Added by the AGOBOT-LN WORM!

Added by the LOVGATE.AB WORM! Note - the filename has the digit 0 rather then the uppercase "o"

Event Monitor - supports driver extensions to NIC Driver for wireless adapters. Is it required?

Added by the AGOBOT-DD WORM!

A tool installed alongside the drivers for your S3 video output device. It is not necessary but should be allowed to run unless it is causing problems

Hotkey system tray icon to enable switching between monitors. Found on laptops with an S3 Twister integrated graphics card

S3DuoVue multi-monitor taskbar helper by S3 Graphics. What does it do and is it required?

S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display

Same as the s3tray entry in this table?

S3 Video driver related. What does it do and is it required?

S3 display configuration taskbar utility for S3 chipset based graphics cards. Can be run from Start-> Settings -> Control Panel -> Display

FilterPak from S4F, Inc - internet filtering software

Searchcentrix hijacker

Logitech QuickCam driver. Is it required?

Associated with Cyber Trio and Warner troubleshooting software from G-Tek Technologies and pre-installed on some Packard Bell and NEC PCs. What function does this perform and is it required?

3D sound extension for Windows

NCase adware

Airline reservation software from Sabre. Available via Start -> Programs

NCase adware

SurfAccuracy adware

AT&T or ComCast BBClient - monitors system and network-delivered services for availability. Your current network status is displayed on a color-coded web page in near-real time. When problems are detected, you're immediately notified by e-mail, pager, or text messaging

Added by the MAILBOT-BZ TROJAN!

Added by the FOCOSENHA TROJAN!

Added by the BANKER-DT TROJAN!

SafeguardProtect/Veevo hijacker

SafeguardProtect/Veevo hijacker

SafeguardProtect/Veevo hijacker

SafeguardProtect/Veevo hijacker

SafeHouse "Personal Privacy" system tray icon - PP protects and hides your private and personal photos, videos, files and folders by making them "invisible" and encrypted

Monitors a download and ensures an newer version of a file isn't replaced by an older one

Provides protection that if user accidentally presses the power switch a dialog will pop up for confirmation

SafeSearch.A adware

MoneyTree parasite - ActiveX control used to download premium-rate dialers

Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"

Safety.Net from Netveda - "offers Internet security, content security and advanced Internet firewall protection for all your LAN computers, and trust controls to block unwanted or harmful applications from accessing the network"

SafeWorld Internet Security - now no longer available

Added by the GAOBOT.BOW WORM!

Seiko Epson printer status agent. Disable if printer is not used often

TinySpyAgent commercial keystroke logger. Uninstall this software if you did not install it yourself

Adware web downloader

ShopAtHomeSelect parasite

ShopAtHomeSelect parasite

ShopAtHomeSelect parasite

NCase adware

Configuration software for Saitek game controllers

Saitek MFD File System Driver - associated with the Saitek SST (Saitek Smart Technolgy) configuration software for their game controllers. Create a shortcut and run manually when required

Saitek joystick driver

NCase adware

NCase adware

Smart Button Special Sauce - included with the latest software for Saitek game controllers. Related to the "S", "Shift" or "Smart" button and gives gamers extra features on the buttons. Only required if you use this feature

Configuration for Saitek game controllers

Added by the SDBOT.BTO WORM!

WinAntiSpyware misleading spyware remover - not recommended, see here

Misleading security software such as AntiSpywareSuite, AntivirusPCSuite, SpyGuardPro, WinAntiVirus Pro 2006, WinSecureAv and WinSpyControl - not recommended, see here

SystemDoctor misleading security software - not recommended, see here

PrivacyProtector misleading security software - not recommended, see here

OnlineHelpmate and ConfidentUser misleading security software - not recommended

WinAnonymous spyware remover - not recommended, see here

Misleading security software such as WinPCDoctor, StorageProtector, ErrClean and SystemErrorFixer - not recommended

180Search adware

NCase adware

Added by a variant of the AW.AWK TROJAN!

Added by a variant of the SDBOT WORM!

