| Name | Status | Filename | Description |
|---|
| P correction service (msrdr2) | X | msrdr2.sys | Added by the Troj/Haxdoor-AJ
TROJAN!
Note: This trojan file is found in the System32 folder.
|
| P-SYS (P-SYS Service) | X | TERMSVRS.EXE | Added by the SDBOT.DEO
WORM!
Read the link, rootkit type stealth involved.
|
| P4P Service | X | p2psvr.exe | Added by Adware.Sogou Note: Located in \%Program Files%\Common Files\Sogou PXP\ |
| Pacific Image Comm. Fax Server | L | PICPMON.EXE | Related to SuperVoice Specialists in Voice Mail and Fax systems |
| Packet Scheduler | L | Service.exe | Related to Packet_Scheduler from Microsoft. The packet scheduler decides the order in which packets. are sent on the output link. Note: located in C:\WINDOWS\system32\microsoft\Groups\ |
| PACSPTISVR | L | PACSPT~1.EXE, PACSPTISVR.exe | Sony computers
|
| PaintReport (PRSvc) | X | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan file is found in the Windows or Winnt folder. |
| Panasonic Trap Monitor Service | L | Trapmnnt.exe | Related to Panasocic_Trap_Monitor for printer service. Note: Located in C:\PROGRAM FILES\PANASONIC\TRAPMONITOR\ |
| Panda AdminSecure Administration Server (AdminServer) | L | AdminServer.exe | Related to Panda Security programs. |
| Panda AdminSecure Communications Agent (PAVAGENTE) | L | Pagent.exe | Related to Panda Security programs. |
| Panda AdminSecure Distribution Server (PadFSvr) | L | PadFSvr.exe | Related to Panda Security programs. |
| Panda AdminSecure Scheduler (PavAtScheduler) | L | pavsched.exe | Related to Panda Security programs. |
| Panda anti-virus service (PAVSRV) | L | pavsrv51.exe | Panda Anti-virus Service |
| Panda anti-virus service (PAVSRV) | L | pavsrv50.exe | Related to Panda Security programs. |
| Panda anti-virus service (PAVSRV) | L | pavsrvx86.exe | Related to Panda_PSK Virus protection service. Note: Located in \%Program Files%\Panda Software\Panda Antivirus 2007\ |
| Panda Antispam Engine (pmshellsrv) | L | pskmssvc.exe | Related to Panda
Platinum 2006 Internet Security.
|
| Panda Antispam Server Service | L | PaSSrv.exe | Related to Panda Protection Software. |
| Panda Antivirus Report Service (PavReport) | L | PavReport.exe | Related to Panda Security programs. |
| Panda Antivirus Service (PavSrv) | L | [red]Note:[/red] Located in \%Program Files%\ | Related to Panda_Anti-virus Service Note: Located in \%Program Files%\Panda Software\AVTC\ |
| Panda Antivirus Service (PavSrv) | L | PavSrv51.exe | Related to Panda_Anti-virus Service Note: Located in \%Program Files%\Panda Software\AVTC\ |
| Panda Firewall | L | PavFires.exe | Panda Firewall Service |
| Panda Firewall Service (PAVFIRES) | L | PavFires.exe | Related to Panda Firewall |
| Panda Function Service | L | PavFnSvr.exe | Related to Panda Security programs. |
| Panda Function Service (PAVFNSVR) | L | PavFnSvr.exe | Related to Panda Security programs. |
| Panda Host Service (PSHost) | L | PSHOST.EXE | Related to Panda_Host_service Antivirus and Firewall. Note: Located in c:\program files\panda software\panda antivirus firewall 2007\firewall\ |
| Panda IManager Service (PSIMSVC) | L | PsImSvc.exe | Related to Panda Titanium Antivirus |
| Panda Network Manager (PNMSRV) | L | PNMSRV.EXE | Related to Panda Firewall. |
| Panda NetworkSecure Service (CPntSrv) | L | CPntSrv.exe | Related to Panda Security programs. |
| Panda PAVFNSVR (PAVFNSVR) | L | PavFnSvr.exe | Related to Panda Security programs. |
| Panda Pavkre | L | Pavkre.exe | Related to Panda Titanium Antivirus |
| Panda PAVPROT (PAVPROT) | L | PavProt.exe | Related to Panda Titanium Antivirus |
| Panda Preventium+ Service (PREVSRV) | L | prevsrv.exe | Related to Panda Titanium Antivirus |
| Panda Process Protection Service (PavPrSrv) | L | pavprsrv.exe | Related to Panda Software |
| Panda PSK service (PskSvcRetail) | L | PskSvc.exe | Related to Panda_PSK Virus protection service. Note: Located in \%Program Files%\Panda Software\Panda Antivirus 2007\ |
| Panda Software Controller | L | PSCTRLS.EXE | Related to Panda Security programs. |
| Panda TPSrv (TPSrv) | L | TPSrv.exe | Related to Panda
Platinum 2006 Internet Security and Panda Titanium 2006 Antivirus Antispyware.
