| Name | Status | Filename | Description |
|---|
| QuickBooksDB | L | QBDBMgrN.exe | Related to QuickBooks_Database from Intuit, Inc. Note: Located in C:\Program Files\Intuit\QUICKB~1\ |
| QuickBooksDB17 | L | QBDBMgrN.exe | Related to QuickBooks_Database from Intuit, Inc. Note: Located in \%Program Files%\Intuit\QuickBooks\ |
| QuickBooksDB18 | L | QBDBMgrN.exe | Related to QuickBooks_Database from Intuit, Inc. Note: Located in \%Program Files%\Intuit\QuickBooks\ |
| QuickPlay Background Capture Service (QBCS) (QPCapSvc) | L | QPCapSvc.exe | Related to QuickPlay_Background_Capture service found on HP computers. Note: Located in \%Program Files%\\HP\QuickPlay\Kernel\TV\ |
| QuickPlay Task Scheduler (QTS) (QPSched) | L | QPSched.exe | Related to QuickPlay Task Scheduler found on HP computers. Note: Located in \%Program Files%\\HP\QuickPlay\Kernel\TV\ |
| QuickTime | X | QuickTime.exe | W32/SdBot-DGS Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) Allows others to access the computer |
| Qwik-Fix (qfcoresvc) | L | qfloadsvc.exe | Related to preEmpt
Active System Hardening. Made by PivX Solutions, Inc. This file should be found in the Program Files\PivX\PreEmpt folder. |
| R2d2 Kernel Authority | L | KAuthS.exe | Related to R2D2 Software, a Windows service that manages desktops and programs. Without it, no desktops, no virtual screen, no remote access, no user impersonation, ... If you stop this service, all desktops (except the default one) are destroyed. Virtual Desktop Toolbox is no more than a client application of R2d2 Kernel Authority |
| RA Server | X | Slave.exe | Backdoor.RA virus http://www.avp.ch/avpve/trojan/backdoor/ra.stm
Better alternatives are PC Anywhere or VNC |
| RA Server (Slave) | L | Slave.exe | Related to RA_Server from TWD Industries. allows remote desktop administration over a TCP/IP network. Note: Located in C:\%WINDIR%\ |
| Rabo Comm Server | L | RaboCommSrv.exe | Related to the Rabobank, telebanking (Netherlands) |
| Radan Licence Server | L | radlicence2.exe | Radan Sheet Metal CADCAM Software |
| RadClock | L | RadClock.exe | ATI/Radeon Video Card Setting Tweaking Utility |
| Radia Management Agent (rma) | L | nvdkit.exe | Related to Radia_Management Agent from Hewlett-Packard Development Co. Note Novadigm is now owned by HP. Note: Located in \%ROOT%\Novadigm\ManagementAgent\ |
| Radialpoint Service (FWS) | L | fws.exe | Related to RadialPoint |
| RadioSvr | L | RadioSvr.exe | HP support for managing wireless devices |
| raid (raid) | X | raid.sys | Added by the Troj/NtRootK-O
TROJAN!
Read the link, rootkit type stealth involved.
