Processes beginning with w

ZenoSearch adware

Added by the DROPPERFL.A TROJAN!

Added by the SOKEVEN TROJAN!

Added by the NARCS WORM!

Added by the SINALA WORM!

Added by a variant of the RBOT WORM!

Added by the CASPID WORM!

Added by the PROXYSER-M TROJAN!

Adult content dialler

Added by the JAMBU-A WORM!

Added by the VOTE.D or VOTE.K WORMS!

Web3000 adware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Printer utility which is required in order to make the printer work correctly

Added by the BANCBAN-QB TROJAN!

Enuff Parental Control Software by Akrontech

Related to USB support for Sigmatel MP3 audio palyer (and others such as SanDisk). It's intent is to "put away" the "disk" before you unplug it from the USB port, ostensibly to avoid "losing" data

Added by a variant of the SDBOT WORM!

Packard Bell net2Plug allows you to network PCs anywhere in your house

WallChanger - wallpaper changer from Blue Tree Software

WallMaster - "The free and easiest way to master your desktop wallpaper!"

Added by the BANKER-GX TROJAN!

Wallpaper Changer - wallpaper manager that can change your background images on every startup

A wallpaper changer and manager utility. There is the Freeware version and the Pro version. The freeware version is completely free. The Pro version is 30-day trialware, and after the 30 days some of the more advanced features will be disabled unless you register it

Wallpaper Slideshow LT from gPhotoShow.com - "a great utility for displaying your favorite photos as your desktop wallpaper"

Wanadoo ISP instant messenger client

Added by the RBOT.HDO WORM!

An AOL component, the Wan miniport (ATW) service. If you delete this and logon, AOL reports a problem with your internet connection, and reinstalling AOL doesn't help

PurityScan/Clickspring adware

War-ftpd - FTP server

War FTP Daemon from JGAA's Internet - FTP client

Added by the ADCLICKER.G TROJAN!

Wareout - malware masquerading as a spyware and dialer remover

Warez P2P client

Also known as "CyberWarner". From G-Tek Technologies and pre-installed on some Packard Bell PCs. Protects critical files

Warnet - system cleanup software

Part of Folder Password Expert by ZQS Software Team - "a software program to restrict access to the folders that contain your sensitive data"

Folder Password Protect - a program that lets you set a password on folders of your choice

Acer warranty registration popup

"War FTP Daemon - the original free FTP server for windows"

WashAndGo - temp file cleaner

Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG

Cookie Washer for Internet Explorer from Webroot Software. Light version of Windows Washer, specific for cleaning the IE cache and cookies. Available via Start -> Programs

Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG

Grokster ads updater

Found to be used by a Trust USB scanner for auto starting the scanning software when the lid is lifted

Button press monitor for the Mustek 1200 UB Scanner

For Compaq PC's. Associated with Compaq's internet services. Not required if you don't use services provided by them and may not be required even if you do

Definitely part of the Mustek scanner drivers and software (for 600 III EP Plus and maybe others), launches from the Startup folder in the Start Menu, but not required as they give instructions on removing it on their webpage

Part of Motorola "Mobile Phone Tools" v3 - in a "Mobiile Phone Tools" sub-directory of Program Files

Related to an Intervideo program. What does it do and is it required in startup?

WatchWAN keeps an accurate account of the data that is flowing between your computer and the Internet at any given moment. This readout is presented in both numerical and graphical format, in real time

Added by a variant of the IRCBOT TROJAN!

Part of SafeSpace (from Artificial Dynamics) which "protects computers from Internet malware infection without the need for signature updates or regular maintenance"

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

WaveTop - "Get push content from TV without an Internet connection" - now possibly a defunct system in the US included as an optional part of WebTV in Win98

"HP Wireless Assistant is a user application that provides a method for controlling the enablement of individual wireless devices (such as Bluetooth or WLAN devices) and that shows the state of the radios for these wireless devices"

Added by a variant of the IRCBOT BACKDOOR! See here

Appears to be related to Desktop Notifier from Starfield Technologies. What does it do and is it required?

Wbiff! E-mail checker - automatically checks your e-mail and notifies you if any new e-mail has been received

Added by the AGENT-HFI TROJAN!

Turns on and off the integrated WiFi on Acer (and other laptops)

Active sync for use with Windows CE based palm PC

Added by the AGOBOT-QZ WORM!

Added by the AGOBOT-QX WORM!

Barok keylogger and password stealer

Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

Makes colours sharper and brighter, but will only work with coloreal capable monitors

??

PurityScan/Clickspring adware

PurityScan/Clickspring adware

PurityScan/Clickspring adware

Added by the KEYLOG-AP TROJAN!

WD Backup - customized version of ArcSoft's TotalMedia Backup for Western Digital external drives (see here)

Button manager installed with a western digital external disk drive. Allows you to back up your system with one click

Spindown utility "for use with all Western Digital external hard drives except for the Media Center and the Dual-option Backup drives. It is designed to give greater user control over the spindown of the external drive"

Added by the DWNLDR-FVL TROJAN!

Added by the DLUCA.B TROJAN!

Detected as the BUZUS.DVE TROJAN!

Added by the MYTOB-BY WORM!

Added by the MYTOB-BY WORM!

Added by the MYTOB-BY WORM!

IEPlugin spyware

Added by the DLUCA.E TROJAN!

Western Digital USB disk driver

Weatherbug provides current outdoor temperature in the System Tray, also weather alerts. Available via Start -> Programs

Weather Pulse from Tropic Designs. "Display popular Satellite images and video from around the globe, share images with your friends and family, stay updated on current and expected weather conditions, it's just plain fun!"

Weather reporting in the System Tray. Available via Start -> Programs. Installed via Radlight

WeatherEye - desktop weather from TheWeatherNetwork

Hotbar adware

Hotbar adware

WeatherScope - "displays your current local temperature in the system tray of your computer (near the clock) whenever you are online!" Not recommended as it bundles GAIN adware. You can get the adware free version for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here

WeatherStudio adware

WeatherWatcher - weather reporting in the System Tray

Added by a variant of the EASTO.A TROJAN!

Added by a variant of the RBOT WORM!

eZula TopText adware

eZula TopText adware

eZula TopText adware

eZula TopText adware

??

Added by the ADMINCASH TROJAN!

Added by the BUBE-F VIRUS!

CoolWebSearch parasite variant, identified by Kaspersky as TrojanDropper.Win32.Small.cw

Web2Pop allows you to retrieve your web-based accounts messages to read them in your favorite e-mail client

PC-Cillin 2000 anti-virus software → ActiveX filter. Guards against malicious ActiveX programs, etc

Searchcentrix hijacker

Web Army Knife - a suite of web site developer's tools

Adware popup generator

WebBuying adware

WebCallDirect - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype

Added by the MONAD-A TROJAN! Note - this malware actually changes the default value data of the Registry Run and RunServices keys in order to force Windows to launch it at boot. Name field may be empty

Control software for the portable Creative Webcam Go digital camera/PC web cam. What does it do and is it required?

For Logitech Web Cams. Not required - camera works fine without it

Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here

Added by the CONE.C or CONE.F WORMS!