|
| Pantech Utility Service | L | PWIUtilityService.exe | Related to Pantech_Utility_Service Note: Located in C:\Program Files\Sprint\Pantech\Sprint Mobile Broadband (Pantech)\ |
| Pantech&Curitel Utility Service | L | PnCUtilityService.exe | Related to Sprint Internet Service Provider. |
| PatchLink Update | L | GRAVITIXSERVICE.exe | Patchlink_Update by Patchlink Corporation |
| PATROL for Windows Operating System Monitor (PWKNTMon) | L | pwkntmon.exe | Related BMC Software, Inc. - http://www.bmc.com/ |
| PatrolAgent | L | PatrolAgent.exe | Related BMC Software, Inc. - http://www.bmc.com/ |
| Patrol_Scheduler | L | Patrol_Scheduler.exe | Related BMC Software, Inc. - http://www.bmc.com/ |
| PC Angel (PCA) | L | PCAngel.exe | Related to PC_Angel PC Angel recovery program from SoftThinks. Note: Located in C:\WINDOWS\SMINST\ |
| PC Tools AntiVirus Engine (PCTAVSvc) | L | PCTAVSvc.exe | Part of PC Tools antivirus |
| PC Tools Auxiliary Service (sdAuxService) | L | svcntaux.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| PC Tools Auxiliary Service (sdAuxService) | L | pctsAuxs.exe | Spyware_Doctor |
| PC Tools Firewall Plus (PCToolsFirewallPlus) | L | FWService.exe | Related to the PC Tools Firewall Plus |
| PC Tools Security Service (sdCoreService) | L | swdsvc.exe | Related to Spyware-doctor from PC Tools. Detects, removes and blocks all types of Spyware. Note: Located in \%Program Files%\Spyware Doctor\ |
| PC Tools Security Service (sdCoreService) | L | pctsSvc.exe | Spyware_Doctor |
| PC Tools Spyware Doctor (SDhelper) | L | sdhelp.exe | Related to PC Tools' Spyware_Doctor |
| PC-cillin PersonalFirewall | L | PCCPFW.exe | Related to Trend Micro Inc. Firewall |
| pcAnywhere Host Service (awhost32) | L | awhost32.exe | Part of
Symantec's pcAnywhere remote PC management software. |
| PCAutoShutdown_Service | L | ShutdownService.exe | Related to PC_Auto_Shutdown Auto shutdown, power off, reboot, hibernate or suspend computers at schedule time. Note: Located in \%Program Files%\PC Auto Shutdown\ |
| PCguard Firewall (RP_FWS) | L | fws.exe | Related to RadialPoint |
| PCHost | L | pchost.exe | Related to PCHost |
| PCI Adapter (PCIDown) | X | alg.exe | Troj/Maran-AF Note: Located in %windir% |
| PCKarte Client Tool Service (PCKarte) | L | PCKTESVC.EXE | Related to PCKarte Client Tool Service from FUJITSU LIMITED. Note: Located in \%Program Files%\Fujitsu\PCKARTE\ |
| PCLEPCI | L | pclepci.sys | Related to Pinnacle_Systems Inc. |
| pcrem service (pcremservice) | L | pcrem.exe | Related to calendar_software from Reel Logix, Inc. calendar software solutions used in a diverse range of demanding industries such as Film and Television, Healthcare and Personal Fitness, Education, Financial, etc. Note: Located in \%Program Files%\Reel Logix\Reel Production Calendar\ |
| pcryptv3X | X | pcryptv3.exe | Added by the W32/Tilebot-AS
TROJAN! Note: This worm\trojan file is found in the Windows or Winnt folder.
