| Name | Status | Filename | Description |
|---|
| Internet Sweeper | N | Sweeper.exe | Internet Sweeper - removes unnecessart left over files after browsing the internet |
| Instant Access | X | rundll32.exe,eg_auth_****.dll, InstantAccess | Electronic_Group/InstantAccess premium rate adult content dialer variant |
| Internet Explorer | X | IExplorer.exe | Added by the Troj/Nethief-O
Trojan!
|
| Internal Memory File | X | sysintmemory.exe | W32/Rbot-GKT Read the link, allows remote access |
| Itk | U | Itk.exe | In The Know - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it |
| IECache | X | IECache.exe | Detected as Win32:Delf-GIY by Avast |
| ISW.exe | U | ISW.exe | Related to Internet_Security_Wizard from AT&t {formerly BellSouth Premium Internet Security) alerts users about any potential security threats. It should not be uninstalled unless the user wants to completely remove all traces of AT&T Internet Security Suite. Note: Located in \%Program Files%\AT&T\Internet Security Wizard\ |
| Icon lptt01 | X | icon.exe | RapidBlaster Variant |
| Image | X | rundll32 (path),image.dll, Install, rundll32,(path)sdkqh32.dll,Install | CoolWebSearch parasite related |
| IntelMem | U | IntelMem.exe | Related to connection events on an Intel chipset based modem. It can alert you if the telephone line is being used when you're trying to get online (when you're using dial-up). It can also alert you if your modem line is disconnected. Furthermore, it can alert you if you have made a wrong connection with your modem line |
| ICQ = | X | ICQNET.vbs | Added by the VBS/Gormlez-A
Worm!
|
| Iesearch.exe | X | Iesearch.exe | LookNSearch adware |
| imonitor | X | imonitor.exe | Troj/Imoni-A Read the link, allows remote access |
| ISMPack6 | X | ISMPack6.exe | Added by the Hyperlinks_Rotator Rotator&threatid=153458 ADWARE! Note: Located in \%Program Files%\ISM2\ |
| iPodManager | U | iPodManager.exe | Apple iPod Management software for the iPod MP3 player. Allows updating, formating, restoring and other functions associated with iPods |
| IE Menu Extension toolbar | X | rundll32.exe,[path],tbextn.dll,DllShowTB | Topconverting.com/180Search "IEMenuExtension" toolbar |
| Info Select | U | is.exe | Info Select from Micro Logic - personal information manager |
| IpWins | X | ipwins.exe | Added by ClickSpring/PurityScan ADAWARE!
Identified as Adware_Maxfiles by Prevx
Note: located in C:\Program Files\ipwins\ |
| ICQ Agent | X | icq6.exe | Added by the Troj/Agent-FZJ Trojan |
| ImgStart | N | ImgStart.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| ieexec.exe | X | ieexec.exe | Added by the TROJ/MULTIDR-DY TROJAN! |
| Intellitype | U | type32.exe | For MS programmable keyboards. If you disable Intellitype in Startup, any "Hot Keys" that are changed by the user to perform functions other than default settings, defer back to their default settings unless you have changed them |
| ICcontrol | X | iccontrol.exe | Added by the ICcontrol premium rate adult content dialer |
| Instant Messenger Service | X | imservice.exe | Identified by Kaspersky Antivirus as Heur.Trojan.Generic. Note: Located in \%WINDIR%\System32\ |
| iel2cde8 | X | rundll32.exe,(path),iel2cde8.dll,EnableRunDLL32 | LZIO.com adware downloader |
| InoRT | Y | InoRT9x.exe | Associated with the Realtime Monitor of eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. For NT/2K/XP users you may need a patch if seeing high CPU useage - see here |
| idecntl | X | idecntl.exe | Added by a Crypter.C trojan variant infection |
| Intelliflag_be.exe | X | Intelliflag_be.exe | Added by the Spyware.Intelliflag SPYWARE! |
| Intel PDS | U | pds.exe | Intel Ping Discovery Service (PDS). Part of Intel's LANDesk Management Suite 6 and the Common Base Agent (CBA) - used for communicating between the core server and managed clients. Will start the dial-up if installed and enabled |
| Initial Page | X | install.exe | "EasySearch" browser hijack installer |
| Iusage | N | netdet.exe | Internet Usage Monitor - utility to calculate the cost and time on the internet via dial-up |
| Ibmmon.exe | ? | Ibmmon.exe | ?? |
| IExplorerService | X | WinSock.exe | Added by a variant of the IRCBot family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| ICQ Net | X | winlogon.exe | Added by the W32.NETSKY.C or W32.NETSKY.D or W32.NETSKY.E or W32.NETSKY.K WORM! **Note - this is NOT the legitimate Windows winlogon.exe process |
| IMEvtMgr.exe | X | IMEvtMgr.exe | Added by the Troj/Keylog-AR
TROJAN!
Note: This trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| ias | U | ias.exe | InvisibleASpy keystroke logger/monitoring program - remove unless you installed it yourself! |
| InoTask | U | InoTask.exe | Scheduled scans and signature updates for eTrust Antivirus/InoculateIT version 6 virus scanners from Computer Associates. Leave enabled unless you manually update signatures or perform routine scans. If enabled it can result in high CPU useage when performing updates - see here |
| Intervideo WinCinema Manager | N | WinCinemaMgr.exe | WinCinema Manager is needed when using the WinDVD Remote Control for WinDVD from Intervideo. Available via Start -> Programs |
| IP Packet Redirect Service | X | ipredirect.exe | Added by the Win32/ForBot.SM WORM! |
| Interdll | X | Interdll.exe | Added by the DELF family of VIRUSES! |
| iyelejiv | X | yujixit.exe | Added by the SDBOT.BJK WORM! |
| iPalm | N | mon.exe | Installed with a Panasonic iPalm digital camera. Used to uploaded photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded |
| ieupdate | X | MCP****.exe | Added by the ASOXY VIRUS! where **** are random characters |
| intenat | X | intenat.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Could_be_a_variant of this infection. |
| Installed shell32.dll | X | Office.exe... | Added by a variant of the LOVGATE WORM!
|
| Incredimail | N | incredimail.exe | "IncrediMail is an advanced, feature-rich email program that offers you an unprecedented interactive experience. Unique multimedia features will enable you to tailor your email experience so that it fits your mood and personality" |
| ISDN Monitor | N | Linksts.exe | Tray icon which gets installed when you install the drivers for Asuscom internal ISDN modem cards (or rebadged Asuscom ISDN cards, such as MRi). This icon enables you to monitor or configure your ISDN card. Once you have configured your ISDN card correctly, you will never need to use this icon |
| iExpresser | X | iexpresser.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| Intersoft Msngr | X | intersoftmsngr.exe | Added by the W32/AGOBOT-NW WORM! |
| ICQ Center | X | consoles.exe | Added by the RANDIN VIRUS!
|
| Instant Access | X | rundll32.exe,EGCOMLIB_****.dll, InstantAccess | Electronic_Group/InstantAccess premium rate adult content dialer variant |
| IBMUltraBayHotSwapSound | ? | IBMBAYSN.EXE | Supports hot swapping in Thinkpad UltraBay Option on IBM ThinkPad laptops. Is it needed though - does it just play a sound? |
| InstantPleasure | X | instantpleasure.exe | Adult content dialler |
| ISPSERVICE | X | psycho.exe | Troj/IRCFlood-O |
| Inet DataBase | X | Inetdbs.exe | Added by the W32.QEDS WORM! |