|
| random | X | (5 random letters and two numbers).sys | Troj/RKAgen-Fam
Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Ranger Log | L | Rangerlogservice.exe | Related to Silver_Bullet remotely monitors the health of check scanners, receipt printers and other devices. Note: Located in \%Program Files%\Silver Bullet Technology\Ranger\Tools\Log Service\ |
| RapApp | L | rapapp.exe | Black Ice Firewall related |
| RasAt (Remote Connection) | X | svchost.exe | Added by the Troj/Singu-AF TROJAN! |
| Rational ClearQuest Mail Service (MailService) | L | mailservice.exe | Related to IBM_Rational_ClearQuest |
| Rational Cred Manager (cccredmgr) | L | cccredmgr.exe | Related to IBM_Rational_ClearCase |
| Rational Lock Manager (LockMgr) | L | lockmgr.exe | Related to IBM_Rational_ClearCase |
| Rational Test Agent Service (RationalTestAgentService) | L | rtpsvc.exe | Related to IBM_Rational_Software Development Platform |
| RaySat85 Server (RaySat85Server) | L | raysat85server.exe | Related to mental_ray Standalone from Autodesk. A high-performance rendering engine for generating photorealistic images. Note: Located in \%Program Files%\Autodesk\mentalraysatellite8.5\bin\ |
| RaySatxsi4_2 Server (RaySatxsi4_2Server) | L | raysatxsi4_2server.exe | Related to SOFTIMAGE_XSI server from Softimage. Advanced 3D animation software for games, film and television. Note: Located in \%ROOT%\Softimage\XSI_4.2\Application\bin\ |
| RaySat_3dsmax8 Server (mi-raysat_3dsmax8) | L | raysat_3dsmax8server.exe | Related to Autodesk® _3ds_Max |
| RdnaoFlSvc | L | naofsvc.exe | Related to Naomi an advanced internet filtering program. |
| rdriv (rdriv) | X | rdriv.sys | Added by the Troj/Rootkit-W
TROJAN!
Read the link, rootkit type stealth involved.
|
| ReaConverter scheduler service (rcp_service) | L | rcp_scheduler.exe | Related to ReaConverter image editing features make the Lite edition a perfect choice for home users. Note: Located in \%Program Files%\ReaConverter 5.0 Pro\ |
| Realplus (Realplus) | X | sserver.exe | Added by the Troj/Paltus-A
TROJAN!
Note: This trojan file is found in the System32 folder.
|
| Reflection Line Printer Daemon | L | lpdserv.exe | Related to http://www.wrq.com/ |
| Reflection Servers | L | rninetd.exe | Related to http://www.wrq.com/ |
| Reflection TimeSync | L | rtsserv.exe | Related to WRQ, Inc. http://www.wrq.com/products/reflection/ |
| regdefend | L | regdefend.sys | See Ghostsecurity
Location: C:\Program Files\RegDefend\regdefend.sys
|
| Regedits Helpers (Windows Regedits Help) | X | iesetup.exe | Troj/Hupigon-KX Note: Located in %windir%\help |
| Regedits Helps (Windows Regedit Helps) | X | iesetup.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\iis] (Win9x/Me), C:\%WINDIR%\System32\iis\ (XP/WinNT/2K) More here |
| Register DLL Driver | X | regdll.exe | Added by the W32/Sdbot-CXB WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| Register Manager | X | regent.exe | Added by the W32/Sdbot-DFJ WORM! Note: This worm is located in \%WINDIR%\ Read the link, allows remote access. |
| Registration Host (reghost) | X | reghost.exe | Added by the W32/Rbot-GKS WORM! Note: This worm is located in C:\Program Files\Common Files\System\ |
| Registro de sucesos (Eventlog) | L | services.exe | Spanish Windows 2000 event logger |
| Registros y alertas de rendimiento (SysmonLog) | L | smlogsvc.exe | Spanish Windows 2000 performance logs and alerts |
| Registry Editor (Regedit) | X | regedit.exe | Added by the W32/Codbot-U
TROJAN!
Note: This is not the regedit application that comes with Windows. (Which is located in the Windows folder) This trojan file is located in the System or System32 folder. |
| Registry Management Service (RegManServ) | L | RegManServ.exe | Related to Complete_PC_Care from WinCleaner. Note: Located in C:\Program Files\Advanced Registry Doctor\ |
| Registry Manager Service (MS Registry Service) | X | MSRMS32.exe | Added by the W32/Rbot-AKP
WORM!
|
| RegService | L | RegService.exe | Related to Intel Corp. http://www.intel.com/network/connectivity/trans/xircom.htm |
| RegSrvc | L | RegSrvc.exe | Intel PROset |
| regstrmon | X | regstrmon.exe | AddeD by the WORM_RBOT.ADA WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| RelevantKnowledge | X | rlservice.exe | Added by the Marketscore.RelevantKnowledge ADWARE! Note: Located in \%WINDIR%\System32\ |
