| Status | Autorun name | Command | Description |
| U | Cobian Backup 7 Application | CobBU.exe | Cobian Backup 7 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (NT/2K/XP). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup 7 Interface | cobui.exe | System Tray access to Cobian Backup 7 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | Cobian Backup 8 | Cobian.exe | Cobian Backup 8 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup 8 interface | cbInterface.exe | System Tray access to Cobian Backup 8 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | Cobian Backup 9 | Cobian.exe | Cobian Backup 9 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup 9 interface | cbInterface.exe | System Tray access to Cobian Backup 9 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | Cobian Backup Amanita | cbInterface.exe | System Tray access to Cobian Backup 9 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | Cobian Backup Amanita | Cobian.exe | Cobian Backup 9 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup Black Moon | cbInterface.exe | System Tray access to Cobian Backup 8 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | Cobian Backup Black Moon | Cobian.exe | Cobian Backup 8 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (NT/2K/XP/Vista). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup Boletus | Cobian.exe | Cobian Backup 10 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program as a startup application rather than the default service on an NT based OS (XP/Vista/7). If you don't have regularly scheduled backups then choose the startup option and run it manually when required |
| U | Cobian Backup Interface 6 | cobui.exe | System Tray access to Cobian Backup 6 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| U | cobui | cobui.exe | System Tray access to Cobian Backup versions 6 and 7 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| X | codecdirectx.exe | codecdirectx.exe | Added by the BANLOA-AZY TROJAN! |
| X | CodeClean | CCIntro.exe | CodeClean rogue security software - not recommended |
| U | Codename Dashboard | dashboard.exe | Codename: Dashboard - "an application that resides at the side of your screen. Built on the Microsoft .NET Framework, it is a host for interchangeable components through which C.D. allows you to have any information you want, on your desktop, all the time." No longer available |
| ? | COEMsgDisplay | COEMsgDisplay.exe | Part of HP's PC Common Operating Environment (PC COE) project. Located in %ProgramFiles%\Hewlett-Packard\PC COE. What does it do and is it required? |
| X | cof.updit | [random filename] | Added by a variant of the SDBOT WORM! |
| U | CognizanceTS | rundll32.exe [path] AsTsVcc.dll, RegisterModule | Cognizance Corp Identity And Access Management suite |
| X | Coldlife -icmp | Systray.exe | Added by the FLOOD.AV TROJAN! Note - this is not the legitimate systray.exe process |
| N | CollaborationHost | p2phost.exe | Signs a user into the People Near Me feature at login in Windows 7 and Vista. People Near Me enables you to use certain peer-to-peer (P2P) programs on a network - that "identifies people nearby who are using computers and allows those people to send you invitations for programs such as Windows Meeting Space. They can only invite you to participate in programs that are installed on your computer." Available via Start → Control Panel |
| U | coloreal | coloreal.exe | Makes colours sharper and brighter, but will only work with coloreal capable monitors |
| N | Colorific | Hgcctl95.exe | Colorific® from E-Color - "delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor." Now superseded by ColorWizzard™ |
| N | Colorific Control Panel | Hgcctl95.exe | Colorific® from E-Color - "delivers accurate gamma and color temperature across your entire system - monitor to printer and digital camera to monitor." Now superseded by ColorWizzard™ |
| U | ColtsScreenServer | ColtsScreenServer.exe | Screensaver for the Indianapolis Colts NFL football team - part of Sports Illustrated's MySI desktop download (by MercurySports Network) for streaming information on NFL football teams. No longer supported |
| U | ColtsScreenServerSvc | ColtsScreenServer.exe | Screensaver for the Indianapolis Colts NFL football team - part of Sports Illustrated's MySI desktop download (by MercurySports Network) for streaming information on NFL football teams. No longer supported |
| X | COM Service | mscom32.com | Added by the BEASTY.H TROJAN! |
| X | COM Service | msynvr.com | Added by the BEASTY.G TROJAN! |
| X | COM Service | msjclh.com | Added by the BEASTY.E TROJAN! |
| X | COM Service | msdrce.com | Added by the BEASTY.I TROJAN! |
| X | COM Service | msflyx.com | Added by the BEASTDO-O TROJAN! |