WebRebates adware

IRC DDoS bot which gives the hacker full control over your system

Related to Web Meetings from WebEx Communications, Inc. Share and present online with anyone, anywhere

System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here

WebHancertrackware - traffic measurement service that uses a client agent that is stealth installed on user machines, gathering detailed data about sites visited, their performance and, most important, what the user actually does while there

ClipGenie adware downloader

ClipGenie adware downloader

WebKey from JB Utilities. Utility to keep track of login data required when browsing the internet

Softex is a "cost-effective way to provide software updates, technical support or new product information to specific end-users - it can silently provide end-users with software updates, technical support and new product information customized to their specific needs through a persistent link"

Intel WebOutfitter service System Tray icon

Scheduler for Web Position Gold - utility to help optimize the position of web-sites in search engines

WebRebates adware

Webroot Desktop Firewall

Added by the ADWARELOADER TROJAN!

WebSaver Live! is a companion program to Websaver that retrieves information from the Internet on a schedule and displays it on your screen when your computer is idle

Web Savings From Ebates Software, a shopping tool that opens pop-up windows

Web Savings From Ebates Software, a shopping tool that opens pop-up windows

eAcceleration Stop-Sign security software related. Previously not recommended, see here

eAcceleration Stop-Sign security software related. Previously not recommended, see here

From McAfee VirusScan up to version 4.x. Provides functionality for VShield Download Scan and Internet Filter modules. Enables internet scanning. Guards against malicious ActiveX programs, etc

"Web Savings" From Ebates Software, a shopping tool that opens pop-up windows

WebSecureAlert - "helps to protect your browser security by monitoring for unauthorized tampering with Internet Explorer's security settings, and can help to protect your privacy by deleting your web surfing history on a regular basis". Not recommended as it bundles GAIN adware. You can get the adware free version for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Related to a Pinnacle sound card. What does it do and is it needed?

Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web

Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web

Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web

Webshots - software that displays photos as your screensaver and wallpaper, and provides tools for sharing your personal photos on the web

Added by the FORBOT-FY WORM!

WebSpecials spyware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Detected by Kaspersky as the STARTPAGE.C TROJAN! See here

Adult content dialler - where ***** are random

Part of PC-Cillin anti-virus software. Checks web-sites for malicious Java and ActiveX elements in a similar way to McAfee WebScanX. A few users find it infuriating

Part of PC-Cillin Anti-Virus software. Checks visited web-sites for malicious Java and ActiveX elements

Free Pop-up/ad/javascript filter program from Siemens. If not running then browsers will not be protected but will still work. Available via Start -> Programs

Added by the WeirdOnTheWeb adware

Launches the Welcome to Windows tutorial on boot up

Cisco Aironet 340 Series PC Card driver. If it can be started manually it shouldn't be required if you don't use the PC card facility regularily - hence the status could be "U". Can anybody confirm this?

Added by the JECT.C TROJAN!

Added by the BAGLEDI-A TROJAN!

Added by a variant of the SLAPER TROJAN!

Added by the QQPASS-L TROJAN!

RoboMagic Wetsock - weather reporting in the System Tray

Wextract Cleanup0 is valid and legal software included or sold to help clean up temporary or cab files created by the installer software for a wide variety of software. It should disapear after a restart of the system. If not fix it

World Weather. "This midlet displays the current weather conditions for major cities around the world. This version is for memory limited mobile phones"

ICQ (messaging/chat program) anti-bomb software. "WFIPS is anti-bomb software for safeguarding ICQ Bomb before the bombing. 'ICQ Defoolder' is a tool for removing ICQ bomb after being exposed." For more information about ICQ bombs see here

From WinFax 10.0 and possibly earlier versions. Appears if you chose to have WinFax appear in the taskbar (System Tray) during installation and displays a yellow fax/telephone icon. Available via Start -> Programs

WinFax 10.0 and maybe earlier versions. The program that opens the port for WinFax and not normally in the start menu. Needed if you want to run WinFax

Related to WinFax. What does it do and is it required?

Configuration utility for the Netgear WG111 54 Mbps Wireless USB 2.0 Adapter that "provides wireless access to your desktop or notebook PC through the computer's USB port"

Netgear configuration programme for the 54g wireless lan card - required to monitor and manage the lan card

Added by the IRCBOT-TM WORM!

Added by the LEGMIR-AQH TROJAN!

Added by the ZIPPIE TROJAN!

Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so. It could be started by creating a shortcut, running it only when connecting to the internet. If internet is used often, it's recommended to leave it in startup so it starts with the system

Part of Flash-Networks NettGain2000 product. NettGain 2000 is a combined hardware/software networking solution, which is designed to improve performance of satellite networks by increasing data transmission speeds and maximizing the existing bandwidth for complete utilization when sending TCP/IP applications over a satellite. It is needed when connecting to the internet via satellite to provide speed faster than 60k or so

System Tray application that starts up Webhancer software. Software that optimizes your web browser and is also advertising spyware that you can find out about here

Added by the BHARAT.A WORM!

WhatPulse keeps track of your keystrokes, allowing you to find out just how much you type a day

Mouse software for "Fellowes" Wheelman mouse. Has caused some users problems but shouldn't be needed if you don't use any enhanced features it may provide

A4Tech wireless mouse driver and utility - required if you use non-standard Windows driver features

Added by the SOCKSPR-D TROJAN!

WhenU.Save adware

WhenU.Save adware

WhenU.Save adware

Added by the WHISTLER-F TROJAN!

Added by a variant of the SDBOT WORM!

Added by the ZAPCHAS-CS TROJAN!

Added by a variant of the SDBOT WORM!

Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark"

Still Image Class Installer - installed with a webcam

Added by a variant of the SDBOT WORM!

Unidentified malware

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the IRCBOT.GP TROJAN! See here

Added by the CHECKOUT WORM! See here

Added by the CHECKOUT WORM! See here

Detected by Trend Micro as the SLENFBOT.AC TROJAN! See here

Added by the CHECKOUT WORM! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the IRCBOT.AVG TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the SDBOT WORM!

Direct-B premium rate adult content dialler

Part of the WildTangent on-line games system. What does it do and is it required?

Web Driver delivery system for WildTangent on-line games. Periodically checks for updates - can be disabled within the programs control panel. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

This places a status icon on the taskbar for the DSL WildWire Tiger Modem. This is also a shortcut to the diagnostics utility for the DSL modem

Willow Road Screen Saver

Added by the VBS_SOLOW.AF VIRUS!

Added by the SEEKER.K TROJAN!

Added by the AGOBOT-MV WORM!

Added by the AGOBOT-MV WORM!

Added by the MYTOB-CQ WORM!

Added by the REATLE.C WORM!

Related to the Sentry Parental Controls software

Win Antivir 2008 rogue security software - not recommended, see here

Win Antivirus 2008 rogue security software - not recommended, see here

WinChimes - enhancement software for the system clock that runs in the system tray

Added by the WINCOM TROJAN!

Added by the AGOBOT.XQ WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the RBOT-AXL WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM! See here

Added by a variant of the SDBOT WORM! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the IRCBOT.67098 WORM!

