| Y | D-Link Air USB Utility | AirCFG.exe | D-Link wireless PCI adapter related |
| Y | D-Link Air Utility | AirCFG.exe | D-Link wireless PCI adapter related |
| N | D-Link AirPlus DWL-650+ Utility | WLANMON.exe | D-Link Air Plus Wireless PC modem connection monitor |
| N | D066UUtility | D066UUTY.EXE | TWAIN driver for the CanoScan D660U flatbed scanner. Start scanning via your scanner management software |
| X | d3dupdate.exe | bbeagle.exe | Added by the BEAGLE.A WORM! |
| U | D4 | D4.exe | Dimension 4 - network time synchronization freeware - starts-up, adjusts the system clock, then shuts down |
| N | DACONFIGEXE | daconfig.exe | 3Com NIC Diagnostics. Available via Start -> Programs |
| Y | DadApp | dadapp.exe | "DadApp is the SW utility that controls the programmable buttons on Dell Laptops. Not required, but should be left in because it can create a hassle and doesn't always restore functionality to those buttons once unchecked and rechecked" - direct from Dell |
| N | Daemon | DAEMON32.EXE | Pre-loads game profiles for MS Sidewinder game controllers prior to release 2.0 of the software. Recommend upgrade. Available via Start -> Programs |
| U | Daemon | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| X | Daemon | daemon.exe c daemon2.exe | Added by the SELOTIMA.A WORM! |
| U | DAEMON Tools-1033 | Daemon.exe | Daemon Tools - used to map an image-file (.iso, .bin etc) to a virtual CD/DVD-drive |
| N | Daily Planner | dayplan.exe | Daily Planner - discontinued, and now part of KMCS Deluxe System Suite. Tool to plan your days, and check activities off as you complete them |
| X | Danton* | [random filename] | Added by the DANTON TROJAN! where * = random number |
| N | Dap | DAP.exe | Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
| X | DarkDevil.Grasiele.BR | Grasiele.VBS | Added by the LEMBRA WORM! |
| ? | DashIE | N/A | Could be related to "Dash Power Shopping" tool bar in IE? |
| X | dasxdads | fsdqd.exe | Added by the GAOBOT.BIQ WORM! |
| X | Data | System.dat.vbs | Added by the BISCUIT.A WORM! |
| N | Data LifeGuard | BACKWE~1.EXE | Data LifeGuard diagnostic tools for Western Digital's series of hard drives |
| N | Data LifeGuard LifeLine Lite installer | DLGLI.EXE | Backweb installer - see here |
| X | Data789 | Regedit.exe ....data789.tmp | Homepage hijacker |
| X | DATABASE MySql | [path] repcale.exe [path] beird.exe | Added by a variant of the RANDON.AN WORM! |
| N | DataCaching | FlashKsk.exe | SmartMedia Card management from the installation of a SanDisk reader for a camera's SmartMedia card and also adds the "Unplug and Eject Hardware" System Tray icon |
| U | DataLayer | DataLayer.exe | Nokia PC Suite 5 - "A collection of powerful tools that you can use to manage your phone features and data." Synchronize the phone with, for example Outlook. You can also use it to browse your phone, edit the phone list and so on |
| N | DataViz Messenger | DvzMsgr.exe | DataViz Documents to Go - "allows you to use your Word, Excel and PowerPoint files on your handheld anywhere, anytime. In addition, it now synchronizes e-mail with attachments, PDF files, pictures and Excel-like charts" |
| X | Datcheck | datcheck.exe | Added by the KEYPANIC TROJAN! |
| X | Date Manager | datemanager.exe | Date Manager - calender program. Spyware/adware based provided by The Gator Corporation |
| ? | Datechecker | N/A | Could be related to this? |
| X | DateMakerIntl | DateMakerIntl.exe | Premium rate adult content dialler |
| X | DAupdate | DAupdate.exe | NavEnhance adware |
| ? | DAW9532.exe | DAW9532.EXE | Loaded during installation of some 3Com network cards. Enables their DynamicAccess desktop management software. Is it required? |
| U | DayToday | DAYTODAY.EXE | DayToday from RoboMagic Software Corp. Displays the date on the taskbar |
| U | DAZEL Delivery Agent | DcDaemon.exe | Control and send documents, etc, to any destination - see here |
| N | dbserv | dbserv.exe | Database Server for Norton Ghost on Win2k Pro. Ghost works fine when it is disabled |
| X | DCE Manager | dcemgr.exe | Added by the TUMAG TROJAN! |
| U | DCfssvc | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| U | dcfssve | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| N | DDCActiveMenu | DDCActiveMenu.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCM | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCMan | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case" target="_blank">privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| X | ddeproc | ddeproc.exe | Associated with Webcelerator - spyware. Read eAcceleration's privacy statement here |
| X | DDialler | DDialler.exe | Adult content dialler |
