|
The table below includes any process titles beginning with i, from which further information can be found by clicking on the process title. The icon beside the information can be used to quickly determine if this is a safe file in combination with the key below:
[#] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Y] [Z] |
Processes beginning with i:
| File Type | Process Name and Information |
![]() |
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN! |
![]() |
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN! |
![]() |
I am not Ranky. I am eTunnel!
Added by an unidentified WORM or TROJAN! |
![]() |
I just want to say I love Milko and I need a drink
Added by the CHIKO WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Documents and SettingsAdministratorLocal SettingsApplication Data folder |
![]() |
I-Worm.GiGu
Added by the GINK WORM! |
![]() |
I/O Controllers
Added by the TIBIK-B TROJAN! |
![]() |
I386
Added by the MYPOWER WORM! |
![]() |
I81SHELL
Appears to be related to drivers for an Intel 810 graphics chipset on an ASUS motherboard |
![]() |
i8kfangui
Graphical interface for fan speed control |
![]() |
IAAnotif
IAA Event Monitor User Notification Tool - part of Intel(r) Application Accelerator - "a performance software package for desktop PCs using select Intel(r) chipsets" that "replaces the ATA drivers that come with Windows with drivers optimized for desktop and mobile PCs." If you use the RAID version it's required to notify you if a RAID 1 disk has failed |
![]() |
iamapp
AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well |
![]() |
Iamnacho On Irc.MusIrc.com Is a Homosexual!
Added by the RANDEX.Y WORM! |
![]() |
Iap
Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely? |
![]() |
ias
InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself! |
![]() |
IASHLPR
Added by the OPASERV.T WORM! |
![]() |
ibin
Added by the PERDA-C TROJAN! |
![]() |
ibm
Added by the LEGMIR-AH TROJAN! |
![]() |
IBM Keyboard Driver
Added by the SDBOT.IC TROJAN! |
![]() |
IBM Warranty Notification
IBM Warranty Notification - presumably it's a reminder to either register or that warranty is about to expire? |
![]() |
ibmmessages
Allows IBM to push messages onto users' computers. Quote: "The Access IBM Message Center can display messages to inform you about software and solutions available from IBM as well as messages from IBM eSupport" |
![]() |
Ibmmon.exe
?? |
![]() |
Ibmpmsvc
Power management driver for IBM laptops. Provides support for the use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - which have specific functions to control the standby and hibernate buttons. Not required if you don't plan to go into standy or hibernate modes |
![]() |
IBMPRC
IBM application - what does it do and is it required? |
![]() |
IBMUltraBayHotSwapCPLLoader
Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops |
![]() |
IBMUltraBayHotSwapSound
Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? |
![]() |
IBM_PWMGR
IBM Password Manager |
![]() |
Ibs
Added by the HIDEDIAL-B TROJAN! |
![]() |
IBWin Background process
IBackup for Windows |
![]() |
IBWin Monitor
IBackup for Windows |
![]() |
IcaBar
Related to Citrix MetaFrame |
![]() |
icasServ
Browser hijacker, redirecting to Searchforfree.info. Also detected as the ICASERV-A TROJAN! |
![]() |
ICcontrol
Added by the ICcontrol premium rate adult content dialer |
![]() |
icdd7ee6
LZIO.com adware downloader |
![]() |
icddefff
LZIO.com adware downloader |
![]() |
ICH Synth
Sound related and can be disabled without affecting performance although advanced sound features may be sacrificed. May be related to Compaq PC's with "SoundMAX integrated Digital Audio" (Analog Devices Inc.) devices |
![]() |
icifati
Added by the SDBOT.ZZH WORM! |
![]() |
iClean
IEClean - "advanced, comprehensive package of tools which perform a number of functions to allow you to control your online privacy" |
![]() |
ICM
