| Index | Introduction | Database | Detailed Entries | Updates | Concise List | HJT Forums | Rogues | Message Board |
If you're frustrated with the time it takes your Windows 7/Vista/XP PC to boot and then it seems to be running slowly you may have too many programs running at start-up - and you have come to the right place to identify them. This is the original start-up programs (as opposed to processes/tasks) list - one of the most accurate and comprehensive. Services are not included - see below. For further information on this and how to identify and disable start-up programs please visit the Introduction page.
See here for further information on random entries - which are typically added by viruses and other malware or unwanted programs.
Last database update :- 29th Apr, 2013
31819 items listed
You can search for any of the following terms to find and display entries in the start-up programs database but the minimum search is 3 characters and you must click on the "Search" button. Results are sorted by the Startup Item/Name field.
Alternatively, you can browse the full database (without the search facility) over a number of pages or you can use the alphabetical index below to list the entries for that letter by the Command/Data field, but the results may take longer to appear due to the number of them:
A | B | C | D | E | F | G | H | I | J | K | L | B | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
NOTE: Searching for common words (i.e. "the" or "where") will mean the results take longer to appear due to the number of them.
Please click on the Search button
1321 results found for P
| Startup Item or Name | Status | Command or Data | Description | Tested |
|---|---|---|---|---|
| p | X | p.exe | Added by the AGENT-U TROJAN! | No |
| RunmeAtStartup | X | p07.exe | Detected by Dr.Web as Trojan.DownLoader7.21479 and by Malwarebytes Anti-Malware as Trojan.Downloader | No |
| p2 | X | p2.exe | Detected by Dr.Web as Trojan.DownLoader8.24379. Note - this entry loads from the Windows Startup folder and the file is located in %AppData%\p2 | No |
| RunmeAtStartup | X | p24.exe | Detected by Malwarebytes Anti-Malware as Trojan.Downloader.Bullit. The file is located in %Temp% | No |
| P2kAutostart | N | P2kAutostart.exe | System Tray access to and connection detector for the P2kCommander filemanager application for Motorola phones | No |
| P2P Networking | N | P2P | Peer to Peer (P2P) sharing of files on the internet | No |
| P2P NETWORKING | N | P2P Networking.exe | Peer to Peer (P2P) sharing of files on the internet | No |
| P2P Networking2 | X | P2P Networking2.exe | P2P Networking2.exe is an advertising program by Joltid. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately | No |
| P2P Networking3 | N | P2P Networking3.exe | P2P Networking, a component bundled with Kazaa that enables other applications to use Peer-to-Peer functionality. Not required - see here | No |
| CollaborationHost | N | p2phost.exe | Signs a user into the People Near Me feature at login in Windows 7 and Vista. People Near Me enables you to use certain peer-to-peer (P2P) programs on a network - that "identifies people nearby who are using computers and allows those people to send you invitations for programs such as Windows Meeting Space. They can only invite you to participate in programs that are installed on your computer." Available via Start → Control Panel | Yes |
| Microsoft People Near Me | N | p2phost.exe | Signs a user into the People Near Me feature at login in Windows 7 and Vista. People Near Me enables you to use certain peer-to-peer (P2P) programs on a network - that "identifies people nearby who are using computers and allows those people to send you invitations for programs such as Windows Meeting Space. They can only invite you to participate in programs that are installed on your computer." Available via Start → Control Panel | Yes |
| Microsoft® Windows® Operating System | N | p2phost.exe | Signs a user into the People Near Me feature at login in Windows 7 and Vista. People Near Me enables you to use certain peer-to-peer (P2P) programs on a network - that "identifies people nearby who are using computers and allows those people to send you invitations for programs such as Windows Meeting Space. They can only invite you to participate in programs that are installed on your computer." Available via Start → Control Panel | Yes |
| p2pnetwork | X | p2pnetwork.exe | Detected by Trend Micro as WORM_ALCAN.A | No |
| p2p networking | X | p2pnetworking.exe | Added by the RBOT-ECP WORM! | No |
| p2pnetworking | X | p2pnetworking.exe | Added by the RBOT-AFL WORM! | No |
| Xp | X | p2pnetworking.exe | Added by the SDBOT.XA WORM! | No |
| MSPluginSrvc | X | p3.exe | Added by the RBOT-WV WORM! | No |
| P3p4chk | X | P3p4chk.exe | Added by the GEMA TROJAN! | No |
| P4mx4 | X | p4mx4.exe | Added by the CRYPTER.A TROJAN! | No |
| MSNPluginSrvcs | X | p6.exe | Detected by Sophos as W32/Rbot-VJ | No |
| Pointsec Tray | Y | p95tray.exe | System Tray access to Pointsec (now Check Point) Full Disk Encryption - which provides "automatic encryption of laptop and desktop hard drives protects critical information and prevents corporate data breaches" | No |
| Winsock2 driver | X | PAC.EXE | Added by the SPYBOT-ET WORM! | No |
| PaciSoft | X | pacis.exe | PacerD Media/Pacimedia.com adware installer | No |
| sasserfix | X | package.exe | Added by the DABBER.B WORM! | No |
| winbar.pif | X | packe.pif | Added by the RBOT-AVI WORM! | No |
| sassfix | X | packer.exe | Added by the DABBER.A WORM! | No |
| PackersScreenServer | U | PackersScreenServer.exe | Screensaver for the Green Bay Packers NFL football team - part of Sports Illustrated's MySI desktop download (by MercurySports Network) for streaming information on NFL football teams. No longer supported | No |
| PackersScreenServerSvc | U | PackersScreenServer.exe | Screensaver for the Green Bay Packers NFL football team - part of Sports Illustrated's MySI desktop download (by MercurySports Network) for streaming information on NFL football teams. No longer supported | No |
| Steam | X | PACsteam.exe | Added by the AGENT-SF MALWARE! | No |
| padaily | X | padaily.exe | Detected by Malwarebytes Anti-Malware as Adware.KorAd. The file is located in %ProgramFiles%\padaily - see here | No |
| PadTouch | N | PadExe.exe | Toshiba Touch and Launch - offers easy movement and freedom of programs navigation with TouchPad | No |
| Pag Windows Monitor | X | pag.exe | Added by the AGENT-EOT TROJAN! | No |
| PAgent | X | PAgent.exe | Scans your hard drive for the popular P2P file-sharing applications BearShare, Grokster, Kazaa, Limewire and Morpheus. After searching the entire local file system for any files with those names it connects to the DownloadWare servers and tells it what, if anything, is found | No |
| Pagoo | N | PAGOO.EXE | Pagoo - internet call waiting. Intercepts telephone calls like an answering machine and plays the voice message on your PC. Only required when you're on-line and via dial-up modem | No |
| Paint.exe | X | Paint.exe | Added by the TAPIN WORM! | No |
| Paint.exe | X | Paint.exe | Added by the SCAR.EXUR TROJAN! | No |
| taskmgr.exe | X | paint.exe | Added by a variant of the AGENT.AH TROJAN! | No |
| PaintingRoom evidence monitor | X | paintingroom.exe | Paintingroom.com smiley software - not recommended as the site tries to drop a trojan on you... | No |
| PaintingRoom smile monitor | X | paintingroom.exe | Paintingroom.com smiley software - not recommended as the site tries to drop a trojan on you... | No |
| taskmgr.exe | X | paintms.exe | Added by a variant of the AGENT.AH TROJAN! | No |
| Palm Desktop | N | Palm.exe | Palm Desktop Software for use with Palm handheld devices. Available via Start → Programs | No |
| PaltalkNetaware.exe | N | PALNETAW~1.EXE | Voice chat program. This program stores all buddy list info apparently on the server itself so you never lose your buddy list should you need to reinstall the program due for whatever reason or even reformat. Available via Start → Programs. Delete the shortcut in Start → Programs → StartUp as well otherwise it will be reinstated | No |
| Personal Anti Malware | X | PAM.exe | Unregistered version of Personal Anti Malware rogue security software - not recommended, removal instructions here | No |
| pamela.exe | U | pamela.exe | Pamela is a plug-in or add-on that adds features to Skype peer to peer voice service | No |
| Panda Software Intrenet | X | panda.pif | Added by the RBOT-ATZ WORM! | No |
| PandaAVEngine | X | PandaAVEngine.exe | Added by the NETSKY.R WORM! | No |
| System handler | X | Pandawas.exe | Added by the BHARAT.A WORM! | No |
| Panda Security URL Filtering | Y | Panda_URL_Filtering.exe | URL checking feature of Panda Cloud Antivirus by Panda Security | No |
| Pando | U | Pando.exe | "Pando is free software that lets you send and receive files and folders of any size* with your existing email address" | No |
| KN_PanelApp | U | PanelApp.exe | KnowledgePanel online survey software | No |
| [various names] | X | panel_its.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| Pantera | X | pantera.exe | Added by the SDBOT.AYN WORM! | No |
| Configuration Loader | X | pany.exe | Detected by Trend Micro as WORM_RBOT.L | No |
| PowerDOCSAPIHost | U | papihost.exe | Hummingbird PowerDOCS - "delivers powerful enterprise document management functionality via a tightly integrated Microsoft WinNT/98/2K environment" | No |
| Paraben's Password Manager | U | Paraben.exe | Paraben's Password Manager by Paraben Corporation - personal password management program for online accounts, ATM numbers, PIN numbers, bank accounts, password protected documents, etc | No |
| Paradox | X | Paradox.exe | Detected by Dr.Web as Trojan.Siggen4.25429 and by Malwarebytes Anti-Malware as Trojan.Backdoor | No |
| Parallels Tools | ? | ParallelsToolsCenter.exe | Part of Parallel Tools utility suite for guest operating systems included with virtualization software from Parallels - such as Parallels Workstation | No |
| ParentalControl | U | ParentalControl.Exe | Crawler Parental Control - "Get perfect control of websites your children browse, software they use, and folders they access. Regulate the time when they can use your computer and connect to the Internet. Hide content on your computer that you don't want them to see" | No |
| ParetoLogic Anti-Spyware | Y | Pareto_AS.exe | "ParetoLogic Anti-Spyware delivers Active Protection in the form of real-time blocking" | No |
| [various names] | X | ParisM.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| macro | X | parivac.exe | Detected by Dr.Web as Trojan.DownLoader8.19816 and by Malwarebytes Anti-Malware as Trojan.Agent.PV | No |
| PartSeal | U | PartSeal.exe | System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere | No |
| VAIO Recovery | U | PartSeal.exe | System backup for Sony Vaio PCs. Adds a recovery mechanism for users over and above any System Restore features - allowing users to revert a drive back to the state it was when bought form the factory by hitting F10. The user obviously loses any data stored if not backed-up elsewhere | No |
| party.task | X | party.exe | Detected by McAfee as MultiDropper-DC | No |
| Winsock32 driver | X | party.exe | Detected by McAfee as MultiDropper-DC | No |
| P Antispyware 09 | X | pas.exe | P Antispyware 09 rogue security software - not recommended, removal instructions here | No |
| Pas Windows Monitor | X | pas.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System% | No |
| PersonalAntiSpy Free | X | pas.exe | PersonalAntiSpy rogue spyware remover - not recommended, removal instructions here | No |
| Palo Alto Software Update Manager 8.0 | N | PAS8_UD.exe | Update manager for small business planning software from Palo Alto Software - such as Business Plan Pro, Marketing Plan Pro and Email Center Pro | No |
| cmonitor | X | pasmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here | No |
| pas_check | X | pasmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here | No |
| Salestart | X | PASmon.exe | Part of rogue security tools, including ErrorSafe and PcTurboPro | No |
| was_check | X | PASmon.exe | Part of the ErrorSafe rogue system error and cleaning utility - not recommended | No |
| Windows DLL Loader | X | PASSCFG16.EXE | Detected by Sophos as Troj/Domwis-E | No |
| Windows System Configuration | X | PASSCFG16.EXE | Detected by Sophos as Troj/Domwis-E | No |
| NETVISIONPasse-partout | X | Passe-partout.exe | Added by the DIALCAR-M DIALER! | No |
| PassLocker | Y | PassLocker.exe | "PassLocker is a complete password manager helping you to manage and safely store your passwords" | No |
| Panda Antispam Server Service | U | PasSrv.exe | AntiSpam of an older version of the Panda Security range of internet security products. Runs as a service on Windows XP | No |
| [various names] | X | PasswdMon.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| pwdir | U | PasswordDirector.exe | Password Director by LastBist Software - "provides a safe and secure way to keep all your passwords and sensitive records (such as system logins, credit card information, PINs, private phone numbers and other sensitive records) in the single well-protected password database" | No |
| PowerArchiver Tray | N | PASTARTER.EXE | System Tray access to PowerArchiver from ConeXware, Inc - file compression support tool | No |
| paswonmyrytr | X | paswonmyrytr.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile% - see here | No |
| PaSystem | X | pasystem.exe | Targetsaver adware variant | No |
| PASystemTray | Y | PASystemTray.exe | Part of the Panda Security range of enterprise/business internet security products | No |
| Patch | X | patch.exe | Added by the NETBUS WORM! | No |
| Telechips,Mass | U | patch.exe | Removable disk driver for the Muro MP3 player | No |
| Win Patch | X | patch.exe | Added by the SDBOT-GL BACKDOOR! | No |
| AV Client | X | patch31345.exe | Added by the MYDOOM.AD WORM! | No |
| AV Industry | X | patch31345.exe | Added by the MYDOOM.AD WORM! | No |
| game | X | patcher.scr | Added by the PSW-ED TROJAN! | No |
| PathNvidiaTV | ? | patchnvidiaTVout.exe | Related to a Gigabyte Nvidia based video card - typical file location is %ProgramFiles%\Gigabyte\Nvidia | No |
| PatchUp_Plus | X | PatchUpInit.exe | PatchUp_Plus rogue security software - not recommended, removal instructions here | No |
| [empty] | X | pathex.exe | Added by the MKMOOSE-A WORM! Note - has a blank entry under the Startup Item/Name field | No |
| pathname | X | pathname.exe | Added by the IRCCONTACT TROJAN! | No |
| Paladin Antivirus | X | pav.exe | Paladin Antivirus rogue security software - not recommended, removal instructions here | No |
| PAV | X | pav.exe | Personal Antivirus rogue security software - not recommended. Located in %ProgramFiles%\PAV | No |
| PAV.EXE | Y | PAV.EXE | PER Antivirus | No |
| PersonalAV | X | pav.exe | PersonalAV rogue security software - not recommended. Located in %ProgramFiles%\PersonalAV | No |
| Panda Cleaner | Y | pavdr.exe | Part of an older version of the Panda Security range of internet security products. Possibly the ActiveScan on-line scanner? | No |
| PAVFIRES | Y | PavFires.exe | Firewall included with older versions of the Panda Security range of internet security products. Runs as a service on Windows XP | No |
| PAVFNSVR | Y | PavFnSvr.exe | Part of an older version of the Panda Security range of internet security products. Runs as a service on Windows XP | No |
| Pavkre9x | Y | pavkre9x.exe | Part of an older version of the Panda Security range of internet security products | No |
| PER Email Protection | Y | pavmail.exe | PER Antivirus | No |
| PavProt | Y | PavProt.exe | Part of an older version of the Panda Security range of internet security products | No |
| Pavprot9 | Y | Pavprot9.exe | Part of an older version of the Panda Security range of internet security products | No |
| PavProc | Y | PavPrS9x.exe | Part of the Panda Security range of internet security products | No |
| Panda Scheduler | U | pavsched.exe | Scheduler for older versions of the Panda Security range of internet security products. Required if you have scans scheduled on a regular basis | No |
| PandaScheduler | U | pavsched.exe | Scheduler for older versions of the Panda Security range of internet security products. Required if you have scans scheduled on a regular basis | No |
| Microsoft Update Machine | X | paxrxo.exe | Added by the PUSHBOT.A WORM! | No |
| System Initialization | X | payload.dat | Added by the ROXY BACKDOOR! | No |
| PayTime | X | paytime.exe | Added by the STARTPA-YR TROJAN! | No |
| pbagent | U | pbagent.exe | Probot keystroke logger/monitoring program - remove unless you installed it yourself! | No |
| {1290A33C-85F5-4164-A1BE-7DD299D4986A} | U | PBKScheduler.exe | Part of the PowerBackup archiving/backup utility from CyberLink. The entry is present if you have any backup jobs scheduled | Yes |
| PBKScheduler | U | PBKScheduler.exe | Part of the PowerBackup archiving/backup utility from CyberLink. The entry is present if you have any backup jobs scheduled | Yes |
| PowerBackup | U | PBKScheduler.exe | Part of the PowerBackup archiving/backup utility from CyberLink. The entry is present if you have any backup jobs scheduled | Yes |
| PASMonitor | X | pbm.exe | PersonalAntiSpy rogue spyware remover - not recommended, removal instructions here | No |
| PbAdminACAD | U | PbMngr5.exe | Bluebeam PDF software printer support. Prints AutoCAD ".dwg" to PDF | No |
| run_pbnext | Y | PBNext.exe | PBNext is virtual phone system which offers the same functionality as expensive PBX hardware | No |
| (Default) | X | pc update.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. Note - this malware actually changes the value data of the "(Default)" key in HKCU\Run in order to force Windows to launch it at boot. The name field in MSConfig may be blank and the file is located in %UserStartup% | No |
| pc update | X | pc update.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| PC-Antispy | X | PC-Antispy.exe | PC-Antispy rogue spyware remover - not recommended, removal instructions here | No |
| PC-Antispyware | X | PC-Antispyware.exe | PC-AntiSpyware rogue spyware remover - not recommended | No |
| PC-Cleaner | X | PC-Cleaner.exe | PC-Cleaner rogue security software - not recommended | No |
| Service Drivers | X | PC.EXE | Added by the SDBOT-WK WORM! | No |
| PC2011 | X | PC2011.exe | PC Security 2011 rogue security software - not recommended, removal instructions here | No |
| PC2Safe | X | PC2SafeLaunch.exe | PC-Safe rogue security software - not recommended, removal instructions here | No |
| MSNSysRestore | X | pc32.exe | Added by a variant of the MASTAK VIRUS! | No |
| Smartalec | U | pcaccel.exe | Smartalec PC Accelerator - system optimization utility | No |
| SmartPCXL | U | pcaccel.exe | Smartalec PC Accelerator - system optimization utility | No |
| PCAntiMalware | X | pcam.exe | PCAntiMalware rogue security software - not recommended, removal instructions here | No |
| pcAnywhere Agent | U | pcamgt.exe | Part of pcAnywhere 9.0 or later. This process listens for incoming PC Anywhere connections if your PC is configured as a PC Anywhere host | No |
| PCBG | Y | PCBODYGUARD.EXE | PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc | No |
| PCBODYGUARD | Y | PCBODYGUARD.EXE | PC Bodyguard from Calluna - protects system files and settings from being deleted, modified, etc | No |
| PcBoost | U | PcBoost.exe | PCBoost from PGWARE, LLC increases computer performance by allocating higher portions of CPU power to active applications and games | No |
| PC Booster | U | pcbooster.exe | PC Booster from inKline Global - "easy-to-use computer system optimizer that gives your system the extra speed and stability you want while ensuring that your computer is kept clean and in tip-top condition" | No |
| pc-care3 | X | pccare3up.exe | PcCare rogue security software - not recommended, removal instructions here | No |
| PCCClient.exe | Y | PCCClient.exe | Part of Trend Micro web-security products - PC-cillin 2002-2003 and Virus Buster 2001-2003 | No |
| pccenterstart.exe | X | pccenterstart.exe | Detected by Malwarebytes Anti-Malware as Rogue.PCCenter. The file is located in %ProgramFiles%\pccenter | No |
| pccenter main | X | pccenteru.exe | Detected by Malwarebytes Anti-Malware as Rogue.PCCenter. The file is located in %ProgramFiles%\pccenter | No |
| pccguide.exe | Y | pccguide.exe | Part of Trend Micro web-security products - Internet Security 2005-2007, PC-cillin 2002-2004 and Virus Buster 2001-2007 | No |
| PC-Checkup | X | PCCheckUp.exe | Installed by SpeedItUp without permission, along with Search Defender - which is detected by DrWeb as the STARTPAGE.ORIGIN TROJAN! | No |
| PCCIOMON.exe | Y | PCCIOMON.exe | Part of Trend Micro web-security products - PC-cillin 2000, 2002-2003 and Virus Buster 2001-2004. This is the virus scanner | No |
| PCClearPlus | X | PCClearPlus.exe | PCClearPlus rogue security software - not recommended, removal instructions here | No |
| PCClear_Plus | X | PCclear_Plus.exe | PCclear Plus rogue security software - not recommended, see here and here | No |
| PCClient.exe | Y | PCClient.exe | Part of Trend Micro web-security products - PC-cillin 2004 and Virus Buster 2004 | No |
| OfficeScanNT Monitor | Y | pccntmon.exe | Trend Micro OfficeScan Antivirus real-time scan monitor | No |
| Sony Ericsson PC Companion | N | PCCompanion.exe | Sony PC Companion mobile device management utility | No |
| Sony PC Companion | N | PCCompanion.exe | Sony PC Companion mobile device management utility - replace PC Suite | No |
| PccPfw | Y | PccPfw.exe | Part of Trend Micro web-security products - PC-cillin 2002-2003 and Virus Buster 2002-2004. This is the firewall | No |
| PcCtlCom | Y | PCCTLCOM.EXE | Part of Trend Micro web-security products - Internet Security 2005-2006 and Virus Buster 2005-2006 | No |
| OfficeScan95 | Y | pccwin97.exe | Trend Micro antivirus OfficeScan | No |
| PC Defender | X | pcdef.exe | PC Defender rogue security software - not recommended | No |
| PC Doc Pro - 3.1 | U | pcdocpro.exe | PC Doc Pro (now Win Doc Pro) - system health check and fix utility | No |
| Ms System Config | X | pcedit.exe | Added by a variant of W32/Sdbot.worm | No |
| PcEye | U | pceye.exe | PCEye 2000 - parental control utility | No |
| Receiver | U | PcfaxRcv.exe | Incorporated on multifunction digital copiers (such as the MX-3500NM), Sharp's innovative PC fax driver enables users to send fax documents right from their desktop | No |
| run= | N | pcfix2k.exe | pcfix2k splash screen | No |
| pcguarderstart.exe | X | pcguarderstart.exe | PCGuarder rogue security software - not recommended, removal instructions here | No |
| Acme.PCHButton | N | pchbutton.exe | Used by HP Instant Support | No |
| PCHbutton | N | PCHbutton.exe | Used by HP Instant Support | No |
| PCHDPlayer | X | PCHDPlayer.exe | Detected by Kaspersky as Porn-Tool.Win32.StripDance.c. The file is located in %ProgramFiles%\pchd | No |
| PCHealth | N | pchschd.exe | This is a "scheduler" and does not turn off PC Health. For more information refer here | No |
| Windows Express | X | pci32b.exe | Added by the BUZUS.C TROJAN! | No |
| PCIMODEM | ? | pcimodem.exe | Associated with Lucent based Aztech MDP7800-U PCI modems. Is it required? | No |
| Pinnacle PCTV Scheduler | U | PCLEScheduler.exe | Scheduler for Pinnacle PCTV solutions for watching and recording terrestrial and satellite TV on a desktop/laptop from Pinnacle Systems. The Pinnacle PCTV product line has since been sold to Hauppauge Digital | No |
| InstantTray | N | PCLETray.exe | Part of Pinnacle Instant CD/DVD burning and authoring software from Pinnacle Systems. Tray icon enabling a pop-up menu that lets you call up any of Instant CD/DVD's tools with one click. Can be started manually | No |
| PClK | X | PClK.exe | Added by the LEGMIR-BL TROJAN! | No |
| PCLock | X | PCLockUpdate.exe | Added by the MDROP-CYT TROJAN! | No |
| PCStart | N | Pcm25.exe | Runs as part of PCMonitor which is a program for monitoring your activity on your system. It makes screen dumps and key logging. It can hang-up your system because the screen dump page gets VERY big | No |
| CyberLink PowerCinema | N | PCMAgent.exe | Preloads parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of the main program. Only required on slower/older systems and if disabled it loads when required via an instance of svchost.exe | Yes |