| ? | DDT | N/A | ?? |
| X | de32gen | de32gen.exe | Added by a variant of the CRYPTER.C TROJAN! |
| N | DeadAIM | rundll32.exe DeadAIM.ocm, ExportedCheckODLs | DeadAIM - feature enhancing product for AOL's Instant Messenger program |
| X | DealHelperBrwsr | dhbrwsr.exe | DealHelper adware |
| X | DealHelperDown | download.exe | DealHelper adware |
| X | DealHelperUpdate | DHUpdt.exe | DealHelper adware |
| X | Debug | DebugW32.exe | Added by the GUBED TROJAN Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup! |
| X | deejay | forboo.exe | Added by the FORBOT-AY WORM! |
| X | Default | explore.vbs | Added by the ALLEM WORM! |
| X | Default | mtask.vbe | Added by the ALLEM WORM! |
| X | default | shell32.exe | Added by the BINGHE TROJAN! |
| X | Default System Research | vhchost.exe | Added by the TARNO.I TROJAN! |
| X | Default web browser | IexpIore.exe | Added by the OBLIVION.B TROJAN! Note - do not confuse "IexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a captial "i" in place of lower case "L" |
| X | Default_Page_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | Default_Search_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | defragm_check | defragment.exe | CoolWebSearch parasite variant |
| U | defwatch | defwatch.exe | Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis |
| U | Delay | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| U | Delayrun | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| ? | delcab | deltreew.exe C:cabs | ?? |
| X | Delete Me | worm.exe | Added by the DOOMHUNTER WORM! |
| N | Dell AIO Printer A*** | dlbabmgr.exe | Dell AIO Printer A*** related (*** = model). Not Required at Startup |
| N | Dell AIO Printer A*** | dlbfbmgr.exe | Dell AIO Printer A*** related (*** = model). Not Required at Startup |
| N | Dell AIO Printer A*** | dlbkbmgr.exe | Dell AIO Printer A*** related (*** = model). Not Required at Startup |
| N | Dell Alert | DAMon.exe | "Dell Alert" utility, that's supposed to make interaction with Support easier |
| N | Dell QuickSet | quickset.exe | Dell taskbar icon allowing you to quickly change settings |
| ? | DellDMI | delldmi.exe | Possibly part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards? |
| U | DELLMMKB | DELLMMKB.EXE | Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
| N | DellSC | dellsc.exe | Dell Solution Center - web-based troubleshooting tools and educational offerings |
| U | DellTouch | MMKeybd.exe | Dell multimedia keyboard manager. Required if you use the additional keys |
| U | DellTouch | DELLMMKB.EXE | Multimedia keyboard control for Dell based PCs - only required if you use the multimedia keys |
| X | delmsbb | delmsbb.exe | nCase adware |
| X | delsubmit | rundll32.exe advpack.dll, DelNodeRunDLL32 submit.exe | CoolWebSearch parasite variant |
| ? | DelTmp | DelTemp.exe | Added to the startup list after installing a Creative SoundBlaster Audigy soundcard. Deletes temporary files once an installation is complete? |
| N | DeltTray | deltray.exe | System Tray access to the control panel for the M-Audio Delta 44 PCI Analog Recording Interface. Available via a desktop shortcut, Start -> Programs or Start -> Settings -> Control Panel |
| ? | demon | demon.exe | Part of the French Wanadoo ADSL extense pack. What does it do and is it required? |
| U | DepFrez | frzstate.exe | Deep Freeze from Hyper Technologies. "Freezes" the current software configuration so that an a re-boot all changes made refer back to their original settings. Not required for most users - more likely to be used by system administrators, for example |
| ? | Description of Shortcuts | *.exe | * seems to be a sequence of alphanumerics that can be different, i.e., 1960F8A9, 4EBD23F5, etc. Each of these files would appear to be a shortcut, i.e., 4EBD23F5 is actually Works Calender Reminder (found via a registry search) |
| X | Desire | desires.exe | Adult content dialler |
| ? | desk-top-service | desk-top-service.exe | ?? |
| X | DeskAd Service | DeskAdServ.exe | Windupdates adware variant |
| N | DeskColor | DESKCOLOR.EXE | Provides transparent icon text backgrounds and coloured icon text |
| N | Deskflag | Deskflag.exe | DeskFlag - animated USA flag on the desktop |
| X | DeskMateAutoUpdate | DeskMateAutoUpdate.exe | DeskMates: Virtual scantily clad girls enhance your desktop. BargainBuddy adware related |
| U | Desksite CMA | cma.exe | DeskSite CMA siftware - "retrieves new content from the DeskSite Data Center" |
| X | Desktop | rundll32.exe msconfd.dll, Restore ControlPanel | Added by the BOOKMARKER TROJAN! |
| X | desktop | desktop.exe | Added by the SDBOT.MD WORM! |
