| X | Win_api_driver | system.exe | Added by the REVIRD TROJAN! |
| X | Win_Library | INISvc.exe | Added by the ANARCH WORM! |
| X | win_spool2 | win_spool2.exe | Added by the SCKEYLOG.B TROJAN! |
| X | win_upd.exe | WINdirect.exe | Added by the MITGLIEDER.M TROJAN! |
| X | win_upd2.exe | WINdirect.exe | Added by the BEAGLE.AO WORM! |
| X | Win_vader | Win_vader.vbs | Added by the INVASION.A VIRUS! |
| X | WIP Config GUI | Winipcfgs.exe | Added by the RBOT-CN WORM! |
| U | Wireless PCI Card Configuration Utility | WMP11Cfg.exe | Utility used by the LINKSYS wireless PCI card (WMP11) and indicates when a wireless access connection is made by a screen colour change. Also used for configuration |
| X | Wireless Provider Server | wpsvr.exe | Added by the FORBOT-AD WORM! |
| U | Wireless-G Notebook Adapter Utility | WPC54CFG.EXE | Utility used by the LINKSYS Wireless-G Notebook Adapter (WPC54G) |
| N | wjview | wjview.exe | MS tool used to view window-based Java applications from the command line |
| N | wkcalrem | wkcalrem.exe | Produces a pop-up reminder of events scheduled using the MS Works Calendar |
| N | WkDetect | WkDetect.exe | Checks for updates to MS Works |
| N | wkfud | wkfud.exe | A marketing program for MS Works |
| N | WksSb | WksSb.exe | The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. The Works Portfolio provides a location where you can store items you want to later put into a document or other file |
| N | WkUFind | WkUFind.exe | MS Works Update Detection. MS Picture It! (versions 7 to current) use this automatic update feature during the log on process. It can also cause your system to automatically dial into your ISP as it tries to access the internet, if you have your system set to automatically dial when the internet is invoked. To manually update, go to Microsoft's Office/Works update site |
| X | Wlan Drier | Winusb2.exe | Added by the WOOTBOT.DC WORM! |
| X | Wlan Driver | avscan.exe | Added by the WOOTBOT.DH WORM! |
| N | WLAN Status Tray Applet | WLANSTA.EXE | System Tray icon for checking the status of a Wireless LAN |
| N | WLANSTA.EXE | WLANSTA.EXE | System Tray icon for checking the status of a Wireless LAN |
| Y | WLAN_Cfg.exe | WLAN_Cfg.exe | Linksys Instant Wireless USB Network Adapter driver |
| X | wm41a398 | rundll32.exe [path] wm41a398.dll, EnableRunDLL32 | LZIO.com adware downloader |
| X | WMAudio | services.exe | Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | WMAudio | winlogon.exe | Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| N | WMBoot | N/A | Associated with Logitech Wingman game controllers. Not required but what does it do? |
| U | WMIEXE.exe | wmiexe.exe | NT component, used by Windows Millennium to detect Plug and Play-compliant IEEE 1394 devices during the startup process. Since this is important for the computer to work properly if you have these, Windows Millennium protects wmiexe.exe and will restore the file even if it's deleted or renamed. Check here for some details on what to do to stop it loading |
| X | Wminf | Wminf.exe | Added by the GEMA TROJAN! |
| X | Wminfo | Wminfo.exe | Added by the GEMA TROJAN! |
| X | wmiprv | wmiprv.exe | Added by the RBOT-WM WORM! |
| Y | WMP54Gv4 | WMP54Gv4.exe | Linksys WMP54G Wireless-G PCI Adapter driver |
| X | wmsys32 | wmsys32.exe | Added by the BANPAES.B TROJAN! |
| ? | WM_LOGIN | MSGLOGIN.EXE | Part of McAfee Firewall. What is it for and is it needed? |
| X | WNAD | WNAD.EXE | Spyware added as a result of running a program called "Yo Mama Osama" (osama.exe). See here for more and how to get rid of it. There are other ways this can show up on your system, and it will manifest itself by periodically opening a new browser window with advertising for copy DVD software and the like |
| X | WNSC | wns*****.exe [* = random char] | PurityScan/Clickspring adware |
| X | WNSI | wnscp**.exe [* = random char] | PurityScan/Clickspring adware |
| X | WNST | wns*****.exe [* = random char] | PurityScan/Clickspring adware |
| N | WooCnxMon | CnxMon.exe | Wanadoo ISP software related - not required - here's how to bypass it |
| N | Woowatch | Watch.exe | Wanadoo ISP software, not required |
| N | WordWeb | wweb32.exe | WordWeb - free theasaurus and dictionary. Start manually |
| ? | Workflo | workflow.exe | Related to BroadJump Client Foundation - broadband troubleshooting software installed by various companies. Is it required? |
| N | Works Calendar Reminder | wkcalrem.exe | Produces a pop-up reminder of events scheduled using the MS Works Calendar |
| N | WorksFUD | wkfud.exe | A marketing program for MS Works |
| U | Workstation Scheduler | wm95.exe | Desktop Management Scheduler. Part of Novell's Netware Client. Schedueles NDS events. If events have been schedueled, it is required, otherwise, it is useless and a memory hog |
| X | Workstation Services | wrkstn.exe | Added by the RBOT-OJ WORM! |
