| Name | Status | Filename | Description |
|---|
| kernctl32 | X | rundll32,kctl32.dll,initialize | Added by a Trojan.Proxy.Agent.AT infection |
| kimochiz.exe | X | kimochiz.exe | Added by the TROJ/MDROP-BB TROJAN! |
| kernel32dll | X | guardpc.exe | Added by the W32/FORBOT-CU WORM! |
| kbddrvinf | X | kbddrvinf.exe | Added by a CRYPTER.A trojan infection
|
| Kodak Picture Easy *.* Batch Transfer | N | PezDownload.exe | Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC. *.* represents the version |
| Kill Popup | U | KillPopup.exe | KillPopup Pop-up stopper |
| Kvsc3 | X | Kvsc3.exe | Added by the Troj/PWS-ANM Trojan Read the link, steals information |
| KN_PanelApp | U | PanelApp.exe | KnowledgePanel Online Survey software
|
| KnowledgeBase GUI | X | wppewafaj.exe | Added by the W32/Rbot-GRZ Worm Read the link, allows remote access |
| KernelFaultCheck | X | ptool32.exe | Added by the Troj/LegMir-BN TROJAN! Note: This trojan file is found in the System (95/98/Me) or System32 (NT/2000/XP) folder. |
| kmw_show.exe | U | kmw_show.exe | Kensington MouseWorks - mouse/trackball software. Not required unles you use any special features |
| Kaspersky Anti-Hacker | Y | KAVPF.exe | Kaspersky Anti-Hacker firewall |
| Keenvalue | X | Keenvalue.exe | eUniverse/KeenValue adware |
| kernelfaultcheck | N | dumprep 0 -u | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| KernellApps32 | X | smss.exe | Added by the Troj/Bancban-AN
TROJAN!
Note: This is not the legitimate Windows process smss.exe (Which is always found in the System32 folder) This trojan file is found in the System\Systens (95/98/ME) or System32\Systens (NT/2000/XP) folder.
|
| Kodak Batch Transfer | N | pezdow1.exe | Part of "Kodak Picture Easy" software for digital cameras. Includes the display of an icon in the System Tray to quickly transfer photos to a PC |
| kava | X | kavo.exe | Added by the Troj/Lineag-GLG Trojan |
| KPFW32.EXE | Y | KPFW32.EXE | KingSoft Personal Firewal |
| KREC32 | U | krec32.exe | StarrCommander Pro Keystroke logging software |
| KAT | X | KAT.vbs | VBS/Soad-D |
| Keyboard Preload Check | Y | Preload.exe | Millenium Multi-Function Keyboard driver |
| kvern16.dll | X | regsvr32.exe,[path],kvern16.dll | DailyWinner adware
|
| keystroke | U | keystroke | QuickLaunch is a spyware program that logs keystrokes and captures screenshots. If you didn't install this yourself remove it. |
| Kernal Fault Check | X | ntosrkl.exe | Added by a variant of the W32/SDBOT WORM!
|
| KV_HOST | X | cxjx.exe | Added by the Troj/LegMir-BB
TROJAN!
Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder. |
| krag | X | krag.exe | W32/Agent-FOW |
| Kernel32 | X | Kernel32.win | Added by the GAGGLE.D VIRUS! |
| keyboard | X | [path to,trojan] | Added by the DLOADR-AOZ TROJAN!
|
| Krnlmod | U | Krnlmod.exe | Keylogger - see here. Given a "U" recommendation because it depends if you intentionally installed it. If you didn't, treat it as "X" and uninstall or remove via Spybot S&D (for example) |
| kb | X | AUTO.txt | Added by the W32/Brontok-CV worm |
| Krait | Y | razerhid.exe | Related to Razer Krait mouse driver. Note: Located in \%Program Files%\Razer\Krait\ |
| KavPFW | Y | KavPFW.exe | KingSoft Personal Firewall |
| Kaspersky Antivirus | X | KasperskyAV.exe | Added by a variant of the WIN32.RBOT WORM!
|
| Kadoc | X | [random,filename].exe | Added by the Staprew TROJAN! |
| KasperskyAv | X | kaspersky.exe | Added by the W32.MIMAIL.T WORM! **Note - This has nothing to do with Kaspersky AntiVirus |
| Kernel Manager | X | krnlmgr.exe | Added by the TROJ_JUNY.A TROJAN! |
| KernelCheck | X | sys****.exe ( *,= digit) | Added by an unidentified TROJAN! |
| KeyWallet | U | KWallet.exe | "KeyWallet is a useful and convenient desktop utility that spares you the trouble of filling in your logins, passwords and other personal data manually" |
| Kernell32 | X | Kernell.dll | Added by the DESTINY VIRUS! |
| KillAndClean | X | KillAndClean.exe | "Spyware remover" of dubious repute - see the authoritative SpywareWarrior_List of Rogue/Suspect Anti-Spyware Products & Web Sites Note: located in C:\Program Files\KillAndClean\ |
| KTPWare | Y | ktp.exe | Related to KTP Ware TSR Enhancements from ELANTECH |
| KB891711 | Y | KB891711.exe | Installed by the Windows KB891711 critical update, see this security bulletin - this file reportedly needs to continue running in order to patch the vulnerability, at least until a more practical solution is found. There have however been reports of fatal exception errors in systems running Windows 98, and in such a case Microsoft advises to either uninstall the patch (Add/Remove Programs) or prevent it from running at startup.
|
| Kernel32 | X | svchosts.exe | Added by an unidentified TROJAN! Downloader... Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Konni Symbol Autostart | N | KonniSymbol.exe | Gives configuration access to RagTime Solo professional business publishing software. RagTime Solo is the private user version of RagTime 5 |
| kern64dll | X | (filename) | Added by a PWSteal.Tarno.J trojan infection. |
| Kodak EasyShare software | U | EasyShare.exe | Software bundled with Kodak digital cameras to manage the connection between the PC and the Camera. Can be started manually. |
| Kernell | X | systems.exe | Added by the TARNO.C VIRUS! |
| KodakCCS | Y | KodakCCS.exe | Kodak DC File System Driver |
| Key1 | X | Rlid.exe | Added by the LIXY VIRUS! |
| Key Logger | X | csrss.exe | Added by the W32.Buchon.A worm. |
| Kazaa Download Accelerator Updater | X | regsvr32 [path],kdpupd.dll | SafeguardProtect/Veevo
|
| KatMouse | U | KatMouse.exe | Related to KatMouse utility is to enhance the functionality of mice with a scroll wheel, offering 'universal' scrolling: etc... Note: Located in \%Program Files%\KatMouse\ Note It uses about 3,000 kb of resources. |
| KIT3 | X | hpprintqueue.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System\ spool\(Win9x/Me), C:\%WINDIR%\System32\spool\ |
| KPFWSvc.EXE | Y | KPFWSvc.EXE | KingSoft Personal Firewal |
| kfienq | X | masbl.bat | Added by the KIFER VIRUS! |