Added by the VBS.LIDO WORM!

SamCal - calendar/reminder program

IBM Lotus Sametime - instant messaging and Web conferencing software

Added by the SDBOT.BNE WORM!

Added by an IRC TROJAN variant!

SandBoxie - allows data to be read from the hard drive by an application but never written back unless you allow it

SanDisk ImageMate CompactFlash card reader SDDR-31 (USB). Very little use except to place the Sandisk icon beside its drive designation in Windows Explorer. The reader itself will work fine without it. The simplest thing is to just unplug the reader when you're not using it. It may slow the startup by a few nanoseconds, but once the software sees there's no reader, you get back the resources

Added by the VANEBOT-AH WORM!

Sansa Updater - "The Sansa Updater is an application that checks for the latest firmware updates then downloads and installs the firmware to your Sansa device"

Added by the ATNAS.A WORM!

NCase adware

Experience faster surfing, downloading and e-mail by adding SaskTel Accelerated Dial-up Internet

Added by the DABBER.B WORM!

Browser hijacker - redirecting to Searchant.com

RAID driver for serial ATA disks on some motherboards such as the DFI Lanparty range. Only loaded if one is using RAID support on SATA drives

VX2.Transponder parasite updater/installer related

180Solutions adware related

Big Brother from Quest Software. System and network monitor

Sharp Zaurus PDA related, needed to synchronize information with a Desktop or Notebook

Part of Sophos anti-virus software. Required for centrally administered Sophos updates to work correctly, e.g. automatically updating PCs used by dial-in home or out-of-office users

WhenU.Save adware

Unidentified adware

WhenU.Save adware

Added by the SPREDA.B VIRUS!

SmartAdware adware

This program has audio cues for the system clock in male and female voices, customizes the appearance of the system clock, and can synchronize it to a time server regularly

Acer Soft Button on Acer Tablet PCs

Related to the Dell OEM version of the Sound Blaster Audigy 2 sound card. If this item is listed and checked in startup, the System32 Folder will appear on every startup. A patch is available - filename R75304.EXE - that fixes the issue. You can find that file at support.dell.com by typing that name in the 'Search' box available there. It addresses the root of the problem in Creative's software and corrects it. Unfortunately there is no direct link to the file, but it's easily available using the search function

Spyware utility installed by the manufacturers of some laptops (Sony) used to monitor browsing habits and send them back to whoever installed it - released by SoftBank

Added by the SPYBOT-EJ WORM!

SpywareBlaster auto-updater

Part of AT&T FreedomLink Wi-Fi connection software

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The SBC Self Support Tool is required to run with the Help and Support program. If you uncheck SBC and and then run Help and Support it will add another SBC entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide

Used to create and connect your SBC Yahoo DSL connection. This program has been reported to cause problems for some users. If you find that it causes you pc to become slow or unstable you should uninstall it (using Add/Remove programs) and manually connect your DSL connection

System Tray access to CounterSpy anti-spyware from Sunbelt Software

Detects the "Easy Front-Panel Audio Connectivity Drive Internal Drive Bay" on the Sound Blaster Audigy 2 Platinium eX. Can be disabled if you don't have one

Checks to see if Creative sound card driver should be updated

SuperBar parasite - uninstall available here

Downloader for a variety of rogue anti-spyware programs

SearchByMedia adware

SoundMAX MPU401 MIDI device emulator for x86 VM DOS games/apps (for Win9x only)

SideBySide adware

Control for Soundblaster MP3 external (USB) sound card

ScrubXP - utility that deletes safe to remove files, cookies, browsing history, etc

Watchdog 2.0 Software - monitoring program

All-In-One_SPY stealth monitoring software - allows monitoring and recording of all actions performed on a computer. It records all keystrokes, remembers addresses of Internet pages visited, and maintains a log file listing all applicationsrun on the computer. It can create screenshots and record sounds from the computer's microphone to a sound file

Added by the AGENT.APP TROJAN!

Possibly related to a digital camera

SiPix digital camera Twain device driver

Delfin Media Viewer adware related

Added by the LEWOR.D WORM!