Added by a variant of the RBOT WORM!

Added by the SPYBOT.MAR WORM!

Added by the KEYLOGGER.CLONE TROJAN!

Added by the RBOT-FZC WORM!

Added by a variant of the RBOT WORM! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a "Winamp" subdirectory of the Program Files directory

Added by the RBOT-AWE WORM! Note - this trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder

Added by the RBOT-AKX WORM!

??

Added by the RBOT.AA WORM!

Added by the SDBOT-GS WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT-BIT WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT-AGI WORM!

Added by the RBOT-AQT WORM!

Detected by Trend Micro as the IRCBOT.AVE BACKDOOR! See here

Added by the IMISERV.A TROJAN!

Added by the IMISERV.A TROJAN!

Added by a variant of the IMISERV TROJAN!

IEPlugin adware

Detected by Kaspersky as the RBOT.BYJ TROJAN! See here

Added by the MYTOB.L WORM!

Added by the SDBOT.J WORM!

Added by a variant of the RBOT WORM!

Added by the AGOBOT-TN WORM!

Added by the AGENT-UY TROJAN!

Added by the RBOT-GDP WORM!

Added by the RBOT.IP WORM!

Added by a variant of the WOOTBOT WORM!

Added by an unidentified WORM of TROJAN!

Added by a variant of the RBOT WORM!

Added by the SPYBOT.DNB WORM!

Added by a variant of the RBOT WORM!

Added by the VBSILLY-A WORM!

Added by the RBOT.AGF WORM! Note - this is NOT the popular Winamp media player which resides in a "Winamp" subdirectory of the Program Files directory. This file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

WINBO adware

Added by the LOVELETTER (I LOVE YOU) VIRUS!

Added by the BROPIA.N WORM!

Added by the BROPIA.N WORM!

Added by the PODROP-C TROJAN!

Screenspy captures screenshots silently. If you didn't install this yourself, remove it

Detected by Kaspersky as the BIFROSE.BSJ TROJAN! See here

Added by the WINTOO WORM!

Added by the RATEGA TROJAN!

Added by the MYLIFE.N WORM!

Added by the EVILBOT.B TROJAN!

Added by the ISRAZ.A WORM!

Added by the ADUENT TROJAN! Acts as a hi-jacker redirecting to Surferbar.com and adult content sites

Added by the EVILBOT.B TROJAN!

Added by the SWERUN VIRUS!

Added by the SCAFENE WORM!

Added by the SPAZBOX.A TROJAN!

Added by the BROPIA.J WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the MYTOB-HQ TROJAN!

Added by the RBOT-GCE WORM!

Added by the SEMAPI-A WORM!

Added by the SDBOT.TT WORM!

Added by the SDBOT.UL WORM!

Added by the FORBOT-BZ WORM!

Added by the RBOT-GUB WORM!

Added by the KELVIR.F WORM!

Added by a variant of the WOOTBOT WORM!

Added by a variant of the WOOTBOT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the FORBOT-FD WORM!

Added by the FORBOT-FG WORM!

Added by the WOOTBOT.CY WORM!

Added by a variant of the SPYBOT WORM!

StartPa-MN homepage hijacker

Added by a variant of the RBOT WORM!

Added by the WOOTBOT TROJAN!

Added by a variant of the FORBOT WORM!

Added by the DELBOT-U WORM!

Added by a variant of the IRCBOT TROJAN!

Added by the RINBOT.Y WORM!

Added by the DERMON-D TROJAN!

Added by the MOKS VIRUS!

Added by the PROXY-BS TROJAN!

Added by the FORBOT-FJ WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.AMG WORM!

Added by a variant of the RBOT WORM!

Added by the WOOTBOT.EU WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the RBOT-ADE WORM!

Added by the RBOT-ABF WORM!

Added by a variant of the WOOTBOT.Y WORM!

Added by an unidentified WORM or TROJAN!

Added by the SDBOT.A TROJAN! Note - this is not to be confused with the legitimate rundll32.exe file!

Added by a variant of the SDBOT WORM!

Added by the RBOT-ETI WORM!

Added by the DELBOT-O WORM!

Added by a variant of the SDBOT WORM! See here

Added by the AHKER.E WORM!

Added by the SPYBOT-EK WORM!

Added by the RBOT.BKY WORM!

Added by the SDBOT-PV WORM!

Added by the RBOT-SX WORM!

Added by the FORBOT-BH WORM!

Added by the FORBOT-FO WORM!

Added by the SDBOT.KIN WORM!

Added by the DERMON-A TROJAN!

Added by the SDBOT.UK WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the SDBOT WORM!

Added by an unidentified WORM or TROJAN!

Added by a variant of the SDBOT WORM!

Added by the SDBOT.AA TROJAN!

Added by the FORBOT-BK WORM!

Added by the FORBOT-BE or FORBOT-J WORMS!

Added by the SDBOT-OV WORM!

Added by the FORBOT-BX WORM!

Added by a variant of the RBOT WORM!

Added by the SPYBOT.DHV WORM!

Added by the SDBOT.FO WORM!

Added by the FORBOT.J or SDBOT.HU WORM!

Added by the WOOTBOT.X WORM!

Added by the FORBOT-AN WORM!

Added by the FORBOT-AH WORM!

Added by the AGOBOT.YE WORM!

Added by a variant of the FORBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the FORBOT-EX WORM!

Added by the FORBOT-R WORM!

Added by the IRCBOT.D WORM!

Added by the WOOTBOT.H WORM!

Added by the SPYBOT.DN WORM!

Added by the SDBOT-QF WORM!

Added by a variant of the RBOT WORM!

Added by the WOOTBOT.B WORM!

Added by a variant of the RBOT WORM!

Added by the STARTPAGE TROJAN!

Added by the AWQ.A TROJAN!

Added by the PAINTER TROJAN!

Added by the PAINTER TROJAN!

Added by the NAVIDAD WORM!

Added by the BANKER-DA TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the GUDEB WORM!

Added by the LOVELETTER (I LOVE YOU) VIRUS!

Added by the BANPAES TROJAN!

Eziin adware

Added by the ESTRELLA TROJAN!

Added by the ESTRELLA TROJAN!

Added by the DLUCA-F TROJAN!

Added by the TURGEN -A TROJAN!

Adult content dialler

Added by the IRC.ALADINZ.C TROJAN!

Eziin adware

Added by the BANLOA-EY TROJAN!

Added by the DELF-EWZ TROJAN!

Added by the ESTRELLA TROJAN!

Added by the AGOBOT-RZ WORM!

iSearch adware

iSearch adware

Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. The specific function of this is to load MIF's in order for Dell OpenManage Client to work

Added by an unidentified WORM or TROJAN!

Added by the DDV.B WORM!

Added by the MYDOOM.V WORM!

Browser hijacker

Added by the FORBOT-EO WORM!

All-In-One-Telcom (adult content dialler) variant

Added by the RBOT-RA WORM!

Added by the DEDMIR-A WORM!

Eziin adware

RapidBlaster variant (in a "win32_i" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "win32_i" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

Added by the GOSUSUB VIRUS!

