (PNMSRV)	PNMSRV.EXE	Related to Panda Firewall.
L	Panda NetworkSecure Service (CPntSrv)	CPntSrv.exe	Related to Panda Security programs.
L	Panda Pavkre	Pavkre.exe	Related to Panda Titanium Antivirus
L	Panda PavProt	PavProt.exe	Related to Panda Titanium Antivirus
L	Panda Preventium+ Service	prevsrv.exe	Related to Panda Titanium Antivirus
L	Panda Process Protection Service	pavprsrv.exe	Related to Panda Software
L	Panda Software Controller	PSCTRLS.EXE	Related to Panda Security programs.
L	Panda TPSrv (TPSrv)	TPSrv.exe	Related to Panda Platinum 2006 Internet Security and Panda Titanium 2006 Antivirus Antispyware.
L	Pantech&Curitel Utility Service	PnCUtilityService.exe	Related to Sprint Internet Service Provider.
L	PatchLink Update	GRAVITIXSERVICE.exe	Patchlink_Update by Patchlink Corporation
L	PATROL for Windows Operating System Monitor (PWKNTMon)	pwkntmon.exe	Related BMC Software Inc. - http://www.bmc.com/
L	PatrolAgent	PatrolAgent.exe	Related BMC Software Inc. - http://www.bmc.com/
L	Patrol_Scheduler	Patrol_Scheduler.exe	Related BMC Software Inc. - http://www.bmc.com/
L	PC Tools Spyware Doctor	sdhelp.exe	Related to PC Tools' Spyware_Doctor
L	PC-cillin PersonalFirewall	PCCPFW.exe	Related to Trend Micro Inc. Firewall
L	pcAnywhere Host Service	awhost32.exe	Part of Symantec's pcAnywhere remote PC management software.
L	PCHost	pchost.exe	Related to PCHost
X	pcryptv3X	pcryptv3.exe	Added by the W32/Tilebot-AS TROJAN! Note: This worm rojan file is found in the Windows or Winnt fold
L	PCS Business Connection Personal Edition Service	ConnectionService.exe	Related to sprint.com ISP
L	PCTEL Speaker Phone	pctspk.exe	Diagnostic tool for PCtel modem.
L	PDEngine	PDEngine.exe	Raxco PerfectDisk
L	PDFCreatorMessages	PDFCreatorMessages.exe	Related to Global_Graphics_Software Ltd. Document and Print Solutions.
L	PDScheduler	PDSched.exe	Raxco PerfectDisk
X	PE Sytray Manager	ssmc.exe	Added by the Backdoor.SdBot.avk as detected by ewido. More here
L	PER Antivirus (pav_service)	PERVAC.EXE	Antivirus software from PER Systems. http://www.perantivirus.com/antivir.htm
L	PER Antivirus Security Service (pav_security)	PAVSS.EXE	Antivirus software from PER Systems. http://www.perantivirus.com/antivir.htm
X	Performance Logs (Perfhmon)	Perfhmon.exe	Added by the W32/Codbot-W WORM!
X	Performance True Type Fonts (PerfFont)	perfont.exe	Identified as Trojan-Downloader.Win32.Agent.acv by ewido security suite.
L	Persits Software EmailAgent	EmailAgent.exe	Related to AspEmail from Persits Software Inc. A free active server component that enables your ASP
	Personal Secure Drive Service
L	Pervasive.SQL 2000 (relational)	W3SQLMGR.EXE	Pervasive SQL Server
L	Pervasive.SQL 2000 (transactional)	NTBTRV.EXE	Pervasive SQL Server
L	PestPatrol Remote	ppRemoteService.exe	Related to PestPatrol products from Computer Associates International Inc.
X	PEX	pex.sys	Added by the Troj/RKFu-A TROJAN! Read the link rootkit type stealth involved.
L	PGPsdkService	PGPsdkServ.exe	PGP Software
L	PGPserv	PGPserv.exe	Related PGP Corp. http://www.pgp.com/
L	PHAROS Distribution Agent (PSDistributionAgent)	DistAgnt.exe	Related to Pharos_Science_ & Applications Inc. Pharos develops advanced GPS navigation and mobile lo
L	Pharos Systems ComTaskMaster	CTskMstr.exe	Related to Pharos_Systems print asset management. Note: Located in C:PROGRAM FILESPharosin
L	Phoenix VCD Service (PhnxVCDService)	PhnxCDSvr.exe	Related to Phoenix_Technologies
L	Photoshop Elements Device Connect	PhotoshopElementsDeviceConnect.exe	Related to Adobe photoshop.
L	PI Message Subsystem (pimsgss)	pimsgss.exe	Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:Program
L	PI Network Manager (pinetmgr)	pinetmgr.exe	Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:Program
L	PI-Buffer Server (bufserv)	bufserv.exe	Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:Program
L	PictureTaker	PCTKRNT.SYS	LANovation's PictureTaker Enterprise Edition 3.1 lets administrators create software update packages
X	Pigeon (PigeonServer)	GServer2.exe	Added by the Troj/GrayBrd-AK TROJAN! Note: This worm rojan file is found in the System (95/98/ME) or
X	Pigeon_Server (PigeonServer)	Server.exe	Added by the Backdoor.Graybird.R TROJAN! Note: This trojan file is found in the Windows or Winnt fol
	Pinnacle Systems Media Service
L	Pinnacle Systems tvtv Spooler (EpgSpooler)	epgspo~2.exe	Related to Pinnacle Studio Plus.
L	PIPC Log Server (pilogsrv)	pilogsrv.exe	Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:Program
L	Pixar Alfred Server 11.5.3	alfserver.exe	Related to Pixar_Alfred_Server Server includes all the tools required for rendering images for film
X	PixelModule (pxlmdl)	nvidcgui.exe	Added by the W32/Tilebot-GS WORM! Read the link rootkit type stealth involved.
L	PLFlash DeviceIoControl Service	IoctlSvc.exe	Related to PLFlash_DeviceIoControl Service from Prolific Technology Inc. Note: located in C:WindowsS
O	PLSRemote Service (PLSRemoteSvc)	PLSRemote.exe	RISKWARE! or potentially unwanted application. This application may have been installed by your syst
L	Plug and Play	services.exe	Spanish Windows 2000 Plug and Play
X	Plug and Play Device Manager ($sys$DRMServer)	$sys$DRMServer.exe	This is the Sony-BMG ROOTKIT! Do not try to manually remove this! For more information check Mark Ru
X	plugin	PLUGIN.EXE	Added by the SDBOT.BUH WORM! Read the link rootkit type stealth involved.
L	pml
L	pml
L	Pml Driver	HPHipm09.exe	Related to HP printers
L	Pml Driver HPH11	HPHipm11.exe	HP PML Driver for HP.s Photosmart printers.
L	Pml Driver HPZ12	HPZipm12.exe	Related to HP printers.
L	pmldriver hpz12
L	PMounter	PMounter.exe	Partition Mounter task installed with the Paragon Hard Disk Manager software. (answers that work)
L	PMSveH	PMSveH.exe	Related to Lenovo part or IBM ThinkVantage Note: Located in C:WINDOWSsystem32
X	pnpext	wmc.exe	Added by the Troj/LeechPie-D TROJAN! Note: The file wmc.exe is a legitimate remote administration to
X	Policy Agent	svchost.exe -k Policy Agent	Added by the Fuwudoor TROJAN!