ClientMan parasite variant

Associated with PrimaScan scanners. Is it required?

Added by the RBOT-AT WORM!

Associated with ScanWizard as supplied with Microtek scanners - see also Scanner Detector or SDetect. What does it do and is it required?

Added by the GREGSTAR TROJAN!

Added by the GANDA.A WORM! Note - this is not the valid "ScanDisk" Win9x/Me standard disk error checker

Added by a variant of the ADCLICKER TROJAN!

Added by the AGOBOT-PK WORM!

Added by the DLOADR-ARM TROJAN!

??

Part of Panda Antivirus. Responsible for scanning the boot sector of your disk and your memory at startup to check for viruses that try and load and act before your anti-virus is fully operational. It only adds a fraction of a second to start-up time and is worth leaving active

ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button

Kycocera Mita network copier/printer/scanner process to dump scanned documents onto a workstation

Trust Easy Webscan scanner related - what does it do and is it required?

Added by the QQPASS.E TROJAN!

Added by the NERTE TROJAN! Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as nsrvnt.exe not scanregw.exe

Added by the MASTERLOCK TROJAN!. Not to be confused with the real ScanRegistry - which is a vital Windows file. This version has the executable as scanregv.exe not scanregw.exe

Scans the system registry and makes back-ups at start-up. Important should the registry become corrupt. The executable "Scanregw.exe" is located in %windir% (where %windir% is the Windows directory - C:Windows or C:Winnt)

Added by the STATOR WORM! Not to be confused with the legitimate ScanRegistry entry - which is a vital Windows file. The executable "Scanregw.exe" is located in %windir%System (where %windir% is the Windows directory - C:Windows or C:Winnt). Runs from the registry RunServices key as opposed to the Run key

Added by the DINOXI or DINOXI.B WORMS!

Added by the NYXEM-D WORM! Note - do not confuse this with the legitimate Windows process scanregw.exe which is always found in the Windows folder on Win9x/ME machines. This worm file is found in the System (9x/ME) or System32 (NT/2K/XP) folder

Added by the DWNLDR-FZY TROJAN!

Spyware remover (where * = the version number) - not recommended, see here

Added by the STANDO-E WORM!

Added by the ACNATT.A WORM!

Related to SmartCard readers and sometimes uses lots of system resources

Added by the MOFEI.B WORM!

Related to PowerISO - CD/DVD image file processing tool

Related to unknown malware - hidden installer associated with it

Added by the VB-DVW WORM!

Part of Antivir PersonalEdition Classic anti-virus

Premium rate adult content dialler

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Scheduler for Mercury Ez View TV Tuner Card

Scheduler for Iolo System Mechanic tweaking utility. It can cleans your registry and deletes temporary files at defined intervals. Available via Start -> Programs

Added by the TACTSLAY.A TROJAN!

Added by the HOSTBANK-A TROJAN! Note - this particular msmsgs.exe file is located in the WindowsSystem32Config or WinntSystem32Config folder, and should not be mistaken for the MSN Messenger file of the same name!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.A TROJAN!

Added by the TACTSLAY.B TROJAN!

Tenebril GhostSurf or SpyCatcher related scheduler - you can schedule daily, weekly, monthly or one-time only cleanings

Added by the TACTSLAY.B TROJAN!

Added by the TACTSLAY.B TROJAN!

Added by the TACTSLAY.B TROJAN!

Added by the LIOTEN.KX WORM!

Premium rate adult content dialer

Scheduler for ReaConverter advanced image converter

Added by the SUBWOOFER TROJAN! Note - this is not the real MS Scheduling agent as the executable is incorrect

Added by the YAB.A TROJAN! Not the valid MusicMatch Jukebox which has the same filename

MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans

MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. Required if you have regularily scheduled events such as weekly virus scans

Added by the DINOXI or DINOXI.B WORMS!

Schmaili - insert animated smilies into your e-mail

Added by the TJSERV.D TROJAN!