Homepage hijacker. Not a dll but a regfile in disguise

Added by the AGENT.DN TROJAN - known to BOClean as "CWS/INDEX", "shuts down anything that wants to open and is used as a spam proxy as well"

Added by the AGENT.DN TROJAN - known to BOClean as "CWS/INDEX", "shuts down anything that wants to open and is used as a spam proxy as well"

CoolWebSearch parasite variant

Added by the DEDLER-D TROJAN!

Added by the DEDLER-D TROJAN!

Added by a variant of the RBOT WORM!

Added by the LINEAGE-PN TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the MATCASH.BG TROJAN!

Added by the FORBOT-CS WORM!

AceScreenSpy keystroke logger/monitoring program - remove unless you installed it yourself!

WinActive of the LOP.com hijacker

Added by the ROTARRAN VIRUS!

WinAd adware by eXact Advertising

Added by the BANKER-BU TROJAN!

Browser hijacker - redirecting to Search-World.net. Related to the SMALL.AEX TROJAN!

Standard Life Insurance program. Is it required at startup?

Added by a variant of the VAGRNOCKER TROJAN!

Added by the DELF.E TROJAN!

Added by the DELF.E TROJAN!

Hijacker - re-directing to adult content sites. Note - this isn't the real Winamp

Added by the AGOBOT.XI WORM! Note - this is NOT the popular Winamp media player

Added by the SDBOT-WN WORM!

Winamp media player. Resides in a "Winamp" subdirectory of the Program Files directory

Added by a variant of the RBOT WORM! Note - this is NOT the popular Winamp media player. The valid filename for the Winamp Agent is "winampa.exe" - see here

Added by the DIAZMON-A TROJAN!

Added by an unidentified VIRUS, WORM or TROJAN!

Detected by PCTools as the SDBOT.ACJM BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is NOT the popular Winamp media player which resides in a "Winamp" subdirectory of %ProgramFiles%

Added by the RBOT-AQI WORM! Note - this is NOT the popular Winamp media player which has a different filename

Added by a variant of the SPYBOT WORM!

Winamp to Google Talk, available here shows your current Winamp track in your Google Talk status

Added by the SDBOT-ACR WORM!

Loads the System Tray icon for the popular Winamp media player - see here. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs. Resides in a "Winamp" subdirectory of the Program Files directory

Added by the AGOBOT-GS TROJAN! ! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a "Winamp" subdirectory of the Program Files directory whereas this file is located in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by a variant of the RBOT WORM! Note - this is NOT the popular Winamp media player. The valid filename for the Winamp Agent is "winampa.exe" - see here

Loads the System Tray icon for the popular Winamp media player - see here. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs. Resides in a "Winamp" subdirectory of the Program Files directory

Added by the EB TROJAN! Note - this is NOT the popular Winamp media player which has a different filename

Added by the EB TROJAN! Note - this is NOT the popular Winamp media player which has a different filename

Added by the EB TROJAN! Note - this is NOT the popular Winamp media player which has a different filename

Added by the EB TROJAN! Note - this is NOT the popular Winamp media player which has a different filename

Added by the TACTSLAY.B TROJAN!

Added by the TACTSLAY.B TROJAN!

WinAnonymous spyware remover - not recommended, see here

WinAntiSpyware 2005 spyware remover - not recommended, see here

WinAntiSpyware 2007 spyware remover - not recommended, see here

WinAntispyware2008 rogue spyware remover - not recommeded, see here

WinAntiVirus Pro 2007 misleading virus software - not recommended, see here

Added by a variant of the TIBSER.A downloader TROJAN!

Added by the CAPSIDE-C WORM!

Produces popup ads to adult content sites

Added by the RSBOT TROJAN!

StingKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself! Note - this is not the svchost.exe process that normally doesn't appear in Msconfig/Startup!

Hijacker, also indentified as the STRTPAGE.BE TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup and is always located in the System32 folder. This file is placed in the Windows or Winnt folder

Added by the FAKEAVALERT TROJAN!

WinAntiSpyware spyware remover - not recommended, see here

Added by the SDBOT-AYF WORM!

LIUtilities WinBackup scheduler - backup software

"WinBar is a free and compact program that lets you monitor your system and provides easy access to frequently used controls"

Added by the RBOT-AVI WORM!

Hijacker

Added by the RBOT.CLS WORM!

Added by the RBOT-ZL WORM!

Added by the RBOT-GRU WORM!

Added by the BANLOAD-W TROJAN!

Added by the MIDRUG-A TROJAN!

WinBrush - "handy tool that keep your privacy and make your system clean. It works by cleaning up your tracks (document histories, recent opened files from popular software, cookies, temporary internet files, etc)"

Identified as a variant of the Trojan-Dropper.Agent.DKN malware

Added by the SOBER-S WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "ConnectionStatusMicrosoft" subfolder of the Windows or Winnt folder

Added by the PWS-CY TROJAN!

Added by the SOBER.S WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "ConnectionStatusMicrosoft" subfolder of the Windows or Winnt folder

Added by the DELBOT-Y WORM!

Added by the DLOADER-PO TROJAN!

WinCinema_Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

WinCinema_Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs

InterVideo WinCinema Manager - needed for the use of WinDVD Remote Control

Added by the AGENT.GXR TROJAN!

Added by the AKBOT-AR WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wincls.dll" file is found in %System%

CasClient adware variant - also detected as the CMAPP TROJAN!

The Microsoft Color Control Panel Applet for Windows XP "helps you manage Windows color settings in one place." Part of the Pro Imaging Powertoys

Added by the CLICKER-EN TROJAN!

Added by the STRATIO-HA WORM!

Added by the DOGBOT-D WORM!

Added by the REWINDO-A TROJAN!

Added by the IRCBOT-YI TROJAN!

Added by the AGOBOT-MG WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-ARH WORM!

Added by the MITGLIEDER.BD TROJAN!

Added by the SPYBOT.DQ WORM!

Added by the ALLEM WORM!

Added by the AGOBOT-TL WORM! Note - this is not the legitimate Windows application wordpad.exe (which is found in the Program FilesAccessories folder) which should not normally be seen in Msconfig or as a Startup item. This file is loacted in the System (9x/Me) or System32 (NT/2K/XP) folder

Added by the RBOT-GQO TROJAN!

Added by the RBOT-AHW WORM!

Identified as a variant of the Backdoor.Win32.Poison.avs malware

Added by the SOBER.AA WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "PoolData" subfolder of the Windows or Winnt folder

WinDates is a calendar, date organizer and event reminder program from Rockin' Software

Added by the AGOBOT-WD WORM!

Added by the DLUCA TROJAN!

Added by the ANPES WORM!

Added by the WURMARK-O WORM!

Added by the AGENT.BYH TROJAN!

Added by the RBOT-AMY WORM!

Added by the BANKER-CB TROJAN!

Added by the BANKER-BV TROJAN!

Added by the PWSAGENT-A WORM!

Added by the WINBUR.B WORM!

Added by a variant of the IRCBOT TROJAN!

Added by the TRYNOMA TROJAN!

