Close Program/Task Manager
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
Operating System Differences
A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.
To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.
Alternatively use your browsers search facility - Ctrl+F for IE users.
Key:
"Y" - Normally leave to run at start-up
"N" - Not required - typically infrequently used tasks that can be started manually if necessary
"U" - User's choice - depends whether a user deems it necessary
"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"
"?" - Unknown
Use your browsers search facility - Ctrl+F for IE users.
| X | LanGuard | languard.exe | Adware downloader |
| U | LanSpeed2 | LanSpeed2.exe | Monitors any traffic that is using a LAN adapter (Ethernet or Token ring network card) |
| U | LapLink scheduler | Llsched.exe | Utility that automatically performs file transfers as unattended background operations |
| X | Lar | Llass.exe | Added by the INOR-A TROJAN! |
| X | lar | [trojan filename] | Added by the ROXY.C TROJAN! |
| X | LARISSA ANTI VIRUS | LARISSA_ANTI_VIRUS.exe | Added by the KLASSIR TROJAN! |
| ? | Lasb | ewat.exe | ?? |
| X | LAsIAf32 | RePEAtLD.exe | Added by the REPEATLD WORM! |
| Y | LASTinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| ? | Later | later.exe | ?? |
| U | LaunApp | LaunApp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| ? | Launcg | launcg.exe | ?? |
| U | Launch Ai Booster | OverClk.exe | ASUS Ai Booster is an application that allows you to overclock the CPU either manually or automatically without the hassle of entering the BIOS Setup |
| N | Launch YahooPOPs! at Windows startup | YAHOOPOPS.EXE | YahooPOPs - enables free POP3/SMTP access to Yahoo! Mail through a service on localhost that emulates the web interface. Available via Start -> Programs |
| U | LaunchAp | LaunchAp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| U | LaunchApp | Alaunch.exe | Acer Launch tool utility on laptops |
| U | Launchboard | lnchbrd.exe | "LaunchBoard software from Darwin turns your keyboard into a remote control for the Internet and your computer! With LaunchBoard 2.0, you can customize up to 38 keys on your PC keyboard to instantly launch Web Sites, start applications, perform custom macros, handle Windows shortcuts, store passwords, and perform loads of other customizable functions" |
| X | Launcher | launcher.exe | Spyware component related to DownloadWare and found in Program FilesKFH |
| N | Launcher | relaunch.exe | Audio Applications Launcher for the Philips Rythmiic Edge soundcard (the Philips Rhythmic Edge is the same as the Thunderbird PCI soundcard - see TBtray). Available via Start -> Programs |
| X | Lavasoft Ad-Aware | Ad-Aware.exe | Added by the RBOT-SO WORM! Note - this is not the popular Ad-aware spware/adware removal tool |
| U | Lavasoft Adwatch | Ad-watch.exe | Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system |
| Y | laxmsp32.exe | laxmsp32.exe | Lexmark Scan and Copy Control Program for the X63 (and maybe others) printer/scanner. Required for the scanner to work |
| U | LCDC | LCDC.exe | LCDC is an application that displays various information on your LCD or VFD screen. The number of things that LCDC can do is expandable by Plugins |
| N | lcfep | lcfep.exe | Tivoli ‘TME’ System Tray icon - "'lcfep' is the program that displays statistics about the Endpoint. Apparently stopping/removing this process has no impact on the Endpoint itself which will continue to function normally" |
| X | lcvga | lcvga.exe | Added by the HOSTOL-A TROJAN! |
| X | ld | ld.exe | CoolWebSearch parasite related - redirects to fastwebfinder.com |
| N | LDM | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | LDM | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| U | LED TRAY | LEDTRAY.EXE | Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work |
| U | ledpointer | CNYHKey.exe | Chicony Electronics Multimedia Keyboard Hotkey Driver |
