| Name | Status | Filename | Description |
|---|
| ixplore | X | ixplore.exe | Added by an unidentified WORM or TROJAN! - NOTE: although this file is placed in the Internet Explorer folder in Program Files, it is most certainly malware, and not to be confused with the legitimate IE executable, which is spelled iExplore.exe! |
| idmlssp | X | rdlyulyz.exe | Added by a variant of the Proxy.Win32.Slaper TROJAN! Note: This trojan is located in C:\%WINDIR%\System32\ (XP/WinNT/2K) (random filename) |
| IExplorer32c Java Scripting | X | IExplore32cb.exe | Added by the RBOT.ABN WORM! |
| IBMUltraBayHotSwapCPLLoader | U | IBMBAY2N.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops |
| Interdll | X | Interdll.exe | Added by the DELF family of VIRUSES! |
| ISSI EZUpdate Service | N | issimsvc.exe | Related to Ibm_Global_Services Used internally by IBM for automatic updating of software and microsoft patching Note: Located in c:\sdwork\ |
| I/O Controllers | X | svcnet.exe | Added by the TROJ/TIBIK-B TROJAN! |
| IEAgent update check | X | iewatch.exe | Added by the Bomka
TROJAN!
|
| Information Update | X | iu.exe | Reported by Kaspersky Anti-Virus as Downloader.Win32.Centim.ch TROJAN!
Note: The Malware file associated with this is located in the Program Files\Information Update folder.
|
| IntelWireless | Y | ifrmewrk.exe | Associated with the Intel PRO/Set Wireless software.
|
| InterU | X | WINDRV.EXE | Added by the IRCINTER.A VIRUS! |
| IECheck | X | xpssl.exe | Added by the W32/TIRBOT-E WORM! |
| InCD | Y | incd.exe | Ahead_InCD
packet writing software. Similar to DirectCD. - For Nero 5.0 or 5.5 (InCD3), it does not need to start with Windows. You can run InCD.exe manually before inserting an appropriately formatted CD-RW (CD-MRW) disk. - For Nero 6.0, 6.3 or 6.6 (InCD4), it does need to start with Windows. It does not function correctly when you try to run it manually, and you will not have write access to MRW (Mount Rainier) formatted CD-RW (CD-MRW) or DVD-MRW disks. To regain write access and other features, InCD 4 must start with Windows. |
| InstantDrive | U | InstantDrive.exe | Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer’s hard drive. Part of InstantCD/DVD burning software |
| Internet Config | X | svchosts.exe | Added by the SDBOT WORM! |
| ifperx | X | schjsfxh.exe | Added by a variant of the Troj/Mailbot-BW Note: This worm\trojan is located in C:\WINDOWS\system32\ Read the link, allows remote access (random filename) used |
| Index Service | X | dllhost32.exe | Added by the AGOBOT.CH WORM! |
| ICQ = | X | ICQNET.vbs | Added by the VBS/Gormlez-A
Worm!
|
| internet service | X | ssvhost.exe | Added by a variant of the WIN32.RBOT WORM!
|
| IPC Spool Manager | X | winspec.exe | Added by the W32/SDBOT-BLU WORM! |
| ICQ Messenger 2002 | X | ICQ2002.exe | Added by the W32/Sdbot-ABL
WORM!
Note: This worm/trojan file is found in the System (95/98/Me) or System32 (Nt/2000/XP) folder.
|
| Init32 | X | Init32.exe | Added by the W32.WINEX.A TROJAN! |
| IECleanAux | U | Ieboot6.exe | IEClean by Kevin McAleavy - cookie manager, cache cleaner, history cleaner, etc. Performs cleaning tasks at startup |
| IST Service | X | istsvc.exe | ISTBar foistware |
| ICO | N | ICO.EXE | Found on a Sony Vaio laptop and seems to be related to Mouse Suite 98 Daemon according to the properties. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
| IEACCESS | X | temp532.exe | AsdPlug premium rate adult content dialer variant |
| iexplorer ml097e | X | iexplorer.exe | RapidBlaster Variant |
| ibin | X | (Pathname of,the Trojan,executable) | Added by the Troj/Perda-C
Trojan!
