Processes beginning with c

Added by the CUYDOC TROJAN!

C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. You may need it if you use the echo control feature of C-Media Mixer

C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs

CYBERsitter 2000 or 2001 - anti-adult content filter primarily. Required if you want the sites you visit filtered without having to load the software every time you launch your browser

Cyber Sentinel - internet filtering software

Added by the MEDIAKILL.A WORM!

"Net Meter is a small, customizable network bandwidth monitoring program for Win9x/Me/NT4/2K/XP. NetMeter is and will always stay freeware. The program has been tested extensively on Win2K/XP, but it should work just as well on all other Win32 operating systems"

"Pop Marketing" adware

Detected by Kaspersky as the AGENT.AAW TROJAN!

"Pop Marketing" adware

Unicenter Asset Management is a solution for proactively managing IT assets in a business environment. It provides full-featured asset tracking capabilities through automated discovery, hardware inventory, network inventory, software inventory, configuration management, software usage monitoring, license management and extensive cross-platform reporting

eTrust? EZ Antivirus system tray application from Computer Associates

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Ignite Technologies (was CABC) content delivery software

Added by the WOOTBOT.A WORM!

CacheBoost "optimizes the System Cache-Management of Windows XP/2000/NT and Windows .Net Servers, resulting in a performance boost"

Added by the DLOADER-NZ TROJAN!

Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up

Sophos Antivirus Remote Update

"CacheSentry Pro is a program that takes over the management of the Internet Explorer (and AOL) web browser cache"

Cash A Check - check writing software

Caddais BackupOnDemand - "runs in the background and monitors your important files for changes. Within seconds of changing, modified files are automatically backed up to an archive location"

Cadenza mNotes for Palm and Pocket PC enables users to access Lotus Notes on their mobile devices

Cyber Sentinel - internet filtering software

"CafeSuite is the solution for your internet cafe. Our software provides you with ameans to control the workstations, manage customer database, sell products and generate detailed reports and statistics"

CA Personal Firewall - part of the CA Internet Security Suite

Abbyy Fine Reader OCR (Optical Character Recognition) software for scanning and converting documents

Added by the KAKWORM WORM!

"The Cahoot Webcard is a virtual card that allows you to use your Cahoot credit card online without ever having to expose your real card numbers over the web. It works by generating one-off transaction numbers as a substitute for your real cahoot credit card details". Run manually when needed

DIYNet adware

Part of Computer Associates eTrust EZ Antivirus

Computer Associates Dashboard Tray applet

Produces a pop-up reminder of events scheduled using the MS Office Calendar

Added by an unidentied WORM or TROJAN!

Added by the SPYBOT-EC WORM!

Calendar 200X - shows holidays, reminders of various anniversaries,tasks etc

Calendarscope calendar software

Added by the STARTPA-FH TROJAN!

Added by a variant of the SDBOT TROJAN!

Added by the SPAMMIT-H TROJAN!

Related to the Gazel 128 PCI ISDN adapter. Required if you use it

"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Main application

"V3 Inc. CallCenter is a free 32-bit, integrated fax, voicemail and data communications application with a simple to use interface providing fax send and receive functionality, basic (single mailbox) answering machine capability, and sophistcated data communications." Fax printer

FaxTalk Messenger Pro is a Windows TAPI based 32-bit application. When installed, the software automatically loads FaxTalk CallControl when you start Windows. When FaxTalk CallControl is running, any TAPI compliant application can request to use the modem from Windows

NuCam camera software related

Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above

Camera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically

Image viewing program that comes with digital cameras. Shows pictures that are in the camera before downloading them. "x" in the name is the version

From HP and related to digital imaging

Known to be a dialler - but is it maliscous or clean?

Canary keystroke logger/monitoring program - remove unless you installed it yourself!

Added by the RBOT-LV WORM!

Added by the RBOT-NA WORM!

Cannon Multi-Pass status monitor - your choice

Cannon printer related - is it required in startup?

Trayicon for Canon printer. xxx denotes model. Available via Start -> Programs

Printer software for Canon Bubblejet printers

Canon's Solution Menu dialog box leads you quickly toward documentation, utilities, and help files

Canon driver, purpose unknown. Is it required in startup?

CA Personal Firewall - part of the CA Internet Security Suite

PhoneTools fax software

CA Personal Firewall - part of the CA Internet Security Suite

Citibank Citianywhere software

Canon printer driver

Canon printer driver

Added by the ZAR.A WORM!

Added by the THEEF-B TROJAN!

Capture Express - screen capture utility

!Quick Screen Capture from EtruSoft Inc. - "allows you to take screenshots from any part of your screen in more than 10 ways, and save images in BMP/JPG/GIF formats"

"Carbonite?s online backup service starts automatically and works quietly and continuously in the background protecting your data"

For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs

TopMoxie adware

Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is, thanks to over 200 company profiles from Coop America. Saves 1 square foot of rainforest every day you use it. If it works and you like it, keep it

Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example

Added by the BANKER-AN TROJAN!

Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example

Added by the DLOADER-QD TROJAN!

Added by the DADOBRA-DV TROJAN!

Added by the DLOADER-QN TROJAN!

CasinoClient adware

CasinoClient adware

Program by Extended Systems which allows you to sync your Casio PDA with your PC

Added by the RANDEX.BE WORM!

Malware causing p0rn popups

Malware causing p0rn popups

Part of eXact Advertising Software, consisting of "CashBack by BargainBuddy", BullsEye Network and NaviSearch

CASHFIESTA.A pay-per-surf adware

Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals"

Added by the DOWNLOADER-MY TROJAN!

BrowserAid/CashToolbar adware! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Added by the RBOT-FZO WORM!

Added by the KREPPER-AI TROJAN!

SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as a variant of the KREPPER TROJAN!

Added by the CASS-A TROJAN!

Added by the RBOT.DMW TROJAN!

Added by the PAPLOK TROJAN!

eTrust? EZ Antivirus Real Time Infection Report from Computer Associates

Cheyenne (now eTrust) antivirus

Added by the CAZNO TROJAN!

Added by the PENTA-A TROJAN!

Required for Bitware to answer incoming faxes, can cause sleep mode problems

Required for Bitware to answer incoming faxes, can cause sleep mode problems

Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop

Comet Cursor adware

Probably a variant of MediaTickets adware. Note - this is not the valid Windows registry editor which resides in Windows or Winnt and will not figure in Msconfig/Startup! This version resides in a "mduu" subfolder, which may change

Part of Norton AntiVirus. Auto-protect and E-mail check will not function without this

Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus

Added by the RBOT-LJ WORM!

Added by the RBOT-LJ WORM!

Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the KANGAROO-A TROJAN!

Added by the KANGAROO-B WORM!

Added by the GANBATE.A WORM!