WinScheduler is installed with Home Theater or WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs

Part of ConfigSafe - lets you identify changes to the registry, INI files, System asset files, system hardware, network connections, and operating system versions - provides a restore function. This part takes a snapshot of your system following a healthy re-boot

Added by a variant of the MAILBOT TROJAN!

Added by the FAKEALERT TROJAN!

Added by the FORBOT-CW WORM!

Added by a variant of the CRYPTER.C TROJAN!

Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process

Scotia OnLine Security Software provided by Entrust for Scotiabank. Provides trusted secure access to Scotia OnLine Secure Web sites. *.* represents the version number. Now obsolete after Scotiabank modernised their login process

Added by the OPASERV.T WORM!

ScrapPad allows you to quickly and easily record notes, thoughts, messages, and just about anything you want. Use it like you use scrap paper

Added by the DLOADER-VP TROJAN!

Screen Calendar allows you to create custom desktop wallpapers with built in active calendar and scheduler

Part of Access Denied security and privacy software

Part of Access Denied security and privacy software

Added by the RBOT-AGP WORM!

Installs as part of the Hubble Space Telescope screen saver (and possibly others). Lets you control your installed screensavers from a System Tray icon

ScreenHunter 4.0 Free is a completely free screen capture software for you to easily take screenshots

ScreenPrint32 screen capture software - can be launched manually

MatrixDialer related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in the Winnt or Windows folder

??

Maybe associated with DOS on a Win9x machine

Update to Norton AntiVirus 2001. Detects certain types of script-based viruses without the need for specific virus definitions - such as JavaScript and VBScript. This will help protect you from these viruses even before virus definitions are available. Note - some users complain of problems once the update is installed - refer here for more information

Script Sentry from Jason's Toolbox. Blocks malicious scripts and allows safe scripts to run. Only required if you want it to check the file associations it guards at startup. It will function regardlessly

Toolkit for the Lynx-3D Net scroll mouse from QTronix. Required if you use the special features

CoolWebSearch parasite variant

Added by the HACDEF-R TROJAN!

Added by the AGENT-DS TROJAN!

Added by the OPASERV WORM!

Added by the OPASERV WORM!

SCSI Miniport driver

Added by a variant of the DWNLDR-GAH TROJAN!

Added by a variant of the SPYBOT WORM!

Wiretap surveillance software. Uninstall this software unless you put it there yourself

Added by the SDBOT-CY TROJAN!

Added by the LOHAV-N TROJAN!

Added by the CRYPTER.A TROJAN!

PC Security from Tropical Software. 'PC Security(tm) 5.1 is the ultimate in computer security, offering multiple locking systems for the Windows environment and internet. Lock files, monitor programs' activities, even detect intruders! PC Security(tm) offers flexible and complete password protection, "Drag and Drop" support, plus many other handy features'

Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here

Added by the SERFLOG.C WORM!

Added by the SERFLOG.C WORM!

Added by the RANKY.AG TROJAN!

Related to LANDesk Management Suite from LANDesk Software Ltd. What does it do and is it required?

ScanSuite Scanner Detector - part of ScanWizard, supplied with Microtek scanners. Waits until you press the "GO" button and seems to serve no other purpose. Automatically installed without prompting. Not required if you can start your scanning application before pressing the "GO" button

Added by a variant of the SPYBOT WORM!

Added by the FORBOT-AP WORM!

Part of CA Unicenter Software Delivery - manage software across various systems, from desktops and servers to PDAs and mobile phones, in a controlled and standardized way - is it required at startup?

Added by the SDBOT-YJ WORM!

Added by the SDBOT-WC WORM!

Added by the RBOT.BHL WORM!

Added by the SPYBOT.OGX WORM!

Sdk**.exe [* = random char]

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the RBOT-ABA WORM!

Added by the FORBOT-DT WORM!

SmartDraw Photo (now FotoFinsh) - "organize, enhance, print, and share your photos. It's also a powerful graphic editor for creating images and web graphics"

DriveCleaner is a security assesment tool which gives exaggerated reports of security and privacy risks on a computer. The program then prompts the user to purchase a registered version of the software in order to remove the reported risks

Added by the SDBOT-SQ WORM!