| PCMAgent | N | PCMAgent.exe | Preloads parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of the main program. Only required on slower/older systems and if disabled it loads when required via an instance of svchost.exe. Also included with versions of PowerCinema bundled (and re-branded) with systems from Acer, Dell, ASUS and others | Yes |
| PC MaticRT | ? | PCMaticRT.exe | Part of an older version of the PC Matic application suite from PC Pitstop, LLC. What does it do and is it required? | No |
| PCM Defender | X | pcmdefenderp.exe | Detected by Malwarebytes Anti-Malware as Rogue.PCMDefender. The file is located in %AppData%\PCM Defender | No |
| PCMedic | X | PCMedic.exe | PCMedic rogue security software - not recommended, removal instructions here | No |
| PCMedic | X | PCMedicLaunch.exe | PCMedic rogue security software - not recommended, removal instructions here | No |
| PCMMRealtime | X | pcmm.exe | PC MightyMax rogue security software - not recommended, see here | No |
| PCMM2007RT | X | pcmm2007.exe | PC MightyMax 2007 rogue security software - not recommended, see here | No |
| PCMMediaSharing | ? | PCMMediaSharing.exe | Part of Acer HomeMedia Connect, which is part of Acer Arcade Live. What does it do and is it required? | No |
| pcmn891.exe | U | pcmn891.exe | FreeKeyLogger surveillance software. Uninstall this software unless you put it there yourself | No |
| PCMaster Antispyware | X | pcmp.exe | PCMaster Antispyware rogue security software - not recommended, removal instructions here | No |
| Cyberlink PowerCinema 3.0 | N | PCMService.exe | Part of Cyberlink's PowerCinema - which can be used to watch movies, play music and even watch TV in a central location. Commonly, PC manufacturers will base their own multimedia player/organizer on PowerCinema (such as Dell's Media Experience and Acer's Arcade Deluxe). Disabling this entry will not prevent PowerCinema working and doing so can prevent problems such as the screensaver not starting or a laptop not entering standby/hibernation/sleep-mode | Yes |
| PCMService | N | PCMService.exe | Part of Cyberlink's PowerCinema - which can be used to watch movies, play music and even watch TV in a central location. Commonly, PC manufacturers will base their own multimedia player/organizer on PowerCinema (such as Dell's Media Experience and Acer's Arcade Deluxe). Disabling this entry will not prevent PowerCinema working and doing so can prevent problems such as the screensaver not starting or a laptop not entering standby/hibernation/sleep-mode | Yes |
| Protect | X | PCoptimizer2010.exe | PCoptimizer 2010 rogue security software - not recommended, removal instructions here | No |
| PCPrivacyCleaner | X | pcpc.exe | PCPrivacyCleaner rogue privacy tool - not recommended | No |
| Total Protect 2009 | X | pcpc_starter.exe | Total Protect 2009 rogue security software - not recommended, removal instructions here | No |
| PCPerf | U | pcperf.exe | PC Accelerator 2007 from DefendGate Inc. "Powerful all-in-one PC performance and Internet acceleration solution designed to help increase your system and online performance and security" | No |
| PC Pitstop Erase | U | PCPitstopErase.exe | Scheduler for an earlier release of Erase from PC Pitstop LLC - which "protects your privacy by removing personal information stored on your computer. Safely and easily removes traces of your computing and Internet activities" | Yes |
| PC Pitstop Erase Scheduler | U | PCPitstopErase.exe | Scheduler for an earlier release of Erase from PC Pitstop LLC - which "protects your privacy by removing personal information stored on your computer. Safely and easily removes traces of your computing and Internet activities" | Yes |
| PCPitstopErase | U | PCPitstopErase.exe | Scheduler for an earlier release of Erase from PC Pitstop LLC - which "protects your privacy by removing personal information stored on your computer. Safely and easily removes traces of your computing and Internet activities" | Yes |
| PCPitStopEraser | U | PCPitStopErase.exe | Scheduler for an earlier release of Erase from PC Pitstop LLC - which "protects your privacy by removing personal information stored on your computer. Safely and easily removes traces of your computing and Internet activities" | No |
| PCPlus Security | X | pcplusupsc.exe | PCPlus rogue security software - not recommended, removal instructions here | No |
| PC Pitstop Optimize Scheduler | U | PCPOptimize.exe | Scheduler for an older version of the Optimize system optimization utility from PC Pitstop LLC | No |
| PCPOptimize | U | PCPOptimize.exe | Scheduler for an older version of the Optimize system optimization utility from PC Pitstop LLC | No |
| pcprivacy | X | pcprivacy.exe | PCPrivacy rogue security software - not recommended, removal instructions here | No |
| PC Privacy2 | X | PcPrivacy2Up.exe | PCPrivacy rogue security software - not recommended, removal instructions here | No |
| PCprotectar.exe | X | PCprotectar.exe | PCprotectar rogue security software - not recommended. A member of the AntiAID family | No |
| PC Protection Center | X | PcProtection.exe | PC Protection Center 2008 rogue security software - not recommended, removal instructions here | No |
| pcqmqgn.exe | ? | pcqmqgn.exe | ?? | No |
| PCRecSA | U | PCRecSA.exe | Part of the IBM/XPoint Rapid Restore backup utility. If you choose, you can use it to create a "clean" backup of your hard drive. The process involves the software partitioning your hard drive, making a compressed image of the working drive which will then allow you to revert to that should you need to | No |
| pcspeedup | X | pcs.exe | PC Speed Up rogue security software - not recommended, removal instructions here | No |
| PC Scout | X | pcscout.exe | PC Scout rogue security software - not recommended, removal instructions here | No |
| PCSpeed Service | X | pcsdup.exe | PCSpeed rogue security software - not recommended, removal instructions here | No |
| PcSecureNet | X | PcSecureNet.exe | PcSecureNet rogue security software - not recommended, removal instructions here. A member of the AntiAID family | No |
| CyberArmorHelper | Y | pcshelp.exe | Part of the CyberArmor enterprise class personal firewall | No |
| PCScan Antispyware | X | pcsp.exe | PCScan Antispyware rogue security software - not recommended, removal instructions here | No |
| PC SpeedScan Pro | N | PCSpeedScan.exe | Ascentive PC SpeedScan Pro registry optimizer - not recommended, see here and here | No |
| PC-Spider | X | pcspiup.exe | PC Spider rogue security software - not recommended, removal instructions here | No |
| PcsProtector | X | PcsProtector.exe | PcsProtector rogue security software - not recommended, removal instructions here. A member of the AntiAID family | No |
| PcsSecure | X | PcsSecure.exe | PcsSecure rogue security software - not recommended, removal instructions here. A member of the AntiAID family | No |
| Client Access PC5250 Sound | ? | pcssnd.exe | Part of IBM's iSeries (nee As/400) Client Access - communications suite that allows desktop, browser and wireless access to iSeries servers. "The Client Access Express PC5250 emulator provides desktop users with a graphical user interface for existing iSeries applications" - see here. What does it do and is it required? | No |
| Nokia Launch Application | X | PCSuite.exe | Added by the AUTORUN-BHX WORM! Note - this is not legitimate Nokia or SAMSUNG file of the same name which is normally located in a %ProgramFiles%\Nokia or %ProgramFiles%\Samsung sub-directory. This one is located in %System% | No |
| PC Suite | N | PCSuite.exe | System Tray access to Nokia PC Suite - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu | Yes |
| PC Suite Tray | N | PCSuite.exe | System Tray access to Nokia PC Suite - which "is a free PC software product that allows you to connect your Nokia device to a PC and access mobile content as if the device and the PC were one." This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu | Yes |
| PCSuite | N | PCSuite.exe | System Tray access to Nokia PC Suite and SAMSUNG PC Studio (by Nokia) - free PC software product that allows you to connect your mobile device to a PC and access mobile content as if the device and the PC were one. This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu | Yes |
| S60 PC Suite Tray | N | PCSuite.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu | Yes |
| Samsung PC Studio 7 | N | PCSuite.exe | System Tray access to SAMSUNG PC Studio (by Nokia) - with which "you can use easily to manage personal data and multimedia file by connecting a Samsung Electronics Mobile hone(GSM/GPRS/UMTS) to your PC". This allows you (amongst other options) to backup your devices contents to your PC, use it to connect to the internet, transfer files and synchronize contacts, etc. Available from the start menu | Yes |
| Pcsv | X | pcsvc.exe | Delfin PromulGate adware. The most common filename is "pcsvc.exe" | No |
| NokiaPCSyncTray | N | PCSync.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| PcSync | X | PcSync.exe | Added by the RBOT-XJ WORM! Note - do not confuse with the legitimate Nokia application | No |
| PCSync | N | PCSync.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| PCSync.exe | N | PCSync.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| Nokia PC Sync | N | PcSync2.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| Nokia.PCSync | N | PcSync2.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| PC Sync | N | PCSync2.exe | System Tray access to PC Sync for both Nokia and Samsung - which allow you to synchronise contacts, calendar/to-do items, notes, and e-mails between your mobile device and your PC Personal Information Manager (PIM). Available via the main Nokia PC Suite or SAMSUNG PC Studio interfaces | Yes |
| PcSync | N | PcSync2.exe | System Tray access to Nokia PC Sync - which "allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a Nokia mobile phone and your PC Personal Information Manager (PIM)." Available via the main Nokia PC Suite interface | Yes |
| PCSync2 | N | PCSync2.exe | System Tray access to PC Sync for both Nokia and Samsung - which allow you to synchronise contacts, calendar/to-do items, notes, and e-mails between your mobile device and your PC Personal Information Manager (PIM). Available via the main Nokia PC Suite or SAMSUNG PC Studio interfaces | Yes |
| Samsung.PCSync | N | PCSync2.exe | System Tray access to SAMSUNG PC Sync - which allows you to synchronise contacts, calendar/to-do items, notes, and e-mails between a SAMSUNG mobile phone and your PC Personal Information Manager (PIM). Available via the main SAMSUNG PC Studio interface | Yes |
| PC Tools AntiVirus Client | Y | PCTAV.exe | System Tray access to PC Tools AntiVirus from PC Tools - which "provides world-leading protection against viruses, worms and Trojans with rapid updates and IntelliGuard™ technology" | Yes |
| PCTAV | Y | PCTAV.exe | System Tray access to PC Tools AntiVirus from PC Tools - which "provides world-leading protection against viruses, worms and Trojans with rapid updates and IntelliGuard™ technology" | Yes |
| PCTAVApp | Y | PCTAV.exe | System Tray access to PC Tools AntiVirus from PC Tools - which "provides world-leading protection against viruses, worms and Trojans with rapid updates and IntelliGuard™ technology" | Yes |
| pctdf.exe | X | pctdf.exe | PCTotalDefender rogue spyware remover variant | No |
| PcThrust | U | PcThrust.exe | PCThrust from SwiftDog - "increases computer performance by allocating higher portions of CPU power to active applications and games" | No |
| PCTurboPro | X | pctp.exe | PcTurboPro rogue system optimization tool - not recommended, removal instructions here | No |
| Country Select | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| CountrySelection | N | pctptt.exe | Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required | No |
| pctspk | U | pctspk.exe | Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions | No |
| PCTVOICE | U | pctspk.exe | Used for modems based upon PC-TEL chipsets. Normally used for some Voice and Speakerphone functions and also for some Power management options. If you remove it you may not be able to use any of those functions | No |
| ISTray | Y | pctsTray.exe | System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools | Yes |
| pctsTray | Y | pctsTray.exe | System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools | Yes |
| pctsTray.exe | Y | pctsTray.exe | System Tray access to both PC Tools Internet Security suite and Spyware Doctor antispyware from PC Tools | Yes |
| PCTuto | X | pctuto.exe | Detected by McAfee as Adware-Tuto4PC and by Malwarebytes Anti-Malware as Adware.EoRezo | No |
| PCTVOICE | U | pctvoice.exe | The program PCTVoice is used by the modem to interface with your computer and also used for some V.80 functions for Video Conferencing. if you uncheck it, it comes back. It's better to leave it | No |
| pc-up | X | pcup.exe | Detected by Dr.Web as Trojan.DownLoader8.32000 | No |
| PCVaccine | X | PCVaccineLaunch.exe | PCVaccine rogue security software - not recommended, removal instructions here | No |
| PCWatch | U | pcwatch.exe | PCWatch surveillance software. Uninstall this software if you did not install it yourself | No |
| Xtrem parental control | U | pcx.exe | ParentXtreme - surveillance software. Uninstall this software unless you put it there yourself | No |
| MSConfig | X | pczjqjxc.exe | Detected by McAfee as PWS-Zbot-FAHQ!EB3E06FDBD80 and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| PC Live Guard | X | PC[random characters].exe | PC Live Guard rogue security software - not recommended, removal instructions here | No |
| PC Antispyware 2010 | X | PC_Antispyware2010.exe | PC Antispyware 2010 rogue security software - not recommended, removal instructions here | No |
| PC Security 2009 | X | PC_Security2009.exe | PC Security 2009 rogue security software - not recommended, removal instructions here | No |
| Popup Defender | U | PD.exe | Popup Defender - pop-up killer | No |
| Windows Service | X | pd14.exe | Adware - detected by DiamondCS TDS-3 anti-trojan as the DELF.DG TROJAN! | No |
| Windows Service | X | pd7.exe | Detected by Trend Micro as TROJ_SMALL.VZ | No |
| Pd71Pan | U | Pd71Pan.Exe | Audiotrak Prodigy 7.1 sound card control panel | No |
| PdaNet Desktop | U | PdaNetPC.exe | PdaNet from June Fabrics Technology Inc. Allows you to use iPhone, Android, Blackberry, Windows Mobile or PocketPC smartphones as wireless modem for your PC | No |
| PDASCAN | X | pdascan.exe | Added by the AGOBOT-QY WORM! | No |
| MICROSOFT Windows update | X | pdate.exe | Added by the RBOT.BZT WORM! | No |
| Dialog Helper | N | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start → Programs | No |
| PDDM | U | pddm.exe | Patchlink Update - "core product of the leading patch and vulnerability management software solution for medium and large enterprise network security" | No |
| Personal Defender 2009 | X | pdefendr.exe | Personal Defender 2009 rogue security software - not recommended, removal instructions here | No |
| PDEngine | U | PDEngine.exe | PerfectDisk from Raxco - disk defragmenter. Only required if you schedule disk defragmenting at re-boot | No |
| Matrox Powerdesk | N | PDesk.exe | "Matrox PowerDesk software provides extra multi-display desktop management controls" | No |
| pdexplo | N | PDEXPLO.EXE | PowerDesk Pro by PowerDesk Pro by Ontrack. Enhanced desktop and file manager. Available via Start → Programs | No |
| PDF FoxitReader | X | PDF FoxitReader.exe | Detected by McAfee as W32/Worm-FFX!5AC005CEBD74 and by Malwarebytes Anti-Malware as Trojan.Ransom.GAR. Note - this is not the legitimate Foxit Reader and the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| PDFPrint | N | pdf24.exe | PDF24 Creator - free PDF converter utility | No |
| PDFCreatorClient | N | PDFClient.exe | Jaws PDF Creator by Jaws PDF Technologies - "is an affordable and reliable means of creating high quality PDF files from virtually any document, in any application" | No |
| PDFHook | U | pdfcreate5hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Create version 5 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| PDFHook | U | pdfcreate6hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Create version 6 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| PDFCreHook | U | pdfcreate7hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Create version 7 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| Perfect Defender 2009 | X | pdfndr.exe | Perfect Defender 2009 rogue security software - not recommended, removal instructions here | No |
| Proof Defender 2009 | X | pdfndr.exe | Proof Defender 2009 rogue security software - not recommended, removal instructions here | No |
| PDFHook | U | pdfpro5hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Converter Professional version 5 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| PDFHook | U | pdfpro6hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Converter Professional version 6 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| PDFHook | U | pdfpro7hook.exe | Prevents the "Trial Version www.Nuance.com" watermark appearing in PDF documents created by PDF Converter Professional version 7 (from Nuance) when the product has been installed but not activated properly. See here for more information | No |
| PDFSaver | N | PDFSaver.exe | PDF-Xchange range of PDF document creation utilities from Tracker Software Products | No |
| PDF-XChange Capture | N | pdfSaver.exe | PDF-Xchange range of PDF document creation utilities from Tracker Software Products | No |
| pdfSaver3 | N | pdfSaver3.exe | PDF-XChange by Tracker Software Products - create Adobe compatible PDF files from virtually any Windows software such as MS Word, Excel, AutoCAD, MS Publisher, etc | No |
| PDF Complete | N | pdfsty.exe | "PDF Complete is a high-quality PDF document creation tool that operates much like the Acrobat® PDF Writer solution. Almost any document can be converted to a pdf file by simply printing the document to the PDF Complete printer" | No |
| pdibm | N | pdibm.exe | Part of the IBM customized version of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which provides secure area of hard disk where files and folders are encrypted. This entry loads the associated IBM wizard to create the initial secure area once the program has been installed and will no longer be loaded (but remains as a startup entry) once it is completed | Yes |
| PDIBM Application | N | pdibm.exe | Part of the IBM customized version of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which provides secure area of hard disk where files and folders are encrypted. This entry loads the associated IBM wizard to create the initial secure area once the program has been installed and will no longer be loaded (but remains as a startup entry) once it is completed | Yes |
| PDIBM.exe | N | pdibm.exe | Part of the IBM customized version of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which provides secure area of hard disk where files and folders are encrypted. This entry loads the associated IBM wizard to create the initial secure area once the program has been installed and will no longer be loaded (but remains as a startup entry) once it is completed | Yes |
| PDirect | N | PDirect.exe | IBM Presentation Director software | No |
| Password Door Loader | U | PDMonitor.exe | Password Door - password protection software | No |
| PDNotes | N | PDNotes.exe | Post-it® Digital Notes from 3M - "simple to use software that lets you make and organize lists, plan projects step by step, sort your notes by category, personalize messages with photos, even set alarms to remind you of appointments or key dates". Not required unless you use the alarm feature | Yes |
| Post-it® Digital Notes | N | PDNotes.exe | Post-it® Digital Notes from 3M - "simple to use software that lets you make and organize lists, plan projects step by step, sort your notes by category, personalize messages with photos, even set alarms to remind you of appointments or key dates". Not required unless you use the alarm feature | No |
| Post-it(R) Digital Notes | N | PDNotes.exe | Post-it® Digital Notes from 3M - "simple to use software that lets you make and organize lists, plan projects step by step, sort your notes by category, personalize messages with photos, even set alarms to remind you of appointments or key dates". Not required unless you use the alarm feature | Yes |
| pdoubrhgfjkxeiqndts | X | pdoubrhgfjkxeiqndts.exe | Detected by McAfee as Ransom!hm and by Malwarebytes Anti-Malware as Trojan.Dropper.inj | No |
| pdoubrhgfjkxeiqndts | X | pdoubrhgfjkxeiqndts.exe | Detected by Sophos as Troj/Ransom-MD and by Malwarebytes Anti-Malware as Trojan.Agent.US | No |
| Windows TM | X | pdpatbcyj.exe | Added by the RBOT.FEF WORM! | No |
| Intel PDS | U | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled | No |
| Microsoft DirectX | X | PDSched.exe | Detected by Trend Micro as WORM_SDBOT.CN | No |
| pdservice | N | pdservice.exe | Part of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which "securely and transparently protects sensitive files on notebooks and desktop computers, regardless of their location (local hard disk, removable media, network file servers), all the time without forcing the user to think about security." As well as providing System Tray access to the main program GUI, this entry also mounts the secured virtual drive(s) when the system boots if you have configured them this way and set the "Automatic Login at Startup" option. This entry isn't required if you mount them manually | Yes |
| PDService.exe | N | pdservice.exe | Part of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which "securely and transparently protects sensitive files on notebooks and desktop computers, regardless of their location (local hard disk, removable media, network file servers), all the time without forcing the user to think about security." As well as providing System Tray access to the main program GUI, this entry also mounts the secured virtual drive(s) when the system boots if you have configured them this way and set the "Automatic Login at Startup" option. This entry isn't required if you mount them manually | Yes |
| PrivateDisk | N | pdservice.exe | Part of SafeGuard PrivateDisk from Sophos (formerly by Utimaco) - which "securely and transparently protects sensitive files on notebooks and desktop computers, regardless of their location (local hard disk, removable media, network file servers), all the time without forcing the user to think about security." As well as providing System Tray access to the main program GUI, this entry also mounts the secured virtual drive(s) when the system boots if you have configured them this way and set the "Automatic Login at Startup" option. This entry isn't required if you mount them manually | Yes |
| PDTray | U | PDTRAY.EXE | System Tray access to Presentation Director for IBM/Lenovo Thinkpad notebooks - which allows you to create and quickly select between various single and multiple display options. Scheme selection and settings are also available via Fn+F7 key combination on some models | Yes |
| PDTRAY.EXE | U | PDTRAY.EXE | System Tray access to Presentation Director for IBM/Lenovo Thinkpad notebooks - which allows you to create and quickly select between various single and multiple display options. Scheme selection and settings are also available via Fn+F7 key combination on some models | Yes |
| PDUiP6000DMon | U | PDUiP6000DMon.exe | Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDUiP6000DTskbr | U | PDUiP6000DTskbr.exe | Memory Card Utility for the Canon PIXMA iP6000D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDUiP6210DMon | U | PDUiP6210DMon.exe | Memory Card Utility for the Canon PIXMA iP6210D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDUiP6220DMon | U | PDUiP6220DMon.exe | Memory Card Utility for the Canon PIXMA iP6220D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDUiP6600DMon | U | PDUiP6600DMon.exe | Memory Card Utility for the Canon PIXMA iP6600D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDUiP6700DMon | U | PDUiP6700DMon.exe | Memory Card Utility for the Canon PIXMA iP6600D photo printer - which allows "your computer to access the memory card reader feature of your printer" | No |
