Windows Vista Tips


Processes beginning with i

The table below includes any process titles beginning with i, from which further information can be found by clicking on the process title. The icon beside the information can be used to quickly determine if this is a safe file in combination with the key below:



This file is normally safe to leave running. In most cases, this file is not required to run on startup and can be run manually. Warning, this file may be a virus, spyware, resource hog and running it is not recommended. This file may or may not be necessary to load on startup, depending on your circumstances. No information is available for this item.

[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z]

Processes beginning with i:

File Type Process Name and Information
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN!
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN!
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN!
I just want to say I love Milko and I need a drink
Added by the CHIKO WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Documents and SettingsAdministratorLocal SettingsApplication Data folder
I-Worm.GiGu
Added by the GINK WORM!
I/O Controllers
Added by the TIBIK-B TROJAN!
I386
Added by the MYPOWER WORM!
I81SHELL
Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard
i8kfangui
Graphical interface for fan speed control
IAAnotif
IAA Event Monitor User Notification Tool - part of Intel? Application Accelerator - "a performance software package for desktop PCs using select Intel? chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed
iamapp
AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
Iamnacho On Irc.MusIrc.com Is a Homosexual!
Added by the RANDEX.Y WORM!
Iap
Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely?
ias
InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself!
IASHLPR
Added by the OPASERV.T WORM!
ibin
Added by the PERDA-C TROJAN!
ibm
Added by the LEGMIR-AH TROJAN!
IBM Keyboard Driver
Added by the SDBOT.IC TROJAN!
IBM Warranty Notification
IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire?
ibmmessages
Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport"
Ibmmon.exe
??
Ibmpmsvc
Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes
IBMPRC
IBM application - what does it do and is it required?
IBMUltraBayHotSwapCPLLoader
Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops
IBMUltraBayHotSwapSound
Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound?
IBM_PWMGR
IBM Password Manager
Ibs
Added by the HIDEDIAL-B TROJAN!
IBWin Background process
IBackup for Windows
IBWin Monitor
IBackup for Windows
IcaBar
Related to Citrix MetaFrame
icasServ
Browser hijacker, redirecting to Searchforfree.info. Also detected as the ICASERV-A TROJAN!
icccomp
Detected by Kaspersky as the ZHELATIN.EQ WORM! See here
ICcontrol
Added by the ICcontrol premium rate adult content dialer
icdd7ee6
LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "icdd7ee6.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
icddefff
LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "icddefff.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
ICH Synth
Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices
icifati
Added by the SDBOT.ZZH WORM!
iClean
IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy"
ICM
Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail
iCn
iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist. Not related to the Mac icon program of the same name
ICO
Found on some Sony Vaio, IBM Thinkpad and Dell (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Required on the Dell Inspirion 530 as without it the Dell mouse suite does not load and mouse settings are not retained on a reboot. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games
Icon Animation
Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons
Icon Hearit 95
Audio desktop customization utility from Moon Valley Software. Resource hog
Icon Hearit 98
Audio desktop customization utility from Moon Valley Software. Resource hog
Icon lptt01
RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
Icon ml097e
RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
iconcache
Related to the Vista Customization Pack
ICONCLNT
APC PowerChute Tray Icon. Associated with the UPS listing
ICONDESK
Small utility which will allow you the option of hiding or showing your desktop icons
Iconfig.exe
Icon for LS-120 "Superdisk"
iConfigLoader
Added by the GAOBOT.AO WORM!
Iconoid
Iconoid is a desktop icon manager
Iconsaver
IconSaver is a desktop icon manager
ICQ
Added by the GORMLEZ-A WORM!
ICQ Agent
Added by the AGENT-FZJ TROJAN!
ICQ Center
Added by the RANDIN WORM!
ICQ Chat Service
Added by a variant of the RBOT WORM!
ICQ Hacking Pro
Added by a variant of the NETSPY TROJAN!
ICQ Lite
ICQ Lite - compact version of the popular messaging program
icq lite
Added by the AGENT-DSF TROJAN!
icq lite
Added by the IRCBOT-TJ TROJAN!
ICQ Lite Messenger
Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory
ICQ Messenger 2002
Added by the SDBOT-ABL WORM!
ICQ Net
Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup!
ICQ Plus
ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs
IcqBeta
Added by an unidentified TROJAN!
ICQNet
Added by the NETSKY-C WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder
icrosof Avps32 Control
Added by the RBOT-AVC WORM!
icrosoft Visual
Added by the RBOT-AYO WORM!
icrosoft Visual InterDevc
Added by the RBOT-AYP WORM!
icrosoft Windows DLL Services Configuration
Added by the SDBOT-AER WORM!
icrosoftf Avpx Control
Added by the RBOT-AYN WORM!
ICSDCLT
Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines
ICServer
Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations
ICSMGR
Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers
ICU-Sucker
Added by the ILLNOTIFIER.D TROJAN!
IC_KEY_3
Instant Chess related
ID Commander
Caller ID utility for identifying incoming telephone numbers
ID8525
Added by the ID8525.A TROJAN!
ID8525
Added by the ID8525.A TROJAN!
IDA
HP related - in a Program FilesHewlett-PackardPC COE folder
IDE
Added by the ASSASIN.F TROJAN!