| N | LeechGet | LeechGet.exe | LeechGet download manager |
| X | LetsSearch | LetsSearch.exe | BrowserAid/BrowserPal foistware variant |
| U | Lexmark **** Series | lxbabmgr.exe | Lexmark System Tray application (where "****" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| U | Lexmark **** Series | lxbkbmgr.exe | Lexmark System Tray application (where "****" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| U | Lexmark **** series | lxbtbmgr.exe | Lexmark System Tray application (where "****" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| Y | Lexmark 3100 Series | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation |
| Y | Lexmark Xxx Button Manager | AcBtnMgr_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| Y | Lexmark Xxx Button Monitor | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| N | LexmarkPrinTray | printray.exe | Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray |
| X | lexplore | lexplore.exe | Added by the BROPIA WORM! Note - the executable is spelt with a lower case "L" rather than an lower or upper case "i" which is the case with Internet Explorer |
| N | lexpps | lexpps.exe | For Lexmark printers. From Lexmark: "This enables bi-directional printing over a peer to peer network. If the printer is connected directly to your PC, the file is not used, (or should not be used) at all". It is known that firewalls can however alert you to "lexpps.exe" requesting server privileges |
| U | LexStart | lexstart.exe | Lexmark printer software may add Lexstart.exe in the startup folder to handle print commands that you send to the printer. Sometimes required for the printer to work correctly - not in the case of a Lexmark Z42 for instance |
| U | Lfsndmng | lfsndmng.exe | LightningFAX Enterprise Fax Server - "puts faxing at the fingertips of networked enterprise users. It enables rapid, secure sending and Direct-To-Desktop Delivery of mission-critical documents" |
| N | lhttseng | rundll32.exe ..lhttseng.inf, RemoveCabinet | Left over after installation of the British English version of the Lernout & Hauspie Text To Speech (TTS) Engine |
| X | li-multi**** | li-multi****.exe | Adult web-dialler - **** is random |
| X | li-speed**** | dlres.exe | Adult web-dialler - **** is random |
| X | li-thund**** | li-thund****.exe | Adult web-dialler - **** is random |
| X | li-vita**** | li-vita****.exe | Adult web-dialler - **** is random |
| X | li01f948 | rundll32.exe [path] li01f948.dll, EnableRunDLL32 | LZIO.com adware downloader |
| N | LicCrtl | runservice.exe | eLicense, licensing system incorporated with some software and games |
| U | LicCtrl | rundll32.exe [path] MMFS.DLL, Service | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program |
| U | LicCtrl | runservice.exe | Part of the eLicense Copy Protection scheme employed by some software and games. When this service is not running, the eLicense wrapper is unable to extract and execute the program |
| N | LifeScape Media Detector | PicasaMediaDetector.exe | Media detector for Picasa's automatic photo organizer |
| U | Lightning Download | Lightning.exe | Lightning Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer |
| N | LimeWire x.x | LimeWire.exe | LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware |
| N | Line Speed Meter V3.0 | LineSpeedMeter.exe | LineSpeedMeter - detect the download and upload speed of your internet connection |
| N | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| X | Linksts | linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| X | Linux | Linux.vbs | Added by the LOVELETTER.AS VIRUS! |
| U | LiquidView | lviewj.exe | "Liquid View lets you increase the legibility of the Microsoft Windows interface regardless of your display's native resolution. The software lets you increase the size of items that are hard to read on your monitor" |
| N | LIU | LIU.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| N | LIU | Rubicon.exe | Logitech Internet Update. Used to update drivers/software for Logitech's Wingman, QuickCam, etc devices. Reports claim it doesn't work very well and you can manually update the files anyway |
