| Name | Status | Filename | Description |
|---|
| OEMRUNONCE | U | oemrun.exe | Windows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished. |
| OSSProxy | X | OSSPROXY.EXE | NetSetter/MarketScore foistware |
| Office Mail | U | off_mail.exe | Related to Office_Mail Client E-mail service from Burrotech Ltd. |
| OPQFile | X | regedit.exe /s,...rad03FA6.tmp | Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit |
| order_Shell | X | order_****.exe | Added by the Troj/BankSnif-J TROJAN! Note: located in C:\Documents and Settings\{username}\order_****.exe where **** is a sequence of randomly chosen four letters.
Note: Steals information trojan. |
| Orb | U | OrbTray.exe | Related to Orb_Tray from InstallShield Software Corporation now owned by Macrovision. Note: Located in C:\Documents and Settings\Owner\My Documents\Orb\bin\ |
| Office Monitor | X | adv32.exe | Added by the W32/Sdbot-CWO WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| OneMoreKey | X | xpa.exe | Added by XP_Antivirus ROGUE PROGRAM a misleading application that reports false errors on the computer. Note: Located in \%Program Files%\XP Antivirus\ |
| OSS | X | rk.exe | RelevantKnowledge, NetSetter/Marketscore foistware variant |
| Opware12 | N | Opware12.exe | OmniPage from Nuance (was Scansoft). Version 12 of the software
|
| OutpostFeedBack | Y | feedback.exe | Part of Outpost firewall by Agnitum |
| OS Boot Configuration | X | nspsvc.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| OfficeWord Monitor | X | msn32.exe | Added by the W32/Rbot-GUE WORM! Read the link, allows remote access Note: Located in \%WINDIR%\System32\ |
| Osus | X | rrup.exe | PurityScan/Clickspring Adware - The executable is located in the user's "Application Data" folder or the Program Files\htwu folder. |
| Outerinfo | X | Outerinfo.exe | Added by the Adware.ClickSpring/Outer_Info Network Process. ADWARE! Note: Located in C:\Program Files\Outerinfo\ |
| oz2 | X | oz2.exe | Added by the W32.Mydoom.W WORM! |
| OpenMstart | X | Snt.exe | "Switch" adult content dialer |
| Online Service | X | svchost.exe | Added by the HOSTIDEL.C VIRUS!. This is not the valid svchost.exe as described here |
| Optimum Online | X | Netsurf.exe | OptimumOnline ISP software related spyware - displays advertising popups and collects information about user activity.
|
| Outlook Express Config | X | *****.exe,(where * =,random char) | Added by a variant of the WIN32.RBOT WORM!
|
| OrbitView | X | view.exe | Xupiter OrbitExplorer toolbar related. Drive-by Foistware |
| ovyriwi | X | telace.exe | Added by the SDBOT.BVS WORM! |
| opr | X | opr.exe | MediaMotor/Popuppers adware component |
| Offica Monitor Secura Systeme | X | winxp_sp3.exe | Added by a variant of the BACKDOOR.IRC.BOT TROJAN! Note: This trojan is located in \%WINDIR%\System32\ |
| Olehelp | X | Olehelp.exe | CoolWebSearch parasite related. |
| Osa32 | X | NTOSA32.exe | Added by the ANIG VIRUS! |
| OmniHTTPd | U | ohttpd.exe | OmniHTTPd web server from Omnicron |
| OfficeAgent | X | outIook.exe | Added by the WIN32.TACTSLAY.A TROJAN! |
| Office | X | Office.exe | Added by the Win32.Kraimer.12 TROJAN! |
| olpr | X | olpr.exe | Added by the Troj/DwnLdr-GWQ Trojan |
| OmgStartup | N | omgstartup.exe | Sony program called OpenMG Jukebox - player and music organizer |
| OStivityInvAgt | U | ostivity.exe | OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system" |
| Offer Companion or Offers | X | offers.exe | Advertising spyware |
| OrigRage128Tweaker | U | RAGE128TWEAK.EXE | Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com |
| OpenApizs | X | zrscbm.exe | Added by the TROJ_AGENT.RLH TROJAN! |
| OESET | X | setup60.exe | Win-Trojan/Warezdl.28672 |
| OmniPage | N | Opware32.exe | Part of OmniPage from Nuance (was Scansoft) - "the fastest, easiest way to turn paper documents into digital files you can edit". Links Word, via OLE, with OmniPage. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page". Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is Available via Start -> Programs
|
| Onluna Sarvice | X | sachost.exe | Added by the TROJ/TOFGER-AA TROJAN! |
| OpenMstart | X | mmgr32.exe | "Switch" adult content dialer |
| od-stndxx | X | od-stndxx.exe | Adult dialler - xx can be any number |
| OS Boot Configuration! | X | bootconf.exe | Added by the Adware.CoolWebSearch_BootConf adware. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| Offices Monitorse | X | (random name) | W32/Gosbot-Fam Read the link, allows remote access |
| ocx32 | X | ocx32.exe | Added by the ASTEF or RESPAN VIRUSES! |
| OEXCheck | N | EA2Check.exe | Express Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others |
| OEM Tools 32 | X | tres32.exe | Added by a RBOT.QB worm infection |
| OPSE reminder | N | Ereg.exe | Registration reminder for OmniPage from Nuance (was Scansoft). Version 12 of the software |
| OE_OEM | Y | TMAS_OEMon.exe | Related to Trend Micro PC-cillin - Internet Security 12. |
| Office Mail Alerter | U | om_Alerter.exe | Related to Mail_Alerter for Office Mail. Alert of new mail with an icon on the system tray |
| OKMaster | X | OKMaster.exe | OKToolbar adware component |
| otcx | X | otcxxh.exe | Added by the CAROOL VIRUS! |
| OxigenClientAdmin | U | Oxigen.exe | Open University Oxigen screensaver admin client. Downloads the latest information from the net to display in the screen saver. |
| Oeloader | X | Oeloader.exe | Xupiter OrbitExplorer toolbar related. Drive-by Foistware |
| OSS | X | ossproxy.exe | NetSetter/Marketscore foistware |
| OnScreenDisplay | U | HPKBDAPP.exe | Related to HP_QuickTouch This software provides on-screen visuals and associated sounds that are displayed and heard when adjusting the notebook volume. Note: Located in \%Program Files%\Hewlett-Packard\HP QuickTouch\ |
| OEM02Mon.exe | U | OEM02Mon.exe | Creative Live! Cam Console_Auto_Launcher |