Project Labs Century CD manager for their CD/DVD storage device

Part of the closed caption decdoder/MS VBI codec. Should only run once

Checks your system to make sure it's configured properly for running IBM Rational ClearCase, a source code management tool. ClearCase is fairly sophisticated so there are a lot of system-related things that can cause it grief. If you run ClearCase you should not disable this as it provides a valuable service, but technically it isn't required to use the ClearCase product

RAV AntiVirus

Part of Norton AntiVirus 2003. Event manager for scheduling weekly scans and or automatic virus updates. Used to start automatically via "ccApp" and was not required as a seperate entry but a recent update changed this

Added by the RBOT.GZ WORM!

Added by the NEMSI-B VIRUS!

"Searchq" adware

CCleaner - removes unused files from your system

Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder

Part of Norton Internet Security, proxy server that is used to support the parental controls. If you turn parental controls off at user level the process is not loaded. Reported to cause excessive CPU usage

Added by the SHIPUP-H WORM!

Part of Norton's AntiVirus 2003, Internet Security and Firewall products. E-mail proxy service - required for E-mail scanning and the firewall

Added by the ZCREW BACKDOOR! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%

Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack"

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the STAP-C WORM!

Part of Norton AntiVirus 2004. What does it do?

Added by the SDBOT-DIW WORM!

Added by the STARTPA-HP TROJAN!

Part of CA Internet Security Suite

Added by the AGOBOT.YS WORM!

In Loco Parentis remote surveillance software. Uninstall this software unless you put it there yourself!

Related to Traybar Launcher from Intel Corporation belonging to Intel(R) Viiv?

Webroot Cache & Cookie Washer - cleaning browser tracks, including cache, cookies, history, mail trash, drop-down address bar, auto-complete forms and downloaded program files for IE, Netscape and AOL

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

Moleculesoft Cache, Cookie & Windows Cleaner. No longer supported but available for free

System Tray access to Child Control parental control software by Salfield

CD Storage Master - a program designed to catalog CD information, boasts a number of handy features for organizing your collection

Premium rate adult content dialler

C-Dilla License Management software. Used for any program that uses C-dilla Protection, example: 3D Studio Max 4.x. It loads as a service automatically but is not needed unless you run said program. Can be started and stopped manually

Added by the GEMA TROJAN!

Added by a variant of the CRYPTER.C TROJAN!

CD indexer for measuring the speed of CD players

From MagicJack - "A softphone device that allows you to attach an analog phone into the PC so you can have a traditional-style phone system in your house without any monthly charge"

CNNIC Update pest

Added by the DELF.WG TROJAN!

Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!

Added by the BATTRY-A TROJAN!

Added by the SPYMON TROJAN!

Detected by Kaspersky as the IRCBOT.AEX TROJAN!

On HP PCs, this is the small CD icon next to the time

Hot Key utility included on Toshiba Satellite laptops

Toshiba's Power Management Utility - allows the user to setup different profiles for both AC power and Battery Power on laptops. Contols CPU speed, Monitor Shut Off, Hard Drive Shut-Off, Monitor Brightness, System Stand-by and System Hibernate times

??

Added by the KERGEZ.A WORM!

Added by the BOFRA.A WORM!

Added by the BANCOS.J TROJAN!

??

SafeSign Certificate Registration Utility for Microsoft Crypto applications

Related to Gemplus Card Reader

Aladdin eToken authentication and password management

CesarFTPd - FTP server

CnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the BIFROSE-AK TROJAN!

BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs

WINMUSCHI dialler

Added by an unidentified WORM or TROJAN!

Configuration Interpreter - part of Tiny Personal Firewall V4

BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "cfgmgr51.dll" file is located in the Winnt or Windows folder

BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "cfgmgr52.dll" file is located in the Winnt or Windows folder

Introduced with Norton Anti-Virus 2002, this is a real resource hog. Many NAV users will find they can live without loading it

cFos DSL Modem driver related. What does it do and is it required?

cFos DSL Modem driver related. What does it do and is it required?

cFos Software Internet acceleration program related. Note - may be necessary for the software to work properly

Belongs to Toshiba's configfree utility and searches for Wireless Devices

Added by a variant of the AGENT.ERG TROJAN!

Added by the SOWSAT.C and SOWSAT.J WORMS!

Surfenhance.com SearchForIt adware variant

Added by the BROPIA-U WORM!

Associated with an Eicon Networks ISDN or ADSL modem. Call Guard Server (CGserver) watches your modem and blocks incoming or outgoing calls. You need cgard.exe (from Startmenu) to configure cgserver with rules and telephone numbers. Good against unwanted dialer programs

Added by the LALA.B TROJAN!

Added by the RBOT-AEI WORM!

Chameleon Clock - system tray clock replacement

Added by the SDBOT.ZD WORM!

Card reader related program. Note - may cause problems with My Computer loading at startup. Disabling through MsConfig seems to solve the problem

??

Charter High-Speed Security Suite - security software in collaboration with F-Secure

Chatango - "allows people to be connected in real time through their Web browsers. Include your Chatango contact link or button when you create eBay auctions, blogs, personal websites, Friendster profiles, and your visitors will be able to contact you instantly, without downloading anything, or registering. Alo use it to send email to your friends, allowing them to respond to you in real time!." The 'MessageCatcher' icon in the System Tray notifies you when you get a message. When you get a message, a little alert pops up, which you can click on and start chatting immediately

ChatStat from ChatStat Technologies, Inc. Provides live chat assistance in up to 16 languages allows your operators to be more productive

IMSI HiJaak - "the easiest way to convert, capture, and manage all your graphic files"

Covert Sys Exec malware variant

Detected by Kaspersky as the SDBOT.BMH WORM! See here

Added by the ADENU-B VIRUS!

Added by the SHODI.B VIRUS!

Added by the VB-DRN WORM!

Checks for updates for Visioneer OneTouch scanners

Interactive Brokers - check for update to their standalone Java-based trading platform

Check Messenger from Qchex.com - program that helps you manage the activity of your Qchex account. Qchex appear to be no longer in buisness

Check&Get from ActiveURLs. Manages your browser bookmarks and favorites. Monitors Web sites for changes and updates, captures and highlights the changed contents

Update checker, part of CustomWorks - "customize any embroidery designs to design your own unique creations"

Added by the CheckDialer modem connection monitoring tool

Added by the VAGON-A TROJAN!

Added by the SMALL-CSK TROJAN!

CheckIt Toolbox from WinCheckIt Diagnostic Software. Toolbox automatically backs up critical system files (such as .ini files and the Windows Registry), and performs a check on various system parameters at intervals you specify

CheckIt 86 popup blocker

Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.

EliteBar adware

Added by the MULTIDR-ER TROJAN!

Added by the AEBOT.K WORM!

Found in the HPSelectFrontend directory on a HP machine. What is it's purpose and is it required?

Driver for the I/OMagic Personal Video Recorder (DR-PCTV100)

Added by a variant of the IRCBOT TROJAN!

Multimedia keyboard manager for the Cherry keyboard series. Only required if you use any of the special keys

Added by the CHIKO WORM!

Child Control parental control software

Chikka PC text messanger and IM client

Added by the ENVID.O WORM!