InlookExpress logs keystrokes and captures screenshots. If you didn't install this yourself remove it. Note - this should not be confused with the svchost.exe system process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder! This file is located in a "sds20" folder

RSA Keon Web PassPort - software that allows organizations to use digital certificates in a Web-based environment to help ensure that their transactions are authentic, confidential and digitally signed

Spyware Doctor spyware remover - system tray access

Added by the BROGGER-A TROJAN!

SealedMedia enables you to combine document protection and control with your existing applications - such as Microsoft Word, Microsoft Excel, Microsoft PowerPoint and Email

Added by the OPANKI-F WORM!

Installed by SpeedItUp without permission, along with PC-Checker. Detected by DrWeb as the STARTPAGE.ORIGIN TROJAN

??

Naupoint browser hijacker

Search-Exe hijacker

Hijacker

SearchBarCash adware variant

SCBar foistware

SearchNav adware - IEFeatures/Popnav variant

SearchNav adware - IEFeatures/Popnav variant

SearchNet adware

Browser hijacker - redirecting to FindWhateverNow.com

SearchSpy misleading spyware remover - not recommended, see here

SearchSquire adware

Hijacker

Added by the HAXDOOR.D TROJAN!

Added by a variant of the HAXDOOR.BC TROJAN!

Added by the HAXDOOR-AE TROJAN!

Related to Second Copy(r) - a files/folders backup utility

Power Quest Second Chance. Sets checkpoints for saving a backup copy of the registry to a disk so you can restore it if you have a crash

Added by the DELF-LW TROJAN!

Hijacker that may reset your browser's home page and/or search settings to point to undesired sites

Secretmaker is a combonation of eight privacy-defending programs, including Spam Fighter Pro, Worm Hunter, Pop-Up Killer, Banner Blocker, Cookie Eraser, Privacy Protector, History Cleaner, and Garbage Cleaner

Secret Smileys is an add-on for AIM that provides users access to 1000's of new Smileys that can be viewed by anyone using a current version of AIM. Secret Smileys also adds other features such as logging of IM conversations, and it gets rid of that annoying advertisement on your buddy list window

Reported by Panda as an EasySearch Adware variant. Note - EasySearch modifies the Internet Explorer settings and may download programs onto the infected computer

Added by the GLOBAL PATROL TROJAN!

UltraSoft Key Interceptor surveillance software - uninstall this unless you put it there yourself!

Part of the Nero multimedia suite backup function - "Recover your data quickly and easily and create discs that are password protected. SecurDisc technology gives you peace of mind"

DealHelper adware

Added by the RBOT-AFO WORM!

Added by an IRCBOT TROJAN!

Added by the VANEBOT-AN WORM!

Added by the AGOBOT.ACI WORM!

Detected by Symantec as the SILLYFDC WORM! See here

Detected by Symantec as the SILLYFDC WORM! See here

WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually

WhiteCanyon SecureClean 4 disk cleaner - clean hard drive data, MRUs, temp files and more. Can be started manually

SecureCleaner spyware remover - not recommended, see here

SecureClean - scans your system for hidden temporary files, deleted email messages, Internet histories and caches

SecureIt Pro - lock your computer when you're not there, to stop malicious users from accessing your desktop

Added by the REDZED WORM!

Related to Secure Online Account Numbers by Discover(R) Card from Orbiscom Ltd. Secure and innovative payment solutions

SecurePCCleaner misleading security program - not recommend, see here

1 Click Fixer PLUS from Secure PC Solutions "takes the guesswork out of locating and solving problems in the Windows registry"

Added by a variant of the SDBOT WORM!

Added by the SPYBOT.JE WORM!

Added by the BANCBAN-F TROJAN!

Added by the RBOT-SV WORM!

Added by the SDBOT.BAV WORM!

Added by the SDBOT.CFT WORM!

