| N | bjcfd | cdf.exe | BroadJump Client Foundation. Broadband troubleshooting software installed by various companies. Not required and you can remove it via Add/Remove programs |
| N | BlackICE PC Protection | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| N | BlackIce Utility | blackice.exe | Loads the user interface for the BlackICE PC Protection (was Defender) firewall program. From the parent site - '(the user interface) starts in the "Startup" menu and adds itself to the taskbar. The user interface is independent from the rest of the system and only displays the output or reconfigures the system. It does not need to be running for the rest of the system to run.' See also LoadBlackD |
| U | blads | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| X | blah service | winupdate.exe | Added by the GAOBOT.BIA WORM! |
| X | blah service | winsysengine.exe | Added by the RBOT-KI WORM! |
| X | blah service | internet.exe | Added by a variant of the RBOT WORM! |
| X | blah service | smnp.exe | Added by the RBOT.IZ WORM! |
| X | blah service | msnmsgrr.exe | Added by the RBOT.PZ WORM! |
| X | blah service | tazkmgr.exe | Added by the RBOT.UA WORM! |
| N | BlazeChanger | FBZPaper.exe | Ember graphic file viewer, manager, and touch-up system |
| ? | bldbubg | bldbubg.exe | Found on a Dell machine?? |
| X | BLMessagingIntegration | blengine.exe | BuddyLinks adware |
| U | BlockAds | blads.exe | A Tweak-XP component, blocks advertisement banners in Internet Explorer. Can be enabled/disabled via Tweak-XP / Internet Tweaks |
| N | BlockTracker | BlockTracker.exe | If present on a HP machine it tracks all the processes and logs them to a blocklog.txt file |
| X | blss | blss.exe | Added by the BLARUL TROJAN! |
| N | BLSTAPP | blstapp.exe | Puts access to Creative's BlasterControl in the System Tray |
| U | BlueToothAuthentication Agent | RunDLL32.exe irprops.cpl, BluetoothAuthenticationAgent | Associated with BlueTooth software, designed to allow bluetooth mobile devices to authenticate to the computer, when connecting a PDA to your computer - necessary for the computer and the PDA to communicate. Should you get the error message, "Rundll irprops.cpl missing entry Bluetooth authentication agent", click here for more information. In case you no longer have BlueTooth support installed, and don't need it, simply uncheck the entry in Msconfig > Startup |
| U | Blueyonder Instant Support Tool | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Blueyonder Instant Support is required to run with the Help and Support program. If you uncheck it and and then run Help and Support it will add another Blueyonder Instant Support in the startup menu. If you remove Blueyonder Instant Support in add/remove programs some help menus in help and support will not be available. You decide |
| N | BMail Installation | FTP_back.exe | Part of iMesh - a file sharing system. Reported by Norton AntiVirus as a trojan. Once deleted does not prevent file sharing working. Older versions of iMesh re-instate this but the newer versions do not |
| U | BMMGAG | Rundll32 PWRMONIT.DLL, StartPwrMonitor | Displays a battery gauge icon in the Taskbar (not the System Tray). Provides shortcuts to IBM's proprietary power saving settings and to a battery information window |
| U | BMMLREF | BMMLREF.EXE | Battery Manager for IBM ThinkPad laptops |
| ? | BMMMONWND | rundll32.exe [path] BatInfEx.dll, BMMAutonomicMonitor | IBM Thinkpad related. What does it do and is it required? |
| U | BMO MasterCard Wallet | EWALLET.EXE | The wallet conveniently stores billing, shipping and payment information on your PC |
| N | BMupdate | BMupdate.exe | Related to the BookmarkCentral entry. Typically added after downloading drivers for Visioneer scanners for example, and you install the driver self-install |
| X | BMZ | bmz.exe | nCase adware |
| X | Bndt32 | Bndt32.exe | Added by the LACON WORM! |
| X | Bnexe | [random filename] | Added by the KITRO.D (or ARGEN.A) WORM! |
| Y | BOC412 | BOC412.exe | Version 4.12 of NSClean's BOClean anti-trojan software |
| Y | BOCleanautostart | Boclean.exe | NSClean's BOClean anti-trojan software |
