Added by the CUYDOC TROJAN!

C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer

C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs

CYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser

Cyber Sentinel - internet filtering software

Added by the MEDIAKILL.A WORM!

NetRatings software by Opistat. "OpiStat measures Internet usage anonymously and surveys participants according to their profiles and online habits". This software has been reported to get downloaded and installed automatically after a Grokster install. It anonymously collects your use of the Internet protocols (sites visited, Web pages, advertisements seen, electronic commerce, streaming). To be avoided!

Pop Marketing adware

Pop Marketing adware

Unicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery, hardware inventory, network inventory, software inventory, configuration management, software usage monitoring, license management and extensive cross-platform reporting

eTrust(tm) EZ Antivirus system tray application from Computer Associates

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Ignite Technologies (was CABC) content delivery software

CacheBoost "optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers, resulting in a performance boost"

Added by the DLOADER-NZ TROJAN!

Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up

Sophos Antivirus Remote Update

CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache

CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache

Cash A Check - check writing software

Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"

Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices

Cyber Sentinel - internet filtering software

CafeSuite is the solution for your internet cafe. Our software provides you with ameans to control the workstations, manage customer database, sell products and generate detailed reports and statistics

CA Personal Firewall - part of the CA Internet Security Suite

Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents

Added by the KAKWORM WORM!

The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details. Run manually when needed

DIYNet adware

Part of Computer Associates eTrust EZ Antivirus

Computer Associates Dashboard Tray applet

Produces a pop-up reminder of events scheduled using the MS Office Calendar

Added by an unidentied WORM or TROJAN!

Added by the SPYBOT-EC WORM!

Calendar 200X - shows holidays, reminders of various anniversaries,tasks etc

Calendarscope calendar software

Added by the STARTPA-FH TROJAN!

Added by the SPAMMIT-H TROJAN!

Related to the Gazel 128 PCI ISDN adapter. Required if you use it

V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications. Main application

V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications. Fax printer

FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows

NuCam camera software related

Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version

From HP and related to digital imaging

Known to be a dialler - but is it maliscous or clean?

Canary keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the RBOT-LV WORM!

Added by the RBOT-NA WORM!

Cannon Multi-Pass status monitor - your choice

Cannon printer related - is it required in startup?

Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs

Printer software for Canon Bubblejet printers

Part of the printer software for Canon Bubblejet printers. What does it do and is it required?

Canon driver, purpose unknown. Is it required in startup?

CA Personal Firewall - part of the CA Internet Security Suite

PhoneTools fax software

CA Personal Firewall - part of the CA Internet Security Suite

Citibank Citianywhere software

Canon printer driver

Canon printer driver

Added by the ZAR.A WORM!

Added by the THEEF-B TROJAN!

Capture Express - screen capture utility

Carbonite's online backup service starts automatically and works quietly and continuously in the background protecting your data

For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs

TopMoxie adware

Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is, thanks to over 200 company profiles from Coop America. Saves 1 square foot of rainforest every day you use it. If it works and you like it, keep it

Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example

Added by the BANKER-AN TROJAN!

Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example

Added by the DLOADER-QD TROJAN!

Added by the DADOBRA-DV TROJAN!

Added by the DLOADER-QN TROJAN!

CasinoClient adware

CasinoClient adware

Program by Extended Systems which allows you to sync your Casio PDA with your PC

Added by the RANDEX.BE WORM!

Malware causing p0rn popups

Malware causing p0rn popups

Part of eXact Advertising Software, consisting of "CashBack by BargainBuddy", BullsEye Network and NaviSearch

CASHFIESTA.A pay-per-surf adware

Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"

CashToolbar Downloader-MY adware

CashToolbar Downloader-MY adware. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Added by the RBOT-FZO WORM!

Added by the KREPPER-AI TROJAN!

SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as a variant of the KREPPER TROJAN!

Added by the CASS-A TROJAN!

