| Name | Status | Filename | Description |
|---|
| Orb | U | OrbTray.exe | Related to Orb_Tray from InstallShield Software Corporation now owned by Macrovision. Note: Located in C:\Documents and Settings\Owner\My Documents\Orb\bin\ |
| Olympic | X | IE4321.exe | Adult content premium rate dialer - also detected as Trojan.Win32.Small.CZ |
| Openwares LiveUpdate | U | LiveUpdate.exe | Web-update utility as used by various types of software - see here |
| Office Monitor | X | adv32.exe | Added by the W32/Sdbot-CWO WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| OsdMaestro | U | OSD.exe | By Netropa for HP and other brands. Same group as KBD MediaCenter & Touch Manager. Pressing a "hot key" on such a keyboard brings a corresponding panel on the screen for volume, etc. Nice but not required if you don\'t adjust things regularly - can also freeze Note: Located in \%Program Files%\Hewlett-Packard\On-Screen OSD Indicator\ |
| outpostupdate | X | outpostupdate.exe | Added by the Troj/Cosiam-C
TROJAN!
|
| OPTMOUSEMOUSE | U | optmouse.exe | Related to Samsung Optical Mouse. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Oil Change | N | OCTray32.exe | From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs |
| OFFICEXP | X | OFFICEXP.exe | Added by the WOOTBOT.HE WORM! |
| OODefragTray | U | oodtray.exe | Related to O&O_Defrag Software. Note: Located in \%WINDIR%\System32\ |
| OEM07Mon.exe | U | OEM07Mon.exe | Related to Live_Camera Console Auto Launcher by Creative Technology LTD. Note: located in \%WINDIR%\ |
| OM_Monitor | U | MONITOR.EXE | Related to Olympus_Imaging America Inc. OLYMPUS Master combines an easy-to-use interface with the latest digital imaging tools |
| Outwar | X | syslaunch.exe | Outwar adware downloader |
| Office Startup | N | Osa.exe, Osa9.exe | Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required - Note: if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show. |
| OWCWebCamDV | U | wcdvtray.exe | WebCamDV from Orange Micro, Inc - enables the user to use a DV camera connected via Firewire as a Webcam |
| OWCCardbusTray | U | ocbtray.exe | Icon in the system tray for safely removing PCMCIA cards. Only required if you have a laptop or desktop which includes a PCMCIA card interface |
| org5.exe | ? | org5.exe | Lotus Organizer 5 application file, Lotus Organizer software. What does it do and is it required? |
| OfficeAgent | X | expIorer.exe | Added by the WIN32.TACTSLAY.A TROJAN! |
| OLPSYNCH | U | OlpSynch.exe | Related to Offline_Course_Player from Element K Corp. Provider of the Technology, Compliance, Management and Business training content for effective programs. Note: Located in \%Program Files%\Offline Course Player\ |
| obsver | ? | obsver.exe | Part of LingoWare translating software - what does it do and is it required? |
| Open2Enter | X | runme.exe | Adult Content Dialler |
| Object Store Server | Y | osserver.exe | Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up." |
| Office Monitor | X | nvsvc86.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| OSSelectorReinstall | U | oss_reinstall.exe | Related to Acronis_Disk_Director Suite. It brings together the most popular disk management functions, partition recovery tool, and boot disk manager. Note: Located in \%Program Files%\Common Files\Acronis\Acronis Disk Director\ |
| Opware15 | N | Opware15.exe | OmniPage from Nuance (was Scansoft) - version 14. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs
|
| OnScreenDisplay | U | HPKBDAPP.exe | Related to HP_QuickTouch This software provides on-screen visuals and associated sounds that are displayed and heard when adjusting the notebook volume. Note: Located in \%Program Files%\Hewlett-Packard\HP QuickTouch\ |
| ORiNOCO | U | Cmluc.exe | Client Manager software for an ORiNOCO wireless LAN card |
| Offices Monitors | X | [path to worm] | Added by the RBOT-GKO WORM!
|
| OSD | X | ALG.exe | Added by the StartPage-ID TROJAN! - NOTE: this file is located in the WINDOWS\msagent\intl folder! |
| OfficeScanNT Monitor | Y | pccntmon.exe | Trend Micro OfficeScan Antivirus real-time scan monitor |
| Office Mail Alerter | U | om_Alerter.exe | Related to Mail_Alerter for Office Mail. Alert of new mail with an icon on the system tray |
| Outlook Mail Services | X | express.exe | Added by the RBOT.CJN or W32/RBOT-ATJ or W32/SDBOT-AEM WORM! |
| Offices Monitorse | X | (random name) | W32/Gosbot-Fam Read the link, allows remote access |
| OWMngr | X | OWMngr.exe | OnWebMedia/SearchSeekFind advertising foistware |
| OKMaster | X | OKMaster.exe | OKToolbar adware component |
| OSS | X | ossproxy.exe | NetSetter/Marketscore foistware |
| OKI LPR Utility | U | okilpr.exe | OKI printer utility |
| Office SturtUp | X | osa9.exe | Added by the Troj/Clicker-EC TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note Do not confuse this file with the Microsoft office program, located in C:\Program Files\Microsoft Office\... |
| olehelp | X | olehelp.exe | Added by the BOOKMARKER.D or BOOKMARKER.G hijacker/viruses |
| Offices Monitorse | X | [path to worm] | Added by the RBOT-GKO WORM!
|
| Office Mail | U | off_mail.exe | Related to Office_Mail Client E-mail service from Burrotech Ltd. |
| oadaemon | ? | oadaemon.exe | Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually? |
| Onlune Sarvice | X | sachost.exe | Added by the TROJ/DAEMONI-J TROJAN! |
| OVCJ | ? | ovcj.exe | ?? |
| OSS | X | rk.exe | RelevantKnowledge, NetSetter/Marketscore foistware variant |
| OnlinePCfix SmoothSurfer | U | SS.exe | Smooth-Surfer - blocks banners, ads, popups, and cleans MRU and Recent file lists |
| oddworldz.exe | X | oddworldz.exe | Added by the Troj/Multidr-EG
TROJAN!
|
| OPQFile | X | regedit.exe /s,...rad03FA6.tmp | Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit |
| opr | X | opr.exe | MediaMotor/Popuppers adware component |
| Operator | N | ?? | Media Pilot operator, in Win.ini. Locks port open |
| oe_drop_spam | X | oesrv.exe | Added by DropSpam ADAWARE! Note: located in C:\Program Files\DropSpam\ |
| oahstifr | Y | oahstifr.exe | Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up." |
| OLE | X | (filename) | Added by the STAWIN or TARNO.D VIRUSES! |
| office_update | X | (Pathname of,the Trojan exe) | Added by the Troj/Dloader-ZB
TROJAN!
|
| Operations Typhoon Rising Registration | N | NOVG.EXE | Joint_Operations registration reminder |
