Added by an unidentified WORM or TROJAN!

Added by an unidentified WORM or TROJAN!

Added by an unidentified WORM or TROJAN!

Added by the GINK WORM!

Added by the TIBIK-B TROJAN!

Added by the MYPOWER WORM!

Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard

Graphical interface for fan speed control

IAA Event Monitor User Notification Tool - part of Intel(r) Application Accelerator - "a performance software package for desktop PCs using select Intel(r) chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed

AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well

Added by the RANDEX.Y WORM!

Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?

InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the OPASERV.T WORM!

Added by the PERDA-C TROJAN!

Added by the LEGMIR-AH TROJAN!

IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire?

Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"

??

Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes

IBM application - what does it do and is it required?

Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops

Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?

IBM Password Manager

Added by the HIDEDIAL-B TROJAN!

IBackup for Windows

IBackup for Windows

Related to Citrix MetaFrame

Browser hijacker, redirecting to Searchforfree.info. Also detected as the ICASERV-A TROJAN!

Added by the ICcontrol premium rate adult content dialer

LZIO.com adware downloader

LZIO.com adware downloader

Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices

Added by the SDBOT.ZZH WORM!

IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"

Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail

iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist. Not related to the Mac icon program of the same name

Found on Sony Vaio and IBM Thinkpad (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games

Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons

Audio desktop customization utility from Moon Valley Software. Resource hog

Audio desktop customization utility from Moon Valley Software. Resource hog

RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Related to the Vista Customization Pack

APC PowerChute Tray Icon. Associated with the UPS listing

Small utility which will allow you the option of hiding or showing your desktop icons

Icon for LS-120 "Superdisk"

Added by the GAOBOT.AO WORM!

Iconoid is a desktop icon manager

IconSaver is a desktop icon manager

Added by the GORMLEZ-A WORM!

Added by the AGENT-FZJ TROJAN!

Added by the RANDIN WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the NETSPY TROJAN!

ICQ Lite - compact version of the popular messaging program

Added by the AGENT-DSF TROJAN!

Added by the IRCBOT-TJ TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory

Added by the SDBOT-ABL WORM!

Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!

ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs

Added by an unidentified TROJAN!

Added by the NETSKY-C WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder

Added by the RBOT-AVC WORM!

Added by the RBOT-AYO WORM!

Added by the RBOT-AYP WORM!

Added by the SDBOT-AER WORM!

Added by the RBOT-AYN WORM!

Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines

Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations

Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers

Added by the ILLNOTIFIER.D TROJAN!

Instant Chess related

Caller ID utility for identifying incoming telephone numbers

Added by the ID8525.A TROJAN!

Added by the ID8525.A TROJAN!

HP related - in a Program FilesHewlett-PackardPC COE folder

Added by the ASSASIN.F TROJAN!

Added by the XILON TROJAN! Related to the game "Diablo II"

Added by a variant of the CRYPTER.C TROJAN!

Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse

Internet Download Manager - download files faster, schedule and resume

Added by a variant of the SLAPER TROJAN!

Added by the BRONTOK-H WORM!

Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems

Added by the LINEAGE-C TROJAN! Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually!

IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"

Added by the AGENT-HD TROJAN!

Topconverting.com180Search "IEMenuExtension" toolbar

IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows

Added by the PICRATE.B WORM!

Added by the RBOT-ADZ TROJAN!

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

DesktopMedia adware

Added by a variant of the SDBOT WORM!

Added by the GAOBOT.DXO WORM!

Added by the RBOT-ATF WORM!

Added by the RBOT-GOV WORM!

AsdPlug premium rate adult content dialer variant

IEAccess premium rate adult content dialer variant

Added by the BOMKA TROJAN!

Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2

Added by the TIRBOT-D WORM!

Added by the TIRBOT-E WORM!

Added by the TIRBOT-G WORM!

IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup

Homepage hijacker, redirecting to coolwwwsearch.com

Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze

IEDriver adware variant

IEDriver adware variant

Added by the DLOADR-BBW TROJAN!