| PDVD10Serv | U | PDVD10Serv.exe | Remote Control background application for version 10 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| PowerDVD RC Service | U | PDVD10Serv.exe | Remote Control background application for version 10 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| RemoteControl10 | U | PDVD10Serv.exe | Remote Control background application for version 10 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| PDVD8Serv | U | PDVD8Serv.exe | Remote Control background application for version 8 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one. Also rebranded as ASUSDVD 8 for ASUSTek based systems | Yes |
| PowerDVD | U | PDVD8Serv.exe | Remote Control background application for version 8 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one. Also rebranded as ASUSDVD 8 for ASUSTek based systems | Yes |
| RemoteControl8 | U | PDVD8Serv.exe | Remote Control background application for version 8 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one. Also rebranded as ASUSDVD 8 for ASUSTek based systems | Yes |
| PDVD9Serv | U | PDVD9Serv.exe | Remote Control background application for version 9 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| PowerDVD RC Service | U | PDVD9Serv.exe | Remote Control background application for version 9 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| RemoteControl9 | U | PDVD9Serv.exe | Remote Control background application for version 9 of Cyberlink's PowerDVD. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| PDVDDXSrv | U | PDVDDXSrv.exe | Remote Control background application for Cyberlink's PowerDVD DX - a Dell specific version of their standard PowerDVD product. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | No |
| PDVDLaunchPolicy | N | PDVDLaunchPolicy.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PDVDLaunchPolicy Application | N | PDVDLaunchPolicy.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PowerDVD10 | N | PDVDLaunchPolicy.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PDVDServ | U | PDVDServ.exe | Remote Control background application for Cyberlink's PowerDVD from version 5 thru 7. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| PowerDVD | U | PDVDServ.exe | Remote Control background application for Cyberlink's PowerDVD from version 5 thru 7. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| RemoteControl | U | PDVDServ.exe | Remote Control background application for Cyberlink's PowerDVD from version 5 thru 7. Enables you to use a remote control with your Blu-ray or DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one | Yes |
| syswin.txt | X | pdx.exe | Added by the SDBOT.AGT WORM! | No |
| Window upadate | X | pe2.exe | Added by a variant of Win32/Rbot | No |
| peabyboftafv | X | peabyboftafv.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.US. The file is located in %UserProfile% | No |
| PeachtreePrefetcher | ? | PeachtreePrefetcher.exe | Related to Peachtree accounting software by Sage Software. What does it do and is it required? | No |
| PeachtreePrefetcher.exe | ? | PeachtreePrefetcher.exe | Related to Peachtree accounting software by Sage Software. What does it do and is it required? | No |
| pebldwtygxtqqxumbvp | X | pebldwtygxtqqxumbvp.exe | Detected by Trend Micro as TROJ_INJECTO.ARY and by Malwarebytes Anti-Malware as Trojan.VBKrypt | No |
| PECarlin | X | PECarlin.exe | PECarlin adware | No |
| PeerBlock | U | peerblock.exe | "PeerBlock lets you control who your computer 'talks to' on the Internet. By selecting appropriate lists of 'known bad' computers, you can block communication with advertising or spyware oriented servers, computers monitoring your p2p activities, computers which have been 'hacked', even entire countries!" | Yes |
| Peer Manager | X | peere32.exe | Added by the SDBOT-JX BACKDOOR! | No |
| PeerGuardian | U | PeerGuardian_1.99b_pr14.exe | PeerGuardian - IP blocker for Windows. Used to protect privacy on P2P networks by blocking IP addresses specified in blocklists. Features support for multiple lists, a list editor, automatic blocklist updates, and blocking all of IPv4 (TCP, UDP, ICMP, etc) | No |
| Mouse Suite 98 Daemon | N | pelmiced.exe | Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games | No |
| Hidup_Susah | X | Pembantu.exe | Added by the SILLYFDC.BDM WORM! | No |
| pendon | X | pendon.exe | Detected by Malwarebytes Anti-Malware as Adware.Kraddare. The file is located in %ProgramFiles%\pendon | No |
| Pro PCL Status Monitor | U | PENGSS.EXE | Xerox printer/fax/copier status monitor (PCL = printer control language) | No |
| windows auto update | X | penis32.exe | Added by the BLASTER (or MSBLAST.A) WORM! | No |
| PenOffice | N | PenOffice.exe | PenOffice collaboration and handwriting recognition software from Phatware® Corporation | No |
| Pent@VALUE 3.2 | U | Pent@VALUE.exe | Pent@VALUE Digital Satellite Internet PC Receiver | No |
| Pen Driver | X | PenTest.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Androm. The file is located in %MyDocuments%\Services | No |
| PeqBL100 | X | PEQBL100.exe | Added by the ENVID.D WORM! | No |
| WINDOWS SYSTEM | X | per.exe | Detected by McAfee as W32/Zotob.worm.c | No |
| Personal Antivirus | X | PerAvir.exe | Personal Antivirus rogue security software - not recommended, removal instructions here | No |
| msgmsgs | X | peremption.exe | Added by the SDBOT-KU WORM! | No |
| PerfectSpeed | U | PerfectSpeed.exe | System Tray access to the PerfectSpeed optimization utility from Raxco Software, Inc - which includes defrag, registry cleaning and privacy protection. Note - if you disable by right-clicking on the tray icon, it will run at start-up and then exit | Yes |
| PerfectSpeed Module | U | PerfectSpeed.exe | System Tray access to the PerfectSpeed optimization utility from Raxco Software, Inc - which includes defrag, registry cleaning and privacy protection. Note - if you disable by right-clicking on the tray icon, it will run at start-up and then exit. This entry is taken from Vista/7 MSConfig and Windows Defender for an earlier release | Yes |
| PerfectSpeed.exe | U | PerfectSpeed.exe | System Tray access to the PerfectSpeed optimization utility from Raxco Software, Inc - which includes defrag, registry cleaning and privacy protection. Note - if you disable by right-clicking on the tray icon, it will run at start-up and then exit | Yes |
| CheckWinPerf | X | perfinfo.exe | Added by a variant of the IRCBOT BACKDOOR! | No |
| perfmon | U | perfmon.vbs | MindStorm AnalyzerPro from Secure Associates. "A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices" | No |
| CheckWinPerf | X | perfmon32.exe | Added by a variant of the IRCBOT BACKDOOR! | No |
| PerfFont (Performance True Type Font) | X | perfont.exe | Added by the MUTECH-E TROJAN! | No |
| Run POPFile in background | U | perl.exe | POPFile - E-mail spam blocker | No |
| PersFw | Y | PersFw.exe | Kerio or Tiny Personal Firewall | No |
| Tiny Personal Firewall | Y | persfw.exe | Tiny Personal Firewall | No |
| personalguard | X | personalguard.exe | Personal Guard 2009 rogue security software - not recommended, removal instructions here | No |
| Personal Internet Security 2011 | X | PersonalIS2011.exe | Personal Internet Security 2011 rogue security software - not recommended, removal instructions here | No |
| PMT | X | personalmoneytree.exe | Personal Money Tree adware | No |
| personalprotector | X | personalprotector.exe | Personal Protector rogue security software - not recommended, removal instructions here | No |
| PersSecurity | X | personalsecurity.exe | Personal Security rogue security software - not recommended, removal instructions here | No |
| Personal Security Sentinel | X | PersonalSS.exe | Personal Security Sentinel rogue security software - not recommended, removal instructions here | No |
| Service | X | Pervice.exe | Added by the VBINDER VIRUS! | No |
| Pest-Patrol | X | Pest-Patrol.exe | Pest-Patrol rogue security software - not recommended, removal instructions here | No |
| Pest-Patrol 2.1.0 | X | Pest-Patrol.exe | Pest-Patrol rogue security software - not recommended, removal instructions here | No |
| PestCapture | X | PestCapture.exe | PestCapture rogue security software - not recommended, removal instructions here | No |
| Pest-Capture | X | PestCapture.exe | PestCapture rogue security software - not recommended, removal instructions here | No |
| PestPatrolCL | U | PestPatrolCL.exe | Runs the command line scanner for PestPatrol at boot time - part of the original anti-malware program by PestPatrol, Inc. Acquired by CA where it became eTrust PestPatrol Anti-Spyware and then CA Anti-Spyware - which is now included in CA AntiVirus Plus | Yes |
| pestsweeper | X | pestsweeper.exe | PestSweeper rogue security software - not recommended, removal instructions here | No |
| PestTrap | X | PestTrap.exe | PestTrap rogue spyware remover - not recommended, removal instructions here | No |
| MSPetServ | X | PET32.EXE | Added by the IRCBOT-VE WORM! | No |
| Microsoft FixUp | X | pevblbvr.exe | Added by the RBOT.DWK WORM! | No |
| Kodak Batch Transfer | N | pezdow1.exe | Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC | No |
| Kodak Picture Easy *.* Batch Transfer | N | PezDownload.exe | Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* represents the version | No |
| STROMKERNHILFE | X | pfde22.exe | Detected by McAfee as Generic.grp!mq and by Malwarebytes Anti-Malware as Backdoor.Agent.DC | No |
| Guardian PC Security Tools | U | Pfft.exe | Boomerang Software's Guardian PC Security Tools - now rebranded as the eXtendia Security Suite | No |
| pFGhxpSbYyLWr | X | pFGhxpSbYyLWr.exe | Added by the AGENT-TEZ TROJAN! | No |
| MDM Rock 4 | X | pfhtksleq.exe | Added by the SDBOT.CHG BACKDOOR! | No |
| PFM3.0 | U | PFM30.exe | Management software for the Philips 8FF3WMI/27 digital PhotoFrame. Used to configure the device, transfer photos from a PC by drag and drop and on this wireless model, you can also use it to download RSS feeds to and display Internet photos on the device. Only required if you use the wireless features - otherwise it can be started when you manually connect the device. May also be included with other models but currently only available for this one | Yes |
| PFM30 | U | PFM30.exe | Management software for the Philips 8FF3WMI/27 digital PhotoFrame. Used to configure the device, transfer photos from a PC by drag and drop and on this wireless model, you can also use it to download RSS feeds to and display Internet photos on the device. Only required if you use the wireless features - otherwise it can be started when you manually connect the device. May also be included with other models but currently only available for this one | Yes |
| Philips PhotoFrame Manager | U | PFM30.exe | Management software for the Philips 8FF3WMI/27 digital PhotoFrame. Used to configure the device, transfer photos from a PC by drag and drop and on this wireless model, you can also use it to download RSS feeds to and display Internet photos on the device. Only required if you use the wireless features - otherwise it can be started when you manually connect the device. May also be included with other models but currently only available for this one | Yes |
| PDF Filler Pilot printing agent | U | pfpagent.exe | Virtual printer for PDF Filler Pilot by Two Pilots - which "is a PDF filler that allows you to fill out PDF forms and other electronic forms (DOC, XLS, TXT...) and import and export data from/to an external database" | No |
| PDF Filler Pilot (demo) printing agent | U | pfpagentd.exe | Virtual printer for PDF Filler Pilot by Two Pilots - which "is a PDF filler that allows you to fill out PDF forms and other electronic forms (DOC, XLS, TXT...) and import and export data from/to an external database." Demo version | No |
| PerfectPrint | N | pfppop70.exe | Print engine used by Corel WordPerfect 7 and Presentations 7 | No |
| PDFFillerPilotAgentD | U | PfpprxyTSD.exe | PDF Filler Pilot by Two Pilots - "is a PDF filler that allows you to fill out PDF forms and other electronic forms (DOC, XLS, TXT...) and import and export data from/to an external database" | No |
| PFW_CfgEngine | ? | PFWCFG~1.EXE | Personal Firewall related? | No |
| PC Tools Privacy Guardian | U | pg.exe | Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| pg | U | pg.exe | Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| Privacy Guardian | U | pg.exe | Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| PeerGuardian | U | pg2.exe | PeerGuardian - IP blocker for Windows. Used to protect privacy on P2P networks by blocking IP addresses specified in blocklists. Features support for multiple lists, a list editor, automatic blocklist updates, and blocking all of IPv4 (TCP, UDP, ICMP, etc) | No |
| !1_pgaccount | Y | pgaccount.exe | DiamondCS ProcessGuard "is a powerful new type of security system that secures Windows at the lowest (kernel) level, allowing it to provide the maximum possible security" stopping malware from being executed silently in the background, as well as a variety of other attacks. You will see one instance of pgaccount.exe for every active account on your system, and this is essential for PG to work properly | No |
| Pghist | Y | PgHist.exe | Part of Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". This startup entry runs only on the next reboot if the "Cache, History and Address Bar" option is selected under "Browsers" when the users selects "Clean Your Computer" and is only created when Privacy Guardian is installed on XP. Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| PgHist.exe | Y | PgHist.exe | Part of Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". This startup entry runs only on the next reboot if the "Cache, History and Address Bar" option is selected under "Browsers" when the users selects "Clean Your Computer" and is only created when Privacy Guardian is installed on XP. Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| Privacy Guardian | Y | PgIndex.exe | Part of Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". This startup entry runs only on the next reboot if the "Index.dat" option is selected for IE under "Browsers" when the users selects "Clean Your Computer". Index.dat files keep a track of pages, images, cookies or sounds from web sites you have visited, even if these files are deleted from your system. Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| PrivacyGuardianIndex | Y | PgIndex.exe | Part of Privacy Guardian from PC Tools - which "is a safe and easy-to-use privacy protection tool that securely deletes online Internet tracks and program activity records that are stored in your browser and other hidden files on your computer". This startup entry runs only on the next reboot if the "Index.dat" option is selected for IE under "Browsers" when the users selects "Clean Your Computer". Index.dat files keep a track of pages, images, cookies or sounds from web sites you have visited, even if these files are deleted from your system. Also included in PC Tools Desktop Maestro (which incorporates Privacy Guardian) | Yes |
| statloads | X | pgjd83sa.exe | Added by the SDBOT-UM WORM! | No |
| PromulGate | X | PgMonitr.exe | Delfin PromulGate adware | No |
| PGPSDKSVC | Y | pgpsdkserv.exe | PGPsdkServ.exe is the new SDK service which is responsible for performing all PGP key management and cryptographic functions. This functionality was moved into a service to allow multiple modules simultaneous read/write access to the keyrings, among other things. As you can imagine, it is necessary for PGPsdkServ to be running in order to perform practically any PGP functionality | No |
| PGPSERVICE | U | pgpservice.exe | PGPservice.exe has two main purposes: (1) it handles a large part of the PGPnet functionality (along with the PGPnet driver) and (2) it allows efficient access to the PGP preferences database. The individual PGP modules normally access the preferences through PGPservice, but they are capable of a "fall-back" mode where they can handle such access on their own. Thus, if you are not running PGPnet, you may not immediately notice much of a difference if you disable PGPservice. If you are running PGPnet, you will notice a big difference | No |
| PGPtray | N | pgptray.exe | PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start → Programs | No |
| PGQL | X | pgql.exe | Added by the BCKDR-PQN BACKDOOR! | No |
| AntiSpionage | X | pgs.exe | AntiSpionage, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntiSpionagePro | X | pgs.exe | AntiSpionagePro, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntiSpyControl | X | pgs.exe | AntiSpyControl rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| AntiSpywareControl | X | pgs.exe | AntiSpywareControl rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| AntiSpywareSuite | X | pgs.exe | AntiSpywareSuite rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntiVer2008 | X | pgs.exe | AntiVer2008, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntivirusFiable | X | pgs.exe | AntivirusFiable, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntivirusForAll | X | pgs.exe | AntivirusForAll rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| AntivirusOrdi | X | pgs.exe | AntivirusOrdi, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntivirusPCPakke | X | pgs.exe | AntivirusPCPakke, Danish rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntivirusPCSuite | X | pgs.exe | AntivirusPCSuite rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| Antiviruspertutti | X | pgs.exe | Antiviruspertutti rogue security software - not recommended. A member of the AVSystemCare family | No |
| Antivirusscherm | X | pgs.exe | Antivirusscherm, Dutch rogue security software - not recommended. A member of the AVSystemCare family | No |
| AntiWorm2008 | X | pgs.exe | AntiWorm2008 rogue security software - not recommended. A member of the AVSystemCare family | No |
| atf.exe | X | pgs.exe | Part of the PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family | No |
| AVSeguro | X | pgs.exe | AVSeguro, Spanish rogue security software - not recommended. A member of the AVSystemCare family | No |
| AVSystemCare | X | pgs.exe | AVSystemCare rogue security software - not recommended. There are number of variants in this family sharing the same filename and user interface - see here | No |
| BastioneAntivirus | X | pgs.exe | BastioneAntivirus, Italian rogue security software - not recommended. A member of the AVSystemCare family | No |
| BedreigingsMonitoor | X | pgs.exe | BedreigingsMonitoor rogue security software - not recommended. A member of the AVSystemCare family | No |
| BestsellerAntivirus | X | pgs.exe | BestsellerAntivirus rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| BortMedVirus | X | pgs.exe | BortMedVirus rogue security software - not recommended. A member of the AVSystemCare family | No |
| DefensaAntiMalware | X | pgs.exe | DefensaAntiMalware, Spanish rogue security software - not recommended. A member of the AVSystemCare family | No |
| freinst | X | pgs.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples | No |
| GoldenAntiSpy | X | pgs.exe | GoldenAntiSpy rogue security software - not recommended. A member of the AVSystemCare family | No |
| MegaVirusKit | X | pgs.exe | MegaVirusKit rogue security software - not recommended. A member of the AVSystemCare family | No |
| MenaceSecure | X | pgs.exe | MenaceSecure rogue security software - not recommended. A member of the AVSystemCare family | No |
| NeuerSchild | X | pgs.exe | NeuerSchild, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| NoWayVirus | X | pgs.exe | NoWayVirus rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| overinstall | X | pgs.exe | Part of VirtualPCGuard, VirusGuardPlus and other members of the AVSystemCare family of rogue security software suites. See here for more examples | No |
| PCAntiVirusPro | X | pgs.exe | PCAntiVirusPro rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| PCSecureSystem | X | pgs.exe | PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family | No |
| PCTotalDefender | X | pgs.exe | PCTotalDefender rogue security software - not recommended. A member of the AVSystemCare family | No |
| PCVirusless | X | pgs.exe | PCVirusless, French rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| ProtectionComplete | X | pgs.exe | ProtectionComplete rogue security software - not recommended. A member of the AVSystemCare family | No |
| ProtectionConue | X | pgs.exe | ProtectionConue rogue security software - not recommended. A member of the AVSystemCare family | No |
| ProtezionefiData | X | pgs.exe | ProtezionefiData rogue security software - not recommended. A member of the AVSystemCare family | No |
| SichererAntivirus | X | pgs.exe | SichererAntivirus, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| SichererSchutz | X | pgs.exe | SichererSchutz, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| SolelunaAntiVirus | X | pgs.exe | SolelunaAntiVirus rogue security software - not recommended. A member of the AVSystemCare family | No |
| SpyGuardPro | X | pgs.exe | SpyGuardPro rogue security software - not recommended. A member of the AVSystemCare family | No |
| TrojansFilter | X | pgs.exe | TrojansFilter rogue security software - not recommended. A member of the AVSystemCare family | No |
| TrojansFiltre | X | pgs.exe | TrojansFiltre, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| TrustedAntivirus | X | pgs.exe | TrustedAntivirus rogue security software - not recommended. A member of the AVSystemCare family | No |
| VeiligheidAgent | X | pgs.exe | VeiligheidAgent, Dutch rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirtualPCGuard | X | pgs.exe | VirtualPCGuard rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| VirusDifesa | X | pgs.exe | VirusDifesa, Italian rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusEffaceur | X | pgs.exe | VirusEffaceur, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusForsvar | X | pgs.exe | VirusForsvar, Danish rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusGarde | X | pgs.exe | VirusGarde, French rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusGuardPlus | X | pgs.exe | VirusGuardPlus rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| VirusSchlacht | X | pgs.exe | VirusSchlacht, German rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusSeigyo | X | pgs.exe | VirusSeigyo rogue security software - not recommended. A member of the AVSystemCare family | No |
| VirusVakt | X | pgs.exe | VirusVakt, Swedish rogue security software - not recommended. A member of the AVSystemCare family | No |
| WegVonViren | X | pgs.exe | WegVonViren, Swedish rogue security software - not recommended. A member of the AVSystemCare family | No |
| WinSecureAv | X | pgs.exe | WinSecureAv rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family | No |
| WinSpyControl | X | pgs.exe | WinSpyControl rogue security software - not recommended. A member of the AVSystemCare family | No |
| pgtaff | X | pgtaff.exe | AdRotator adware variant | No |
| PiracyGuard | X | pguard_nbvpeqv.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %CommonAppData%\PiracyGuard | No |
| Winux Piriax Service | X | PH32.EXE | Added by the RANDEX.G WORM! | No |
| PHOTOfunSTUDIO | N | PhAutoRun.exe | Panasonic PHOTOfunSTUDIO photo/video management and editing software for their LUMIX range of digital cameras - "smartly sorts your photos and videos into practical folders that are created automatically as you upload them from your camera to a computer. The folders and their icons interface are linked with your LUMIX" | No |
| PHOTOfunSTUDIO -viewer- | N | PhAutoRun.exe | Panasonic PHOTOfunSTUDIO photo/video management and editing software for their LUMIX range of digital cameras - "smartly sorts your photos and videos into practical folders that are created automatically as you upload them from your camera to a computer. The folders and their icons interface are linked with your LUMIX" | No |
| DRam prmaessor | X | pHELLd.exe | Detected by Malwarebytes Anti-Malware as Backdoor.IRCBot. The file is located in %System% | No |
| Hyper Files | X | phfhost.exe | Detected by Sophos as Troj/Agent-JQO | No |
| PhiBtn | Y | PhiBtn.exe | Snapshot and Launch button application from Philips belonging to Philips SPC 900NC Camera | No |
| Philips Intelligent Agent | U | Philips Intelligent Agent.exe | Philips Intelligent Agent searches automatically the correct update for your recordable drive in only three simple steps | No |
| PhilipsRemote | U | PhilipsRemote.exe | Remote control support for MusicMatch Jukebox on Philips audio players such as the AZ2555 Sound Machine - see here | No |
| Peres | X | Phisyco.scr | Detected by McAfee as PWS-Banker.dldr!s and by Malwarebytes Anti-Malware as Trojan.Banker | No |
| Dialgo SDK | U | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" | No |