Read the link, rootkit type stealth involved.
|
| PCS Business Connection Personal Edition Service | L | ConnectionService.exe | Related to sprint.com ISP |
| PCtel speaker phone (pctspk) | L | pctspk.exe | Related to PCtel services |
| PD91Agent | L | PD91Agent.exe | Related to PerfectDisk from Raxco Software, Inc. disk optimization tool. Note: Located in \%Program Files%\Raxco\PerfectDisk2008\ |
| PD91Engine | L | PD91Engine.exe | Related to PerfectDisk from Raxco Software, Inc. disk optimization tool. Note: Located in \%Program Files%\Raxco\PerfectDisk2008\ |
| PDAgent | L | PDAgent.exe | Part of PerfectDisk |
| PDEngine | L | PDEngine.exe | Raxco PerfectDisk |
| PDExchange | L | PDExchange.exe | Related to Raxco_PerfectDisk a Windows-based application designed to improve the operating system's performance by defragmenting disk drives. Note: Located in \%Program Files%\Raxco\PerfectDisk\ |
| PDF Document Manager (pdfcDispatcher) | L | pdfsvc.exe | Related to PDF_Document Manager. With the click of a button, create PDF documents from Microsoft Word, Excel, and PowerPoint. Note: Located in \%Program Files%\PDF Complete\ |
| PDFCreatorMessages | L | PDFCreatorMessages.exe | Related to Global_Graphics_Software Ltd. Document and Print Solutions. |
| PDScheduler | L | PDSched.exe | Raxco PerfectDisk |
| PE Sytray Manager | X | ssmc.exe | Added by the Backdoor.SdBot.avk as detected by ewido. More here |
| Peachtree SmartPosting 2009 | L | SmartPostingService2009.exe | Related to Peachtree Accounting Software from Sage Software. Note: Located in \%Program Files%\Sage Software\Peachtree2009\ |
| PER Antivirus (pav_service) | L | PERVAC.EXE | Antivirus software from PER Systems.
http://www.perantivirus.com/antivir.htm |
| PER Antivirus Security Service (pav_security) | L | PAVSS.EXE | Antivirus software from PER Systems.
http://www.perantivirus.com/antivir.htm |
| perfmons Service (perfmons) | X | perfs.exe | Added by an unidentified TROJAN! Note here Note: Located in \%WINDIR%\System32\ |
| Performance Logs (Perfhmon) | X | Perfhmon.exe | Added by the W32/Codbot-W
WORM!
|
| Performance Monitor | X | perfmon.exe | Identified as the Trojan-Downloader.Win32.Small.fee malware. Note: located in \%WINDIR%\ |
Performance Monitor Command Line Shell (Performance
Monitor) | X | perfmon.exe | Detected as IRC/BackDoor.SdBot3.BFO by AVG |
| Performance True Type Fonts (PerfFont) | X | perfont.exe | Identified as Trojan-Downloader.Win32.Agent.acv by ewido security suite. |
PermissionTV Download Manager Service
(PermissionTVDownloadManager) | L | dm.exe | Related to PermissionTV Download Manager. Offers the world’s most flexible platform for delivering innovative and interactive video experiences on the Web. Note: Located in \%Program Files%\PermissionTV\bin\ |
| Persits Software EmailAgent | L | EmailAgent.exe | Related to AspEmail from Persits Software, Inc. A free active server component that enables your ASP application to send email messages via any external SMTP server. |
Personal Secure Drive Service
(PersonalSecureDriveService) | L | PSDsrvc.EXE | Related to Personal_Secure_Drive_Service, http://www.infineon.com/ Service from Infineon Technologies. Note: Located in C:\Program Files\Infineon\Security Platform Software\ |
Personal Secure Drive service
(PersonalSecureDriveService) | L | IfxPsdSv.exe | Related to Personal_Secure_Drive from Infineon Technologies AG service. Note: Located in \%WINDIR%\System32\ |
| Pervasive.SQL 2000 (relational) | L | W3SQLMGR.EXE | Pervasive SQL Server |
| Pervasive.SQL 2000 (transactional) | L | NTBTRV.EXE | Pervasive SQL Server |
| Pervasive.SQL Workgroup Engine | O | srvany.exe | Microsoft Windows application which allows an executable to be run as a service. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems. If you did not installed this service you may be well advised to remove it. Note: located in \%WINDIR%\ |
| PestPatrol Remote | L | ppRemoteService.exe | Related to PestPatrol products from Computer Associates International, Inc. |
| PEX | X | pex.sys | Added by the Troj/RKFu-A
TROJAN!