STARTPAG.AI hijacker

Added by the RBOT-GRE WORM!

Added by the POPMON.A TROJAN! - also known as PopMonster adware

Added by the POPMON.A TROJAN! - also known as PopMonster adware

Added by the RILER-H TROJAN!

Added by the BANKER-HH TROJAN!

Outwar adware downloader

LZIO.com adware downloader

LZIO.com adware downloader

Added by the SPEX or SPEX.B WORMS!

Browser hijacker - redirecting to an adult web page

LookNSearch adware

Added by the PWS-BLUEDIT TROJAN!

Added by the NEMOG.C TROJAN!

IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc

Added by the ASOXY TROJAN!

Adware downloader trojan

Added by the AGOBOT-QL WORM! Note the filename has a "0" rather than an upper case "o"

Added by the RBOT.AEX WORM! Note - this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot

Added by the IRCBOT.BT TROJAN!

Added by the INKER.B WORM!

Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the DLOADER-YZ TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in a "Custom" subfolder

Added by the DLOADR-AAM TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the "Arquivos de programasInternet ExplorerCustom" folder

Added by the BANKER-BWE TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup!

Added by the BANCOS-CJ TROJAN!

Added by the BIFROSE-C TROJAN!

Added by the BDOOR-BY TROJAN!

Added by the BANCOS-CH TROJAN!

Added by the JU or BANCBAN-IP TROJANS!

Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System folder

RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the BANCBAN-EN TROJAN!

Added by the RBOT.ABO WORM!

Added by the RBOT.ABN WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the CLAGGER-AG TROJAN!

Added by a variant of the SLAPER TROJAN!

I-FORCE driver for force feedback steering wheel

Added by the SDBOT.AQ TROJAN!

Added by the IRCBOT.R WORM!

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel

??

IGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be initialized through that browser

NewDial premium rate adult content dialler

Drive Letter Searcher, iRiver iHP-100 iHP and H Series player related - does it need to start with Windows every time?

Homepage hijacker

PurityScan/Clickspring adware

Added by an unidentified TROJAN or adware

Added by the AGENT-EOF TROJAN!

System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis

Printer utility which is required in order to make the printer work correctly

Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything

A4Tech wireless keyboard driver and utility

IKL surveillance software. Uninstall this software unless you put it there yourself

Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename

Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename

Intense Educational Ltd - Language Office Software. Is it required?

iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button

Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner

CoolWebSearch parasite variant

Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run

Sony Image Transfer software provides direct image transfer from your digital camera to a PC - can be started manually

Nero ImageDrive from Ahead - virtual CD/DVD drive software

ImageFox 2.0 (formerly available from ACDSee) is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes

Added by the GEMA TROJAN!

Added by the SDBOT-XB WORM!

Added by the DOWNDEL-A TROJAN!

Enables the iMarkup Client web page annotation utility to run in the background and be available in systray. Shortcut available via Start -> Programs

Imation Disk Manager - enables you to create a password protected area on your Imation USB flash drive

Added by an unidentified WORM or TROJAN!

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)

Imesh is a file sharing system

Update check for the Imesh file sharing system. Turn the update off under "options"

Added by the KEYLOG-AR TROJAN!

Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running

Added by the BANKER-EM TROJAN!

Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese). *.* represents the version number

Related to I-FORCE driver for force feedback steering wheel?

Added by the WEBDOR.AK TROJAN!

IncrediMail for Office Outlook Add-On

McAfee QuickClean 3.0 - removes internet clutter and unwanted programs

Added by the IMONI-A TROJAN!

System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards

IMNames adware

InterMute security software related

Added by the SLAPER.E TROJAN!

SafeSurfing adware variant

Added by the IMAV.A WORM!

Added by the BAGLEDL-BO TROJAN!

