Added by the RBOT-EZ WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the ASSIRAL.B WORM!

PurityScan/Clickspring adware

Added by the DEMOTRY-B WORM!

Added by the BALKART TROJAN!

Added by the BROPIA.K WORM!

Added by an unidentified WORM or TROJAN!

Added by the AGOBOT.XV TROJAN!

Added by the AGENT.AAJE WORM!

Pop Marketing adware

Added by the BANKER.BYU TROJAN!

Added by the MULTIDR-AH TROJAN!

Detected as the VB.PO TROJAN!

Antiphishing component of BitDefender 2008 products

Added by a variant of the RBOT WORM!

Added by the RBOT-GMP WORM!

Starts the Boingo Wireless utility, used to detect and login into Boingo wireless hotspots. The filename may be autogenerated when installing, two different variations along the lines listed here, where # is a number and X is a letter. Shortcut available via Start -> Programs

Added by the YPSAN.D WORM!

Added by the MYTOB.LY WORM!

Pop Marketing adware

Part of Computer Associates eTrust EZ Antivirus

Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

Driver for the I/OMagic Personal Video Recorder (DR-PCTV100)

Deteced by Symantec as the ADCLICKER TROJAN!

Cisco VPN Client - lets local users gain Administrator privileges on the operating system

Switch adult content dialler

Switch adult content dialler

Added by the PPDOOR-N TROJAN!

Added by the DLOADER-WK TROJAN!

Added by the BANCBAN-CQ TROJAN!

Added by the BANCBAN-GF TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir%

For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list

Added by the SDBOT.H TROJAN!

Added by the SDBOT.H TROJAN!

Added by the LOADCFG or SDBOT TROJANS!

Added by the SDBOT-KW WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) process, which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup unless you add it manually! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the AGOBOT-ANZ WORM!

Added by an unidentified WORM or TROJAN!

Added by the BIZVES-A TROJAN!

CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs

Added by the HIDER-O TROJAN!

Added by the BANCOS.U TROJAN!

Added by the BANCBAN-FH TROJAN!

Added by the CWS-M TROJAN!

Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L"

iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled

InstallShield's DigitalWizard - free, complete Digital Content Management Solution that makes it easy to experience digital content

Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program

Added by the VB-NIA WORM!

Icon Keeper - "tool to save and restore icon positions on the desktop"

eWare iWare task bar. Not required

Added by the SDBOT-WO WORM! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook, eg, when you press the hotkey for muting the sound, a loudspeaker icon with a cross on it is displayed

Added by the SMALL.RR TROJAN!

Added by the DINFOR.D WORM!

Monitor for a Belkin USB Wireless adapter

Added by a variant of the OPTIX PRO TROJAN!

Added by the DOOMJUICE WORM!

Added by the CLAGGER-BB TROJAN!

Added by the DWNLDR-GTK TROJAN!

Added by the ZLOB-QK TROJAN!

Unidentified malware

Added by the RBOT-NH WORM!

Added by the MYPOWER WORM!

Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard

Graphical interface for fan speed control

IAA Event Monitor User Notification Tool - part of Intel(r) Application Accelerator - "a performance software package for desktop PCs using select Intel(r) chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed

AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well

Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?

InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the OPASERV.T WORM!

Added by the LEGMIR-AH TROJAN!

Added by the SDBOT.IC TROJAN!

Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"

??

Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes

IBM application - what does it do and is it required?

Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops

Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?

Added by the HIDEDIAL-B TROJAN!

IBackup for Windows

IBackup for Windows

Related to Citrix MetaFrame

Browser hijacker, redirecting to Searchforfree.info. Also detected as the ICASERV-A TROJAN!

Added by the ICcontrol premium rate adult content dialer

IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"

Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail

Found on Sony Vaio and IBM Thinkpad (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games

RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Related to the Vista Customization Pack

APC PowerChute Tray Icon. Associated with the UPS listing

Small utility which will allow you the option of hiding or showing your desktop icons

Icon for LS-120 "Superdisk"

Iconoid is a desktop icon manager

IconSaver is a desktop icon manager

Added by the GORMLEZ-A WORM!

Added by the AGENT-FZJ TROJAN!

Added by a variant of the RBOT WORM!

Added by a variant of the NETSPY TROJAN!

ICQ Lite - compact version of the popular messaging program

Added by the SDBOT-ABL WORM!

Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations

Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers

Caller ID utility for identifying incoming telephone numbers

Added by the ID8525.A TROJAN!

Added by the ID8525.A TROJAN!

HP related - in a Program FilesHewlett-PackardPC COE folder

Added by the ASSASIN.F TROJAN!

Added by the XILON TROJAN! Related to the game "Diablo II"

Added by a variant of the CRYPTER.C TROJAN!

Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse

Internet Download Manager - download files faster, schedule and resume

Added by the BRONTOK-H WORM!

Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems

IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"

Added by the AGENT-HD TROJAN!

IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

DesktopMedia adware

Added by the BOMKA TROJAN!

Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2

IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup

Homepage hijacker, redirecting to coolwwwsearch.com

Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze

Added by the DLOADR-BBW TROJAN!

STARTPAG.AI hijacker

Added by the RBOT-GRE WORM!

Added by the POPMON.A TROJAN! - also known as PopMonster adware

Added by the POPMON.A TROJAN! - also known as PopMonster adware

Added by the RILER-H TROJAN!

Added by the BANKER-HH TROJAN!

Added by the SPEX or SPEX.B WORMS!