Read the link, rootkit type stealth involved.
|
| PGPsdkService | L | PGPsdkServ.exe | PGP Software |
| PGPserv | L | PGPserv.exe | Related PGP Corp. http://www.pgp.com/ |
| PHAROS Distribution Agent (PSDistributionAgent) | L | DistAgnt.exe | Related to Pharos_Science_ & Applications, Inc. Pharos develops advanced GPS navigation and mobile location-based services. Note: located in C:\PROGRAM FILE\PHAROS\bin\ |
| Pharos Systems ComTaskMaster | L | CTskMstr.exe | Related to Pharos_Systems print asset management. Note: Located in C:\PROGRAM FILES\Pharos\bin\ |
| Phoenix PSA Service (PhnxPsaService) | L | PhxPsSvr.exe | Related to PSA_Service from Phoenix Technologies Ltd. Note: Located in \%WINDIR%\System32\ |
| Phoenix Vault Service (PhnxVaultService) | L | PhxVtSvr.exe | Related to Vault_Service from Phoenix Technologies Ltd. Note: Located in \%WINDIR%\System32\ |
| Phoenix VCD Service (PhnxVCDService) | L | PhnxCDSvr.exe | Related to Phoenix_Technologies |
Photoshop Elements Device Connect
(PhotoshopElementsDeviceConnect) | L | PhotoshopElementsDeviceConnect.exe |
Related to Adobe photoshop. |
| PI Message Subsystem (pimsgss) | L | pimsgss.exe | Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\ |
| PI Network Manager (pinetmgr) | L | pinetmgr.exe | Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\ |
| PI-Buffer Server (bufserv) | L | bufserv.exe | Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\ |
| PictureTaker | L | PCTKRNT.SYS | LANovation's PictureTaker Enterprise Edition 3.1 lets administrators create software update packages and deploy them to network PCs through a third-party network management suite |
| Pigeon (PigeonServer) | X | GServer2.exe | Added by the Troj/GrayBrd-AK
TROJAN!
Note: This worm\trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
|
| Pigeon_Server (PigeonServer) | X | Server.exe | Added by the Backdoor.Graybird.R
TROJAN!
Note: This trojan file is found in the Windows or Winnt folder.
|
| pinger | O | pinger.exe | Related to Toshiba Service that regularly checks for software updates. Note: Located in \%ROOT%\TOSHIBA\IVP\ISM\ |
Pinnacle Systems Media Service
(PinnacleSys.MediaServer) | L | pmshost.exe | Related to Pinnacle_Systems Inc. |
| Pinnacle Systems tvtv Spooler (EpgSpooler) | L | epgspo~2.exe | Related to Pinnacle Studio Plus. |
| PinnacleUpdate Service (PinnacleUpdateSvc) | L | pinnacle_updater.exe | Related to Pinnacle_Game_Profiler ADD GAME PAD AND JOYSTICK SUPPORT TO ANY GAME INSTANTLY! Note: Located in \%Program Files%\KALiNKOsoft\Pinnacle Game Profiler\ |
| PIPC Log Server (pilogsrv) | L | pilogsrv.exe | Related to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\ |
| Pixar Alfred Server 11.5.3 | L | alfserver.exe | Related to Pixar_Alfred_Server Server includes all the tools required for rendering images for film and video productions. Note: Located in C:\Program Files\Pixar\RenderManProServer-11.5.3\bin\ |
| PixelModule (pxlmdl) | X | nvidcgui.exe | Added by the W32/Tilebot-GS
WORM!
