| Name | Status | Filename | Description |
|---|
| USBPhoneforSkype | U | USBPhoneforSkype.exe | Related to USB_Phone_for_Skype Note: Located in C:\Program Files\USBPhoneforSkype\General\ More here |
| UpToDate | X | uptodate.exe | BrowserAid/BrowserPal Foistware |
| USB Driverz2 | X | msnplus1.exe | Added by the W32/SDBOT-XQ WORM! |
| UPDATEMSN | X | svhost.exe | Added by an unidentified WORM or TROJAN! |
| User Logger | U | UsrLog.exe | UserLogger is a commercial spyware program. It logs keystrokes, programs used and computer ID information. It also captures screenshots, can hide its presence on the computer and can be disguised in the Windows Task list.
|
| Userinit | X | lsass.exe | Added by a variant of the Troj/Viran-A TROJAN! - Note: This file is placed in the "Program Files\Common Files\System" folder. This file should NOT be confused with the legitimate Windows lsass.exe process located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! |
| Uate | X | oocs.exe | PurityScan/Clickspring Adware |
| user | X | user32.exe | Added by the Backdoor.Binghe TROJAN! |
| USB Device | X | win32usb.exe | Added by the W32/FORBOT-BQ WORM! |
| Unix File Support | X | init3.exe | Added by the W32/RBOT-ZN WORM! |
| Ulead AutoDetector | ? | Monitor.exe | Related to Ulead_AutoDetector programs. Note: Located in \%Program Files%\Ulead Systems\AutoDetector\ What does it do and is it required? |
| update service | X | svxhost.exe | Added by the RBOT-MG WORM! |
| UniPrint | U | SetDfltSettings.exe | Drivers for Uniprint, a printing help for Terminal Services and Citrix which recieves downloaded files from a Uniprint enabled server and prints them locally allowing for truly universal printing through Terminal Services or Citrix. |
| USB Drivers1 | X | msupdate.exe | Added by a variant of the WIN32.RBOT WORM!
|
| updatemgr.exe or UPDATE~1 | N | updatemgr.exe,UPDATE~1.EXE | Once a month, your EarthLink 5.0 Update Manager contacts EarthLink\'s servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Can go to and download the updates manually |
| Userinit | X | lsass.exe | Added by the Satiloler.D
TROJAN!
Read the link, rootkit type stealth involved.
|
| upxdn | X | upxdn.exe | Added by the Win32/PSW.Agent.NCC TROJAN! |
| userinit.exe | X | userinit.exe | Troj/Haxdoor-DP trojan - Note: this file is located in the Windows directory, and should NOT be confused with the legitimate file of the same name which is always located in the %SysDir% folder! |
| ugdccw | X | UGDCcw.exe | Detected as W32/WinFixer.ASK by Norman antivirus |
| Update | X | Sysupd.exe | Added by the SLACKBOT VIRUS! |
| uniucu | ? | uniucu.exe | ?? |
| Update | X | mshtm.exe | Browser hijacker, redirecting to buldog-search.com |
| UBSShell | U | UBSShell.exe | UBS (United Bank of Switzerland) banking software |
| USB 2.0 Driver | X | updateXPSPC.exe | Added by the W32/AGOBOT-RJ WORM! |
| UltraDVDMon | ? | DVDMon.exe | UltraDVD DVD player software - is it required? |
| UCmore XP - The Search Accelerator | U | rundll32.exe,UCMTSAIE.dll, DllShowTB | UCmore toolbar - search accelerator |
| Uniblue PowerSuite | U | PowerSuite.exe | Uniblue_PowerSuite - "PowerSuite combines Uniblue’s range of award winning and market leading utility products into a single package that provides advanced functionality without compromising simplicity or ease of use. By integrating RegistryBooster 2, SpeedUpMyPC 3 and SpyEraser 2, home and business users are offered a range of professional level tools that deliver the outstanding levels of performance, stability and security that the modern computer user requires and demands." |
| uoltray | N | exec.exe | Netzero free ISP software - not required |
| Update | X | csrss.exe | Added by the Meheerwar
TROJAN!
Note: This is not the legitimate Windows process csrss.exe. (Which is always found in the System32 folder.) This trojan file is found in the System\winupdate (95/98/ME) or System32\winupdate (NT/2000/XP) folder.
|
| UpdateWin | X | appmgmtp.exe.exe | Identified as a variant of the Trojan.Dropper.LDPinch.Q Trojan. Note: Located in \%WINDIR%\System32\ Note; The filename is random. |
| Updates from HP | N | backweb*****.exe | Automatically detects an internet connection and downloads any available updates - * is random digit |
| Usrr | X | rncr.exe | PurityScan/Clickspring Adware |
| UPS | X | UPS32.exe -v | Added by the W32.Femot.O
Worm!
|
| USBPNP | Y | USBPNP.exe | SiPix digital camera Twain USB driver |
| uninstal | X | regsvr32 /u /s,image.dll | CoolWebSearch parasite related. |
| Uninstall_WinTools | U | WTuninst.exe | WinTools adware uninstaller. Should only need to run once in order to complete uninstall; when done, disable. |
| useful-soft | X | svchst.exe | Browser hijacker, redirecting to elite-glsex.net |
| Usrr | X | rpen.exe | PurityScan/Clickspring Adware |
| UsbD | X | smss32.exe | Adware downloader - recognized by Kaspersky antivirus as Trojan-Proxy.Win32.Agent.cj
|
| updater | X | wisvc.exe | Added by the TROJ/ORSE-A TROJAN! |
| unldr16 | X | unldr16.exe | Added by a CRYPTER.C trojan variant infection |
| USAR | X | USAR.exe | UltimateSpyware - rogue "security software" using false positives as a goad to purchase. |
| urudjeffni | X | winlogon.exe | Added by the W32/Romario-A Worm |
| Update ver 1.0 | X | Swap.exe | Added by the W32/SWAP-C WORM! |
| UpTimes service
| X | WinUp.exe | Added by the W32/Rbot-AKB
WORM!
|
| USB Updates | X | msfirewalls.exe | Added by a variant of the WIN32.RBOT WORM!
|
| UStorag | U | ustorage.exe,sys_auto_run,C:\Program,Files\U-Storage,Tool2.91 | U-Storage is application software running under Microsoft Windows, it provides functions and utility to manage STF flash drive (USB drive) for security, partition, boot-ability and recovery. See Note |
| User32 | X | (random,filename) | Added by the NETTRASH VIRUS! |
| Upromise | U | Upromise.exe | Related to Upromise Save money for education by bying online at desinated locations. Note: Located in \%Program Files%\Upromise\ |
| Upme | X | DLLMAN.EXE | Added by the MUGLY.I WORM! |
| Utopia Angel | N | Angel.exe | Calculator for the online Utopia game |
| UnlockerAssistant | U | UnlockerAssistant.exe | Related to Unlocker utility to unlock files when the OS reports the file is being used by an other person or program. |
| updmgr | X | rvupdmgr.exe | eUniverse/KeenValue adware |
| upxdnd | X | upxdnd.exe | Troj/JD-A Read the link, steals information |
| UD Agent | U | UD.EXE | The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start -> Programs |
