| Name | Status | Filename | Description |
|---|
| ITE Remote Controler service (ITECIRService) | L | RemoteControlService.exe | Related to ITE_Remote_Control Service from ITE Tech. Inc. |
| iTechnology iGateway 4.2 (iGateway) | L | igateway.exe | Related to iTechnology_Application Server from Computer Associates International, Inc. Note: Located in \%Program Files%\CA\SharedComponents\iTechnology\ |
| iTunes Music Service (iTunesMusic) | X | iTunesMusic.exe | Added by W32.Spybot.NLX WORM! Rootkit Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| IviRegMgr | L | iviRegMgr.exe | Related to RegMgr Module from InterVideo. Note: Located in \%Program Files%\InterVideo\RegMgr\ |
| IWin service | X | iwinapp.exe | Added by a variant of the Trojan/Backdoor TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Ixia Endpoint (IxiaEndpoint) | L | endpoint.exe | Added by Ixia_Endpoint Note: Located in C:\PROGRA~1\NetIQ\Endpoint\ |
| Jaguar | L | jagsrv.exe | Related to Sybase_EAServer Note: Located in C:\Sybase\EAServer\bin\ |
| Java development Services | X | logins32.exe | Added by the W32/Tilebot-HC WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Steal information from Protected Storage |
| Java development Services | X | windows.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| Java inetice | X | realetin.exe | Added by the Troj/Bckdr-PQM TROJAN! Note: This worm\trojan is located in C:\Program Files\Common Files\Microsoft Shared\MSINFO\ |
| Java Quick Starter (JavaQuickStarterService) | L | jqs.exe | Related to Java from Sun Microsystems, Inc. Note: Located in \%Program Files%\Java\jre6\bin\ |
| Java Sun Scheduler (JUSCHED) | X | jusched.exe | Added by the W32/Sdbot-CQC WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. More here |
| JavaPlatform64 | X | JavaPlatform | Added by the W32/Kassbot-M WORM! Note: Located in C:\%WINDIR%\ |
| JFWService | L | jfw.exe | Related to JAWS a powerful accessibility solution that reads information on your screen using synthesized speech. Note: Located in \%Program Files%\freedom scientific\jaws\8.0\ |
| JiurlPortHide (JiurlPortHide) | X | JiurlPortHide.sys | Added by the Troj/Progent-A
TROJAN!
|
| jjtAutoLaunch | L | jjtAutoLaunch.exe | Related to Sound_Devices From Sound Devices, LLC. Note: Located in \%Program Files%\Sound Devices\USBPre\Services\ |
| jsdaemon | L | jsdaemon.exe | Related to fax service from JetFax Inc. |
| Jumpstart Wifi Protected Setup (jswpsapi) | L | jswpsapi.exe | Related to Jumpstart_Wifi from Atheros Comms. WLAN for Home, Office and Metro Wi-Fi. Note: Located in \%Program Files%\D-Link\RangeBooster G WUA-2340\JSWUtil\ |
| Juniper Network Connect Service (dsNcService) | L | dsNcService.exe | Related to Juniper Networks Inc. Networking Platform. |
| Just Flight Limited License Service | L | JustFlightLimitedLicSvc.exe | Related to Just_Flight_Limited License Service. Just Flight's VFR Real Scenery uses the very latest digital aerial images of the UK to transform Flight Simulator X into the real landscape you can see from the air. Note: Located in \%Program Files%\Common Files\Just Flight Limited Shared\Service\ |
| K4NV | X | k4nv.exe | Added by a variant of the Trojan.K4NV.Process WORM! Note: located in C:\WINDOWS\k4nv.exe |
| K9 Time Synchronization | L | k9nt.exe | Related to HC Mingham-Smith Limited
http://www.kaska.demon.co.uk/history.htm |
| Kaseya Agent | L | AgentMon.exe | Related to Kaseya Inc. |
| Kaspersky Anti-Virus (AVP) | L | avp.exe | Related to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 8.0\ |
| Kaspersky Anti-Virus 6.0 (AVP) | L | avp.exe | Related to Kaspersky_Anti-Virus Note: Located in C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ |
| Kaspersky Anti-Virus 7.0 (AVP) | L | avp.exe | Related to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 7.0 |
| Kaspersky Anti-Virus Service (kavsvc) | L | kavsvc.exe | Related to Kaspersky virus removal program. Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 5.0 for Windows Workstations\ |
| Kaspersky Anti-Virus Service (KLBLMain) | L | kavmm.exe | Related to Kaspersky virus removal program. |
| Kaspersky Internet Security (AVP) | L | avp.exe | Related to Kaspersky_Internet_Security from Kaspersky Lab. Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Internet Security 2009\ |
| Kaspersky Internet Security 6.0 (AVP) | L | avp.exe | Related to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Internet Security 6.0\ |
| Kaspersky Internet Security 7.0 (AVP) | L | avp.exe | Related to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Internet Security 7.0\ |
| Kaspersky Network Agent (klnagent) | L | klnagent.exe | Related to Kaspersky_Administration_Kit Note: Located in \%Program Files%\Kaspersky Lab\NetworkAgent\ |
| KAV Monitor Service | L | avpm.exe | Kaspersky AntiVirus |
| kavsvc | L | kavsvc.exe | Kaspersky AntiVirus |
| kbdrv64 | X | KBDRV64.SYS | Added by the TROJ_ROOTKIT.K
TROJAN!
Read the link, rootkit type stealth involved.
|
| kdc | X | svchost.exe -k kdc | Added by the Fuwudoor TROJAN! |
| Kerberos Key Transaction Coordinator (kerbkey) | L | kerb.exe | Verify one computer's identity to another and to set up encryption keys for a secure connection between them. http://www.computerworld.com.au/index.php/id;886626422;fp;512;fpid;6860893 |
| Kerio MailServer (KerioMailServer) | L | mailserver.exe | Related to Kerio_MailServer Note: Located in C:\Program Files\Kerio\MailServer\ |
| Kerio Personal Firewall (PersFw) | L | persfw.exe | Kerio Firewall |
| Kerio Personal Firewall 4 (KPF4) | L | kpf4ss.exe | Related to Kerio Personal FireWall. |
| Kernel OpenGL Service (OpenGL) | X | opengl.sys | W32/Lurka-A
Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) |
| Kernell32 | X | termsv.exe | Added by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Keyboard And Mouse Communication Service (KMWDSERVICE) | L | KMWDSrv.exe | Related to Keyboard_And_Mouse from Trust International B.V. Communication Service. Note: Located in \%Program Files%\Trust\Trust R-series Mouse And Keyboard\ |
| Keyboard Service System Files (Keyboard Service) | X | navupdate64.exe | Added by a variant of the WIN32.RBOT
WORM!
Note: This worm file is found in the System32 folder. |
| Kingsoft Antivirus KWatch Service (KWatchSvc) | L | KWatch.EXE | Related to Kingsoft_Antivirus virus protection and content filtering. Note: located in C:\KAV****\ [* = 4 digits representing the year.] |
| Kingsoft Personal Firewall Service (KPfwSvc) | L | KPfwSvc.EXE | Related to Kingsoft_Antivirus virus protection and content filtering. Note: located in C:\KAV****\ [* = 4 digits representing the year.] |
| kingxxx | X | svchost.exe | Troj/PWS-ACY , http://www.sophos.com/security/analyses/trojpwsacy.html Note: Located in %programfiles%\windows media player |
| Knob Service (KNOBSERV) | L | KnobService.exe | File belongs to Acer_Inc
|
| Kodak Camera Connection Software (KodakCCS) | L | KodakCCS.exe | Kodak Software to connect digital cameras |
| konfig | L | mcp.exe | Transbase® CD, http://www.transaction.de/
permits the distribution of data base contents on CD/DVD ROM and a following actualization of the data over the Web to Transbase® CD unites in ideal way variable and static data.
Note: Located in c:\opt\MBCASE\pm\bin |