Starts Internet Call Manager dialog box and/or taskbar icons at bootup. This is a subscription program from internetcallmanager.com that monitors a dialup phone line for incoming calls and handles voicemail |
![]() |
iCn
iChoose - shopping browser enhancement that alerts you to cheaper deals for goods you want to buy, if they exist. Not related to the Mac icon program of the same name |
![]() |
ICO
Found on Sony Vaio and IBM Thinkpad (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
![]() |
Icon Animation
Part of McAfee Nuts & Bolts. Provides entertaining animation of your desktop icons |
![]() |
Icon Hearit 95
Audio desktop customization utility from Moon Valley Software. Resource hog |
![]() |
Icon Hearit 98
Audio desktop customization utility from Moon Valley Software. Resource hog |
![]() |
Icon lptt01
RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
![]() |
Icon ml097e
RapidBlaster variant (in a "Icon" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
![]() |
iconcache
Related to the Vista Customization Pack |
![]() |
ICONCLNT
APC PowerChute Tray Icon. Associated with the UPS listing |
![]() |
ICONDESK
Small utility which will allow you the option of hiding or showing your desktop icons |
![]() |
Iconfig.exe
Icon for LS-120 "Superdisk" |
![]() |
iConfigLoader
Added by the GAOBOT.AO WORM! |
![]() |
Iconoid
Iconoid is a desktop icon manager |
![]() |
Iconsaver
IconSaver is a desktop icon manager |
![]() |
ICQ
Added by the GORMLEZ-A WORM! |
![]() |
ICQ Agent
Added by the AGENT-FZJ TROJAN! |
![]() |
ICQ Center
Added by the RANDIN WORM! |
![]() |
ICQ Chat Service
Added by a variant of the RBOT WORM! |
![]() |
ICQ Hacking Pro
Added by a variant of the NETSPY TROJAN! |
![]() |
ICQ Lite
ICQ Lite - compact version of the popular messaging program |
![]() |
icq lite
Added by the AGENT-DSF TROJAN! |
![]() |
icq lite
Added by the IRCBOT-TJ TROJAN! |
![]() |
ICQ Lite Messenger
Added by an unidentified VIRUS, WORM or TROJAN! Unlike the legitimate ICQ Lite executable, which will be located in the ICQLITE folder in Program Files, this particular impostor is located in the Windows or WinntSystem32 directory |
![]() |
ICQ Messenger 2002
Added by the SDBOT-ABL WORM! |
![]() |
ICQ Net
Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should not appear in Msconfig/Startup! |
![]() |
ICQ Plus
ICQ Plus is a freeware utility makes your ICQ skinnable (change the look). Available via Start -> Programs |
![]() |
IcqBeta
Added by an unidentified TROJAN! |
![]() |
ICQNet
Added by the NETSKY-C WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder |
![]() |
icrosof Avps32 Control
Added by the RBOT-AVC WORM! |
![]() |
icrosoft Visual
Added by the RBOT-AYO WORM! |
![]() |
icrosoft Visual InterDevc
Added by the RBOT-AYP WORM! |
![]() |
icrosoft Windows DLL Services Configuration
Added by the SDBOT-AER WORM! |
![]() |
icrosoftf Avpx Control
Added by the RBOT-AYN WORM! |
![]() |
ICSDCLT
Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines |
![]() |
ICServer
Intel Intercast viewer software. Gives access to selected internet pages which are broadcasted by several TV stations |
![]() |
ICSMGR
Monitors DNS and DHCP requests for ICS (Internet Connection Sharing). Needed if you're sharing the internet on various computers |
![]() |
ICU-Sucker
Added by the ILLNOTIFIER.D TROJAN! |
![]() |
IC_KEY_3
Instant Chess related |
![]() |
ID Commander
Caller ID utility for identifying incoming telephone numbers |
![]() |
ID8525
Added by the ID8525.A TROJAN! |
![]() |
ID8525
Added by the ID8525.A TROJAN! |
![]() |
IDA
HP related - in a Program FilesHewlett-PackardPC COE folder |
![]() |
IDE
Added by the ASSASIN.F TROJAN! |
![]() |
IDE Loader
Added by the XILON TROJAN! Related to the game "Diablo II" |
![]() |
idecntl
Added by a variant of the CRYPTER.C TROJAN! |
![]() |
iDesktop
Immersion TouchWare Desktop software for devices such as the Logitech iFeel Mouse |
![]() |
IDMan
Internet Download Manager - download files faster, schedule and resume |