STARR key logger. "It logs almost everything that goes through the box. It logs all key strokes, all passwords transacted even if they weren't keyed in, all web sites visited, every program launched including the path to that program, and more"

Added by the ASTEF or RESPAN WORMS!

Detected by Kaspersky as the AKBOT.E BACKDOOR! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "algs.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "aqls32.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "aqls32.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "bee.dll" file is found in %System%

Detected by Kaspersky as the KOLAB.OL WORM! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "bix.exe" file is found in %System%

Added by the AKBOT.U WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "CSMSS.EXE" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "ctfmonm.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "dasda.com" file is found in %System%

Added by the AKBOT.E WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "diem.exe" file is found in %System%

Detected by Kaspersky as the IRCBOT.BPM TROJAN! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "dlfksdld.exe" file is found in %System%

Added by the AKBOT.E WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "jbi32.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "lcass.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "mysnlive.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! The "ProsFix.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "qwex.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "redyLive.exe" file is found in %System%

Added by the AKBOT.M WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "scvhost32.dll" file is found in %System%

Detected by Kaspersky as the AGENT.BX WORM! See here. The "service.exe" file is found in %System%

Added by the AKBOT.AW WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "slmss.exe" file is found in %System%

Detected by Kaspersky as the AKBOT.E TROJAN! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "slsass.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "redyLive.exe" file is found in %System%

Added by the AKBOT-AS WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sslms.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "start0s.exe" file is found in %System%

Added by the AKBOT.M WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "steam.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "svc.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "svchost.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "sysx32.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tepmlayer.exe" file is found in %System%

Detected by Kaspersky as the KOLAB.L WORM! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tmp.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tock24.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tqurity.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "v4mon.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "vdm32.dll" file is found in %System%

Added by the AKBOT.R WORM! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "vxd32.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wchshield.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wimimi.exe" file is found in %System%

Detected by Kaspersky as the AKBOT.E WORM! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "tmp.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wingatey32.exe" file is found in %System%

Detected by Kaspersky as the AKBOT.E BACKDOOR! See here. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wintmp.exe" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "wsync32.dll" file is found in %System%

Added by a variant of the IRCBOT BACKDOOR! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "xvd32.dll" file is found in %System%

Added by the STEALER TROJAN!

Added by the MSNPWS TROJAN!

Added by the LEGMIR.AQ TROJAN!

Added by a variant of the MITGLIE-A TROJAN!

Added by the GAOBOT.WX WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by a variant of the IRCBOT BACKDOOR!

Added by the KICKIN.A (or CYDOG.C) WORM!

Added by the RBOT-GUN WORM!

Added by the GAOBOT.ADW WORM!

Added by the GAOBOT.AO WORM!

Added by the SDBOT.RT WORM!

Detected by Kaspersky as the RBOT.BJD WORM! See here

Added by the RBOT-ACH WORM!

Added by a variant of the RBOT WORM!

Window Washer from Webroot Software. Useful utility that deletes safe to remove files, cookies, browsing history, etc. Available via from Start -> Programs. Disable within the program options - otherwise it is re-enabled in MSCONFIG

Added by the MITGLIEDER.H or MITGLIEDER.J TROJANS!

Added by the IRCBOT.H TROJAN!

WindowBlinds from Stardock. Skin application to change the appearence on Windows desktops. Available as an individual download or as part of Object Desktop. Required to restore settings if you use it. Available via right-click on the Desktop -> Properties -> Skins

SCBar foistware variant

Detected by Trend Micro as the AGOBOT.HZ WORM! See here

Added by the RBOT-GGX WORM!

Added by the RBOT.CSP WORM!

Added by a variant of the RBOT WORM!

Stardock WindowFX - "Allows you to add an unprecedented number of special effects to windows"

Added by the QQPASS-M TROJAN!

Added by the SPYBOT.I WORM!

Added by the SOBER.X WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "WinSecurity" subfolder of the Windows or Winnt folder

Added by the TENDOOLF.A WORM!

Added by the PWSTEAL TROJAN!

Added by the KAZMOR.A, BOBBINS & ALADINZ.D TROJANS!

Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%

Added by the AIMWIN TROJAN!

Added by the GAOBOT.AFW WORM!

Added by the SALGA.A WORM!

Added by the STUBBOT-B TROJAN!

Added by the SPYBOT.OFN WORM!

Added by the SPYBOT.OBB WORM!

Added by the MONBOT-A TROJAN!

Added by the SOBER-Z WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! ! This file is located in a "WinSecurity" subfolder of the Windows or Winnt folder

Added by the MYTOB.MK WORM!

Added by the RBOT-UM WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System%

Added by the DLOADR-GW TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "Windows" subfolder

Added by the BANCBAN-QF TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the SLOMIRC-A WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the PS TROJAN! Note - deactivates the MicrosoftInternet Connection Firewall (ICF)

Added by a variant of the SDBOT WORM!

Added by the CULLER-C WORM!

Added by the CULLER-D WORM!

Added by an unidentified WORM or TROJAN! See here

Windows & Internet Cleaner Pro - "Powerful and easy to use internet surfing privacy protection & PC security software"

Added by a variant of the RBOT WORM!

Added by the SINGU.B TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the FORBOT-ES WORM!

Added by the BANKER-DY TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Arquivos de programas\Windows 2004\Tools

Added by the WOOTBOT.GQ WORM!

Added by the FORBOT-EU WORM!

Added by a variant of the RBOT WORM!

Added by Remote Storm - a remote control tool that is a network application that allows users to manage and control PCs or networks from a remote location

KeySpy keystroke logger/monitoring program - remove unless you installed it yourself!

Added by a variant of the IRCBOT TROJAN! See here

Detected by PCTools as the IRCBOT.YFQ BACKDOOR! See here

Added by the SECCMU-A WORM!

Added by a variant of the SPYBOT WORM!

Windupdates adware variant

Windupdates adware variant

Added by the BLESHARE!DR VIRUS!

Windupdates adware variant

Added by the RBOT.ETT WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by a variant of the IRCBOT BACKDOOR!

Added by the SDBOT-BG WORM!

Added by the RBOT-FON WORM! Note - Disables the automatic startup of other software and deactivates the Microsoft Internet Connection Firewall (ICF)

Added by the MYTOB.HI WORM!

Added by the AGOBOT.ATN WORM!

Added by the AGOBOT-AAZ WORM!

Detected by Kaspersky as the AGENT.LMW BACKDOOR! See here

Detected by Trend Micro as the RBOT.EAB WORM! See here. Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Added by the RBOT-AOK WORM!

Added by the AGOBOT-TC WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by the HAM TROJAN!

Detected by Trend Micro as the IRCBOT.AFT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the IRCBOT-AAE TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by the KALEL-E WORM! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup!

Added by the BLASTER.B WORM!

Added by the BLASTER (or MSBLAST.A) WORM!

Added by the SDBOT.TF WORM!

Added by the AHKER.E WORM!

Added by the AHKER.G WORM! Note - this is not the legitimate lsass.exe process, which should not appear in Msconfig/Startup!

Added by the SDBOT.PB WORM! Note that there is a space at the beginning of the filename, ie, " WINDOWSUPDATE.EXE"

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.MF WORM!

