| Name | Status | Filename | Description |
|---|
| I-O DATA Device Management Service (IoDevMgrService) | L | IoDevMgrService.exe | Related to I-O_DATA_Device_Management service from I-O DATA DEVICE, INC. Note: Located in \%Program Files%\I-O DATA\IoDevMgrService\ |
| i386p | X | I386P.SYS | Added by the Backdoor.Rustock
TROJAN!
Found in the System32\drivers folder.
Read the link, rootkit type stealth involved.
|
| IAA Event Monitor (IAANTMon) | L | iaantmon.exe | Intel related |
| Iap | L | Iap.exe | Related to Dell OpenManage Client Instrumentation. |
| IBM Active PCI Alert Service (IBMHPS) | L | IBMHPASV.EXE | Related to IBM_Active_PCI Alert Service from IBM Corp. Note: Located in \%WINDIR%\System32\ |
| IBM Automatic Server Restart Executable (ibmasrex) | L | ibmasrex.exe | Unknown owner :Location C:\WINDOWS\system32\ibmasrex.exe
Related to IBM servers.
|
IBM Automatic Server Restart Service for IPMI (ibms6asr) | L | IBMIASRW.EXE | Related to IBM_Automatic_Server_Restart from IBM. Note: Located in \%WINDIR%\System32\ |
IBM CICS Transaction Gateway (IBMCICSTransactionGateway) | L | CTGSERVICE.EXE | Related to IBM Corp. |
| IBM CICS Universal Client (CICSClient) | L | cclserv.exe | Related to IBM Corp. |
IBM DCD Standard Client (DCDClient-ISSI) (DCDClient-ISSI) | L | CDSWinSrv.exe | Related to IBM_DCD_Standard_Client Note: Located in \%Program Files%\IBM\tivoli\dcd\client\ISSI\cds\ |
| IBM Enterprise Extender (ldlcserv) | L | ldlcserv.exe | Related to IBM Corp. - http://www.anti-spy.info/process/ldlcserv.exe.html |
| IBM HDD APS Logging Service (TPHDEXLGSVC) | L | TPHDEXLG.EXE | Related to IBM's Active_Protection_System
Made by the IBM_Corporation
The file associated with this service is located in the System32 folder.
|
| IBM KCU Service (TpKmpSVC) | L | TpKmpSVC.exe | related to IBM ThinkPad |
| IBM Mobility Client DHCP Control (artdhcp) | L | artdhcp.exe | Related to IBM_Mobility_Client DHCP Control Note: Located in C:\Program Files\IBM\Mobility Client\ |
| IBM Mobility Client Start Utility (artstartsvc) | L | artstartsvc.exe | Related to IBM_Mobility_Client Note: Located in \%Program Files%\IBM\Mobility Client\ |
| IBM MQSeries | L | amqsvc.exe | IBM WebSphere® MQ to exchange information across different platforms |
| IBM PM Service (IBMPMSVC) | L | ibmpmsvc.exe | Power management driver for IBM laptops |
| IBM PSA Access Driver Control (PsaSrv) | L | PsaSrv.exe | related to Professional Services Automation (PSA) from SharpOWL |
| IBM Rapid Restore Ultra Service | L | rrpcsb.exe | related to Xpoint Technologies |
| IBM Trace Facility (TrcBoot) | L | trcboot.exe | Related to IBM Corp. |
| IBM User Verification Manager | L | uvmserv.exe | Related to IBM_User_Verification_Manager (UVM) secure logon interface. Note: located in C:\Program Files\IBM\Security\ |
IBM WebSphere Application Server V5 - server1 (IBMWAS5Service - server1) | L | wasservice.exe | Related to IBM WebSpere server. |