L	Pop-Up Stopper Anti-Spyware Service (PWISVC)	PWISVC.EXE	Related to Pop-Up_Stopper_Anti-Spyware from Panicware. Note: Located in C:Program FilesPanicwarePop-
L	Port Reporter	portreporter.exe	Port Reporter is a Microsft made utility information available
L	TOSHIBA HDD Protection (Thpsrv)	ThpSrv.exe	Related to The Toshiba_HDD_Protection TOSHIBA HDD Protection&hl=en&lr=lang_en\|lang_fr system is an i
L	TOSHIBA Optical Disc Drive Service (TODDSrv)	TODDSrv.exe	Related to Toshiba_Optical_Disk_service RAID Backup utility. Note: Located in C:WINDOWSsystem32TODDS
L	TOSHIBA RAID Service (kraidsvc)	kraidsvc.exe	Related to Toshiba_Raid_Service Note: Located in C:Program FilesTOSHIBATOSHIBA RAIDService
X	Trace network connections (ACCRA)	mocih.exe	Added by the Chimo.B TROJAN!
L	Track-It! Remote Control	wuser32.exe	Related to Quicken/Intuit Inc. - http://www.quicken.com/
L	Track-It! Workstation Manager	TIRemoteService.exe	Related to Quicken/Intuit Inc. - http://www.quicken.com/
L	Transcoding and Broadcast Service (Transcode360)	transcode360.exe	Transcode360 Designed for Windows XP Media Center Edition 2005 and the Xbox 360 Transcode 360 aims t
	Transparent Screen Lock PRO Service (TSL PRO Lock
L	TrapRcvr	trthread.exe	Related to the monitoring a particular system performance. See here
L	TrayMan	ntstart.exe	Tray Manager lets you put systemtray icons into a submenu to save space
L	Trend Micro Central Control Component	PcCtlCom.exe	Related to Trend Micro Incorporated.
	Trend Micro Management Infrastructure (TrendMicro
L	Trend Micro Personal Firewall	TmPfw.exe	Related to Trend Micro Inc.
L	Trend Micro Protection Against Spyware (PcScnSrv)	PcScnSrv.exe	Related to Protection_Against_Spyware from Trend Micro. Note: Located in C:Program FilesTREND MICROI
L	Trend Micro Proxy Service	tmproxy.exe	Related to Trend Micro Inc.
L	Trend Micro Real-time Service	Tmntsrv.exe	Related to Trend Micro Incorporated.
X	TrkSvr	svchost.exe -k TrkSvr	Added by the Fuwudoor TROJAN!
X	TrkWks	svchost.exe -k TrkWks	Added by the Fuwudoor TROJAN!
	Trlokom Central Management Helper 1.3.8 0
L	TrueVector Basic Logging Client (minilog)	minilog.exe	Related to Zone_Alarm_Firewall from Zone Labs Inc.
L	TrueVector Internet Monitor	vsmon.exe	Zone Alarm Firewall
L	Trusted Platform Core Service (IFXTCS)	IFXTCS.exe	Related to Trusted Platform Core Service from Infineon Technologies. Note: Located in C:WINDOWSsyste
X	tsecure	tsecure.exe	Added by the W32/Tilebot-B WORM! Note: Gives the fake description Terminal Security. Read the link r
L	TSI Remote Control Service (TSIRCSRV)	TSIRCSRV.EXE	Related to Laplink_Gold Software Inc. Connect to other Laplink-enabled computers over any connection
X	TskScheduler	taskshed.exe	Added by the W32/Tilebot-FN WORM! Note: This worm rojan is located in C:%WINDIR% folder.
L	TSMService	tsmsvc.exe	T-DSL SpeedManager from T-Com_T-Online Note: File location is in the Program FilesT-DSL SpeedManager
L	TSS Core Service (TSSCoreService)	ibmtcsd.exe	Related to IBM ThinkVantage Client
L	TuneUp WinStyler Theme Service	WinStylerThemeSvc.exe	Part of TuneUp Utilities
L	TVT Backup Service	rrservice.exe	Related to IBM ThinkVantage Rescue and Recovery
L	TVT Scheduler	tvtsched.exe	Related to IBM ThinkVantage Scheduler
L	twdns	named.exe	Related to TreeWalk_DNS TreeWalk DNS is a Domain Name Server program which fetches and converts Web
L	TZO Client (TZONTService)	TZO_NT_Service.exe	Related to TZO_DNS a leading Dynamic DNS (DDNS) service provider.
X	UDP Sub Packet Classifier (UDPSPC)	MSUDPSPC.EXE	Added by the SDBOT.CBF WORM! Read the link rootkit type stealth involved.
L	UDS Environment Manager 5.0.14	nodemgr.exe	Related to Forte_4GL_System from Sun Microsystems Inc.
L	UDS Environment Manager 5.1.3	nodemgr.exe	Related to Forte_4GL_System from Sun Microsystems Inc.
L	UDS Repository Manager 5.0.14	rpserver.exe	Related to Forte_4GL_System from Sun Microsystems Inc.
L	UDS Repository Manager 5.1.3	rpserver.exe	Related to Forte_4GL_System from Sun Microsystems Inc.
L	Ulead Burning Helper	ULCDRSvr.exe	Ulead DVD Burning Service
L	Ulead Burning Helper (UleadBurningHelper)	ULCDRSvr.exe	Related to Ulead_DVD_workshop allows the writing to DVD and CD media.
L	Unicenter Message Queuing Server	cam.exe	Related to Computer Associates Inc.
L	Unicenter Remote Control Host (rcHost)	rcHost.exe	Related to Unicenter_Remote_Control_Host From Computer Associates Note: Located in C:BA_MGMTTNGRCORC
L	Unicenter Software Delivery	SDSERV.EXE	Related to Unicenter Asset Management by Computer_Associates
X	Universal Serial Bus Control Protocol (pnpext)	smrs.exe	Added by the Troj/Bdoor-JD TROJAN!
?	Unknown	wisptis.exe
L	Unknown owner	wtxregds.exe	part of development software for microprocessors.
L	UnrealIRCd	wircd.exe	Related to UnrealIRCd
X	UPS	ups32.exe -v	Added by the W32/Mofei-H WORM!
L	UPS - APC PowerChute plus (UPS)	ups.exe	power management application from APC PowerChute.
L	UPS - UPSentry Service (UPSentry_Smart)	upsd.exe	Related ro Belkin_Bulldog Plus control software for the UPS (Uninterrupted Power Supply) via a seria
L	UPS Service (CyberPowerUPS)	upssrv.exe	Cyber Power PowerPanelPlus software. In the event of a power outage PowerPanelPlus Software automati
L	UPSMONService	UPSMON_Service.Exe	Related to UPSMON Power Management Software. Made by Powercom_USA This file is found in the Program
L	US30Service	US30Service.exe	Related to Everstrike Software. Folder protection tool.
X	USB Device	win32usb.exe	http://www.sophos.com/virusinfo/analyses/w32forbotbq.html
X	USB sks2drvr (sks2drvr)	sks2drvr.sys	Added by the Backdoor.Haxdoor.G TROJAN! Note: This trojan file should be found in the System32 folde
X	USB sksDRVR2 (sksdrvr2)	sksdrvr2.sys	Added by the Troj/Haxdoor-AL TROJAN! Note: This trojan file is found in the System32 folder.
L	USBest Service Zero (UTSCSI)	UTSCSI.EXE	Related to USBest PQI Card Drive (USB). Note: Located in C:%WINDIR%System32 (XP/WinNT/2K)
L	USBMate	usbmate.exe	Related to Belkin_USB products. Note: located in C:Program FilesBelkinBelkin Power Management Softwa
X	USBTest (USBTest)	USBTest.sys	Added by the Troj/RKPort-Fam TROJAN! Note: This trojan file is found in the System32drivers folder.
X	User Initialization (usrinit32)	userinit.exe	Added by the IRC/BackDoor.SdBot2.QV as detected by Avast AVG. TROJAN! Note: This worm rojan is locat
X	User Mode Driver-Manager	wdfmgrr.exe	Added by the W32/Sdbot-ZN WORM! Note: This worm rojan is located in C:%WINDIR% folder.
