| Name | Status | Filename | Description |
|---|
| Age of Empires III: The WarChiefs | X | ageofempires.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\dllcache\ (Win9x/Me), C:\%WINDIR%\dllcache\ (XP/WinNT/2K) |
| Agente de directivas IPSEC | L | lsass.exe | Spanish Windows 2000 IPSEC policy agent |
| Agere Modem Call Progress Audio (AgereModemAudio) | L | agrsmsvc.exe | Related to Agere_Modem Call Progress Audio. (Now owned by LSI Corp.) Note: Located in C:\Windows\system32\ |
| Agere Service (AgrSrvce) | L | AgrSrvce.exe | Related to Proxim_Corp Client manager software associated with the ORiNOCO wireless LAN card. |
| AhnLab Task Scheduler | L | Ahnsdsv.exe | Related to AhnLab Task Scheduler from AhnLab, Inc. Note: Located in \%Program Files%\AhnLab\Smart Update Utility\ |
| AIM (AIM) | X | aim.exe | Added by the W32/Rbot-AGC
or W32/Sdbot-BFX
WORM!
Read the link, rootkit type stealth involved.
|
| Aim Version 6 (Aimv6) | X | aim6.exe | Identified as the Rbot.cgu infection. This infection is part of the family of worms and IRC backdoors. Note: This worm is located in C:\WINDOWS\Cursors\ |
| aim.ex | X | IEXPLORER.EXE | Added by the SDBOT.COW
WORM!
Read the link, rootkit type stealth involved.
|
| Airgo Networks NIC Service (ANISERVICE) | L | aniServ.exe | Related to Airgo_Networks NIC Service Note: Located in \%WINDIR%\System32\ |
| ALaunch Service (ALaunchService) | L | ALaunchSvc.exe | Found on Acer laptops. Note: Located in \%ROOT%\Acer\ALaunch\ |
| Alerter | L | svchost.exe | Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. |
| AlfaCleanerService | X | ACServer.exe | AlfaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware. This program tends to be installed with other known Smitfraud infections. |
| ALGE | X | Hacker.com.cn.exe | Troj/GrayBr-CP Read the link, allows remote access |
| algs | X | algs.exe | Added by the W32.Linkbot.M Note: Located in \%WINDIR%\System32\ |
| Almacenamiento protegido | L | services.exe | Spanish Windows 2000 protected storage |
| Altera JTAG Server (JTAGServer) | L | JTAGServer.exe | Related to Altera Quartus II Software. Note: Located in C:\altera\quartus50\bin\ |
| Alternative User Input Services (Ctfmon) | X | ctfmon.exe | Added by the W32/Tilebot-JR WORM! Note: This worm is located in C:\%WINDIR%\ Note This is not the cftmon.exe normally found in C:\WINDOWS\System32\ |
| Altiris Agent (AeXNSClient) | L | AeXNSAgent.exe | Related to Alteris services. http://www.altiris.com |
| Altiris Carbon Copy (CarbonCopy32) | L | ccsrvc.exe | Related to Alteris services. http://www.altiris.com |
| Altiris Client Service (AClient) | L | ACLIENT.exe | Related to Altiris, Inc. |
| Altiris eXpress NS Client (AeXNSClient) | L | AeXNSClient.exe | Related to Altiris_eXpress NS Database and SVS (Software Virtualization Services). |
Altiris eXpress NS Client Transport
(AeXNSClientTransport) | L | AeXNSClientTransport.exe | Related to Altiris_eXpress NS Database and SVS (Software Virtualization Services). |
| Aluria Message Service (MsgSrvService) | L | AluriaMsgSrv.exe | Aluria security center |
Aluria Security Center Spyware Eliminator Service
(ASCService) | X | ascserv.exe | Aluria Spyware Eliminator "Spyware remover" a rogue program of dubious repute - for more information, search the Spywarewarrior_List of non-Recommended anti parasite sites/software for "Alura" |
| Aluria Spyware Eliminator Service | O | ASEServ.exe | Aluria Spyware Eliminator |
| AL_ADSService | X | AL_ADSService.exe | Aluria Spyware Eliminator "Spyware remover" a rogue program of dubious repute - for more information, search the Spywarewarrior_List of non-Recommended anti parasite sites/software for "Alura" |
| Amadeus Automatic Update | L | AutoUpdate.exe | Related to Amadeus powerful front office travel management tool. Note: Located in C:\Program Files\Automatic Update\ |
| Amazon Unbox Video Service (ADVService) | L | ADVWindowsClientService.exe | Related to Amazon_Unbox_Video_Service Note: Located in \%Program Files%\Amazon\Amazon Unbox Video\ |
| Amazon Unbox Video Service (ia8yaepyjabon) | X | vwevpugztu.exe | Added by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename. |
| AMD PowerNow! . Technology Service (GemServ) | L | GemServ.exe | Related to Advanced Micro Devices, Inc. - http://www.amd.com/ |
| Ampi32 (wdfmgr) | X | msvcrt.exe | Added by the W32/Tilebot-Q
WORM!