IDE Loader
Added by the XILON TROJAN! Related to the game "Diablo II"
idecntl
Added by a variant of the CRYPTER.C TROJAN!
iDesktop
Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse
idlesam
Detected by Kaspersky as the ZHELATIN.EQ WORM! See here
IDMan
Internet Download Manager - download files faster, schedule and resume
idmlssp
Added by a variant of the SLAPER TROJAN!
IDTemplates
Added by the BRONTOK-H WORM!
IDW Logging Tool
Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems
IE configure
Added by the LINEAGE-C TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually!
IE Doctor
IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options"
IE Java Update
Added by the AGENT-HD TROJAN!
IE Menu Extension toolbar
Topconverting.com180Search "IEMenuExtension" toolbar. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
IE New Window Maximizer
IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows
IE Runtime
Added by the PICRATE.B WORM!
IE Runtimes
Added by the RBOT-ADZ TROJAN!
IE**.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
IE**32.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
IE-Bar
DesktopMedia adware
IE6
Added by a variant of the SDBOT WORM!
IE6
Added by the GAOBOT.DXO WORM!
IE6
Added by the RBOT-ATF WORM!
IE6
Added by the RBOT-GOV WORM!
IEACCESS
AsdPlug premium rate adult content dialer variant
IEACCESS
IEAccess premium rate adult content dialer variant
IEAgent update check
Added by the BOMKA TROJAN!
iecheck
Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2
IECheck
Added by the TIRBOT-D WORM!
IECheck
Added by the TIRBOT-E WORM!
IECheck
Added by the TIRBOT-G WORM!
IECleanAux
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup
iedll
Homepage hijacker, redirecting to coolwwwsearch.com
IEDriver
Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze
IEDriver
IEDriver adware variant
IEDriver
IEDriver adware variant
iedwa104
Added by the DLOADR-BBW TROJAN!
IEengine
STARTPAG.AI hijacker
IEexplorer AUpdate
Added by the RBOT-GRE WORM!
IEFeatures
Added by the POPMON.A TROJAN! - also known as PopMonster adware
IEFeatures
Added by the POPMON.A TROJAN! - also known as PopMonster adware
IefxTray
Added by the RILER-H TROJAN!
ieharv.exe
Added by the BANKER-HH TROJAN!
Iehelper
Outwar adware downloader
iel2cde8
LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "iel2cde8.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
ielcaabe
LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "ielcaabe.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
IELoader32
Added by the SPEX or SPEX.B WORMS!
Iesar
Browser hijacker - redirecting to an adult web page
Iesearch.exe
LookNSearch adware
IEService.exe
FastFind parasite variant
IESet
Added by the PWS-BLUEDIT TROJAN!
iesetupi.exe
Added by a variant of the RBOT WORM!
iestart
Added by the NEMOG.C TROJAN!
ietsr
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc
ieupdate
Added by the ASOXY TROJAN!
ieupdate
Adware downloader trojan
ieupdates
Added by a number of TROJANS such as DWNLDR-HGI and AGENT-HGA and the Antivirus 2009 rogue security software - see here
IEXPL0RER
Added by the AGOBOT-QL WORM! Note the filename has a "0" rather than an upper case "o"
iexplo
Added by the SIDEA TROJAN!
IExploer
Added by the IRCBOT.BT TROJAN!
Iexploit
Added by the INKER.B WORM!
iexplor.exe
Added by an unidentified WORM or TROJAN! See here
Iexplore
Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
IEXPLORE
Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %Windir%
IExplore
Added by the DLOADER-YZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in a "Custom" subfolder
IEXPLORE
Added by the BANKER-BWE TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
iExplore Ini
Added by a variant of the IRCBOT BACKDOOR! See here
Iexplore Services
Added by the LITHIUM BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup!
IEXPLORE.EXE
Added by the BANCOS-CJ TROJAN!
IEXPLORE.EXE
Added by the BIFROSE-C TROJAN!
IExplorer
Added by the BDOOR-BY TROJAN!
IExplorer
Added by the BANCOS-CH TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
IEXPLORER
Added by the JU or BANCBAN-IP TROJANS!
Iexplorer
Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%
iexplorer lptt01
RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
iexplorer ml097e
RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here
Iexplorer.exe
Added by the BANCBAN-EN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
IExplorer32 Java Scripting
Added by the RBOT.ABO WORM!
IExplorer32c Java Scripting
Added by the RBOT.ABN WORM!
IExplorer6 Java Scripting
Added by a variant of the SDBOT WORM!
IExplorer7 Java Scripting
Added by a variant of the SDBOT WORM!
IExplorerService
Detected by Kaspersky as the AGENT.KIU TROJAN! See here
iExpresser
Detected by Trend Micro as the SLENFBOT.AP WORM! See here
ifp
Added by the CLAGGER-AG TROJAN!
ifperx
Added by a variant of the SLAPER TROJAN!
