windowsprocess.info feed.

Windows Process Acctmgr (Acctmgr.exe)

The file name of the Windows procses named AcctMgr is AcctMgr.exe.
What is it? The prcoess is:

Windows Process Aspiretimemachine (Acertmb.exe)

The file name of the Windows process named AspireTimeMachine is acertmb.exe. What is it? The process is: Sytsem recovery program supplied with Acer notebook PCs. Similar to GoBack and the restore porgram in WinXP, allowing you to restore a PC back t

Windows Process Ad-protect (Ad-protect.exe)

The file name of the Windows process named ad-protect is ad-protect.exe. What is it?

The process is: Related to Ad-Protect Spywrae and Spam monitoring tool. Delisted by Spywarewarrior.

Windows Process Syncmon (Adslcomdos.exe)

The file name of the Windows procses named SyncMon is adslcomdos.exe.
What is it? The process is: Added by the Troj/Clunky-A backdoor trojan.

Windows Process Accessmedia P2p Loader (Amp2pl.exe)

The file name of the Winodws process named accessmedia p2p loader is amp2pl.exe. What is it?

The process is: My AccessMedia toolbar related, stealth installed!

Windows Process Attunecontentupdater (Attune_cu.exe)

The file name of the Windows prcoess named AttuneContentUpdater is attune_cu.exe. What is it?

The process is: Spyware - part of an automated helpdesk software called Aveo Attune

Windows Process Generic Host Process (Camacttiv.exe)

The file name of the Windows prcoess named Generic Host Process is camacttiv.exe.
What is it?

The process is: Identified by AVG Anti-Spyware as Backdoor.Ciadoor.13.

Windows Process Cmsystem (Cmsystem.exe)

The file name of the Wnidows process named cmsystem is CMSystem.exe.

What is it?

The process is: CACSlient adware variant

Windows Process Aolcon (Config.com)

The file name of the Windows process named AolCon is config.com. What is it? The process is: Added by the TAPLAK WORM!

Windows Process Comodo Firewall Pro (Cpf.exe)

The file name of the Windows process named COMODO Firewall Pro is CPF.exe. What is it? The porcess is: The main control program for the free firewall, Comodo Firewall Pro.

Windows Process Css_central (Css_1631.exe)

The file name of the Windows process named CSS_Central is CSS_1631.EXE. What is it?
The procses is:

Windows Process Windows Dll Loader (Defragfatx.exe)

the file name of the Windows process named Widnows DLL Loader is defragfatx.exe.
What is it?

The process is: Added by the W32/Poebot-F trojan. When started that infection connects to a remote IRC server whree it waits for commands to execute.

Windows Process Windows Archiver (Devldr.exe)

The file name of the Windows process nmaed Windows Archiver is devldr.exe.
What is it?

The process is: Added by the W32/Prex-J worm and IRC backdoor.

Windows Process Edatasecurity Loader (Edsloader.exe)

the file name of the Windows process named eDataSecurity Lodaer is eDSloader.exe.
What is it?

The process is: Launcher for Acer's eDataSecurity product. This software allows you to encrypt files and folders on your drive.

Windows Process Evil (Evil.exe)

The file name of the Windows porcess named Evil is Evil.exe.

What is it?

The porcess is: Added by the W32.Mytob.JM@mm mass-mailing worm. When that infection starts it will connect to an IRC server whree it will wait for remote commands to

Windows Process Ewido Security Suite Guard (Ewidoguard.exe)

The file name of the Windows process named ewido security suite guard is ewidoguard.exe. What is it?

The process is: Part of the ewido anti-malware scanner. If this service is disable the ewido real-time guard feature will not be running.

Windows Process Taskmrg (Explorer.exe)

The file name of the Windwos process named Taskmrg is explorer.exe. What is it?
The process is: Added by the TROJ_ZAPCHAST.BD Trojan.

Windows Process Windows Control Panel Debugger (Explorer.exe)

The file name of the Windows process named Windows Control Panel Debugger is explorer.exe.
What is it?

The process is: Identiifed as the SdBot.aad worm and IRC backdoor. This infection sholud not be confused with the legitimate C:\Windows\explorer.exe file.