Note: This worm file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| Analysis Server (MSSQLSERVER) (MSSQLServerOLAPService) | L | msmdsrv.exe | Related to Microsoft_SQL_server
suite.
|
| Andrea ADI Filters Service (AEADIFilters) | L | AEADISRV.EXE | Related to Andrea_ADI Filters Service from Andrea Electronics Corp. Note: Located in \%WINDIR%\system32\ |
| Andrea RT Filters Service (AERTFilters) | L | AERTSrv.exe | Related to Andrea_RT_Filters Service from Andrea Electronics Corp. Active Noise Cancellation Microphone Headsets. Note: Located in \%WINDIR%\System32\ |
| Andrea ST Filters Service (AESTFilters) | L | aestsrv.exe | Related to ST_Filters from Andrea Electronics Corp. Note: located in \%WINDIR%\system32\ |
| ANIWZCSd Service (ANIWZCSdService) | L | ANIWZCSdS.exe | Related to Alpha_Networks |
| Ansys JobManager Service V11 (JobManagerService110) | L | JobManagerService.exe | Related to Ansys_JobManager from ANSYS, Inc. Note: Located in \%Program Files%\ANSYS Inc\v110\RSM\bin\ |
| Ansys ScriptHost Service V11 (ScriptHostService110) | L | ScriptHostService.exe | Related to Ansys_ScriptHost from ANSYS, Inc. Note: Located in \%Program Files%\ANSYS Inc\v110\RSM\bin\ |
| AntiSpyUltra (Zonelaps) | X | vsmom.exe | Added by the W32/Tilebot-E
WORM!
Read the link, rootkit type stealth involved.
|
| AntiSpyware Scanning Engine (AntiSpywareSrv) | X | AntiSpyware.srv.exe | AntiSpywareApp - a Rogue Security Program |
| AntiVir PersonalEdition Classic Guard (AntiVirService) | L | avguard.exe | Part of Antivir |
AntiVir PersonalEdition Classic Scheduler
(AntiVirScheduler) | L | sched.exe | Related to AntiVir Premium Security Suite for the internet. Note: Located in \%Program Files%\AntiVir PersonalEdition Classic\ |
AntiVir PersonalEdition Classic Service
(AntiVirService) | L | avguard.exe | AntiVir antivirus |
| AntiVir Scheduler (AntiVirScheduler) | L | sched.exe | Related to AntiVir antivirus program. |
| AntiVir Service | L | AVGUARD.EXE | AntiVir antivirus |
| AntiVir Update | L | AVWUPSRV.EXE | AntiVir Antivirus |
| antivirus32 | X | antivirus32.exe | Added by an unidentified TROJAN! Note: of the Win32/Rbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| antivirusdll | X | winmsgslive.exe | Added by the W32/Sdbot-CXQ WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Modifies some FTP files, read the link |
| ANTS Profiler service | L | RedGate.Profiler.Service.exe | Related to Red Gate Software Ltd |
| AnyClick Service (AnySVC) | L | AnySVC.exe | Related to Network_Access_Control from UNETsystem Co. Program that controls the internal clients’ access to networks through high-level authentication and policy enforcement in order to prevent the spread of viruses and worms. Note: Located in \%Program Files%\Unetsystem\AnyClick\ |