Read the link, rootkit type stealth involved.
|
| PIXMA Extended Survey Program (IJPLMSVC) | L | IJPLMSVC.EXE | Related to Canon Extended Maintenance Service. Note: Located in \%Program Files%\Canon\IJPLM\ |
| Planificateur LiveUpdate automatique | L | ALUSchedulerSvc.exe | Related to to the Symantec LiveUpdate service which updates your Symantec products periodically. |
| Planner voor Automatische LiveUpdate | L | ALUSchedulerSvc.exe | Related to to the Symantec LiveUpdate service which updates your Symantec products periodically. |
| PLFlash DeviceIoControl Service | L | IoctlSvc.exe | Related to PLFlash_DeviceIoControl Service from Prolific Technology Inc. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| PLSRemote Service (PLSRemoteSvc) | O | PLSRemote.exe | RISKWARE! or potentially unwanted application. This application may have been installed by your system administrator for providing support for your machine. However this application has been used by several trojan authors and included in other trojans for malicious purposes. For more information CLICK_HERE |
| Plug and Play (PlugPlay) | L | services.exe | Spanish Windows 2000 Plug and Play |
| Plug and Play (RPC) (PlugPlayRPC) | X | portsv.exe | Added by the Trojan.Dropper/Gen-PortSv.Process Note: located in \%WINDIR%\ Note: Use sUBs Combofix tool under supervision. |
| Plug and Play Device Host (Universal Plug and Play) | X | WeRecl.exe | Added by Worm_Ircbot_Gen WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| Plug and Play Device Manager ($sys$DRMServer) | X | $sys$DRMServer.exe | This is the Sony-BMG ROOTKIT! Do not try to manually remove this! For more information check Mark Russinovich's Blog_Here
or Google Sony Rootkit. |
| plugin | X | PLUGIN.EXE | Added by the SDBOT.BUH
WORM!
Read the link, rootkit type stealth involved.
|
| PMJ151 AutoLaunch Service (PMJ151LA) | L | PMJ151LA.BIN | Related to Panasonic_DVC_Web_Camera Note: Located in C:\%WINDIR%\ |
| pml | L | | |
| pml | L | | |
| Pml Driver | L | HPHipm09.exe | Related to HP printers |
| Pml Driver HPH11 | L | HPHipm11.exe | HP PML Driver for HP.s Photosmart printers. |
| Pml Driver HPZ12 | L | HPZipm12.exe | Related to HP printers. |
| pmldriver hpz12 | L | | |
| PMounter | L | PMounter.exe | Partition Mounter task installed with the Paragon Hard Disk Manager software.
(answers that work) |
| PMSveH | L | PMSveH.exe | Related to Lenovo part or IBM ThinkVantage, Note: Located in C:\WINDOWS\system32\ |
| PnkBstrA | L | PnkBstrA.exe | Related to PunkBuster from Even Balance, Inc. Service that look for cheats while users are playing on PunkBuster enabled servers. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| PnkBstrB | L | PnkBstrB.exe | Related to PunkBuster from Even Balance, Inc. Service that look for cheats while users are playing on PunkBuster enabled servers. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| pnpext | X | wmc.exe | Added by the Troj/LeechPie-D
TROJAN!