![]() |
idmlssp
Added by a variant of the SLAPER TROJAN! |
![]() |
IDTemplates
Added by the BRONTOK-H WORM! |
![]() |
IDW Logging Tool
Added with WinXP SP1. Usually only found in internal builds only to indicate the current build being used. Can cause slow network logon problems |
![]() |
IE configure
Added by the LINEAGE-C TROJAN! Note - this is not the legitimate Windows Explorer (explorer.exe) which would not normally appear in Msconfig/Startup unless you added it manually! |
![]() |
IE Doctor
IE Doctor Toolbar - "IE Doctor can help you to Repair IE easily, protect IE and OE from all malicious changes. It can Repair the HomePage, context menu, IE toolbar button, startup items, Favorites, typed URLs and the entire Internet Options" |
![]() |
IE Java Update
Added by the AGENT-HD TROJAN! |
![]() |
IE Menu Extension toolbar
Topconverting.com180Search "IEMenuExtension" toolbar |
![]() |
IE New Window Maximizer
IE New Window Maximizer - automatically maximize new Internet Explorer and Outlook Express windows |
![]() |
IE Runtime
Added by the PICRATE.B WORM! |
![]() |
IE Runtimes
Added by the RBOT-ADZ TROJAN! |
![]() |
IE**.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log |
![]() |
IE**32.exe [* = random char]
CoolWebSearch/HomeSearch adware - for examples, see this log |
![]() |
IE-Bar
DesktopMedia adware |
![]() |
IE6
Added by a variant of the SDBOT WORM! |
![]() |
IE6
Added by the GAOBOT.DXO WORM! |
![]() |
IE6
Added by the RBOT-ATF WORM! |
![]() |
IE6
Added by the RBOT-GOV WORM! |
![]() |
IEACCESS
AsdPlug premium rate adult content dialer variant |
![]() |
IEACCESS
IEAccess premium rate adult content dialer variant |
![]() |
IEAgent update check
Added by the BOMKA TROJAN! |
![]() |
iecheck
Integrity checker for IconEdit2 icon editor. It serves for IconEdit2 internal tasks only and can be safely deleted from the system if you are running the latest version of IconEdit2 |
![]() |
IECheck
Added by the TIRBOT-D WORM! |
![]() |
IECheck
Added by the TIRBOT-E WORM! |
![]() |
IECheck
Added by the TIRBOT-G WORM! |
![]() |
IECleanAux
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup |
![]() |
iedll
Homepage hijacker, redirecting to coolwwwsearch.com |
![]() |
IEDriver
Installed as part of adware (Cydoor) based peer-to-peer file sharing software called URLBlaze |
![]() |
IEDriver
IEDriver adware variant |
![]() |
IEDriver
IEDriver adware variant |
![]() |
iedwa104
Added by the DLOADR-BBW TROJAN! |
![]() |
IEengine
STARTPAG.AI hijacker |
![]() |
IEexplorer AUpdate
Added by the RBOT-GRE WORM! |
![]() |
IEFeatures
Added by the POPMON.A TROJAN! - also known as PopMonster adware |
![]() |
IEFeatures
Added by the POPMON.A TROJAN! - also known as PopMonster adware |
![]() |
IefxTray
Added by the RILER-H TROJAN! |
![]() |
ieharv.exe
Added by the BANKER-HH TROJAN! |
![]() |
Iehelper
Outwar adware downloader |
![]() |
iel2cde8
LZIO.com adware downloader |
![]() |
ielcaabe
LZIO.com adware downloader |
![]() |
IELoader32
Added by the SPEX or SPEX.B WORMS! |
![]() |
Iesar
Browser hijacker - redirecting to an adult web page |
![]() |
Iesearch.exe
LookNSearch adware |
![]() |
IEService.exe
FastFind parasite variant |
![]() |
IESet
Added by the PWS-BLUEDIT TROJAN! |
![]() |
iesetupi.exe
Added by a variant of the RBOT WORM! |
![]() |
iestart
Added by the NEMOG.C TROJAN! |
![]() |
ietsr
IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc |
![]() |
ieupdate
Added by the ASOXY TROJAN! |
![]() |
ieupdate
Adware downloader trojan |
![]() |
IEXPL0RER
Added by the AGOBOT-QL WORM! Note the filename has a "0" rather than an upper case "o" |
![]() |
iexpl0res
Added by the RBOT.AEX WORM! Note - this malware actually changes the default value data of the Registry "Run" key in order to force Windows to launch it at boot |
![]() |
IExploer
Added by the IRCBOT.BT TROJAN! |
![]() |
Iexploit
Added by the INKER.B WORM! |
![]() |
Iexplore
Added by the BOXER TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder |
![]() |
IEXPLORE
Added by the APHEXDOOR TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
![]() |
IExplore
Added by the DLOADER-YZ TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in a "Custom" subfolder |
![]() |
IExplore
Added by the DLOADR-AAM TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the "Arquivos de programasInternet ExplorerCustom" folder |
![]() |
IEXPLORE
Added by the BANKER-BWE TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder |
![]() |
Iexplore Services
Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the legitimate Internet Explorer iexplore.exe process which is always located in the Program FilesInternet Explorer folder and should not normally figure in Msconfig/Startup! |
![]() |
IEXPLORE.EXE
Added by the BANCOS-CJ TROJAN! |
![]() |
IEXPLORE.EXE
Added by the BIFROSE-C TROJAN! |
![]() |
IExplorer
Added by the BDOOR-BY TROJAN! |
![]() |
IExplorer
Added by the BANCOS-CH TROJAN! |
![]() |
IEXPLORER
Added by the JU or BANCBAN-IP TROJANS! |
![]() |
Iexplorer
Added by the ZAPCHAS-AC TROJAN! Note - the legitimate Windows Explorer (explorer.exe) is located in the Windows or Winnt folder and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in the System folder |
![]() |
iexplorer lptt01
RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
![]() |
iexplorer ml097e
RapidBlaster variant (in a "iexplorer" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
![]() |
Iexplorer.exe
Added by the BANCBAN-EN TROJAN! |
![]() |
IExplorer32 Java Scripting
Added by the RBOT.ABO WORM! |
![]() |
IExplorer32c Java Scripting
Added by the RBOT.ABN WORM! |
![]() |
IExplorer6 Java Scripting
Added by a variant of the SDBOT WORM! |
![]() |
IExplorer7 Java Scripting
Added by a variant of the SDBOT WORM! |
![]() |
IExplorerService
Detected by Kaspersky as the AGENT.KIU TROJAN! See here |
![]() |
ifp
Added by the CLAGGER-AG TROJAN! |
![]() |
ifperx
Added by a variant of the SLAPER TROJAN! |
![]() |
IFSplash.exe
I-FORCE driver for force feedback steering wheel |
![]() |
igamatu
Added by the SDBOT.AQ TROJAN! |
![]() |
igamatu
Added by the IRCBOT.R WORM! |
![]() |
igfxtray
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel |
![]() |
Iglpbv
?? |
![]() |
igndlm.exe
IGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be initialized through that browser |
![]() |
igsex2x
NewDial premium rate adult content dialler |
![]() |
iHP-100
Drive Letter Searcher, iRiver iHP-100 iHP and H Series player related - does it need to start with Windows every time? |
![]() |
iilc
Homepage hijacker |
![]() |
Iinl
PurityScan/Clickspring adware |
![]() |
IISADMINS
Added by the AGOBOT.U WORM! |
![]() |
iisvers
Added by an unidentified TROJAN or adware |
![]() |
iiuyvyu
Added by the AGENT-EOF TROJAN! |
![]() |
iIWiper
System Wiper from iI Software - allows you to clear the history of your activites from you computer. Run manually on a regular basis |
![]() |
IJ75P2PSERVER
Printer utility which is required in order to make the printer work correctly |
![]() |
IKE Service 95
Associated with PGP. The PGP Tray can be disabled, but without IKESERVICE you won't be able to de- or encrypt anything |
![]() |
iKeyWorks
A4Tech wireless keyboard driver and utility |
![]() |
IKL
IKL surveillance software. Uninstall this software unless you put it there yourself |
![]() |
iLLeGaL
Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
![]() |
iLLeGaL.exe
Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename |
![]() |
ILO_Office_Manager
Intense Educational Ltd - Language Office Software. Is it required? |
![]() |
iLyric
iLyric plugin for Winamp media player. Allows you to retrieve the lyrics for your songs with the press of a button |
![]() |
iM Start Center
Installed with the Sound Blaster Audigy range of soundcards. A radio tuner installed if the user chooses during installation. Available via Start -> Programs -> iM Networks -> iM Radio Tuner |
![]() |
Image