| PhoneFree version 6.2 | U | PHONEF??.EXE | An Internet telephony application. Complicated registration and ad banners tailored to your profile - see here | No |
| Client Agent | X | photes.exe | Added by the PPDOOR-P TROJAN! | No |
| PhotoCAL Startup | N | PhotoCAL.exe | PhotoCAL wizard driven monitor calibration software from ColorVision for beginners and photo enthusiasts | No |
| PhotoJoy | N | PhotoJoy.exe | PhotoJoy by IncrediMail Ltd - utility to turn photos into PhotoToys, 3D Screensavers and Wallpaper Collages | No |
| Auto Run Software for Photo Frame | U | PhotoManager.exe | Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device | Yes |
| PhotoManager | U | PhotoManager.exe | Management software for Philips digital PhotoFrame range. Used to edit photos and transfer them directly from a PC via a USB cable. Start manually when you connect the device | Yes |
| Photos Widget (HTC Home) | N | Photos.exe | Photos Widget from HTC Home - which is "a free set of widgets for Windows like on HTC Smartphones." The default installation includes the QuickShare ad-supported browser enhancement which can in turn install the Delta toolbar | Yes |
| Photos.exe | X | Photos.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Messa. The file is located in %AppData% | No |
| PhotoshopElementsSyncAgent | U | PhotoshopElementsSyncAgent.exe | Part of Adobe Photoshop Elements products in the US. "When you sign in with your Adobe ID, you can back up your albums and catalogs to Photoshop.com servers. Backing up and synchronizing your albums and catalogs are essential for protecting your photos and media files" | No |
| photo_id | X | photo_id.exe | Added by the AGENT-LTF TROJAN! The file is located in %System% | No |
| VCXD Settings | X | phqg.EXE | Added by the RBOT.BRF WORM! | No |
| WEB DRIVERS FOR WIN32 | X | phqgh.exe | Added by the SDBOT.BPE WORM! | No |
| VID INTERNET WEB DRIVERS FOR WIN32 | X | phqghu.exe | Added by the RBOT.BUD WORM! | No |
| VIEW POINT DRIVERS FOR WIN32 | X | phqghu.exe | Added by the RBOT.BUD WORM! | No |
| KYM Control Settings | X | phqghum.exe | Added by the RBOT.BQD WORM! | No |
| Microsoft Update SERVICE | X | phqghum.exe | Added by a variant of Win32/Rbot | No |
| VIEW POINT DRIVERS | X | phqghum.exe | Detected by Trend Micro as WORM_RBOT.BRX | No |
| LOCAL INTERNET WEB DRIVERS FOR WIN32 | X | phqghume.exe | Added by the RBOT.BTL WORM! | No |
| Optional Web Drivers For WIN32 | X | phqghume.exe | Added by a variant of Win32/Rbot | No |
| Microsoft Update | X | phqghumea.exe | Added by the SDBOT.AFO WORM! | No |
| PhraseExpress | U | phrase.exe | "PhraseExpress organizes your frequently used text phrases and allows pasting them into any application" | No |
| dregfix | ? | ph_finder.exe | ?? | No |
| PI Monitor | U | PI Monitor.exe | Part of older versions of the ArcSoft PhotoImpression photo management software that monitors for new images being added to watched folders | No |
| pibmyrpimqaq | X | pibmyrpimqaq.exe | Detected by McAfee as Generic Downloader.x and by Malwarebytes Anti-Malware as Spyware.Password | No |
| MSN Messenger | X | PIC1324.exe | Added by the CHOKE.C WORM! | No |
| Picaboo | N | PicabooMain.exe | Picaboo - "Easily create stunning photo books and cards with your digital photos" | No |
| LifeScape Media Detector | N | PicasaMediaDetector.exe | Media detector for an older version of the Picasa photo editing, organizing and sharing utility - before Google acquired it | No |
| Picasa Media Detector | N | PicasaMediaDetector.exe | Media detector for an older version of the Picasa photo editing, organizing and sharing utility - before Google acquired it | No |
| Pickatag | N | pickatag.exe | Pick-a-tag - "freeware utility for random selection of your taglines. This utility randomly picks a tagline out of a list of taglines. It will create a signature file which your mailer can use to place under your messages" | No |
| picocon | X | picocon.exe | Detected by Malwarebytes Anti-Malware as Trojan.Clicker.Gen. The file is located in %UserProfile%\My MyPersonalStuff | No |
| IMSS | U | PIconStartup.exe | "Intel Management and Security Status (IMSS) is an application that displays information about a platform's Intel Active Management Technology (Intel AMT) and Intel Standard Manageability services. The IMSS icon indicates whether Intel AMT and Intel Standard Manageability are running on the platform. The icon is located in the notification area. By default, the notification icon is displayed every time Windows starts" | No |
| Configuration L0ader | X | picorulez.exe | Added by the SDBOT-IN BACKDOOR! | No |
| PicoZip | U | PicoZipTray.exe | System tray access to PicoZip - "an easy to use Zip and UnZip utility that runs on all 32-bit Windows platforms such as Windows 95, 98, ME, NT4, 2000 and XP" | No |
| PicPick Start | N | picpick.exe | "PicPick - "an all-in-one program that provides a full-featured screen capture tool, an intuitive image editor, a color picker, a color palette, a pixel-ruler, a protractor, a crosshair and even a whiteboard" | No |
| PICPRTR | N | PICPRTR.EXE | Program for viewing and measuring a variety of 3D CAD data formats | No |
| picsvr | X | picsvr.exe | Delfin PromulGate adware | No |
| PictureMover | N | PictureMover.exe | Snapfish PictureMover free application to get photos directly from your camera to Snapfish (and your computer), without the pain of uploading. "Snapfish by HP is the number one online photo service, with more than 70 million members in over 20 countries and 2 billion unique photos stored online". Run manually before connecting your camera | Yes |
| PictureMover Application | N | PictureMover.exe | Snapfish PictureMover free application to get photos directly from your camera to Snapfish (and your computer), without the pain of uploading. "Snapfish by HP is the number one online photo service, with more than 70 million members in over 20 countries and 2 billion unique photos stored online". Run manually before connecting your camera | Yes |
| Snapfish PictureMover | N | PictureMover.exe | Snapfish PictureMover free application to get photos directly from your camera to Snapfish (and your computer), without the pain of uploading. "Snapfish by HP is the number one online photo service, with more than 70 million members in over 20 countries and 2 billion unique photos stored online". Run manually before connecting your camera | No |
| JPEG | X | PICTURES.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %MyDocuments% | No |
| PictureMover | N | PICTUR~1.EXE | Snapfish PictureMover free application to get photos directly from your camera to Snapfish (and your computer), without the pain of uploading. "Snapfish by HP is the number one online photo service, with more than 70 million members in over 20 countries and 2 billion unique photos stored online". Run manually before connecting your camera | Yes |
| PictureMover Application | N | PICTUR~1.EXE | Snapfish PictureMover free application to get photos directly from your camera to Snapfish (and your computer), without the pain of uploading. "Snapfish by HP is the number one online photo service, with more than 70 million members in over 20 countries and 2 billion unique photos stored online". Run manually before connecting your camera | Yes |
| picview | X | picview.exe | Added by the DWNLDR-FPH TROJAN! | No |
| PIC SYSTEM | X | picx.exe | Detected by Trend Micro as WORM_MYTOB.LL | No |
| winnt DNS ident | X | pidchk32.exe | Added by the RBOT-ACY WORM! | No |
| Pidgin | U | pidgin.exe | Pidgin IM client - "a multi-protocol Instant Messaging client that allows you to use all of your IM accounts at once" | No |
| Microsoft© PID Lex | X | PIDLex.exe | Added by the NIOVADOOR TROJAN! | No |
| Process Session Manager | X | pidserv.exe | Added by the RBOT-Y WORM! | No |
| PiDunHK | U | PIDUNHK.EXE | Part of the Prodigy Internet software - part of the dialer/DUN. Presumably needed for users of that service otherwise you may not be able to connect, although you may try creating your own shortcut and see what happens | No |
| Symantec PIF AlertEng | U | PIFSvc.exe | Symantec LiveUpdate Notice Service | No |
| pigglett | X | pigglett.exe | Added by a variant of the SMALL.EP TROJAN! | No |
| pika | X | pika.exe | Added by the SWISYN-AI TROJAN! | No |
| pilif | X | pilif.exe | Added by the FILI WORM! | No |
| Windows his Layer | X | pilotGame.exe | Added by the RBOT.GLX WORM! | No |
| [random name] | X | ping.exe | PurityScan adware. Note - do not confuse with the Microsoft utility of the same name as described here | No |
| ping | X | ping.exe | Added by the SCAR-AK TROJAN! Note - do not confuse with the Microsoft utility of the same name as described here | No |
| PingTimeout Institution | X | pingchek.exe | Added by the SDBOT-VY WORM! | No |
| Pinger | N | pinger.exe | Pinger is the resident program for Toshiba updates. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification | No |
| ToshibaPinger | N | pinger.exe | Pinger is the resident program for Toshiba Upgrades. Periodically checks to see if there are any software/driver upgrades for your particular computer model. If it finds any, it posts a notification | No |
| PPPOEO | X | pingppac.exe | Detected by Symantec as W32.Spybot.KHC | No |
| PinGuide | X | PinGuide.exe | Detected by Microsoft as Adware:Win32/PinGuide | No |
| kiss | X | pingy.exe | Added by a variant of the IRCBOT BACKDOOR! The file is located in a random subfolder of %ProgramFiles% | No |
| Pink Calendar | U | PinkCal.exe | Pink Calendar & Day Planner | No |
| Martini | X | pinmart.exe | Added by a variant of W32/Sdbot.worm | No |
| PI Notify | N | PINotify.exe | Property Intellect from Wild Rabbit Software Ltd - "is widely used in the residential lettings markets to help landlords, investors and managing agents deal with the day-to-day aspects of looking after property" | No |
| PINotify | N | PINotify.exe | Property Intellect from Wild Rabbit Software Ltd - "is widely used in the residential lettings markets to help landlords, investors and managing agents deal with the day-to-day aspects of looking after property" | No |
| Piolet | N | piolet.exe | Piolet - peer-to-peer file sharing client | No |
| pipamyvaczoq | X | pipamyvaczoq.exe | Detected by McAfee as Generic.tfr!cq and by Malwarebytes Anti-Malware as Trojan.Agent.US | No |
| PIPE SYSTEM | X | pipe.exe | Added by the MYTOB-FF WORM! | No |
| directx | X | PipeCmd.exe | Added by the SDBOT.D TROJAN! | No |
| 000 | U | pit.exe | PrivateEye surveillance software. Uninstall this software unless you put it there yourself | No |
| Pittsburgh Penguins Weather | U | Pittsburgh Penguins Weather.exe | Weather gadget included with the Pittsburgh Penguins theme for MyColors from Stardock Corporation | No |
| Pixel32 | X | Pixel32.exe | Added by the GEMA TROJAN! | No |
| Pixelpwr32 | X | Pixelpwr32.exe | Added by the GEMA TROJAN! | No |
| Pixelsvr | X | Pixelsvr.exe | Added by the GEMA TROJAN! | No |
| [various names] | X | pizda.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| pjWebCam | U | pjWebCam.exe | Webcam automation software that saves regular photos from webcam and can also act as HTTP server | No |
| Microsoft Update 2.5 | X | PK1.exe | Detected by McAfee as RDN/Generic Downloader.x and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| Perfect Keyboard | U | pk32.exe | Perfect Keyboard by Macro Toolworks - "allows users to create macros running in all Windows applications and fire them by keyboard shortcuts, hotkeys and auto-complete feature from within any application" | No |
| Perfect Keyboard LITE | U | pk32.exe | Perfect Keyboard by Macro Toolworks - "allows users to create macros running in all Windows applications and fire them by keyboard shortcuts, hotkeys and auto-complete feature from within any application" | No |
| Perfect Keyboard PRO | U | pk32.exe | Perfect Keyboard by Macro Toolworks - "allows users to create macros running in all Windows applications and fire them by keyboard shortcuts, hotkeys and auto-complete feature from within any application" | No |
| PrintKey-Pro | U | PKey_Pro.exe | PrintKey-Pro by WareCentral.com - "is a screen capture program that can capture the screen or any part of it with the press of the Print Screen key (or any other key you configure)" | No |
| ADDITIONAL Services | X | pkgadd.exe | Added by a variant of the IRCBOT TROJAN! | No |
| PK Guard | X | pkguard32.exe | Added by the GUAPIM WORM! | No |
| Pagekeeper Jobs | U | pkjobs.exe | PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc | No |
| Pagekeeper Lite | U | pkjobs.exe | PageKeeper Jobs is a separate PageKeeper program that handles the analysis of new documents and keeps track of the location and content of current documents in PageKeeper. Pagekeeper comes bundled with scanners such has HP, Microtek, etc | No |
| Phrozen Mon_KP | X | pkllagent.exe | Detected by Malwarebytes Anti-Malware as Keylogger.PKL. The file is located in %AppData%\PhrozenSoft\PKLL | No |
| PKR Pal | N | pkrpal.exe | PKR Pal utility from PKR - "helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!" | No |
| pkrpal | N | pkrpal.exe | PKR Pal utility from PKR - "helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!" | No |
| pkrpal.exe | N | pkrpal.exe | PKR Pal utility from PKR - "helps keep your software updated so in future there will be no lengthy waits for new versions to install. Based on your selected options it will also let you know when your favourite tournaments are starting!" | No |
| PK Services | X | pksvc.exe | Added by the FORBOT-BW WORM! | No |
| ToPassSrv | ? | Pktopass.exe | Related to Caere Pagekeeper scanning software (now taken over by Scansoft), Disabling is known to cause problems | No |
| PosService | N | PLauncher.exe | PowerOffer - Italian service offering the latest deals on a number of different categories. Has a clearly defined privacy statement | No |
| Photo Loader resident | N | Plauto.exe | Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures | No |
| Photo Loader supervisory | N | Plauto.exe | Casio's Photo Loader software. Hook up your camera to the USB port, and it pops up and asks you if you want to load your pictures | No |
| Newman | X | playavi.exe | Added by the LINEAGE-AT TROJAN! | No |
| Playboy | X | playavi.exe | Added by the GAMANLOCK TROJAN! | No |
| PnP Driver | X | playboy.exe | Added by the FORBOT-FR WORM! | No |
| winap | X | player.exe | Detected by Dr.Web as Trojan.Click2.53629 and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| PlayVolcanoSA | X | PlayVolcanoSA.exe | Detected by Malwarebytes Anti-Malware as Adware.HotBar.CP. The file is located in %LocalAppData%\PlayVolcanoSA\bin\[version] | No |
| TSE_PLUtil | U | PLBkMon.exe | Prolific USB Flash Disk Log On Application | No |
| UPS Online PLD Reminder Utility | N | PLDReminder.exe | Older version of the UPS WorldShip utility used to create and manage your UPS shipments | No |
| UPS WorldShip PLD Reminder Utility | N | PldReminder.exe | Older version of the UPS WorldShip utility used to create and manage your UPS shipments | No |
| PLEAPCPUCPL | U | pleapu.exe | CPU Control Panel for the Powerleap CPU upgrade | No |
| Plex Media Server | U | Plex Media Server.exe | Plex Media Server by Plex - "is smart software that makes playing Movies, TV Shows and other media on your computer simple. It's been designed from the ground up to work automatically in your home network with a variety of devices - like an LG 2011 Netcast TV, Plex Client for Mac OS X, or numerous Mobile Devices like your iPhone, iPad or Android device" | No |
| PlexTools | U | PlexTool.exe | PlexTools utility for Plextor optical drives enhance the possibility to directly control specific functions of the drive and can be used for tasks such as Digital Audio Extraction (aka ripping of Audio CDs). Now superseded by PlexUTILITIES | No |
| PlexTools Professional | U | PlexTool.exe | PlexTools utility for Plextor optical drives enhance the possibility to directly control specific functions of the drive and can be used for tasks such as Digital Audio Extraction (aka ripping of Audio CDs). Now superseded by PlexUTILITIES | No |
| PLFSetI | ? | PLFSetI.exe | Appears to be related to the webcam on some Acer laptops and users disabling it don't notice anything unusual. Can anyone confirm What it does and if it's required? | No |
| PLFSetL | ? | PLFSetL.exe | Sonix chipset driver on some Acer and other laptops - possibly webcam related. Can anyone confirm What it does and if it's required? | No |
| Imonitor | U | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal | No |
| McAfee QuickClean Imonitor | U | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal | No |
| Plguni | U | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal | No |
| StartKey | X | pligde.exe | Added by the BIFROSE.E TROJAN! | No |
| PasteLister | N | plister.exe | PasteLister - clipboard extender. Start manually when required | No |
| plite731 | X | plite731.exe | Poplite A adware | No |
| plmg.exe | U | plmg.exe | Paragon Last Minute Bidder - auction assistant software | No |
| Event Planner Reminders | N | PLNRNote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Event Planner Reminders Tray Icon | N | PLNRnote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| PLNRNote | N | PLNRNote.exe | Part of Sierra/Hallmark Card Studio - System Tray notification of events such as birthdays and anniversaries that you've scheduled with the customizable Event Planner | No |
| Plook | X | plook.exe | AffiliateTarget.com alias PLook adware | No |
| Explore | X | PLORE.EXE | Added by the FORBOT-P WORM! | No |
| Plot | X | Plot.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.BH. The file is located in %UserTemp% - see here | No |
| Windows Virus Control | X | plou.exe | Added by the SDBOT-ACZ WORM! | No |
| DRam prosessor | X | plscd.exe | Added by the RBOT.CYA WORM! | No |
| Microsoft Visual Studio | X | plscdksxg.exe | Added by the RBOT-AWV WORM! | No |
| icrosoft Visual | X | plscx.exe | Added by the RBOT-AYO WORM! | No |
| dstiosys | X | plsitctl.exe | Added by the MAILBOT-BX TROJAN! | No |
| Pluck Tray | U | PluckTray.exe | RSS (XML TAGS) reader program | No |
| PluckSvr | N | PluckUpdater.exe | Pluck Toolbar updater | No |
| Firefox Plugins | X | plugin-container.exe | Detected by Sophos as Mal/MSIL-CX | No |
| No Credit Card | X | plugin-[random].exe | Adult content pop-up dialler | No |
| CLSID | X | plugin.exe | FirstEnter - Switch dialer and hijacker variant, see here | No |
| mofenitor | X | plugin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %ProgramFiles%\plugin - see here | No |
| MOVIDAR | X | plugin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\Windows | No |
| Smiley District | X | plugin.exe | Smiley District adware | No |
| souregnd | X | plugin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %ProgramFiles%\plugin - see here | No |
| Windows Plugin One | X | plugin01.exe | Detected by McAfee as PWS-Banker!hcq | No |
| Windows Plugin Two | X | plugin02.exe | Detected by McAfee as PWS-Banker!hcq and by Malwarebytes Anti-Malware as Trojan.Banker. Note the space at the beginning of the "Startup Item" field | No |
| Windows Plugin Three | X | plugin03.exe | Detected by McAfee as PWS-Banker!hcq and by Malwarebytes Anti-Malware as Trojan.Banker | No |
| WinXP | X | plugin1.exe | Added by the Downloader-JW TROJAN! | No |
| WinXPHome | X | plugin2.exe | Added by the malicious INOR.T SCRIPT! | No |
| Plugin Live 64 | X | plugin64.exe | Detected by McAfee as PWS-Banker!hcq and by Malwarebytes Anti-Malware as Spyware.Banker | No |
| Policies | X | plugins.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen. The file is located in %Windir% | No |
| ty | X | plugins.exe | Detected by Malwarebytes Anti-Malware as Worm.Rebhip. The file is located in %Windir% | No |
| tyrt | X | plugins.exe | Detected by Malwarebytes Anti-Malware as Worm.Rebhip. The file is located in %Windir% | No |
| WebToolbar Plugin Updater | X | Plugin_helper.exe | Detected by Malwarebytes Anti-Malware as Trojan.Backdoor. The file is located in %AppData%\Adobe | No |
| plugsys | X | plugsys.exe | Added by the AGENT-OVX TROJAN! | No |
| Adobe Reader | X | Pluguin.exe | Detected by McAfee as RDN/Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| Avgnt | X | Pluguin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %ProgramFiles%\Explorer | No |
| Avgnt | X | Pluguin.exe | Detected by Kaspersky as Trojan.Win32.Llac.xqx and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %Root%\directory\Microsoft\Pluguin\Microsoft | No |
| Avgnt | X | Pluguin.exe | Detected by McAfee as RDN/Generic.dx!bbs and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %Windir%\Windows | No |
| Avgnt | X | Pluguin.exe | Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\Microsoft | No |
| Avirnt | X | Pluguin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %ProgramFiles%\Explorer | No |
| Avirnt | X | Pluguin.exe | Detected by Kaspersky as Trojan.Win32.Llac.xqx and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %Root%\directory\Microsoft\Pluguin\Microsoft | No |
| Avirnt | X | Pluguin.exe | Detected by McAfee as RDN/Generic.dx!bbs and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %Windir%\Windows | No |
| Avirnt | X | Pluguin.exe | Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent. The file is located in %System%\Microsoft | No |
| cftmon | X | Pluguin.exe | Detected by McAfee as RDN/Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| Policies | X | Pluguin.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %ProgramFiles%\Explorer | No |
| Policies | X | Pluguin.exe | Detected by Kaspersky as Trojan.Win32.Llac.acbv and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %System%\Microsoft | No |
| Policies | X | Pluguin.exe | Detected by Kaspersky as Trojan.Win32.Llac.xqx and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %Root%\directory\Microsoft\Pluguin\Microsoft | No |
| Policies | X | Pluguin.exe | Detected by McAfee as RDN/Generic.dx!bbs and by Malwarebytes Anti-Malware as Backdoor.Agent.Pgen. The file is located in %Windir%\Windows | No |
| Policies | X | Pluguin.exe | Detected by McAfee as Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %System%\Microsoft | No |
| svchost | X | Pluguin.exe | Detected by McAfee as RDN/Generic.bfr and by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| win32 | X | Pluguin.exe | Detected by Kaspersky as Trojan.Win32.Llac.acbv and by Malwarebytes Anti-Malware as Trojan.Agent.DF | No |
| Microsoft Update 2.5 | X | PluguinFaceBook#.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Bot - where # represents a number. The file is located in %Root%\ProgramData - see examples here and here | No |
| WinInit | X | PluguinFaceBook.exe | Detected by Malwarebytes Anti-Malware as Trojan.Banker. The file is located in %Root%\ProgramData | No |
| PlusService | N | PlusService.exe | Messenger Plus! add-in for Windows Live Messenger from Yuna Software | No |
| PlusTab | X | PlusTab.exe | Detected by Trend Micro as TROJ_ADLOAD.SMN | No |
| PLXSTART | U | PLXSTART.EXE | Sets the spindown timeout and access speeds at startup and displays the "Plextor Manager 2000" splash screen for Plextor CD-RW. | No |
| PLXTASK | N | PLXTASK.EXE | Taskbar utility for a "control panel" for a Plextor CD-RW. Has MVP 2000 (audio CD player), DiscDupe 2000 (self explanatory CD copying program) and AudioCapture 2000 (rips audio CDs into MP3 or WAV files) | No |
| Powermarks | U | pm.exe | Powermarks from Kaylon Technologies - bookmark manager and personal search engine | No |
| Pm32info | X | pm32info.exe | Added by the CRYPTER.A TROJAN! | No |
| VeriFaceManager | Y | PManage.exe | Lenovo VeriFace™ face-recognition software that "controls access to your notebook by using your face as your logon password and recording the faces of others who try to log on or leave you a message" | No |
| VeriFacePassManager | Y | PManage.exe | Lenovo VeriFace™ face-recognition software that "controls access to your notebook by using your face as your logon password and recording the faces of others who try to log on or leave you a message" | No |
| Pando Media Booster | U | PMB.exe | Pando Media Booster from Pando Networks, Inc - "is a tiny (2MB) UI-less client that enables you to cost effectively stream full-screen HD video by leveraging your viewer's collective spare bandwidth" | No |
| PMBVolumeWatcher | U | PMBVolumeWatcher.exe | Part of the Picture Motion Browser (PMB) software from Sony that comes with their Cyber-shot™ range of digital cameras. "An easy-to-use PC package that lets you find and organise your favourite images in moments. Email photos to a friend or upload and share them online in just a few clicks" | No |