Ahead InCD packet writing software - similar to DirectCD. For Nero 5.0 or 5.5 (InCD3), it does not need to start with Windows. You can run InCD.exe manually before inserting an appropriately formatted CD-RW (CD-MRW) disk. For Nero 6.0, 6.3 or 6.6 (InCD4), it does need to start with Windows. It does not function correctly when you try to run it manually, and you will not have write access to MRW (Mount Rainier) formatted CD-RW (CD-MRW) or DVD-MRW disks. To regain write access and other features, InCD 4 must start with Windows

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

Added by the AGOBOT.CH WORM!

Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG

Added by the LAZAR TROJAN!

Associated with PaperPort scanner software from ScanSoft

Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents"

Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook, eg, when you press the hotkey for muting the sound, a loudspeaker icon with a cross on it is displayed

Added by the RBOT.BNL WORM!

Added by the QEDS WORM!

Inet Delivery adware

Inet Delivery adware

Added by the NETDEVIL.14 TROJAN!

Bsafe Online - internet filter

??

Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation

Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)

Added by the DONBOMB.A TROJAN!

Actual Names (AdvSearch) Internet Keywords parasite

Added by a variant of the SDBOT TROJAN!

Added by the WOCK32-A TROJAN!

Added by unknown malware. WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup. Infamous.exe is identified by Panda antivirus as Trj/Briss.A

Info Select from Micro Logic - personal information manager

Added by the GEMA TROJAN!

Added by the VUNDO TROJAN!

InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand

Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?

Detected by Kaspersky as the CENTIM.CH TROJAN!

System Tray access to infra-red devices. Not required unless you use infra-red devices

Adult content dialler

Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"

VX2.Transponder parasite updater/installer related

Added by the WINEX.A TROJAN!

EasySearch browser hijack installer

Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay

Added by the BINJO TROJAN!

Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line

Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line

Associated with eTrust Antivirus/InoculateIT

Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage

Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates

??

Kayako InstaAlert allows you to receive realtime alerts whenever a ticket gets updated under the assigned departments. The application displays popups as and when the tickets are created or replied to allowing you to answer your customer requests and issues promptly

InstaFinder adware

Added by the BANCBAN-HG TROJAN!

Added by the RELFEERWORM!

Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?

Used to initialize the Aureal A3D demos InstallShield wizard

InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync

Added by the ANYHOMB.F TROJAN!

Added by a variant of the LOVGATE WORM!

Malware - detected by Kaspersky as the AGENT.MM TROJAN!

Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?

WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended, see here

Added by a variant of the RANDON.AN WORM!

Tool for Outlook and Outlook Express from Plaxo for organising and keeping contacts organised and updated and providing online access to your contacts and access from PDA or mobile phone

Added by the Alasrou-A WORM!

Electronic_Group/InstantAccess premium rate adult content dialer variant

Electronic_Group/InstantAccess premium rate adult content dialer variant

Electronic_Group/InstantAccess premium rate adult content dialer variant

Electronic_Group/InstantAccess premium rate adult content dialer variant

Electronic_Group/InstantAccess premium rate adult content dialer variant

Electronic_Group/InstantAccess premium rate adult content dialer variant

InstantAccess premium rate adult content dialer

InstantAccess premium rate adult content dialer variant

Instant Buzz adware

From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner

Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration

Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration

From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs

Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software

Adult content dialler

Adult content dialler

Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually

Added by the OPASERV.H WORM!

Added by the OPASERV.K WORM!

??

SafeSurfing adware variant

Added by the SDBOT-ADN WORM!

Added by the RBOT-GLU WORM!

Added by a variant of the SDBOT WORM!

System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards

Detected by VBA32 as the BIFROSE.ADR TROJAN!

Added by a variant of the SDBOT WORM!

Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients

Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled

Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here

System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features

Added by the MSCONFIG16 TROJAN!

Added by the SPYRE-H TROJAN!

Added by the SPYRE-C TROJAN!

Added by the AGENT-EBT TROJAN!

Added by the RBOT.QGA WORM!

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. If the user wishes to have "HotKey" access to Intel's customised graphics properties, it is required, otherwise not. It can be disabled via the Display Properties in the Control Panel

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Not known exactly what it does but apparently it isn't required

Added by the SmitFraud alias SPYJACK-B TROJAN!