L	User Profile Hive Cleanup (UPHClean)	uphclean.exe	uphclean.exe is a process belonging to Microsoft's User profile cleanup service. This program is non
X	Userinit Logon Verification (UsrInitVerif)	userinit.exe	Added by the W32/Tilebot-EV WORM! Located in the Windows or Winnt folder.
	Users service for disk management requests (Logical
L	UStorage Server Service	UStorSrv.exe	Related to OTi Imation Disk Manager II
L	VAIO Cooporated Initialisation (VCI)	VCI_SVC.exe	Sony VAIO computers
L	VAIO Entertainment Aggregation and Control Service	VzRs.exe	Sony VAIO computers
L	VAIO Entertainment Database Service (VzCdbSvc)	VzCdbSvc.exe	Related to Sony's VAIO Entertainment Platform.
L	VAIO Entertainment File Import Service	VzFw.exe	Sony VAIO computers
L	VAIO Entertainment Task Scheduler	VzTaskScheduler.exe	Sony VAIO computers
L	VAIO Entertainment TV Device Arbitration Service	VzHardwareResourceManager.exe	Sony VAIO computers
L	VAIO Entertainment UPnP Client Adapter	VCSW.exe	Sony VAIO computers
L	VAIO Event Service	VESMgr.exe	Sony VAIO computers
L	VAIO Media Gateway Server	VmGateway.exe	Sony VAIO computers
L	VAIO Media Integrated Server	VMISrv.exe	Sony VAIO computers
L	VAIO Media Integrated Server (HTTP)	SV_Httpd.exe	Sony VAIO computers
L	VAIO Media Integrated Server (UPnP)	UPnPFramework.exe	Sony VAIO computers
L	VAIO Media Music Server	SSSvr.exe	Related to Sony Corporation
L	VAIO Media Music Server (HTTP)	sv_httpd.exe	Related to Sony Corporation
L	VAIO Media Music Server (UPnP)	UPnPFramework.exe	Related to Sony Corporations.
L	VAIO Media Photo Server	PhotoAppSrv.exe	Related to Sony Corporation.
L	VAIO Media Photo Server (Application)	PicAppSrv.exe	Related to Sony Corporation
L	VAIO Media Photo Server (HTTP)	SV_Httpd.exe	Related to Sony Corporations.
L	VAIO Media Photo Server (UPnP)	UPnPFramework.exe	Related to Sony Corporation.
L	VAIO Media Video Server	GPVSvr.exe	Sony VAIO computers
L	VAIO Media Video Server (HTTP)	SV_Httpd.exe	Sony VAIO computers
L	VAIO Media Video Server (UPnP)	UPnPFramework.exe	Sony VAIO computers
X	Validation Service)	devldr32.exe	Added by a variant of the WIN32.RBOT WORM! - Note - do NOT confuse with the legitimate Creative Labs
X	Vanquish Autoloader v0.1 beta10 (Vanquish)	vanquish.dll	Vanquish Autoloader
X	Vanquish Autoloader v0.1 beta10 (Vanquish)	vanquish.exe	Vanquish Autoloader
X	VANTI (VANTI)	God.sys	Added by the Troj/Hackvan-A TROJAN! Note: The file ranx.dll may also be added with this one both fil
L	Ventrilo	ventrilo_svc.exe	Related to Venbtrilo Server/Client. Note: located in C:Program FilesVentSrv
L	Veoh Client Service	VeohClientService.exe	Related to Veoh Network. Create your own video blogs to share with friends. Note: Located in C:Progr
L	VeriSign Updater (navi)	naviagent.exe	Related to VeriSign Update Agent. Note: Located in C:Program FilesVeriSignNAVI
L	VET Message Service (VETMSGNT)	VetMsg.exe	Related to Computer_Associate Antivirus and offers real-time protection against Internet-bound threa
X	virdrv (virdrv)	virdrv.sys	Added by the TROJ_ROOTKIT.N TROJAN! Read the link rootkit type stealth involved.
L	ViRobot Expert Monitoring (vrmonsvc)	vrmonsvc.exe	Security software related to HAURI Inc. - http://www.hauri.net/
L	Virtual CD v4 Security service (SDK - Version)	vcssecs.exe	Virtual CD SDK Security Service. Essential for the proper running of Virtual CD.
L	Virtual CD v4 Security service (VCDSecS)	vcdsecs.exe	Related to H H Software GmbH - http://www.hh-software.com/
L	Virtual CD v5 Security service (VC5SecS)	VC5SecS.exe	Related to Virtual_CD from H H Software and provides player support for CDs and CD images. Note: Loc
O	Virtual Manager System (vmsprog)	vmsprog.exe	EmailSpy email monitoring program and surveillance tool
L	Virtual NIC Service	PackethSvc.exe	Related to America Online Inc.
X	VirtualMGR	mssvc128.exe	Added by the Troj/Klutz-A Trojan!
L	Virtuozzo Update Service (vzupsvc)	vzupsvc.exe	Related to Virtuozzo from SWsoft Inc. Virtuozzo creates isolated partitions or virtual environments
X	VIRTwin (vdmt16)	vdmt16.sys	Added by the Troj/Haxdoor-AF TROJAN!
X	virus shield enable (vshield.exe)	vshield.exe	Added by the SDBOT.CBE WORM! Read the link rootkit type stealth involved.
L	Visibroker Activation Daemon	oad.exe	Borland Visibroker
L	VisiBroker Smart Agent	osagent.exe	Borland Visibroker
X	Vista ReadyService (VistaRS)	readysrv.exe	Added by the W32/Sdbot-CTZ WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Vista32	Vista32.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	Visual Studio Analyzer RPC bridge	varpc.exe	http://www.fileproperties.com/v/VARPC-EXE.htm
	Vital Microsoft Sub-system Resource (Vital Microsoft
X	vmsdrv (vmsdrv)	vmsdrv.sys	Added by the TROJ_ROOTKIT.AF TROJAN! Read the link rootkit type stealth involved.
L	VMware Authorization Service	vmware-authd.exe	Related to VMware Inc.
X	VMWare Authorization Servicec (GrayPigeonServer)	Server.exe	Added by the Backdoor.Graybird.O TROJAN! {red] Note: this trojan file is located in the Program File
L	VMware DHCP Service	vmnetdhcp.exe	Related to VMware Inc.
L	VMware NAT Service	vmnat.exe	Related to VMware Inc.
L	VMware Registration Service	vmserverdWin32.exe	Related to VMware Inc.
L	VMware Tools Service	VMwareService.exe	Related to VMware inc.
L	VMware Virtual Mount Manager Extended	vmount2.exe	Related to VMWare Inc.
L	VNC Server	WinVNC.exe	TightVNC Remote Control utility.
L	VNC Server Version 4 (WinVNC4)	WinVNC4.exe	The RealVNC 4 server for VNC usage over a LAN/WAN.
X	VolMapDev	VolMapDev.sys	Added by the TROJ_ROOTKIT.AQ TROJAN! Read the link rootkit type stealth involved.
L	VPN 5000 Service 1.00.00 (VPN5000Service)	vpn5000service.exe	Related to Cisco Systems Inc. - http://www.cisco.com/
X	VPNonDemand (VPNonDemand)	VPN.exe	Added by the W32/Tilebot-G WORM! Read the link rootkit type stealth involved.
L	VRService	VrService.exe	Related to Panasonic Matsushita Electric Industrial Co.