| PMCS | ? | PMC.Service.Main.exe | Related to MediaCenterService from Pinnacle Systems. What does it do and is it required? | No |
| PMCLoader | ? | PMCLoader.exe | Part of Pinnacle TVCenter Pro for watching and recording TV on a desktop/laptop from Pinnacle Systems. What does it do and is it required? | No |
| pmcqt | X | pmcqt.exe | Added by the DLUCA-V TROJAN! | No |
| pmH57hItrkQp | X | pmH57hItrkQp.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. Note - the file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| PMHandler | ? | PMHandler.exe | Related to IBM/Lenovo Thinkpad notebooks - possibly related to power management features? What does it do and is it required? | No |
| EgisTec In-Product Service | N | PmmUpdate.exe | Software updater for Biometrics Solutions and Data Security products from EgisTec Inc | Yes |
| EgisTecPMMUpdate | N | PmmUpdate.exe | Software updater for Biometrics Solutions and Data Security products from EgisTec Inc | Yes |
| PmmUpdate | N | PmmUpdate.exe | Software updater for Biometrics Solutions and Data Security products from EgisTec Inc | Yes |
| pMNKUWCMUC | X | pMNKUWCMUC.exe | Added by the FAKEAV-OP MALWARE! | No |
| PDF Maker Pilot printing agent | U | pmpagent.exe | Virtual printer for PDF Maker Pilot by Two Pilots - which "is specially designed for making PDF documents and fillable PDF forms that can be filled out using free Adobe Reader" | No |
| PDF Maker Pilot (demo) printing agent | U | pmpagentd.exe | Virtual printer for PDF Maker Pilot by Two Pilots - which "is specially designed for making PDF documents and fillable PDF forms that can be filled out using free Adobe Reader." Demo version | No |
| PMPro32 | X | pmpro32.exe | SpyArsenal Print Monitor Pro spyware | No |
| PmProxy | ? | PmProxy.exe | Associated with Analog Devices "SoundMAX" audio chipset - often built-in to motherboards. What does it do and is it required? | No |
| pmr | X | pmr.exe | PowerStrip foistware. Note - this is not the same as the video tweaking utility of the same name here | No |
| Event Reminder | N | PMremind.exe | Event reminder for calendar dates, etc from Broderbund PrintMaster. Disable using the program's own option (if available) or a startup manager as it will re-instate if disabled via MSConfig | No |
| Print Master Event Reminder | N | PMremind.exe | Event reminder for calendar dates, etc from Broderbund PrintMaster. Disable using the program's own option (if available) or a startup manager as it will re-instate if disabled via MSConfig | No |
| PremierOpinion | X | pmropn.exe | PremierOpinion adware | No |
| none | X | pmsngr.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details. The most popular for this example appears to be "Video ActiveX Object" | No |
| pmsngr.exe | X | pmsngr.exe | Added by the ZLOB.MEDIA-CODEC TROJAN! This purports to be a Windows Media Player upgrade (with names such as "iCodecPack", "X Password Manager" and "Media-Codec") to allow the user to view adult oriented videos on certain websites - but actually downloads and installs additional malware on the user's machine. Various directories and filenames are used - see the link for details | No |
| PMSpeed | ? | PMSpeed.EXE | Related to Presto! PageManager from NewSoft Technology Corporation - which "allows you see your entire file organization structure - from the overall picture to the smallest detail. You can create, write, and open PDF files without file conversion or other application" | No |
| Disk Defragmentation Loader | X | pmsvcr.exe | Added by the SLENFBOT.JG WORM! | No |
| PMTSHOOT | N | pmtshoot.exe | MS tool for troubleshooting power management problems | No |
| CyberLink PlayMovie | N | PMVService.exe | Preloads movie related parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of that feature. Only required on slower/older systems | Yes |
| PlayMovie | N | PMVService.exe | Preloads movie related parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of that feature. Only required on slower/older systems and included with versions of PowerCinema bundled (and re-branded) with systems from Acer, Dell, ASUS and others | Yes |
| PMVService | N | PMVService.exe | Preloads movie related parts of CyberLink's PowerCinema digital home entertainment software to speed up the launch of that feature. Only required on slower/older systems and included with versions of PowerCinema bundled (and re-branded) with systems from Acer, Dell, ASUS and others | Yes |
| Scan Detector | ? | Pmxdetect.exe | Associated with Visioneer PrimaScan scanners. Is it required? | No |
| PMXInit | U | pmxinit.exe | Restores user display preferences Kyro2 based graphics cards. Not required unless you change the default settings - such as gamma | No |
| PNAgent | N | PNAgent.exe | PhatNoise Music Manager - manages WMA, MP3, WAV, etc music files & PhatNoise Media Manager - access, organize, transfer, and playback digital music and movie files | No |
| Program Neighborhood Agent | U | pnagent.exe | Citrix Program Neighborhood Agent | No |
| Microsoft PnD | X | pnd.exe | Detected by Dr.Web as Trojan.DownLoader7.18330 and by Malwarebytes Anti-Malware as Trojan.Delf | No |
| PalNetaware | X | pnetaware.exe | PalTalk adware - as included in Morpheus | No |
| Vekio Startups | X | Pnksvc32.exe | Detected by Trend Micro as WORM_AGOBOT.AJG | No |
| MSPRO32 | X | pnp.exe | Added by the ZOTOB.O WORM! | No |
| Pnpchk | U | Pnpchk.exe | Aztech Labs Sound 3 PnP driver | No |
| Smart Start UP | N | PnPDetect.exe | Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos" | No |
| PNP FIX | X | pnpfix.exe | Detected by Total Defense as Win32.Rbot.DGG | No |
| Windows PNP Server | X | pnpsrv.exe | Detected by Sophos as W32/Rbot-AKM | No |
| PNSetup | U | PNSetup.exe | PopNot - pop-up killer | No |
| wacult | X | PNsItbtSXt.exe | Detected by Dr.Web as Trojan.DownLoader4.21422 and by Malwarebytes Anti-Malware as Backdoor.Messa.Gen | No |
| PNtask Services | X | pntask.exe | Added by the LALA.C TROJAN! | No |
| NexusServer | U | PNXSERVR.exe | Related to ProCoder from Grass Valley (was Canopus) - which "combines speed and flexibility into a streamlined video conversion tool. Widely acknowledged as the leading software transcoder, it features extensive input/output options, advanced filtering, batch processing, and an easy-to-use interface" | No |
| PktAnything | U | PocketCompanion.exe | PocketAnything lets you save anything on your computer to your mobile, with one click | No |
| W32.Formalin.Beta | X | Pocong.exe | Added by the SILLYFDC WORM! | No |
| POEngine | N | POEngine.exe | "PokerOffice is much more than just a poker odds calculator and poker software. It is the most sophisticated poker software tool on the market for Online Poker" | No |
| Poet | X | Poet.exe | Added by the DOEP.A WORM! | No |
| eEjerik | X | pohapereq.exe | Added by the SDBOT.BFF WORM! | No |
| Microsoft Security Monitor Process | X | point.exe | Added by the IRCBOT.AVP BACKDOOR! | No |
| IntelliPoint | U | point32.exe | Microsoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported | Yes |
| Microsoft IntelliPoint | U | point32.exe | Microsoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported | Yes |
| point32 | U | point32.exe | Microsoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported | Yes |
| POINTER | U | point32.exe | Microsoft IntelliPoint utility (up to version 5.4) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported | No |
| pointbag_shop_sv | X | pointbag_hidden.exe | Pointbag browser modifier | No |
| pointmania | X | pointmania.exe | PointMania adware. File located in %Program Files%\pointmania | No |
| Pointmaru | X | Pointmaru.exe | Added by the AGENT.BLDK TROJAN! | No |
| Altnet | X | points manager.exe | Altnet TopSearch adware | No |
| AltnetPointsManager | X | points manager.exe | TopSearch adware | No |
| points manager | X | points manager.exe | TopSearch adware | No |
| demo | X | poisonn.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %System% | No |
| PoivY | N | PoivY.exe | PoivY - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype | Yes |
| System service** | X | pokapoka**.exe | Detected by Symantec as Trojan.Elitebar - where ** represents the numbers 61 to 79 | No |
| Microsoft Windows DLL Services Configuration | X | poker.exe | Added by the SDBOT-ZY WORM! | No |
| icrosoft Windows DLL Services Configuration | X | poker3.exe | Added by the SDBOT-AER WORM! | No |
| Microsoft Windows DLL Services Configuration | X | poker3.exe | Added by the SDBOT-AAH WORM! | No |
| HKCU | X | Policies.exe | Detected by Kaspersky as Trojan.Win32.Llac.ehs and by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %Windir%\Policies | No |
| HKLM | X | Policies.exe | Detected by Kaspersky as Trojan.Win32.Llac.ehs and by Malwarebytes Anti-Malware as Backdoor.HMCPol.Gen. The file is located in %Windir%\Policies | No |
| Policies | X | Policies.exe | Detected by Kaspersky as Trojan.Win32.Llac.ehs and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %Windir%\Policies | No |
| Policies | X | Policies.exe | Detected by McAfee as Generic Downloader.x and by Malwarebytes Anti-Malware as Backdoor.Agent.PGen. The file is located in %AppData%\Policies | No |
| Policies | X | Policies.exe | Detected by McAfee as Generic.dx!bd3g and by Malwarebytes Anti-Malware as Backdoor.DarkMoon. The file is located in %AppData% | No |
| Pollon | X | pollone.exe | Added by the SPYBOT.FW WORM! | No |
| POlNTER | X | POlNT32.EXE | Added by the XDEM-A BACKDOOR! Note - this is not the valid Microsoft IntelliPoint mouse utility. Both the Name and Command entries have a lower case "L" in them rather than an upper case "i" | No |
| polo.exe | X | polo.exe | Detected by Sophos as Troj/Agent-PE | No |
| Win32 USB2 Driver | X | pomedsrv.exe | Detected by Trend Micro as WORM_WOOTBOT.ZA | No |
| 4a092bbf3eebe0490e9c875d5b957c18 | X | pool.exe | Detected by McAfee as Generic.dx!bhrd and by Malwarebytes Anti-Malware as Trojan.MSIL | No |
| Spool32 | X | pool32.exe | Detected by Sophos as Troj/Assasin-F | No |
| Windows Pool Setup | X | poolmc.exe | Added by the IRCBOT.RU BACKDOOR! | No |
| Windows Pool Manager | X | poolsc.exe | Added by the OBOT.CH WORM! | No |
| poolsv | X | poolsv.exe | Detected by Kaspersky as Trojan-Downloader.Win32.VB.bhs. The file is located in %Windir% | No |
| Pop-Up Zero | U | Pop-Up Zero.exe | Pop-Up Zero pop-up stopper | No |
| pop06ap | X | pop06ap2.exe | MediaMotor adware | No |
| NOD32POP3 | Y | Pop3scan.exe | POP3 E-mail part of Eset's NOD32 antivirus | No |
| Pop3trap.exe | Y | Pop3trap.exe | Part of Trend Micro web-security products - PC-cillin 2000, 2002-2003 and Virus Buster 2001-2003. This is the E-mail scanner | No |
| ControlPanel | X | popcorn.exe internat.dll,LoadKeyboardProfile | Added by the BIZVES-B TROJAN! | No |
| ControlPanel | X | popcorn320.exe rundll.dll,LoadMouseProfile | Added by a variant of the DLOADER-RA TROJAN! | No |
| ControlPanel | X | popcorn64.exe rundll.dll,LoadMouseProfile | Added by the DLOADER-OI TROJAN! | No |
| ControlPanel | X | popcorn72.exe rundll.dll,LoadMouseProfile | Added by the DLOADER-RA TROJAN! | No |
| PopeSvr | X | PopeSvr.exe | Detected by Sophos as Troj/LegMir-AJ and by Malwarebytes Anti-Malware as Trojan.GamesThief | No |
| Popup Ad Filter | U | PopFilter.exe | Popup Ad Filter - pop-up killer | No |
| Super Popup Blocker | U | popkill.exe | Saga Super Popup Blocker - pop-up stopper | No |
| plink | X | PopLink.exe | Detected by McAfee as Generic.tfr!bf and by Malwarebytes Anti-Malware as Adware.KorAd | No |
| POP Manager | X | popmgr.exe | Added by the BCKDR-PYV BACKDOOR! | No |
| PopNot | U | PopNot.exe | PopNot - pop-up killer | No |
| PopOops | U | PopOops.exe | PopOops - pop-up killer | No |
| Popopen | U | popopen.exe | PopOpen makes your windows spring open with animation effects | No |
| POP Peeper | U | POPPeeper.exe | POP Peeper from Mortal Universe Software Entertainment "is an email notifier that runs in your Windows task bar and alerts you when you have new email on your POP3, IMAP, etc" | No |
| Norton eMail Protect | Y | POPROXY.EXE | Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it | No |
| Poproxy | Y | POPROXY.EXE | Proxy E-mail protection from Norton Anti-Virus (prior to 2002). If you have it installed, leave it enabled to automatically check for suspect attachments in E-mails that may contain viruses. It downloads the E-mail into poproxy, which serves as a proxy server on the local machine, before scanning it | No |
| iPop | X | popsi.exe | Detected by McAfee as Generic Downloader.x!gmz and by Malwarebytes Anti-Malware as Adware.KorAd | No |
| POP | X | PopSrv***.exe | PeopleonPage foistware, bundled with Grokster where *** are random digits | No |
| popsrv146 | X | popsrv146.exe | AproposMedia adware | No |
| lgbrz32 | X | PopStop32.exe | Added by the SPYBOT.HFT WORM! | No |
| PopSubtract | U | PopSub.exe | PopSubtract - pop-up killer | No |
| pool manager | X | popsvr.exe | Added by the AGENT-S BACKDOOR! | No |
| PopTray | U | PopTray.exe | PopTray - POP3 mail notifier | No |
| PopupEliminator | U | Popup Eliminator.exe | PopupEliminator pop-up blocker from SurfSecret - no longer available | No |
| PopUp Destroy | U | Popup-Destroy.exe | French pop-up killer from VSoft | No |
| Popup | U | Popup.exe | Pop-up blocker part of the Tweak-XP optimization utility for Windows XP from Totalidea Software | No |
| Pop-Up-Blocker | U | popup.exe | Pop-up blocker part of the Tweak-XP optimization utility for Windows XP from Totalidea Software | No |
| PopupBlock | U | PopupBlock.exe | PopupBlock pop-up blocker by planetscott.ca | No |
| Popup Blocker System | X | PopUpBlocker.exe | Added by a variant of W32/Sdbot.worm. The file is located in %System% | No |
| System Mechanic Popup Blocker | U | PopupBlocker.exe | Popup blocker part of Iolo System Mechanic utility suite | No |
| Blocker System611 Monitoring | X | PopUpBlocker611.exe | Detected by Trend Micro as WORM_RBOT.BLJ | No |
| Popup Blocker System326a Monitoring | X | PopUpBlocker6a.exe | Detected by Trend Micro as WORM_RBOT.AUH | No |
| Popup Blocker System8 Monitoring | X | PopUpBlocker8.exe | Added by a variant of W32/Sdbot.worm. The file is located in %System% | No |
| PopUp Buster+ | U | popupbuster.exe | PopUp Buster - free Pop-up blocker | No |
| notepad2.exe | X | popuper.exe | Added by the PUPER-E TROJAN! | No |
| MasterBoot Switch | X | popupkill.exe | Detected by Trend Micro as WORM_SDBOT.AYO | No |
| Ashampoo PopUpBlocker | U | PopUpKiller.exe | Ashampoo® Popup Blocker - part of a number or their products, including Magical Security and WinOptimizer Platinum 3 | No |
| PopUpKiller | U | PopUpKiller.exe | PopUpKiller - pop-up killer | No |
| Ultimate Popup Killer | U | Popupkiller.exe | Ultimate Popup Killer - pop-up killer | No |
| Asmw Soft Popups Burner | U | popups burner.exe | Popup blocker, part of Asmw Soft PC Optimizer | No |
| Pop-Up_Scanner | U | Popupscn.exe | Panicware popup blocker | No |
| Pop-Up Smasher | U | PopupSmasher.exe | Pop-Up Smasher - pop-up killer | No |
| System Mechanic Popup Stopper | U | Popupstopper.exe | Popup stopper part of Iolo System Mechanic utility suite | No |
| PopUpStopperProfessional | U | PopUpStopperProfessional.exe | Panicware's Pop-Up Stopper - paid for version | No |
| PopupVanish | U | PopupVanish.exe | Pop-up blocker | No |
| PopUpWasher | U | PopUpWasher.exe | Webroot PopUpWasher pop-up killer - now discontinued | No |
| POPUPWATCH | X | PopUpWatch.exe | BPS Spyware Remover rogue spyware remover - not recommended, removal instructions here | No |
| [various names] | X | porka_.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| IE6 | X | porn.pif | Added by the RBOT-ATF WORM! | No |
| TrojanShield Protector | U | Port.exe | TrojanShield anti-hacker/anti-trojan software | No |
| Pure Networks Port Magic | N | PortAOL.exe | Pure Networks Port Magic, as available in the latest version of the AOL® 9.0 Optimized SE software; automatically configures most in-home Internet gateways, improving access and performance for applications such as instant messaging, online gaming, and streaming music and video. See here | No |
| GW Port Controller | Y | PORTCT95.EXE | From a visitor - "I must keep it active in start up or my Lexmark printer and RCA Cam program cannot discover a working port to work". From the file properties, the file is known as "Smart Thru Fax Drive Spy" and is supplied by Samsung | No |
| postsos | X | post.exe | Added by the TATERF-Z WORM! | No |
| Lastword | X | Posta_Update.exe | Detected by ESET as Win32/Lastword | No |
| M Player Post Installer | ? | postinstallm.exe | ?? | No |
| PostTip | X | PostTip.exe | Detected by Ikarus as AdWare.Win32.SideTab | No |
| POW! | U | pow.exe | Pop-up killer | No |
| Power-Antivirus-2009 | X | Power-Antivirus-2009.exe | Power Antivirus 2009 rogue security software - not recommended, removal instructions here | No |
| Power2Go Express | N | Power2GoExpress.exe | Power2GoExpress is the simple mode of the Power2GO all-media disc burning software from Cyberlink. In this mode you can drag files to a series of desktop icons and right-click on the appropriate icon to burn a disc or simply erase a disc via the System Tray icon | Yes |
| Power2GoExpress | N | Power2GoExpress.exe | Power2GoExpress is the simple mode of the Power2GO all-media disc burning software from Cyberlink. In this mode you can drag files to a series of desktop icons and right-click on the appropriate icon to burn a disc or simply erase a disc via the System Tray icon | Yes |
| PowerBar | N | Powerbar.exe | Part of Cyberlink's PowerDVD software. Not sure what exactly it does, but not required in startup | No |
| [various names] | X | powerdll.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| PowerDVD | N | PowerDVD.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PowerDVD | N | PowerDVD8.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PowerDVD8 | N | PowerDVD8.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PowerDVD | N | PowerDVD9.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| PowerDVD9 | N | PowerDVD9.exe | Runs CyberLink's PowerDVD Blu-ray and DVD player at startup. If enabled, PowerDVD will automatically play a disc when inserted. Launch manually | Yes |
| Power DVD Player | X | PowerDVDPlayer.exe hmw | Detected by Sophos as Troj/Zbot-OB. The file is located in %ProgramFiles%\Power DVD Player | No |
| PowerForPhone | U | PowerForPhone.exe | "ASUS Power 4 Phone is a telephone terminal emulation utility which can use hotkeys to handle a phone call from Skype or Modem in your notebook system." For more information you can find a user's manual here | No |
| PowerGramo | N | PowerGramo.exe | "PowerGramo Skype recorder is a perfect Skype recording solution. With it you can easily record skype calls of any kind" | No |
| AcerPowerkey | U | Powerkey.exe | PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3 | No |
| PowerKey | U | PowerKey.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 | No |
| PowerMenu | U | PowerMenu.exe | PowerMenu which adds Always On Top, Transparency and Minimize To Tray options | No |
| poweroff | X | poweroffuc.exe | Detected by Malwarebytes Anti-Malware as Adware.KorAd. The file is located in %ProgramFiles%\poweroff | No |
| 00a77904c3b3291c90413c3dda43b068 | X | poweroftelepo.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL.Agent. The file is located in %UserTemp% | No |
| Sky | X | poweroftelepo.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL.Agent. The file is located in %UserTemp% | No |
| PowerPro | U | powerpro.exe | Part of the power professional program that loads the floating menu bar. Can be accessed from Start → Programs, but I'd leave it alone if you use this program | No |
| PowerProf | X | PowerProf.exe | Added by the LOREX.B TROJAN! | No |
| PowerReg Scheduler | N | PowerReg Scheduler V3.exe | PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others | Yes |
| PowerReg Scheduler V3 | N | PowerReg Scheduler V3.exe | PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others | Yes |
| PowerReg Scheduler | N | PowerReg Scheduler.exe | PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others | No |
| PowerReg SchedulerV2 | N | PowerReg SchedulerV2.exe | PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others | No |
| PowerReg SchedulerV3 | N | PowerReg SchedulerV3.exe | PowerREGISTER from Leadertech. Registration reminder as used by Iomega, Hasbro & Microprose - amongst others | No |
| POWERR~1 | ? | POWERR~1.exe | Power monitoring? | No |
| PowerS | ? | PowerS.exe | ProlinkTest for either their AGP graphics card or TV/FM capture card. Is it required? | No |
| Power Scan | X | powerscan.exe | Foistware by Integrated Search Technologies - the people behind ISTBar adware | No |
| PowerStrip | N | powerstrip.exe | PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings | No |
| PowerPc | X | powerup.exe | PowerPc rogue security software - not recommended, removal instructions here | No |
| powervaccinestart.exe | X | powervaccinestart.exe | PowerVaccine rogue security software - not recommended, removal instructions here | No |
| PowerPanel | Y | POWPANEL.EXE | Power management utility on notebooks/laptops - automatically switches modes when running on battery | No |
| ChromeUpdate | X | powrper.exe | Detected by Dr.Web as Trojan.DownLoader6.41884 | No |
| Win32.Pozarevac | X | Pozarevac.exe | Added by the DELF-FBN TROJAN! | No |
| pp | X | pp12.exe | Added by the DWNLDR-HXV TROJAN! | No |
| pp | X | pp2.exe | Added by a variant of the KOOBFACE WORM! | No |
| eTrust PestPatrol | Y | PPActiveDetection.exe | Real-time protection for eTrust PestPatrol Anti-Spyware - which became CA Anti-Spyware and is now included in CA AntiVirus Plus | Yes |
| eTrust PestPatrol Active Protection | U | PPActiveDetection.exe | Real-time protection for eTrust PestPatrol Anti-Spyware - which became CA Anti-Spyware and is now included in CA AntiVirus Plus | No |
| eTrustPPAP | Y | PPActiveDetection.exe | Real-time protection for eTrust PestPatrol Anti-Spyware - which became CA Anti-Spyware and is now included in CA AntiVirus Plus | Yes |
| PPActiveDetection | Y | PPActiveDetection.exe | Real-time protection for eTrust PestPatrol Anti-Spyware - which became CA Anti-Spyware and is now included in CA AntiVirus Plus | Yes |
| PPAP | N | PPAP.exe | Part of PPLive from SynaCast - "the largest online video interactive entertainment media platform worldwide with the highest number of users and widest coverage serving Chinese communities" | No |
| ppbeuser | U | ppbeuser.exe | CyberPower PowerPanel Business Edition - "is one of the most reliable, powerful and user-friendly UPS remote management software systems available" | No |
| PPClean RunOnce insertion | ? | ppclean.exe | Related to the installation of Yahoo! Anti-Spy for Toolbar | No |
| Bart Station | U | PPCOLink.exe | Dialer for PeoplePC ISP | No |
| PestPatrol Control Center | Y | PPControl.exe | PestPatrol Control Terminal - core program with System Tray access that launches PestPatrol features such as PPMemCheck and CookiePatrol. Part of the original anti-malware program by PestPatrol, Inc. Acquired by CA where it became eTrust PestPatrol Anti-Spyware and then CA Anti-Spyware - which is now included in CA AntiVirus Plus | Yes |
| PPControl | Y | PPControl.exe | PestPatrol Control Terminal - core program with System Tray access that launches PestPatrol features such as PPMemCheck and CookiePatrol. Part of the original anti-malware program by PestPatrol, Inc. Acquired by CA where it became eTrust PestPatrol Anti-Spyware and then CA Anti-Spyware - which is now included in CA AntiVirus Plus | Yes |
| PPCRunonce | U | PPCRunOnce.exe | Related to PeoplePC ISP software - may display advertising, see here | No |
| PCLEPCI | U | ppe.exe | PCI Performance Enhancer tool for PCI cards included with some Pinnacle Systems products - "helps to increase the PCI Busmaster performance of all Pinnacle PCI boards" | No |
| PP Gamma | U | ppgamma.exe | Profile Prism software that allows monitor calibration and can generate ICC profiles for digital cameras | No |
| PPHIDPAD | U | pphidpad.exe | PenPower Chinese handwriting recognition software | No |
| PP2000 Instaupdate | U | PPInupdt.exe | Protector Plus anti-virus software - instant update program for virus data updates. Not required if you regularly update virus data manually | No |
