| Name | Status | Filename | Description |
|---|
| Zen.A | X | (path to,trojan) | Added by a Perl/Zoomen-A trojan infection |
| ZPOINT32 | Y | ZPOINT32.exe | USB graphics/writing tablet driver |
| Zenet | X | rundll32,CNBabe.dll, DllStartup | CommonName Toolbar spyware. To uninstall see here |
| zsmscc | X | zsmscc071001.dll | Added by a variant of the Trojan-Spy.Win32.Agent.adq malware! Note: Located in \%WINDIR%\System32\ |
| zsmss | X | smss.exe | Added by the Troj/Bancos-DD or Troj/Bandler-E TROJAN! Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) The legitimate Windows Process should not be seen in Msconfig or as a Startup item. This trojan file is found in the Windows or Winnt folder. Read the link, keylogger/password stealing trojan(s) involved. |
| ZipDisk Icons | U | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| Zonealarm | X | Removeme.exe | Added by the W32/FORBOT-BG WORM! |
| Zip Driver Loader | X | ZipLoader.exe | Added by the OBLIVION TROJAN! |
| Zonavirus | X | 0 | Added by the KITRO.D (or ARGEN.A) VIRUS! |
| zerzvpack2 | X | uzpdate2.exe | Added by a Rbot-KA worm infection |
| zzz-hpi-boot | ? | hpi-boot.exe | Associated with HP Photosmart printers |
| ZStart | X | [various file,names] | VX2.Transponder parasite updater/installer related |
| ZipGenius Clean | N | zg.exe | ZipGenius file compression utility |
| zzzhpsetup | ? | setup.exe | ?? |
| ZoneAlarm Pro | Y | Zapro.exe | Firewall program from Zonelabs - paid for version |
| zonealarm | X | mcmm.exe, random file,names | Added by an unknown worm or trojan infection |
| Zero PoPup Killer XP.lnk | U | zpk_xp.exe | Intelligent anti-pop-up software product by Ax-Soft
File is located in the Program Files\Zero PopUp Killer XP folder |
| Zonesoft Cleaner | X | rnsys.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Filename is random. |
| ZingSpooler | U | ZingSpooler.exe | Was used for a drag and drop program to upload pictures to www.zing.com but Zing has gone out of business. Now used for Sony ImageStation's upload photos to online albums |
| ZaCker | X | (filename).PIF | Added by the HOLAR.A VIRUS! where <filename> is the worm filename |
| ZipMagic | N | zm32.exe | Zip utility by Ontrack. Preloading ZipMagic allows you to access files within a zip archive without unzipping them first |
| zSearch | X | Zstb.exe | TotalVelocity zSearch parasite |
| z-WrDialer | U | WrDialer.exe | WinPoet DSL dialer |
| ZNN | X | znnsvc.exe | Added by the W32/Sdbot-DAA Spyware WORM! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) steal local personal information including passwords |
| zanu | X | zanu.exe | nCase Adware |
| ZENRC Tray Icon | Y | zentray.exe | Part of Novell's ZenWorks - "Complete End-to-End Directory-enabled Network Management".Best left alone |
| Zango TvTimes | X | ZANGOT~1.EXE | ZangoSearch adware
|
| zsmsgs | X | ieservice.exe | Added by the TROJ/BANCOS-BU TROJAN! . Read the link, keylogger/password stealing trojan(s) involved. |
| zzb2 | X | zzb2.exe | IAGold_adware downloader |
| ZSMCSnap211 | U | ZSMCSnap211.exe | Related to USB_PC-Camera Engine from Z-Star Microelectronics Corporation. (ZSMC) Note: located in \%WINDIR%\ |
| ZeroAds | U | LAS0Ads.exe | ZeroAds - culls ads, cookies and pop-ups. Required for the cookie interception to work |
| Zeno | X | (no name) | Added by ZenoSearch ADAWARE! |
| Zapro | Y | Zapro.exe | Firewall program from Zonelabs - paid for version |
| Zeno | X | *sys****.exe (*,= random,char/digit) | Added by ZenoSearch adware - filenames spotted include rsyssx2d.exe, rsyssx2d.exe, rsystu2d.exe, ysysyz2d.exe and so on.