| IBWin Service | L | IBWin Service.exe | Related to IBackUp_for_Windows Backup on character sets other than US/English. Note: Located in C:\Program Files\IBackup For Windows\ |
| ICF | X | svchost.exe:exe.exe | Added by the Trojan.DoS.Win32.Opdos TROJAN! DO NOT DELETE THE FILE \%WINDIR%\System32\svchost.exe |
| iClarityQoSService | L | QosServM.exe | Related to Avaya_IP Softphone. Note: Located in C:\WINDOWS\system32\ |
| ICONICS License Server (GenRegistrar) (GenRegistrar) | L | GenRegistrarServer.exe | Related to ICONICS Inc. Visualization and Automation software products |
| ICQ Update Service (ICQUPD) | X | kpsf.sys | Detected as Backdoor.HackDefender. Rootkit type stealth involved. |
| ICRAplus | L | ICRAplus.exe | Related to ICRAplus internet filter, parental control etc. Note: Located in C:\Program Files\ICRAplus\ICRAplus\ |
| icrss manager 32bit (icrss) | X | icrss.exe | Added by the W32/Rbot-FZB WORM! Note: Located in C:\WINDOWS\system\ |
| icservice - ONTRACK Data International, Inc. | L | icserv.exe | Related to SuperAdBlocker |
| IcVzMonLauncher | L | IcVzMonLauncher.exe | Related to Image_Converter convert your movies to a format that's readable by your Sony PSP. Note: Located in \%Program Files%\Sony\IMAGE CONVERTER 3\ |
| iD2 Smart Card Server (id2scaps) | L | id2scaps.exe | iD2 is a client product that brings security, user authentication and digital signatures to standard Internet browsers by utilising Smart Cards and the client-side of the SSL protocol. |
| IDriveE Service | L | IDriveE Service.exe | Related to IBackup from Pro Softnet. provides an extensive enterprise-ready feature-set for secure online storage with superior performance including Snapshots, Network Drive ... Note: Located in \%Program Files%\IDriveE\ |
| ieupdater (Microsoft IE Updater) | X | ieupdate.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Documents and Settings\user name\Local Settings\Temp\ |
| ieupdater1 (Microsoft IEUpdater1) | X | ie_updater.exe | Added by a variant of the Troj/Bckdr-QGB TROJAN! Note: This worm\trojan is located in %userprofile%\ |
| ieupdater2 (Microsoft IE Updater2) | X | ~tmp0374.exe | Related to a variant of the Malware.IFN.dropper family. Note: Located in C:\Documents and Settings\(user name)...\ Note: filename is random. |
| ieupdater2 (Microsoft IEUpdater2) | X | ie_updater.exe | Added by the Troj/Bckdr-QGB TROJAN! Note: This Trojan is located in C:\ ROOT folder. |
| ieupdater21 (Microsoft IEUpdater21) | X | ie_updater.exe | Added by a variant of the Troj/Bckdr-QGB TROJAN! Note: This worm\trojan is located in %userprofile%\ |
| ieupdater22 (Microsoft IEUpdater22) | X | ie_updater.exe | Added by a variant of the Troj/Bckdr-QGB TROJAN! Note: This worm\trojan is located in %userprofile%\ |
| iexplorer (iexplorer) | X | iexplorer.exe | Added by the Troj/Singu-U
TROJAN!