| agent | X | ppl.exe | Added by the DREF-U VIRUS! | No |
| PPLive | N | PPLive.exe | PPLive from SynaCast - "the largest online video interactive entertainment media platform worldwide with the highest number of users and widest coverage serving Chinese communities" | No |
| ppmate | N | ppmate.exe | PPMate - free tool for streaming online TV via P2P (peer-to-peer) | No |
| PPMemCheck | Y | PPMemCheck.exe | Real-time spyware installation blocker - part of the original anti-malware program by PestPatrol, Inc. Acquired by CA where it became eTrust PestPatrol Anti-Spyware and then CA Anti-Spyware - which is now included in CA AntiVirus Plus | Yes |
| Windows Audio Control | X | ppnsvc.exe | Added by the HAM TROJAN! | No |
| PowerPanel Personal Edition User Interaction | U | pppeuser.exe | CyberPower PowerPanel Personal Edition - "features a user-friendly, powerful dashboard interface for controlling and monitoring your CyberPower UPS" | No |
| SoftickPPP | U | PPPGate.exe | Softick PPP is a Microsoft Windows driver that allows to establish PPP session between Palm powered devices and Microsoft Windows desktop computer | No |
| PProTray | N | pprotray.exe | Part of the power professional program. Loads the System Tray control | No |
| System_Messages | U | pprsen.exe | TerminatorX - "offers an easy and effective method of stopping users running predetermined file sharing programs like KaZaA, messenger programs, chat rooms and the like" | No |
| PPS Accelerator | N | ppsap.exe | PPStream from PPStream, Inc - peer-to-peer (P2P) television service. As PPStream is a peer-to-peer (P2P) file-sharing client used to distribute large amounts of data between multiple users make sure you have good, up-to-date virus protection and check any downloads | No |
| PPScheduler | ? | PPScheduler.exe | Part of Nuance (was ScanSoft) PaperPort - "scan, organize, find and share all of your documents including paper, PDF, application files and photographs". What does it do and is it required? | No |
| Perfect Process shield | Y | ppshield.exe | Perfect Process by VelociWare - "the easiest way of protecting and defending against Spyware in your network" | No |
| bin32hpu | X | ppstub.exe | PrecisionPop adware | No |
| PPSYS | U | ppsys.exe | PC Police commercial keystroke logger. Uninstall this software if you did not install it yourself | No |
| PP2000 Taskbar Control | Y | PPTbc.exe | Protector Plus anti-virus software - system tray access | No |
| PaperPort PTD | N | pptd40nt.exe | Part of Nuance (was ScanSoft) PaperPort - "scan, organize, find and share all of your documents including paper, PDF, application files and photographs". This is the virtual printer driver which enables the "Print to the PaperPort Desktop" feature of the PaperPort Desktop | No |
| pptd40nt | N | pptd40nt.exe | Part of Nuance (was ScanSoft) PaperPort - "scan, organize, find and share all of your documents including paper, PDF, application files and photographs". This is the virtual printer driver which enables the "Print to the PaperPort Desktop" feature of the PaperPort Desktop | No |
| PPUpdate | U | ppupdater.exe | Automatic updates for the original anti-malware program by PestPatrol, Inc. Acquired by CA where it became eTrust PestPatrol Anti-Spyware and then CA Anti-Spyware - which is now included in CA AntiVirus Plus | No |
| PP2000 Real Time Scan | Y | PPVstop.exe | Protector Plus anti-virus software - real time scanner | No |
| PPWebCap | N | PPWebCap.exe | Allows you to capture the visible portion of a webpage direct to Scansoft PaperPort (now by Nuance) | No |
| pq5kk4ujjj | X | pq5kk4ujjj.exe | Detected by Sophos as Troj/Tibia-N and by Malwarebytes Anti-Malware as Trojan.Delf. The file is located in %UserStartup% and its presence there ensures it runs when Windows starts | No |
| pqhelper | X | pqhelper.exe | Searchcentrix hijacker | No |
| PowerQuest Startup Utility | N | PQINIT.EXE | From a visitor - "This seems to be installed when you install Power Quest Partition Magic. I think that it implements the changes when you use the magic mover app. If you don't have any mappings set up, it does nothing (except waste bytes and cycles). I disabled it using msconfig.exe with no problems" | No |
| 12CFG515-K641-55SF-N66P | X | pqlmq.exe | Added by the SLENUGGA.A TROJAN! | No |
| PaperQuote System Tray Icon | N | PQTRAY.EXE | PaperQuote is a "wallpaper" changer with daily quotes that are either for inspiration or motivation | No |
| Praetorian | N | praetorian.exe | Related to updates for the Yandex Russian search engine | No |
| Prcgd | X | Prcgd.exe | Added by the AUTORUN-BCJ WORM! | No |
| [various names] | X | PrcIdle.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| [various names] | X | prcmon.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| PrcView | N | PrcView.exe | PrcView from Computer Technology, Inc - "is a process viewer utility that displays detailed information about processes running under Windows. Freeware and also bundled with versions of Symantec's Norton Utilities (either as a standalone product or as part of Norton SystemWorks) | Yes |
| Task Manager | X | prcview.exe | Added by the AGOBOT-RT WORM! Note - this is not the legitimate PrcView process viewer (also bundled with versions of Symantec's Norton Utilities) | No |
| PrdMgr.exe | X | PrdMgr.exe | Added by a variant of the IRCBOT BACKDOOR! | No |
| prdtect | X | prdtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| ReproPRD | U | PrdUsb.exe | Thrustmaster Corporation Presets application - a game controller driver, presumably necessary for certain functions to work | No |
| PreAnnotate | ? | PreAnntt.exe | Genius Wizard Pen Tablet driver related. Is it required? | No |
| Precision Time Clock Checker | X | PrecisionTime.exe | PrecisionTime - clock synchronizing software. Contains GAIN adware by Claria Corporation | No |
| PrecisionTime | X | PrecisionTime.exe | PrecisionTime - clock synchronizing software. Contains GAIN adware by Claria Corporation | No |
| [various names] | X | Preliminary.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| Keyboard Preload Check | Y | Preload.exe | Millenium Multi-Function Keyboard driver | No |
| Preload | Y | Preload.exe | Millenium Multi-Function Keyboard driver | No |
| Norton AV Preload | ? | Premend.exe | Norton Antivirus related. What does it do and is it required | No |
| premiumad.exe | X | premiumad.exe | Detected by Dr.Web as Trojan.DownLoad3.16130 and by Malwarebytes Anti-Malware as Adware.KorAd | No |
| MagicKeyboard | U | PreMKBD.exe | Programmable key manager for Samsung laptops. Required if you use the additional keys | No |
| 4StoryPrePatch | U | PrePatch.exe | PrePatch downloader for the 4Story MMORPG from Zemi Interactive | No |
| Windows UDP Control Center | X | Presends0.exe | Added by the VBPIT-A MALWARE! | No |
| HP Presentation Ready | N | PresRdy.exe | HP Omnibook related: "Press a dedicated button above the keyboard and the system will instantly load your presentation software and change the screen resolution to match your display device" | No |
| PrestoNotes | N | PrestoNotes.exe | PrestoNotes lets you create virtual notes on your desktop, that can be hidden or shown as needed | No |
| Presto TuneUp | X | PrestoTuneUp.exe | Presto TuneUp rogue optimization utility - not recommended, removal instructions here | No |
| UninstallHL | X | PreUninstallHL.exe | Detected by SUPERAntiSpyware as Trojan.PreUninstallHL/32.Process | No |
| UninstallQL | X | PreUninstallQL.exe | Detected by SUPERAntiSpyware as Trojan.Logger.Process | No |
| Preview AdService | X | PrevAdServ.exe | Preview AdService adware - removal instructions here | No |
| Panda Preventium+ Service | Y | PREVSRV.EXE | Part of an older version of the Panda Security range of internet security products. Runs as a service on Windows XP | No |
| PrevX | X | prevx.exe | Added by the IRCBOT-TF WORM! Note - this worm is located in the System (Win9x/Me) or System32 (XP/WinNT/2K) directory and is not the PrevX Home intrusion prevention software | No |
| [various names] | X | prgsys0984.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| prgtect | X | prgtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| Le Petit Robert Hyperappel | U | prhyper.exe | Allows you to select a word or phrase within a document, application, web-page, etc and search for it within an older version of the "Le Petit Robert" French dictionary from Le Robert. See here for more information | No |
| \Pribi.exe | X | Pribi.exe | FastFind adware variant | No |
| Pribi.exe | X | Pribi.exe | FastFind.B adware | No |
| primead.exe | X | primead.exe | Detected by Dr.Web as Trojan.DownLoader7.16410 and by Malwarebytes Anti-Malware as Trojan.Korad | No |
| Microsoft Security Monitor Process | X | princ.exe | Added by the HUPIGON.WTL TROJAN! | No |
| PrintDisp | Y | PrintDisp.exe | Virtual printer installed with ALL2PDF PDF Creator and Document Converter file conversion utilities from ActMask Co.,Ltd. Also licensed by a number of 3rd parties. As other applications potentially depend upon this leave it enabled | Yes |
| printer | X | printer.exe | WinIFixer rogue security software - not recommended, removal instructions here | No |
| WinXPService | X | printer.exe | Added by the MDROP-BYD TROJAN! | No |
| Printkey2000 | N | Printkey2000.exe | Screen grabber that intercepts the pressing of the Print Screen (Prn Scrn) key. Start manually when required | No |
| printnow | N | printnow.exe | PrintNow - a utility that primarily allows "Print Srceen" or "Alt+Print Screen" screenshots to be sent directly to a printer | No |
| CompaqPrinTray | N | printray.exe | Puts printer icon in the System Tray. When this option is disabled you will no longer be able to access the Control Program or Printer Driver directly from your desktop | No |
| LexmarkPrinTray | N | printray.exe | Lexmark Printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. Can also be listed as PrinTray | No |
| PrinTray | N | Printray.exe | Lexmark/Compaq printer icon in the System Tray for quick access. Not required - uncheck via Printer configuration rather than MSCONFIG. See also LexmarkPrintray and CompaqPrinTray | No |
| Gadwin PrintScreen | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| Gadwin PrintScreen 2.6 | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| Gadwin PrintScreen 3.1 | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| Gadwin PrintScreen 3.5 | N | PrintScreen.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| Gadwin PrintScreen Pro | N | PrintScreenPro.exe | Gadwin PrintScreen - utility to capture, print or save the current window | No |
| PrintUtil | N | PrintUtil.exe | HP Print Utility - a troubleshooting utility for HP printers and all-in-ones | No |
| PRISMSTA | U | PRISMSTA.EXE | System Tray access to wireless settings for cards based upon PRISM chipsets by Connexant (previously by Intersil) - including products from D-Link, Cisco Linksys and Gemtek | No |
| PRISMSTA.EXE | U | PRISMSTA.EXE | System Tray access to wireless settings for cards based upon PRISM chipsets by Connexant (previously by Intersil) - including products from D-Link, Cisco Linksys and Gemtek | No |
| PRISMSVR | U | PRISMSVR.EXE | Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter | No |
| PRISMSVR.EXE | U | PRISMSVR.EXE | Configuration and settings utility for PRISM chipset based wireless modems such as the 2Wire Wireless Gateway (2701HG) and Siemens Gigaset USB Adapter | No |
| Privacy Protector | X | Privacy Protector.exe | PrivacyProtector rogue privacy tool - not recommended, removal instructions here | No |
| Privacy Watcher | X | Privacy Watcher.exe | Privacy Watcher rogue privacy program - not recommended, removal instructions here | No |
| Privacy Protection | X | privacy.exe | Privacy Protection rogue security software - not recommended, removal instructions here | No |
| PrivacyAlpha | X | PrivacyAlpha.exe | PrivacyAlpha rogue security software - not recommended, removal instructions here | No |
| PrivacyBoho | X | PrivacyBoho.exe | PrivacyBoho rogue security software - not recommended, removal instructions here | No |
| privacycare | X | privacycare.exe | PrivacyCare rogue security software - not recommended, removal instructions here | No |
| PrivacyClear | X | PrivacyClear.exe | PrivacyClear rogue security software - not recommended, removal instructions here | No |
| PrivacyCode | X | PrivacyCode.exe | PrivacyCode rogue security software - not recommended, removal instructions here | No |
| PrivacyControl | X | PrivacyControl.exe | PrivacyControl rogue privacy program - not recommended, removal instructions here | No |
| PrivacyCut | X | PrivacyCut.exe | PrivacyCut rogue security software - not recommended, removal instructions here | No |
| Privacy Eraser Pro | N | PrivacyEraser.exe | Privacy Eraser Pro - protects your Internet privacy by cleaning up all Internet history tracks and past computer activities | No |
| PrivacyGate | X | PrivacyGate.exe | PrivacyGate rogue security software - not recommended, removal instructions here | No |
| Privacy Guarantor | X | PrivacyGuarantor.exe | Privacy Guarantor rogue privacy program - not recommended, removal instructions here | No |
| Protect | X | PrivacyGuard2010.exe | PrivacyGuard 2010 rogue security software - not recommended, removal instructions here | No |
| PrivacyGuard | X | privacyguarduc.exe | PrivacyGuard rogue security software - not recommended, removal instructions here | No |
| privacyg | X | privacyg_up.exe | PrivacyG rogue privacy program - not recommended, removal instructions here | No |
| PrivacyHidden | X | PrivacyHidden.exe | PrivacyHidden rogue security software - not recommended, removal instructions here | No |
| Privacyi | X | Privacyi.exe | Privacy.I rogue security software - not recommended, removal instructions here | No |
| PrivacyInfo | X | PrivacyInfo.exe | Privacy Info rogue security software - not recommended, removal instructions here | No |
| PrivacyKey | X | PrivacyKey.exe | PrivacyKey rogue security software - not recommended, removal instructions here | No |
| PrivacyKeyboard | U | PrivacyKeyboard.exe | PrivacyKeyboard is a product "that can provide every computer with strong protection against ALL types of keylogging programs and keylogging hardware devices, both known and unknown, currently in use or presently being developed worldwide" | No |
| PrivacyKingdom | X | PrivacyKingdom.exe | PrivacyKingdom rogue security software - not recommended, removal instructions here | No |
| PrivacyManager | X | PrivacyManager.exe | PrivacyManager rogue security software - not recommended, removal instructions here | No |
| com.codeode.privacymantra | U | privacymantra.exe | "Privacy Mantra keeps your computer clean from online and offline tracks" | No |
| privacynS | X | privacynU.exe | Added by the FAKEAV-EOE TROJAN! | No |
| PrivacyPlus | X | PrivacyPlusC.exe | Detected by Malwarebytes Anti-Malware as Rogue.PrivacyPlus.K - not recommended. The file is located in %ProgramFiles%\PrivacyPlus | No |
| PrivacyRight | X | PrivacyRight.exe | PrivacyRight rogue security software - not recommended, removal instructions here | No |
| PrivacyView | X | PrivacyView.exe | PrivacyView rogue security software - not recommended, removal instructions here | No |
| Windows Service | X | private-zone.exe | Added by an unidentified WORM or TROJAN! The file is located in %System% | No |
| Printer | X | private.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Bot | No |
| ControlPanel | X | private.exe internat.dll,LoadMouseCarpetProfile | Added by the CLICKER-AZ TROJAN! Creates the files sdfff, fdsf and zxczxc. In %System% creates the files d.exe, s.exe and r.exe. Note - the "private.exe" file is found in %System% | No |
| Complete Security | Y | PrivateSurfNT.exe | Defender Pro Private Surf - now incorporated Defender Pro 15-in-1 and 5-in-1 | No |
| PrivitizeVPN | U | PrivitizeVPN.exe | "Privitize is a VPN - virtual private network - that makes sure that all your internet connections go through our super fast servers located world wide - now your privacy is protected all the time while browsing the internet, accessing Facebook, sending emails or chatting with friends." Note - the default installation includes ZoomEX adware and changes the homepage and search provider to SearchTab (maybe different ones in other versions) | No |
| Privoxy | U | privoxy.exe | Privoxy - web proxy with advanced filtering capabilities for protecting privacy, filtering web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk | No |
| PrivacyProtector | U | privprot.exe | Privacy Protector from the Advanced System Optimizer utility suite by Systweak Inc | No |
| PrizeSurfer | X | prizesurfer.exe | PrizeSurfer parasite | No |
| prjtect | X | prjtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| Ray Process Killer | N | Prkill.exe | Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead | No |
| prktect | X | prktect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prltect | X | prltect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| Parallels Tools | ? | prl_cc.exe | Part of Parallel Tools utility suite for guest operating systems included with virtualization software from Parallels - such as Parallels Workstation | No |
| PermissionResearch | X | prmrsr.exe | Marketscore/RelevantKnowledge adware | No |
| Premeter | X | prmt.exe | NetRatings Premeter spyware | No |
| prmt | X | prmt.exe | NetRatings Premeter spyware | No |
| prmtect | X | prmtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| SysPrnt | X | prnsrv.vbs | Added by the VBLAME-H WORM! | No |
| PrnSys Executable | U | PrnSys.exe | Print screen utility bundled with some HP printer software - not required, but your choice if you like that feature | No |
| ProAntispy | X | ProAntispy.exe | ProAntispy rogue spyware remover - not recommended, removal instructions here | No |
| ProAntiVirus | X | ProAntiVirus.exe | Added by the RBOT-FTP WORM! | No |
| ProArt | ? | ProArt.exe | ?? | No |
| Pro Antispyware 2009 | X | proas2009.exe | Pro AntiSpyware 2009 rogue spyware remover - not recommended, removal instructions here | No |
| Launch PC Probe II | U | Probe2.exe | PC Probe II system monitoring utility included with some ASUS motherboards which monitors, detects and alerts you if there are any problems with fan rotation, CPU temperature, system voltages and others. Only required if you overclock the system or live in a hot climate | Yes |
| Probe2 | U | Probe2.exe | PC Probe II system monitoring utility included with some ASUS motherboards which monitors, detects and alerts you if there are any problems with fan rotation, CPU temperature, system voltages and others. Only required if you overclock the system or live in a hot climate | Yes |
| Probe2.exe | U | Probe2.exe | PC Probe II system monitoring utility included with some ASUS motherboards which monitors, detects and alerts you if there are any problems with fan rotation, CPU temperature, system voltages and others. Only required if you overclock the system or live in a hot climate | Yes |
| Sysctrls | X | procdll.exe | Added by the WEEDBOTZ.14 BACKDOOR! | No |
| SystemReg | ? | PROCES.EXE | ?? | No |
| process.exe | X | process.exe | Added by the BANCOS.P TROJAN! | No |
| Microsoft Process Manager | X | process32.exe | Added by the CHECKOUT WORM! | No |
| bd5fe50093d5f1ccb4a558c1e0ec7e5d | X | processer.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %UserTemp% | No |
| Process Lasso core engine | U | processgovernor.exe | Core Engine (responsible for applying the process rules) for Process Lasso from Bitsum Technologies - "a unique new technology that will improve your PC's responsiveness and stability during periods of high CPU load" which "intelligently adjusts the priorities of running programs so that badly behaved processes won't negatively impact the responsiveness of your PC" | Yes |
| ProcessGovernor | U | processgovernor.exe | Core Engine (responsible for applying the process rules) for Process Lasso from Bitsum Technologies - "a unique new technology that will improve your PC's responsiveness and stability during periods of high CPU load" which "intelligently adjusts the priorities of running programs so that badly behaved processes won't negatively impact the responsiveness of your PC" | Yes |
| Process Hacker | U | ProcessHacker.exe | "Process Hacker is a free and open source process viewer. This multi-purpose tool will assist you with debugging, malware detection and system monitoring. It includes powerful process termination, memory viewing/editing and other unique and specialized features" | No |
| Process Hacker 2 | U | ProcessHacker.exe | "Process Hacker is a free and open source process viewer. This multi-purpose tool will assist you with debugging, malware detection and system monitoring. It includes powerful process termination, memory viewing/editing and other unique and specialized features" | No |
| Process Lasso management console | N | processlasso.exe | System Tray access to the Management Console (GUI) for Process Lasso from Bitsum Technologies - "a unique new technology that will improve your PC's responsiveness and stability during periods of high CPU load" which "intelligently adjusts the priorities of running programs so that badly behaved processes won't negatively impact the responsiveness of your PC" | Yes |
| processlasso | N | processlasso.exe | System Tray access to the Management Console (GUI) for Process Lasso from Bitsum Technologies - "a unique new technology that will improve your PC's responsiveness and stability during periods of high CPU load" which "intelligently adjusts the priorities of running programs so that badly behaved processes won't negatively impact the responsiveness of your PC" | Yes |
| ProcessLassoManagementConsole | N | processlasso.exe | System Tray access to the Management Console (GUI) for Process Lasso from Bitsum Technologies - "a unique new technology that will improve your PC's responsiveness and stability during periods of high CPU load" which "intelligently adjusts the priorities of running programs so that badly behaved processes won't negatively impact the responsiveness of your PC" | Yes |
| ProcessQuickLink2 | N | ProcessQuickLink2.exe | ProcessQuickLink by Uniblue Systems Ltd - gives you quick access to their Process Library entry for a currently running process via the standard Windows Task Manager (CTRL+ALT+DEL). A System Tray icon also allows you to search the library and launch the Task Manager. Run on demand | Yes |
| Uniblue ProcessQuickLink 2 | N | ProcessQuickLink2.exe | ProcessQuickLink by Uniblue Systems Ltd - gives you quick access to their Process Library entry for a currently running process via the standard Windows Task Manager (CTRL+ALT+DEL). A System Tray icon also allows you to search the library and launch the Task Manager. Run on demand | Yes |
| ProcessSupervisorGUI | U | ProcessSupervisor.exe | Graphical user interface (GUI) for Process Lasso from Bitsum Technologies - "a state-of-the-art, highly optimized, automated Windows process (program) management tool. Through managing the programs running on your computer, Process Lasso increases system responsiveness" | No |
| ProcessTamer | U | ProcessTamerTray.exe | Mouser's Software Process Tamer "is a tiny (140k) and super efficient utility for Microsoft Windows XP/2K/NT that runs in your system tray and constantly monitors the cpu usage of other processes" | No |
| !1_ProcessGuard_Startup | Y | procguard.exe | DiamondCS ProcessGuard "is a powerful new type of security system that secures Windows at the lowest (kernel) level, allowing it to provide the maximum possible security" stopping malware from being executed silently in the background, as well as a variety of other attacks | No |
| procmon | X | procmon.exe | Detected by Symantec as Backdoor.Bionet.40a | No |
| Windows Generic Proc | X | procmsg.exe | Added by the ALLIM.B WORM! | No |
| mmusrstp | ? | procrun.exe | ?? | No |
| ProdikeysAutorun | N | Prodload.exe | Creative Prodikeys software - 'an interactive music entertainment device which not only functions as a full-featured, ergonomic "QWERTY" keyboard but also comes equipped with 37 touch-sensitive music keys and accessible music controls for endless entertainment at your desktop. Coupled with the Sound Blaster audio card, you can explore a wide array of realistic instrument sounds and have non-stop fun making music right at your desktop' | No |
| DSL Connection Manager | N | ProDsl.exe | System Tray access to the connection manager for Intel ADSL modems - such as the ProDSL 3200 and ProDSL 2100. Allows you to monitor a number of parameters for you DSL connection and modem | No |