Chinese language support software

ChipDrive Smartcard software

ChipDrive Smartcard software

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Compaq Network Management System. When running, it places an icon in the system tray titled "Intelligent Manageability"

Added by an unidentified WORM or TROJAN!

Detected by Symantec as the ADCLICKER TROJAN!

Added by the ANPES WORM!

Mail-checking program supplied with Acer notebooks

ChoiceMail from DigiPortal Software. Block spam with an Email firewall

Added by the CHOKE WORM!

Added by the QQPASS-U TROJAN!

Added by the BANPAES.C TROJAN!

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol , vol-, mute, etc. Only required for extended features

"Christmas Music Player brings the music of the Christmas Holiday to your desktop"

Related to this. Don't know what keysh.exe does though and if it's required

??

Chronograph is a simple utility that synchronizes internal computer clock to the atomic time. Chronograph automatically maintains correct time using atomic clock servers of the National Institute of Standards and Technology (NIST)." Shows seconds and shows the date without having to hover the mouse. Shows a calendar when hovered over

Detected by Trend Micro as the IRCBOT.AWN BACKDOOR! See here

Detected by Kaspersky as the AGENT.DHU TROJAN!

Added by a VIRUS!

Added by the LINST TROJAN!

Compaq printer utility which is required in order to make the printer work correctly - "x" depends upon the model, ie, for IJ300 x=3, for IJ700 x=7

Cingular Communication Manager - now taken over by AT&T. "provides a robust set of wireless communication tools for businesses and individuals. With wireless access to email, the Internet, business applications and corporate intranets, mobile users can be more productive while they're out of the office"

Added by the ASSIRAL-B WORM!

ChatItOut webcam chat program

Added by the STRAT.EL TROJAN!

Added by the BHARAT.A WORM!

Cisco VPN Client - lets local users gain Administrator privileges on the operating system

Sets up IPSec communications for Cisco's VPN Client

Related to internet setup on Compaq PC's

Added by the CISSI.A WORM!

Citibank Virtual Account Numbers - "With this free service for Citi cardmembers, you never have to give out your real credit card number online"

Option from Citibank to change a credit card number in a random fashion for each purchase. The number will only be used once and never again

Added by and unidentified WORM or TROJAN! See here

FFToolBar adware toolbar

Canon printer BJ status language monitor

ClamWin antivirus

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

"Switch" premium rate adult content dialler variant

Added by the AGENT.CBA TROJAN!

Added by the AGENT.ES TROJAN!

Added by a variant of the Covert Sys Exec TROJAN!

CLCL clipboard caching utility

Cisco Clean Access Agent from Cisco Systems, Inc

Detected by Trend Micro as the IRCBOT.BBO BACKDOOR! See here

Added by the AGENT-FPY TROJAN!

??

Apparently Annex A ADSL modem related. What does it do and is it required?

Automatic logging of installs from Norton CleanSweep - available via Start -> Programs

Quarterdeck/Norton CleanSweep component - tracks how often you use files and alerts you to files that have not been used for a specified period of time

CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory

CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory

Internet Cleanup from Allume Systems (used to be by OnTrack) - cleans up tracks left by browsing the internet

Used by McAfee Virusscan to perform product updates. When updates are available the program will download and install them automatically. Recommended to leave enabled

In a C:Sonysys folder - Sony Vaio related?

Added by the REFAZ WORM!

CleverKeys - "is free software that provides instant access to definitions at Dictionary.com, synonyms at Thesaurus.com, facts at Reference.com and more ? from almost all Windows programs, including word processors, Web browsers and most e-mail programs"

Added by the TACTSLAY.E TROJAN!

Added by the TACTSLAY.E TROJAN!

Added by the AGENT-BJ TROJAN!

Added by a variant of the SPYBOT WORM! See here

Added by a variant of the IRCBOT BACKDOOR! See here

ClickRadio - subscription service playing radio music via the internet

ClickTray Calendar - shows holidays, reminders of various anniversaries,tasks etc

ClickM "JOKE" program

Clickoff automatically dismisses annoying dialog boxes

ClickTheButton adware

ClickTheButton adware. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Added by the DOWNLOADER-MY TROJAN!

Added by the OPASERV.T WORM!

IBM iSeries Client Access, see here

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources

Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?

Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources

IBM iSeries Client Access taskbar, see here

Added by the PPDOOR-N TROJAN!

Added by the PPDOOR-P TROJAN!

Added by the PPDOOR-J TROJAN!

Part of Brightstor ARCserve Backup from Computer Associates. What does it do and is it required?

Added by the SDBOT-BXQ WORM!

Added by the AGENT-HR TROJAN!

Added by a variant of the SDBOT WORM!

Added by the POEBOT-KR WORM!

Added by the SDBOT-LD WORM!

Added by the LINKBOT.M WORM!

Backdoor TROJAN! Possible SDBOT-GEN variant

Added by the OPANKI.O WORM!

ClientMan parasite variant

Part of Iomega Tools to let you know whether an Iomega PocketZip (nee Clik) removable drive cartridge is installed

Detected by Kaspersky as the DELF.DXJ TROJAN! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by an unidentified WORM or TROJAN!

Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks

Clipdiary from Softvoile - "Free Clipboard Manager for keeping the clipboard history"

Clip Mate 5.x by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs

Clip Mate 6 by Thornsoft. Utility that allows you to store more than one item in the clipboard. Available via Start -> Programs

Clip Mate 7 by Thornsoft - utility that allows you to store more than one item in the clipboard

Mike Lin's Clipomatic is a clipboard cache program - it remembers what was copied to the clipboard even after new data is copied, and allows you to retrieve the old data

Supports Windows XP ClipBook Viewer, which allows pages to be seen by remote ClipBooks

Added by the SDBOT-AAV and SDBOT-AFE WORMS!

Added by the MOFEI-D WORM!

ClipTrak - clipboard extender

Cliptrakker - clipboard extender

Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs

Added by the WIXUD-B TROJAN!

System tray status/display/configuration utility for a number of modems. Can be disabled by right-clicking on the tray icon. If disabled, connection status is lost

??

LiveChat Adware - known file names include: mssetup.exe, kstatus.exe, spoolsv.exe, sptsupd.exe, osk.exe, msswchx.exe, netdde.exe, msbkup.exe

Added by the SDBOT-XM TROJAN!

ClockSync - synchronizes your system clock with an internet time server. It's by WhenU, the makers of the Save Now spyware, and they're usually seen in tandem, so it's advised to replace it with one of may spyware free alternatives available

ClockWise - produced by R J Software - a time utility. It is a schedueler not only for dates, but you can choose it to run programs at any time. It also updates the time by connecting to an atomic clock server. This is a spyware-free alternative to ClockSync

ClocX - places a clock on the desktop that can be moved and then changed into a calendar plus you can set alarms etc?

System tray for the now discontinued CloneCD. The only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions

From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it

System tray for the now discontinued CloneCD. The only useful option is "Hide CDR Media" only available via this tray. Has additional unknown functions in later versions

IBM Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does?