IFSplash.exe
I-FORCE driver for force feedback steering wheel
igamatu
Added by the SDBOT.AQ TROJAN!
igamatu
Added by the IRCBOT.R WORM!
igfxtray
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel
Iglpbv
??
igndlm.exe
IGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be initialized through that browser
igsex2x
NewDial premium rate adult content dialler
iHP-100
Drive Letter Searcher, iRiver iHP-100 iHP and H Series player related - does it need to start with Windows every time?
iilc
Homepage hijacker
Iinl
PurityScan/Clickspring adware
IISADMINS
Added by the AGOBOT.U WORM!
iisvers
Added by an unidentified TROJAN or adware
iiuyvyu
Added by the AGENT-EOF TROJAN!
iIWiper
System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis
IJ75P2PSERVER
Printer utility which is required in order to make the printer work correctly
IKE Service 95
Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything
iKeyWorks
A4Tech wireless keyboard driver and utility
IKL
IKL surveillance software. Uninstall this software unless you put it there yourself
iLLeGaL
Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
iLLeGaL.exe
Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename
ILO_Office_Manager
Intense Educational Ltd - Language Office Software. Is it required?
iLyric
iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button
iM Start Center
Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner
Image
CoolWebSearch parasite variant
Image & Restore
Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run
Image Remote Players
Added by a variant of the IRCBOT BACKDOOR!
Image Transfer
Sony Image Transfer software provides direct image transfer from your digital camera to a PC - can be started manually
ImageDrive-{hex numbers}
Nero ImageDrive from Ahead - virtual CD/DVD drive software
Imagefox
ImageFox 2.0 (formerly available from ACDSee) is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes
Imagemgt32
Added by the GEMA TROJAN!
ImagePath
Added by the SDBOT-XB WORM!
ImageTune
Display Tune (aka Image Tune) from Portrait Displays, Inc. - "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface and the user is guided, step-by-step, through the entire initial tuning process." Also licensed and renamed by manufacturers such as Gateway and HP
IMAPI
Added by the DOWNDEL-A TROJAN!
iMarkup Client
Enables the iMarkup Client web page annotation utility to run in the background and be available in systray. Shortcut available via Start -> Programs
Imatio
Imation Disk Manager - enables you to create a password protected area on your Imation USB flash drive
imchat
Added by a variant of the IRCBOT TROJAN!
IMClass
Added by an unidentified WORM or TROJAN!
imcssl
Detected by Kaspersky as the SLAPER.U TROJAN! See here
imekrig
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
IMEKRMIG6.1
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
Imesh
Imesh is a file sharing system
Imesh Auto Update
Update check for the Imesh file sharing system. Turn the update off under "options"
IMEvtMgr.exe
Added by the KEYLOG-AR TROJAN!
ImgIcon
Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
imgit
Added by the BANKER-EM TROJAN!
ImgStart
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
ImgTask
Related to WalletPix digital photo album. "On some computers, the Wallet Pix device will leave behind a memory-resident file called ImgTask.exe. This file will be located in the operating system directory on your computer (typically C:\windows or C:\winnt). You can remove this file at any time and it will not impact your computer’s performance or functionality. The file will be restored each time you plug in the Wallet Pix though"
Imjpmig*.*
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese). *.* represents the version number
IMJPMIG8.2
Added by the VB-CYG WORM!
immcheck.exe
Related to I-FORCE driver for force feedback steering wheel?
ImMsn
Added by the WEBDOR.AK TROJAN!
IMOL
IncrediMail for Office Outlook Add-On
Imonitor
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs
imonitor
Added by the IMONI-A TROJAN!
IMONTRAY
System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
IMprocess
IMNames adware
IMStart
InterMute security software related
IMVU
IMVU chat client that allows you to create "your own avatars who chat in animated 3D scenes"
imwinsrvc
Added by the SLAPER.E TROJAN!
IMwire
SafeSurfing adware variant
imxecs
Added by the AGOBOT.ALA WORM!
im_autorn
Added by the IMAV.A WORM!
im_autorn
Added by the BAGLEDL-BO TROJAN!
InCD
Ahead InCD packet writing software - similar to DirectCD. For Nero 5.0 or 5.5 (InCD3), it does not need to start with Windows. You can run InCD.exe manually before inserting an appropriately formatted CD-RW (CD-MRW) disk. For Nero 6.0, 6.3 or 6.6 (InCD4), it does need to start with Windows. It does not function correctly when you try to run it manually, and you will not have write access to MRW (Mount Rainier) formatted CD-RW (CD-MRW) or DVD-MRW disks. To regain write access and other features, InCD 4 must start with Windows
IncMail
"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
InControl Desktop Manager
For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs
Incredimail
"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
Incredimail
"IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality"
Index Service
Added by the AGOBOT.CH WORM!
Index Washer
Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG
Indexindicator
Added by the LAZAR TROJAN!
IndexSearch
Associated with PaperPort scanner software from ScanSoft
IndexTray
Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents"
IndicatorUty
Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook, eg, when you press the hotkey for muting the sound, a loudspeaker icon with a cross on it is displayed
ine
Added by the RBOT.BNL WORM!
INET
Meplex adware
Inet DataBase
Added by the QEDS WORM!
Inet Delivery
Inet Delivery adware
Inet Delivery
Inet Delivery adware
Inetapi
Added by the NETDEVIL.14 TROJAN!
inetcntrl
Bsafe Online - internet filter
InetConf
??
Inetd
Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation
inetinfo.exe
Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more)
inetinfomon manager
Added by the DONBOMB.A TROJAN!
inetmgr
Actual Names (AdvSearch) Internet Keywords parasite
InetMSN
Added by a variant of the SDBOT TROJAN!
InetServices
Added by the WOCK32-A TROJAN!
infamous.exe
Added by unknown malware. WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup. Infamous.exe is identified by Panda antivirus as Trj/Briss.A
InfeStop
InfeStop spyware remover - not recommended, see here
Info Select
Info Select from Micro Logic - personal information manager
Info32x
Added by the GEMA TROJAN!
