| Name | Status | Filename | Description |
|---|
| LoadWatcher | X | watcher.exe | Added by the Watcher
Spyware! File location is in the PROGRAM FILES\Digi-Watcher.com\Watcher 2.30 folder. |
| loader | X | WMPLAYER.EXE | Unknown baddie - WMPLAYER.EXE is stored in the location and uses the same name as Windows Media Player but that valid Windows program doesn\'t load at startup |
| Lightning Download | U | Lightning.exe | Lightning_Download download manager. Can be launched manually, but will need to start up if you want it to "catch clicks" off Internet Explorer |
| Logitech Harmony Remote | U | HarmonyClient.exe | Related to Logitech_Harmony Advanced Universal Remote. Note: Located in \%Program Files%\Logitech\Harmony Remote\ |
| Logitech Wakeup | N | lgwakeup.exe | Loads at startup and monitors the scanner. When a document is inserted in the scanner the wakeup program feeds the document a fraction of a inch into the scanner and then it launches the control center software. From the control center you can select whether to fax or copy or print the scanned documents. If you uncheck the Logitech wakeup software from the startup it no longer launches the control center or feeds the document a fraction of an inch. You can manually launch the control center software via Start ->Programs and still be able to scan images |
| Live Windows Messenger Version | X | msnmsngrlive.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| LCD Smartie | U | LCDSmartie.exe | Related to LCD_Smartie software for Windows that you can use to show lots of different types of information on your LCD/VFD. Note: Located in \%Documents and Settings%\user\Desktop\LCD\ |
| LimeWire x.x | N | LimeWire.exe | LimeWire - Peer to Peer (P2P) file-sharing client. x.x represents the version number. Note - as with all P2P sharing programs they are susceptible to various forms of malware |
| load32 | X | swchost.exe | Added by the TURTA.A WORM! |
| LoadHTML | X | rundll32.exe,mshtmpre.dll, MShtmpre | Mshtmpre adware
|
| load | X | Kerne121.exe | Added by Troj/Lineage-ON TROJAN! |
| LoadPFW | X | wmimgr.exe | Added by the W32/Qeds-B
Worm!
|
| li01f948 | X | rundll32.exe,(path),li01f948.dll,EnableRunDLL32 | LZIO.com adware downloader |
| LgWDskTp | U | LgWDskTp.exe | Related to Logitech Wireless mouse. There is an icon for this program on the taskbar next to the clock. It can change the behavior of other programs or manipulate other programs. Note: located in C:\Program Files\Wireless Desktop\ |
| LoadPowerProfile | X | ASDAPI.EXE | Added by the CABRO VIRUS! Not to be confused with the valid entry below |
| Load | X | MyGame.exe | Added by the W32/LameYear-A
Worm!
|
| LanGuard | X | languard.exe | Adware downloader - also detected as the TROJ/SECONDT-C TROJAN! |
| lsess | X | lsess.exe | Added by the WURMARK.S or W32.SINNAKA.A WORM |
| LSA Shell (Export Version) | X | lsasss.exe | Added by a variant of the BACKDOOR.IRC.BOT TROJAN! |
| LED TRAY | U | LEDTRAY.EXE | Installs a USB compact flash card reader or drive on start-up. The device is distributed by Microtech and is made by a company called SnapShot. Required if you want the reader to work |
| LSASS 32 | X | ISASS32.pif | Added by the W32/ASSIRAL-C WORM! |
| laokey.exe | U | LaoKey.exe | Lao Script for Windows http://www.laoscript.net/ (LSWin) is an extension to the Windows operating system to allow Lao language to be used with many different Windows-based applications
|
| lsass64BiT.exe | X | lsass64BiT.exe | Added by the W32/FORBOT-CK WORM! |
| Logical Disk Detection | X | mrisvc.exe | Added by a variant of the IRCBot family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| lsasss.exe | X | lsasss.exe | Sasser.E worm |
| Lexmark **** Series | U | lxbmbmgr.exe | Lexmark System Tray application (where "****" is the model) that enables scan or fax functions to run directly from the printer via the buttons. Can be launched from a desktop shortcut |
| load= | Y | AICLIENT.EXE | Asset Insight from Tangram - asset managing software. Required if an organisation is running a centrally administered asset management system |
| load= | X | a1g.exe | Added by the ATAK.B WORM! |
| li-speed**** | X | dlres.exe | Adult web-dialler - **** is random |
| LaunchAp | U | LaunchAp.exe | Part of Acer Launch Manager - programmable keys on such laptops as the TravelMate 610 |
| Lexmark Xxx Button Monitor | Y | ACMonitor_Xxx.exe | Associated with the Lexmark Xxx (where "xx" is the model) all-in-one printer/scanner/copier. Required for correct operation |
| logonUiInit | X | rgtndz.dll | Identified as a variant of the Trojan-Clicker.Win32.Agent.bqy malware. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| li-vita**** | X | li-vita****.exe | Adult web-dialler - **** is random |
| LoadDBackUp | X | BcTool.exe | Added by the GIBE VIRUS! |
| LoadPowerScheme | X | rundll32.exe,powerprof.dll,CheckPowerProfile | Ulubione adult content dialer |
| Local-Settings-of-[User Name] | X | [User Name].exe | Added by the W32.Gavgent.A
WORM!