Added by the PURSCAN-AI TROJAN!

ClearSearch adware

Adult content dialler

Adult content dialler

Adult content dialler

Adult content dialler

Adult content dialler

Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension

Added by the SILLYFDC-X WORM!

SmartWizard MFC Application - associated with C-Media who produce audio chipsets commonly used for on-board sound on motherboards. What does it do and is it required?

DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center"

CasClient adware - also detected as the CMAPP TROJAN!

System tray control panel for C-Media based soundcards - often included on popular motherboards with in-built audio. Available via Start -> Settings -> Control Panel

Added by the TANKED WORM!

Hijacker, also detected as the QURL-2 TROJAN!

CoolWebSearch Search X parasite variant

Added by the LINEAG-GKW TROJAN!

Added by the CRYPTER.A TROJAN!

Added by a variant of the VUNDO TROJAN!

Added by the BCKDR-QHY TROJAN!

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Part of Gator advertising spyware - see here for removal instructions. Please note that Claria Corporation no longer support GAIN-Supported software - see here

CASClient adware

Driver for Linksys Wireless-G Music Bridge

One of the McAfee shared components. What does it do and is it required?

UI for CMG (CREDANT Mobile Guardian) Shield from Credant Technologies. "The CMG Shield resides on devices and external media to enforce security policies even if the device is disconnected from the network." Used to protect sensitive corporate on laptops, handhelds, smartphones, USB drives and CD-DVDs

Added by the CMAPP TROJAN!

Added by the SMALL.CL TROJAN!

SystemDoctor misleading security software - not recommended, see here

Registers the Control Panel applet for a C-Media PCI sound card

Printer Driver Plus from ViewAhead Technology (formerly DeviceGuys, Inc.). "Printer Driver Plus seamlessly integrates all the necessary components of a printer driver, plus more". Installed with some Compaq and Lexmark printers

Added by the TOMPAI-D TROJAN!

Added by the TOMPAI-C TROJAN!

Added by the DELF.DU TROJAN!

Added by the DLOADER-EK TROJAN!

Added by the DLOADER-QQ TROJAN!

Added by the BANCOS.S TROJAN!

Added by the DLOADER-FP TROJAN!

Added by the DLOADER-WK TROJAN!

Part of NetNanny Chat Monitor

Added by the TCXMEDI-D downloader TROJAN!

Added by the TCXMEDI-D downloader TROJAN!

Added by a variant of the RBOT WORM!

Added by the BANCBAN-CQ TROJAN!

Added by the BANCBAN-GF TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by the AGENT-CO TROJAN!

Added by a variant of the AGENT.EI TROJAN!

Added by the AGENT-Y TROJAN!

CASClient adware

Added by a variant of the CRYPTER.C TROJAN!

Related to Medion Display Information. What does it do and is it required?

Added by the GEMA.D TROJAN!

Added by the MIMAIL.G WORM!

Added by the BIFROSE-PR TROJAN!

Appears to be spyware added by KAZAA (and maybe others) that displays pop-up ads whilst you're browsing

Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops

Part of Comodo Antivirus

Added by the MIMAIL.D WORM!

Added by the POINTEX TROJAN! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%

CnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Part of the Canon imagePROGRAF W8400 printer management software

DLink, Zoom, or Conexant modem driver

Connexant DSL Taskbar as used on Acess Runner and Samsung AHT-E310 ADSL modems

"Cobian Backup is a backup program that can be executed in 2 ways: as a normal application or as a Windows Service. The program can schedule automatic backups for files and directories locally or to FTP servers and can use compression and encryption"

CodeClean spyware remover - not recommended, see here

Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time"

Added by a variant of the SDBOT WORM!

Cognizance Corp Identity And Access Management suite

Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process

People Near Me Microsoft? Windows? Peer-to-Peer Networking platform for Windows Vista

Makes colours sharper and brighter, but will only work with coloreal capable monitors

From E_Color. Colorific delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor

Added by the BEASTY.H TROJAN!

Added by the BEASTY.G TROJAN!

Added by the BEASTY.E TROJAN!

Added by the BEASTY.I TROJAN!

Added by the BEASTDO-O TROJAN!

Added by the LOVGATE.AB WORM!

Added by a variant of the SDBOT WORM!

Added by the FORBOT-BT WORM!

Added by the AGOBOT.SE WORM!

Added by the LOVGATE.Z WORM!

Added by the LOVGATE-F WORM!

Added by a variant of the LOVGATE WORM!

COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212)

Cactus Spam - free easy-to-use spam blocker

"Privacy Mantra keeps your computer clean from online and offline tracks"

ComAgent - MDaemon's instant messaging client

Added by the CHIMO-C TROJAN!

Added by the BOWFEED-A TROJAN!

Added by a variant of the IRC TROJAN!

Comcast (the cable folks who are replacing @home in some parts of the USA) have struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This is "beta" at present and was made available to download by mistake at present. Remove via Start -> Settings -> Add/Remove Programs

Added by the TOADCOM.A TROJAN!

Adware - detected by Kaspersky as the AGENT.AM TROJAN!

Orvell Monitoring 2003 surveillance software. Uninstall this software unless you put it there yourself. Note - asks for permission to contact the IP address of http://www.protectcom.com/

G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself!

Added by the GATECRASH.A or GATECRASH.B TROJANS!

Added by the TITOG WORM!

Added by the QQPASS.E TROJAN!

Added by the AGOBOT-LG WORM!

Added by the ASSIRAL.B WORM!

EFI's Command WorkStation makes "managing demanding workflows easier by centralizing job management. The software automatically identifies the Fiery servers on the network and offers customization options for displaying information" - for high-end print environments

Added by the LINEADI-A TROJAN!

"Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs

Part of Microsoft Office Communicator, which is an integrated communications client that allows information workers to communicate in real time using a range of different communication options, including instant messaging (IM), voice, and video

Comodo Firewall

Comodo Firewall Pro

System Tray access to LaunchPad as bundled with Comodo's freebie offerings such as Comodo Anti-Virus. Some allege that LaunchPad is impossible-to-uninstall adware, or worse - see here

"Comodo Memory Firewall is a buffer overflow detection and prevention tool which provides the ultimate defence against one of the most serious and common attack types on the Internet - the buffer overflow attack"

WinAntiVirus 2006 misleading virus software - not recommended, see here

Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information

For Compaq PC's. Part of Backweb

??

See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners"

See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners". * can be any digit

See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners"

Compaq version of the Desktop Management Interface

Added by the SDBOT-WD WORM!

For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list

Added by the SDBOT-XR WORM!