Note: The file wmc.exe is a legitimate remote administration tool, but in this case is being used by the trojan. |
| Policy Agent | X | svchost.exe -k Policy Agent | Added by the Fuwudoor TROJAN! |
| Pop-Up Stopper Anti-Spyware Service (PWISVC) | L | PWISVC.EXE | Related to Pop-Up_Stopper_Anti-Spyware from Panicware. Note: Located in C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\ |
| Portrait Displays Display Tune Service (DTSRVC) | L | dtsrvc.exe | Related to MagicTune by SAMSUNG. |
| Posadis 0.60.6 | L | posadissrv.exe | Related to Posadis A DNS server for Unix and Windows platforms, supporting authoritative service (master/slave) as well as caching. Note: Located in \%Program Files%\Posadis 0.60.6\ |
| PostgreSQL Database Server 8.0 (pgsql-8.0) | L | pg_ctl.exe | Related to PostgreSQL open source database. |
| PostgreSQL Database Server 8.2 (pgsql-8.2) | L | pg_ctl.exe | Related to PostgreSQL open source database. |
| Power Adapter (ADIDown) | X | svchost.exe | Troj/Maran-AB Read the link, steals information |
| Power Adapter (ADIDown) | X | svchost.exe | Troj/Maran-AW
Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) |
| Power Manager (PowerManager) | X | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| PowerAlert UPS Engine | L | paserver.exe | Related to IBM Power Management utililty. |
| PowerPanel Personal Edition Service (ppped) | L | ppped.exe | Related to CyberPower dependable line of uninterruptible power supplies. Note: Located in C:\Program Files\CyberPower PowerPanel Personal Edition\ |
| PowerUtility Remote Power Management Service (putlrsrv) | L | PUTLRSRV.exe | Related to Power_Utility Remote Power Management Service. From FUJITSU LIMITED. Note: Located in \%Program Files%\Fujitsu\PowerUtility\remote\ |
| PowerUtility Schedule (PUSCSRVC) | L | PUSCSRVC.exe | Related to Power_Utility service. Schedule from FUJITSU LIMITED. Note: Located in \%Program Files%\Fujitsu\PowerUtility\schedule\ |
| PowerUtility TV Recording Reservation (PUSCSRVC) | L | PUSCSRVCBas.exe | Related to FUJITSU LIMITED |
| PPCtlPriv | L | PPCtlPriv.exe | Related to CA_Anti-Spyware Note: Located in \%Program Files%\CA\CA Internet Security Suite\CA Anti-Spyware\ |
| PPPoE Service | L | pppoeservice.exe | Related to the Internet Provider High Speed Services (ISP) |
| prairieFyre Application Updater Service | L | UpdaterService.exe | Related to Application_ Updater Service from prairieFyre Software Inc, Note: Located in C:\Program Files\prairieFyre Software Inc\6100CCS\6110\Application Updater Service\ |
| PreEmpt (qfcoresvc) | L | loadsvc.exe | Related to preEmpt
Active System Hardening. Made by PivX Solutions, Inc. This file should be found in the Program Files\PivX\PreEmpt folder. |
| Prevx Agent (PREVXAgent) | L | PXAgent.exe | Related to Prevx Ltd. Antivirus and software protection. |
| Prime95 Service | L | PRIME95.EXE | Help Universities to find Prime_Numbers The user should decide it's participation. |
| Print Client Share (PrntCSh) | X | psmcsh.exe | Listed as w32 IRC-Bot gen by PrevX here |
| Print Job Accounting (OkiJaSvc) | L | oklogsvc.exe | Related to Print_Job_Accounting software from Oki Data Americas, Inc. Printer service. Note: Located in \%Program Files%\Okidata\Print Job Accounting\ |
| Print Job Accounting Watch Service (OkiWchSvc) | L | okwchsvc.exe | Related to Print_Job_Accounting software from Oki Data Americas, Inc. Printer Watch service. Note: Located in \%Program Files%\Okidata\Print Job Accounting\ |
| Print Scheduler (prtsch) | X | usnsvc.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This rojan is located in \%WINDIR%\System\ |
| Print Spool Handler (Print Spooler) | X | spooler.exe | Added by the W32/Codbot-X
WORM!
Note: This worm file is found in the System32 folder.
|
| Print Spooler (Spooler) | L | spoolsv.exe | Used for Fax and Printing.