CoolWebSearch parasite variant |
![]() |
Image & Restore
Part of McAfee Nuts & Bolts. Image/Restore can recover from drives that have been accidentally formatted or completely erased, if Image was recently run |
![]() |
Image Transfer
Sony Image Transfer software provides direct image transfer from your digital camera to a PC - can be started manually |
![]() |
ImageDrive-{hex numbers}
Nero ImageDrive from Ahead - virtual CD/DVD drive software |
![]() |
Imagefox
ImageFox 2.0 (formerly available from ACDSee) is an "add-on" graphics previewer for most Windows Open/Save As dialog boxes |
![]() |
Imagemgt32
Added by the GEMA TROJAN! |
![]() |
ImagePath
Added by the SDBOT-XB WORM! |
![]() |
ImageTune
Display Tune (aka Image Tune) from Portrait Displays, Inc. - "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface and the user is guided, step-by-step, through the entire initial tuning process." Also licensed and renamed by manufacturers such as Gateway and HP |
![]() |
IMAPI
Added by the DOWNDEL-A TROJAN! |
![]() |
iMarkup Client
Enables the iMarkup Client web page annotation utility to run in the background and be available in systray. Shortcut available via Start -> Programs |
![]() |
Imatio
Imation Disk Manager - enables you to create a password protected area on your Imation USB flash drive |
![]() |
imchat
Added by a variant of the IRCBOT TROJAN! |
![]() |
IMClass
Added by an unidentified WORM or TROJAN! |
![]() |
imcssl
Detected by Kaspersky as the SLAPER.U TROJAN! See here |
![]() |
imekrig
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
![]() |
IMEKRMIG6.1
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) |
![]() |
Imesh
Imesh is a file sharing system |
![]() |
Imesh Auto Update
Update check for the Imesh file sharing system. Turn the update off under "options" |
![]() |
IMEvtMgr.exe
Added by the KEYLOG-AR TROJAN! |
![]() |
ImgIcon
Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
![]() |
imgit
Added by the BANKER-EM TROJAN! |
![]() |
ImgStart
Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
![]() |
Imjpmig*.*
Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese). *.* represents the version number |
![]() |
IMJPMIG8.2
Added by the VB-CYG WORM! |
![]() |
immcheck.exe
Related to I-FORCE driver for force feedback steering wheel? |
![]() |
ImMsn
Added by the WEBDOR.AK TROJAN! |
![]() |
IMOL
IncrediMail for Office Outlook Add-On |
![]() |
Imonitor
McAfee QuickClean 3.0 - removes internet clutter and unwanted programs |
![]() |
imonitor
Added by the IMONI-A TROJAN! |
![]() |
IMONTRAY
System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards |
![]() |
IMprocess
IMNames adware |
![]() |
IMStart
InterMute security software related |
![]() |
imwinsrvc
Added by the SLAPER.E TROJAN! |
![]() |
IMwire
SafeSurfing adware variant |
![]() |
im_autorn
Added by the IMAV.A WORM! |
![]() |
im_autorn
Added by the BAGLEDL-BO TROJAN! |
![]() |
InCD
Ahead InCD packet writing software - similar to DirectCD. For Nero 5.0 or 5.5 (InCD3), it does not need to start with Windows. You can run InCD.exe manually before inserting an appropriately formatted CD-RW (CD-MRW) disk. For Nero 6.0, 6.3 or 6.6 (InCD4), it does need to start with Windows. It does not function correctly when you try to run it manually, and you will not have write access to MRW (Mount Rainier) formatted CD-RW (CD-MRW) or DVD-MRW disks. To regain write access and other features, InCD 4 must start with Windows |
![]() |
IncMail
IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality |
![]() |
InControl Desktop Manager
For Diamond Multimedia video cards. Allows System Tray access to desktop utilities such as screen resolution. Available via Start -> Programs |
![]() |
Incredimail
IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality |
![]() |
Incredimail
IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality |
![]() |
Index Service
Added by the AGOBOT.CH WORM! |
![]() |
Index Washer
Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG |
![]() |
Indexindicator
Added by the LAZAR TROJAN! |
![]() |
IndexSearch
Associated with PaperPort scanner software from ScanSoft |
![]() |
IndexTray
Part of Sharpdesk from Sharp Electronics. "A desktop-based, personal document management application that lets users browse, edit, search, compose, process, and forward both scanned and native electronic documents" |
![]() |
IndicatorUty
Fujitsu Hotkey Utility displays icons on the screen when you use hotkeys on a Fujitsu Siemens Lifebook, eg, when you press the hotkey for muting the sound, a loudspeaker icon with a cross on it is displayed |
![]() |
ine
Added by the RBOT.BNL WORM! |
![]() |
INET
Meplex adware |
![]() |
Inet DataBase
Added by the QEDS WORM! |
![]() |
Inet Delivery
Inet Delivery adware |
![]() |
Inet Delivery
Inet Delivery adware |
![]() |
Inetapi
Added by the NETDEVIL.14 TROJAN! |
![]() |
inetcntrl
Bsafe Online - internet filter |
![]() |
InetConf
?? |
![]() |
Inetd
Windows Inet Daemon from Hummingbird Communications. "Hummingbird Inetd has the advanced ability to conserve PC resources by listening for connection requests and launching server daemons". Provides PCs with the full functionality of a UNIX workstation |
![]() |
inetinfo.exe
Executable used by MS Internet Information Server (IIS). If it's running, then so is IIS. Useful in knowing whether you require the patch for the Code Red worm. Comes with PWS (Personal Web Server) or NT4 and handles ASP-, PHP code (+ more) |
![]() |
inetinfomon manager
Added by the DONBOMB.A TROJAN! |
![]() |
inetmgr
Actual Names (AdvSearch) Internet Keywords parasite |
![]() |
InetMSN
Added by a variant of the SDBOT TROJAN! |
![]() |
InetServices
Added by the WOCK32-A TROJAN! |
![]() |
infamous.exe
Added by unknown malware. WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup. Infamous.exe is identified by Panda antivirus as Trj/Briss.A |
![]() |
InfeStop
InfeStop spyware remover - not recommended, see here |
![]() |
Info Select
Info Select from Micro Logic - personal information manager |
![]() |
Info32x
Added by the GEMA TROJAN! |
![]() |
InfoData
Added by the VUNDO TROJAN! |
![]() |
InfoPenMSN
InfoPenMSN is a MSN Messenger plugin that allows you to send data written/drawn by hand |
![]() |
Infoplay.exe
Written by New Media Properties, LLC and you're asked if you want to download and install it if you visit one of their search engine websites (which I chose not to). What does it do and is it needed? |
![]() |
Information Update
Detected by Kaspersky as the CENTIM.CH TROJAN! |
![]() |
Infra-red Monitor
System Tray access to infra-red devices. Not required unless you use infra-red devices |
![]() |
infus
Adult content dialler |
![]() |
Infuzer
Infuzer - "is a service that copies dates from the web or an email straight to your electronic calendar". Beware of the following adware trait - "Infuzer provides web site owners with a unique opportunity to communicate with their visitors in a way that is useful and relevant to them, as well as increasing return visits and brand awareness, and providing new e-commerce opportunities" |
![]() |
infwin
VX2.Transponder parasite updater/installer related |
![]() |
Init32
Added by the WINEX.A TROJAN! |
![]() |
Initial Page
EasySearch browser hijack installer |
![]() |
Initialize8x8
Tool that initializes a Pinnacle PCTV card - maybe in capture or in showing overlay |
![]() |
injob
Added by the BINJO TROJAN! |
![]() |
Ink Monitor
Associated with Epson (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
![]() |
InkWatch
Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line |
![]() |
InoRPC
Associated with eTrust Antivirus/InoculateIT |
![]() |
InoRT
Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage |
![]() |
InoTask
Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates |
![]() |
iNotice
Added by a variant of an MSN worm that tries to lure people to an infected site by using nude pictures and videos |