Browser hijacker - redirecting to an adult web page

LookNSearch adware

FastFind parasite variant

Added by the PWS-BLUEDIT TROJAN!

Added by a variant of the RBOT WORM!

Added by the NEMOG.C TROJAN!

IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc

Added by the AGOBOT-QL WORM! Note the filename has a "0" rather than an upper case "o"

Added by the RBOT.AEX WORM! Note - this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot

Added by the INKER.B WORM!

Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the DLOADER-YZ TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in a "Custom" subfolder

Added by the DLOADR-AAM TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the "Arquivos de programasInternet ExplorerCustom" folder

Added by the BANKER-BWE TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup!

Added by the BDOOR-BY TROJAN!

Added by the BANCOS-CH TROJAN!

RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the BANCBAN-EN TROJAN!

Added by the RBOT.ABO WORM!

Added by the RBOT.ABN WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the CLAGGER-AG TROJAN!

I-FORCE driver for force feedback steering wheel

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel

??

NewDial premium rate adult content dialler

Drive Letter Searcher, iRiver iHP-100 iHP and H Series player related - does it need to start with Windows every time?

Homepage hijacker

PurityScan/Clickspring adware

Added by an unidentified TROJAN or adware

Printer utility which is required in order to make the printer work correctly

Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything

A4Tech wireless keyboard driver and utility

Intense Educational Ltd - Language Office Software. Is it required?

iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button

Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner

Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run

Nero ImageDrive from Ahead - virtual CD/DVD drive software

ImageFox 2.0 (formerly available from ACDSee) is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes

Added by the GEMA TROJAN!

Enables the iMarkup Client web page annotation utility to run in the background and be available in systray. Shortcut available via Start -> Programs

Imation Disk Manager - enables you to create a password protected area on your Imation USB flash drive

Added by a variant of the IRCBOT TROJAN!

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)

Added by the KEYLOG-AR TROJAN!

Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running

Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs

Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese). *.* represents the version number

Related to I-FORCE driver for force feedback steering wheel?

IncrediMail for Office Outlook Add-On

System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards

IMNames adware

InterMute security software related

SafeSurfing adware variant

Added by the IMAV.A WORM!

Added by the BAGLEDL-BO TROJAN!

Ahead InCD packet writing software - similar to DirectCD. For Nero 5.0 or 5.5 (InCD3), it does not need to start with Windows. You can run InCD.exe manually before inserting an appropriately formatted CD-RW (CD-MRW) disk. For Nero 6.0, 6.3 or 6.6 (InCD4), it does need to start with Windows. It does not function correctly when you try to run it manually, and you will not have write access to MRW (Mount Rainier) formatted CD-RW (CD-MRW) or DVD-MRW disks. To regain write access and other features, InCD 4 must start with Windows

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality

Added by the LAZAR TROJAN!

Associated with PaperPort scanner software from ScanSoft

Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents"

Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook, eg, when you press the hotkey for muting the sound, a loudspeaker icon with a cross on it is displayed

Meplex adware

Added by the QEDS WORM!

Inet Delivery adware

Inet Delivery adware

Bsafe Online - internet filter

??

Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation

Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)

Added by the DONBOMB.A TROJAN!

Actual Names (AdvSearch) Internet Keywords parasite

InfeStop spyware remover - not recommended, see here

Info Select from Micro Logic - personal information manager

Added by the GEMA TROJAN!

InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand

Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?

Detected by Kaspersky as the CENTIM.CH TROJAN!

System Tray access to infra-red devices. Not required unless you use infra-red devices

Adult content dialler

Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"

VX2.Transponder parasite updater/installer related

Added by the WINEX.A TROJAN!

EasySearch browser hijack installer

Added by the BINJO TROJAN!

Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line

Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line

Associated with eTrust Antivirus/InoculateIT

Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage

Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates

Added by a variant of an MSN worm that tries to lure people to an infected site by using nude pictures and videos

??

Detected by PCTools as the AGENT.KMC TROJAN! See here

Kayako InstaAlert allows you to receive realtime alerts whenever a ticket gets updated under the assigned departments. The application displays popups as and when the tickets are created or replied to allowing you to answer your customer requests and issues promptly

InstaFinder adware

Added by the BANCBAN-HG TROJAN!

Used to initialize the Aureal A3D demos InstallShield wizard

InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync

Added by the ANYHOMB.F TROJAN!

Tool for Outlook and Outlook Express from Plaxo for organising and keeping contacts organised and updated and providing online access to your contacts and access from PDA or mobile phone

Instant Buzz adware

Detected by Kaspersky as the HEUR TROJAN!

From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs

Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software

Adult content dialler

Adult content dialler

Added by the OPASERV.H WORM!

Added by the OPASERV.K WORM!

??

SafeSurfing adware variant

System Tray access to Integardparental control software from Race River Corp

System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards

Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here

Added by the RBOT.QGA WORM!

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Not known exactly what it does but apparently it isn't required

Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel

Added by the SmitFraud alias SPYJACK-B TROJAN!

Intel Audio Studio combines Intel(r) High Definition audio hardware features with Sonic Focus* Audio Refinement and Dolby* technologies to provide you with a comprehensive tool that puts you in control of your audio experience. Audio utility supplied with Intel motherboards

Added by the SmitFraud alias Desktophijack.C TROJAN!

Added by the SPYJACK-B TROJAN!

Added by the Intelliflag SPYWARE!

Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features

Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line

Associated with the Intel PRO/Set Wireless software

Intense Educational Ltd - Language Office Software. Is it required?

Part of Sophos ant-virus sofware

Part of Sophos anti-virus sofware