Unknown owner :Location: C:\WINDOWS\system32\spoolsv.exe |
| Print Spooler Manager (prntspman) | X | spoolsvr.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Print Spooler Service | X | (random file).exe | Troj/Agent-FXX
Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
Allows others to access the computer. Steals information |
| Print Spooler Service (SpoolSvc201) | X | sklrr7yvxzac.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (SpoolSvc203) | X | cjnr4r4ngyrk.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (SpoolSvc204) | X | nlkfev7exne.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (SpoolSvc205) | X | mlsdf8h8183934.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (SpoolSvc206) | X | mlsdf8hiloswaejo.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (SpoolSvc207) | X | sklrr7y7497903.exe | Added by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx |
| Print Spooler Service (uuiy84eiye0iuo) | X | rsbmsc.exe | Listed as Win32.Malware.gen by Prevx here |
| Print2Email | X | pdf.exe | Added by a variant of the Backdoor.Sdbot
Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. |
| Printer Spooler (printspool) | X | spooler32.exe | Added by the W32/Sharp-L
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| Printer Spooler Service (Random Name) | X | random filename | Troj/Ccdip-B |
| PRISMSVC | L | PRISMSVC.EXE | Related to PRISM_Wireless_LAN Service from Conexant Systems, Inc. Note: Located in \%WINDIR%\System32\ |
| PrismXL | L | PRISMXL.SYS | The PrismXL service lets the Client deploy Tasks on a target computer regardless of the current user.s permissions. |
| PrivacyView Service (PVService) | L | PVService.exe | Related to Privacy_View
software, encrypts files, folders and Internet files.
File is normally located in the Program Files\File System Information\SystemFolder folder. |
| Private Folder Service (prfldsvc) | L | PrfldSvc.exe | Private Folder 1.0 was released by Microsoft on the 6th July but Microsoft officially withdrew its support of Private Folder and removed it from their website 10 days later due to negative feedback. More The program can still be downloade from third party sites. Note: Located in C:\Program Files\Microsoft Private Folder 1.0\ |
| Privilege Win32 Server | L | PLServ.exe | Related to Aladdin Knowledge Systems. Located in the Windows or Winnt\System32 folder. |
| Procedure Distribution Service | X | prsvr.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Process Activity Monitor (paamsrv) | L | paamsrv.exe | Activity Monitor belonging to the Privacy Expert Suite Software from Acronis. |
| Process Manager | L | process_manager_nt.exe | Software application for mining and related extractive industries and produces two ranges of products under the Datamine and Earthworks labels.
Note: Located in C:\Program Files\Common Files\Earthworks
|
| Process Monitor (LVPrcSrv) | L | LVPrcSrv.exe | Related to Logitech QuickCam Provides additional configuration options for these devices. Note: Located in \%Program Files%\common files\logishrd\lvmvfm\LVPrcSrv.exe |
| Process Task Manager | X | svhost.exe | Added by a variant of the W32/SDBOT WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\ (XP/WinNT/2K) |
| ProcessEnumerator32 (pe32) | X | fi49.exe | Added by the W32/Sdbot-ACN
WORM!
Read the link, rootkit type stealth involved.
|
| ProductivIT Service (ProductivITService) | L | TEKS_Service.exe | Related to DynTeck Inc. |
| Proficy HMI/SCADA iFIX server (FIX) | L | fixsrv.exe | Related to Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy iFIX\ |
| Proficy Licensing (CCFLIC0) | L | CCFLIC0.exe | Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy Common\Proficy Common Licensing\ |
| Program Learning Management System (PLMS) | X | plms.exe | Added by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| Programador de LiveUpdate automático | L | ALUSchedulerSvc.exe | Related to to the Symantec LiveUpdate service which updates your Symantec products periodically. |
| Programador de tareas | L | MSTask.exe | Spanish Windows 2000 task scheduler |
| ProgramCheckerPro (sassvc) | L | sassvc.exe | Related to ProgramChecker Tool to analyze, validate, authenticate and research the programs that run on their PCs. |
| Prolific HotFix Q0306270 | L | HotFixQ0306270.exe | HotFix Q0306270 Prolific Technology Inc. USB Flash Disk |
| Promise Array Message Agent (RAIDmAgt) | L | MsgAgt.exe | Promise RAID Message Agent for Promise RAID Disk Controllers |
| Promise Array Message Server (RAIDmSvr) | L | MsgSvr.exe | Related Promise Technology, Inc. RAID Message Server |
| Promise FastTrak Log Service (FastTrakSvc) | L | FtrakSvc.exe | Reported as a RAID driver program by Promise_Technology_Inc
|
| Promise RAID message agent (RAIDmAgt) | L | MsgAgt.exe | Promise RAID Message Agent for Promise RAID Disk Controllers |
| Protected Exchange (MainService) | X | loadsvc.exe | Added by the Troj/Urbin-C
TROJAN!