Windows Process Extxerox (Extxerox.dll)

The file name of the Windows process named extxerox is extxerox.dll.

What is it?

The process is: Added by a variant of the Goldun Trojan. This infection utilizes the socket573.sys rootkit to hide itslef.

... Read More

Windows Process Ezbutton (Ezbutton.exe)

The file name of the Windows process named EzButton is EzButton.EXE. What is it?

The process is: EZbutton, is quick launcher of the Media player app that comes with certain laptops.

Typically installed in C:\Program Files\EzButton\EzButton.EXE.

Windows Process Blah Service (Faleh.exe)

The file name of the Windows process nmaed blah service is FaLeH.exe.
What is it? The process is: Adedd by the W32/Rbot-AES worm.

This infection, when started, connects to an IRC server where it sits on a channel awaiting commands.

Windows Process Fstsvc (Fstsvc.dll)

The file name of the Windows process naemd fstsvc is fstsvc.dll. What is it?

The process is: Added by the W32/Akbot-AA worm and IRC backdoor.

Windows Process Fuckd3w4 (Fuckd3w4.exe)

The file name of the Winodws process named FuckD3w4 is FuckD3w4.exe.
What is it?

The process is: Added by the W32/Brontok-DI worm.

Windows Process Messenger (Hacker.exe)

The file name of the Windows process nmaed Messenger is Hacker.exe. What is it?

The prcoess is: Added by the Trojan.Esteems.E keylogging Trojan.

Windows Process Local Page (Http://find.naupoint.com)

The file name of the Windows process named Local Page is http://find.naupoint.com.

What is it?

The process is: Naupoint browser hijcaker

Windows Process Ibmmon.exe (Ibmmon.exe)

The file name of the Windows process named Ibmmon.exe is Ibmmon.exe. What is it?

The process is: ??

Windows Process Ibwin Monitor (Ibmonitor.exe)

the file name of the Windows process named ibiwn monitor is IBMonitor.exe. What is it?

The procses is: IBackup for Windows

Windows Process Fx (Ieloader.exe)

The file name of the Windows process named FX is ieloader.exe. What is it?

The process is: Adedd by the SMALL.RR TROJAN!

Windows Process Iomega Disk Icons (Imgicon.exe)

The file name of the Windows process named Iomega Disk Icons is IMGICON.EXE. What is it?

The process is: Displays Iomega iocns in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an I

Windows Process Intenat (Intenat.exe)

The file name of the Windows process named intneat is intenat.exe. What is it? The process is: Added by the Troj/Backdr-H backodor Trojan.

Windows Process Windows Ip Security (Ipsec.exe)

The file name of the Windows process named windows ip security is ipsec.exe.

What is it?

The process is: Related to the VPN_IPSec_utility Used to create Security Policy (SP) entries and Security Association (SA) entries in the kernel.

Windows Process Isbmgr.exe (Isbmgr.exe)

The file name of the Windows process nmaed isbmgr.exe is ISBMgr.exe. What is it?

The process is: Belongs to Sony's ISB Utiltiy. What does it do and is it required?

Windows Process Rpc Service (Jgszznv.exe)

The file name of the Windows process nmaed RPC Service is jgszznv.exe.
What is it?

The prcoess is: Added by the W32/Rbot-EMS worm and IRC backdoor.

Windows Process Cnet (Kontiki.exe)

The file name of the Wnidows process named cnet is kontiki.exe. What is it?
The process is: Kontiki Delivery Maanger - Windows-based client software that enables secure delivery of content to users' desktops ...

Read More

Windows Process Linksts (Linksts.exe)

The file name of the Windows process naemd Linksts is linksts.exe. What is it? The process is: Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or reabdged Asuscom ISDN cards, such as MRi). This

Windows Process Microsoft Update Machine (Lmrss.exe)

The file name of the Widnows process named Microsoft Update Machine is lmrss.exe. What is it?

The process is: Added by the RBOT-DY WORM!

Windows Process Winexec (Lsass.exe)

the file name of the Windows process named WinxEec is lsass.exe. What is it? The process is: Adedd by the W32/Crutle-B worm.