InfoData
Added by the VUNDO TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The random DLL file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
InfoPenMSN
InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand
Infoplay.exe
Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed?
Information Update
Detected by Kaspersky as the CENTIM.CH TROJAN!
Infra-red Monitor
System Tray access to infra-red devices. Not required unless you use infra-red devices
infus
Adult content dialler
Infuzer
Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities"
infwin
VX2.Transponder parasite updater/installer related
Init32
Added by the WINEX.A TROJAN!
Initial Page
EasySearch browser hijack installer
Initialize8x8
Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay
injob
Added by the BINJO TROJAN!
Ink Monitor
Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
InkWatch
Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line
InoRPC
Associated with eTrust Antivirus/InoculateIT
InoRT
Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage
InoTask
Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates
iNotice
Added by a variant of an MSN worm that tries to lure people to an infected site by using nude pictures and videos
insCOA5
??
Insider
Detected by PCTools as the AGENT.KMC TROJAN! See here
InstaAlert
"Kayako InstaAlert allows you to receive realtime alerts whenever a ticket gets updated under the assigned departments. The application displays popups as and when the tickets are created or replied to allowing you to answer your customer requests and issues promptly"
Instafinder
TopSearch.D adware
InstaFinderK
InstaFinder adware
Install
Added by the BANCBAN-HG TROJAN!
Install part II
Added by the RELFEERWORM!
Install Pending Files
Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required?
InstallAurealDemos
Used to initialize the Aureal A3D demos InstallShield wizard
InstallBuddy
InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync
InstallCleaner
Added by the ANYHOMB.F TROJAN!
Installed shell32.dll
Added by the LOVGATE.AO WORM!
Installed shell32.dll
Added by the LOVGATE.E WORM!
Installer
Malware - detected by Kaspersky as the AGENT.MM TROJAN!
InstallNAIProduct
Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error?
InstallProvider
WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended, see here
Installs SP2
Added by a variant of the RANDON.AN WORM!
Installstub
Tool for Outlook and Outlook Express from Plaxo for organising and keeping contacts organised and updated and providing online access to your contacts and access from PDA or mobile phone
Instance 001
Added by the ALASROU-A WORM!
Instant Access
InstantAccess premium rate adult content dialler variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Instant Access
InstantAccess premium rate adult content dialler variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Instant Access
InstantAccess premium rate adult content dialler variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Instant Access
InstantAccess premium rate adult content dialler variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Instant Access
InstantAccess premium rate adult content dialler variant. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
Instant Access
InstantAccess premium rate adult content dialer
Instant Access
InstantAccess premium rate adult content dialer variant
Instant Buzz Daemon
Instant Buzz adware
Instant Messenger Service
Detected by Kaspersky as the HEUR TROJAN!
Instant Update Center
From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner
Instant Wireless Configuration Utility
Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
Instant Wireless Configuration Utility
Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration
InstantAccess
From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs
InstantDrive
Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software
InstantPleasure
Adult content dialler
InstantPleasureXXX
Adult content dialler
InstantTray
Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually
instit
Added by the OPASERV.H WORM!
instit
Added by the OPASERV.K WORM!
InstUtlR.exe
??
intdctrr
SafeSurfing adware variant
Intec Service Drivers
Added by the SDBOT-ADN WORM!
Intec Service Drivers
Added by the RBOT-GLU WORM!
Intec Service Drivers
Added by the RBOT.HAZ WORM!
Intec Services Driverrs
Added by a variant of the SDBOT WORM!
IntegardTray
System Tray access to Integardparental control software from Race River Corp
Intel Active Monitor
System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards
Intel Audio Studio V2.0
Detected by VBA32 as the BIFROSE.ADR TROJAN!
Intel Driver
Added by a variant of the SDBOT WORM!
Intel File Transfer
Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients
Intel PDS
Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled
Intel Product Number Utility
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
Intel PROSet Tray Icon
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features
Intel Service Drivers
Added by the MSCONFIG16 TROJAN!
Intel system tool
Added by the SPYRE-H TROJAN!
Intel system tool
Added by the SPYRE-C TROJAN!
Intel system tool
Added by the AGENT-EBT TROJAN!
Intel system works
Added by the RBOT.QGA WORM!
Intel(R) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel
Intel(R) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. If the user wishes to have "HotKey" access to Intel's customised graphics properties, it is required, otherwise not. It can be disabled via the Display Properties in the Control Panel
Intel(R) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Not known exactly what it does but apparently it isn't required
intel32.exe
Added by the SmitFraud alias SPYJACK-B TROJAN!
IntelAPMClient
LANDesk Management Suite software component
IntelAudioStudio
"Intel Audio Studio combines Intel? High Definition audio hardware features with Sonic Focus* Audio Refinement and Dolby* technologies to provide you with a comprehensive tool that puts you in control of your audio experience". Audio utility supplied with Intel motherboards
InteliSys
Advertisingvision adware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder
intell32.exe
Added by the SmitFraud alias Desktophijack.C TROJAN!
intell321.exe
Added by the SPYJACK-B TROJAN!
Intelliflag_be.exe
Added by the Intelliflag SPYWARE!