![]() |
insCOA5
?? |
![]() |
Insider
Detected by PCTools as the AGENT.KMC TROJAN! See here |
![]() |
InstaAlert
Kayako InstaAlert allows you to receive realtime alerts whenever a ticket gets updated under the assigned departments. The application displays popups as and when the tickets are created or replied to allowing you to answer your customer requests and issues promptly |
![]() |
InstaFinderK
InstaFinder adware |
![]() |
Install
Added by the BANCBAN-HG TROJAN! |
![]() |
Install part II
Added by the RELFEERWORM! |
![]() |
Install Pending Files
Uninstall program for Lanovation's Prism Deploy and Prism Pack adminstrators software deployement tools. For specific information see here. Is it required? |
![]() |
InstallAurealDemos
Used to initialize the Aureal A3D demos InstallShield wizard |
![]() |
InstallBuddy
InstallBuddy - automatically translates and installs your desktop documents, such as Adobe PDF, HTML, Microsoft Word, Excel and PowerPoint files, to your Palm organizer when you HotSync |
![]() |
InstallCleaner
Added by the ANYHOMB.F TROJAN! |
![]() |
Installed shell32.dll
Added by a variant of the LOVGATE WORM! |
![]() |
Installer
Malware - detected by Kaspersky as the AGENT.MM TROJAN! |
![]() |
InstallNAIProduct
Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error? |
![]() |
InstallProvider
WinAntiVirus Pro 2007 and Privacy Protector misleading security software - not recommended, see here |
![]() |
Installs SP2
Added by a variant of the RANDON.AN WORM! |
![]() |
Installstub
Tool for Outlook and Outlook Express from Plaxo for organising and keeping contacts organised and updated and providing online access to your contacts and access from PDA or mobile phone |
![]() |
Instance 001
Added by the Alasrou-A WORM! |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
Electronic_Group/InstantAccess premium rate adult content dialer variant |
![]() |
Instant Access
InstantAccess premium rate adult content dialer |
![]() |
Instant Access
InstantAccess premium rate adult content dialer variant |
![]() |
Instant Buzz Daemon
Instant Buzz adware |
![]() |
Instant Messenger Service
Detected by Kaspersky as the HEUR TROJAN! |
![]() |
Instant Update Center
From Broderbund's PrintMaster 10. It is an event reminder (for calendar dates, etc). Delete from the startup using Startup Manager program because it keeps re-checking itself when using MSCONFIG. PrintMaster 11 uses filename PMremind.exe - it has to be unchecked in startup in the same manner |
![]() |
Instant Wireless Configuration Utility
Utility used by the LINKSYS LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration |
![]() |
Instant Wireless Configuration Utility
Utility used by the LINKSYS wireless USB Adapter (WUSB11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration |
![]() |
InstantAccess
From TextBridge Pro 9.0 OCR scanner software. Available via Start -> Programs |
![]() |
InstantDrive
Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software |
![]() |
InstantPleasure
Adult content dialler |
![]() |
InstantPleasureXXX
Adult content dialler |
![]() |
InstantTray
Pinnacle InstantCD/DVD disc creation software. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually |
![]() |
instit
Added by the OPASERV.H WORM! |
![]() |
instit
Added by the OPASERV.K WORM! |
![]() |
InstUtlR.exe
?? |
![]() |
intdctrr
SafeSurfing adware variant |
![]() |
Intec Service Drivers
Added by the SDBOT-ADN WORM! |
![]() |
Intec Service Drivers
Added by the RBOT-GLU WORM! |
![]() |
Intec Service Drivers
Added by the RBOT.HAZ WORM! |
![]() |
Intec Services Driverrs
Added by a variant of the SDBOT WORM! |
![]() |
IntegardTray
System Tray access to Integardparental control software from Race River Corp |
![]() |
Intel Active Monitor
System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards |
![]() |
Intel Audio Studio V2.0
Detected by VBA32 as the BIFROSE.ADR TROJAN! |
![]() |
Intel Driver
