| Name | Status | Filename | Description |
|---|
| O&O CleverCache Agent (OOCleverCacheAgent) | L | ooccag.exe | Related to O&O_Software Products. Located in folder: \OO Software\CleverCache\ |
| O&O ComponentInstaller Agent | L | oocinst.exe | Related to O&O software Protection Software |
| O&O Defrag | L | oodag.exe | www.oo-software.com |
| O&O Defrag 2000 (OOD2000) | L | OOD2000.exe | Part of O&O Defrag |
O23 - Service: AOL Anti-Spyware Service
(AOL_SpywareServ) | X | aolspy.exe | Added by a variant of the Backdoor.Win32.Rbot.cgu TROJAN! Note: This worm\trojan is located in C:\WINDOWS\web\ |
O23 - Service: OradevReports [localrepserver]
(OracleReportServer-localrepserver) | L | rwserver.exe | Related to Oracle products |
| O2Micro Flash Memory (O2Flash) | L | o2flash.exe | Related to O2Micro_Flash Memory Card. Note: Located in C:\WINDOWS\system32\ |
Odyssey Client for Fujitsu Siemens Computers
(odClientService) | L | odClientService.exe | Related to Odyssey_Client for Fujitsu Siemens Computers. Note: Located in C:\Program\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\ |
| OESH (Office Source Engine Help) | X | Program.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C: folder. |
Office Server Extensions Notification Service
(OWSTimer) | L | OWSTIMER.EXE | Related to Microsoft_SharePoint Note: Located in C:\Program Files\icrosoft Office\Office\ Files\ |
| Office Source Engine (ose) | L | OSE.EXE | Microsoft Office Source Engine |
| OfficeScan NT Listener (tmlisten) | L | tmlisten.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScan NT Proxy Service (TmProxy) | L | tmproxy.exe | Related to Trend Micro Inc. |
| OfficeScanNT Listener (tmlisten) | L | tmlisten.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScanNT Personal Firewall (OfcPfwSvc) | L | OfcPfwSvc.exe | Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OfficeScanNT RealTime Scan (ntrtscan) | L | ntrtscan.exe | l
Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\ |
| OlCamSrv | L | OlCamSrv.exe | Related to: Olympus_America Inc. Imaging services |
| OM Common Services (omsad) | L | omsad32.exe | Related to Dell Open Management system. |
| Omni-NFS Server | L | nfsd.exe | Related to Omni-NFS Server from XLink Technology. Note: Located in \%ROOT%\OmniX\ |
| OmniForm Printer | L | ofps.exe | Related to Nuance_Communications Inc., (Peviously Scansoft Inc.) A leading supplier of imaging, speech and language solutions |
| OmniFormat from Pdf995 | L | ntservice.exe | Related to OmniFormat from Software995 allows dynamic conversion and image manipulation of over 75 file formats. Note: Located in C:\Program Files\omniformat\ |
| Omniquad MyPrivacy | L | mpsvc.exe | Related to Omniquad Security's MyPrivacy
Internet tracks cleaning tool. |
| On Screen Display (TPHKSVC) | L | TPHKSVC.exe | Related to On_Screen_Display on LENOVO ThinkPad computers. Note: Located in \%Program Files%\LENOVO\HOTKEY\ |
| ONC/RPC Portmapper (portmapper) | L | PORTMAP.EXE | Related to Bell_and_Howell |
| OneStep Search Service | X | onestep.exe | OneStepSearch or OneStep_Search |
| OneTouch 4.0 Monitor | L | OtService.exe | Related to OneTouch monitor from Visioneer Inc. OneTouch is an easy-to-use utility that connects the buttons on your Visioneer or Xerox scanner with a powerful set of scanner settings so that with one touch. Note: Located in \%Program Files%\Visioneer\OneTouch 4.0\ |
| Online Armor (SvcOnlineArmor) | L | oasrv.exe | Related to Online_Armor from Tall Emu. Personal Firewall. Note: Located in \%Program Files%\Tall Emu\Online Armor\ |
| Online Backup Service | L | nts.exe | Related to Online_Backup_Service From Acpana Business Systems. Note: Located in C:\Program Files\Acpana Business Systems\Data Deposit Box\ |
| OpcEnum | L | OpcEnum.exe | OPC_Foundation Sets Industry standards in Interoperability of Automation. |
| Open GL Drivers | X | openGLD.exe | Added by the SDBOT.CLW
WORM!