| U | bombshel | BOMB32.EXE | Part of McAfee Nuts & Bolts. Protects your Windows system from application failure and crashes - similar to Norton Crashguard. Your choice - may cause problems |
| X | Bonzi Buddy | ?? | Spyware - read here for information and here for removal instructions |
| X | BookedSpace | bs2.dll,DllRun | Adware, related to the Remanent parasite |
| N | BookmarkCentral | BMLauncher.exe | Bookmark Express - "offers a more flexible way to manage Web site bookmarks, regardless of which browser you use" |
| N | BookMarkSink | syncit.exe | Bookmark synchronization utility |
| N | BookMarkSync | syncit.exe | Bookmark synchronization utility |
| N | BookMarkSync2It | sync2it.exe | Sync2IT BookMarkSync - "real-time automatic synchronization service that allows you to access your bookmarks, favorites and favorite files from any computer or any browser" |
| U | Boost XP Service | bxservice.exe | Boost XP from Systweak - WinXP tweaking utility |
| X | boot | boot.exe | Added by the ELEM TROJAN! |
| X | Boot Manager | Njgal.exe | Added by the KILO TROJAN! |
| X | BootLoader | BootLoader.exe.vbs | Added by the WATERWORKS WORM! |
| U | BootStatus | BOOTST~1.EXE | Visual Basic program that pops up a small window on startup telling you how many times the machine has been booted that day. Once you exit it, it has no more effect on resources |
| U | BootWarn | BootWarn.exe | From here: "Norton AntiVirus Boot Warning. This program is installed as a startup item when you install Norton AntiVirus, and also sometimes when you do a LiveUpdate which updates Norton AntiVirus significantly enough that a reboot is needed to complete the installation. We believe its purpose to be to warn the end-user that he must reboot his PC before using Norton AntiVirus in those cases when a reboot did not happen with the result that Norton AntiVirus did not fully complete its installation or software updating. Recommendation : Start Norton AntiVirus from “Start Programs Norton AntiVirus”. If Norton AntiVirus comes up without problems, then fix this entry from the Msconfig Startup tab – it was left behind by mistake and is no longer needed now that Norton AntiVirus is fully installed and opens without error messages" |
| N | Bose Wave/PC Monitor | wavepcmonitor.exe | System Tray access for this system (more info on the system here). Available via Start -> Programs |
| ? | Boston | Boston.exe | Part of the Boston Acoustics USB speaker systems. What does it do and is it required? |
| X | Bouncer RunStartup | bouncer.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| X | Bouncer RunStartup | LiveUpdate.exe | VIrtualBouncer malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs |
| U | bpcpost.exe | bpcpost.exe | MS TV Viewer Post Setup Program. Part of MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| U | BPK | bpk.exe | Blazing Tools Perfect Keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove |
| N | BPServer | G6FTPSrv.exe | BulletProof FTP Server |
| U | BQTray.exe | BQTray.exe | System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
| X | Brasil | Brasil.exe | Added by the OPASERV.E WORM! |
| X | Brasil | BRASIL.PIF | Added by the OPASERV.E WORM! |
| X | BrasilOld | [worm filename] | Added by the OPASERV.P WORM! |
| U | Break_Reminder | BREAK REMINDER.exe | Break Reminder - Remind yourself to take breaks to prevent computer related injuries. See here |
| X | Breg | bcre.exe | BroadcastPC adware variant |
| X | Bridge | rundll32.exe ...Bridge.dll | Flingstone.com browser hijacker |
| Y | Brindys BriTray | BRITRAY.EXE | Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired |
| N | Broadband Wizard | bbwiz.exe | Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs |
| N | BrowseProxy | FindService.exe | Actual Names - "It is now possible to enter a particular word or keyword phrase that is associated with your business, and immediately be directed to YOUR WEBSITE! The Actual Names technology can do this for you" |
| X | browser aid | browseraid.exe | BrowserAid/BrowserPal foistware |
| Y | Browser Hijack Blaster | bhblaster.exe | Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings |
| U | Browser Launcher | Commandr.exe | Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys |
| X | Browser Pal | adblck.exe | BrowserAid/BrowserPal foistware |
| U | Browser Sentinel | BrowserSentinel.exe | Browser Sentinel. Notifies you if a program wants to penetrate into Internet explorer, add itself to the Windows auto-run list or change your home page. See here |
| N | BrowserWebCheck | loadwc.exe | Checks to make sure that IE is still your default browser |
| N | BsCLiP | BSCLIP.exe | CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
| X | Bsoft lppt01 | Bsoft.exe | New variant of the RapidBlaster parasite (in a "BelmontSoft" folder in Program Files). It is not recommended you manually uninstall RapidBlaster but use RapidBlaster Killer - see here |
| X | Bsx3 | Rundll32.exe bs3.dll, DllRun | BookedSpace parasite variant |
| U | BT Broadband Help | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide |
| ? | btinst | btinst.exe | Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
| U | BtStart | btstart.exe | Broadcorp (formerly WIDCOMM) Bluetooth Connectivity Software |
| U | bttray | bttray.exe | System tray icon which shows the status of a BlueTooth wireless module. Most systems with such a module installed can enable/disable the module. The system tray icon changes from blue/white to blue/red when the module is turned off. Allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device |
| Y | BTUSRBDG | BtUsrBdg.exe | Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
| Y | BTUSRBDGF | BtUsrBdg.exe | Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
| X | BTV | btv.exe | BroadcastPC adware variant |
| N | Buddyizer | Buddyizer.exe | Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network |
| U | bugwatcher service | bugwatcher.exe | Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures |
| ? | BuildBU | bldbubg.exe | Found on a Dell machine?? |
| X | BuildLab | services.exe | Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | BuildLab | winlogon.exe | Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| X | BuildLabs | csrss.exe | Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| U | Bulldog Service | upsd.exe | Belkin's Bulldog Plus control software which runs under Windows 95 or later and monitors the UPS (Uninterrupted Power Supply) via a serial or USB link |
| Y | BullGuard | mgui.exe | Part of Bullguard antivirus |
| U | BullGuard Update | avxlive.exe | Part of Bullguard antivirus. Leave enabled unless you manually update virus definitions |
| Y | BullGuard XComm | XCOMMSVR.EXE | Part of Bullguard antivirus |
| Y | BullGuardInit | AVXINIT.EXE | Part of Bullguard antivirus |
| Y | BullguardoptIn | bulldownload.exe | Part of Bullguard antivirus |
| X | BullsEye Network | bargains.exe | BargainBuddy foistware |
| ? | BullsEye Tracker | BeTrack.exe | Bullseye - intelligent research assistant |
| N | BurnQuick Queue | BQTray.exe | System Tray access to BurnQuick CD burning software. Only required if you use the queueing facility, hence the U recommendation. Create your own desktop shortcut to start manually |
| U | Button Server | bttnserv.exe | Found on a Compaq PC, for the extra buttons on the keyboard for the speaker volume, media player, sleep and internet buttons. If the buttons aren't used on the keyboard or your's doesn't have them, then it isn't required |
| N | ButtonKey | ButtonKey.exe | CyberView TWAIN driver for the Pacific Image range of 35mm film scanners. Enables the one touch scanning button and places an icon an the System Tray. Use your scanners software or run it manually by creating a shortcut |
| N | Buzme | Bmui.exe | Buzme by RingCentral, Inc - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem |
| U | Buzof.exe | buzof.exe | Buzof from Basta Computing "enables you to automatically answer, close or minimize virtually any recurring window including messages, prompts, and dialog boxes" |
| X | bxsx5 | RunDLL32.EXE bsx5.dll | BookedSpace parasite variant |
| X | bxxs5 | RunDLL32.EXE bxxs5.dll, dllrun | BookedSpace parasite |
| X | Bymer.Scanner | Wininit.exe | Added by the BYMER WORM! |
| X | Bymer.Scanner | Msinit.exe | Added by the BYMER WORM! |