Note: This trojan file is found in the System32 folder |
| IgniteService.exe | L | IgniteService.exe | Related to Accenture_Media_Viewer |
| IKE and AuthIP IPsec Keying Modules (IKEEXT) | L | ikeext.dll | Part of Windows Vista
Note:Located in C:\%WINDIR%\System32 |
| Image Converter SCSI Service (ICScsiSV) | L | ICScsiSV.exe | Related to Image_Converter convert your movies to a format that's readable by your Sony PSP. Note: Located in \%Program Files%\Sony\IMAGE CONVERTER 3\ |
Image Converter video recording monitor for VAIO Entertainment | L | IcVzMon.exe | Related to Sony_VAIO computers. |
| ImagePath (VGADown) | X | avp.exe | Troj/Maran-AA Read the link, steals information |
| ImagePath (win32ssr) | X | win32ssr.exe | Added by the W32/Sdbot-AMA
WORM! Read the link, rootkit type stealth involved. |
| IMail FINGER Server (FINGRD32) | L | FINGRD32.exe | Related to Ipswitch Inc. Network Management. |
| IMail IMAP4 Server (IMAP4D32) | L | IMAP4D32.exe | Related to Ipswitch Inc. Network Management. |
| IMail LDAP Service (OpenLDAP-slapd) | L | slapd.exe | Related to Ipswitch Inc. Network Management. |
| IMail Monitor Service (IMONITOR) | L | IMonitor.exe | Related to Ipswitch Inc. Network Management. |
| IMail POP3 Server (POP3D32) | L | POP3D32.exe | Related to Ipswitch Inc. Network Management. |
| IMail PWD Server (PSERVE) | L | PSERVE.exe | Related to Ipswitch Inc. Network Management. |
| IMail Queue Manager Service (QUEUEMGR) | L | queuemgr.exe | Related to Ipswitch Inc. Network Management. |
| IMail SMTP Server (SMTPD32) | L | smtpd32.exe | Related to Ipswitch Inc. Network Management. |
| IMail Sys Logger Service (SYSLOGD) | L | SYSLOGD.exe | Related to Ipswitch Inc. Network Management. |
| IMail Web Calendar Service (IWEBCAL) | L | IWebCal.exe | Related to Ipswitch Inc. Network Management. |
| IMail Web Service (IWEBMSG) | L | iwebmsg.exe | Related to Ipswitch Inc. Network Management. |
| IMail WHOIS Server (WHOISD32) | L | WHOISD32.exe | Related to Ipswitch Inc. Network Management. |
| IMAPI CD-Burning COM Service (ImapiService) | L | imapi.exe | Related to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\ |
| IMAPI CD-Burning COM Service (ImapiService) | L | ImapiRox.exe | Related to Raxio CD recording. |
| Imapi Helper | L | ImapiHelper.exe | ISO recorder |
| ImgBurn | X | ImgBurn.exe | Added by a variant of the SDBOT Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| IMountSRV | L | IMountSRV.exe | Related to Paragon hard_disk_manager |
| IMSafer (ImSaferService) | L | imsc.exe | Related to IMSafer parental control service from IMSafer. Note: Located in \%Program Files%\IMSafer\bin\ |
| Inbound Distributor Service | L | inbounddistributorservice.exe | Related to Inbound_Logistics |
| InCD File System Service (InCDsrv) | L | InCDsrv.exe | InCD Packet Writer related. |
| InCD Helper (InCDsrv) | L | InCDsrv.exe | InCD Packet Writer service from Nero Burning ROM (Ahead Software) |
| InCD Helper (read only) (InCDsrvR) | L | InCDsrv.exe | InCD Packet Read related. (Ahead Software) |
| Independent Management Architecture (IMAService) | L | ImaSrv.exe | Related to Citrix MetaFrame |
| Index Service (b3) | X | dllhost32.exe | Added by the WORM_AGOBOT.CH
WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Indexing Helps (Indexingbox) | X | svchest.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More] here |
| Indexing Service (CiSvc) | L | cisvc.exe | Microsoft Content Index service |
| Indexing The System Files (Indexing Service) | X | winupdatez.exe | winupdatez.exe |
| Indexings Services | X | systen32.exe | Added by a variant of the W32/SDBOT WORM! Note: C:\Program Files\Common Files\Microsoft Shared\MSINFO\ |
| InfoProcess HipService Workstation Service (HipService) | L | HipService.exe | Related to InfoProcess_HipService Workstation Service by InfoProcess Pty Ltd. Note: Located in \%Program Files%\InfoProcess\AntiHook\3.0\ |
| Informatica (Powermart) | L | pmserver.exe | Related to Informatica_PowerCenter data integration on a single, unified platform. Note: Located in \%Program Files%\Informatica PowerCenter 7.1.1\Server\bin\ |