L	Vsclient Service (VnxService)	vnxserv.exe	Related to InfoExpress provides network access control solutions. More Note: Located in C:%WINDIR%Sy
L	W2K PCtel speaker phone	pctspk.exe	Related to PCtel services
X	W32Time	svchost.exe -k W32Time	Added by the Fuwudoor TROJAN!
L	WAN Miniport (ATW) Service (WANMiniportService)	wanmpsvc.exe	Related to America_Online Inc. The AOL suite's connectity relies upon this file heavily so if AOL is
L	WARSVR	war-ftpd.exe	This is an FTP server.
L	Washer Security Access (wwSecSvc)	wwSecure.exe	Related to one of the Webroot_Internet_Security programs. The file associated with this service is l
O	WDelMgr20	WDelMgr20.exe	Seems to be related to the RecoverLost Data or BackUp MyPC program by StompSoft
X	WDNDrive (chgsprt)	chgsprt.sys	Added by the Troj/Haxspy-A TROJAN!
X	Web Live Information Messenger	webmsn.exe	Added by the W32/Sdbot-CWA WORM! Note: This worm rojan is located in C:%WINDIR% folder.
L	Web Update Service by PowerProgrammer (WebUpdate)	WebUpdateSvc.exe	Related to POWERPROGRAMMER.CO.UK A user friendly way to look for and download updates via the web to
L	WebDrive Service (WebDriveService)	wdservice.exe	Related to WebDrive FTP service. Note: Located in C:Program FilesNetDrive
L	Webroot Admin Console (WebrootAdminConsole)	WebrootAdminConsole.exe	Related to Webroot_Software
L	Webroot Client Service (WebrootEnterpriseClientService)	WebrootClientService.exe	Related to Webroot_Software
L	Webroot Client Service (WRConsumerService)	WRConsumerService.exe	Belongs to webroots spysweeper. If you've purchased webroot software this should be valid otherwi
L	Webroot CommAgent Service (WebrootCommAgentService)	CommAgent.exe	Related to Webroot Software Inc.http://www.webroot.com/
L	Webroot Spy Sweeper Engine (svcWRSSSDK)	WRSSSDK.exe	Related to Webroot Spy Sweeper Engine. Located in C:Program FilesWebrootSpy Sweeper
L	Webroot Spy Sweeper Engine (WebrootSpySweeperService)	SpySweeper.exe	Related to Webroot Software inc. Spyware protection software. Note: Located in C:Program FilesWebroo
L	Webroot SpySweeper Service (WebrootSpySweeperService)	SpySweeper.exe	Related to Webroot Software inc. Spyware protection software. Note: Located in C:Program FilesWebroo
L	Webroot Update Service (WebrootEnterpriseUpdateService)	WebrootUpdateService.exe	Related to Webroot_Software
X	WebSeach Toolbar support NT service	TBPSSvc.exe	Related to the Neo/Huntbar Toolbar
L	Websense DBManager Scheduler (DBManagerScheduler)	DBManagerScheduler.exe	Related to Websense_Reporter has three primary components: the Reporter user interface the Log Serve
L	Websense Log Server (WebsenseLogServer)	LogServer.exe	Related to Websense_Reporter has three primary components: the Reporter user interface the Log Serve
L	Websense Report Scheduler (Websense Reporter Scheduler)	WsScheduler.exe	Related to Websense_Reporter has three primary components: the Reporter user interface the Log Serve
X	wfsup(wfsup) (wfsup)	wfsup.exe	Added by the Bck/Sdbot.HPS as detected by Pandascan TROJAN! Note: This worm rojan is located in C:Wi
L	WhatsUp Gold Syslog	WUGSyslog.exe	Related to CiscoWorks SNMS server.
X	Win Tmp Service (Wstmp)	wstmp.exe	Added by the W32/Sdbot-YS Worm!
X	Win Update	SYSUPDATE.EXE	Added by the SDBOT.CLA WORM! Note: This worm file is found in the Windows or Winnt folder. Read the
X	Win Updator Services	ctfnom.exe	Related to the WootBot Trojan.
X	WIN32 (image)	image.exe	Added by the W32/Sdbot-AAQ WORM! Read the link rootkit type stealth involved.
X	Win32 Driver (shit)	svchosts.exe	Added by the W32/Forbot-FD WORM!
X	Win32 Kernel Update (Win32Kernel)	win32host.exe	Added by the W32/Tilebot-FE WORM! Note: This worm file is found in the Windows or Winnt folder. Allo
X	Win32 Login Service (Win32 Login)	win32logon.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Win32 LSA Driver (Windows Lsa Service)	lsa.exe	Added by the W32/Forbot-FJ WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	win32 socket (win32socket)	win325b.exe	Added by the W32/Tilebot-GE WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Win32 SSL Driver (Win32 SSL Driver)	winssv.exe	Added by the W32/Forbot-BH WORM!
X	Win32 Task Manager (Win32Task)	wintasks32.exe	Added by the W32/Rbot-FPD WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Win32 Update (shit)	svchosts.exe	Added by an unidentified TROJAN! of the Sdbot family. C:WindowsSystem (Win9x/Me) C:%WINDIR%System32
X	Win32 Update (Win32Update)	oswinupdate.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	win32 update service (defiled)	svchostt.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Win32 USB2 Driver	svchosting.exe	W32/Forbot.J or SDBOT.HU
X	Win32Export	winsysplg.exe	Added by the W32/Rbot-FMU WORM! Note: This worm rojan is located in C:%WINDIR% folder.
L	Win32Sl	Win32sl.exe	Allows remote management application programs to access a client computer for maintainance purpose.
X	WIN32SOUND	sounddv.exe	Added by the W32/Tilebot-Z WORM! Read the link rootkit type stealth involved.
X	Win32Sr	win32ssr.exe	Added by the W32/Sdbot-AMA WORM!
X	Win32Sr (Win32Sr)	win32ssr.exe	Added by the W32/Sdbot-AOT WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
L	WinACD Power Button Service (ACDPowerService)	acdpower.exe	Related to Compuflex's TSR-like product for the Windows environment that automatically reads the amo
X	winauthm (spdauth)	SPDAUTH.EXE	Added by the SDBOT.CFH WORM! Read the link rootkit type stealth involved.
X	winconfig.exe	svcss.exe	Added by the Troj/Agent-MD TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	winconfig.exe	smsss.exe	Added by the W32/Spybot-MP WORM! Note: This is not the legitimate Windows Process. (Which is found i
X	winconfig.exe	SP2PATCH.EXE	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	windbs	winxtc.exe	Added by the AGOBOT-WD WORM
X	Window Boot Services	lsiss.exe	Added by the W32/Tilebot-HP WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Window Dispaly System	lsays.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Window LFX Services	lxsys.exe	Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm rojan is located in
X	Window Lssas Services	lssys.exe	Added by the Trojan.Downloader-Gen/Win.Process TROJAN! Note: This worm rojan is located in C:Windows
X	Window Plugin Service	lsscs.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Windows 32 Bit (Windows 32 Bit Drivers)	WinVid32.exe	Added by the W32/Tilebot-BH WORM! Note: This worm file is found in the Windows or Winnt folder. Read
X	Windows 32-bit PnP Driver	winpnp32.exe	W32.Wallz Worm. Owner:Unkown. Symantec Location: C:WindowsSystem for (9X) or C:WinntSystem32 for (NT
X	Windows Anti Virus (MSAV32)	MSAV32.EXE	Added by the SDBOT.CMH WORM! Read the link rootkit type stealth involved.
X	Windows Archiver (winarc)	devldr.exe	Added by the W32/Prex-J WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windows Archiver (winarc)	windat.exe	Added by the W32/Tilebot-BA WORM! Note: This worm rojan file is found in the Windows or Winnt folder
L	Windows Automatic Updates	windowsautomaticupdates.exe	This Service belongs to the Folding@Home Client which uses your computer's resources on behalf of St
X	Windows Basis Cont (Windows Basis Cont)	WINFTP32.EXE	Added by the SDBOT.CIU WORM! Read the link rootkit type stealth involved.