Added by the RBOT.DMW TROJAN!

eTrust(tm) EZ Antivirus Real Time Infection Report from Computer Associates

Cheyenne (now eTrust) antivirus

Added by the CAZNO TROJAN!

Added by the PENTA-A TROJAN!

Required for Bitware to answer incoming faxes, can cause sleep mode problems

Required for Bitware to answer incoming faxes, can cause sleep mode problems

Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop

Comet Cursor adware

Probably a variant of MediaTickets adware. Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in a "mduu" subfolder, which may change

Part of Norton AntiVirus. Auto-protect and E-mail check will not function without this

Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus

Added by the RBOT-LJ WORM!

Added by the RBOT-LJ WORM!

Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the KANGAROO-A TROJAN!

Added by the KANGAROO-B WORM!

Added by the GANBATE.A WORM!

Project Labs Century CD manager for their CD/DVD storage device

Part of the closed caption decdoder/MS VBI codec. Should only run once

Checks your system to make sure it's configured properly for running IBM Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product

RAV AntiVirus

Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this

Added by the RBOT.GZ WORM!

Added by the NEMSI-B VIRUS!

Searchq adware

CCleaner - removes unused files from your system

Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!

Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder

Part of Norton Internet Security, proxy server that is used to support the parental controls. If you turn parental controls off at user level the process is not loaded. Reported to cause excessive CPU usage

Added by the SHIPUP-H WORM!

Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall

Added by the ZCREW TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System subfolder

Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the STAP-C WORM!

Part of Norton AntiVirus 2004. What does it do?

Added by the STARTPA-HP TROJAN!

Part of CA Internet Security Suite

Added by the AGOBOT.YS WORM!

In Loco Parentis remote surveillance software. Uninstall this software unless you put it there yourself!

Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

System Tray access to Child Control parental control software by Salfield

CD Storage Master - a program designed to catalog CD information, boasts a number of handy features for organizing your collection

Premium rate adult content dialler

C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually

Added by the GEMA TROJAN!

Added by a variant of the CRYPTER.C TROJAN!

CD indexer for measuring the speed of CD players

CNNIC Update pest

Added by the DELF.WG TROJAN!

Added by the BATTRY-A TROJAN!

Added by the SPYMON TROJAN!

Detected by Kaspersky as the IRCBOT.AEX TROJAN!

On HP PCs, this is the small CD icon next to the time

Hot Key utility included on Toshiba Satellite laptops

Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed, Monitor Shut Off, Hard Drive Shut-Off, Monitor Brightness, System Stand-by and System Hibernate times

??

Added by the KERGEZ.A WORM!

Added by the BOFRA.A WORM!

Added by the BANCOS.J TROJAN!

??

SafeSign Certificate Registration Utility for Microsoft Crypto applications

Related to Gemplus Card Reader

Aladdin eToken authentication and password management

CesarFTPd - FTP server

CnsMin (Chinese Keywords) hijacker related

Added by the BIFROSE-AK TROJAN!

BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs

WINMUSCHI dialler

Added by an unidentified WORM or TROJAN!

Configuration Interpreter - part of Tiny Personal Firewall V4

BookedSpace parasite

BookedSpace parasite

Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it

cFos DSL Modem driver related. What does it do and is it required?

cFos DSL Modem driver related. What does it do and is it required?

cFos Software Internet acceleration program related. Note - may be necessary for the software to work properly

Belongs to Toshiba's configfree utility and searches for Wireless Devices

Added by the SOWSAT.C and SOWSAT.J WORMS!

Surfenhance.com SearchForIt adware variant

Added by the BROPIA-U WORM!

Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs

Added by the LALA.B TROJAN!

Added by the RBOT-AEI WORM!

Chameleon Clock - system tray clock replacement

Added by the SDBOT.ZD WORM!

Card reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem

??