IntelliPoint
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
IntelliPoint
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features
Intellitype
For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them
IntelMEM
Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line
IntelProcNumUtility
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here
IntelWireless
Associated with the Intel PRO/Set Wireless software
IntelZeroConfig
Zero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled
Intense Registry Service
Intense Educational Ltd - Language Office Software. Is it required?
InterceptedSystem
Added by the ANACON-B WORM!
InterCheck Monitor
Part of Sophos ant-virus sofware
InterCheckMonitor
Part of Sophos anti-virus sofware
Interdll
Added by the DELF family of TROJANS!
Internal
Added by the SMOTHER and TRANSLAT TROJANS!
Internal
Added by the FORTNIGHT.D TROJAN!
Internal Memory File
Added by the RBOT-GKT WORM!
InternalSystray
Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP)
internat
Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%\system (where %windir% is the Windows directory - C:\Windows or C:\Winnt) whereas this version resides in %windir%
Internat
Added by the ALADINZ.P TROJAN! Note - this is not the legitimate systray.exe process. If you right-click on the real systray.exe the "Properties" reveal it to be a Microsoft file
Internat
Added by the NYRUBOT-A WORM!
Internat
Added by the CMJSPY-Y TROJAN!
Internat Conf
Homepage hijacker, redirecting to coolwwwsearch.com; see for example here
internat.exe
Microsoft language selection icon in system tray, located in the System (Win98/Me) or System32 (WinNT/2K/XP) folder
Internat.exe
Added by the NETSNAKE TROJAN! Note - the real internat.exe resides in %windir%system (Win98/Me) or %windir%System32 (WinNT/2K/XP) (where %windir% is the Windows directory - C:\Windows or C:\Winnt) and has a "?" icon wheras this version resides in %windir% and has a ZIP icon
internct
Added by the GRAYBIRD.F TROJAN!
internet
Added by the MIFENG-K TROJAN! Note - this is not the legitimate smss.exe process which should NOT appear in Msconfig/Startup!
Internet
Added by the PWS-CS TROJAN!
Internet
Added by the RBOT-AJG WORM!
internet
Added by the MIFENG-D TROJAN!
Internet
Added by a variant of the SDBOT WORM!
Internet
Added by the RBOT-GFJ WORM!
internet
Added by a variant of the SDBOT WORM!
internet
Added by the DSPY-A TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!
Internet
Added by a variant of the RBOT WORM!
Internet
Detected by PCTools as the RBOT.AAYF WORM! See here
Internet Answering Machine
From Callwave. It offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
Internet Answering Machine
From Callwave - offers a free utility to monitor your incoming phonecalls if you only have a single telephone line for internet access
Internet Application Driver
Added by the IRCBOT-WK TROJAN!
Internet Call Director
TELUS Internet Call Director (ICD) provides Internet users with real-time call notification while connected to the Internet
Internet Call Manager
Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail
Internet Config
Added by the SDBOT TROJAN!
Internet Connection Wizard
EasySearch adware
Internet Connection Wizard
Added by the SMUTSRCH-A TROJAN!
Internet Connection Wizard
Added by the DLOADR-AWD TROJAN!
Internet Content Publisher
Added by the RBOT-UD WORM!
Internet Disk Cleaner
"Internet Disk Cleaner from Elongsoft "protects your privacy by cleaning up all Internet tracks and past computer activities"
Internet Download Accelerator
Internet Download Accelerator download manager
Internet download manager service
Added by the RBOT-BMS WORM!
Internet Exploere Services
Added by the EVIAN.C WORM!
Internet Explore Microsoft
Added by the RBOT-AOF WORM! Note - the executable is spelt with a lower case "L" rather than an lower or upper case "i" which is the case with Internet Explorer
Internet Explorer
Added by the LORSIS WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)
Internet Explorer
Added by the RBOT-EY WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
Internet Explorer
Added by the NETHIEF-O BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe)
Internet Explorer
Added as part of a new potential CWS infection, and part of a suite of programs that installs a web server, php, ftp server, socks, and mail server on your computer without your knowledge. These files are known to be part of an infection that transmits information about your bank accounts, passwords, and other financial information. It should be deleted immediately, you should enable your firewall, and you should contact your financial services in order to report the issue and to have your passwords changed
Internet Explorer
Added by the RBOT-AZC WORM!
Internet Explorer Configuration
Added by the SDBOT-UL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
Internet Explorer Security
Added by the RBOT-ALQ WORM!
Internet Explorer Updater
Added by the DOWNLOAD TROJAN!
Internet Explorer Updater
Added by the REUR.B WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)
Internet Explorer6
Added by the RBOT.AGC WORM. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
Internet Firewall Layer
Added by a variant of the SPYBOT WORM!
Internet History Eraser
Internet History Eraser - deletes your browsing tracks
Internet Loader1
Added by the KWBOT.B WORM!
Internet Mail and News
EasySearch adware
Internet Mail and News
Added by the SMUTSRCH-A TROJAN!
Internet Mail and News
Added by the DLOADR-AWD TROJAN!
Internet Optimizer
Internet Optimizer parasite - detected by Sophos as the DLUCA-G TROJAN and variants
Internet Protocol Configuration Loader
Added by the SDBOT TROJAN!
Internet Security Service
Added by the RBOT-GFP WORM!
Internet Security Service
Added by the RBOT-GQL WORM!