Read the link, rootkit type stealth involved.
|
| OpenAFS Client Service (TransarcAFSDaemon) | L | afsd_service.exe | OpenAFS is a distributed filesystem product, pioneered at Carnegie Mellon University |
| OpenCASE Media Agent | L | MediaAgent.exe | Related to OpenCASE Media Agent from ExtendMedia, Corp. Note: Located in \%Program Files%\OpenCASE\OpenCASE Media Agent\ |
| openSSL | X | openSSL32.exe | Added by the W32/Spybot-MY WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| OpenVPN Service (OpenVPNService) | L | openvpnserv.exe | Belongs to Open VPN that seems to be a Linux VPM program that runs under Windows. File found in the C:\Program Files\OpenVPN\bin\openvpnserv.exe folder. |
| Oracle Connector Automatic Updates Service (ocautoupds) | L | ocautoupds.exe | Related to Related to Oracle products. MS Outlook Connector. Note: Located in \%Program Files%\Oracle\Outlook Connector\ |
Oracle Forms Server [Forms60Server-OraForm]
(OracleFormsServer-Forms60Server-OraForm) | L | ifsrv60.exe | Related to Oracle Corp. Forms server. |
| Oracle OLAP 9.0.1.0.1 (OLAPServer) | L | xsolap.exe | Related to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:\oracle\ora90\bin\ |
| Oracle OLAP Agent | L | xsaagent.exe | Related to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:\oracle\ora90\bin\ |
| Oracle Reports Server [Rep60_PDB-LAPTOP-OraDevHome] | L | rwmts60.exe | Related to Oracle products |
| Oracle WebDb Listener | L | wdblsnr.exe | Related to Oracle products |
| Oracle%ORACLE_HOME_SERVICE%ClientCache80 | L | ONRSD80.EXE | Related to Oracle Networking (Net8 Server Executable) |
| OracleAgent80 | L | DBSNMP.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\agentbin\ |
| OracleBIToolsHome2ClientCache | L | ONRSD.EXE | Related to Oracle products |
| OracleBIToolsHome3Agent | L | agntsrvc.exe | Related to Related to Oracle Corp. |
| OracleBIToolsHome3ClientCache | L | ONRSD.EXE | Related to Oracle products |
| OracleBIToolsHome3SNMPPeerEncapsulator | L | ENCSVC.EXE | Related to Oracle products. |
| OracleBIToolsHome3SNMPPeerMasterAgent | L | AGNTSVC.EXE | Related to Related to Oracle Corp |
| OracleBIToolsHome3TNSListener | L | TNSLSNR.exe | Related to Oracle products |
| OracleClientCache80 | L | ONRSD80.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleCMAdminService80 | L | CMADM80.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleCManService80 | L | CMGW80.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleDBConsoleorcl | L | nmesrvc.exe | Related to Oracle_DB_10g Database. Note: Located in C:\...\oracle\10g\bin\ User can install in own folder. |
| OracleExtprocAgent | L | EXTPROCT.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleformbuilderAgent | L | agntsrvc.exe | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\ |
| OracleformbuilderClientCache | L | ONRSD.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\ |
| OracleMTSRecoveryService | L | omtsreco.exe | Related to Oracle SQL database application |
| OracleNamesService80 | L | NAMES80.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| Oracleora92Agent | L | agntsrvc.exe | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| Oracleora92ClientCache | L | ONRSD.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| Oracleora92HTTPServer | L | apache.exe | Related to Oracle_Corp Note: Located in \%ROOT%\Apache\Apache\ |
| Oracleora92PagingServer | L | pagntsrv.exe | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| Oracleora92SNMPPeerEncapsulator | L | ENCSVC.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| Oracleora92SNMPPeerMasterAgent | L | AGNTSVC.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| Oracleora92TNSListener | L | TNSLSNR.exe | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| OracleOraDb10g_home1iSQL*Plus | L | isqlplussvc.exe | Related to Oracle_DB_10g Database.
Note: Located in C:\...\oracle\10g\bin\ User can install in a folder of his choice. |
| OracleOraDb10g_home1TNSListener | L | TNSLSNR.exe | Related to Oracle products |
| OracleOraDevAgent | L | agntsrvc.exe | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\Oradev\bin\ |
| OracleOraDevClientCache | L | ONRSD.EXE | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\Oradev\BIN\ |
| OracleOraDevClientCache80 | L | ONRSD80.EXE | Related to Oracle products. Note: Located in \%ROOT%\oracle\oradev\BIN\ |
| Oracleorahome811CMAdmin | L | CMADMIN.EXE | Related to Related to Oracle Corp. Note: Located c:\oracle81\BIN\ |
| Oracleorahome811CMan | L | CMGW.EXE | Related to Related to Oracle Corp. Note: Located c:\oracle81\BIN\ |
| OracleOraHome81ClientCache | L | ONRSD.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\ora81\bin\ |
| OracleOraHome90Agent | L | agntsrvc.exe | Related to Oracle Intelligent Agent, used to run on a remote node in the network to make the node OEM manageable. For more information Click_Here
|
| OracleOraHome92Agent | L | agntsrvc.exe | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\ |