"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file while silent.exe executes matcli.exe quietly in the background. Compaq Knowledge Center is required to run with the Help and Support program. If you uncheck Compaq Knowledge Center and and then run help and Support it will add another Compaq Knowledge Center in the startup menu. If you remove the Compaq Knowledge Center in the add/remove program some help menus in help and support will not be available like Fix my Presario, Preference, and Contact Technical Support". You decide

Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems

For Compaq laptops for programming user configurable keys. Not required unless you use them

Added by the SDBOT.BCV WORM! Please take note of the difference between the legitimate Compaq Fax Utility Name (A1000 Settings Utility) and the name (Compaq Print Fax) used by this worm

Added by the SDBOT-XC WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT.BBQ WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT.CQL WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT.ATV WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT-AFU WORM!

Added by the RBOT.BKT WORM!

Added by the RBOT.CIW WORM!

Added by the SDBOT-AGD WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.CQZ WORM!

Added by the SDBOT-XG WORM!

For Compaq PC's. MPEG viewer

Added by the SDBOT.BWH WORM!

Added by the SDBOT-ADC WORM!

Added by the RBOT.BVF WORM!

Running on a Compaq laptop - any ideas?

Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop

Added by the SDBOT.CSO WORM!

Added by a variant of the SDBOT WORM!

Compaq System Tray icon

Added by the GAOBOT.YN WORM!

Added by a variant of the SDBOT WORM!

VideoMate TV tuner and capture card - remote control driver

VideoMate TV tuner and capture card - scheduler

Added by the SDBOT-WX WORM!

3Com tray icon

TrojanGuarder misleading security software - not recommended, see here

Comtry MP3 Downloader related - spyware

Added by the COMXT TROJAN!

Added by the BRAVE-A TROJAN!

ConfidentUser misleading security software - the site's "online scanner" detected by Kaspersky antivirus as WinFixer.ba

Added by the ISRAZ.B WORM!

Added by the CRUTCHA-A TROJAN!

Added by the SDBOT.H TROJAN!

Added by the SDBOT.H TROJAN!

Added by the GAOBOT.P WORM!

Added by the GAOBOT WORM!

Added by the GAOBOT.AE or GAOBOT.AO WORMS!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the AGOBOT.BD WORM!

Added by the GAOBOT.BT WORM!

Added by the AGOBOT-HN WORM!

Added by the SDBOT.T TROJAN!

Added by the GAOBOT.DJ WORM!

ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice

ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions -- provides a restore function. Your choice

Part of initial setup on a Compaq PC

Added by the AGOBOT-AFP WORM!

Added by the SDBOT-ML WORM!

Added by the SDBOT-VP WORM!

Added by the SDBOT-LN WORM!

Added by the SPYBOT-CA WORM!

Added by the FLUX.101 TROJAN!

Added by the MOEGA or MOEGA.AG or MOEGA.AP WORMS!

Added by a variant of the SDBOT WORM!

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by the SDBOT.B TROJAN!

Added by the GAOBOT.AF WORM!

??

Added by the GAOBOT.AN WORM!

Added by the GAOBOT.BF WORM!

Added by the GAOBOT.BZ WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the AGOBOT.BQ WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.AO WORM!

Added by the GAOBOT.FQ WORM!

Added by the GAOBOT.JB WORM!

Added by the GAOBOT.GEN!POLY WORM!

Added by the GAOBOT.RQ WORM!

Added by the GAOBOT.YC WORM!

Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS!

Added by the GAOBOT.AUS WORM!

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by the LOADCFG or SDBOT TROJANS!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the AGOBOT.SR WORM!

Added by the AGOBOT.MB WORM!

Added by the AGOBOT.A3 WORM!

Added by the SDBOT-VR WORM!

Added by the SDBOT-XS WORM!

Added by the AGOBOT.BH WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT-YE WORM!

Added by the RANDEX.DXP WORM!

Added by the AGOBOT.ADG WORM!

Added by the RBOT-AGX WORM! Note - the executable is spelt with a lower case "L" rather than an lower or upper case "i" which is the case with Internet Explorer

Added by the AGOBOT-AAE and SDBOT.AR WORMS!

Added by the PARADROP-A WORM! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Added by the AGOBOT.JR WORM!

Added by the SDBOT-OB WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT.BT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT-AFP WORM!

Added by a variant of the SDBOT WORM!

Added by the SDBOT-KW WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%

Added by the PARADROP-AI WORM! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Added by the SDBOT.BHE WORM!

Added by the AGOBOT-PP TROJAN!

Added by the AGOBOT.MX WORM!

Added by the AGOBOT.RV WORM!

Added by the SDBOT-NS WORM!

Added by the RBOT-YV WORM!

Added by the SDBOT-XY WORM!

Added by the AGOBOT-ANZ WORM!

Added by the GAOBOT.DK WORM!

Added by the AGOBOT-EC WORM!

Added by the SDBOT-WJ WORM!

Added by an unidentified WORM or TROJAN!

Added by the SDBOT TROJAN!

Added by the SDBOT TROJAN!

BookedSpace parasite. Note - the "cfg32.exe" file is located in the Winnt or Windows folder

Added by the SDBOT-COH WORM!

Added by the TREB TROJAN!

Added by the SDBOT-YM WORM!

Controls linksys wireless connection. Available from the Desktop

NetGear Wireless LAN configuration utility for the MA311 802.11b (and maybe other cards)

Added by a variant of the HACKTACK TROJAN! Not to be confused with the legitimate MS "ISDN Configuration Wizard" (Cfgwiz32.exe)

Added by the SDBOT-BIC WORM!

Wireless management utility for the HWC54G Hi-Speed Wireless-G CardBus Card from Hawking Technologies, Inc

Added by the SDBOT-FB TROJAN!

Starts Winfax pro at startup

Connection Manager as used by Earthlink and others. If you need this to ensure a proper connection but don't want to connect at startup try creating your own shortcut

Added by the SDBOT-DEX WORM!

"Finding the expert help that you need is easy on Kasamba. With more than 30,000 registered experts in over 600 categories to choose from, chances are, we`ll have just the right professional in the exact area of expertise that you need"

Adult content dialler

"Connection Keeper is an invaluable time-saving tool for dial-up users. This free program simulates Internet browsing (at a random interval) to prevent your connection from appearing idle, thus preventing your ISP from dropping your connection due to inactivity"

SBC Yahoo DSL service connection manager. You can connect from the network connections. Users having problems with this have been advised to uninstall the connection manager via Add/Remove Programs and it won't affect the service

Added by the LITEBOT-E TROJAN!

Nunci premium rate dialer

Added by the ExDial-B premium rate adult content dialer

Scheduler for updating Sony's CONNECT music download service

Hijacker - redirects to a p0rn portal, where foistware like ISTBar gets stealth installed

VX2.Transponder parasite updater/installer related

Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Level4" subfolder

Added by the BANCBAN-ET TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Central de Segurança" subfolder

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Consumer Input Toolbar. Opt-in market research monitoring you browsing habits - see the FAQ

Some kind of driver?

Added by the DIALER-Y TROJAN! Note - uses a random filename and random folders. Usually the folder containing the file is a Temp folder

MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder

Homepage hijacker

BrowserAid/BrowserPal foistware

ContraVirus misleading security software - not recommended, see here

CoolWebSearch Msconfd parasite variant

Associated with Hawking Technologies, Inc wireless products. Located in %Program Files%\Hawking\WLAN Card Utilities

CoolWebSearch parasite variant

CoolWebSearch parasite variant

Added by the KREPPER-AI TROJAN!