| N | Live Menu | Dllcmd32.exe | eFax Send button for eFax Messenger Plus. Available via Start -> Programs Disabling instructions available here |
| N | LiveMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| N | LiveNote | Livenote.exe | Asus graphics card driver live update feature |
| X | LiveSexCams | LiveSexCams.exe | Premium rate adult content dialler |
| U | LiveUpdate | LiveUpdate.exe | Web-update utility as used by various types of software - see here |
| X | LiveUpdate | [Windows username]05.exe | Added by the LINEAGE TROJAN! |
| X | Livre | Dibane.bat | Added by the BANEDI VIRUS! |
| ? | LLMODCL2 | rundll.exe setupx.dll, InstallHinfSection ..LLMODCL2.INF | ?? |
| U | LManager | QtZgAcer.EXE | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio |
| U | LManager | QtZpAcer.exe | Acer Launch Manager - on Acer laptops it allows users to configure shortcut keys and to set the operating state of the WLAN module and the (optional) Bluetooth radio |
| N | LMonitor | LMonitor.exe | MSI Live Update - auto-detects and suggests the latest BIOS/Driver/Utilities information |
| ? | lmpdpsrv | lmpdpsrv.exe | Related to a Lexmark printer/scanner. Printer sharing server? Is it required? |
| N | LMSTATUS | LMSTATUS.EXE | Lexmark Status Monitor. Checks the current status of Lexmark printers (and other devices?) |
| X | lmu | LMU.exe | Downloader trojan, recognized by Kaspersky antivirus as Agent.bg |
| X | lnternet Explorer | AMSNDMGR.EXE | Added by the KWBOT.R WORM! Note that the "l" is a lower case "L" and not an upper case "I" |
| X | load | mdm.exe | Added by the BINGHE TROJAN! |
| U | LOAD WB | LOADWB.EXE | Part of Stardock's WindowBlinds custom desktop program. "WindowBlinds is the first utility of its kind. It extends Win98/NT/2K/XP to have a fully skinnable user interface. You can change the style of title bars, buttons, toolbars and much more". If you use it - keep it if not then uninstall it |
| X | Load-Guard | Wscript.exe LGuarg.exe.vbs | Added by the YENO.B and YENO.C WORMS! |
| X | LOAD32 | Lorena.exe | Added by the MAPSON.C WORM! |
| X | load32 | load32.exe | Added by the NIBU, BAMBO TROJANS and DUMARU WORM! |
| X | load32 | l32x.exe | Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM! |
| X | load32 | 1111a.exe | Added by the DUMARU.AH WORM! |
| X | load32 | swchost.exe | Added by the TURTA.A WORM! |
| X | load32 | netda.exe | Added by the NIBU.E TROJAN! |
| N | load= | adw30.exe | After Dark for Windows - screen saver program. Popular before screen savers were integrated into Win95 |
| U | load= | asistat.exe | Status monitor for an NEC SuperScript printer |
| ? | load= | cfgsys32.exe | ?? |
| U | load= | esspk.exe | Speakerphone capability through a soundcard for an ESS modem |
| Y | load= | hotkey.exe | Solo 5300 display driver for Win2K on some Gateway laptops |
| N | load= | HPWHRC.EXE | Loads the Status Window software for the HP Laserjet printers |
| ? | load= | WPSLOAD.EXE | Windows printing system that comes with the setup for Canon BJC series on the manufacturer's disk |
| N | load= | vi_grm.exe | Monitor drivers for Trio2x/3x based video cards - displays control panel for quick access to display settings |
| ? | load= | WINOSCFG.EXE | Could it be something to do with configuring Windows on a new PC from an OEM supplier? |
| Y | load= | wpshrc.exe | Required to prevent configuration errors on a Compaq LBP-660 parallel port laser printer (and maybe others) |
| Y | load= | Bfrecv.exe | Bitware modem driver |
| X | load= | msater.exe | Added by the RETSAM TROJAN! |
| X | load= | shambl3r.exe | Added by the REMABL WORM! |
| X | load= | Spoolsv.exe | Added by the CIADOOR.B TROJAN! Note - "Spoolsv.exe" is located in the Windows or Winnt directory, and not in System32, like the legitimate Spoolsv.exe system file |
