| N | DMILDR | dmildr.exe | Part of Dell OpenManage Client Instrumentation - software that allows remote management application programs to access information about, monitor the status of or change the state of the client computer, such as shutting it down remotely. Uses the DMI and/or common information model (CIM) protocols, which are systems management protocols defined by industry standards. Available via Start -> Programs |
| N | DMISL | DMISL.EXE | DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
| N | DMISLAPP | DMISLAPP.exe | DMI (Desktop Management Interface) Service Layer for Intel TokenExpress network card software. DMI support for the Intel network card managed through the Desktop Management Interface. See here for more information |
| X | Dmsvc32 | Dmsvc32.exe | Added by the AGOBOT.ABU WORM! |
| X | dmtdll | dmtdll.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | DM_server | dmserver.exe | Comet Cursor adware |
| X | Dnar | Dnar.exe | Unknown, except that it is not necessary. Tends to phone home a lot. DMI related - see here |
| Y | DNE Binding Watchdog | rundll dnes.dll, DnDneCheckBindings | Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
| Y | DNE DUN Watchdog | rundll dnes.dll, DnDneCheckDUN13 | Deterministic NDIS Extender (DNE). DNE is an NDIS-compliant module which appears to be a network device driver to all protocol stacks and a protocol driver to all network device drivers. Part of Gilat Communications internet satellite systems. Required if you have this system. Also installed by Winproxy - a proxy program for sharing internet connections through one computer. Required if you want it to work |
| X | Dns Resolver | dnsrslve.exe | Added by the RBOT-WS WORM! |
| X | DNS Service | dnsresolver.exe | Added by the RBOT-PQ WORM! |
| ? | DNS2GoClient | dns2goclient.exe | DNS2Go is a Domain Name System that will make your computer accessible anytime, anywhere by associating a domain name of your choice to your currently assigned IP address. Is it required? |
| X | dnscleaner | dnscleaner.exe | CoolWebSearch parasite related |
| ? | DNXVC | dnxvc.exe | ?? |
| X | DocTor | Doctor.exe | Added by the DOTOR.A WORM! |
| N | DocuMagix Init | PWATCH.EXE | PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed |
| X | DOGStart | GSDOGST.EXE | Added by an unidentified VIRUS, WORM or TROJAN! A possibility is a trojan known as PENIS |
| ? | Doing | doing.exe | ?? |
| U | Don't Panic | dontpanicdemodp.exe | 30-day trial version of Don't Panic privacy software from Panicware. "Clean up Internet tracks and quickly hide personal documents with this privacy suite." |
| U | Don't Panic Pop-Up Stopper | dpps2.exe | Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
| X | dos | dos64.exe | Adware downloader trojan |
| ? | Dosbat | ?? | ?? |
| N | DoUWantIt | duwi.exe | DoUWantIt - online shopping assistant. Start it manually |
| X | down | hlp32.exe | Added by the DLOADER.BG TROJAN! |
| N | Download Accelerator Plus 5.0 | DAP.exe | Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
| X | Download Plus | DownloadPlus.exe | DownloadPlus parasite - opens pop-up adverts |
| N | Download Wonder | DownloadWonder.exe | Download Wonder from Forty Software. Download manager for resuming downloads, amongst other features |
| N | DownloadAccelerator | DAP.EXE | Download Accelerator Plus from Speedbit. Download manager for resuming downloads, amongst other features. Available via Start -> Programs. Note that the free version is adware based |
| X | DownloadLegalMusic | rundll32.exe MSA64CHK.dll, DllMostrar | MatrixDialer related |
| X | DownloadWare | dw.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| X | DownloadWare Engine | Dwe.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| X | Downxz | Downxz.bat | Added by the MYDOOM.W WORM |
| N | DPAgnt | DPAgnt.exe | digitalPersona fingerprint scanner |
| Y | Dpcnav | dpcnav.exe | DirecWay from DirectTV satellite based high-speed internet access |
| X | dpcproxy | dpcproxy.exe | Added by the GOLDENP-A TROJAN! |
| Y | DPCProxyLoadOnStartup | dpcstart.exe | DirecWay from DirectTV satellite based high-speed internet access |
| Y | Dpcstart | dpcstart.exe | DirecWay from DirectTV satellite based high-speed internet access. Proxy software |
| U | Dpcstart | dpcstart.exe | Startup program for Direcway 2-way satellite internet service. Loads DirecWay's Navigator, tray icon, etc |
| X | dpi | dpi.exe | Delfin Media Viewer or "Promulgate" adware |
| U | dpps2 | dpps2.exe | Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
| X | dps | dps.exe | scumware-remover.org foistware, bogus adware/spyware remover, is in fact itself a browser hijacker, redirecting to smartestsearch.com |
| N | Drag'n'Drop_Autolaunch | Autolaunch.exe | Iomega HotBurn - CD-RW burning software |
| ? | DragDrop | DragDrop.exe | ?? |
| N | DragnDrop_Autolaunch | Autolaunch.exe | Iomega HotBurn - CD-RW burning software |
| ? | dregfix | ph_finder.exe | ?? |
| N | DrgToDsc | DrgToDsc.exe | Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly |
| ? | dried.exe | dried.exe | ?? |
| N | DriveLED | OODLed.exe | O&O DriveLED - displays your HDD LED on your monitor. Start manually |
| X | Driver | gbot.exe | Added by the JUNTADOR.K TROJAN! |
| X | Driver32 | Scam32.exe | Added by the SIRCAM WORM! |
| N | DriveSelect | driveselect.exe | DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs |
| U | dRMON SmartAgent | SmartAgt.exe | Part of the network monitoring program group for 3Com NIC cards. See here for more info |