Chatango - "allows people to be connected in real time through their Web browsers. Include your Chatango contact link or button when you create eBay auctions, blogs, personal websites, Friendster profiles, and your visitors will be able to contact you instantly, without downloading anything, or registering. Alo use it to send email to your friends, allowing them to respond to you in real time!." The 'MessageCatcher' icon in the System Tray notifies you when you get a message. When you get a message, a little alert pops up, which you can click on and start chatting immediately

ChatStat from ChatStat Technologies, Inc. Provides live chat assistance in up to 16 languages allows your operators to be more productive

IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"

Covert Sys Exec malware variant

Added by the ADENU-B VIRUS!

Added by the SHODI.B VIRUS!

Added by the VB-DRN WORM!

Checks for updates for Visioneer OneTouch scanners

Interactive Brokers - check for update to their standalone Java-based trading platform

Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account. Qchex appear to be no longer in buisness

Check&Get from ActiveURLs. Manages your browser bookmarks and favorites. Monitors Web sites for changes and updates, captures and highlights the changed contents

Update checker, part of CustomWorks - "customize any embroidery designs to design your own unique creations"

Added by the CheckDialer modem connection monitoring tool

Added by the VAGON-A TROJAN!

Added by the SMALL-CSK TROJAN!

CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify

CheckIt 86 popup blocker

Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.

EliteBar adware

Added by the MULTIDR-ER TROJAN!

Added by the AEBOT.K WORM!

Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?

Driver for the I/OMagic Personal Video Recorder (DR-PCTV100)

Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys

Child Control parental control software

Added by the ENVID.O WORM!

Chinese language support software

ChipDrive Smartcard software

ChipDrive Smartcard software

Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"

Added by an unidentified WORM or TROJAN!

Added by the ANPES WORM!

Mail-checking program supplied with Acer notebooks

Added by the CHOKE WORM!

Added by the QQPASS-U TROJAN!

Added by the BANPAES.C TROJAN!

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol , vol-, mute, etc. Only required for extended features

Christmas Music Player brings the music of the Christmas Holiday to your desktop

Related to this. Don't know what keysh.exe does though and if it's required

??

Chronograph is a simple utility that synchronizes internal computer clock to the atomic time. Chronograph automatically maintains correct time using atomic clock servers of the National Institute of Standards and Technology (NIST)." Shows seconds and shows the date without having to hover the mouse. Shows a calendar when hovered over

Added by a VIRUS!

Added by the LINST TROJAN!

Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7

Cingular Communication Manager - now taken over by AT&T. "provides a robust set of wireless communication tools for businesses and individuals. With wireless access to email, the Internet, business applications and corporate intranets, mobile users can be more productive while they're out of the office"

ChatItOut webcam chat program

Cisco VPN Client - lets local users gain Administrator privileges on the operating system

Sets up IPSec communications for Cisco's VPN Client

Related to internet setup on Compaq PC's

Added by the CISSI.A WORM!

Citibank Virtual Account Numbers - "With this free service for Citi cardmembers, you never have to give out your real credit card number online"

Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again

Added by the Adware.FFToolBar adware toolbar

Canon printer BJ status language monitor

ClamWin antivirus

Switch adult content dialler

Switch adult content dialler

Switch adult content dialler

Switch adult content dialler

Switch adult content dialler

Switch adult content dialler

Switch adult content dialler

Added by the AGENT.CBA TROJAN!

Added by the AGENT.ES TROJAN!

Added by a variant of the Covert Sys Exec TROJAN!

CLCL clipboard caching utility

Added by the AGENT-FPY TROJAN!

??

Apparently Annex A ADSL modem related. What does it do and is it required?

Automatic logging of installs from Norton CleanSweep - available via Start -> Programs

Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time

CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory

CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory

Internet Cleanup from Allume Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet

Used by McAfee Virusscan to perform product updates. When updates are available the program will download and install them automatically. Recommended to leave enabled

In a C:Sonysys folder - Sony Vaio related?

Added by the REFAZ WORM!

Added by the TACTSLAY.E TROJAN!

Added by the TACTSLAY.E TROJAN!

Added by the AGENT-BJ TROJAN!