| OracleOraHome92ClientCache | L | ONRSD.EXE | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\ |
| OracleOraHome92HTTPServer | L | apache.exe | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\Apache\Apache\ |
| OracleOraHome92PagingServer | L | pagntsrv.exe | Related to Oracle products |
| OracleOraHome92SNMPPeerEncapsulator | L | ENCSVC.EXE | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\ |
| OracleOraHome92SNMPPeerMasterAgent | L | AGNTSVC.EXE | Related to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\ |
| OracleOraHome92TNSListener | L | TNSLSNR.exe | Related to Oracle products |
| OracleOraHome9iClientCache | L | ONRSD.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle9i\BIN\ |
| OracleOraHomeAgent | L | dbsnmp.exe | Related to Oracle products |
| OracleOraHomeClientCache | L | ONRSD.EXE | Related to Oracle products |
| OracleOraHomeDataGatherer | L | vppdc.exe | Related to Oracle products |
| OracleOraHomeHTTPServer | L | Apache.exe | Related to Oracle products |
| OracleOraHomeManagementServer | L | OMSNTsrv.exe | Related to Oracle products |
| OracleOraHomePagingServer | L | pagntsrv.exe | Related to Oracle products |
| OracleOraHomeTNSListener | L | TNSLSNR.exe | Related to Oracle products |
| Oracleorant1ClientCache80 | L | ONRSD80.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\orant1\BIN\ |
| OracleorantClientCache80 | L | ONRSD80.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\orant\BIN\ |
| OracleServiceEZ01 | L | ORACLE.EXE | Related to Oracle products |
| OracleServicekzgrd | L | ORACLE.EXE | Related to Oracle products |
| OracleServiceLOCALORA | L | ORACLE.EXE | Related to Oracle products |
| OracleServiceOR92 | L | ORACLE.EXE | Related to Oracle products |
| OracleServiceORA92 | L | ORACLE.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\ |
| OracleServiceORAC | L | ORACLE.EXE | Related to Oracle products |
| OracleServiceORCL | L | oracle80.exe | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleServicePORTABLE | L | ORACLE.EXE | Related to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\ |
| OracleServiceSECINST | L | ORACLE.EXE | Related to Oracle products |
| OracleSNMPPeerEncapsulator | L | ENCSVC.EXE | Related to Related to Oracle Corp. Note: Located c:\oracle81\BIN\ |
| OracleSNMPPeerMasterAgent | L | AGNTSVC.EXE | Related to Related to Oracle Corp. Note: Located c:\oracle81\BIN\ |
| OracleStartORCL | L | strtdb80.exe | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleTNSListener80 | L | TNSLSNR80.EXE | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleWebAssistant | L | OWASTsvr.exe | Related to Oracle products. Note: Located in \%ROOT%\orant\BIN\ |
| OracleXEClrAgent | L | OraClrAgnt.exe | Related to Related to Oracle products Note: Located in C:\oraclexe\app\oracle\product\10.2.0\server\bin\ |
| Oracle_Load_Balancer_60_Client-Forms6i | L | d2lc60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| Oracle_Load_Balancer_60_Client-Forms6ip14 | L | d2lc60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| Oracle_Load_Balancer_60_Client-Forms6ip9 | L | d2lc60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| Oracle_Load_Balancer_60_Server-Forms6i | L | d2ls60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| Oracle_Load_Balancer_60_Server-Forms6ip14 | L | d2ls60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| Oracle_Load_Balancer_60_Server-Forms6ip9 | L | d2ls60.exe | Related to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\ |
| ORAN | X | ORAN.SYS | Added by the TROJ_ROOTKIT.N
TROJAN!
Read the link, rootkit type stealth involved.
|
| orans (orans) | X | orans.sys | Added by the Troj/Rootkit-AA
TROJAN!
Read the link, rootkit type stealth involved.
|
| Orbix Daemon | L | ORBIXDS.EXE | Related to Orbix the current release of IONA's enterprise CORBA product. Note: Located in \%ROOT%\IONA\ORBIX_2.3C\BIN\ |
| OrbMediaService | L | OrbMediaService.exe | Owner:Orb Networks |
| ORBPVR | L | OrbPVR.exe | Owner: Unkown , http://www.orb.com/ |
| oreans32 | X | oreans32.sys | Troj/Agent-FYE
Read the link, allows remote access |
| oreans32 | X | oreans32.sys | W32/WoWMovs-A
Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) |
| OSCM Utility Service | L | OSCMUtilityService.exe | Related to Novatel Wireless Service from Sprint phones and connectivity cards. Note: Located in C: \Program Files\Novatel Wireless\Sprint\ |
| OSdebug (Microsoft Regulator) | X | msoevc.exe | Added by the W32/Tilebot-CV WORM! Note: located in \%WINDIR%\ |
| OTi Card Reader Service | L | OTiReader.exe | OTI_Globals
contact/contactless smart card reader.
Location: Program Files\CardReader2.0 folder. |
| Outpost Firewall Service (OutpostFirewall) | L | outpost.exe | Agnitum Outpost firewall service |
| OvEpStatusEngine | L | OvEpStatusEngine.exe | HP OpenView Status Engine |
| OvMsmAccessManager | L | OvMsmAccessManager.exe | HP OpenView Access Manager |
| OvSecurityServer | L | OvSecurityServer.exe | HP OpenView Security Server |
| OwnershipProtocol | L | OProtSvc.exe | Related to PROSet Wireless Software from Intel |