|
| Protected Storage (ProtectedStorage) | L | lsass.exe | Related to Protected_Storage for Servers Note: Located in \%WINDIR%\system32\ |
| ProtectedStorage | X | svchost.exe -k ProtectedStorage | Added by the Fuwudoor TROJAN! |
| ProtectionService | L | ProtectionService.exe | Related to EarthLink's protection centre |
| Protector Plus Anti-virus Monitor Service | L | PPAVMon.exe | Related to Proland Software. - http://www.pspl.com/ |
| Protector Plus Service | L | PPServ.exe | Related to Proland Software. - http://www.pspl.com/ |
| Protector Suite Virtual Token (vtserver) | L | vtserver.exe | Related to UPEK biometric protector suite |
| Protexis Licensing V2 (PSI_SVC_2) | L | PsiService_2.exe | Related to Protexis_Licensing from Protexis Inc. Note: Located in \%Program Files%\Common Files\Protexis\License Service\ |
| ProtexisLicensing | L | PSIService.exe | Added by the Protexis Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Protocol_Catalog9 | X | rsvp32_2.dll | Win32/Zhelatin.worm.96845 |
| Proveedor de asistencia de seguridad LM de Windows NT | L | lsass.exe | Spanish Windows 2000 NT LM security support provider |
| Provides three management service (FreeBSD) | L | dev32.exe | FreeBSD is an advanced operating system for x86 compatible. It is derived from BSD, the version of UNIX® developed at the University of California, Berkeley. - http://www.freebsd.org/ |
| ProxyServer Service (ProxyServerService) | L | rtpxsr.exe | Related to IBM Rational Software Development Platform |
PRTG 4 Service - Paessler Router Traffic Grapher
(PRTG4Service) | L | prtg4.exe | Related to Paessler Router Traffic Grapher - http://www.paessler.com/ |
| PsY | X | service.exe | Identified as the Backdoor.Win32.Iroffer malware. Note: Located in \%WINDIR%\System32\PsY\ |
| PTBSync | L | PTBSync.exe | Program features a atom time adjusted clock, shows day and date in the taskbar and has a calendar function
Note: Located in C:\Program Files\PTBSync |
| ptlg | X | ptlg.exe | Added by SpywareRemover a ROGUE program. Note: Located in \%WINDIR%\System32\ |
| ptssvc - KODAK | L | ptssvc.exe | installed alongside the drivers for Kodak's range of digital
cameras |
| Pull Service (PullService) | L | PullService.exe | WebEOC_Professional_Version_7 |
| Pure Networks Net2Go Service (nmraapache) | L | nmraapache.exe | Related to Pure_Networks_Net2Go Service from Pure Networks, Inc. Note: Located in C:\Program Files\Pure Networks\Network Magic\WebServer\bin\ |
| Pure Networks Network Magic Service (nmservice) | L | nmsrvc.exe | Related to Network_Magic
home network managing program. Made by Pure Networks, Inc.
|
| Pure Networks Router Manager (pnrouter) | L | pnroutsv.exe | Related to Network_Magic
home network managing program. Made by Pure Networks, Inc.
|
| PurgeIE XP Service (PurgeIEservice) | L | PurgeIE_Service.exe | Related to Assistance_&_Resources for Computing, Inc. PurgeFox is a utility program specifically designed for users of the popular FireFox browser for removing the surfing tracks retained by FireFox. |
| PurgPro XP Service | L | PurgPro_Service.exe | PurgeIE service |
| Pxeibcw Service (ProxyService) | L | pxeibcw.exe | Related to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\ |