Added by the RBOT.CXS WORM!

Added by a variant of the RBOT WORM!

Added by the BLASTER.E WORM!

Added by the SOLAME.A WORM!

Added by a variant of the RBOT WORM!

Added by the MUZK WORM!

Added by a variant of the SPYBOT WORM!

Added by the GAOBOT.AZ WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe)

Detected by Trend Micro as the AGENT.HBD TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by the RBOT-AFM WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-AWP WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Kaspersky as the IRCBOT.BUR TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the RBOT-GRF WORM!

Windows Clean-Up Pro spyware remover - not recommended, see here

Added by a variant of the IRCBOT TROJAN! See here

Added by the RBOT-ALB WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a drivers&92;winsdriver subfolder

Added by the RBOT.KD WORM!

Added by the AGOBOT.AKK WORM!

Added by the RBOT.ANV WORM!

Added by the AGOBOT-BH WORM!

Added by the SDBOT-CPK WORM! Note - can terminate AV related processes

Added by the RBOT-IR WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the SPYBOT-DA WORM!

Added by the SPYBOT.JR WORM!

Added by the SPYBOT-DX WORM! Note - this is not the Windows system file of the same name as described here

Added by a variant of the SLAPER TROJAN!

Detected by Trend Micro as the IRCBOT.BAP BACKDOOR! See here

Added by the RBOT-EXQ WORM!

Added by the SILVERFTP TROJAN!

Added by the RBOT-AIT WORM!

Added by a variant of the SDBOT WORM!

Added by the GAOBOT.FB WORM!

Added by the MYTOB.ED WORM!

Added by the SDBOT-OA WORM!

Added by the AGOBOT.LW WORM!

Added by a variant of the IRCBOT TROJAN!

Added by the RBOT-APN WORM! Note - file is found in the Windows or Winnt folder. Make sure you check the link on this one, it copies it's self under three other file names and folder locations

Added by the SDBOT-DJX WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by the KEDEBE WORM!

Added by the KEDEBE-A WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Browser hijacker. NOTE - On Win9x systems it will overwrite the Windows file of the same name in the Windows directory, so therefore it will be necessary to extract a fresh copy of the file from the Windows setup cabs!

Windupdates adware variant

Added by the RANCK-EL TROJAN!

Added by a variant of the RBOT WORM!

Added by the ALEDO-A TROJAN!

Added by the SPYBOT-EI WORM!

Added by the SPYBOT-CB WORM!

Added by the SPYBOT-DS WORM!

Added by an unidentified WORM or TROJAN!

Added by the AGOBOT-RU WORM!

Added by the RBOT-QT WORM!

Added by the SDBOT-UZ WORM!

Added by the RBOT-OY WORM!

Added by the RBOT-QN WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by a variant of the RBOT WORM!

Added by the ZOTOB.L WORM!

Added by the RBOT-AXU WORM!

Added by the DLOADER-U TROJAN! Note - this is not the legitimate svchost.exe process which should not normally figure in Msconfig/Startup!

Detected by Kaspersky as the IRCBOT.BCX TROJAN! See here

Added by the IRCBOT.AUN WORM! Note - this is NOT associated with the popular Winamp media player. The valid file for the Winamp Agent resides in a "Winamp" subdirectory of the Program Files directory

Related to Windows Defender Microsoft (anti-spyware) tool

Added by a variant of the FakeAlert TROJAN! This infection displays fake Windows Defender alerts which link to spyware-kicker.com

Added by a variant of the FakeAlert TROJAN! This infection displays fake Windows Defender alerts which link to spyware-kicker.com

Added by a variant of the FakeAlert TROJAN! This infection displays fake Windows Defender alerts which link to spyware-kicker.com

Added by a variant of the FakeAlert TROJAN! This infection displays fake Windows Defender alerts which link to spyware-kicker.com

Added by the MYTOB-CR WORM!

Added by the SDBOT-XH WORM!

Added by a variant of the SPYBOT WORM!

Windows Desktop Search from Microsoft

Added by the AGOBOT.AAH WORM!

Added by the BANCOS-ASJ TROJAN!

Added by a variant of the IRCBOT TROJAN!

Added by the IRCBOT-YS TROJAN!

Added by a variant of the SPYBOT WORM!

Added by an unidentified WORM or TROJAN!

Added by the DOMWIS TROJAN!

Added by the LINKBOT.A WORM!

Added by the WHIPSER-B WORM! Note - this is not the legitimate rundll32.exe process

Added by the RBOT-QQ WORM!

Added by the POEBOT-C WORM!

Added by the LINKBOT.H WORM!

Added by the SDBOT-SS WORM!

Added by the RBOT-RG WORM!

Added by a variant of the SDBOT WORM!

Added by the DOMWIS-N WORM!

Added by the AGOBOT-TE WORM!

Added by the RBOT-ZF WORM!

Added by the AGENT.H spyware! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

AGENT.H spyware

Added by a variant of the WOOTBOT WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-AZQ WORM!

Added by the SDBOT-XU WORM!

Added by the WOOTBOT.AS WORM!

Added by the FORBOT-EP WORM!

Added by the SALAY-A WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by an unidentified TROJAN!

Added by the SUPOVA.Z WORM!

Added by the WOOTBOT.EE WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by the ANTINNY-K WORM! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is found in a "drivers" subfolder

Added by a variant of the RBOT WORM!

Added by the WOOTBOT.L WORM!

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the RBOT-AT WORM!

Added by the RBOT-ACE WORM!

Added by a variant of the SDBOT WORM!

Added by the FOUNDU-AWORM!

Added by a variant of the IRCBOT TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Kaspersky as the SDBOT.XD TROJAN! See here

Added by the RBOT-ABO WORM!

Added by the SDBOT-DFT WORM!

Detected by Kaspersky as the EGGDROP.V BACKDOOR! See here

Added by the RBOT-AKO WORM!

Added by the SDBOT TROJAN!

Added by the GAOBOT.AO WORM!

Added by an unidentified WORM or TROJAN!

Added by a variant of the SPYBOT WORM!

Added by the POEBOT-J WORM! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%

Added by the RBOT-AID WORM!

Added by the RBOT-AJH WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by the REDIST.B WORM!

Added by the BANKER-DM TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "JavaBeans" subfolder

Added by the KaZaA based KWBOT or KWBOT.Y WORMS!

Added by the HARDOC WORM!

Added by the FALTER-A TROJAN! Note - the legitimate Windows Explorer (same filename) is located in %Windir% and would not normally appear in Msconfig/Startup unless you added it manually! This one is located in %System%

Detected by PCTools as the BUZUS.C TROJAN! See here

Added by the SDBOT.AFA WORM!

For blind people, gives a voice description of items on the screen. Windows application which gives you total control over what you hear, when you hear it, and how you hear it. Available via Start -> Programs

Added by the SPYBOT-AGT WORM!

Added by the AGOBOT.JB WORM!

Added by an unidentified WORM or TROJAN!

Added by the RANKY.AC TROJAN!

Added by the SDBOT.XD TROJAN!