| ProDsl | N | ProDsl.exe | System Tray access to the connection manager for Intel ADSL modems - such as the ProDSL 3200 and ProDSL 2100. Allows you to monitor a number of parameters for you DSL connection and modem | No |
| JPEG | X | productimage.exe | Detected by McAfee as Generic BackDoor and by Malwarebytes Anti-Malware as Backdoor.Agent.DC | No |
| profiler | X | prof.exe | Added by the ZAPCHAS-G WORM! | No |
| profaimbot | X | Profaimbot.exe | Detected by Malwarebytes Anti-Malware as Trojan.Backdoor. The file is located in %Windir% | No |
| Microsoft Profile Manager | X | profile.exe | Added by a variant of the IRCBOT BACKDOOR! | No |
| Profile | X | Profile.vbs | Added by the WHITEHO VIRUS or TRAPPY WORM! | No |
| Configuration Software | N | Profiler.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profile Editor" (to edit and load profiles) and "Control Panel" for their range of game controllers. Run manually via Start → All Programs → Saitek SST Software → Launch Profile Launcher | Yes |
| Profiler | N | Profiler.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profile Editor" (to edit and load profiles) and "Control Panel" for their range of game controllers. Run manually via Start → All Programs → Saitek SST Software → Launch Profile Launcher | Yes |
| ProfileReminder | U | ProfileReminder.exe | Eye-One Match (or i1Match) monitor calibration software for use with professional imaging tools such as the X-Rite (was GretagMacbeth) Eye-One Display LT and iDisplay 2 or the Pantone Eye-One Display 2 | No |
| Profiler | N | ProfilerU.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profiler" and "Control Panel" for their range of game controllers. Run manually via Start → Programs → Saitek SD6 Programming Software → Profiler | No |
| ProfilerU | N | ProfilerU.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profiler" and "Control Panel" for their range of game controllers. Run manually via Start → Programs → Saitek SD6 Programming Software → Profiler | Yes |
| Saitek SD6 Software | N | ProfilerU.exe | Saitek SST (Saitek Smart Technology) Profile Launcher - allows System Tray access to the "Profiler" and "Control Panel" for their range of game controllers. Run manually via Start → Programs → Saitek SD6 Programming Software → Profiler | Yes |
| ProfileWatcher | X | profilewatcher.exe | MySpace ProfileWatcher profile monitoring software from zpsearch.com. Parasite/adware - see here and here | No |
| gds | X | prog.exe | Detected by McAfee as RDN/Generic.bfr!d and by Malwarebytes Anti-Malware as Trojan.Agent.ZB | No |
| [various names] | X | progmen.exe | Fake startup entry created by the Wareout rogue spyware and dialer remover - not recommended, removal instructions here. Archived version of Andrew Clover's original page | No |
| Program File | X | Progmon.exe | Detected by Symantec as Backdoor.Peeper and by Malwarebytes Anti-Malware as Trojan.Downloader | No |
| Program | X | Program.exe | Detected by Dr.Web as Trojan.AVKill.28729 and by Malwarebytes Anti-Malware as Trojan.Agent.Gen | No |
| ProgramControl | X | ProgramControl.exe | Added by the DLOADR-BAG TROJAN! | No |
| ProjectWhois | U | ProjectWhois.exe | "Project Whois loads the domain names from all open Firefox and Internet Explorer windows into the one-click menu and gives easy access to the whois records from the System Tray" | No |
| projselector | N | projselector.exe | Roxio Project Selector - can be started manually | No |
| Intel PROSet Tray Icon | N | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features | No |
| Promon.exe | N | promon.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features | No |
| PromptCast | U | PromptCast.exe | PromptCast by NOP World for Surveys.com. Automatically downloads short films and movie trailers in the background for reviewing in surveys. A valid Surveys.com account is required | No |
| PRONoMgr.exe | N | PRONoMgr.exe | System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features | No |
| PRONoMgrWired | U | PRONoMgr.exe | Intel's Pro 100 Ethernet card manager | No |
| msproject | X | proobjecttwo.exe | Detected by McAfee as Generic Dropper!dhu | No |
| opesys | X | propagador.exe | Added by the AUTORUN-BPN WORM! | No |
| Propel Accelerator | U | PropelAC.exe | Propel Internet Accelerator | No |
| ProPort Startup | U | ProPort.exe | Proport is a port monitor/protector. Monitors an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving | No |
| ProPrivacy | X | ProPrivacy.exe | ProPrivacy rogue security software - not recommended, removal instructions here | No |
| WinDLL (ProsFix.exe) | X | ProsFix.exe | Added by a variant of the IRCBOT BACKDOOR! The "ProsFix.exe" file is found in %System% | No |
| ProSiteFinder | X | prositefinder.exe | ProSiteFinder adware | No |
| Services | X | prosys32.exe | Added by an unidentified WORM or TROJAN! | No |
| ProSystem | X | Prosystem.exe | Added by the MDROP-BPZ WORM! | No |
| run32.exe | X | Protect.exe | Detected by Dr.Web as Trojan.Inject.45984 | No |
| protect | X | protect.scr | Added by the DLOADER-TQ TROJAN! | No |
| ProtectBoan | X | ProtectBoan.exe | Protect Boan rogue security software - not recommended, removal instructions here | No |
| ProtectCode | X | ProtectCode.exe | ProtectCode rogue security software - not recommended, removal instructions here | No |
| ProtectDefender | X | ProtectDefender.exe | ProtectDefender rogue security software - not recommended, removal instructions here | No |
| PELock | X | Protected.exe | Detected by Malwarebytes Anti-Malware as Trojan.Passwords. The file is located in %AppData% | No |
| Protector GB | X | protectgb.exe | Added by the BANKER.EIE TROJAN! | No |
| protectinfo | X | protectinfo.exe | ProtectInfo rogue security software - not recommended, removal instructions here | No |
| Protection | X | Protection.exe | Added by the FEBELNECK-A WORM! | No |
| ProtectKeep | X | ProtectKeep.exe | Protect Keep rogue security software - not recommended, removal instructions here | No |
| ProtectMine | X | ProtectMine.exe | ProtectMine rogue security software - not recommended, removal instructions here | No |
| ProtectOn | X | ProtectOn.exe | ProtectOn rogue security software - not recommended, removal instructions here | No |
| protectoner | X | protectonerun.exe | ProtectOne rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-****.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-ablu.exe | Windows Virtual Security rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-adkl.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-bjsf.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-cbar.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-dbok.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-ddbi.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-djyo.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-edxh.exe | Windows AntiHazard Helper rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-efaa.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-elww.exe | Windows Safety Series rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-fbfv.exe | Windows Efficiency Accelerator rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-fnov.exe | Windows Secure Web Patch rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-foju.exe | Windows Premium Defender rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-forw.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-frb.exe | Windows Risk Minimizer rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-fvog.exe | Windows Active Guard rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-gvfq.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-gyoa.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-haep.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-hrnn.exe | Windows PC Aid rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-hsqa.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-jasu.exe | Windows Interactive Security rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-jcri.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-jgxf.exe | Windows Security Renewal rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-kcdt.exe | Windows Foolproof Protector rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-kuh.exe | Windows Smart Partner rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-lutu.exe | Windows Anti-Malware Patch rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-mgbw.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-mppf.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-nuhv.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-nybs.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-oaaw.exe | Windows Maintenance Guard rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-ogpl.exe | Windows Efficiency Reservoir rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-omiv.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-pfpi.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-pnnn.exe | Windows Antivirus Care rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-qacl.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-qbbn.exe | Windows Interactive Safety rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-qdva.exe | Windows Advanced User Patch rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-quet.exe | Windows Safety Checkpoint rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-rchh.exe | Windows Abnormality Checker rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-rpqu.exe | Windows Antivirus Machine rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-tdxa.exe | Windows Warding System rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-tpnv.exe | Windows Guard Solutions rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-ttrm.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-uft.exe | Windows Tools Patch rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-uxgh.exe | Windows Custom Management rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-vthu.exe | Windows Expert Series rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-wnxo.exe | Windows Custom Safety rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-wqic.exe | Windows Guard Tools rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-wxqn.exe | Windows Antivirus Rampart rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-xghp.exe | Windows Safety Module rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-xhk.exe | Windows Functionality Checker rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-xjxh.exe | Windows Secure Workstation rogue security software - not recommended, removal instructions here. One of the Tritax family of rogue security software | No |
| Inspector | X | Protector-xtbb.exe | Windows Guardian Angel rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-yhrm.exe | Windows Secure Surfer rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-yrox.exe | Windows Trouble Taker rogue security software - not recommended, removal instructions here | No |
| Inspector | X | Protector-ytgr.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| Inspector | X | Protector-yxph.exe | One of the Tritax family of rogue security software - detected by Malwarebytes Anti-Malware as Trojan.FakeAlert. The file is located in %AppData% | No |
| SafetyCenter | X | protector.exe | Safety Center rogue security software - not recommended, removal instructions here | No |
| SpyCatcher Protector | ? | Protector.exe | Part of the SpyCatcher spyware remover from Tenebril Inc - which "is the only antispyware that uses multiple layers of technology including advanced behavioral detection to stay ahead of spyware attacks." Main program? | No |
| ProtectPcs.exe | X | ProtectPcs.exe | ProtectPcs rogue security software - not recommended, removal instructions here. A member of the AntiAID family | No |
| ProtectPC | X | protectpcuc.exe | ProtectPC rogue security software - not recommended, removal instructions here | No |
| ProtectShield | X | ProtectShield.exe | ProtectShield rogue security software - not recommended, removal instructions here | No |
| ProtectSoldier | X | ProtectSoldier.exe | ProtectSoldier rogue security software - not recommended, removal instructions here | No |
| ProtectTop | X | ProtectTop.exe | ProtectTop rogue security software - not recommended, removal instructions here | No |
| Protections | X | ProtEX32.exe | Ultimate SecuritySuite rogue malware remover - not recommended, see here | No |
| ProtoWall | U | ProtoWall.exe | Protowall IP blocker - "a lightweight program that runs in the background, taking up little CPU and memory, while blocking thousands of bad IP addresses" | No |
| prov | X | prov.exe | Added by a variant of the IRCBOT BACKDOOR! | No |
| WINDOWS | X | prova.exe | Detected by Malwarebytes Anti-Malware as Backdoor.Agent.DC. The file is located in %MyDocuments%\prova | No |
| HPU | N | ProvenTactics.exe | Proven Internet Marketing software | No |
| sqlpdro | X | providd.exe | Added by the AGENT-LXF TROJAN! | No |
| Microsoft Update | X | prowind32.exe | Added by a variant of the AGOBOT WORM! | No |
| PROXOMITRON | N | PROXOMITRON.EXE | A free, highly flexible, user-configurable, small but very powerful, local HTTP web-filtering proxy - see here | No |
| The Proxomitron | N | Proxomitron.exe | A free, highly flexible, user-configurable, small but very powerful, local HTTP web-filtering proxy - see here | No |
| PROXOMITRON | N | PROXOM~1.EXE | A free, highly flexible, user-configurable, small but very powerful, local HTTP web-filtering proxy - see here | No |
| Microsoft Windows DLL Services Configuration | X | proxy.exe | Added by the SDBOT-ZL WORM! | No |
| msconfig.exe | X | proxy.exe | Added by a variant of the AGENT.AH TROJAN! | No |
| LocalProxy | U | proxy4free.exe | "ProxyTools is a package of Perl network utilities designed mainly to assist those whose Internet access is censored, unreliable, or otherwise damaged. Uncensored access is provided to any outside service required (Usenet News, Web browsing, IRC, Socks etc.). Setup requires installation of Perl and some modules" | No |
| ProxyCap | Y | ProxyCap.exe | "ProxyCap enables you to tunnel Internet applications through HTTP, SOCKS v4, and SOCKS v5 Proxy Servers" | No |
| pumcfgp | U | proxycfg.exe | "GuardWare iShield blocks pornographic images when you surf the Internet on your computer using a web browser" | No |
| ProxyFirewall | U | ProxyFirewall.exe | Proxy Firewall by Unique Internet Services, LLC - "is an automatic proxy selector that will simply and easily manage proxy connections for you" and also acts "as a standard firewall for out-bound connections" | No |
| PSwitch | U | ProxySwitcher.exe | "Proxy Switcher offers full featured connection management solution" as different internet connections often require completely different proxy server settings and it's a real pain to change them manually | No |
| ProxyWay | U | proxyway.exe | ProxyWay anonymous proxy surfing software | No |
| proxzy[numbers] | X | proxzy[numbers].exe | Detected by McAfee as W32/Mabezat and by Malwarebytes Anti-Malware as Worm.AutoRun. The file is located in %Root%\RECYCLER\{SID} - see examples here and here | No |
| DevicePath | X | Proyecto1.exe | Added by the GRUEL WORM! | No |
| MediaPath | X | Proyecto1.exe | Added by the GRUEL WORM! | No |
| Rundll32.exe | X | Proyecto1.exe | Added by the GRUEL WORM! | No |
| PRPCMonitor | U | PRPCUI.exe | Intel® SpeedStep™ interface. This automatically detects whether a mobile PC is using battery or AC power. When using battery power, SpeedStep scales the processor clock frequency and voltage to reduce the power it needs by 40% | No |
| Data Restore Service | X | prq8.exe | Added by the KELVIR.AI WORM! | No |
| prqtect | X | prqtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prrtect | X | prrtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| MSConfig | X | prrvtqi.exe | Added by the AGENT-NPH TROJAN! | No |
| prstect | X | prstect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| [ComputerName]-UPDATE | X | PRT010113.exe | Detected by Malwarebytes Anti-Malware as Trojan.Banker | No |
| Printscreen 95 | N | PRT95MIN.EXE | Printscreen 95 - utility to capture, print or save the current window | No |
| prtcct | X | prtcct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| Clotusorgreg0 | ? | prtStart.exe [path] Orgprt.exe | IBM Lotus SmartSuite related. In a LotusOrgReg folder. Unclear what exactly it does? | No |
| prttect | X | prttect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| PrU Async Service | X | pruas.exe | Added by the IRCBOT-UG WORM! | No |
| prunnet | X | prunnet.exe | Added by the DLOADR-BHN TROJAN! | No |
| prutcct | X | prutcct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutdct | X | prutdct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutgct | X | prutgct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| pruthct | X | pruthct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutict | X | prutict.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutlct | X | prutlct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutpct | X | prutpct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prutsct | X | prutsct.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| Windows Service | X | prvdi.exe | Malware - detected by Kaspersky as the SMALL.RD TROJAN! | No |
| prvtect | X | prvtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| prxtect | X | prxtect.exe | Prutect malware from e2Give - attempts to shut down or tamper with a number of anti spyware applications, like Ad-Aware and SpyBot S&D. Note - has been seen using alternative file names like prttect.exe, prmtect.exe and so forth! | No |
| PrzyspieszKomputer | N | przyspieszkomputer.exe | PrzyŚpieszKomputer - Polish optimization utility which "scans your computer to identify the settings, processes and files that slow down your computer work before taking a number of impressive tricks and tools to accelerate the operation of your computer" | No |
| przy[numbers] | X | przy[numbers].exe | Detected by Malwarebytes Anti-Malware as Worm.AutoRun. The file is located in %Root%\RECYCLER\{SID} | No |
| Java Runtime | X | ps.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent. The file is located in %AppData%\Adobe | No |
| ps1 | X | ps1.exe | PacerD Media/Pacimedia.com adware | No |
| PS2 | U | ps2.exe | Multimedia Keyboard companion on HP computers. If this is prevented from starting, then some keyboard functionality will be lost | No |
| WireLessKeyboard | U | PS2USBKbdDrv.exe | Wireless keyboard driver | No |
| WireLessKeyboard | U | PS2USBKbdDrv.exe | Wireless keyboard driver. Note the space at the end of the "Startup Item" field | No |
| psaload32 | X | psaload32.exe | Added by the RBOT-ADL WORM! | No |
| Audio Codec | X | PSBTRF4NX6.exe | Detected by Sophos as W32/Ainslot-AG and by Malwarebytes Anti-Malware as Trojan.FakeAV | No |
| PrivacyScanner | X | pscan.exe | Privacy Champion, a stealth installed 'Privacy Scanner'. It purportedly scans your PC for links to adult content websites, and then offers to "clean" them. Produces loads of False Positives as goad to purchase | No |
| PSCastor | X | PSCastor.exe | Added by the PSCASTOR TROJAN! | No |
| PSCMain | X | pscmain2.exe | Added by the OBFUSCATED.EV TROJAN! | No |
| PopUpStopperCompanion | U | PSComp.exe | PopupStopper Companion popup blocker | No |
| PSIWin2.3 Connection Server | N | Psconsv.exe | Allows connectivity between a PC and a Psion device. Access can be gained from the Desktop or Start → Programs | No |
| Print Screen Deluxe | N | psdeluxe.exe | Utility allows "Print Scrn" or "Print Screen" key to capture, print or save the current window | No |
| PSDiagnosticM | U | PSDiagnosticM.exe | Diagnostic utility for the Cisco Linksys WPS54G Wireless-G PrintServer | No |
| userinit | X | psdokqc.exe | Detected by McAfee as Generic BackDoor!1vr and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| PinnacleDriverCheck | Y | PSDrvCheck.exe | Part of Pinnacle Instant CD/DVD burning and authoring software and InstantCopy burning software from Pinnacle Systems. Verifies drive settings, once loaded it doesn't use any resources so you can leave it enabled | No |
| PSDrvCheck | Y | PSDrvCheck.exe | Part of Pinnacle Instant CD/DVD burning and authoring software and InstantCopy burning software from Pinnacle Systems. Verifies drive settings, once loaded it doesn't use any resources so you can leave it enabled | No |
| PractiSearch | U | PSearch.exe | PractiSearch web search software | No |
| Provan Security | X | psecure.exe | Added by the RBOT.BRV WORM! | No |
| PersonalSec | X | psecurity.exe | Personal Security rogue security software - not recommended, removal instructions here | No |
| PersonSecurity | X | psecurity.exe | Personal Security rogue security software - not recommended, removal instructions here | No |
| PersSecurity | X | psecurity.exe | Personal Security rogue security software - not recommended, removal instructions here | No |
| Psecurity | X | psecurity.exe | Personal Security rogue security software - not recommended, removal instructions here | No |
| Peeramid | ? | PService.exe | In a "Koptimizer" folder in Program Files. What does it do and is it required? | No |
| Xecuter.bat | X | psexec.bat | Added by the BOOHOO WORM! | No |
| PopUpStopperFreeEdition | U | PSFree.exe | Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group | No |
| PSFree | U | PSFree.exe | Pop-Up Stopper Free from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group | No |
| pSGEState | Y | pSGEState.exe | SafeGuard Easy from Sophos (formerly by Utimaco) - "provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks" | No |
| P.S.Guard | X | PSGuard.exe | PSGuard rogue security software - not recommended | No |
| PSGuard | X | PSGuard.exe | PSGuard rogue security software - not recommended | No |
| PSGuard spyware remover | X | PSGuard.exe | PSGuard rogue security software - not recommended | No |
| pshower | X | pshwr.exe | Added by a variant of Spyware.SafeSurfing | No |
| PSIMSVC | Y | PSIMSVC.exe | Part of an older version of the Panda Security range of internet security products. Runs as a service on Windows XP | No |
| Secunia PSI Tray | N | psi_tray.exe | "Secunia Personal Software Inspector (PSI) is a free computer security solution that identifies vulnerabilities in non-Microsoft (third-party) programs which can leave your PC open to attacks. Simply put, it scans software on your system and identifies programs in need of security updates to safeguard your PC against cybercriminals. It then supplies your computer with the necessary software security updates to keep it safe" | No |
| PSLister | X | PSLister.exe | PurityScan C adware | No |
| PsMFCard | U | PsMFCard.exe | Component of the Toshiba Controls. Provides power-saving functions for the PCMCIA slots. Through the Power Save Mode Properties dialogue, the user can select from 3 PCMCIA power options - On, Auto1 and Auto2. Disabling this item has no adverse effects, except disabling the ability to reduce power consumption by powering-down the PCMCIA slots when not in use | No |
| Microsoft Update Machine | X | psmszw.exe | Added by the KOLABC.CC WORM! | No |
| Post-it Software Notes | N | psn.exe | Post-it® Software Notes from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| Post-it® Software Notes | N | psn.exe | Post-it® Software Notes from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| Post-it Software Notes | N | psn2.exe | Version 2 of Post-it® Software Notes from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| Post-it® Software Notes | N | psn2.exe | Version 2 of Post-it® Software Notes from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| Post-it® Software Notes Lite | N | Psn2Lite.exe | Version 2 of Post-it® Software Notes Lite from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| adlhidp | X | psncc32.exe | Added by the SLAPER.AI TROJAN! | No |
| Post-it | N | PsnLite.exe | Post-it® Software Notes Lite from 3M - now replaced by the more advanced Post-it® Digital Notes | Yes |
| Post-it(R) Software Notes Lite | N | PsnLite.exe | Post-it® Software Notes Lite from 3M - now replaced by the more advanced Post-it® Digital Notes | Yes |
| PsnLite | N | PsnLite.exe | Post-it® Software Notes Lite from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| PsnLite.exe | N | PsnLite.exe | Post-it® Software Notes Lite from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| Logiciel notes Post-it® | N | psnotes.exe | Logicel Post-it® (developed by 3M) - now replaced by the more advanced Post-it® Digital Notes | No |
