| Name | Status | Filename | Description |
|---|
| eBayToolbar | U | eBayTBDaemon.exe | eBay toolabar related - also contains eBay account Guard which monitors for fraudulent eBay sites. |
| emoc0re | X | emo.exe | Added by the W32/AGOBOT-AGE WORM! |
| ECenter | U | gtb.exe | Related to Google's_Toolbar installed on Dell's computer. Note: Located in \%ROOT%\dell\E-Center\ |
| Explorer soft | X | explorer.pif | Added by the W32/Rbot-APK
WORM!
Note: This worm\trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| EPSON Stylus CX8400 Series | U | E_FATICEA.EXE | Related to Epson Status Monitor for Stylus CX8400 Series. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| element furth | X | [path],repcale.exe,[path],palsp.exe | Added by a variant of the RANDON.AN WORM! |
| EPSON Stylus CX7800 Series | U | E_FATIAFA.EXE | Related to Epson Stylus CX7800 Series printer. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| Elbycheck | U | ElbyCheck.exe | From Elaborate Bytes who make CloneCD - monitors the installed filters of CD-ROMs/DVD-ROMs. Note - under Win2K removing this from startup causes the CD drive in the computer to not be recognized in the OS and after rechecking it prompts that the driver has been corrupted and asks you to restart the computer to fix it |
| EPSON Stylus Photo R2400 | U | E_FATI9SA.EXE | Related to Epson Status Monitor for Photo R2400 Series. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| EM_EXEC | U | EM_EXEC.EXE | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| EZ-DUB Finder | U | EZ-DUB.exe | Related to EZ-DUB from Lite-On IT Corporation. Optical disk and file backup. Note: Located in \%Program Files%\EZ-DUB\ |
| EPSON Stylus CX9400Fax Series | U | E_FATICFA.EXE | Related to Epson Status Monitor for Stylus CX9400Fax Series. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| Eraser | U | eraser.exe,-hide | Eraser allows for complete removal of data from your hard drive |
| EFI Hot Folders | U | hffw.exe | Related to EFI Production Printing Solutions from Imaging inc. Note: Located in \%Program Files%\FIERY\HotFolder\ |
| enhance32 | X | enhance32.exe | Added by a CRYPTER.A trojan infection
|
| exgiwsl | ? | exgiwsl.exe | ?? |
| explorer.exe | X | explorer.exe | Added by the Troj/Agent-EW or Troj/PWS-CY TROJAN! Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. Also, do not confuse this with the valid "explorer.exe" which is located in C:\Windows or C:\Winnt. |
| ExtraDNS | U | ExtraDNS.exe | ExtraDNS - DNS configuration tool |
| EZNORUN | ? | EZNORUN.EXE | Easy Internet related? |
| eros.exe | X | eros.exe | Adult content dailler |
| eSnips | U | ClientGW.exe | eSnips Client Gateway from eSnips |
| EPSON Stylus Photo R800 | U | E_FATI9YE.EXE | Related to Epson Stylus Photo RX800 Series printer. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| EanthologyApp | N | eanthology.exe | eAcceleration Stop-Sign related; not recommended; see note |
| Enh Win Updt | X | enhupdt.exe | Adware downloader - recognized by Kaspersky antivirus as Trojan-Downloader.Win32.OneClickNetSearch.h |
| EXPLORER MICROSOFT SYSTEM | X | explore.exe | Added by a variant of the WIN32.RBOT WORM!
|
| EnergyPlugIn | X | EnergyPlugin.exe | EnergyPlugin adware variant |
| EuroGlot | U | EuroGlot.exe | Euroglot - "multilanguage translating system, available in the languages Dutch, English, French, German, Spanish and Italian" |
| Entbloess 2 | U | Entbloess2.exe | Related to Window-Switcher (now Reflex Vision) - it allows you to see previews of all your open applications via a single keystroke in a manner similar to Apple's Exposé, for Windows 2K/XP
|
| eMCryT Sh3ars Panagers | X | (Path to worm,random,filename) | Added by the W32/Rbot-AWI
WORM!
Note: This worm\trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| EPSON Stylus Photo RX500 | U | E_S4I2K1.EXE | Related to Epson Stylus Photo RX500 Series printer. Note: located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| eMule | U | emule.exe | Related to eMule peer-to-peer file sharing clients around the world. Note: Located in \%Program Files%\eMule\ |
| EXPLORER | X | EXPL0RER.EXE | Added by the Troj/BeastDo-Y
TROJAN!
|
| easywww | X | easywww.exe, easywww2.exe, iewwwint.exe | EasyWWW adware |
| eBay Toolbar | X | EBAYTBAR.EXE | eBay Toolbar - reportes as spyware as it "phones home" |
| EngUtil | Y | EngUtil.exe | Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking |
| EPSON Stylus Photo R300 Series | U | E_S4I2F1.EXE | Epson Status Monitor - gets installed with many Epson printers and gives you a progress of your print jobs as they are printing. |
| EPSON Stylus D78 Series | U | E_FATIBGE.EXE | Related to EPSON_Stylus_D78_Series Printers. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| Explorer | X | CRSVS.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| Explorer | X | drv.exe | Added by the Troj/Small-FD
TROJAN!
Note: This trojan file is found in the System (95/98/Me) or System32 (Nt/2000/XP) folder. |
| explorer | X | explorer.exe | Added by the PWS.ZAYA TROJAN! - NOTE - the valid "explorer.exe" will always be located in C:\Windows or C:\Winnt whereas this one is installed in a C:\Windows\System\Service folder. Moreover, the valid explorer.exe will only figure among the startups if you intentionally placed it there! |
| ecpe | ? | ECPE.EXE | ?? |
| eZmmod | X | mmod.exe | eZula TopText Adware |
| Eapcisetup | N | sbsetup.exe | Rockwell RipTide soundcard application software. Sound works without it |
| Encoder Agent | N | WMENCAGT.EXE | MS Windows Media Encoder, which already has a shortcut in the Start Menu if installed |
| ETB Tester | X | etbtest.exe | Added by the W32/RBOT-ABR WORM! |
| ESSOLO | Y | ESSOLO.exe | Sound card driver that re-instates itself every time it's removed |
| EzEjMnAp | N | EzEjMnAp.exe | For IBM Thinkpad Notebooks. Quote: "The IBM ThinkPad EasyEject Utility makes removing multiple devices from your computer faster and easier by enabling you to stop more than one device at once, rather than stopping each device individually". Available via Start -> Programs |
| EPSON Status Monitor 3 Environment Check | N | e_srcv03.exe | According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check |
| Eptr | X | nopdb.exe | Added by a variant of the Troj/PurScan-BE TROJAN! Note: Located in C:\PROGRA~1\YMANTE~1\ This is not the same file as C:\Program Files\Speed Disk\nopdb.exe that belongs to Norton Speed Disk application. |
| erthgdr2 | X | svc23.exe | Added by the BAGLE.CG WORM! |
| ELNKProxy | X | smproxy.exe | Surfmonkey adware |
| EPSON Stylus Photo RX430 Series | U | E_FATI9CP.EXE | Related to Epson Stylus Photo RX430 Series printer. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| E-Card | X | ecard.exe | Added by the YODI VIRUS! |
| EPSON Stylus C86 Series | U | E_S4I2R1.EXE | Related to Epson Stylus CX4200 Series printer. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| EPSON Stylus C84 Series | U | E_S4I2D1.EXE | Related to Epson Status Monitor for Stylus C84 Series. Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