Spyware remover - not recommended, see here

A ComCast Internet software suite that provides a variety of features (firewall, popup blocker, parental controls etcetera) to help ensure your computer is secure, and your information is kept private

Added by the RBOT-ZW WORM!

Added by the SDBOT-BM WORM!

Added by the RBOT.WW WORM!

Added by the SDBOT-KB WORM!

Added by an unidentified WORM or TROJAN!

Added by the RBOT-GGF WORM!

Added by the AGOBOT-LC WORM!

Added by the AGOBOT.ZW WORM!

Added by the NOPIR.A WORM!

Security Wizard 98 by Chris Farmer. Offers you a variety of ways to restrict access to many of the programs and settings on your PC. Available here

Seekmo Search, a 180Solutions adware variant - also see here

180Solutions.Zango adware

180solutions/Seekmo adware

Medload adware

Added by the DLOADER-WD TROJAN!

??

Added by the LOWZONE-AS TROJAN!

Added by RXToolbar ADAWARE! Software that displays pop-up/pop-under advertisements when the primary user interface is not visible

PCsms - tool that enables you to send sms text messages from your PC to any UK mobile phone

Detected by Kaspersky as PurityScan.ah

Symbol Commander makes the use of your PC, laptop, Tablet PC, and Pocket PC much easier and much faster. It recognizes your handwriting with unparalled performance and executes commands in a snap. Just by using your mouse, pen, or touchpad, simply draw symbols to execute actions instantly

From IP Insight. Allows website owners "to instantly determine the precise geographic location, connection speed and detailed demographics of every visitor to your website". Will be detected by most firewalls and the majority of home users should disable it

Added by a variant of the RBOT WORM!

MediaMotor.Popupwithcast adware

Any one of a variety of worms and trojans

Added by a variant of the IRCBOT TROJAN!

Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "D5133" subfolder

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

Shared Modem Service Client Event Viewer - used when a number of PCs have access to a number of modems. Required to be running on each PC for access to the modems

Added by the WAREZOV.DC WORM!

Added by the SDBOT-ACP WORM!

FTP server

Added by the MANIFEST TROJAN!

Added by the DELTAD.A WORM!

Added by the METHS-A TROJAN!

Added by the SINGU-Q TROJAN!

Multi Function Printer (MFP) Server Agent for Belkin's Wirless G All-in-One Print Server and ZyXEL's NPS-520

Added by the RBOT-ZM WORM!

Added by the RBOT-GWC WORM!

Added by the SDBOT-DFA WORM!

Added by the SDBOT-DDB WORM!

Added by the BUSHTRO122 or SMOKODOOR TROJANS!

Added by the DELTAD.A WORM!

Added by the MADANGEL VIRUS!

Added by the ALADINZ.H TROJAN!

Added by the KAITEX.E TROJAN!

Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the CHA TROJAN!

Added by the ASSIRAL-C WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.BRH WORM!

For Compaq PC's. Part of Backweb

For Compaq PC's. Part of Backweb

Added by the GAOBOT.AO WORM!

Added by the PREVERT TROJAN!

Added by the RBOT.BMD WORM!

Added by the SDBOT-WK WORM!

Added by the RBOT-ZJ WORM!

Added by the SDBOT-YX WORM!

Added by a variant of the RBOT WORM!

Added by the TORVEL.B WORM!

Added by the TORVEL WORM!

Added by the DAOSER-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services{C922CCC4-CF61-4589-A0D1-828160704853} subfolder

Added by the DAOSER-C TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a Services[random] subfolder

Added by the TORVEL WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the HITON TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in the Winnt or Windows folder

Added by the GAOBOT.GEN!POLY WORM!

SQL Server Service Manager - provides tray access to SQL server, the server agent and MSDTC. Available via Start -> Programs

Added by the PASSMAIL-D VIRUS!

Added by the PROXY-GRIC TROJAN!

Added by the DONBOMB.A TROJAN!

Added by the RBOT-ALE WORM!

Added by the DELF-NK TROJAN!

Added by the SDBOT-AFO WORM!

Added by the SPYBOT.YQW WORM!

Added by the RBOT-AQJ WORM!