| X | COM Service | mskwda.com | Added by the AGENT-JIX TROJAN! |
| X | COM Service | mspgcs.com | Added by the BEASTDOOR.DL BACKDOOR! |
| X | COM+ Event System | DRWTSN16.EXE | Added by the LOVGATE.AB WORM! |
| X | COM+ EventSystem Services | ECSERVER.EXE | Added by a variant of the SDBOT WORM! |
| X | Com+ Sys | csrs.exe | Added by the FORBOT-BT WORM! |
| X | COM+ System Application | lsas.exe | Added by the AGOBOT-MO WORM! |
| X | COM+ System Applications | lsas.exe | Added by the AGOBOT.SE WORM! |
| X | COM++ System | exploier.exe | Added by the LOVGATE.Z WORM! |
| X | COM++ System | suchost.exe | Added by the LOVGATE-F WORM! |
| X | COM++ System | svchost.exe... | Added by a variant of the LOVGATE WORM! |
| N | COM-IP | COMIP.EXE | COM-IP Virtual Modem Driver (COM-IP Creates a Fake Serial Port that allows you to use older DOS Based Communications Programs over Telnet. Type atdt host.domain.com instead of atdt 5551212) |
| U | com.codeode.cactusspamfilter | cactusspamfilter.exe | Cactus Spam - free easy-to-use spam blocker |
| U | com.codeode.privacymantra | privacymantra.exe | "Privacy Mantra keeps your computer clean from online and offline tracks" |
| U | ComAgent | ComAgent.exe | ComAgent - MDaemon's instant messaging client |
| X | combo.exe | combo.exe | Added by the CHIMO-C TROJAN! |
| X | combop.exe | combop.exe | Added by the BOWFEED-A TROJAN! |
| X | Comcast Network | ribiva.exe | Added by a variant of the IRC TROJAN! |
| X | Comcast Network | getikap.exe | Added by the MULTIDR-CU TROJAN! |
| N | ComcastSUPPORT | tgkill.exe | Comcast struck a deal with Tioga to provide an "enhanced" support and self-repairing tool. This "beta" release was made available to download by mistake and should be removed via Start → Control Panel → Add/Remove Programs |
| X | comcfg | comcfg.exe | Added by the TOADCOM.A BACKDOOR! |
| X | comctl32 | comctl32.exe | Adware - detected by Kaspersky as the AGENT.AM TROJAN! |
| U | COMDRV32 | svdhost.exe | Orvell Monitoring 2003 surveillance software. Uninstall this software unless you put it there yourself. Note - asks for permission to contact the IP address of http://www.protectcom.com/ |
| U | Comm Driver | commh32.exe | G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself! |
| X | Command | system.exe | Added by the GATECRASH.A or GATECRASH.B BACKDOORS! |
| X | Command | Gotit.exe | Added by the TITOG WORM! |
| X | COMMAND | command.exe | Added by the QQPASS.E TROJAN! |
| X | command | javaw.exe | Added by the AGOBOT-LG WORM! |
| X | Command Prompt32 | CmdPrompt32.pif | Added by the ASSIRAL.B WORM! |
| U | Command WorkStation 4 | cws 4.exe | EFI's Command WorkStation makes "managing demanding workflows easier by centralizing job management. The software automatically identifies the Fiery servers on the network and offers customization options for displaying information" - for high-end print environments |
| X | command32 | command32.exe | Added by the LINEADI-A TROJAN! |
| N | CommCtr | commctr.exe | "Net2Phone CommCenter is the latest in Internet voice technology allowing you to place calls easily all over the world right from your PC!". Available via Start -> Programs |
| Y | Common Client | ccApp.exe | Part of older versions of Symantec's security products including Norton 360, Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Effectively the "master" process which calls the different program features and makes sure they are running. Auto-protect and E-mail check will not function without this |
| Y | Common Client | ccRegVfy.exe | Part of older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. "Responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack" |
| X | Common Files | twain.exe | Added by the AGENT.BEA TROJAN! |
| N | CommonSDK | RoxWatchTray9.exe | System Tray access to managing the "Watched Folders", "LiveShares" and "MediaSpace" features of the Roxio Easy Media Creator 9 multimedia suite. All of these options are available from the Media Manager utility. The "Watched Folders" feature monitors specified locations for new pictures, songs and videos being added and makes them available to the Media Manager - if you have 512MB of memory or less available it's recommended you also disable the associated "Roxio Hard Drive Watcher 9 (RoxWatch9)" service as well as the combination has been known to use significant amount of memory and cause other problems |
| X | CommonService | winup.exe | Added by the DLOADR-BJJ TROJAN! |
| Y | Communications_Helper | Communications_Helper.exe | Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also, if it's disabled the camera will not work - at least not in the QuickCapture mode |