Internet Security Service
Added by the RBOT-GML WORM!
Internet Security Service
Detected by Trend Micro as the RBOT.UX TROJAN! See here
Internet Send
Unidentfied adware
Internet Server
Added by the STARTPA-EM TROJAN!
Internet Service
Added by the SPYBOT-DE WORM!
internet service
Added by the RBOT-QS WORM!
internet service
Added by a variant of the RBOT WORM!
internet service
Added by the RBOT.EAT WORM!
Internet Services
Added by the SDBOT-PW WORM!
Internet Services
Added by the MYTOB.BT WORM!
Internet Services
Added by the RBOT.BNT WORM!
Internet Services
Added by the MYTOB.MN WORM!
INTERNET SERVISES
Added by the KWBOT.Z WORM!
Internet Sharing Server
Intel AnyPoint internet sharing software. Now discontinued
Internet Suspention
Added by the WOOTBOT.HV WORM!
Internet Sweeper
Internet Sweeper - removes unnecessart left over files after browsing the internet
Internet Timer
Shareware dial-up connection call cost calculator from Ratsoft
Internet Washer Pro
Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
Internet.exe
Added by the MAGICCALL VIRUS!
internet.exe
Added by the YINI MACRO!
Internet2 Optimizer
Added by a variant of the RBOT WORM!
InternetCalls
InternetCalls - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype
InternetExplorer2
Added by the SDBOT-CZP WORM!
InternetExplorer32
Added by the RBOT-GRA WORM!
InternetShield
InternetShield misleading security software - not recommended, see here
InternetSpy
Internet Spy - freeware keylogger that tracks all visited websites including the date and exact time these sites were visited. The information is stored in a file that may be accessed by the person who knows where it is saved. Remove unless you installed it yourself!
InternetWasherPro
Internet Washer manages temporary browser files, cookies, etc - a 'trial' Internet Washer Pro seems to have been widely stealth-installed around March 2003
INTERNET_SERVISES
Added by the SDBOT.Q TROJAN!
InternodeUsage
Australian ISP's free monthly download meter
Internt
Added by the PEEPER or CARUFAX.A TROJANS!
Intersoft Msngr
Added by the AGOBOT-NW WORM!
InterTrust Quick Start
InterTrust offers something known as Digital Rights Management to control legal software download and other E-commerce related business
InterU
Added by the IRCINTER.A TROJAN!
Intervideo Win Cinema Manager
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
Intervideo Win Cinema Manager
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
Intervideo WinCinema Manager
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
Intervideo WinCinema Manager
WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs
Intervideo WinScheduler
WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
Intervideo WinScheduler
WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs
InterVoip
InterVoip - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype
InterWARN
InterWARN by Storm Alert Inc. Provides customized, automated access to critical weather and civil emergency information from the US National Weather Service. Required if audio and screen crawler alerts are desired. Also available via Start -> Programs
Intespention
Added by the FORBOT-FL WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%
Intmgr
Added by the GEMA TROJAN!
intranet
Added by the SPYBOT-DW WORM!
Intranet
Added by the CHIMOZ.AC TROJAN!
Intranet
Detected by Kaspersky as the RBOT.SV BACKDOOR! See here
Intranet Explorer
Detected by Trend Micro as the POEBOT.DK BACKDOOR! See here. Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup!
Intrenat
Added by the LEMIR.E TROJAN!
Introducing Media Manager
MS Media Manager tour. Not required
Introduction-Registration
For Compaq PC's. Should only run first time, PC Introduction & Compaq registration
IntruderAlert
Intruder Alert '99 from Bonzi - spyware
IntSys1
Added by the BANLOA-ASE TROJAN!
Inventory Scan
LANDesk Management_Suite software component
Ioadqm
Added by the HAWAWI WORM!
iobi
iobi Home - a mail/voice service by Verizon
iolo AntiVirus
iolo AntiVirus
iolo Personal Firewall
iolo Personal Firewall
Iolo Task Agent
Iolo System Mechanic Task Agent. Scheduled maintenance
iolo Utility Bar
Iolo System Mechanic Utility Bar - can be launched manually
ioloDelayModule
Part of Iolo System Mechanic. Used to delay the start of an application which loads automatically as Windows loads
Iomega Automatic Backup
Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
Iomega Automatic Backup 1.0.1
Iomega Automatic Backup - automatic backups for use with Iomega portable HDD
Iomega Backup Scheduler
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
Iomega Disk Icons
Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
Iomega Drive Icons
Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running
Iomega ImIconXP
Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system, and provides drag-and-drop file access, access and write protection, and formatting of the disks
Iomega QuickSync
??
Iomega Startup Options
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
Iomega Watch
Used by Iomega drives. Available via Start -> Programs
IomegaWare
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs
Iomon98.exe
PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang
ioroxxo microsoft sux
Added by a variant of the RBOT WORM!
IP Packet Redirect Service
Added by the FORBOT.SM WORM!
IP Stack
Added by the AGOBOT.CW WORM!
IP**.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
IP**32.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log
iPalm
Installed with a Panasonic iPalm digital camera. Used to upload photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded
IPC Connection
Added by the RBOT-AEG WORM!
IPC Spool Manager
Added by the SDBOT-ZC WORM!
IPC Spool Manager
Added by the SDBOT-BLU WORM!
ipcfg.exe
Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN!