System Tray icon for a Silicon Motion LynxEM based PCI Graphics Card

Added by the DANI TROJAN!

Added by the RBOT-FPI WORM!

Added by the TELEFO-A TROJAN!

Part of Lenovo's (IBM) ThinkVantage Fingerprint Software - used on laptops and keyboards with integrated fingerprint readers

Brother scanner 'Control Center' application - can be started manually

System Tray access for the Xerox ControlCentre 2.0 software for their range of printers, copiers, faxes, etc

Added by the AGOBOT.GH WORM!

From Symantec's TalkWorks Pro and WinFax. Appears if you chose to have the program appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs

CoolWebSearch parasite variant

Added by a vairant of the DELF.DW TROJAN!

Added by the DLOADER-HF TROJAN. Note - the "cmd32.exe" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Browser hijacker, also detected as STARTPA-FX

Added by the BIZVES-A TROJAN!

Added by the BIZVES-B TROJAN!

Browser hijacker, redirecting to loadcash.biz

Added by the DLOADER-OI TROJAN!

Added by the DLOADER-RA TROJAN!

WorldSearch adware - re-directing searches to "world-search.biz"

Added by a variant of the DLOADER-RA TROJAN!

Reported by Norman Virus Control as W32/Downloader. Creates the files sdfff, fdsf and zxczxc. In the C:WINDOWSSYSTEM32 directory creates the files d.exe, s.exe and r.exe. Note - the "private.exe" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the AGENT-XC TROJAN!

Cookie Cop 2 from PC Magazine - cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Cookie Jar cookie manager from Jason's Toolbox. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return. No longer being actively supported

CookiePatrol - cookie interceptor stopping spyware cookies that used to be part of PestPatrol before CA's aquisition

CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Cool Desk is a virtual desktops manager. "Ever you wished to have several screens on your computer? Cool Desk creates up to 9 virtual desktops and offers you to have different windows on each of them". Not required but may be of use to you

MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder

"CoolMon monitors vital system stats and almost anything else you wish to display on the desktop"

MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder

ALT+TAB replacement Powertoy for Windows XP - enhances the graphics displayed when you want to switch between programs running full-screen

Cool Wallpaper software allows you to manage high quality photos as desktop wallpaper and screen savers

CoolWebSearch Smartsearch parasite variant

Copernic Desktop Search - "Easily search your entire hard drive in less than a second to pinpoint the right file, e-mail, music or pictures"

Copernic Desktop Search - search agent

Automatic tasking feature of Copernic Pro multi-search engine tool

Razer Copperhead mouse driver

Copy Handler lets you copy between hard disks, floppies, local networks, CDs, and many other storage media. Copy Handler gives you the power to pause, resume, restart, and cancel during the copying and moving processes

Displays copyright information on IBM ThinkPads

Added by a variant of the RBOT WORM!

Added by a variant of the SLAPER TROJAN!

Detected by Kaspersky as the SRAMLER.E TROJAN! See here

Added by a variant of the IRCBOT BACKDOOR! See here

MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking

MSI Core Center - motherboard utility for monitoring CPU speed, voltages, temperatures and fans speeds as well as overclocking

Corel Colleagues & Contracts - all-in-one organizer for scheduling meetings, maintaining addresses, etc. Part of the now defunct Corel Print Office

The Desktop Application Director (DAD) gives you easy access to all Corel applications - x represents ther version number. Available via Start -> Programs

Corel Family & Friends - all-in-one calender, address book and list manager. Part of the now defunct Corel Print House Magic

Related to Corel Photo Album

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

If you don't want to register Corel products and be reminded about it every 2 weeks disable it

Registration reminder for CorelDRAW 10

CorelCENTRAL 10 - personal information manager (PIM). Supplied as part of Corel WordPerfect Office 2002. Available via Start -> Programs

Added by the SDBOT-VZ WORM!

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Some IRC trojans/worms use this - see here for more information

??

Added by the RBOT-GVB WORM!

Broadband ISP diagnostic tool - as used by NTL and Cox Communications. Shortcut available

Added by the RBOT-SW WORM!

NetInternals CostAware - download quota measuring tool

Added by the MEDBOT.AR WORM!

Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required

Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required

??

Adware - see here

Related to Emuzed Systems and Middleware. Comes included with Windows XP Media Edition

For the programmable "one-touch" buttons on HP laptops (and others?). Safe to disable if you don't use these buttons

One Touch keyboard driver. Required if you use the additional keys

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Found on a Compaq Presario but what is it?

Added by the RBOT-FOY WORM!

Dritek/Compal ATR10 Easy Button driver. Used on certain laptops (e.g. Toshiba, Compaq) to translate special hotkeys such as Play/Pause and Constrast

Kookaburra Software's Cookie Pal cookie manager. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return

Firewall bundled with McAfee VirusScan 6.*

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Related to EZbutton quick launcher for the Media player app that comes with certain laptops

Added by the WINTRIM_A TROJAN!

Added by the MAGICON.A TROJAN!

Added by the SIMCSS TROJAN!

Added by the WINTRIM-B TROJAN!

CPortPatch is a utility is required for Dell laptops that are using a docking station. Is it needed though?

Compaq PowerCon power management software for laptops

Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information

See the entry for Compaq Message Server

Compaq PowerCon power management software for laptops

For Compaq PC's. Runs Compaq diagnostics on every boot

For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys

Easy Access Button Support for Compaq PCs. Allows the use of programmable keys on multimedia keyboards. Required if you use the additional keys

For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys

For Compaq PC's. Allows the use of programmable keys on mulimedia keyboards. Required if you use the additional keys

For Compaq PC's. Easy Access button support for the keyboard

For Compaq PC's. Allows AOL and Compuserve to use the Easy Access buttons for the internet. Is not required if you don't use the ISP providers

That is the Compaq Ink Agent for some inkjet printers, it lets users know when their ink cartridges are getting close to empty (by how many pages they have printed)

Related to Compaq.Net - not required if you don't use that

Default settings software in Hewlett Packard notebook

For Compaq PC's. Fixes audio stutter problems for ESS Maestro soundcards. You can download it here. This is a Compaq originated file and has been verified as free from viruses by McAfree/Norton

This program is bundled with HP servers. When loaded a system tray icon will be available that launches the HP Network Configuration Tool

Adroar.com adware downloader

Added by MSIL.AGENT.C TROJAN!

Added by the PANDEM.B WORM!

Added by the RBOT-AHV WORM!

Added by the DLOADER-LO TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "cpu.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by a variant of the RBOT WORM!

Program to keep the processor cool when idle in "overclocked" systems. Also available via Start -> Settings -> Control Panel

"CPUMon continuously displays the updated system statistics in a floating window as well as in system tray area"

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Added by a variant of the SDBOT TROJAN!