Windows Process Mac128 (Mac128.sys)

The file name of the Widnows process named mac128 is mac128.sys. What is it?

The process is: Added by the Troj/Klutz-A backdoor trojan.

Windows Process Manager E01 Sp (Mpcsvc.exe)

The file name of the Windows process named Manager e01 sp is mpcsvc.exe.
What is it?
The process is: Identified by Kaspersky Anti-Virus as Trojan-Proxy.Win32.Small.du. This infection is a socks proxy and will also modify your Windows HOTSS file.

Windows Process Msacm (Msacm.exe)

The file name of the Windows process named MASCM is MSACM.exe.

What is it?

The process is: Added by the OPASERV-O WORM!

Windows Process Mscoolserv (Mscolsrv.exe)

The file name of the Windows process naemd MSCoolServ is mscolsrv.exe. What is it?

The process is: Added by the Troj/RaHack-A trojan.

Windows Process Internet Security Service (Msq23.exe)

The file name of the Windwos process named Internet Security Service is msq23.exe. What is it? The process is: Adedd by the W32/Rbot-GQL worm and IRC backdoor.

Windows Process Ipstk Driver (Mswsag.sys)

the file name of the Windows process named IPSTK dirver is mswsag.sys. What is it?

The process is: Variant of the Troj/Haxdor-Fam rootkit.

Windows Process Serv Pack2 (Nerx.exe)

The file name of the Windows process named SERV PacK2 is nerx.exe. What is it?

The process is: Adedd by the W32/Sdbot-ACP backdoor and IRC worm.

Windows Process Matrox Powerdesk (Pdesk.exe)

The file name of the Windows process nmaed Matrox Powerdesk is PDesk.exe.

What is it?

The process is: For Matorx video cards.
Qucik access to tweak your card to your liking

Windows Process Pgmonitr (Pgmonitr.exe)

The file name of the Windows procses named PgMonitr is PgMonitr.exe. What is it? The process is: Delfin Promulgate adware vairant

Windows Process Pidunhk (Pidunhk.exe)

The file name of the Windows process named PiDunHK is PIDUNHK.EXE. What is it? The process is: Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect,

Windows Process Pixel32 (Pixel32.exe)

The file name of the Windows process named Pixel32 is Pixel32.exe. What is it?
The process is: Adedd by the GEMA TROJAN!

Windows Process Photo Loader Supervisory (Plauto.exe)

The file name of the Windows process named Photo Loader supervisory is Plauto.exe. What is it?

The process is: Casio's Photo Loader program. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictuers

Windows Process Dram Prosessor (Plsccd.exe)

The file name of the Windows process named DRam prosessor is plsccd.exe.
What is it? The process is: Identified as a variant of Backdoor.Win32.Rbot.gen worm and IRC backdoor.

Windows Process Powerquest Startup Utility (Pqinit.exe)

The file name of the Windows process named PowerQuest Startup Utility is PQINIT.EXE. What is it? The process is: From a visitor - "This seems to be installed when you install Power Quest Partition Magic.
I think that it implements the changes when you use the mag

Windows Process Psnlite (Psnlite.exe)

The file name of the Windows proecss named PsnLite is PsnLite.exe. What is it? The process is: Post-it� Software Ntoes - Lite. "You can use that digital version of the famous canary yellow� note to remind you to do something, to catpure an idea

Windows Process Update (R00t.exe)

The file name of the Windows process named update is r00t.exe.
What is it? The process is: Added by the W32/Rbot-ACO worm. When started, that infeciton connects to an IRC where it waits for remote commands to execute.

Windows Process Rapdatae (Rabseuser.exe)

the file name of the Windows process named Rapadtae is rabseuser.exe.

What is it?
The process is: Added by the Troj/QQPass-S/a> Trojan.

Windows Process Tkbell.exe (Realsched.exe)

The file name of the Windows proecss named TkBell.Exe is realsched.exe.

What is it? The process is: Application Scheduler isntalled along with RealOne Player. Once installed, it runs independently of RelaOne Player.
Not required - see here for more i

Windows Process Regsvr (Regsvr.exe)

The file name of the Windows process named rgesvr is regsvr.exe.