ClickRadio - subscription service playing radio music via the internet

ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc

ClickM "JOKE" program

Clickoff automatically dismisses annoying dialog boxes

ClickTheButton Downloader-MY adware

ClickTheButton Downloader-MY adware! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

ClickTheButton Downloader-MY adware

Added by the OPASERV.T WORM!

IBM iSeries Client Access, see here

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources

Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?

Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources

IBM iSeries Client Access taskbar, see here

Added by the PPDOOR-N TROJAN!

Added by the PPDOOR-P TROJAN!

Added by the PPDOOR-J TROJAN!

Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?

Added by the SDBOT-BXQ WORM!

Added by the AGENT-HR TROJAN!

Added by a variant of the SDBOT WORM!

Added by the POEBOT-KR WORM!

Added by the SDBOT-LD WORM!

Added by the LINKBOT.M WORM!

Backdoor TROJAN! Possible SDBOT-GEN variant

Added by a variant of the OPANKI-A WORM!

ClientMan parasite variant

Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed

Added by an unidentified WORM or TROJAN!

Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks

Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs

Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs

Clip Mate 7 by Thornsoft - utility that allows you to store more than one item in the clipboard

Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data

Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks

Added by the SDBOT-AAV and SDBOT-AFE WORMS!

Added by the MOFEI-D WORM!

ClipTrak - clipboard extender

Cliptrakker - clipboard extender

Puts the ATI Catalyst(tm) Control Center Icon/Shortcut on the System Tray - available via Start -> Programs

System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost

??

LiveChat Adware - known file names include: mssetup.exe, kstatus.exe, spoolsv.exe, sptsupd.exe, osk.exe, msswchx.exe, netdde.exe, msbkup.exe

Added by the SDBOT-XM TROJAN!

ClockSync - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available

ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync

ClocX - places a clock on the desktop that can be moved and then changed into a calendar plus you can set alarms etc...

System tray for the now discontinued CloneCD. The only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions

From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it

System tray for the now discontinued CloneCD. The only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions

IBM Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?

Added by the PURSCAN-AI TROJAN!

ClearSearch adware

Adult content dialler

Adult content dialler

Adult content dialler

Adult content dialler

Adult content dialler

Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension

Added by the SILLYFDC-X WORM!

SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?

DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"

CasClient adware - also detected as the CMAPP TROJAN!

System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel

Added by the TANKED WORM!

Hijacker, also detected as the QURL-2 TROJAN!

CoolWebSearch Search X parasite variant

Added by the LINEAG-GKW TROJAN!

Added by the CRYPTER.A TROJAN!

Added by the BCKDR-QHY TROJAN!

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

CASClient adware

Driver for Linksys Wireless-G Music Bridge

One of the McAfee shared components. What does it do and is it required?

Added by the CMAPP TROJAN!

Added by the SMALL.CL TROJAN!

SystemDoctor is a security risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats

Registers the Control Panel applet for a C-Media PCI sound card

Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more". Installed with some Compaq and Lexmark printers

Added by the TOMPAI-D TROJAN!

Added by the TOMPAI-C TROJAN!

Added by the DELF.DU TROJAN!

Added by the DLOADER-EK TROJAN!

Added by the DLOADER-QQ TROJAN!

Added by the BANCOS.S TROJAN!

Added by the DLOADER-FP TROJAN!

Added by the DLOADER-WK TROJAN!

Part of NetNanny Chat Monitor

Added by the TCXMEDI-D downloader TROJAN!

Added by the TCXMEDI-D downloader TROJAN!

Added by a variant of the RBOT WORM!

Added by the BANCBAN-CQ TROJAN!

Added by the BANCBAN-GF TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the AGENT-CO TROJAN!

Added by a variant of the AGENT.EI TROJAN!

Added by the AGENT-Y TROJAN!

CASClient adware

Added by a variant of the CRYPTER.C TROJAN!

Related to Medion Display Information. What does it do and is it required?

Added by the GEMA.D TROJAN!

Added by the MIMAIL.G WORM!

Added by the BIFROSE-PR TROJAN!

Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing

Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops

Added by the MIMAIL.D WORM!

Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%

CnsMin (Chinese Keywords) hijacker related

Part of the Canon imagePROGRAF W8400 printer management software

DLink, Zoom, or Conexant modem driver

Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems

Cobian Backup is a backup program that can be executed in 2 ways: as a normal application or as a Windows Service. The program can schedule automatic backups for files and directories locally or to FTP servers and can use compression and encryption

CodeClean misleading spyware remover - not recommended, see here

Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"

Added by a variant of the SDBOT WORM!

Cognizance Corp Identity And Access Management suite

Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process

People Near Me Microsoft(r) Windows(r) Peer-to-Peer Networking platform for Windows Vista

Makes colours sharper and brighter, but will only work with coloreal capable monitors

From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor

Added by the BEASTY.H TROJAN!

Added by the BEASTY.G TROJAN!

Added by the BEASTY.E TROJAN!

Added by the BEASTY.I TROJAN!

Added by the BEASTDO-O TROJAN!

Added by a variant of the LOVGATE WORM!

Added by a variant of the SDBOT WORM!

Added by the FORBOT-BT WORM!

Added by the AGOBOT.SE WORM!

Added by a variant of the LOVGATE WORM!

Added by a variant of the LOVGATE WORM!

Added by a variant of the LOVGATE WORM!

COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)

Cactus Spam - free easy-to-use spam blocker

Privacy Mantra keeps your computer clean from online and offline tracks

ComAgent - MDaemon's instant messaging client

Added by the CHIMO-C TROJAN!

Added by the BOWFEED-A TROJAN!

Added by an IRC TROJAN variant!

Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs

Added by the TOADCOM.A TROJAN!

Adware - detected by Kaspersky as the AGENT.AM TROJAN!

Orvell Monitoring 2003 surveillance software. Uninstall this software unless you put it there yourself. Note - asks for permission to contact the IP address of http://www.protectcom.com/

G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself!

Added by the GATECRASH.A or GATECRASH.B TROJANS!

Added by the TITOG WORM!

Added by the QQPASS.E TROJAN!

Added by the AGOBOT-LG WORM!

Added by the ASSIRAL.B WORM!

Added by the LINEADI-A TROJAN!

Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!. Available via Start -> Programs

Part of Microsoft Office Communicator, which is an integrated communications client that allows information workers to communicate in real time using a range of different communication options, including instant messaging (IM), voice, and video

Comodo Firewall

WinAntiVirus 2006 virus software - not recommended, see here

Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information

For Compaq PC's. Part of Backweb

??

See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners"

See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners". * can be any digit

Compaq version of the Desktop Management Interface

Added by the SDBOT-WD WORM!

For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list

Added by the SDBOT-XR WORM!

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support. You decide

Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems

For Compaq laptops for programming user configurable keys. Not required unless you use them

Added by the SDBOT.BCV WORM! Please take note of the difference between the legitimate Compaq Fax Utility Name (A1000 Settings Utility) and the name (Compaq Print Fax) used by this worm

Added by the SDBOT-XC WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT.BBQ WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT.CQL WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT.ATV WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT-AFU WORM!

Added by the RBOT.BKT WORM!

Added by the RBOT.CIW WORM!

Added by the SDBOT-AGD WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.CQZ WORM!

Added by the SDBOT-XG WORM!

For Compaq PC's. MPEG viewer

Added by the SDBOT.BWH WORM!

Added by the SDBOT-ADC WORM!

Added by the RBOT.BVF WORM!

Running on a Compaq laptop - any ideas?

Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop

Added by the SDBOT.CSO WORM!

Added by a variant of the SDBOT WORM!

Compaq System Tray icon

Added by the GAOBOT.YN WORM!

Added by a variant of the SDBOT WORM!

VideoMate TV tuner and capture card - remote control driver

VideoMate TV tuner and capture card - scheduler

Added by the SDBOT-WX WORM!