Added by the MIRJACK-A TROJAN!

Added by the WCUP.A WORM!

"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed

"Compaq printer utility which is required in the startup menu in order to make the printer work correctly". Personally I doubt whether it is actually needed

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Cracked Windows popup killer

CrazyTalk from Reallusion - "the worlds only facial animation tool that gives you the power to create talking animated images from a single photograph, complete with emotions." Can apparently be installed without your knowledge as well as being a legitimate download in it's own right from sites such as TUCOWS

CardReader2 from On Track Inovations Ltd. USB Card Reader

Added by a variant of the RBOT WORM!

Added by the RBOT-NY WORM!

Added by the RBOT-OA WORM!

Added by the SPYBOT.UK WORM!

Added by the MYTOB.GT WORM!

Added by the IRCBOT-TH WORM!

Creata_Mail. Smileys, stationary and more for you email. Required if you want to access the program from Outlook or Outlook Express

Kudd.com CreateAMonster. Reportedly stealth installed and Look2Me adware related

Adaptec Easy CD Creator system tray application (pre version 5). Available via Start -> Programs

Adaptec Easy CD Creator version 5 system tray application. Available via Start -> Programs

Added by the SDBOT-DHS WORM!

Part of Creative's BlasterControl

Added by the RBOT-FKR WORM!

Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again

For Creative Soundblaster Live! series soundcards. Adds a quick-launch bar to the top of the display and a System Tray icon. Available via Start -> Programs

Creative Live! Cam Manager

"Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats"

Creative MediaSource playbacks music in DVD-Audio, MP3, WMA, WAV and other media formats"

System Tray icon to configure a Creative Soundblaster PCI soundcard. Not required and re-instates itself when un-checked. Try one of the solutions on this special page. Similar to EnsoniqMixer

Resident program for Creative's PlayCenter included with Soundblaster Audigy sound cards - speeds up detection of some media CDs if the system doesn't natively support them. Available via Start -> Programs

Auto-updater for Creative Labs software

Creative WebCam tray control - can be started manually

Added by the PROLIN WORM!

For Creative Soundblaster Live! series soundcards. Detects when you insert a CD-ROM, DVD-ROM, etc. Available via Start -> Settings -> Control Panel

Creative soundcard System Tray access to, for example, volume slider controls as normally provided by the "speaker" icon. Not required unless you adjust any settings otherwise available via the standard icon

Creative Task Scheduler. What does it do and is it required?

Added by the RBOT.IAL WORM!

Added by the DELF-LB TROJAN!

MS Windows Critical Update Notification. If you want to keep Windows up-to-date, check the Windows Update site

Added by the NOALA.B WORM! Note - this file is located in the Windows or Winnt folder, and must not be confused with the legitimate Windows process of the same name as described here

Added by a variant of the SLAPER TROJAN!

Added by the SDBOT-ZV WORM!

Added by the OPASERV.G WORM!

Toshiba CrossMenu Utility - allows the user to create their own menus

Added by the IRCBOT.N TROJAN!

Added by the AGOBOT-TJ WORM!

Added by a variant of the SDBOT TROJAN!

Added by the RUSTY WORM!

Added by an unidentified TROJAN!

CryptoExpert from SecureAction Research. Advanced on the fly encryption system

Added by the KORGO.W or KORGO.X or KORGO.AB WORMS!

Crystal 3D Audio sound driver. Is it required?

Added by an unidentified malware

Compaq modem country selection

Command Antivirus related

Command line compiler for Microsoft C# it gets installed with the .NET SDK

Added by the BDOOR-AAP BACKDOOR!

Added by the RBOT-AAA WORM!

Added by a variant of the SDBOT WORM!

Part of Quarterdeck/Norton CleanSweep. "Csinject must be loaded in order for Smart Sweep to automatically monitor installations and properly track registry changes"

Added by the ZOTOB.B WORM!

Added by the HIDER-O TROJAN!

Added by the QQPASS.G TROJAN!

Added by the SDBOT-DFE WORM!

Added by the GAOBOT.GEN!POLY WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Search page hijacker, redirecting to h**p://www.search-aide.com/. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Added by the CHOD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder

Added by the KEYLOG-AQ KEYLOGGER! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by the CHODE-J WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder

Added by the CHODE-J WORM!

Added by the CHODE-J WORM!

BeyondKeylog surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Supremtec

Added by the PUNYA-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS

Added by an unidentified malware

Detected by Trend Micro as the IRCBOT.BIZ WORM! See here

Added by the AGOBOT.TX WORM!

Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Level4" subfolder

CoolWebSearch parasite variant - hijacking to Slawsearch.com. Also detected as the CWS-E TROJAN!

Added by the CWS-F TROJAN!

Added by the WINSHELL.50 TROJAN!

Added by the WINSHELL.50.B TROJAN!

Added by a variant of the SDBOT TROJAN!

ComSpySysSvr surveillance software. Uninstall this software unless you put it there yourself

Related to IBM ThinkVantage Client Security Solution

Part of the Client Security Solution on an IBM ThinkVantage (now Lenovo) PC - "a suite of ThinkVantage Technology tools designed to help protect access to your computer operating system and your sensitive data. The Client Security Solution integrates the hardware protection of its embedded chip with the protection afforded by its secure software." What does this do and is it required?"

Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot

Added by the BANCBAN-DW TROJAN!

Added by the BALICK TROJAN!

CSS Communication Agent (95 Host) from Command Software Systems (now Authentium). "CSS Central? provides administrators with a powerfully proactive tool to effectively manage and maintain the anti-virus strategy from a centralized console"

ClearSearch adware

ClearSearch adware

ClearSearch adware

ClearSearch adware

ClearSearch adware

SpyArsenalLog surveillance software. Uninstall this software unless you put it there yourself

Added by the CIMUZ-BD TROJAN!

ct.exe is a file is for the HP Learning Adventure software and if you use this software it is required to run it

Added by the RBOT-YS WORM!

Console Launcher for the Creative Sound Blaster X-Fi series

For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ

Click-to-Convert - document-to-HTML or doc-to-PDF converter. Only required if you are going to use the File -> Print method of using Click-to-Convert. If converting directly from MS Office, it is not required

Added by a variant of the OP DIALER! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "drvmod.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder

Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again

Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player, selecting Tools, then uncheck the Auto Start box. It should not start up automatically again

Added by a variant of the BIFROSE TROJAN!

Added by the DONBOMB.A TROJAN!

Added by the STARTPAGE.P TROJAN!

CTFMon is involved with the language/alternative input services in Office XP. Ctfmon.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. Ctfmon can be disabled from Control Panel, Text & Speech Services. Note - the file will always be located in the System32 folder, if it is located elsewhere it will likely be a worm or trojan! Can cause problems with some other programs if left enabled - see here for such an example

Added by the SOWSAT.B WORM!

Added by the DELIVE-A TROJAN! Note - this file is found in C:Windows or C:Winnt and is not the valid MS Office file of the same name (see here)

Added by the DELBOT-E TROJAN!