X	Windows CDROM Drivers (Microsoft Windows Atapi Drivers)	atapid.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows Client/Server Runtime Server Subsystem (WCSRSS)	wcsrss.exe	Added by the W32/Tilebot-DA WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows Client/Server Runtime Service (csrss)	csrss.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windowsi
X	Windows Configuration Backup Service (CfgBackupSvc)	svchost.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%CONF
	Windows Configuration Loader (Windows Configuration
X	Windows Configuration Manager (ConfigMgr)	svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Windows Debugger	SYSNT.EXE	Added by the RBOT.CEL WORM! Read the link rootkit type stealth involved.
X	Windows Decrypt manager (wincrypt32.exe)	wincrypt32.exe	Added by the W32/Tilebot-GC WORM! Note: This worm rojan is located in C:%WINDIR% folder.
O	Windows Desktop Security	svcagnt.exe	Check to see if it was installed by the by user. Keylogging and screenshot software see Here Locatio
O	Windows Desktop Security (dtsagntsvc)	svcagnt.exe	Check to see if it was installed by the by user. Keylogging and screenshot software see Here Locatio
X	Windows DLL Loader (RunDll32)	rundll32.exe	Added by the Troj/Agent-MD TROJAN! Note: This is not the legitimate Windows Process. (Which is found
X	Windows DLL System	smsc.exe	Added by the W32/Tilebot-GG WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows DNS (Windows DNS)	rundl32.exe	Added by the Troj/GrayBrd-AG TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	windows drivers32	WINDRVR32.EXE	Added by the SDBOT.CON WORM! Read the link rootkit type stealth involved.
X	windows drivers32 (windows drivers32)	windrvrs32.exe	Added by the W32/Tilebot-AG WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	Windows explorer	explore.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	windows explorer32	explorer32.exe	Added by the W32/Sdbot-CVQ WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	windows file explorer (explorer)	ssms.exe	Added by the W32/Tilebot-EN WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	windows firewall (masry)	msgupdater.exe	Added by the W32/Sdbot-ADZ WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windows Firewall Services	iexplore.exe	Added by a variant of the Sdbot-ABA worm! NOTE: this file is located in the Windows folder while the
X	Windows Genuine Advantage Registration Service (net32a)	net32a.exe	Added by the Backdoor.IRCBot.st Identified by ewido. WORM! Note: This worm rojan is located in C:Win
X	Windows Genuine Advantage Registration Service (wgareg)	wgareg.exe	Added by the Win32/Cuebot.J WORM! Exploits the MS06-040 Windows vulnerability. Note: File located in
X	Windows Genuine Advantage Validation (wgav)	wgav.exe	Added by a variant of Win32/IRCBot.OO as reported by NOD32 TROJAN! Note: located in C:WINDOWSsystem3
X	Windows Genuine Advantage Validation Monitor (wgavm)	wgavm.exe	Added by the W32/Cuebot-M WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WI
	Windows Genuine Advantage Validation Notification
X	Windows Help (shit)	mailinfo.exe	Added by the W32/Forbot-FK WORM!
X	Windows Host Services (DLLHOST32)	dllhost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	Windows HWinfo Loader (Windows HWinfo Loader)	iexplre.exe	Added by the W32/Rbot-ALS WORM!
X	Windows IMAP Shell	imaped.exe	Added by the Backdoor.SDBot.F7B46034 TROJAN! Reported by BitDefender
L	Windows Installer	MsiExec.exe	executable program of the Windows Installer
X	Windows Internet Control (Windows Internet)	internet.exe	Added by the WORM_SDBOT.ABT WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows Internet Service	iexplore.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windows
X	Windows Internet/Server (Internet)	winlogo.exe	Added by the Troj/GrayBrd-AC TROJAN! Note: This trojan file is found in the SystemRavExt (95/98/ME)
X	Windows Kernel	svchost.exe	Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm rojan is located in C:Wi
X	Windows Kernel (Windows Kernel)	svchost.exe	Added by the W32/Rbot-ANO WORM! Note: This is not the legitimate Windows Process. (Which is found in
X	Windows Kernel Services	winlogon.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR% Do
X	Windows Kernel System Service	wkssvc.exe	Added by the W32.Spybot.YXX WORM! Note: This worm rojan is located in C:%WINDIR%System32dllcache (XP
?	Windows LAN Service Manager	svchost.exe	Unknow origin
X	Windows Log	nvsvcd.exe	Added by the BackDoor-CXT TROJAN! Note: located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP
X	windows logon	winlogon.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows lsass Service (lsass)	lsass.exe	Added by the W32/Rbot-AGD WORM! Located in C:WINDOWSlsass.exe (9XXP) or C:Winntlsass.exe (NT2000) No
X	Windows Management (Windows Management)	svchost.exe	Added by the Troj/Feutel-AN WORM! Note: This is not the legitimate Windows process(Which is always f
X	Windows Management Construct (winmgmc)	winmgc.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
	Windows Management Instrument Driver Includes
L	Windows Management Instrumentation	WinMgmt.exe	used by system administrators to create Windows management scripts
X	Windows Management Updater (WinManUpdater)	smss.exe	Added by the Troj/Kaos-E TROJAN! Note: This worm rojan is located in C:%WINDIR%
L	Windows Media Connect Service (WMConnectCDS)	wmccds.exe	Related to Windows_Media_Connect Service v2. Windows Media Connect is a Microsoft technology which e
X	Windows Messenger	msnmsgr.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This is not the legitimate Windows Proce
X	Windows MS Update 32 (Win32)	sucker.exe	Added by the W32/Forbot-GJ WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	windows mssql	mssql.exe	Added by the W32/Tilebot-HZ WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Windows NetDDe (shit)	wrmana32.exe	Added by the W32.Mytob.IM WORM!
X	Windows Netlib Service (CSRS)	netlib32.exe	Added by the W32/Tilebot-IG WORM! Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP
X	Windows Network Controller	WinGmt.exe	W32/Sdbot-MG trojan
X	Windows Network Latency Controller (nlc)	sp2vc.exe ( or 1.tmp nlc.exe)	Added by a Generic_Password_Stealers TROJAN! Note: This worm rojan is located in C:WindowsSystem (Wi
X	Windows Network Mapping Service (NetMap)	svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. This worm rojan is located in C:%WINDIR%system
X	Windows Network Security Management Service (nsms)	nsms.exe	Added by the Troj/Ranck-ET TROJAN! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:
X	Windows Network Security Service (lsass)	lsass.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows Networking Agent (Windows Networking Agent)	msuls.exe	Added by the Troj/Kwoo-A TROJAN! Note: This worm rojan file is found in the System32 folder.
X	Windows NT	winlogon.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows NT Logon Application (WINLOGON)	winlogon.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	Windows NT Session Manager	smss.exe	Microsoft Windows NT Session Manager
X	Windows NT Session Manager (SMSS)	smss.exe	Added by the Backdoor.IRCBot.rh as identified by ewido. Note: This worm rojan is located in C:%WINDI
X	Windows NT Session Managers	smss.exe	Added by the W32/Sdbot-CPN WORM! Note: This worm rojan is located in C:%WINDIR% Note: not to be conf
X	Windows Object Manager	smss.exe	W32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
X	Windows Object Manager	lsass.exe	W32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
X	Windows Object Manager	winlogon.exe	W32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
X	Windows Object Manager	csrss.exe	W32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
X	Windows Object Manager	services.exe	W32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
X	Windows Overlay Components	(Random).exe	Reported as the Trojan-Dropper.Win32.Agent.tb TROJAN! by Kaspersky Anti-Virus. Note: This trojan fil
X	Windows Packet Driver (packet)	packet.exe	Added by the Troj/Hwbot-C TROJAN! Note: This trojan file is found in the System32 folder.