Detected by Trend Micro as the IRCBOT.AJF TROJAN! See here

Added by a variant of the RBOT WORM!

Added by the MYTOB.AO WORM!

Added by the PROXY-HT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by a variant of the RBOT WORM!

Added by a variant of the IRCBOT BACKDOOR!

Added by an unidentified WORM or TROJAN!

Added by the RBOT.WR WORM!

Added by a variant of the RANDEX.GEL WORM!

Added by a variant of the RANDEX.GEL WORM!

Added by the IRCBOT-YL WORM!

Added by the RBOT-GX WORM!

Added by the RBOT-GBY WORM!

Added by the RBOT-GCB WORM!

Added by the RBOT-EK WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by the SDBOT.ZAB WORM!

Added by the MYTOB.EG WORM!

Windupdates adware variant

Added by a variant of the RBOT WORM!

Added by the DWNLDR-GWV TROJAN!

Added by the ZOTOB.H or ZOTOB.J WORMS!

Added by the ALLIM.B WORM!

Added by a variant of the SPYBOT WORM! See here

Detected by PCTools as the IRCBOT.UUI BACKDOOR! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the MYTOB.KM WORM!

Added by the SPYBOT.JG WORM!

Added by the RBOT-GY WORM!

Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes

Part of First Aid by Cybermedia who were subsequently bought by McAfee (Network Associates). Protects your Windows system from application failure and crashes

Added by a variant of the RBOT WORM!

Added by the MYTOB.JX WORM!

Added by the SDBOT-QK TROJAN!

Added by the RBOT-OZ WORM!

Added by the RBOT-LP WORM!

Added by the RBOT-AKW WORM!

??

Detected by Kaspersky as the BANKER.APE TROJAN! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the AGENT-FYD TROJAN!

Added by a variant of the AGENT-FYD TROJAN!

Added by the RBOT.GLX WORM!

Added by the KELVIR.U WORM!

Added by the PRYSAT TROJAN!

Added by an unidentified WORM or TROJAN! See here

Added by the ZOOTY-A WORM!

Added by the GAOBOT.O WORM!

Added by the SPYBOT.NLI WORM!

Added by the KELVIR.AN WORM!

Added by the KELVIR.BF WORM!

Added by the KELVIR.AW WORM!

Added by the SDBOT-WU WORM!

Added by the KELVIR-O TROJAN!

Added by a variant of the IRCBOT TROJAN!

Added by the SDBOT.AQU WORM!

Added by the NOOMY.A WORM!

Added by a variant of the SDBOT WORM! See here

Added by the RBOT-AIF WORM!

Added by the MYTOB.LN WORM!

Added by a variant of the SPYBOT WORM! See here

Detected by Avast as the SDBOT-GEN44 WORM!

Added by the RIZO.A TROJAN!

Added by the RIZO.A TROJAN!

Added by the ALLIM.A WORM!

PacerD_Media/Pacimedia.com/Z-Quest adware installer

Added by the RBOT-FSM WORM!

SpySheriff malware. For more information on registry key changes see SPYWAD-E

Added by an unidentified WORM or TROJAN!

Added by the PURITYSCN.B TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here. Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

CoolWebSearch Winproc32 parasite variant - also detected as the STARTPA-BF TROJAN!

Added by a variant of the Win32.Small TROJAN!

Added by the RBOT-AUX WORM!

Related to the VPN IPSec utility - used to create Security Policy (SP) entries and Security Association (SA) entries in the kernel

Added by the RBOT.BPW WORM!

Added by the SDBOT-VJ WORM!

Added by a variant of the RBOT WORM!

Added by the WOOTBOT.AF WORM!

Added by the YIMP-B WORM!

Added by a variant of the RANDEX.GEL WORM!

Added by the SDBOT-XV WORM!

Detected by Trend Micro as the IRCBOT.AFS WORM! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the XPACK.AV TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the SHEUR.EB WORM! See here

Detected by Trend Micro as the AGENT.AYH WORM! See here

Added by the IRCBOT-AAV WORM!

Detected by Kaspersky as the RBOT.BMV TROJAN! See here

Added by a variant of the SDBOT WORM! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the RBOT-BKL WORM!

??

Added by the GAOBOT.CA WORM!

Reported by Kaspersky Anti-Virus as the CARDSPY.D TROJAN!

Added by a variant of the SDBOT WORM!

Added by a variant of the RBOT WORM!

Added by the FODDER-A TROJAN!

Detected by Trend Micro as the SDBOT.ENZ BACKDOOR! See here

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the DLOADER-NY TROJAN!

Added by the IRCBOT.N TROJAN!

Added by the KEYLOGGER.AVK TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files

Added by the NSHADOW-B TROJAN!

Added by the RBOT-ON WORM!

Added by a variant of the IRCBOT TROJAN!

Detected by Kaspersky as the IRCBOT.ARU TROJAN! See here

Detected by Kaspersky as the VIRUT.AO VIRUS! See here

Added by the GAOBOT.SY WORM!

Added by the AGOBOT.MG WORM!

Added by the AGOBOT-JA WORM!

Detected by NOD32 as a variant of the BIFROSE TROJAN!

Added by the AGOBOT-TZ WORM!

Added by a variant of the SDBOT WORM!

Added by an unidentified WORM or TROJAN!

Added by the RBOT-AFN WORM!

Added by the SDBOT-ACU WORM!

Added by the SPYBOT-C TROJAN!

Added by the LINKBOT.M WORM!

Added by the POEBOT-J WORM!

Added by the CIADOOR-L TROJAN! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder

Added by the DELBOT-X WORM!

Added by the POEBOT-KW WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the POEBOT-LR WORM! Note - this is NOT the popular Winamp media player which resides in a "Winamp" subdirectory of the Program Files directory

Added by the DWNLDR-HGR TROJAN! Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %UserProfile%

Added by a variant of the RBOT WORM!

Added by a variant of the SPYBOT WORM!

Added by a variant of the SPYBOT WORM!

Added by the WINLOGON TROJAN!

Added by the RBOT-AOU WORM!

Added by the SPYBOT.ANDM WORM!

Added by the RBOT-FOR WORM!

Added by the RBOT-GMZ WORM!

Added by the RBOT-GOR WORM!

Added by the AGOBOT-AHS WORM!

Added by the RBOT-FTO WORM!

Added by the RBOT-GMD WORM!

Added by the RBOT-GKV WORM!

Added by the GRAPS WORM!

Added by the QEDS-A VIRUS!

Added by the RBOT-VT WORM!

Added by the MANTAS WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT-ACM WORM!

Added by the RANDEX.FC WORM!

Added by an unidentified WORM or TROJAN!

Added by an unidentified WORM or TROJAN!

Starts Windows Media Center every time Windows Vista (Home Premium or Ultimate) boots. Disable by unchecking the "Start Windows Media Center when Windows Starts" option via Windows Media Center -> Tasks -> Settings -> General -> Startup and Window Behaviour

Windows Media Connect from Microsoft - stream digital media files on your computer to digital media receivers (DMRs) that are connected to your home network

Added by a variant of the RBOT WORM!

Added by a variant of the GAOBOT WORM!

Added by the AGOBOT-NQ WORM!