Informatica PowerCenter Metadata Manager Scheduler (MetadataManagerScheduler) | L | refreshsched.exe | Related to Informatica_PowerCenter Metadata Manager Scheduler. Note: Located in \%ROOT%\informatica\powercenter8.1.1\client\console\ |
| Informatica Repository Server (PmRepServer) | L | pmrepserver.exe | Related to Informatica_PowerCenter data integration on a single, unified platform. Note: Located in \%Program Files%\Informatica PowerCenter 7.1.1\RepositoryServer\bin\ |
| Inicio de sesión red | L | lsass.exe | Spanish Windows 2000 net logon |
| inPOINT Indexing Service | L | IndexingService.exe | Related to inPOINT_Indexing_ Service InPoint Service from INFODYNAMICS inPoint is a remarkably affordable utility that turns your copier corner into a streamlined document center. Note: Located in \%Program Files%\InfoDynamics, Inc\inPoint\ |
| InPointFTPServer | L | InPointWebServer.exe | Related to InPointFTPServer InPoint Service from INFODYNAMICS inPoint is a remarkably affordable utility that turns your copier corner into a streamlined document center. Note: Located in \%Program Files%\InfoDynamics, Inc\inPoint\ServerFiles\ |
| InPointWebServer | L | InPointWebServer.exe | Related to InPointWebServer InPoint Service from INFODYNAMICS inPoint is a remarkably affordable utility that turns your copier corner into a streamlined document center. Note: Located in \%Program Files%\InfoDynamics, Inc\inPoint\ServerFiles\ |
| Input Director Service (InputDirector) | L | IDWinService.exe | Input_Director |
| Input Service (Input_Service) | X | msiexecu.exe | Added by a variant of the Troj/Raser-AS TROJAN. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More here |
| Input Virtual Component (AVCMSC) | X | msipsvc.exe | Added by a variant of the SdBot.aad family of TROJAN! Note: Located in C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Install Driver Manager (Install Driver Table Manager) | X | wpablan.exe | Added by the W32/Sdbot-CWR TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\TEMP\ folder. |
| InstallDriver Service (ISDS) | X | csscv.exe | Added by the W32/Sdbot-CPL WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| InstallDriver Table Manager (IDriverT) | L | IDriverT.exe | Related to Macrovision Corporation. |
| InstallShield Licensing Service | L | InstallShield Licensing Service.exe | Related to InstallShield_Licensing_Service from Macrovision. Create high-quality software installation engines. |
| Instantáneas de volumen (VSS) | L | vssvc.exe | Related to ShadowCopy service implemented into Windows XP and onwards. This service allows files which are modified to be backed up automatically by the operating system. |
| Instantáas de volumen (VSS) | L | vssvc.exe | Related to ShadowCopy service implemented into Windows XP and onwards. This service allows files which are modified to be backed up automatically by the operating system. |
| Instrumental de administracióe Windows | L | WinMgmt.exe | Spanish Windows 2000 windows management instrumentation |
| Intact Indexing Service (IntactIndexingService) | L | IntactIndexingService.exe | Related to Intact_Indexing_Service InPoint Service from INFODYNAMICS inPoint is a remarkably affordable utility that turns your copier corner into a streamlined document center. Note: Located in \%Program Files%\InfoDynamics\Indexer\
|
| Integard Service (INTEGARD) | L | Integard.exe | Related to Integard from Race River Corp. Parental control tool. Note: Located in \%Program Files%\Integard\ |
| Integrated Multimedia Server | L | ImmsService.exe | Related to Integrated_Multimedia_Server MultiMedia Router from NetGear. Note: Located in C:\Program Files\NETGEAR\MEDIAS~1\ |
| Intel Alert Handler | L | hndlrsvc.exe | Related to Intel Corp. |
| Intel Alert Originator | L | iao.exe | Related to Intel Corp. |
| Intel CI Manager | L | CiMgrLdr.exe | Related to Intel Corp. |
| Intel Client Instrumentation for DMI (ni_nic) | L | ni_nic.exe | Intel Client Instrumentation for DMI |