|
| Zekio Startups | X | znksvc32.exe | Added by the W32/AGOBOT-AGI WORM! |
| ZSSnp211 | Y | ZSSnp211.exe | Related to USB_Camera driver from Vimicro. Note: Located in \%ROOT%\ More here |
| zBrowser Launcher | U | iTouch.exe | For a Logitech internet keyboard - loads the software for the shortcut keys on the keyboard. Also used to display your keyboard LEDs on-screen to indicate Caps Lock, etc if it doesn\'t have them |
| zcseacrt | X | relccxs.exe | Added by a variant of the Troj/Mailbot-BW Note: This trojan is located in C:\WINDOWS\system32\ Read the link, allows remote access |
| zsms | X | smss.exe | Added by the BANCOS-CK TROJAN! - Note - this file is placed in the Winnt or Windows folder, and should NOT be confused with the legitimate Windows smss.exe process, located in the Winnt/System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! Read the link, keylogger/password stealing trojan(s) involved. |
| Zcfgsvc | U | ZCfgSvc.exe | Zero Config MFC Application, part of Intel’s ProSET utilities and installed by the drivers for many of Intel wireless network cards - essential to the proper functioning of many of the Intel ProSET utilities (but not all) and these System Tray ProSET utilities are a must if you are using your wireless connection, if only so you know when the signal is fading or dropping.
The problem is that, in some PCs, ZCFGSVC can be incredibly badly behaved : taking up to 100% of CPU time and therefore resulting in an extremely slow PC, preventing the installation of software or Windows updates, or causing “Not Responding” or “End this Program” shutdown problems. If you experience this, try first the very latest drivers from Intel or your laptop manufacturer. If that still does not solve the problem and you have Windows XP/2003, try setting the “Wireless Zero Configuration” service to Disabled.
|
| ZuneStart | U | zune.exe | Related to Zune Portable media player from Microsoft. Note: Located in \%Program Files%\ |
| Zune Launcher | U | ZuneLauncher.exe | Only needed if running Microsoft's new Zune software for use with their new Zune music player. Similar to iTunes for the iPod.
|
| Zacker | X | Zacker.exe | Added by the GEMEL VIRUS! |
| zango | X | zango.exe | nCase Adware |
| Zoom | U | zoom.exe | Zoom - speeds up Windows startup and manages startup applications |
| Zone Labs Client Ex | X | svchost.exe | Added by the W.32NETSKY.F WORM! **Note This is not the valid svchost.exe as described for WinXP or Win2K . Located in a Windows directory, and not in Windows\System32 |
| Zinio DLM | N | ZinioDeliveryManager.exe | Related to Zinio used to read magazines in digital rather than paper format |
| ZeroSpyware | U | ZeroSpyware.exe | FBM Software ZeroSpyware 2004 spyware detector and remover |
| zdnet | N | kontiki.exe | Kontiki Delivery Manager - Windows-based client software that enables secure delivery of content to users' desktops |
| ZeroAds | U | Zeroads.exe | Related to ZeroAds a popular Internet accelerator and anti-adware application. Note: Located in C:\Program Files\FBM Software\ZeroAds\ |
| zlclient or Zone Labs Client | Y | zlclient.exe | Firewall program from Zonelabs. Pro version inlcudes other online security options |
| ZIBMACC | X | rundll.exe ->,ZIBMACC.INF | ZIBMACC.INF is an IBM file that is only loaded and installed under a recovery operation. The file is a support file for IBM access to the system if needed. You may delete this file. This is as from IBM Technical Support (USA - 800-887-7435) |
| Zeno | X | nwinrqez.exe | Added by QezRez family of TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| ZMatrix | U | matrix.exe | Related to ZMatrix an animated desktop background which displays streaming characters in a style similar to what was used in the movie 'The Matrix' Note: Located in \%Program Files%\ZMatrix\ |
| Zebus | N | msdc32.exe | Runs a HTML tutorial on the Zebus web-site |