X	Windows PE Debugger	lviss.exe	Added by the W32/Sdbot-COT WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%W
X	Windows Process Moniter (Windows Process Moniter)	winmon.exe	Added by the SDBOT.BYV WORM! Also drops winmon.sys which is a root kit. Note: This worm file is foun
X	Windows Process Viewer (The Windows Process Viewer)	winlogon.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows Product Activation (wpa)	wpa.exe	Added by the W32.Esbot.B WORM!
X	Windows Produre Call (MSRPC)	msrpc.exe	Added by the W32/Sdbot-AEI WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
	Windows Protected Content Restoration Service
X	Windows Reg Service	lsyss.exe	Added by the W32/Tilebot-HH WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows Register Control	register.exe	Added by the W32/Tilebot-GO WORM! Note: This worm rojan is located in C:%WINDIR%
X	Windows Remote Manager	lsiss.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
	Windows Remote Procedure Call Monitoring Service
X	Windows RPC Services (winrpc)	winrpc.exe	Added by the W32.Spybot.ACDM WORM! Note: This worm file is found in the Windows or Winnt folder.
X	Windows Security Drivers (csrs)	svchost.exe	Added by an unknown TROJAN! Note: This has nothing to do with Microsoft Windows Update and this is n
X	Windows Security Drivers (csrs)	csrss.exe	Added by an unknown TROJAN! Note: This has nothing to do with Microsoft Windows Update and this is n
X	Windows Security Manager	vcmon.exe	Added by the W32/Tilebot-IC WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows Security Update	secupd.exe	http://www.sophos.com/virusinfo/analyses/trojsepucb.html
X	Windows Server Management Service	netsvc.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows Service Manager (WSCM)	service.exe	Added by the Backdoor.Agent.zb as reported by ewido suite. Note: located in C:WindowsSystem (Win9x/M
X	Windows Services Configuration	lsvss.exe	Added by the Backdoor.SdBot.aad as identified by ewido.WRM! More here
X	Windows Smrss Service	svchost.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows Smrss Service (Windows Smrss Service)	smrss.exe	Added by the W32/Tilebot-X WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windows Smrss Service (Windows Smrss Service)	cmdpipe.exe	Added by the W32/Tilebot-AE WORM! Note: This worm rojan file is found in the Windows or Winnt folder
	Windows Socket 2.0 Non-IFS Service Provider Support
X	Windows Socket System Service	wksrvs.exe	Added by the Troj/IRCBot-RC WORM! Note: This worm rojan is located in C:WindowsSystemdllcache (Win9x
X	Windows Spooler (winspool32)	spool.exe	Added by the W32/Sdbot-ADP WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windows Sql Service For Windows 32 Bi (WinSql)	winsql32.exe	Added by the W32/Forbot-FC WORM!
X	Windows Stability Route (WSR)	construct.exe	Added by the SDBOT.COO WORM! Read the link rootkit type stealth involved.
X	Windows System Controller	System.exe	Added by the WORM_SDBOT.BLC WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Windows System Host	sychost32.exe	Added by the Troj/Agent-MD TROJAN! Note: This worm rojan is located in C:%WINDIR% More here
	Windows System Service Framework (WSSF) (Windows System
X	Windows System Tray (WINTRAY)	wintray.exe	Added by the W32/Tilebot-EH WORM! Note: This worm file is found in the Windows or Winnt folder.
X	Windows System32 (mswin32)	MSUPD~.EXE	Added by the SDBOT.CCX WORM! Read the link rootkit type stealth involved.
X	Windows Task Manager	vcmon.exe	Added by the W32/Tilebot-HS WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	Windows Task Manager Service (tskman)	task.exe	Added by the W32/Tilebot-R WORM! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windows Task Scheduler (MSTASK)	mstask.exe	Added by an unidentified TROJAN! of the Sdbot family. Do not delete the mstask.exe file unless it's
X	Windows Taskbar Manager (wtaskbarmngr)	taskbarmngr.exe	Added by the W32/Sdbot-XB or W32/Rbot-ZO WORM! Note: This worm file is found in the Windows or Winnt
X	Windows TCP/IP Socket Driver (winsck)	csrss.exe	Added by TROJ_RANKY.HW TROJAN! Note: This worm rojan is located in C:%WINDIR%winsock This is not the
X	Windows Terminal Services	vcmon.exe	Added by the Haxdoor.Fam HAXDOOR! Note: Located in C:WindowsSystem (Win9x/Me) C:%WINDIR%System32 (XP
X	Windows Time Sync (wservtime)	csrs.exe	Added by the W32/Tilebot-N WORM! Note: This is not the legitimate Windows Process csrss.exe. (Which
X	Windows Time Sync (wservtime)	csrss.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	Windows Tracks Washer Registry Service (WTWService)	washservice.exe	Added by Internet_Tracks_Washer Note: This is a Internet tracks cleaning tool.
X	Windows UDP Communication (wudpcom)	wudpcom.exe	Added by the IRC-Mocbot TROJAN! Note: This trojan file is found in the System32 folder.
X	Windows Updata Server	Server.exe	Added by the Troj/Feutel-K TROJAN!
X	Windows Update (Windows Update)	winupdmon.exe	Added by the W32/Tilebot-AR WORM! Read the link rootkit type stealth involved.
X	Windows Update 32 (Win32)	slsys.exe	Added by the W32/Forbot-FT WORM! Note: This worm rojan file is found in the System32 folder.
X	Windows Update 32 (Win32)	winlogons.exe	Added by the W32/Forbot-FI WORM!
X	Windows Update 63 (ntupd64)	shupd64.exe	Added by the W32/Forbot-GA WORM! Note: This worm rojan file is found in the System32 folder.
X	Windows Update Client (WUClient)	upnphost.exe	Added by the W32.Janx WORM!
X	Windows Update Client (WUClient)	pnphost.exe	Added by the W32.Janx WORM!
X	Windows Update Client (WUClient)	winpnp.exe	Added by the W32.Janx WORM!
X	Windows Update Manager (UpdateManager)	updmgr.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%upda
X	Windows Update Manager Tool (UpdateManagerTool)	updmangr.exe	Added by the Troj/Ranck-EO TROJAN! Note: This worm rojan is located in C:%WINDIR%update
X	Windows Update Service	wuamgrd.exe	W32.SpyBot worm variant
X	Windows Update Service	cdfs.exe	Added by the W32/Tilebot-HG WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Windows Update Service	pwnsvc.exe	Added by the W32/Sdbot-ZW WORM! Read the link rootkit type stealth involved.
	Windows Update Service (Microsoft Windows Update
X	Windows update Service (updater)	wisvcc.exe	Added by the Troj/Orse-G TROJAN! Note: This trojan file is found in the System32 folder.
X	Windows update Service (updater)	winsvc.exe	Added by the SPYBOT-DB WORM!
X	Windows Update Service (UpdateSvc)	wuauclt.exe	Added by an unknown variant of a (backdoor raanky) TROJAN! Note: This worm rojan is located in C:%WI
X	Windows Updater (Win32Export)	win64tyt.exe	Added by the W32/Sdbot-CNH WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Windows Updater (Windows Updater)	inetinfo.exe	Added by the Troj/Sdbot-AMX TROJAN! Read the link rootkit type stealth involved.