| Intel DH Service (IntelDHSvcConf) | L | IntelDHSvcConf.exe | Related to Intel_DH service for their Media Server. Note: Located in \%Program Files%\Intel\IntelDH\Intel Media Server\Tools\ |
| Intel File Transfer | L | xfr.exe | Related to Intel Corp. |
| Intel IIDS | L | IIDS.exe | Related to Intel Corp. |
| Intel Input Service (IISLvc) | X | mgrsvc.exe | W32/Tilebot-Gen
Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (Vista/XP/WinNT/2K) |
| Intel Local Scheduler Service | L | LOCALSCH.EXE | Part of LANDesk
Management Suite. |
| Intel multimedia devices | X | hkcmd.exe | W32/Sdbot-DGR Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) |
| Intel NCS NetService (NetSvc) | L | NetSvc.exe | Intel NCS NetService |
| Intel PDS | L | pds.exe | Related to Intel Corp. |
| Intel QIP Client Service | L | QIPCLNT.EXE | Part of LANDesk
Management Suite. |
| Intel Speedstep Technology | X | intelst.exe | Win32/IRCBot.worm.128512.H |
| Intel SSM | L | ssm.exe | Related to Intel Corp. |
| Intel Targeted Multicast | L | tmcsvc.exe | Part of LANDesk
Management Suite. |
Intel(R) Active Management Technology System Status Service (atchksrv) | L | atchksrv.exe | Related to AMT_Status Message from Intel. Note: Located in \%Program Files%\Intel\AMT\ |
| Intel(R) NMS | L | NMSSvc.exe | NIC Management Service - diagnostics program for Intel Pro family network cards |
| Intel® Active Monitor (imonNT) | L | imonnt.exe | Related to Intel motherboard monitoring software. |
| Intel® NMS | L | NMSSvc.exe | Related to Intel Corp. |
| IntelliKeys USB Service | L | ikusbsvc.exe | Related to IntelliKeys_USB Service from IntelliTools, Inc. Note: Located in \%ROOT%\itools\INTELL~2\private\ |
Intel® Active Management Technology Local Management Service (LMS) | L | LMS.exe | Related to Intel Corporation. Note: Located in \%Program Files%\Intel\AMT\ |
Intel® Active Management Technology User Notification Service (UNS) | L | UNS.exe | Related to Intel Corporation. Note: Located in \%Program Files%\Intel\AMT\ |
| Intel® Active Monitor (imonNT) | L | imonnt.exe | Related to Intel motherboard monitoring software. |
| Intel® Alert Service (AlertService) | L | AlertService.exe | Related to Intel® _Alert Service from Intel Corporation. Note: Located in C:\Program Files\Intel\IntelDH\CCU\ |
| Intel® Application Tracker (MCLServiceATL) | L | MCLServiceATL.exe | Related to Intel® _Alert Service from Intel Corporation. Note: Located in C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\ |
| Intel® Desktop Utilities Service (iHCService) | L | IDUServ.exe | Related to Intel® Desktop_Utilities service from OSA Technologies. Inc. Note: Located in C:\Program Files\Intel\IDU\ NoteNow owned by Avocent_Corporation, http://www.avocent.com/web/en.nsf/Content/04072004-F |
| Intel® DHTrace Controller (DHTRACE) | L | DHTraceController.exe | Related to Intel® _DHTrace_Controller Digital Health Solutions. Note: Located in \%Program Files%\Common Files\Intel\IntelDH\bin\ |
| Intel® Matrix Storage Event Monitor (IAANTMON) | L | Iaantmon.exe | Intel related |
| Intel® Media Share Synch Service (IMSSync) | L | IMSSync.exe | Related to Media_Share_Software from INTEL. Stream or download media files from your Intel® Core™2 Processor with Viiv™ technology-based PC. Note: Located in \%Program Files%\Intel\Intel Media Share Software\ |
| Intel® NetStructure™ VPN Client (ICService) | L | icsrv.exe | Related to Intel NetStructure VPN Client. |
| Intel® NMS (NMSSvc) | L | NMSSvc.exe | NIC Management Service - diagnostics program for Intel Pro family network cards |
| Intel® NMSCore (NMSCore) | L | NMSCore.exe | Related to Intel® _NMSCore Note: Located in \%Program Files%\Common Files\Intel\IntelDH\NMS\NMSCore\ |
| Intel® PROSet/Wireless Event Log (EvtEng) | L | EvtEng.exe | Related to Intel Corporation |
| Intel® PROSet/Wireless Registry Service (RegSrvc) | L | RegSrvc.exe | Related to Intel(R) PROSet/Wireless Registry Service |