| U | Worm Detector | wd.exe | Worm Detector - antivirus add-on for Outlook 2K or XP for handling worms and spam |
| X | wormexe | winstart.exe | Added by the EARLYBIRD WORM! |
| X | wovax | wovax.exe | Added by the DAQA.A TROJAN! |
| N | Wpctrl | wpctrlnt.exe | WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties |
| N | Wpctrl | wpctrl95.exe | WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties |
| N | wpctrl95 | wpctrlnt.exe | WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties |
| N | wpctrl95 | wpctrl95.exe | WinPortrait plug-in for PivotPro from Portrait Studios - allows a screen to be rotated to match rotated LCD screens, for example). Shortcut available via Display Properties |
| Y | WPCycle.exe | WpCycleWin.exe | Added when selecting Mplayer2 to open media files. Forces other codes to Wait for Previous instructions to end, preventing instability of your CPU (freezing) |
| X | wpds.exe | doriot.exe | Added by the SMALL-KY TROJAN! |
| X | WQK | WQK.exe | Added by a variant of the KLEZ WORM! |
| ? | wr | WR.EXE | ?? |
| ? | WR Command | wr.exe | ?? |
| N | WrCtrl | WrCtrl.exe | Win-Route 4.27 NAT engine on Win2k Pro for connection sharing and security using Win-Route by Tiny Software. A connection sharing/Firewall Application. If service is disabled the program does not work, but you can manually start/stop the service with a shortcut the program installs at any time |
| X | WRDialer | WrDialer.exe | WinPoet DSL dialler |
| ? | WRECK GUARD | ?? | ?? |
| ? | WregBios | wregbios.exe | Desktop Management BIOS (DMI BIOS) related. Apparently invokes the DosBios.exe file. Is it required? |
| U | wrexec | wrexec.exe | Watch Right - monitoring program, part of the PowerTools add-on for AOL. Records instant messages, E-mail, chat. Watch Right appears to be, and functions as an online clock updater which connects with the U.S. National Institute of Standards and Technology. It was designed for parents who wish to keep an eye on what their children are doing online |
| ? | wriste | wriste.exe | ?? |
| X | ws2help | ws2help.exe | Added by a variant of the SMALL.AN TROJAN! |
| X | WSAConfiguration | wmon32.exe | Added by the GAOBOT.BAJ WORM! |
| X | WSAConfiguration | svchostt.exe | Added by the AGOBOT.ZT WORM! |
| X | WSAConfiguration | rpcxmn32.exe | Added by the AGOBOT.ABG WORM! |
| X | WSAConfiguration | win32upd.exe | Added by a variant of the RBOT WORM! |
| X | WSAConfiguration1 | csass.exe | Added by the AGOBOT.WH WORM! |
| ? | wsbklite | wsbklite.exe | Related to the Acer Soft Button on Acer Tablet PCs. Appears to do nothing so is it required? |
| U | WScheduler | WScheduler.exe | Windows Scheduler - "schedule unattended running of applications, batch files, scripts and much more. Also, you can schedule popup reminders so you'll never forget reminders, tasks and other events." |
| X | wscript.exe | vabian.vbs | Added by the VABI VIRUS! |
| X | Wsdata service | WSconf.exe | Added by the SDBOT.ZU WORM! |
| X | wserver | wserver.exe | Added by the NETSKY.AC or SASSER.G WORMS! |
| U | WService | WService.exe | Tablet client Driver for UC-Logic Pen/Graphics Tablet |
| X | WSSAConfiguration | wmmon32.exe | Added by the AGOBOT-KC WORM! |
| X | Wstat32 driver | Wstat32.exe | Added by the LOONBOT TROJAN! |
| Y | wstimeb | wstimeb.exe | Used with NEC printers. You can disable it before printing but it re-loads itself when printing so you may as well leave it |
| Y | wswpd | wswpd.exe | Used with some models of Panasonic, Epson and NEC printers. Some older drivers known to have a "memory leak". Needed for printing to work |
| N | WT Game Channel | GameChannel.exe | WildTangent GameChannel - notification of new games, quick access to games and fast and easy game downloads. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | WT Game Channel | wtgamechannel.exe | WildTangent GameChannel - notification of new games, quick access to games and fast and easy game downloads. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | WT GameChannel | GameChannel.exe | WildTangent GameChannel - notification of new games, quick access to games and fast and easy game downloads. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | WT GameChannel | wtgamechannel.exe | WildTangent GameChannel - notification of new games, quick access to games and fast and easy game downloads. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| U | WTIndicator | SchedInd.exe | WinTask - software that automates a variety of routine tasks quickly and simply |
| X | WTSI | wapisvit.exe | PurityScan/Clickspring adware |
| X | WTSS | wap***.exe [* = random char] | PurityScan/Clickspring adware |
| X | WTST | wapisvtr.exe | PurityScan/Clickspring adware |
| Y | WUOLService | WUOLService9x.exe | Remote wakeup status agent. Part of Novell's ZenWorks. Processes Wake-up on LAN requests (turn on a computer remotely on LAN) |
| X | WUPD | iglmtray.exe | Added by the TZET WORM! |