Added by a variant of the SDBOT WORM! |
![]() |
Intel File Transfer
Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients |
![]() |
Intel PDS
Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled |
![]() |
Intel Product Number Utility
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
![]() |
Intel PROSet Tray Icon
System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features |
![]() |
Intel Service Drivers
Added by the MSCONFIG16 TROJAN! |
![]() |
Intel system tool
Added by the SPYRE-H TROJAN! |
![]() |
Intel system tool
Added by the SPYRE-C TROJAN! |
![]() |
Intel system tool
Added by the AGENT-EBT TROJAN! |
![]() |
Intel system works
Added by the RBOT.QGA WORM! |
![]() |
Intel(R) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. If the user wishes to have "HotKey" access to Intel's customised graphics properties, it is required, otherwise not. It can be disabled via the Display Properties in the Control Panel |
![]() |
Intel(R) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Not known exactly what it does but apparently it isn't required |
![]() |
Intel(r) Common User Interface
Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel |
![]() |
intel32.exe
Added by the SmitFraud alias SPYJACK-B TROJAN! |
![]() |
IntelAPMClient
LANDesk Management Suite software component |
![]() |
IntelAudioStudio
Intel Audio Studio combines Intel(r) High Definition audio hardware features with Sonic Focus* Audio Refinement and Dolby* technologies to provide you with a comprehensive tool that puts you in control of your audio experience. Audio utility supplied with Intel motherboards |
![]() |
InteliSys
Advertisingvision adware! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder |
![]() |
intell32.exe
Added by the SmitFraud alias Desktophijack.C TROJAN! |
![]() |
intell321.exe
Added by the SPYJACK-B TROJAN! |
![]() |
Intelliflag_be.exe
Added by the Intelliflag SPYWARE! |
![]() |
IntelliPoint
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features |
![]() |
IntelliPoint
Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features |
![]() |
Intellitype
For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them |
![]() |
IntelMEM
Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line |
![]() |
IntelProcNumUtility
Intel Processor Serial Number Control Utility allows you to enable and disable the processor serial number capability of an Intel PIII processor. You can find more information here. System Tray icon providing the user with a visual state indication. You can find more information here |
![]() |
IntelWireless
Associated with the Intel PRO/Set Wireless software |
![]() |
IntelZeroConfig
Zero Config MFC Application, part of Intel's ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping. The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing "Not Responding" or "End this Program" shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have WinXP/2003, try setting the "Wireless Zero Configuration" service to disabled |
![]() |
Intense Registry Service
Intense Educational Ltd - Language Office Software. Is it required? |
![]() |
InterceptedSystem
Added by the ANACON-B WORM! |
![]() |
InterCheck Monitor
Part of Sophos ant-virus sofware |
![]() |
InterCheckMonitor
Part of Sophos anti-virus sofware |
![]() |
Interdll
Added by the DELF family of TROJANS! |
![]() |
Internal
Added by the SMOTHER and TRANSLAT TROJANS! |
![]() |
Internal
Added by the FORTNIGHT.D TROJAN! |
![]() |
Internal Memory File
Added by the RBOT-GKT WORM! |
![]() |
InternalSystray
Added by a variant of the OPTIX TROJAN! Note - unlike the valid KaZaA executable, this is located in C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K), or C:WindowsSystem32 (WinXP) |
![]() |
internat
Added by the LYDRA-F TROJAN! Note - the real internat.exe resides in %windir%system (where %windir% is the Windows directory - C:Windows or C:Winnt) whereas this version resides in %windir% |
![]() |
<