| Intel® PROSet/Wireless Service (S24EventMonitor) | L | S24EvMon.exe | Related to Event_Monitor from Intel Corporation Supports driver extensions to NIC Driver for wireless adapters. Note: Located in \%Program Files%\Intel\Wireless\Bin\
Supports driver extensions to NIC Driver for wireless adapters. |
| Intel® PROSet/Wireless SSO Service (WLANKEEPER) | L | WLKeeper.exe | Related to Intel Corporation |
| Intel® Quality Manager (QualityManager) | L | qualitymanager.exe | Related to Intel® Quality Manager service for their Media Server. Note: Located in \%Program Files%\Intel\IntelDH\Intel Media Server\Media Server\bin\ |
| Intel® Quick Resume technology (ELService) | L | Elservice.exe | Related to Intel® _Quick_Resume_Technology Drivers. Note: Located in C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ |
| Intel® Quick Resume Technology Drivers (ELService) | L | ELService.exe | Related to Intel® _Quick_Resume_Technology Drivers. Note: Located in C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ |
| Intel® Remoting Service (Remote UI Service) | L | Remote UI Service.exe | Related to Intel® _Alert Service from Intel Corporation. Note: Located in C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\ |
| Intel® Software Services Manager (ISSM) | L | ISSM.exe | Related to Intel® _Alert Service from Intel Corporation. Note: Located in C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ |
| Intel® Viiv™ Media Server (M1 Server) | L | mediaserver.exe | Related to Intel® _Alert Service from Intel Corporation. Note: Located in C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ |
| Interactive Services Detection (UI0Detect) | L | UI0Detect.exe | Part of Windows Vista Note:C:\%WINDIR%\System32 |
| Interbase Guardian | L | ibguard.exe | Interbase database server related |
| InterBase InterClient Server | L | interserver.exe | Interbase database server related |
| InterBase Server | L | ibserver.exe | Interbase database server |
| Internet Connection Manager | X | (random name).exe | Troj/Agent-ELW |
| Internet Connection Monitor Engine | L | ICMNT.EXE | User reports that it's for a Home Router from Deerfield Communications www.deerfield.com/ |
| Internet Explorer (Internet Explorer) | X | Internet.exe | Added by the Troj/Feutel-AA
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder. |
| Internet Proxy | L | InternetProxy.exe | Related to ICRAplus internet filter, parental control etc. Note: Located in C:\Program Files\ICRAplus\ICRAplus\ |
| Internet Security Service 23 | X | mssq.exe | W32/Tilebot-KF
Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (Vista/XP/WinNT/2K) |
| Internet Service Manager (INETSVC) | X | INETSVC.EXE | Added by the Backdoor.Win32.SdBot.xd detected by Kaspersky More: Here Note: This worm\trojan is located in C:\%WINDIR%\ |
| Internet TCP Protocol (Win_ad) | X | TCPServer.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\wadsys\ (Win9x/Me), C:\%WINDIR%\wadsys\ (XP/WinNT/2K) |
| internew (internew) | X | system.exe | Added by the Troj/Cmjspy-BN
TROJAN!
|
| InterPlot IMF Printer Driver Service | L | pidrpcs.exe | Related to InterPlot InterPlot/ device drivers from BENTLEY. |
| Intespention (Win32) | X | IEXPLORE.exe | Added by the W32/Forbot-FL
WORM!
|
| Intranet Service (IntranetService) | X | intranet.exe | Owner:Brought to you by the Bandwidth Bandits. Location: C:\WINDOWS\SYSTEM32\intranet.exe |
| Intuit Entitlement Service v2 | L | Intuit.Spc.Map.EntitlementClient.Server.Service.exe | Related to Intuit_Entitlement_Service Installed with Intuit QuickBooks Point Of Sale software. Note: Located in C:\Program Files\Common Files\Intuit\Entitlement Client v2\Server\ |
| Intuit Fuse Service | L | Intuit Fuse Service.exe | Related to Intuit products |
| Intuit QuickBooks FCS (QBFCService) | L | Intuit.QuickBooks.FCS.exe | Related to Intuit_QuickBooks FCS service. Note: Located in \%Program Files%\Common Files\Intuit\QuickBooks\FCS\ |
| InVircible Scheduler (IVScheduler) | L | IVSCHED.EXE | Security software package to protect personal computers and PC networks.