| X | drmu | W95Mm.exe | Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise. See this thread |
| X | drocher | d.exe | Adult content dialler |
| X | drvddll.exe | drvddll.exe | Added by the BEAGLE.AP WORM! |
| X | Drvddll_exe | drvddll.exe | Added by the BEAGLE.X WORM! |
| ? | DrvListnr | DrvListnr.exe | Analog Devices SoundMAX soundcard related. What does it do and is it required? |
| U | drvlsnr | drvlsnr.exe | Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly |
| X | drvr32h | drvr32h.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | drvrmanager | drvrquery32.exe | Added by the BOOHOO WORM! |
| X | drvsys.exe | drvsys.exe | Added by the BEAGLE.W WORM! |
| X | drvupd | rundll32 ..drvupd.inf | Hijacker - drvupd.inf file installs a "searchforge.com" hijack |
| Y | Drwebscheduler | Drwebscd.exe | Dr. Web antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem |
| X | DR_S | DR_S.exe | AdShooter adware |
| U | DS Clock | dsclock.exe | Digital desktop clock including synchronization with atomic servers - see here |
| X | dsa | dsa.exe | Homepage hijacker - redirecting to downseek.com |
| X | DSAcass | [path to file] | Added by the RANKY.M TROJAN! |
| X | DSB | DSB.exe | EnergyPlugin adware |
| N | DSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| X | Dsi | dp-******.exe | Added by an unidentified adware where ****** are random characters |
| X | Dskcompat | Dskcompat.exe | Added by the GEMA TROJAN! |
| N | DSL Monitor | spdstrm.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| Y | DSLagentexe | DSLagent.exe | Used in conjunction with USB connected ADSL modems from Eicon Networks (as used by BT for its Broadband internet service for example). Required for a permanent ADSL connection |
| Y | dslmon | dslmon.exe | Sagem DSL modem related. Apparently needed to detect the modem |
| U | DSLSTATEXE | dslstat.exe | System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example) |
| X | DsmSer | dsm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | msmpatch.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | svosm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | sysup.exe | Added by the SERFLOG.B WORM! |
| X | DSS | dssagent.exe | DSSAgent by Brøderbund - spyware. Sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info |
| X | DSService | dmrss.exe | Added by the AGOBOT-XX WORM! |
| ? | DSSSGENS | dssagens.exe | ?? |
| N | DU Meter | DUMETER.EXE | Hagel Technologies internet bandwidth monitor |
| N | dumprep 0 -k | dumprep 0 -k | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| U | dumprep 0 -u | dumprep 0 -u | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| N | dvd43 | DVD43_Tray.exe | DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies" |
| X | dvd98 | windvd98.exe | Added by the CULT.P WORM! |
| U | DVDBitSet | DVDBitSet.exe | DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used |
| X | Dvdcompat | Dvdcompat.exe | Added by the GEMA TROJAN! |
| N | DVDLauncher | DVDLauncher.exe | A process belonging to the Cyberlink PowerCinema video viewing software which allows you to play DVDs upon insertion. Non-essential process - and is installed for ease of use |
| N | DVDSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| ? | DVDTray | DVDTray.exe | HP CD/DVD Tray icon. What does it do, and is it required |
| ? | DVDUpgrade | DVDUpgrd.exe | ?? |
| Y | Dvp95 | Dvp95.exe | Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine |
| Y | dvpapi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me |
| Y | DvpInitExe | Dvpinit.exe | Command Antivirus related |
| Y | dvprpt | Dvprpt.exe | Command Antivirus real time protection |
| X | dvraudio | dvraudio.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | dvsfss | fbsfsdrs.exe | Added by the SDBOT-QA WORM! |
| U | DVSync | dvsync.exe | DVSync is the program that allows you to synchronize your daVinci’s PDA's data with your Personal Information Manager on the PC |
| X | Dvx | wsxsvc.exe | Delfin Media Viewer or "Promulgate" adware variant |
| X | dw | dw.exe | DownloadWare - executes arbitrary code from advertisers and not considered to be adware but is a security risk (see here). If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers. Installed along with programs such as MovieNetworks, Medialoads and PAgent |
| U | DWHeartbeatMonitor | DWHeartbeatMonitor.exe | DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference |
| N | DwlClient | support.exe | Download manager for Dell support alerts |
| X | Dx | sys*.exe [* = random number] | Added by the DEXTER.A WORM! |
| X | Dx8compat | Dx8compat.exe | Added by the GEMA TROJAN! |
| X | dxdll32 | ntxdll.exe | Added by the GAOBOT.CPX WORM! |
| N | DXDllRegExe | dxdllreg.exe | Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it |
| X | DxLoad | DX3DRndr.exe | Added by the GIBE.B WORM! |
| N | DXM6Patch_981116 | p_981116.exe | Win32 cabinet self extractor. More info here |
| X | Dxsty | Dxsty.exe | Added by the GEMA TROJAN! |
| X | Dxupdate.exe | Dxupdate.exe | Added by the MAFEG WORM! |
| X | DyFuCA | optimize.exe | Adult content dialler - see here |
| X | DyFuCA Active Alert | actalert.exe | Adult content dialler - see here |
| X | Dynamic Dns Binary | dynitora.exe | Added by the RBOT-WT WORM! |
| N | DynDNS-Updater Traytool | ddutray.exe | DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually |
| U | Dynu Basic Client | dynubas.exe | Dynu online dynamic IP update client. Useful when using a dial up modem |
| ? | DZKillMe | DZSAVEME.EXE | ?? |