LANDesk Management Suite software component

Intel Audio Studio combines Intel(r) High Definition audio hardware features with Sonic Focus* Audio Refinement and Dolby* technologies to provide you with a comprehensive tool that puts you in control of your audio experience. Audio utility supplied with Intel motherboards

Advertisingvision adware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the SmitFraud alias Desktophijack.C TROJAN!

Added by the SPYJACK-B TROJAN!

Added by the Intelliflag SPYWARE!

Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features

For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them

Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line

Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here

Associated with the Intel PRO/Set Wireless software

Zero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel

Intense Educational Ltd - Language Office Software. Is it required?

Added by the ANACON-B WORM!

Part of Sophos ant-virus sofware

Part of Sophos anti-virus sofware

Added by the DELF family of TROJANS!

Added by the SMOTHER and TRANSLAT TROJANS!

Added by the FORTNIGHT.D TROJAN!

Added by the RBOT-GKT WORM!

Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP)

Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%

Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process. If you right-click on the real systray.exe the "Properties" reveal it to be a Microsoft file

Added by the NYRUBOT-A WORM!

Added by the CMJSPY-Y TROJAN!

Homepage hijacker, redirecting to coolwwwsearch.com; see for example here

Microsoft language selection icon in system tray, located in the System (Win98/Me) or System32 (WinNT/2K/XP) folder

Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (Win98/Me) or %windir%System32 (WinNT/2K/XP) (where %windir% is the Windows directory - C:Windows or C:Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon

Added by the GRAYBIRD.F TROJAN!

Added by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!

Added by the PWS-CS TROJAN!

Added by the RBOT-AJG WORM!

Added by the MIFENG-D TROJAN!

Added by a variant of the SDBOT WORM!

Added by the RBOT-GFJ WORM!

Added by a variant of the SDBOT WORM!

Added by the DSPY-A TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!

From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access

From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access

Added by the IRCBOT-WK TROJAN!

Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail

Added by the SDBOT TROJAN!

EasySearch adware

Added by the SMUTSRCH-A TROJAN!

Added by the DLOADR-AWD TROJAN!

Added by the RBOT-UD WORM!

Internet Download Accelerator download manager

Added by the RBOT-BMS WORM!

Added by the EVIAN.C WORM!

Added by the RBOT-AOF WORM! Note - the executable is spelt with a lower case "L" rather than an lower or upper case "i" which is the case with Internet Explorer

Added by the LORSIS WORM! Note - the legitimate IE (iexplore.exe) does not figure in Msconfig/Startup unless added manually and this loads from the "RunServices" key

Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the NETHIEF-O TROJAN!

Added as part of a new potential CWS infection, and part of a suite of programs that installs a web server, php, ftp server, socks, and mail server on your computer without your knowledge. These files are known to be part of an infection that transmits information about your bank accounts, passwords, and other financial information. It should be deleted immediately, you should enable your firewall, and you should contact your financial services in order to report the issue and to have your passwords changed

Added by the RBOT-AZC WORM!

Added by the SDBOT-UL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup unless you add it manually! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the RBOT-ALQ WORM!

Added by the DOWNLOAD TROJAN!

Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)

Internet History Eraser - deletes your browsing tracks

Added by the KWBOT.B WORM!

EasySearch adware

Added by the SMUTSRCH-A TROJAN!

Added by the DLOADR-AWD TROJAN!

Internet connection optimizer. Leave this enabled if you find it improves your connection

Internet Optimizer parasite, MoneyTree variant - ActiveX control used to download premium-rate dialers

Added by the RBOT-GFP WORM!

Added by the RBOT-GQL WORM!

Added by the RBOT-GML WORM!

Unidentfied adware

Added by the STARTPA-EM TROJAN!

Added by the SPYBOT-DE WORM!

Added by the RBOT-QS WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.EAT WORM!

Added by the SDBOT-PW WORM!

Added by the MYTOB.BT WORM!

Added by the RBOT.BNT WORM!

Added by the MYTOB.MN WORM!