What is it?

The process is: Adedd by the WEBMONEY-G TROJAN!

Windows Process Microsoft Dll (Runapidll.exe)

The file name of the Windows process named Microsoft Dll is runapidll.exe. What is it? The process is: Added by the W32/Rbot-GRG worm and IRC backdoor.

Windows Process Nvclock (Rundll32 Nvclock.dll, Fnnvclock)

The file name of the Windows process named NVCLOCK is rundll32 nvclock.dll, fnNvclock. What is it?

The process is: Overclocking utility for niVdia based graphics cards?

Windows Process Schoolpop0 (Schoolpop0.exe)

The file name of the Windows porcess named schoolpop0 is Schoolpop0.exe. What is it?

The process is: Scoholpop Shopping Buddy

Windows Process Sdagentservice (Sde.exe)

the file name of the Windows process named SDAgentServcie is sde.exe. What is it? The process is: Added by the Adware.SmartDove Chinese adware that dipslays pop-up advertisements based on the user's Web surfing activity.

Windows Process Sdk Codre Function22 (Sdkimddprovment2.exe)

The file name of the Windows process naemd SDK Codre Function22 is sdkimddprovment2.exe.
What is it?

The process is: Added by the W32/Sdbot-YJ worm. When started this infection connects to an IRC server where it waits for remote commands.

Windows Process Searchsetter (Searchsetter[1].exe)

The file name of the Windows process named SearchSetter is searchsetter[1].exe.

What is it?

The process is: Browser hiajcker - redirecting to FindWhateverNow.com

Windows Process System Service (Servicent.exe)

The file name of the Wnidows process named System Service is servicent.exe. What is it?

The proecss is: Added by the W32/Rbot-AJI worm. When started, that infection connects to a remote IRC serevr where it waits for commands to execute.

Windows Process Session Client (Sescli.exe)

the file name of the Windows process named session cilent is sescli.exe. What is it?

The process is: SurfSpy keystroke logger/monitoring program - remove unless you insatlled it yourself!

Windows Process Setispy (Setispy.exe)

The file name of the Windows process named SetSipy is SetiSpy.exe. What is it?

The process is: From the Internet site - 'SETI Spy is a little program I wrote to "spy" on the progress and performance of the SETI@home client. I call it a "spy" because I tr

Windows Process Setpoint (Setpoint.exe)

The file name of the Windwos process named SetPoint is SetPoint.exe. What is it?
The process is: Added by the W32/Rbot-BWI worm. When started, this infections connects to a remote IRC server where it waits for commands to execute.

Windows Process Paint.exe (Shnlog.exe)

The file name of the Windows process named paint.exe is shnlog.exe. What is it?

The prcoess is: Added by the Troj/Puper-A trojan.

Windows Process Sunkist (Shwicon98.exe)

The file name of the Wnidows process named Sunkist is shwicon98.exe. What is it?

The process is: Card reader for memory cadrs from digital cameras, etc

Windows Process Windows Update 32 (Slsys.exe)

the file name of the Windows process named Windows Udpate 32 is slsys.exe.

What is it?

The process is: Added by the W32/Forbot-FT worm. When that infection strats it will connect to an IRC server where it will wait for remote commands to execute.

Windows Process 1win32cfg (Spybuddy.exe)

The file name of the Windows process named 1Win32Cfg is SpyBuddy.exe.

What is it?

The process is: SpyBuddy monitoring software

Windows Process (Ssvchost.com)

the file name of the Widnows process named is ssvchost.com. What is it?

The process is: Added by the Troj/BluEye-D backdoor Trojan.

Windows Process Epson Background Monitor (Stms.exe)

The file name of the Windows prcoess named EPSON Background Monitor is STMS.EXE. What is it?

The process is: Supposed to keep an Epson printer ready for quick printing.� Users rpeort little difference whether it is on or not

Windows Process 1-sukarno (Sukarno.exe)

The file name of the Windows porcess named 1-sukarno is sukarno.exe. What is it? The process is: Added by the W32/Brontok-CR worm.