| ? | Load= | wtfeat.exe | Associated with the Wintab Digitizer |
| Y | load= | AICLIENT.EXE | Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system |
| X | load= | hint.exe | Added by the ATAK WORM! |
| X | load= | win32exec.exe | Added by the BITTER WORM! |
| X | load= | a1g.exe | Added by the ATAK.B WORM! |
| X | load= | dapdll.exe | Added by the ATAK.E WORM! |
| Y | LoadBlackD | blackd.exe | This is the "intrusion detection system" of the BlackICE PC Protection (was Defender) firewall which loads independently of the "user interface" (BlackICE Utility) |
| ? | LoadBtnHnd | BtnHnd.exe | Fujitsu LifeBook related |
| X | LoadDBackUp | BcTool.exe | Added by the GIBE WORM! |
| X | loaddll | loaddll.exe | Winvest spyware |
| ? | LoadDvpApi9x | DVPAPI9X.exe | Part of Command AntiVirus for Windows 95/98/Me. Is it needed? |
| X | loader | loader.exe | Homepage hijacker, redirecting to coolwwwsearch.com. Downloader for iedll.exe |
| X | loader | WMPLAYER.EXE | Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn't load at startup |
| X | loader32 | sys*****.exe [***** = random digit] | Added by the DOMCOM TROJAN! |
| X | LoadFonts | LoadFonts.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | LoadFonts | Tahoma.vbs | Homepage hijacker that changes your homepage to an adult content site |
| X | LoadHTML | rundll32.exe mshtmpre.dll, MShtmpre | Browser hijacker |
| X | LoadingAgent | ZipLoader32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadingAgent | msload32.exe | Added by the OBLIVION TROJAN! This executable is one of the most common but there are more |
| X | LoadManager | msload.exe | Added by the OPASERV.T WORM! |
| X | loadMecq0 | explorer.exe | Added by the MUMUBOY.C TROJAN! |
| N | LoadMSvcmm | msvcmm32.exe | Auto-update for Movielink - internet movie rental System Tray access |
| X | LoadOrderVerification | [random filename] | Added by the TRON.A TROJAN! |
| U | Loadout Manager | nost_LM.exe | Manager for the Belkin Nostromo n50 SpeedPad game controller - see here |
| X | LoadPowerProfile | ASDAPI.EXE | Added by the CABRO TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| U | LoadPowerProfile | Rundll32.exe powrprof.dll | Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings |
| X | LoadPowerProfile | Rundll.exe powerprof.dll | Added by the LOXOSCAM TROJAN! Note - do not confuse with the valid LoadPowerProfile entry! Notice that the infected version uses "Rundll.exe" whereas the uninfected version uses "Rundll32.exe" |
| X | LoadPowerProfile | rundl.exe | Added by the TOFAZZOL TROJAN! Not to be confused with the valid LoadPowerProfile entry where the command is Rundll32.exe powrprof.dll |
| X | LoadPowerProfile | Rundll32.exe | Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line |
| U | LoadQM | loadqm.exe | Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access - hence the "users choice" recommendation. If you have problems leave it, otherwise I recommend you disable it |
| X | loads.exe | loads.exe | Popuppers.com adware downloader |
| X | loads.exe | medload.exe | Popuppers.com adware downloader |
| X | loads.exe | suploads.exe | Popuppers.com adware downloader |
| X | LoadSIPS | rundll32.exe [path] SIPSPI32.dll, SIPSPI32 | 123Mania adware |
| ? | LoadWatcher | Test.exe | Reportedly part of a webcam surveillance program that's supposed to test SMTP dialling in the event of an alert? Is this correct? |
| X | LoadWindowsFile | [filename] | Added by the DELF.B TROJAN! where [filename] is the infected file |
| X | Local Page | http://find.naupoint.com | Naupoint browser hijacker |
| X | Local runole service | srvc32.exe | Added by an unidentified WORM or TROJAN! |
| X | Locator Service | [filename] | Added by the AGOBOT-KY TROJAN! |
| U | Lock My PC | lockpc.exe | Lock_My_PC - a tool for quick computer locking when you leave it unattended. It shows a lock screen, disables Windows hot keys and mouse |
| U | Login | winlog.exe | Salfeld Child Control 2003 - parental control software |