Owner: NetZ Computing Ltd. Israel. InVircible
|
| iolo DMV Service (ioloDMV) | L | ioloDMVSvc.exe | Part of system mechanic |
| iolo FileInfoList Service (ioloFileInfoList) | L | ioloServiceManager.exe | Related to System_Mechanic from iolo technologies. Note: Located in \%Program Files%\iolo\common\lib\ |
| iolo System Guard (IOLO_SRV) | L | IoloSGCtrl.exe | Related to System_Mechanic by Iolo |
| iolo System Service (ioloSystemService) | L | ioloServiceManager.exe | Related to System_Mechanic from iolo technologies. Note: Located in \%Program Files%\iolo\common\lib\ |
| Iomega Active Disk | L | ADService.exe | Related to Iomega Corporation |
| Iomega Activity Disk2 | L | ActivityDisk.exe | ActivityDisk Iomega Corporation SmartSoft ActivityDisk |
| Iomega App Services | L | AppServices.exe | Iomega related |
| IomegaAccess | L | IOMEGAACCESS.EXE | related to Iomega Backup |
| ION Java Daemon 2.0 | L | ion_srv.exe | Related to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL visualization and analysis applications. Note: Located in C:\Program Files\RSI\IDL60\products\ion20\ion_java\bin\ |
| ION Java Daemon 6.1 | L | ion_srv.exe | Related to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL visualization and analysis applications. Note: Located in C:\Program Files\RSI\IDL61\products\ion61\ion_java\bin\ |
| Ip4Sec (Ip4Sec) | X | ip.sys | Added by the Satiloler.E
TROJAN!
Read the link, rootkit type stealth involved.
|
| Ip6Fw | X | ip6fw.sys |
Troj/Pushu-Gen
Note: Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) May also have an additional services installed. Read link |
| iPAHelper.exe | L | iPAHelper.exe | Related to iPod_Access for Windows. Note: Located in C:\Program Files\iPod Access for Windows\ |
| iPassConnectEngine | L | iPassConnectEngine.exe | Related to iPassConnect Universal Client. iPass addresses the needs of both users and IT by making safe, simple and effective network access a reality, no matter where end users are located. Note: Located in C:\Program Files\iPass\iPassConnect iRAS\ |
| iPCAgent | L | iPCAgent.exe | Related to iPCAgent from Ipass Inc. Give your mobile workers a safe, simple and reliable way to access the Internet and corporate network Note: Located in \%Program Files%\iPass\iPassConnect Corporate\ |
| iPod ?? (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPod Service | L | iPodService.exe | Related to Apple iPod. |
| iPod Service (ipod service) | L | iPodService.exe | Related to Apple iPod. |
| iPod Service (iPodService) | L | iPodService.exe | Related to Apple iPod |
| iPod ·t?? (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPod-Dienst (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPod-palvelu (iPod Service) | L | Related to Apple iPod. | iPodService.exe |
| iPod-palvelu (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPod-service (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPod-service (iPodService) | L | iPodService.exe | Related to Apple iPod. |
| iPod-tjeneste (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| iPodService | L | iPodService.exe | Related to Apple iPod. |
| iPodSrv | L | iPodSrv.exe | Related to iPod Apple software. Note: located in C:\Program Files\iPod\bin\ in Windows 2000/XP/2003. |
| IPODT1000 (ssipod1) | | ssipod1.sys | Troj/Goldun-FI |
| IPRIP | X | ipripst.dll | Detected as W32/Mofei-V
Located in \ipripst.dll |
| IPRIP (IPRIP) | X | svchost.exe -k netsvcs | Added by the Backdoor.Ripgof
TROJAN!