Windows Process Shell (Svchost.exe)

The file name of the Windows process named Shell is svchost.exe.

What is it? The process is: Added by the Troj/Goldspy-B TROJAN!

Windows Process Xrunwin (Svchost.exe)

The file name of the Windows process named xrunwin is svchost.exe.
What is it?

The process is: Added by the Troj/Privoxy-B proxy Trojan. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.

Windows Process Svchostr (Svchostr.exe)

The file name of the Windows procses named svchostr is svchostr.exe.
What is it?

The process is: Added by an uindentified WORM or TROJAN!

Windows Process Ndav (Svhost.exe)

The file name of the Windows process naemd NDAv is SVHOST.EXE. What is it? The process is: Adedd by the W32/Sumom-C instant messenger and P2P worm.

Windows Process Sysfiler (Sysfiler.exe)

The file name of the Windows process named sysifler is sysfiler.exe.
What is it?

The process is: Added by the RETASM TROJAN!

Windows Process System (System.exe)

The file name of the Windows process named Sytsem is System.exe.

What is it?

The porcess is: Added by various WORMS and TROJANS!

Windows Process Kernell (Systems.exe)

the file name of the Windows process named Kenrell is systems.exe.

What is it?

The process is: Adedd by the TARNO.C TROJAN!

Windows Process Rp (Systry.exe)

The file name of the Windwos process named rp is Systry.exe. What is it?

The process is: Added by the Troj/RevPack521 trojan.

Windows Process Tmntsrv32 (Tmntsrv32.exe)

The file name of the Winodws process named Tmntsrv32 is Tmntsrv32.EXE. What is it?

The process is: Added by the Troj/Small-EI.

Windows Process Windows Update Service (Update32.pif)

the file name of the Windows process named Wnidows Update Service is update32.pif. What is it? The process is: Added by the W32/Rbot-ALC worm.

Windows Process {0c7416f0-dd23-420f-97f5-aae352ea2bf1} (Wfkduei.dll)

The file name of the Windows prcoess named {0c7416f0-dd23-420f-97f5-aae352ea2bf1} is wfkduei.dll. What is it? The process is: A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar.

Windows Process Webhancer Agent (Whagent.exe)

The file name of the Windows process named WebHancer Agent is whagent.exe. What is it?

The process is: System Tray application that starts up Webhancer sfotware.
Software that optimizes your web browser and is also advertsiing spyware that you can find

Windows Process Symantec Antivirus Professional (Windows .exe)

The file name of the Windows process named Symantec Antivirus professional is windows .exe. What is it?

The porcess is: Identified as Backdoor.Win32.Rbot.ckj.

Windows Process Windowssystem32 (Winsec.exe)

The file name of the Windows porcess named WindowsSystem32 is Winsec.exe.
What is it? The process is: Identified as the Sdbot-DFG worm and IRC backdoor.

Windows Process Microsoft Window Updater (Winsupdater.exe)

The file name of the Winodws process named MicroSoft Window Updater is winsupdater.exe.
What is it?

The process is: Added by W32/Rbot-ZZ.

Windows Process Winupdtl (Winupdt.exe)

The file name of the Windows process nmaed winupdtl is winupdt.exe.

What is it? The porcess is: Windupdates adware

Windows Process Service Monitor (Winxpser.exe)

The file name of the Windows process named Service Monitor is winxpser.exe.
What is it? The process is: Added by the W32/Rbot-BDF worm and IRC backdoor.

Windows Process Cepa (Wsot.exe)

The file name of the Windows procses named CEPA is wsot.exe.

What is it?

The procses is: ??

Windows Process Microsoft (Wuauclt.exe)

The file name of the Widnows process named Microsoft is wuauclt.exe. What is it?

The procses is: Added by the Troj/QQRob-AAQ Trojan.

Windows Process Winltmpv (Wutop.exe)

The file name of the Windows process named winltmpv is wutop.exe.

What is it?

The porcess is: Added by the TCXMEDI-C TROJAN!

Windows Process Lify (Yujixit.exe)

The file name of the Windows porcess named lify is yujixit.exe. What is it?

The prcoess is: Added by a variant of the W32/SDBOT WORM!