Added by the KWBOT.Z WORM!

Intel AnyPoint internet sharing software. Now discontinued

Added by the WOOTBOT.HV WORM!

Internet Sweeper - removes unnecessart left over files after browsing the internet

Shareware dial-up connection call cost calculator from Ratsoft

Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003

Added by the MAGICCALL VIRUS!

Added by the YINI MACRO!

Added by a variant of the RBOT WORM!

Added by the SDBOT-CZP WORM!

Added by the RBOT-GRA WORM!

InternetShield misleading security software - not recommended, see here

Internet Spy - freeware keylogger that tracks all visited websites including the date and exact time these sites were visited. The information is stored in a file that may be accessed by the person who knows where it is saved. Remove unless you installed it yourself!

Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003

Added by the SDBOT.Q TROJAN!

Australian ISP's free monthly download meter

Added by the PEEPER or CARUFAX.A TROJANS!

Added by the AGOBOT-NW WORM!

InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business

Added by the IRCINTER.A TROJAN!

WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs

WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs

InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs

Added by the FORBOT-FL WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the GEMA TROJAN!

Added by the SPYBOT-DW WORM!

Added by the CHIMOZ.AC TROJAN!

Added by the LEMIR.E TROJAN!

MS Media Manager tour. Not required

For Compaq PC's. Should only run first time, PC Introduction & Compaq registration

Intruder Alert '99 from Bonzi - spyware

Added by the BANLOA-ASE TROJAN!

LANDesk Management_Suite software component

Added by the HAWAWI WORM!

iobi Home - a mail/voice service by Verizon

iolo AntiVirus

Iolo System Mechanic Task Agent. Scheduled maintenance

Iolo System Mechanic Utility Bar - can be launched manually

Part of Iolo System Mechanic. Used to delay the start of an application which loads automatically as Windows loads

Iomega Automatic Backup - automatic backups for use with Iomega portable HDD

Iomega Automatic Backup - automatic backups for use with Iomega portable HDD

Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs

Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running

Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running

Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system, and provides drag-and-drop file access, access and write protection, and formatting of the disks

??

Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs

Used by Iomega drives. Available via Start -> Programs

Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs

PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang

Added by the FORBOT.SM WORM!

Added by the AGOBOT.CW WORM!

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Installed with a Panasonic iPalm digital camera. Used to upload photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded

Added by the RBOT-AEG WORM!

Added by the SDBOT-ZC WORM!

Added by the SDBOT-BLU WORM!

Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN!

Added by the HACARMY.E TROJAN!

Added by a variant of the HACARMY.E TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the DLOADER-YF TROJAN!

AOL related. What does it do and is it required?

Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resources. * represents 1 or 2

Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. * represents 1 or 2

For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out

Related to iriver portable media products. What does it do and is it required?

Added by the RECERV or R3C.B TROJANS!

Maxifiles adware

Added by the INKER.B WORM!

IP Operator 2005 - found on LG Electronics Notebook. The applet makes network connections easier to view and manage than does the standard Windows Network Connections tool. The WLAN module is easy to turn on or off with the press of a single button

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM! Do NOT confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the Program FilesiPodbin folder, and is implemented as a system service, thus NOT listed in Msconfig/Startup!

Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods

Associated with Apple's iPod MP3 player. Detects when the iPod is connected?

Added by a variant of the FUROOTKIT TROJAN!

Added by a variant of the FUROOTKIT TROJAN!

Added by the SDBOT-WA WORM!

Added by the SDBOT-WH WORM!

Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos"

Added by the ZAGABAN-H TROJAN!

Novell(r) iPrint - based on Novell Distributed Print Services - enables you to send documents to printers located throughout the Net

iProtectYou - internet filtering/parental control and network monitoring software

iProtectYou spyware

Cisco VPN Client - lets local users gain Administrator privileges on the operating system

Cisco VPN Client - lets local users gain Administrator privileges on the operating system

Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet

Added by a variant of the RBOT WORM!