| Post-it® Software Notes | N | Psnotes.exe | Post-it® Software Notes from 3M - now replaced by the more advanced Post-it® Digital Notes | No |
| PSNotify | Y | psnotify.exe | Pharos SignUp Vx - "PC reservation and management application that addresses the PC scheduling needs of public libraries and higher education labs and libraries" | No |
| © Windows Live Messenger Music Status Plugin Module | X | psnsong.exe | Detected by McAfee as Generic.bfr!ev and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| PSof1 | X | PSof1.exe | PacerD Media/Pacimedia.com adware installer | No |
| PSoft1 | X | psoft1.exe | PacerD Media/Pacimedia.com adware installer | No |
| SpeechExec Startup | ? | PSP.SpeechExec.StartupApp.exe | Related to Philips SpeechExec dictation software. What does it do and is it required? | No |
| PsPCCard | Y | PsPCCard.EXE | Background Power Saving task found on Toshiba laptops and which handles turning Power Saving ON and OFF on any inserted PC Card (PCMCIA card). Only ever disable if you do not use any power saving or hibernation settings (ie: they are all OFF) | No |
| PspContr | U | pspcontr.exe | Driver/controller for the Philips SpeechMike 6174. As the Philips FreeSpeech application is no longer supported it can be disabled but the Mike can still be used for certain functions using this driver | No |
| PspUsbCf | ? | PspUsbCf.exe | ?? | No |
| PSPVideo9 | N | pspVideo9.exe | "PSP Video 9 is a free PSP video converter that converts video files, YouTube videos, movies and DVD's so you can play them on your PSP" | No |
| Microsoft Driver Setup | X | psreg.exe | Added by the VBMATO-C WORM! | No |
| PsSound | U | PsSound.exe | On a Toshiba laptop. Operates your sound in one of 4 modes, off, on , on only with powerr, same as #3 but longer delay | No |
| AutoShutdown | ? | pssvc.exe | Utility to fix vCard Export in MS Outlook 2000 - although why are these together? | No |
| Microsoft PSTCP32 Data | X | pstcp32.exe | Added by a variant of Win32/Rbot. The file is located in %System% | No |
| PSTORES | ? | PSTORES.EXE | Part of Windows Services Protected Storage? | No |
| PowerStrip | N | PSTRIP.EXE | PowerStrip is a Video Mode Editor to allow special Refresh Rates and Tweaking of Video Settings | No |
| PSUNMain | Y | PSUNMain.exe | System Tray access to and notifications for Panda Cloud Antivirus by Panda Security | No |
| Pocket Sheet Sync | U | PSXLTRAY.EXE | Casio Pocket Sheet synchronization software | No |
| psyBNC-2.1.4 Client Server | X | psyBNC215.exe | Added by a variant of Win32/Rbot. The file is located in %System% | No |
| psybnc server 3.1 | X | psybnc321.exe | Added by the RBOT.ENI BACKDOOR! | No |
| ISPSERVICE | X | psycho.exe | Added by the IRCFLOOD-O TROJAN! | No |
| Protection System | X | psystem.exe | Protection System rogue security software - not recommended, removal instructions here | No |
| Powertweak | U | PT2.EXE | "Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured". This entry is added if 'Use predefined settings' is enabled in the programs options | No |
| DellAutomatedPCTuneUp | Y | PTAgnt.exe | PC TuneUp from Dell - "silently monitors your system, automatically running needed maintenance during idle time to keep you at peak performance" | No |
| Parallel Tasking | X | ptask.exe | Added by the SMALL-CJ TROJAN! | No |
| ptask | X | ptask.exe | Part of VirtualPCGuard, VirusGuardPlus and other members of the AVSystemCare family of rogue security software suites. See here for more examples | No |
| PTBSync | U | PTBSync.exe | PTBSync from ElmüSoft - a tool to synchronize your PC time with an an atomic clock via the internet | No |
| Powertweak | U | PTCTRL.EXE | "Powertweak is designed to configure your system in the best way. A processor, the core of the system, or a chipset (a set of components that manage the data flows between the different parts of the system) can be configured". This entry is added if 'Configure system at logon' is enabled in the programs options | No |
| PTFB | U | PTFB.exe | Older, freeware version of the PTFB PRO (Push the Freakin' Button) utility from Technology Lighthouse - which "sits quietly in the system tray until a task comes up that it can help you with. It then springs to life taking care of repetitive tasks, eliminating workflow interruptions, restoring program preferences, responding to prompts and popups and so on" | Yes |
| Push The Freakin' Button | U | PTFB.exe | Older, freeware version of the PTFB PRO (Push the Freakin' Button) utility from Technology Lighthouse - which "sits quietly in the system tray until a task comes up that it can help you with. It then springs to life taking care of repetitive tasks, eliminating workflow interruptions, restoring program preferences, responding to prompts and popups and so on" | Yes |
| PTFB Pro Launch App | U | PTFBStart.exe | Loads the main executable (PTFBPro.exe) for the PTFB PRO (Push the Freakin' Button) utility from Technology Lighthouse and exits. PTFB "sits quietly in the system tray until a task comes up that it can help you with. It then springs to life taking care of repetitive tasks, eliminating workflow interruptions, restoring program preferences, responding to prompts and popups and so on" | Yes |
| PTFBStart | U | PTFBStart.exe | Loads the main executable (PTFBPro.exe) for the PTFB PRO (Push the Freakin' Button) utility from Technology Lighthouse and exits. PTFB "sits quietly in the system tray until a task comes up that it can help you with. It then springs to life taking care of repetitive tasks, eliminating workflow interruptions, restoring program preferences, responding to prompts and popups and so on" | Yes |
| TLH_PTFBPro | U | PTFBStart.exe | Loads the main executable (PTFBPro.exe) for the PTFB PRO (Push the Freakin' Button) utility from Technology Lighthouse and exits. PTFB "sits quietly in the system tray until a task comes up that it can help you with. It then springs to life taking care of repetitive tasks, eliminating workflow interruptions, restoring program preferences, responding to prompts and popups and so on" | Yes |
| PTHOSTTR | U | PTHOSTTR.EXE | System Tray access to HP ProtectTools Security Manager - "can be configured to prevent unauthorized access using Smart Cards, TPM Embedded security chips, USB tokens and other security technologies" | No |
| PTIM.exe | U | PTIM.exe | Part of the WebEx Productivity Tools which make it very easy for users to "start, schedule, and join WebEx sessions right from your favorite applications." | No |
| run= | X | ptlseq.cpl | PhoenixNet BIOS adware. See here | No |
| Personal Firwall | X | ptmedsrv.exe | Detected by Trend Micro as WORM_SDBOT.XY | No |
| ptmsgfrm.exe | U | ptmsgfrm.exe | Part of the WebEx Productivity Tools which make it very easy for users to "start, schedule, and join WebEx sessions right from your favorite applications." | No |
| Karen's Once-A-Day II | U | PTOAD.exe | "Have a job that should be run exactly once each day? Karen's Once-A-Day II is just what you need!" Scheduler that lets you specify progams, web pages and files that be run or opened automatically, the first time | No |
| PTOneClick | U | ptoneclk.exe | Part of the WebEx Productivity Tools which make it very easy for users to "start, schedule, and join WebEx sessions right from your favorite applications." | No |
| KernelFaultCheck | X | ptool32.exe | Added by the LEGMIR-BN TROJAN! | No |
| PornoTop | X | ptop.exe | Added by the DELF-AES TROJAN! | No |
| PTRUN32 | U | ptr32w.exe | ParentTools surveillance software. Uninstall this software unless you put it there yourself | No |
| Replicator | U | PTReplicator.exe | Replicator from Karen's powertools. "Automatically backup files, directories, even entire drives!" | No |
| ptrun32 | U | ptrun32.exe | ParentTools surveillance software. Uninstall this software unless you put it there yourself | No |
| Kodak Picture Transfer Software | N | pts.exe | Looks for Kodak camera connection and media insertion. Available via Start → Programs | No |
| Logiciel de transfert d'images KODAK | N | pts.exe | Looks for Kodak camera connection and media insertion. Available via Start → Programs | No |
| ptshell | X | ptshell.exe | Added by the ONLINEGAMES.AEKA TROJAN! | No |
| Ptsnoop | N | Ptsnoop.exe | These descriptions I've come across - all valid as far as I can see :- (1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it (2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed) Note: If using AOL and you disable this you may lose your connection or lock up (4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists (5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems (6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows" | No |
| PTSShell | X | PTSShell.exe | Added by the WINKO.AO WORM! | No |
| Win32load | X | ptssvc.exe | Added by the FAKEAV-MK TROJAN! | No |
| PowerTools Tray Icon | U | pttray.exe | PowerTools - add-on for AOL | No |
| pttrun | U | pttrun.exe | Transmeta Crusoe processor related. Reduces application launch times and makes the computer "more responsive" | No |
| PtUDFApp | N | PtUDFApp.exe | Sony abCD program, included on the CD Xtreme install CD, used to format CD-RWs for packet writing (similar to DirectCD). Available via Start → Programs. Note that you must add a /T switch to the command line to get it to load to the taskbar | No |
| Prayer | U | PTW.EXE | Islamic Adhan program (call fpr daily prayers) | No |
| PUAC v2.0.7 | U | Puac.exe | "Peter's Ultimate Alarm Clock" | No |
| Pubelle | U | Pubelle.exe | Pubelle - French popup blocker by Guillaume Ryder | Yes |
| PFW_PullSrv | ? | PULL.EXE | Personal Firewall related? | No |
| Push Client | N | pull.exe | Client software from Interwise that MS use for their webcasts | No |
| Pwruplogin | ? | pulogin.exe | ?? | No |
| DesktopProf | X | pulpit.exe | Detected by Dr.Web as Dialer.Plsex.21 and by Malwarebytes Anti-Malware as Dialer.Ulubione | No |
| PopUpNoNo | U | punn.exe | "Pop-Up No-No! pop-up blocker | No |
| Punto Switcher | U | punto.exe | Punto Switcher - Russian keyboard utility which statistically analyses the keys that were pressed. If the distribution of two-symbol pairs appears untypical for the current input language, Punto Switcher switches input languages, emulates Backspace key presses to erase the phrase, and types it again using the correct keyboard layout | No |
| Microoft Timing | X | pupdate.exe | Added by the RBOT.AKM WORM! | No |
| mspwr | U | pupstman.exe | Part of the PowerUp Deluxe (Me/98) tweaking utility from Ashampoo® | No |
| mspwr | U | pupxpman.exe | System Tray access to the PowerUp XP (XP/2K/NT) tweaking utility from Ashampoo® | No |
| PwrupTweakMe | U | PUPXPTWK.EXE | Boot-up options for the PowerUp XP (XP/2K/NT) tweaking utility from Ashampoo® | No |
| Puqtbfbwgjqglxsp.exe | X | Puqtbfbwgjqglxsp.exe | Detected by Malwarebytes Anti-Malware as Trojan.IRCBrute. The file is located in %AppData% | No |
| purecoaix | X | purecoaix.exe | Detected by Malwarebytes Anti-Malware as Trojan.Downloader. The file is located in %AppData%\purecoaix | No |
| PureText.exe | U | PureText.exe | PureText by Steve Miller. "Have you ever copied some text from a web page or a document and then wanted to paste it as simple text into another application without getting all the formatting from the original source? PureText makes this simple by adding a new Windows hot-key (default is WINDOWS+V) that allows you to paste text to any application without formatting" | No |
| Purgatory | X | Purga.exe | Added by the PURGORY-B WORM! | No |
| Purgative | U | PURGATIVE100.EXE | AIM (AOL Instant Messenger) Ad Remover Using Active Memory Edits instead of a patch/crack | No |
| PurgeIE | U | PURGEIE.EXE | PurgeIE from Assistance & Resources for Computing, Inc. - Internet Explorer browsing history cleaner | No |
| Sureshotpopupkiller | U | pusak.exe | Stop-the-Pop-Up popup blocker | No |
| PUSH6599 | N | PUSH6599.EXE | Scan button monitor for Relysis Episode MF6599 USB scanner as you can start scanning manually via the scanning software | No |
| pussitids | X | pussitids1.exe | Detected by Malwarebytes Anti-Malware as Trojan.Agent.PD. The file is located in %MyDocuments%\Windows | No |
| PutAS! | X | PutA!!.com | Detected by Trend Micro as WORM_OPASERV.Z | No |
| PutA!! | X | PutA!!.exe | Detected by Trend Micro as WORM_OPASERV.L | No |
| mspwr | U | PuXpMan2.exe | System Tray access to the Ashampoo® PowerUp XP Platinum 2 tweaking utility - which includes (amongst others) one-click tuning, multiple desktops, taskbar control center and an autostart manager | Yes |
| PuXpMan2 | U | PuXpMan2.exe | System Tray access to the Ashampoo® PowerUp XP Platinum 2 tweaking utility - which includes (amongst others) one-click tuning, multiple desktops, taskbar control center and an autostart manager | Yes |
| PwrUpManager | U | PuXpMan2.exe | System Tray access to the Ashampoo® PowerUp XP Platinum 2 tweaking utility - which includes (amongst others) one-click tuning, multiple desktops, taskbar control center and an autostart manager | Yes |
| PwrupTweakMe | U | PUXPTWKS.EXE | Boot-up options for the PowerUp XP (XP/2K/NT) tweaking utility from Ashampoo® | No |
| PV92TRAY | U | PV92Tray.exe | PCtel HSP V.92 modem configuration utility | No |
| pvchost.exe | X | pvchost.exe | Detected by Dr.Web as Trojan.Disabler.84 and by Malwarebytes Anti-Malware as Trojan.Agent. The file location varies | No |
| kok15dls15w856+45456 | X | pvcnrxse.exe | Detected by Malwarebytes Anti-Malware as Trojan.Backdoor.VB. The file is located in %System% | No |
| PVModule | X | pvmodule.exe | Adperform.com/Adoptim.com adware - located in %ProgramFiles%\PrintView and detected by Avira AntiVir antivirus as the AGENT.ALB TROJAN! NOTE - the 'real' PrintView installs in C:\CBR folder | No |
| Windows Config | X | pvphost.exe | Added by a variant of the SLAPER TROJAN! | No |
| PVR | N | PVR.exe | Pocket Voice Recorder - freeware sound recorder that records from microphone and any other input line available with your sound card | No |
| PVUnInst1 | U | PVUnInst1.exe | Privacy View - privacy software that ensures that all your private computer files, photos, documents, and websites remain secure from prying eyes | No |
| PasswordAgent | U | PwAgent.exe | "Password Agent is an easy-to-navigate password management program that allows you to store all your passwords, secret notes and data snippets in a single, secure database" | No |
| DocuMagix Init | N | PWATCH.EXE | PaperMaster is an application for the PC designed to automate the process of organizing, archiving, and retrieving digital versions of files. Start manually if needed | No |
| PwdBank | ? | PwdBank.exe | Related to the TrueSuite Access Manager fingerprint recognition utility available on some Toshiba laptops - based upon TrueSuiteM by AuthenTec. What does it do and is it required? | No |
| Microsoft Windows | X | pwjbvphi.exe | Added by the RBOT-GQK WORM! | No |
| IBM Password Manager | Y | pwmgr.exe | Part of Client Security Software (CSS) for IBM\Lenovo notebooks - IBM® Client Security Password Manager "enables you to manage your sensitive and easy-to-forget login information, such as user IDs, passwords, and other personal information, with IBM Client Security. The IBM Client Security Password Manager stores all information through the IBM Security Chip so that your UVM user authentication policy controls access to your secure applications and Web sites." Can also be used with or without the Fingerprint Reader on select models | Yes |
| IBM_PWMGR | Y | pwmgr.exe | Part of Client Security Software (CSS) for IBM\Lenovo notebooks - IBM® Client Security Password Manager "enables you to manage your sensitive and easy-to-forget login information, such as user IDs, passwords, and other personal information, with IBM Client Security. The IBM Client Security Password Manager stores all information through the IBM Security Chip so that your UVM user authentication policy controls access to your secure applications and Web sites." Can also be used with or without the Fingerprint Reader on select models | Yes |
| pwmgr | Y | pwmgr.exe | Part of Client Security Software (CSS) for IBM\Lenovo notebooks - IBM® Client Security Password Manager "enables you to manage your sensitive and easy-to-forget login information, such as user IDs, passwords, and other personal information, with IBM Client Security. The IBM Client Security Password Manager stores all information through the IBM Security Chip so that your UVM user authentication policy controls access to your secure applications and Web sites." Can also be used with or without the Fingerprint Reader on select models | Yes |
| Pwr32crtl | X | pwr32crtl.exe | Added by the CRYPTER.A TROJAN! | No |
| Pwr32ctr | X | pwr32ctr.exe | Added by the CRYPTER.A TROJAN! | No |
| Pwr32ctrl | X | Pwr32ctrl.exe | Added by the GEMA TROJAN! | No |
| Pwr32mgt | X | Pwr32mgt.exe | Added by the GEMA TROJAN! | No |
| PowerChute | X | Pwrchute.exe | Added by the LAZAR-A TROJAN! | No |
| PowerChute | Y | Pwrchute.exe | APC PowerChute software which controls their range of uninterruptible power supplies (UPS) - to provide unattended shutdown of servers and workstations in the event of an extended power outage and status logging. This is the User Interface Module for an older version - see here | No |
| PWRESET | U | pwreset.exe | Related to the Avaya IP Softphone | No |
| PWRISOVM.EXE | N | PWRISOVM.EXE | PowerISO - a powerful CD/DVD image file processing tool | No |
| PWRMGRTR | Y | PWRMGRTR.DLL | Power Manager - background monitor module for IBM ThinkPad laptops. Leave it alone to ensure proper power management functions | No |
| Pwroff | X | Pwroff.exe | Added by the GEMA TROJAN! | No |
| Pwrsave | U | Pwrsave.exe | Toshiba Power Saver utility - which "manages the power consumption of various devices on Toshiba notebook computers. Its primary purpose is to extend the amount of time that your machine can run from its battery or batteries" | No |
| LidPolicy | U | pwrschem.exe | A utility for configuring certain HP notebook models to enter Standby mode when the lid is closed only when running on battery | No |
| mspwr | U | pwrupst.exe | Part of the PowerUp XP (XP/2K/NT) tweaking utility from Ashampoo® | No |
| atitool | X | pwrwin.exe | Detected by Symantec as W32.Yazz and by Malwarebytes Anti-Malware as Trojan.Agent | No |
| ASUS Energy Saving | U | PwSave.exe | Part of the AI Suite system management utility included with some ASUS motherboards. This entry is part of AI Gear 3+ - "a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features. This easy-to-use utility provides four system performance profiles that adjusts the processor frequency and vCore voltage for different computing needs." Monitors the energy savings made via the EPU and when the Energy Saving option of AI Gear 3+ is selected it displays the current status and provides access to the calculator | Yes |
| PwSave | U | PwSave.exe | Part of the AI Suite system management utility included with some ASUS motherboards. This entry is part of AI Gear 3+ - "a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features. This easy-to-use utility provides four system performance profiles that adjusts the processor frequency and vCore voltage for different computing needs." Monitors the energy savings made via the EPU and when the Energy Saving option of AI Gear 3+ is selected it displays the current status and provides access to the calculator | Yes |
| PwSave.exe | U | PwSave.exe | Part of the AI Suite system management utility included with some ASUS motherboards. This entry is part of AI Gear 3+ - "a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features. This easy-to-use utility provides four system performance profiles that adjusts the processor frequency and vCore voltage for different computing needs." Monitors the energy savings made via the EPU and when the Energy Saving option of AI Gear 3+ is selected it displays the current status and provides access to the calculator | Yes |
| PWS Tray | U | PwsTray.exe | Microsoft's Personal Web Server, an application which allows PCs to behave as web servers (allows you to test your .asp pages on your own PC without having to load them onto the internet). Available via Start → Programs | No |
| Password Tracker Deluxe | U | PwTrkr.exe | "Password Tracker Deluxe stores passwords and usernames neatly and securely (encrypted) on your computer" | No |
| uaafvx | X | PwTuuGhrj.exe | Detected by Malwarebytes Anti-Malware as Trojan.MSIL. The file is located in %Windir% | No |
| Win Server Updt | X | pxckdla.exe | IEPlugin adware | No |
| PrevxOne | Y | PXConsole.exe | PrevX behaviour-based malware protection | No |
| DhcpCep | X | PYJJKIME.exe | Added by the AGENT-BXQ TROJAN! | No |
| PYJJIME | X | PYJJKIME.exe | Added by the AGENT-BXQ TROJAN! | No |
| PyroAntiSpy | X | PyroAntiSpy.exe | PyroAntiSpy Russian rogue spyware remover - not recommended, removal instructions here | No |
| pyrobatchftp | U | pyrobatchftp.exe | "PyroBatchFTP lets you transfer files to/from FTP/SFTP servers in an automatic and unattended way through a simple to learn batch/script language" | Yes |
| pyrobatchftp.exe | U | pyrobatchftp.exe | "PyroBatchFTP lets you transfer files to/from FTP/SFTP servers in an automatic and unattended way through a simple to learn batch/script language" | Yes |
| PyroTrans | U | pyrobatchftp.exe | "PyroBatchFTP lets you transfer files to/from FTP/SFTP servers in an automatic and unattended way through a simple to learn batch/script language" | Yes |
| Anskya | X | PYSKY.NET.exe | Added by the DLOADER-MW TROJAN! | No |
| PrepareYourVAIO | ? | PYVAlert.exe | "Prepare your VAIO" utility for Sony Vaio computers. What does it do and is it required? | No |
| Windows LoL Layer | X | pyvnpt.exe | Added by the RBOT-GKV WORM! | No |
| DXM6Patch_981116 | N | p_981116.exe | Win32 cabinet self extractor. More info here | No |
| p_981116 | N | p_981116.exe | Win32 cabinet self extractor. More info here | No |
If you can help identify new entries and verify/identify those entries with a "?" status (especially hardware specific - such as laptops and motherboards) then please E-mail us (startups_at_pacs-portal_dot_co_dot_uk).
"Status" key:
Variables:
DISCLAIMER: It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. We will not be held responsible if changes you make cause a system failure.
WARNING: This is NOT a database of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a database of start-up applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at start-up. For a list of tasks/processes you should try the Process Library from Uniblue, the list at PC Pitstop or one of the many others now available. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSConfig or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
To avoid the database becoming too large, all malware entries are only shown using the registry version which is common to all Windows versions. Otherwise there would be multiple entries for popular filenames that viruses often use - such as "svchost.exe" above for example. Multiple malware can also use the same start-up entries, in this case only those with significant differences (such as file location) are repeated in this database.
As more than 15K entries in this database related to malware you should use a quality internet security package. Which ever you choose, keep it updated and get the latest version at least every two years.
There are a number of virus and malware entried listed in this database where specific removal instructions haven't been given. If this is the case then you could try ComboFix, a program written by sUBs that can remove many different types of Trojans and Worms. See here for a tutorial on how to use the program
NOTE: A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Norton eMail Protect" in the registry.
SERVICES: "Services" from the NT/2K/XP/Vista/7 operating systems are not included. We fully understand that some programs with these OS's use "Services" as an alternative to load their component parts at startup but these are handled in a different way. We recommend you try BlackViper for information on services for the relevant operating systems.
Presentation, format & comments Copyright © 2001 - 2012 Pacman's Portal
Portions Copyright © Peter Forrest, Denny Denham, Sylvain Prevost, Tony Klein, CastleCops & Bleeping Computer
Powered by Malwarebytes
All rights reserved
| Privacy Policy | Site Map | Home |