Added by the SDBOT-QO TROJAN! Note - the executable is called 'MediapIayer', with an 'i'

Added by a variant of the RBOT WORM!

Added by the RBOT-SI WORM!

Added by the RBOT-YO WORM!

Added by the KELVIR.G WORM or variants! Note - this is not the valid Windows Media Player as the executeable resides is C:WindowsSystem (Win9x/Me), C:WinntSystem32 (WinNT/2K) or C:WindowsSystem32 (WinXP) rather than C:Program FilesWindows Media Player

Added by a variant of the RBOT WORM!

Added by the RBOT-TT WORM!

Added by the RBOT.AHR WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-VV WORM!

Added by the RBOT-YA WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.213504 WORM!

Added by the RBOT-ET WORM!

German software (comes with some Toshiba CD writers) that helps convert Powerpoint files to ASF (Streaming Media) files. Available via Start -> Programs

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the SDBOT.VP WORM!

Added by the RBOT.ACY WORM!

Added by the RBOT.ADE WORM!

Added by the RBOT-MW WORM!

Added by the LEMIR.C TROJAN!

Added by the RBOT-ATI WORM!

Added by the RBOT.BMF TROJAN!

Added by a variant of the SPYBOT WORM!

Added by a variant of the IRCBOT TROJAN!

Added by a variant of the IRCBOT TROJAN! See here

Detected by Kaspersky as the IRCBOT.BLL TROJAN! See here

Added by a variant of the IRCBOT TROJAN!

Detected by Trend Micro as the IRCBRUTE.AG TROJAN! See here

Detected by PCTools as the IRCBOT.WCH TROJAN! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here

Added by a variant of the IRCBOT BACKDOOR! See here. Note - this is not the legitimate winlogon.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the MYTOB.EI WORM!

Added by the RBOT-ANJ WORM!

Added by the SPYBOT.BV WORM!

Detected by Trend Micro as the SLENFBOT.S WORM! See here

Detected by Symantec as the SILLYIM WORM! See here

Added by a variant of the IRCBOT BACKDOOR!

Added by an unidentified WORM or TROJAN! See here

Detected by Kaspersky as the DELF.DAX TROJAN! See here

Added by the VELKBOT.A WORM!

Detected by Trend Micro as the IRCBOT.ADA TROJAN! See here

Added by the RBOT-VW WORM!

Added by the MYTOB.HY WORM!

Added by a variant of the IRCBOT TROJAN! See here

Detected by Trend Micro as the SLENFBOT.T WORM! See here

Added by the TASTYRED TROJAN!

Added by the RBOT-AEH WORM!

Added by the AGENT-HCD TROJAN!

Detected by Trend Micro as the KOLAB.AW WORM! See here for an example

Added by a variant of the SDBOT WORM!

Added by a variant of the RBOT WORM!

Windows Mobile Device Center for Windows Vista. Replaces Microsoft ActiveSync and provides overall device management features for your Windows Mobile powered devices for Windows Vista

Part of Windows Mobile Device Center in Vista. Microsoft Windows Mobile Device Center enables you to set up new partnerships, synchronize content and manage music, pictures and video with Windows Mobile powered devices (Windows Mobile 2003 or later)

Windows Mobile Device Center for Windows Vista. Replaces Microsoft ActiveSync and provides overall device management features for your Windows Mobile powered devices for Windows Vista

Added by the RBOT.DSU WORM!

Added by a variant of the SDBOT WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the SDBOT WORM!

Added by the RBOT.EZJ WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-DIO WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT-FNB WORM!

Detected by Kaspersky as the RBOT.CYA TROJAN! See here

Added by the SDBOT.VB WORM!

Added by the SPAZBOX.A TROJAN!

Added by the RBOT-XX WORM!

Added by a variant of the SDBOT WORM!

ZQuest adware

Added by the CHECKOUT WORM! See here

Detected by Trend Micro as the IRCBOT.AIA TROJAN! See here

Added by the RBOT-ABU WORM!

Added by the SDBOT-AAL WORM!

Added by the IRCBOT.GEN WORM!

Added by the FORBOT-GJ WORM!

Added by the RBOT.BCU WORM!

Added by the TRIXCU.A WORM!

Added by a variant of the SDBOT WORM!

Detected by Kaspersky as the RBOT.BMV TROJAN! See here

Detected by Kaspersky as the RBOT.BMV BACKDOOR! See here

Added by an unidentified WORM or TROJAN! See here

Detected by Kaspersky as the IRCBOT.EAD BACKDOOR! See here

Added by the IRCBOT-ABA TROJAN!

Detected by Trend Micro as the KOLAB.AA WORM! See here

Added by the RBOT-AYG TROJAN!

Added by a variant of the RBOT WORM!

Added by the MYTOB.IM WORM!

Added by the RBOT-MO WORM!

Added by the RBOT-ZX WORM!

Added by the RBOT-ABN WORM!

Added by a variant of the RBOT WORM!

Added by the RBOT.BEI WORM!

Added by the FORBOT-CL WORM!

Added by the FORBOT-DK WORM!

Added by the FORBOT-ED WORM!

Added by a variant of the SDBOT WORM!

Added by the WOOTBOT.I WORM!

Added by the POEBOT-J WORM!

Detected by Trend Micro as the AGENT.ERZ TROJAN! See here

Added by the RBOT.RY WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the IRCBOT TROJAN! See here

Added by the CHECKOUT WORM! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by a variant of the IRCBOT TROJAN! See here

Added by the GAOBOT.FL WORM!

Added by a variant of the IRCBOT BACKDOOR! Note - this is not the legitimate Machine Debug Manager (mdm.exe) process which is always located in %ProgramFiles%\Microsoft Shared. This one is located in %System%

Added by a variant of the IRCBOT BACKDOOR! See here

Added by the IRCBOT.AKZ WORM!

Added by the MYTOB.FH WORM!

Added by a variant of the RBOT WORM!

Added by the RANKY.E TROJAN!

Added by the RANDEX.BRD WORM!

Added by the SDBOT.WG WORM!

Added by the RBOT.BIV WORM!

Added by the RBOT-ALP WORM!

Added by the RBOT-PK WORM!

Added by a variant of the RBOT WORM!

Added by the AGOBOT-NU WORM! Note that those are zeroes in the filename and not capital "o"

Detected by Kaspersky as the RBOT.EDL TROJAN! See here

Added by the SPYBOT.FD WORM!

Added by a variant of the SDBOT WORM! See here

Detected by Trend Micro as the RBOT.GJO TROJAN! See here

CoolWebSearch parasite variant

Added by the RBOT-TE WORM!

Added by the BIBOT-A WORM!

Added by the RBOT-ADW WORM!

Added by the IRCBOT_GEN WORM!

Added by the RBOT-AKN WORM!

Added by the MS05-039 variant of the SDBOT WORM!

Detected by Trend Micro as the OBOT.CH WORM! See here

Added by the CHECKOUT WORM! See here

Added by the AGENT.YKR WORM!

Added by a TROJAN - see here

Added by the SPYBOT.APEO WORM!

Added by a variant of the SDBOT WORM!