| N | Desktop Architect | DATRAY.EXE | Desktop theme manager available here - for managing the desktop appearance, fonts, sounds, etc |
| N | Desktop Plant | AZARE10S.PLT | Vritual plant from here - this version is an Azalea, there are others so the filename may be different |
| X | Desktop Search | desktop.exe | iSearch "Desktop Search" hijacker |
| ? | Desktop Service Centre | DSC.exe | OptusNet DSL or Dial-Up connection software - is it required? |
| N | Desktop Weather | THE WEATHER CHANNEL.exe | Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather 3 | THE WEATHER CHANNEL.exe | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather 3 | THEWEA~1.EXE | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | desktopmgr | desktopmgr.exe | Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry" |
| U | DesktopX | DESKTOPX.EXE | A program that replaces the regular Desktop and Taskbar, and can be changed to the user's liking |
| N | deskup | deskup.exe | Adds Iomega Zip drive icons to the desktop |
| U | detect | idetect.exe | iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled |
| ? | detect | turbodetect.exe | ?? |
| N | Detector | detector.exe | USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software |
| U | DEventAgent | eventagt.exe | DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this |
| X | Device Configuration Loader | msdvc32.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| U | Device Detector | DevDetect.exe | Watches for external digital imaging products being connected from ACD Systems |
| N | Device Detector 2 | DevDtct2.exe | Installed by various Olympus products, this program detects the active connection of a speech device (voice recorder, etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a "high" priority level which can negatively impact system resources |
| U | DeviceDiscovery | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products. "This program is a non-essential process, but should not be terminated unless suspected to be causing problems" |
| X | DevicePath | Proyecto1.exe | Added by the GRUEL WORM! |
| X | DevicePath | Root.exe | Added by the GRUEL WORM! |
| U | Devices | olesvr.exe | Salfeld Child Control 2003 - parental control software |
| U | devldr16 | devldr16.exe | Associated with some Creative Labs sound cards. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start -> Settings -> Control Panel -> System -> Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| ? | Devlog | ?? | ?? |
| ? | Devlog | devlog.exe | Apparently mainboard/chipset related, by a French company called AS Media - what exactly is it, and is it required |
| ? | DGJM | DGJM.exe | ?? |
| N | dguard | dguard.exe | eAcceleration Stop-Sign related - not recommended, see note |
| X | DHCP Server | regsvr.exe | Added by the RBOT-PR WORM! |
| Y | dhcpagnt | dhcpagnt.exe | Intel DSL modem driver - leave enabled or you'll have to re-install the drivers |
| ? | DHNUXB | DHNUXB.exe | ?? |
| N | diagent | diagent.exe | System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs |
| X | Dial22 | dlm.exe | Adult content dialler |
| X | Dial33 | dlm.exe | Adult content dialler |
| X | Dialer | rundll32.exe msa32chk.dll | Unidentfied malware |
| U | Dialer Control | dc.exe | Dialer-Control. Detects and protects from premium rate p0rn diallers |
| U | Dialer Detect | dd.exe | DialerDetect detects stealth installed premium rate diallers, and sounds the alarm when such a connection is being installed without you knowing it |
| U | Dialgo SDK | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" |
| X | DialNet | mxt32.exe | Adult content dialler |
| N | Dialog Box Assistant | OSDEx.exe | Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders |
| N | Dialog Helper | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs |
| X | DIECOX | csrss.exe | Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! |
| X | Diesel | Recalculate.exe | Added by the LAZAR TROJAN! |
| U | DietK | DietK.exe | DietK - add-on for Kazaa Media Desktop; "removes all adware and popups, built in Download Accelerator, makes searches faster and helps produce more results" |
| U | DigiCell | DigiCell.exe | MSI DigiCell - "the most useful and powerful utility that MSI has spent much research and efforts to develop, helps users to monitor and configure all the integrated peripherals of the system, such as audio program, power management, MP3 files management and communication / 802.11g WLAN settings. Moreover, with this unique utility, you will be able to activate the MSI well-known features, Live Update and Core Center" |
| X | DigiD | DigitalSound.exe | Adware downloader |