3Com tray icon

TrojanGuarder is a security risk that may give exaggerated reports of threats on the computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported threats

Comtry MP3 Downloader related - spyware

Added by the COMXT TROJAN!

Added by the BRAVE-A TROJAN!

Added by the ISRAZ.B WORM!

Added by the CRUTCHA-A TROJAN!

Added by the SDBOT.H TROJAN!

Added by the SDBOT.H TROJAN!

Added by the GAOBOT.P WORM!

Added by the GAOBOT WORM!

Added by the GAOBOT.AE or GAOBOT.AO WORMS!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the AGOBOT.BD WORM!

Added by the GAOBOT.BT WORM!

Added by the AGOBOT-HN WORM!

Added by the SDBOT.T TROJAN!

Added by the GAOBOT.DJ WORM!

ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice

ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice

Part of initial setup on a Compaq PC

Added by the AGOBOT-AFP WORM!

Added by the SDBOT-ML WORM!

Added by the SDBOT-ML WORM!

Added by the SDBOT-VP WORM!

Added by the SDBOT-LN WORM!

Added by the SPYBOT-CA WORM!

Added by the FLUX.101 TROJAN!

Added by the MOEGA or MOEGA.AG or MOEGA.AP WORMS!

Added by a variant of the SDBOT WORM! Note - this is not the legitimate lsass.exe process

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by the GAOBOT.AF WORM!

??

Added by the GAOBOT.AN WORM!

Added by the GAOBOT.BF WORM!

Added by the GAOBOT.BZ WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the AGOBOT.BQ WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.FQ WORM!

Added by the GAOBOT.JB WORM!

Added by the GAOBOT.GEN!POLY WORM!

Added by the GAOBOT.RQ WORM!

Added by the GAOBOT.YC WORM!

Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS!

Added by the GAOBOT.AUS WORM!

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the AGOBOT.SR WORM!

Added by the AGOBOT.MB WORM!

Added by the AGOBOT.A3 WORM!

Added by the SDBOT-VR WORM!

Added by the SDBOT-XS WORM!

Added by the AGOBOT.BH WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT-YE WORM!

Added by the RANDEX.DXP WORM!

Added by the AGOBOT.ADG WORM!

Added by the RBOT-AGX WORM! Note - the executable is spelt with a lower case "L" rather than an lower or upper case "i" which is the case with Internet Explorer

Added by the AGOBOT-AAE and SDBOT.AR WORMS!

Added by the PARADROP-A WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Added by the AGOBOT.JR WORM!

Added by the SDBOT-OB WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT.BT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT-AFP WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT-KW WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup unless you add it manually! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the PARADROP-AI WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Added by the SDBOT.BHE WORM!

Added by the AGOBOT-PP TROJAN!

Added by the SDBOT.B TROJAN!

Added by the RBOT-YV WORM!

Added by the SDBOT-XY WORM!

Added by the AGOBOT-ANZ WORM!

Added by the GAOBOT.DK WORM!

Added by the AGOBOT-EC WORM!

Added by the SDBOT-WJ WORM!

Added by an unidentified WORM or TROJAN!

Added by the SDBOT TROJAN!

Added by the SDBOT TROJAN!

BookedSpace parasite

Added by the SDBOT-COH WORM!

Added by the TREB TROJAN!

Added by the SDBOT-YM WORM!

Controls linksys wireless connection. Available from the Desktop

NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)

Added by a variant of the HACKTACK TROJAN! Not to be confused with the legitimate MS "ISDN Configuration Wizard" (Cfgwiz32.exe)

Added by the SDBOT-BIC WORM!

Added by the SDBOT-FB TROJAN!

Starts Winfax pro at startup

Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut

Added by the SDBOT-DEX WORM!

Adult content dialler

Connection Keeper is an invaluable time-saving tool for dial-up users. This free program simulates Internet browsing (at a random interval) to prevent your connection from appearing idle, thus preventing your ISP from dropping your connection due to inactivity

SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service

Added by the LITEBOT-E TROJAN!