IPConfig
Added by the HACARMY.E TROJAN!
IPConfig
Added by a variant of the HACARMY.E TROJAN!
IpCtrl
Added by an unidentified VIRUS, WORM or TROJAN!
IPFW
Added by the DLOADER-YF TROJAN!
IPHSend
AOL related. What does it do and is it required?
IPInSightLAN 0*
Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. This one constantly "phones home" and wastes resources. * represents 1 or 2
IPInSightMonitor 0*
Installed with Verizon DSL accounts. IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. * represents 1 or 2
IPinst
For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out
IPLog Security
Detected by Trend Micro as the IRCBOT.GP BACKDOOR! See here
iPlusAgent2
Related to iriver portable media products. What does it do and is it required?
ipmon.exe
Added by the RECERV or R3C.B TROJANS!
IpNetwork
Maxifiles adware
Ipnuker
Added by the INKER.B WORM!
IPO3
IP Operator 2005 - found on LG Electronics Notebook. The applet makes network connections easier to view and manage than does the standard Windows Network Connections tool. The WLAN module is easy to turn on or off with the press of a single button
Ipod Help
Added by a variant of the RBOT WORM!
iPOD USB Driver
Added by a variant of the RBOT WORM!
iPod USB Service
Added by a variant of the RBOT WORM! Do NOT confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the Program FilesiPodin folder, and is implemented as a system service, thus NOT listed in Msconfig/Startup!
iPodManager
Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods
iPodWatcher
Associated with Apple's iPod MP3 player. Detects when the iPod is connected?
IPOT Service Drivers
Added by a variant of the FUROOTKIT TROJAN!
IPOT USB Service DRIVER
Added by the SDBOT-WA WORM!
IPOT USB Service DRV32
Added by the SDBOT-WH WORM!
IPPDetect
Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos"
ipreg
Added by the ZAGABAN-H TROJAN!
iPrint LPT Redirector
Related to Novell iPrint - "a printing solution that enables you to send documents to printers located throughout the Net." Is it required?
iPrint Tray
Novell? iPrint - based on Novell Distributed Print Services - enables you to send documents to printers located throughout the Net
iProtectYou
iProtectYou - internet filtering/parental control and network monitoring software
iprun
iProtectYou spyware
iPSec7
Detected by Trend Micro as the AGENT.AHVR TROJAN! See here
ipsecdialer
Cisco VPN Client - lets local users gain Administrator privileges on the operating system
ipsecdialer
Cisco VPN Client - lets local users gain Administrator privileges on the operating system
IPSecMon
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
IPTable Configuration
Added by a variant of the RBOT WORM!
iptray
System Tray access to Intel Desktop Utilities - "provides you with the means to monitor system temperatures, voltages, fan speeds, and hard drive health; view detailed system information, and test your system hardware for common errors"
IPv6 Helper Driver
Added by the AGOBOT.TC WORM!
IPv6 STUN Service
Added by a variant of the SDBOT WORM!
IPW
Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone"
ipw
Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone"
ipwf
Added by the SCHOEBERL TROJAN!
IpWins
IPWins adware
ipxwshel
Added by the WAREZOV.DG WORM!
IQES.exe
??
Ir41_32.ax
Intel® Indeo® video 4.4 Decompression Filter related. The "Ir41_32.ax" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder
irassync
IRASSync adware
irc session
Added by the SDBOT-ACE WORM!
IREIKE
Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet
iRis Active Monitor
Iris Antivirus - discontinued, replace with good alternative
iRiS AntiVirus Active Monitor
Iris Antivirus - discontinued, replace with good alternative
iRiver AutoDB
Associated with the iRiver Music Manager
iRiver Updater
Updates for the iRiver Music Manager - used with their digital music players
IrMon
System Tray access to infra-red devices. Not required unless you use infra-red devices
IRPMonitor
??
irssyncd
SafeSurfing adware variant
Irwftp
Added by the BANCOS-AP TROJAN!
irwftp
Added by the BANKER-AN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe)
irwftp
Added by the BANCBAN-BO TROJAN!
IrXfer
Microsoft Infrared Transfer application
ir_ftp
Added by the IRFTP TROJAN!
ir_ftp
Added by the BANCOS.H TROJAN!
IS CfgWiz
Norton Internet Security configuration wizard
Isass
Added by the FUTRO TROJAN!
IsassRenascimento
Detected by Kaspersky as the BANKER.GAX TROJAN! See here
ISBMgr.exe
Related to Sony ISB Utility. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems
iscch
Added by the LCPRANK-A WORM!
isdbdc
For Compaq PC's. May install properties in dial-up networking when you register with an ISP
isDeleteMe
Used by Norton Internet Security to remove certain files and directories on reboot when uninstalling their product
ISDN Monitor
Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon
ISDNwatch
FRITZ!X ISDNWatch - "dialing filter for more security and control on the ISDN PC. The PC is doubly protected against dialer programs and premium-service numbers: ISDNWatch allows the user to block calls to and from both individual numbers and whole number blocks"
iSecurity applet
Detected by Trend Micro as the DLOADER.UZO TROJAN! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted
ISHelp
ISpy is a security risk that logs keystrokes and captures screenshots. If you didn't install this yourself uninstall it
iShield
"GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser"
ishost.exe
Added by the XJ TROJAN!