X	Windows Updater (Windows Updater)	msnlive.exe	Added by the W32/Tilebot-CN WORM! Read the link rootkit type stealth involved.
X	Windows Updates (Windows Updates)	Windowsupdates.exe	Added by the SDBOT.CLU WORM! Read the link rootkit type stealth involved.
X	Windows UPnP Service (wupnp)	wupnp.exe	Added by the W32.Esbot.D WORM! Note: This worm file is found in the System32 folder.
L	Windows User Mode Driver Framework	wdfmgr.exe	Related to Microsoft Windows media player 10 and above. http://www.liutilities.com/products/wintasks
X	Windows VisFx Components	(Random)	Added by the Win32.Agent.mu Worm!
X	Windows Vista/NT Runtime Compatibility Service (ntrcs)	nrcs.exe	Added by the Backdoor.Ranky.X Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%WIND
X	Windows web messenger	Msmgs.exe	Added by the W32/Sdbot-BSL WORM! Note: This worm rojan is located in C:%WINDIR% folder.
	Windows Windows Sheduler (Microsoft Windows Scheduled
	Windows Workstation Service (Windows Workstation
X	Windows Workstation Services	windows.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Windows XP Advanced User Launcher	WINLOGON.EXE	Added by the SDBOT.CPV WORM! Note: This is not the legitimate Windows process WINLOGON.EXE (Which is
L	Windows XP FUS Manager	DPFUSMgr.exe	Related to DigitalPersona Inc.
	Windows XP Service Pack 2 Services (Windows XP Service
X	windows32	windows32.exe	Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm rojan is located in
X	WindowsF (FRundlll)	FRundlll.exe	Added by the Troj/GrayBird-Y TROJAN! Note: This trojan file is found in the System32 folder.
X	windowsnetwork (windowsnetwork)	winkernel32.exe	Added by the W32/Tilebot-BM WORM! Note: This worm file is found in the Windows or Winnt folder. Read
X	WindowsNod (WinNod)	winnod.exe	Added by the W32/Tilebot-CG WORM! Read the link rootkit type stealth involved.
X	WindowsSecurityManager	winsm.exe	Added by the W32.Antinny.AX WORM! Note: This worm file is found in the System32 folder. (NT/2000/XP)
X	WindowsService (WINSERVICE)	service.exe	Added by the W32/Tilebot-K WORM! Note: This is not the legitimate Windows Process. (Which is found i
X	WindowsSysBoo	mvsql.exe	Added by the W32/Tilebot-AN WORM! Note: Located in C:%WINDIR% Disables the automatic startup of othe
X	WindowsSysBoot (WindowsSysBoot)	winsys.exe	Added by the W32/Rbot-ARJ WORM! Note: This worm file is found in the Windows or Winnt folder.
X	WindowsSysBoot (WindowsSysBoot)	winsysnet.exe	Added by the W32/Tilebot-AF WORM! Note: This worm rojan file is found in the Windows or Winnt folder
X	WindowsVideo (WindowsVideo)	waudio.exe	Added by the Troj/Dupa-B TROJAN! Note: This worm rojan file is found in the Windows or Winnt folder.
X	Windws Backup	XPBackup.exe	Detected by Ewido as Backdoor.SdBot.xd. This worm file is found in the Windows or Winnt folder.
L	WinEncrypt service (wencrservice)	wentxp.exe	CryptArchiver file folder and drive encryption software for Windows.
L	WinFax PRO	WFXSVC.EXE	Symantec Corporation
X	winfws (winfws)	winfws.exe	Added by the W32/Sdbot-ABA WORM! Read the link rootkit type stealth involved.
X	Winlogin messenger	winlogin.exe	Added by an unidentified TROJAN! of the Sdbot family. This worm rojan is located in C:%WINDIR%system
X	winlogo (winlogo)	IEXPLORE.EXE	Added by the Troj/Singu-X TROJAN! Note: This worm rojan file is found in the System32 (NT/2000/XP) f
X	Winlogon Notify: drct16	drct16.dll	Belonging to Haxdoor??
X	WinMan (winmngr)	winmngr.exe	Added by the W32/Protoride-N WORM!
X	WinMedia (WinMedia)	msmedia32.exe	Added by the W32/Tilebot-BI WORM! Note: This worm file is found in the Windows or Winnt folder.
L	Winpower	Winpower.exe	Related to InstallAnywhere ZeroG Software is now owned by Macrovision. Note: located in C:Program Fi
L	Winpowermanager	manager.exe	Related to InstallAnywhere ZeroG Software is now owned by Macrovision. Note: located in C:Program Fi
L	Winpowermonitor	monitor.exe	Related to InstallAnywhere ZeroG Software is now owned by Macrovision. Note: located in C:Program Fi
L	WinpowerRMI	wpRMI.exe	Related to InstallAnywhere ZeroG Software is now owned by Macrovision. Note: located in C:Program Fi
L	WinPPPoverEthernet	WrOS.EXE	Related to Verizon OnLine ISP and iVasion a Routerware Company
L	WinProxy	WinProxy.exe	WinProxy proxy server
X	WinPwdReset	WinPwdHelper.exe	Added by the Trojan.RBot TROJAN!
X	WinRep (WinRep)	WinRep.exe	Added by the W32/Rbot-AFW WORM! Read the link rootkit type stealth involved.
X	WINS Client (RpcPatch)	dllhost.exe	Added by the W32.Welchia WORM! **Note - This service will be set to start automatically
X	Wins Update 32 (Win32)	services32.exe	Added by the W32/Forbot-FN WORM! Note: This worm file is found in the System32 folder.
X	wins(WINS) (wins)	winscntrl.exe	Added by the W32/Tilebot-FT WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
X	WinSec32 (~~~~)	dhcp.sys	Added by the Troj/Rawdoor-A TROJAN! Note: This trojan file is found in the System32 folder.
X	winsock32 (winsock32.exe)	winsock32.exe	Added by the W32/Rbot-FMX WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	winspd32dll (winspd32.exe)	winspd32.exe	Agobot Variant
L	WinSSHD	winsshd.exe	Bitvise's SSH Server
L	WinTab Service	WtSrv.exe	Windows tablet service driver
L	Wintab32	Wintab32.exe	Wintab Digitizer Services 32-bit Server App. This file is installed with the driver for the AceCAD d
X	WinTools for IE service	WToolsS.exe	Related to Adware.Huntbar. Advertising program
X	wintroters (wintroters)	wintroters.exe	Added by the Troj/GrayBrd-AJ TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
X	winupd	winupd.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
X	Win_Pigeon_Server (Win_Pigeon_Server)	Win_Server.exe	Added by the Troj/Feutel-N TROJAN!
X	Wireless Connection Configuration (wificonf)	mscarrt32.exe	Added by the W32/Oscabot-K WORM!
X	WksPatch	Svchost.exe	Added by the W32.Welchia.B or W32.Welchia.C or W32.Welchia.D or W32.Welchia.K WORM! **Note - Service
X	wkssvc (Windows Kernel Serivce)	wkssvc.exe	Added by the W32/Sdbot-AOR WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	wkssvc (Windows Kernel Serivce)	AIMClient.exe	Added by the W32/Tilebot-DP WORM! Note: This worm rojan is located in C:%WINDIR% folder.
X	Wlan1934 (Wlan1934)	wlan1934.sys	Added by the Troj/Dloader-TB TROJAN!