|
| load= | Y | hotkey.exe | Solo 5300 display driver for Win2K on some Gateway laptops |
| LiveUpdate | X | smss.exe | Added by the Backdoor.Win32.VB.bau TROJAN! - NOTE - this file is placed in a "WINDOWS\isas" folder and should NOT be confused with the legitimate Windows smss.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! |
| lssass | X | lssas.exe | Added by the AGOBOT.RL WORM! |
| LEMSRV | X | lemsrv.exe | Added by the Troj/IRCBot-TC TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| LTM2 | X | SVCHOST˙.exe | Added by the DROPPERFL.A TROJAN!
|
| Logitech Hardware Abstraction Layer | U | Khalmnpr.exe | Part of the Logitech Setpoint software for their wired and wireless mice and trackballs. Sets the Windows mouse sensitivity to minimum. The idea is that you will use the SetPoint Control Panel to adjust your mouse sensitivity. This setting is maintained separately from the Windows setting, but is combined with the Windows setting to determine the final sensitivity. For this reason, KHALMNPR sets the Windows setting to 0 so it doesn't alter the one you set in SetPoint
|
| Logitech Desktop Controller | X | wrcam.exe | Added by a variant of the WIN32.RBOT WORM!
|
| LTMSG | Y | ltmsg.exe | One of the "popular" WinModem series. WinModems use software rather than hardware - hence putting a load on the CPU. Needed if you have it for loading the drivers. See here for more WinModem information |
| Life FireWall Update1 | X | FireWall-Update1.exe | Added by the W32/RBOT-ARS WORM! |
| lxbrbmgr | Y | lxbrbmgr.exe | Lexmark printer button manager. Required for correct operation.
|
| LXBUCATS | U | LXBUtime.dll | Related to Lexmark printers/scanner Note: Located in \%WINDIR%\System32\spool\DRIVERS\W32X86\3\ |
| lMAPl | X | lMAPl.exe | Added by the W32/AGOBOT-RE WORM! |
| load | X | _Kerne1.exe | Added by the Troj/Lineage-AN
TROJAN!
|
| LoadWindowsFile | X | (filename) | Added by the DELF.B VIRUS! where <filename> is the infected file |
| limewirepro.exe | X | limewirepro.exe | W32/IRCBot-WA Read the link, allows remote access |
| LoadPowerProfile | U | Rundll32.exe,powrprof.dll | Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice - see here. Loads your selected power scheme. May not be required - depends upon whether you modify the default Control Panel -> Power Options settings |
| LSA Shell (Export Version) | X | LSASS.exe | Added by several variants of the AHKER
WORM! - NOTE - this file is placed in the Winnt or Windows folder, and should NOT be confused with the legitimate Windows lsass.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup!
|
| LOCAL INTERNET WEB DRIVERS FOR WIN32 | X | phqghume.exe | Added by a variant of the WIN32.RBOT WORM!
|
| lxdiamon | U | lxdiamon.exe | Related to Lexmark Lexmark 3500-4500 Series printers. Note: Located in \%Program Files%\Lexmark 3500-4500 Series\ |