| X | Login Service | [path to file] | Added by the MIGMAF TROJAN! |
| X | LoginPassport | Lgnpsp32.exe | Added by the REDIST.C WORM! |
| N | Logitech Desktop Messenger | backweb-8876480.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| N | Logitech Desktop Messenger | ldmconf.exe | Installed with the software for Logitech products. Automatically checks for software upgrades AND new products, services and special offerings from Logitech |
| U | Logitech Hardware Abstraction Layer | Khalmnpr.exe | For a Logitech Bluetooth wireless mouse. Part of SetPoint that sets the Windows mouse sensitivity to minimum. The idea is that you will use the SetPoint Control Panel to adjust your mouse sensitivity. This setting is maintained separately from the Windows setting, but is combined with the Windows setting to determine the final sensitivity. For this reason, KHALMNPR sets the Windows setting to 0 so it doesn't alter the one you set in SetPoint |
| U | Logitech SetPoint | KEM.exe | Keyboard and mouse drivers and utilities for Logitech's latest products - supersedes iTouch and MouseWare on their older products. Required if you use special features such as multimedia keys |
| U | Logitech Utility | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| N | Logitech Wakeup | lgwakeup.exe | Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images |
| U | LogitechGalleryRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| N | LogitechImageStudioTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| ? | LogitechSoftwareUpdate | ManifestEngine.exe | Updater, part of Logitech Image Studio - installed with Logitech QuickCam cameras. Probably not required |
| U | LogitechVideoRepair | ISStart.exe | LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation |
| N | LogitechVideoTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| N | LogiTray | LogiTray.exe | Logitech Image Studio - installed with Logitech QuickCams |
| U | Logi_Mwx | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| X | Logon.exe | logon.exe | Added by the ZINS.A TROJAN! |
| U | LogonStudio | logonstudio.exe | WinCustomize LogonStudio - "Allows Windows XP users to edit, change, and apply new logon screens. LogonStudio comes built with a visual editor to make it easy to create your own logons which can then be uploaded to websites to be used by others users" |
| X | LogService | wincalc.exe | Added by the PAPROXY TROJAN! |
| U | LogWatch | logwat95.exe | Licensing patch for products installed on NT by Computer Associates such as eTrust. Detects and updates old versions of lic98.dll - see here. Not required if you already have a newer version or the patch has been applied |
| Y | Look 'n' Stop | looknstop.exe | Look 'n' Stop personal firewall |
| N | LookNMeet | Agent.exe | LooknMeet dating service |
| X | Lookup_Sys | lookupsys.exe | P04n trojan |
| N | Lotus Organizer EasyClip | easyclip.exe | "The Easy Clip icon automates the collection of information from sources such as e-mail to create an Organizer address, appointment, task or Notepad page." Available via Start -> Programs |
| N | Lotus QuickStart | smartctr.exe | Lotus central application, called SmartCenter, which runs on the Windows desktop. SmartCenter toolbar stretches across the top or, optionally, the bottom of the screen. Uses a lot of resources. Available via Start -> Programs |
| U | Lotus SuiteStart | suitest.exe | Puts the individual Lotus components in the system tray taskbar when you start Windows. Can be disabled via MSCONFIG -> Startup as "Lotus SuiteStart 97 Edition". All individual components available via Start -> Programs |
| X | LowVersionSupport | [filename] | Added by the LASTRAS TROJAN! |
| X | Lpr | Lpr123.exe | Added by the REMPSTEAL password stealer TROJAN! |
| X | Lpr123 | Lpr123.exe | Added by the REMPSTEAL password stealer TROJAN! |
| U | LPS | Lps.exe | Local Port Scanner - "With LPS you're able to check your computer for open or listening ports" |