System Tray access to Intel Desktop Utilities - "provides you with the means to monitor system temperatures, voltages, fan speeds, and hard drive health; view detailed system information, and test your system hardware for common errors"

Added by the AGOBOT.TC WORM!

Added by a variant of the SDBOT WORM!

Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone"

Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone"

Added by the SCHOEBERL TROJAN!

IPWins adware

Added by the WAREZOV.DG WORM!

??

Intel(r) Indeo(r) video 4.4 Decompression Filter related

IRASSync adware

Added by the SDBOT-ACE WORM!

Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet

Iris Antivirus - discontinued, replace with good alternative

Iris Antivirus - discontinued, replace with good alternative

Associated with the iRiver Music Manager

Updates for the iRiver Music Manager - used with their digital music players

System Tray access to infra-red devices. Not required unless you use infra-red devices

??

SafeSurfing adware variant

Added by the BANCOS-AP TROJAN!

Added by the BANKER-AN TROJAN!

Added by the BANCBAN-BO TROJAN!

Microsoft Infrared Transfer application

Added by the IRFTP TROJAN!

Added by the BANCOS.H TROJAN!

Norton Internet Security configuration wizard

Added by the FUTRO TROJAN!

Related to Sony ISB Utility. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems

Added by the LCPRANK-A WORM!

For Compaq PC's. May install properties in dial-up networking when you register with an ISP

Used by Norton Internet Security to remove certain files and directories on reboot when uninstalling their product

Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon

FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"

ISpy is a security risk that logs keystrokes and captures screenshots. If you didn't install this yourself uninstall it

GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser

A process from Cisco Systems Inc associated with Windows Update for wireless NIC drivers

ISMonitor adware

ISMonitor adware

ISMonitor adware

ISMonitor adware

ISMonitor adware

ISMonitor adware

ISMonitor adware

User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server

Added by the IRCFLOOD-O TROJAN!

iSpyNOW - remote monitoring and surveillance software

Added by the GAGGLE.D or GAGGLE.E WORMS!

Related to GuardWare iShield - this is the registration reminder for the trial version, so not required in startup

Added by a variant of the RBOT WORM!

Part of IBM Global Services - used internally by IBM for automatic updating of software and Microsoft patching

LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation

Part of Norton Internet Security Suite

IBM Client Security Certification Tool

ISTBar adware

ISTBar parasite related

Unidentified adware downloader/installer

InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you're always working with the most current version

InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you're always working with the most current version

Related to Internet Security Wizard from AT&T (formerly BellSouth Premium Internet Security) alerts users about any potential security threats. It should not be uninstalled unless the user wants to completely remove all traces of AT&T Internet Security Suite

Added by the SMALL-EIV TROJAN!

iSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user

Added by the CHORUS-A TROJAN! Searchforfree browser hijacker

Added by a TROJAN! See here TROJAN!

In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it

Insert ToggleKey by Mike Lin. ITK sounds a tone whenever you press Insert

iTouch loads the iTouch configuration program for Logitech keyboards. It's needed if your keyboard has shortcut buttons and if you use them. It's also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock

ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip

Added by the RBOT-ZU WORM!

Added by the OSCABOT-L WORM! Note - this file will be placed in the WindowsSystem32 or WinntSystem32 folder, and should not be confused with the (legitimate) Apple iTunes process, always located in the Program FilesiTunes folder

Detected as Trojan-Dropper.Win32.Agent.mm by Kaspersky Anti-Virus

Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation

Added by a variant of the SDBOT WORM!

Added by the TACTSLAY.U TROJAN!

Added by the EB adult premium dialer

Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation

Microsoft IntelliType Pro keyboard related - what does it do and is it required?

Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up

Added by the DLOADER-AXV TROJAN!

Toshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as, whenever you are connected to the Internet, it will check for Windows updates and Toshiba updates

Added by the AGENT-ENZ TROJAN!

Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis

Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis

Added by the SDBOT-CY TROJAN!

Added by the XORPIX-A TROJAN!

Added by the SDBOT.BJK WORM!

??

FastFind parasite variant