|
| ipsecdialer | U | IPSECD~1.EXE,-run_only_if_connected,-auto_initiation | The Cisco VPN_Client lets local users gain Administrator privileges on the operating system |
| iShield | U | iShield.exe | GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser |
| Incredimail | N | IncMail.exe | "IncrediMail" is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| Internat.exe | X | internat.exe | Added by the NETSNAKE
VIRUS! This malware file resides in the Windows or Winnt directory. Note: The genuine Microsoft internat.exe provides support for Microsoft multi-lingual features and resides in the System (w98,98se,ME) or System32 (NT,2000,XP) directory. |
| igamatu | X | atecaca.exe | Added by the IRCBOT.R WORM! |
| icq lite | X | winlog.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| InstallNAIProduct | ? | SETUP.EXE | Could be related to Network Associates Inc who own the McAfee VirusScan product amongst others. This was found in a directory called "VSC". Could it be an installation that failed and "SETUP.EXE" was left to run at startup as an error? |
| IEFeatures | X | IEFeatures.exeInternetfeatures.exe | Added by the POPMON.A VIRUS! - also known as PopMonster adware |
| ICSDCLT | U | rundll32.exe,Icsdclt.dll, ICSClient | Internet Connection Sharing allows more than one computer to simultaneously access the internet with a single connection. Also required when networking two machines |
| ICONDESK | U | ICONDESK.EXE | Small utility which will allow you the option of hiding or showing your desktop icons |
| Instant Access | X | rundll32.exe,EGDHTML_****.dll, InstantAccess | Electronic_Group/InstantAccess premium rate adult content dialer variant |
| isDeleteMe | U | isDel.bat | Used by Norton Internet Security to remove certain files and directories on reboot when uninstalling their product. |
| Incredimail | N | incredimail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| IPO3 | N | IP Operator,2005.exe | Related to IP_Operator_2005 found on LG Electronics Notebook. The applet makes network connections easier to view and manage than does the standard Windows Network Connections tool. The WLAN module is easy to turn on or off with the press of a single button. Note: Located in C:\Program Files\LG Software\IP Operator 2005\ |
| iTunesHelper | Y | iTunesHelper.exe | Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times - hence the reluctant Y recommendation |
| itunesff | X | itunesff.exe | Added by the Win32/Dialer.EB adult premium dialer. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| I&F Viewer toolbar | U | phototoolkitmem.exe | Related to Photo_Toolkit image editing tools. Note: Located in \%Program Files%\Photo Toolkit\ivbar\ |
| InstantPleasure | X | instantpleasure.exe | Adult content dialler |
| isxa | X | isxa.exe | Added by the TR/Dldr.iBill.AA TROJAN! |
| im_autorn | X | im_2.exe | Added by the Troj/BagleDl-BO TROJAN! |
| Intel Active Monitor | U | imontray.exe | System tray monitoring of fans, temperature, voltage, etc for Intel motherboards. Only needed if you "overclock" or live in hot environment. Can also cause problems when running on a laptop if you change PCMCIA cards |
| Intel(R) Common User Interface | U | igfxtray.exe | Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel
|
| IcaBar | Y | icabar.exe | Related to Citrix MetaFrame |
| IrMon | U | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| Intervideo WinScheduler | N | WinScheduler.exeSchSvr.exe | WinScheduler is installed with WinDVD Remote Control for WinDVD from Intervideo. If you want to schedule recordings from your TV tuner card, you will need it. Available via Start -> Programs |
| Internet Explore Microsoft | X | lEXPLORE.EXE | Added by the W32/RBOT-AOF WORM! - NOTE: the legitimate Internet Explorer executable of the same name will always be located in the Program Files\Internet Explorer folder, while this imposter is located in the System or System32 directory. |
| IE6 | X | ssmss.exe | Added by the W32.Gaobot.DXO
WORM!
Note: This trojan file ssmss.exe (Notice the extra s) is not the legitimate Windows Process. The legitimate Windows Process (smss.exe) should not be seen in Msconfig or as a Startup item.
|