L	WLANKEEPER	WLKeeper.exe	Related to Intel Corporation
X	wlmsngr	wlmsngr.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windows
L	WLTRYSVC	wltrysvc.exe	ltrysvc.exe is a process belonging to the Broadcom Corporation Wireless Network Tray Applet which in
L	WLTRYSVC	bcmwltry.exe	Related to wireless networking in Dell computers
X	WmDmPsp	sysdtc32.exe	Added by the Ircbot_Gen Worm! Note: SYSDTC32.EXE may use 13 or more path and file names read the lin
X	WMFhotfix912840 (Microsoft Windows WMF hotfix 192840)	enu-hotfix912840.exe	Added by the WORM_OPANKI.CG Note: This worm rojan is located in C:%WINDIR% folder. &VName=WORM_OPANK
L	WMI Performance Adapter (WmiApSrv)	wmiapsrv.exe	Related to Microsoft_WMI performance adapter which collects information regarding performance. Note:
X	wmp	wmp.exe and wmp.cfg	See Viruslist Owner unknown : C:Program FilesWindows Media Player
?	wnjfuo
L	Wonderware NetDDE Helper (WWNetDDE)	wwnetdde.exe	Related to ArchestrA Software architecture for the integration of your automation systems.
L	Wonderware SuiteLink (slssvc)	slssvc.exe	Related to ArchestrA Software architecture for the integration of your automation systems.
X	wordpad (wordpad)	wordpad.exe	Added by the W32.Spybot.WON WORM! Note: This is not the legitimate Windows application Wordpad.exe.
X	Work Station Development (NTDEV)	ntdev.exe	Added by an unknown variant of a backdoor TROJAN! Note: This worm rojan is located in C:%WINDIR%
X	Working Network Connections	hicom.exe	Trojan-Proxy.Win32.Agent.cx
X	Working Network Connections (TY164)	hicom.exe	Added by the Troj/Chimo-F TROJAN!
X	Workstation (MSDCSRV32)	mssrv.exe	Added by the PWSteal.Drorar TROJAN! Note: This trojan file is found in the Program FilesCommon Files
L	Workstation Manager (ZFDWM)	wm.exe	Related to Novell_Workstation_Manager From Novell Inc. Note: Located in C:Program FilesNovellENwork
X	Workstation NetLogon Service	random	CoolWebSearch malware
X	Workstation NetLogon Service ( 11Fßä #•ºÄÖ`I)	(Random).exe	CoolWebSearch malware.
X	Workstation NetLogon Service (11Fßä #•ºÄÖ`I)	(Random)32.exe	CoolWebSearch malware.
X	Workstation NetLogon Service(11FÃŸ#Â·ÂºÃ„`I)	crzw32.exe	CoolWebSearch HiJacker Service R1=res:xxxx.dll/sp.html
X	Workstation Service Library (Microsoft Locator Service)	wkssvc.exe	Added by the W32/Sdbot-ABE WORM! Read the link rootkit type stealth involved.
X	WPA	svchosts.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%
L	WPS Scanner Service (WPSScannerSvc)	WPSScannerSvc.exe	Related to Skyhook_Wireless Wi-Fi positionning system. Note: Located in C:Program FilesSkyhook Wirel
X	WRM CPU drive (wrmdrv)	WRMDRV.SYS	Added by the GOLDUN.B WORM!
X	WS2IFSL	(Unknown)	Added by the Trojan.Riler.E TROJAN!
X	wsmv(wsmv) (wsmv)	wmsv.exe	Added by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:WindowsS
X	wto (wto)	G_Server2.0.exe	Added by the Troj/GrayBrd-BN TROJAN!
X	wuam	WUAMPR.EXE	Added by the SDBOT.CKP WORM! It also drops the file X5.SYS detected by Trend Micro as TROJ_ROOTKIT.S
L	WUOLservice (WUOLService)	WUOLService.exe	Related to Novel Inc.
L	WUSB54Gv2SVC	WLService.exe	Related to Linksys Wireless-G USB Wireless Network Monitor
X	Wut Nigga	syswork.exe	W32/Forbot-FZ will add this the display name is: Working System Analyzer
L	WZCBDL Service	WZCBDLS.exe	File associated with D-link software
L	X10 Device Network Service (x10nets)	x10nets.exe	X10 video streaming devices. This program is non-essential process to the running of the system but
X	X5	X5.SYS	Added by the TROJ_ROOTKIT.S TROJAN! Read the link rootkit type stealth involved.
X	xadz	random	Related to Backdoor.Exdis
X	XCP CD Proxy (CD_Proxy)	CDProxyServ.exe	This is the Sony-BMG ROOTKIT! Do not try to manually remove this! For more information check Mark Ru
L	xElevate Service	xElevate_a4c3.exe	The Boeing Company (internal use)
L	xElevate Service	xElevate_a4c3.exe	For Internal Use - The Boeing Company
X	XP Backup (Smart XP)	smtxp.exe	Added by a variant of Backdoor.Win32.SdBot.aad TROJAN! Note: This worm rojan is located in C:Windows
L	Xpoint Admin Server (XPadminServer)	xpadmin.exe	Part of the IBM/XPoint Rapid Restore utility. File is found in the C:Program Filesxpointxpadmin fold
L	Xpoint Agent Server (xpAgentServer)	Xpagent.exe	Part of the IBM/XPoint Rapid Restore utility. File is found in the C:PROGRA~1xpointagent folder.
L	Xpoint PCRadmin Server (PCRadminServer)	pcradmin.exe	Part of the IBM/XPoint Rapid Restore utility. File is found in the C:Program FilesXpointPE folder.
X	xprtect (xprtect)	xprtect.sys	Added by Adware-DigitalNames
L	XtreamLok License Manager	xl.exe	Related to XtreamLok prevents software being reverse engineered. Note: Located in C:%WINDIR%System32
X	XXXCodec Service (XXXCodec Acceleration Service)	casrv.exe	Added by Trojan-Downloader.Win32.Small.czh Identified by Kaspersky. TROJAN! Undesirable service as i
X	Yahoo Updater (Updater)	Messenger.exe	Added by the W32/Forbot-FU WORM! Note: This worm rojan file is found in the System32 (NT/2000/XP) fo
X	yak tw (yak tw)	yak_tw.exe	Added by the Backdoor.Graybird.M TROJAN!
L	YATS32 Service (YATS32)	yats32.exe	related to YATS32 Time Synchronization applications for desktop or corporate LANs.
L	YEDIEx	YEDIEx.exe	Related to Y-E_Data ExpressCard Reader
X	Yndbybmh	Yndbybmh.sys	Added by the Backdoor.Darkmoon.B TROJAN! Note: This trojan file is found in the System32drivers fold
L	YPCService	YPCSER~1.EXE	Related to Yahoo
X	yvlymxmnibna	yvly.exe	Malware service presumably random filename is service name reversed
X	yvlymxmnibna - Unknown owner -	mxmnibnayvly.exe	Malware servicepresumably randomfilename is service name reversed
X	Ywvpysxl (Ywvpysxl)	Ywvpysxl.sys	Added by the Troj/Psupda-A TROJAN!
X	YY_Serer (YY_Sererwin)	YY_Serer.exe	Added by the Troj/GrayBird-S TROJAN!
X	ZESOFT	zeta.exe	Related to BargainBuddy/BullsEye variant. Also appears often with VX2
X	ZESOFT	zeta.exe	Seems to be a BargainBuddy/BullsEye variant. Also appears often with VX2...
L	ZipToA	ZipToA.exe	Related to Iomega Backup
L	ZipToA	ZipToA.exe	related to Iomega Backup
X	zonealarm (iexplorer)	Removeme.EXE	Added by the W32/Forbot-BG WORM!
X	Zykheptd	Zykheptd.dll	Added by the Backdoor.Hesive.B TROJAN! Read the link rootkit type stealth involved.
X	zzzxIPSPEC	zzzxt2llso.exe
X	zzzxIPSPEC_1 (zzzxIPSPEC_1)	zzzx[random characters].exe	Added by the Netdepix.B TROJAN!