| Y | Communications_Helper.exe | Communications_Helper.exe | Entry added when you install versions of the Logitech QuickCam webcam software. Used to interface your webcam with third party chat and voice programs such as instant messaging clients and Skype. Also, if it's disabled the camera will not work - at least not in the QuickCapture mode |
| Y | COMMUNICATOR | Communicator.exe | Part of Microsoft Office Communicator, which is an integrated communications client that allows information workers to communicate in real time using a range of different communication options, including instant messaging (IM), voice, and video |
| U | Comodo Firewall | CPF.exe | Comodo Firewall |
| Y | COMODO Firewall Pro | cfp.exe | Comodo Firewall Pro |
| U | Comodo Launch Pad Tray | CLPTray.exe | System Tray access to LaunchPad as bundled with Comodo's freebie offerings such as Comodo Anti-Virus. Some allege that LaunchPad is impossible-to-uninstall adware, or worse - see here |
| Y | COMODO Memory Firewall | cmf.exe | "Comodo Memory Firewall is a buffer overflow detection and prevention tool which provides the ultimate defence against one of the most serious and common attack types on the Internet - the buffer overflow attack" |
| U | Companion Module | companion.exe | The AOL Companion is a small window that appears when you connect to the service using verison 8.0 and early builds of version 9.0. "Use the Companion to quickly get to your favourite features, including your Buddy List, Favourite Places, Address Book, and more!" |
| X | CompanionWizard | compwiz.exe | Part of WinAntiVirusPro 2007 rogue security software (and possibly others) - not recommended, see here |
| U | Compaq Alerter | CPQAlert.exe | Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's best removed if installed but not wanted, rather than disabled at startup. See here for more information |
| N | Compaq Computer Corp SCCenter Module | SCCENTER.EXE | For Compaq PC's. Part of Backweb |
| ? | Compaq Computer Security | Rundll32.exe SECURE32.CPL, Service | ?? |
| N | Compaq Connections | COMPAQ~1.EXE | See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners" |
| N | Compaq Connections | BackWeb-1940576.exe | See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners". * can be any digit |
| N | Compaq Connections | Compaq Connections.exe | See here - "messaging service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP and Compaq desktop computer owners" |
| N | Compaq DMI | cpqdmi.exe | Compaq version of the Desktop Management Interface |
| X | Compaq Drivers | F1rewalls.exe | Added by the SDBOT-WD WORM! |
| N | Compaq Internet Setup | inetwizard.exe | For Compaq PC's. Runs Compaq internet setup wizard and offers you to signup from ISP list |
| X | Compaq Jes Drivers | winjes.exe | Added by the SDBOT-XR WORM! |
| U | Compaq Knowledge Center | silent.exe | "Compaq Knowledge Center integrates self-help assistance features from Compaq and Microsoft with the efficiencies of the Internet for the fastest time to solution" |
| N | Compaq Message Server | COMPAQ-RBA.EXE | Applies to the CPQBootPerfDB entry as well. These files generate some kind of server or servlet that attempts to connect with Compaq online. They are like Trojans, but fairly harmless. They send information on the "Compaq Advisor/Compaq Message Screener" application that comes with every Compaq computer and provide feedback on how computer users use the Message Advisor. These messages appear occasionally and instruct and advise users on their computer and its use. They generally attempt to get you (these messages) to connect to Compaq's website. They may be safely disabled via (1) MSCONFIG or (2) Start -> Programs -> Compaq Advisor -> Advisor Settings under the "advanced" tab. Not required and can cause problems |
| U | Compaq PK Daemon | cpqkl.exe | For Compaq laptops for programming user configurable keys. Not required unless you use them |
| X | Compaq Print Fax | cpqa1000.exe | Added by the SDBOT.BCV WORM! Please take note of the difference between the legitimate Compaq Fax Utility Name (A1000 Settings Utility) and the name (Compaq Print Fax) used by this worm |
| X | Compaq Service Drivers | NtKernelSystem.exe | Added by a variant of the SDBOT WORM! |
| X | Compaq Service Drivers | wincmd.exe | Added by the RBOT.ATV WORM! |
| X | Compaq Service Drivers | wind32.exe | Added by a variant of the SDBOT WORM! |
| X | Compaq Service Drivers | winmsn.exe | Added by a variant of the SDBOT WORM! |
| X | Compaq Service Drivers | compaq.exe | Added by the SDBOT-AFU WORM! |
| X | Compaq Service Drivers | msnsvc.exe | Added by the RBOT.BKT WORM! |
| X | Compaq Service Drivers | ntsys32.exe | Added by the RBOT.CIW WORM! |
| X | Compaq Service Drivers | winsvc.exe | Added by the SDBOT-AGD WORM! |
| X | Compaq Service Drivers | sxrose.exe | Added by the SDBOT-AXP WORM! |
| X | Compaq Service Drivers | systeminfos.exe | Added by the SDBOT-XC WORM! |