Added by the dialer.Nunci premium dialer

Added by the ExDial-B premium rate adult content dialer

Scheduler for updating Sony's CONNECT music download service

Hijacker - redirects to a p0rn portal, where foistware like ISTBar gets stealth installed

VX2.Transponder parasite updater/installer related

Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a SystemLevel4 subfolder

Added by the BANCBAN-ET TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "Central de Seguran‡a" subfolder

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Some kind of driver?

Added by the DIALER-Y TROJAN! Note - uses a random filename and random folders. Usually the folder containing the file is a Temp folder

MatrixDialer related

Homepage hijacker

BrowserAid/BrowserPal foistware

ContraVirus misleading spyware remover - not recommended, see here

CoolWebSearch Msconfd parasite variant

Related to an Asus WLAN card

CoolWebSearch parasite variant

CoolWebSearch parasite variant

Added by the KREPPER-AI TROJAN!

System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card

Added by the DANI TROJAN!

Added by the RBOT-FPI WORM!

Added by the TELEFO-A TROJAN!

Brother scanner 'Control Center' application - can be started manually

System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc

Added by the AGOBOT.GH WORM!

From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs

CoolWebSearch parasite variant

Added by a vairant of the DELF.DW TROJAN!

Added by the DLOADER-HF TROJAN!

Browser hijacker, also detected as STARTPA-FX

Added by the BIZVES-A TROJAN!

Added by the BIZVES-B TROJAN!

Browser hijacker, redirecting to loadcash.biz

Added by the DLOADER-OI TROJAN!

Added by the DLOADER-RA TROJAN!

WorldSearch adware

Added by a variant of the DLOADER-RA TROJAN!

Reported by Norman Virus Control as W32/Downloader. Creates the files sdfff, fdsf and zxczxc. In the C:WINDOWSSYSTEM32 directory creates the files d.exe, s.exe and r.exe

Added by the AGENT-XC TROJAN!

Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return. No longer being actively supported

CookiePatrol - cookie interceptor stopping spyware cookies that used to be part of PestPatrol before CA's aquisition

CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you

MatrixDialer related

CoolMon monitors vital system stats and almost anything else you wish to display on the desktop

MatrixDialer related

ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen

Cool Wallpaper software allows you to manage high quality photos as desktop wallpaper and screen savers

CoolWebSearch Smartsearch parasite variant

Copernic Desktop Search - "Easily search your entire hard drive in less than a second to pinpoint the right file, e-mail, music or pictures"

Copernic Desktop Search - search agent

Automatic tasking feature of Copernic Pro multi-search engine tool

Razer Copperhead mouse driver

Copy Handler lets you copy between hard disks, floppies, local networks, CDs, and many other storage media. Copy Handler gives you the power to pause, resume, restart, and cancel during the copying and moving processes

Displays copyright information on IBM ThinkPads

Added by the RBOT.CNI WORM!

Added by the RBOT.AGC WORM!

Added by the RBOT.CNJ WORM!

MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking

MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking

Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of the now defunct Corel Print Office

The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs

Corel Family & Friends - all-in-one calender, address book and list manager. Part of the now defunct Corel Print House Magic

Related to Corel Photo Album

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

Registration reminder for CorelDRAW 10

CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs

Added by the SDBOT-VZ WORM!

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Some IRC trojans/worms use this - see here for more information

??

Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available

Added by the RBOT-SW WORM!

NetInternals CostAware - download quota measuring tool

Added by the MEDBOT.AR WORM!

Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required

Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required

??

Adware - see here

Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition

For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons

One Touch keyboard driver. Required if you use the additional keys

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Found on a Compaq Presario but what is it?

Added by the RBOT-FOY WORM!

Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast

Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Firewall bundled with McAfee VirusScan 6.*

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Added by the WINTRIM_A TROJAN!

Added by the MAGICON.A TROJAN!

Added by the SIMCSS TROJAN!

Added by the WINTRIM-B TROJAN!

CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?

Compaq PowerCon power management software for laptops

Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information

See the entry for Compaq Message Server