Added by the ASSASIN-G TROJAN!

Family Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Located in %System%\CTF

Added by the JV TROJAN!

CoolWebSearch Ctfmon32 parasite variant

Added by the RAIDYS TROJAN! Note - this should not be confused with the valid Office XP file, see here

Spy Sheriff/SpywareNO malware, also detected as the SPYHOAX-A TROJAN, pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE, NS6281400.so, CVXH8JKDQ2.EXE, down3.exe, sefe.exe, winstall.exe, and tool2.exe

CTFMon is involved with the language/alternative input services in Office XP. Ctfmon.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. Ctfmon can be disabled from Control Panel, Text & Speech Services. Note - the file will always be located in the System32 folder, if it is located elsewhere it will likely be a worm or trojan! Can cause problems with some other programs if left enabled - see here for such an example

Added by the BHARAT.A WORM!

CoolWebSearch Ctfmon32 parasite variant - also detected as the CWS-E TROJAN!

Added by the RBOT-GSN WORM!

AntiVirusPro misleading security software - not recommended, see here

Added by the CWS-F TROJAN!

Detected by Trend Micro as AGENT.ACEZ spyware - see here

Detected by Kaspersky as the TURKOJAN.IL BACKDOOR! See here. Note - this is not the legitimate ctfmon.exe process associated with alternate text inputs which is always located in %System%. This one is located in %Windir%

Added by the LEGMIR-AW TROJAN!

Added by the DIGIDOR-A TROJAN!

Added by the DLOADER-UQ TROJAN!

Added by the SDBOT TROJAN!

CTHELPER is a background task that is a plug-in manager for Creative drivers. The theory is that 3rd party manufacturers can use the CTHELPER plug-in interface to produce drivers, add-on features, and fixes that will integrate with a tighter fit with Creative's sound drivers and utilities. Given its purpose CTHELPER would normally be classified as a "leave alone" background task. It also allows Creative speaker setup to be synchronized with Windows Control Panel speaker setting. Without it running that check box in Creative speaker setting is not functional (settings are not in sync). Unfortunately there are often problems with CTHELPER, most notably that it can use 100% of CPU time so it's best left disabled unless you need it

Added by the RBOT-XB WORM! Note - do not confuse with the Creative application of the same name described here

Added by the HTTPDOS TROJAN!

Added by the BANCOS.E TROJAN!

Added by the CLICKER-EG TROJAN!

Added by the CLCKR-AN TROJAN!

Detects the Creative NOMAD jukebox/MP3 player at the time it is attached to USB and starts the needed application (Creative PlayCentre 2) that you use to copy MP3 files to and from it. This is required if you want PlayCentre 2 to take control of the NOMAD once connected

Printer driver (in the WINDOWSSystem32spoolDRIVERSW32X86 folder). Is it required?

Related to Creative PowerSysTrayApp. This program is a non-essential process, but should not be terminated unless suspected to be causing problems

System Registry Cleaner - stealth installed foistware from sysregistry.com

For Creative Soundblaster Live! series soundcards. Reminds you to register your card with Creative

Volume control key on Acer, Fujitsu and other laptops

Creative Task Scheduler. What does it do and is it required?

Splash screen with sound on every boot up. Installed with a Sound Blaster Audigy soundcard

Creative Labs Mixer applet for the Sound Blaster Audigy

Creative Labs Mixer applet for the Sound Blaster Audigy

Creative Sync Manager - synchronizes music tracks on your computer with your player

Creative sound card volume controls

??

Added by the RBOT-ABG WORM!

Added by the installation of a Creative Labs X-Fi sound card. This particular process provides the help functionality for your card

Creative Labs sound card driver related. It appears that it isn't required and maybe registration related

SMALL.SN spyware

Auto-detect feature of Creative Media Lite which assists you in managing your music, ripping CDs and transferring other stored music to your Zen Stone MP3 player

Associated with the Surf Sidekick adware and should be removed

Associated with the Surf Sidekick adware and should be removed

Command Antivirus related

Added by the PUNYA-B WORM!

Added by the PUNYA-A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the BUGBEAR.A WORM!

Added by the RBOT-AMO WORM!

CurseClient add-on manager for World of Warcraft and Warhammer Online games

ScreenDragon video player

CursorXP from Stardock - tool for creating mouse cursors

Curtain (from Chaotic Visions) - "is a Windows utility which gives you the power to hide any window or group of windows to your system tray"

Automatic logon feature of Customizer 2000 - "a special utility which is designed to optimize Win9x/ME performance. The program lets you explore the many hidden settings in Windows, and make changes"

File sharing utility

Added by the NACO.A WORM!

Added by the SDBOT.BV WORM!

Added by the MAILBOT-BY TROJAN!

Sub-system used by Cisco VPN client for making a connection to a remote IPSec server

Chat Watch "is a monitoring and logging software for online chat and instant messaging programs"

ChatWatch - chat monitoring tool

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Checks the software version on your PC to that of the iSeries it is connected to. Not required - and can be turned off in the Client Access properties. It's a waste of resources

Client Access Help Registry Update Function - part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. It only updates the help files on your PC to match the level of the attached iSeries

Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. Useful if you are going to access the iSeries through Windows Explorer to move files back and forth between Windows folders and iSeries folders. This is a tool that is only used by Client Access administrators (usually) so it is not required - a waste of resources

Welcome wizard launcher - Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. What does it do and is it required?

IBM Thinkpad related?

Related to ContentWatch Parental Control internet filter

Added by a variant of the SDBOT WORM!

ContentProtect from ContentWatch - internet filter

Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs

Part of Belkins "Multimedia Cleaning Kit" and is automatically installed when you run their optical disk drive cleaning utility - to remind you to clean your drive after "x" amount of time has passed

From G-Tek Technologies. Allows you to set the PC in one of three modes, Standard, Enhanced and Kiddo. Standard is full function, Enhanced prevents accidental damage and Kiddo is a play environment for kids. Pre-installed on some Packard Bell PCs

Cyber Defender 2003

Part of the Sony Picture Uility software supplied with Sony Cybershot digital cameras. What does it do and is it required?

Unidentified adware

Cyberhawk from Novatix. Protects against viruses, spyware, identity theft

CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

CyberLat RAM Cleaner - memory optimizer. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

Part of CyberMedia's Oil Change program. Not normally required. Note - if you have TextBridge, CyberMedia Agent may attach itself to TextBridge and cause TextBridge to crash everything if this is disabled

"CyberPatrol is one of the most powerful and popular client-based, browser independent, Internet safety software solutions for Windows-based standalone PCs available today"

Added by the KICKIN.A (or CYDOG.C) WORM!

Adware. Check here for information about Cy-Door and here for a program that can remove it

Adware. Check here for information about Cy-Door and here for a program that can remove it

??

Cypherus - encryption software

Related to CypressViewer from Siemens that "allows ACUSON Cypress cardiovascular system PLUS users to store, view, and analyze Cypress system PLUS studies on a standard Windows PC"