ISLP2STA
A process from Cisco Systems Inc associated with Windows Update for wireless NIC drivers
ISMModule
Internet Speed Monitor C adware related - see example here
ISMModule2
Internet Speed Monitor C adware related - see example here
ISMModule3
Internet Speed Monitor C adware
ISMModule4
Internet Speed Monitor A adware related
ISMModule6
Internet Speed Monitor C adware related - see example here
ISMModule7
Internet Speed Monitor C adware related - see example here
ISMModule8
Internet Speed Monitor C adware related
ISMPack5
Internet Speed Monitor C adware related - see example here
ISMPack6
Internet Speed Monitor C adware related - see example here
ISMPack7
Internet Speed Monitor C adware
ISMPack8
Internet Speed Monitor C adware related - see example here
ISP.COM High Speed
User interface for Slipstream - internet acceleration through compression/decompression techniques, intelligent cacheing on the server side, and real-time conversion of large/high-bandwidth images to less bulky pix. Used by popular ISPs such as IceNet, Wanadoo, Terra, OnSpeed, United Online and AOL Canada. Required if the user's account is locked in to that proxy server
ISPSERVICE
Added by the IRCFLOOD-O TROJAN!
ISPSERVICE
Detected by Trend Micro as the FLOOD.BC BACKDOOR! See here
iSpyNOW
iSpyNOW - remote monitoring and surveillance software
Israfel
Added by the GAGGLE.D or GAGGLE.E WORMS!
IsReminder
Related to GuardWare iShield - this is the registration reminder for the trial version, so not required in startup
ISS
Meplex adware
issearch.exe
Added by the ZLOB-QF TROJAN!
issEnc32Svr
Added by a variant of the RBOT WORM!
ISSI EZUpdate Service
Part of IBM Global Services - used internally by IBM for automatic updating of software and Microsoft patching
ISStart
LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
ISSVC
Part of Norton Internet Security Suite
ISS_Certtool
IBM Client Security Certification Tool
IST Service
ISTBar adware
ist service uninstall
ISTBar adware related
istinstall zazzer.exe
Unidentified adware downloader/installer
ISTray
Part of Spyware Doctor anti-spyware from PC Tools
ISUSPM Startup
InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you're always working with the most current version
ISUSScheduler
InstallShield Update Service Scheduler. Automatically searches for and performs any updates to the software so you're always working with the most current version
ISW.exe
Related to Internet Security Wizard from AT&T (formerly BellSouth Premium Internet Security) alerts users about any potential security threats. It should not be uninstalled unless the user wants to completely remove all traces of AT&T Internet Security Suite
isxa
Added by the SMALL-EIV TROJAN!
iSysCleaner
iSysCleaner - a simple tool that searches for junk files on your computer and allows you to delete them. Simple cleaning maintenance can be done by the user
isystem
Added by the CHORUS-A TROJAN! Searchforfree browser hijacker
ItalU
Added by a TROJAN! See here TROJAN!
Itk
In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
itk.exe
Insert ToggleKey by Mike Lin. ITK sounds a tone whenever you press Insert
iTouch
iTouch loads the iTouch configuration program for Logitech keyboards. It's needed if your keyboard has shortcut buttons and if you use them. It's also needed if your keyboard does not have the num lock, caps lock, and scroll lock lights on it and you use the on-screen displays for num lock, caps lock, and scroll lock
ItsDeductiblePopUp
ItsDeductible from Income Dynamics. Calculates your noncash donations quickly and easily. This startup entry checks a registry entry for the next 'PopUp' date and if it is a past or current date displays a program related tip
ITUNES
Added by the RBOT-ZU WORM!
ITUNES
Added by the OSCABOT-L WORM! Note - this file will be placed in the WindowsSystem32 or WinntSystem32 folder, and should not be confused with the (legitimate) Apple iTunes process, always located in the Program FilesiTunes folder
Itunes
Detected as Trojan-Dropper.Win32.Agent.mm by Kaspersky Anti-Virus
iTunes Helper
Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
iTunes Music
Added by the SDBOT.CHK WORM!
iTunesAgent
Added by the TACTSLAY.U TROJAN!
itunesff
Added by the EB adult premium dialer
iTunesHelper
Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation
itype
Microsoft IntelliType Pro related. Allows you to map the extra function keys to any program you like. The extra keys are set to defaults such as Messenger, Mail, My Document, etc. Not required unless you want to use the extra keys
Iusage
Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up
iut75
Added by the DLOADER-AXV TROJAN!
ivHost
Added by a variant of the SPYBOT WORM! See here
IVPServiceMgr
Toshiba IVP Service Manager application which appears as a red satellite dish icon in the System Tray. This is Toshiba's equivalent to the Windows Automatic Update feature as, whenever you are connected to the Internet, it will check for Windows updates and Toshiba updates
ivy.exe
Added by the AGENT-ENZ TROJAN!
IW ControlCenter
Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
iwctrl
Pinnacle Systems InstantWrite enables you to use your CD-R, CD-RW and DVD-RAM drive just like a hard disk or floppy disk. You can drag and drop files, create new directories right on your CD-R, CD-RW or DVD-RAM. Maybe required if you use this feature on a regular basis
ixplore
Added by the SDBOT-CY TROJAN!
ixproxy
Added by the XORPIX-A TROJAN!
ixsso
Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark"
iyelejiv
Added by the SDBOT.BJK WORM!
IZE
??
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59