Read the link, rootkit type stealth involved.
|
| IPS Core Service (IPSSVC) | L | IPSSVC.EXE | A VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\ |
| IPS-Basisservice (IPSSVC) | L | IPSSVC.EXE | A VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\ |
| IPSEC Services (PolicyAgent) | L | lsass.exe | Related to Active_Directory-based_IPSec_policies For Windows 2000 and 2003. Note: Located in \%WINDIR%\system32\ |
| Ipswitch WS_FTP Queue (ftpqueue) | L | ftpsched.exe | Related to Part of WS_FTP Pro from Ipswitch. Note: Located in C:\Program Files\WS_FTP Pro\ |
| Ipswitch WS_FTP Service (iFtpSvc) | L | iFtpSvc.exe | Related to Ipswitch_WS_FTP The main exe file of WS-FTP server. Note: Located in C:\iFtpSvc\ |
| IPtable | X | ipconfig32.exe | Added by the W32/Tilebot-AP
WORM!
Note: This worm file is found in the Windows or Winnt folder.
|
| IPv6 Helper Driver | X | csass.exe | Added by the AGOBOT.TC WORM! |
| IPX/SPX (NWLink) | X | usbmini.sys | Troj/Proxy-CY Note: Located in %windir%\system32\drivers Read the link, allows remote access |
| IrBridge User-Level Interface (USRBRIDG) | L | usrbridg.exe | Related to the Extended Systems infrared port, made by Extended_Systems
Inc.
This file should be located in the Windows\System32\ or Winnt\System32 folder.
|
| IS Service (ISSVC) | L | ISSVC.exe | Related to Symantec's Firewall \%Program Files%\Symantec Client Security\Symantec Client Firewall\ |
| ISAM SMT Service (ISAMsmt) | L | isamsmt.exe | Related to IBM Global Services - http://www.anti-spy.info/process/isamsmt.exe.html |
| ISC BIND (named) | L | named.exe | Related to ISC_BIND BIND (Berkeley Internet Name Domain) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. Note: Located in \%WINDIR%\System32\dns\bin\ |
| iSeries Access for Windows Remote Command (Cwbrxd) | L | CWBRXD.EXE | Related to IBM Corporation. |
| ISEXEng | X | angelex.exe | Bargain Buddy variant |
| ISP Ampi Service | X | isampi.exe | Added by the W32/Tilebot-JJ WORM! Note: This worm is located in C:\%WINDIR%\ Read the link, allows remote access |
| ISP Monitor (ISPMonitorSrv) | L | ISPMonitorSrv.exe | Related to ISP_Monitor from How2 Studios. Monitor your connection, run speed tests and much more. Note: Located in \%Program Files%\ISP Monitor\ |
| ISS Buffer Overflow Exploit Prevention (VPatch) | L | vpatch.exe | Related to IBM_ISS (Internet Security Systems) Note: Located in \%Program Files%\BlackIce\ |
| ISSI EZUpdate (ISSIMon) | L | issimsvc.exe | Related to Ibm_Global_Services Used internally by IBM for automatic updating of software and microsoft patching Note: Located in c:\sdwork\ |
| ISSvc (ISSVC) | L | ISSVC.exe | Related to Norton Internet Security |
| Italian Grand Prix | X | grand.exe | Added by the W32/Spybot-MK WORM! Note: C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) |
| ITE Remote Controler service (ITECIRService) | L | RemoteControlService.exe | Related to ITE_Remote_Control Service from ITE Tech. Inc. |
| iTechnology iGateway 4.2 (iGateway) | L | igateway.exe | Related to iTechnology_Application Server from Computer Associates International, Inc. Note: Located in \%Program Files%\CA\SharedComponents\iTechnology\ |
| iTunes Music Service (iTunesMusic) | X | iTunesMusic.exe | Added by W32.Spybot.NLX WORM! Rootkit Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| IviRegMgr | L | iviRegMgr.exe | Related to RegMgr Module from InterVideo. Note: Located in \%Program Files%\InterVideo\RegMgr\ |
| IWin service | X | iwinapp.exe | Added by a variant of the Trojan/Backdoor TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Ixia Endpoint (IxiaEndpoint) | L | endpoint.exe | Added by Ixia_Endpoint Note: Located in C:\PROGRA~1\NetIQ\Endpoint\ |