| U | LPtask | lptask.exe | Program Lock It And Protect Pro - lock and protect your folders from being opened, moved or deleted |
| N | LS120 Superdisk | ?? | Supposed to accelerate transfer rate on LS-120, contributes to system lockups |
| X | LSA | wfdmgr.exe | Added by the MYTOB.C WORM! |
| X | lsass | lsass.exe | Added by the RATSOU.B TROJAN! Note - this is not the legitimate Lsass.exe system file should normally NOT figure in Msconfig/Startup! |
| X | lsass | start.bat | Added by the ZCREW TROJAN! |
| X | lsass | [path to lsass.exe] | Added by the ALADINZ.F TROJAN! Note - this is not the legitimate lasss.exe process which should NOT appear in Msconfig/Startup! |
| X | lsass | lsasrv.exe | Added by the MYDOOM.AG or MYDOOM.AS or MYDOOM.AU WORMS! |
| X | LSASS Daemon | LSASSd.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | lsass service | lsass2.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| X | lsasss.exe | lsasss.exe | Added by the SASSER.E WORM! |
| X | LSPFix | LSPmonitor.exe | eAcceleration Stop-Sign related - not recommended, see note |
| X | LSPmonitor | LSPmonitor.exe | eAcceleration Stop-Sign related - not recommended, see note |
| X | lssass | lssas.exe | Added by the AGOBOT.RL WORM! |
| X | LSvr | LSvr.exe | PowerStrip foistware |
| Y | LT DAEMON | ltdaemon.exe | Acts as a data spooler for the DSL modem (similar to a cache). Do not uncheck if the DSL modem is being used |
| X | LTDMgr | LTDMgr.exe | PowerStrip foistware |
| X | LTM2 | MSGSRV32.EXE | Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem |
| X | LTM2 | MPGSRV32.EXE | Added by the LITMUS.201 TROJAN! |
| X | LTM2 | MSGSRV320.EXE | Added by the LITMUS.C TROJAN! |
| X | LTM2 | winupdate.exe | Added by the LITMUS.203 TROJAN! |
| X | LTM2 | bible.exe | Added by the LITMUS.203 TROJAN! |
| U | LtMoh | Ltmoh.exe | Modem On Hold utility - manages incoming/outgoing voice calls on a single phone line while being connected to the internet |
| Y | LTMSG | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| N | LTSMMSG | LTSMMSG.exe | Lucent Tech. Soft Modem Messaging application - may be found on Fujitsu Lifebook, Acer and Sony Vaio notebooks, maybe others too |
| X | LTSMSG | Shell32.exe | Added by the LEMIR.B TROJAN! |
| Y | LTWinModem1 | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| X | ltwob | formatsys.exe | Added by the SERFLOG.A WORM! |
| X | ltwob | msmbw.exe | Added by the SERFLOG.A WORM! |
| X | ltwob | serbw.exe | Added by the SERFLOG.A WORM! |
| Y | Lusetup | LUSetup.exe | Symantec LiveUpdate installer - required to install a new version of the application. Will only run once, and the entry is automatically deleted after a reboot |
| U | LVComs | lvcoms.exe | Lvcomm server. Related to Logitech Quick Cam - works fine without it but it is needed for the Logitech ImageStudio software to connect to the camera |
| ? | LVCOMSX | LVCOMSX.EXE | Logitech webcam related. What does it do and is it required? |
| U | LWBMOUSE | lwbwheel.exe | Mouse driver - required if you use non-standard Windows driver features |
| U | LWBMOUSE | MOUSE32A.EXE | Mouse driver - required if you use non-standard Windows driver features |
| N | Lwinst Run Profiler | lwtest.exe | Logitech Wingman Profiler for the Logitech joysticks. Available via Start -> Programs |
| ? | lxamsp32 | lxamsp32.exe | Associated with a Lexmark Printer - is it required? |
| ? | LXbbmgr | LXbbmgr.exe | Lexmark printer button manager? Is it required? |
| ? | LXBLKsk | LXBLKsk.exe | Lexmark related. What does it do, and is it required? |
| Y | lxbrbmgr | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation |
| ? | LXBRKsk | LXBRKsk.exe | Lexmark printer related. What does it do and is it required? |
| ? | LXBTCATS | rundll32 [path] LXBTtime.dll,_RunDLLEntry@16 | Lexmark printer related - what does it do and is it required? |
| N | LXSUPMON | LXSUPMON.EXE | Lexmark Printer. The printer should work fine without it |
| X | LzioMediaUpdater | LzioMediaUpdater.exe | LZIO.com adware downloader |