Necessary At your option Useless Dangerous Application database
Startupapps.com recommends you:

Detect and remove hidden rootkits using UnHackMe UnHackMe - Rootkit Killer Free fully functional 30-days trial.


RegRun Security Suite = 24 system utilities for protecting your computer. Try now!

Buy Now!

I would like to say that RegRun has helped me on more than 1 occasion when it comes to spyware/adware by letting me know automatically that a piece of it got added to Windows startup. There is so much spyware/addware out there today it's hard to imagine being without RegRun. I like many other features too including the daily registry backups and file protection.

Chris Wagers

t_535475.exe
t2serv.exe
t4api.exe
t4skgmr.exe
tablog.dll
tagasaurus.exe
tagasuarus7.exe
tajcroc.exe
takeit.exe
takpare.exe
taliban.exe
tamagotxi.exe
tamas1.exe
tapi32.exe
tapi32init.exe
tapicfg.exe
tapiras.exe
task_bar.exe
task_bar[1.2].exe
task_bar[1.3].exe
taskbarmngr.exe
taskbars.exe
taskcntr.exe
taskend.exe
tasker.exe
taskgamr.exe
taskgmr.exe
taskgmr32.exe
taskgmrs.exe
tasklist.dll
taskmaneger.exe
taskmg.exe
taskmgru.exe
taskmgrxp.exe
taskmgrzx.exe
taskmgs.exe
taskmngr32.exe
taskms.exe
tasknet.exe
taskngr.exe
tasksbar.exe
taskshed.exe
taskwiz.exe
taso.exe
taso0.dll
tass .exe
tazth.dll
tbar.exe
tbksche.exe
tbon.exe
tbonlchr.dll
tbonwnd.exe
tbps.exe
tbssaver.scr
tbtssvc.exe
tclient.exe
tclock_install.exe
tconf.exe
tconfig.exe
tcp.exe
tcpg4t.dll
tcpipmon.exe
tcpklient568d1.dll
tcpload.exe
tcpproxy.exe
tcpservice2.exe
tcpxp.exe
tcv.exe
tdde.exe
tdiupdate.sys
tdpmx.exe
tduphook.exe
tecompntwx.exe
teekids.exe
teleclient.exe
teleserv.exe
tellcom.exe
telnet.bat
telnet23.exe
tem.exe
temp#01.exe
temp$01.exe
temp$1.exe
temp.dll
temp.exe
temp2.exe
tempinetboost.exe
tempmbroit.exe
tempsysalert.exe
tendre.dll
teqq32.exe
terabyte.exe
termcaps.exe
termcomp.exe
tesakrmger.exe
tesk.exe
testimonials.exe
testtestt.exe
tetriz3.exe
tform1.exe
tfthot.exe
tgshell.exe
th3tr41t0r.exe
the ringer.exe
the_weather_channel_application.exe
theobbq.exe
thespy.exe
thing.exe
thiselt.exe
thnall.exe
thnall1.exe
thnall1ac.exe
thnall1b.exe
thnall1p.exe
thnall1s.exe
thnall1z.exe
thnall2r.exe
thorxdriver
tigen001.exe
tiinject.exe
tiles.exe
timed.exe
timesrv.exe
timessquare.exe
timhost.exe
tinject.exe
tinurak.exe
tisa.dll
tisky009.exe
titanshield.exe
tiwi.exe
tkfhbsfa.exe
tksvr99.exe
tlctw32.dll
tlhelper.dll
tlii.exe
tloader1.exe
tloader2.exe
tloader3.exe
tmntsrv32.exe
tmp.ini
tmp11.tmp.exe
tmp12.exe
tmp1a.tmp.exe
tmp2.tmp.dll
tmp204.tmp.dll
tmp3.tmp.dll
tmpnt.exe
tmxxxh.dll
tnsrv.exe
tntrbpdc.dll
tolhack.exe
tomrad.ps5.dll
tool1.exe
tool10.exe
tool11.exe
tool12.exe
tool3.exe
tool4.exe
tool5.exe
tool6.exe
tool7.exe
tool8.exe
tool9.exe
toolbar.exe
toolbar_nieuw14.dll
toolbar888.dll
top10.exe
topsearch.exe
topsys.exe
torontomail.exe
torrie & stacy nude screensaver.exe
torrie&stacy.exe
torwin32.exe
tossmbnt.sys
tour98.exe
tovbs.exe
toy.exe
tp7543.exe
tpcb_winexe.exe
tpchrsrv.exe
tpedvf.dll
tpifle.exe
tracert.dll
trafnet.exe
trance.exe
transscout.exe
trass.exe
traysys.exe
trayz.exe
trelew.exe
trjp.exe
trkwks.exe
trmgfyg.exe
trnalo.exe
trocert.exe
trojan.exe
trojanhrs.exe
trojspirit2001.exe
trpt.exe
truecodec[1].exe
trueweather.exe
trustincontext.dll
trxwin.dll
trycrt.exe
tryit.exe
ts2.exe
ts5602.exe
tsad.exe
tsd32.exe
tskdbg.exe
tskman.exe
tskmngr.exe
tsl.exe
tsl2.exe
tsm2.exe
tsmsetup.exe
tsnpstd3.exe
tsp2.exe
tsrv.exe
tsserv.exe
ttc-4444.exe
ttps.exe
ttuh.exe
ttupt.exe
tube_backend.exe
tukernel.exe
tupss.dll
tutcdchk.exe
tutcdchk2.exe
tutgvcn.exe
tuvvstu.dll
tuvvusp.dll
tvchost32.exe
twink64.exe
twinkpeb.exe
twinkpeg.exe
twinmmdt.exe
twinmoea.exe
twinmrag.exe
twintpex.exe
twpkbd.sys
twpr32.dll
twstkdrv.dll
twunk32.exe
typeconf.exe
typeteller.exe
tzfst.exe

Dangerous  DANGEROUS - T
Updated weekly. Last update: April 9 2018

Improve boot up time Run a free scan to diagnose your PC and identify the system boottle necks slowing you down. Start Test

Fix Windows PC's Fast! Automated Software Repairs damaged & slow windows systems in 1 click.


t_535475.exe
T_535475.exe is Trojan/Backdoor.
Kill the process t_535475.exe and remove t_535475.exe from Windows startup.

t2serv.exe
T2serv.exe is Win32/Stration.
Related files:
%System%\acac.dll
%System%\apphavif.dll
%System%\crswrich.dll
%System%\msobxpob.dll
%System%\mswemste.exe
Read more:
http://www3.ca.com/securityadvisor/virus...
Kill the process t2serv.exe and remove t2serv.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

t4api.exe
T4API.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq05ba...
Kill the process T4API.EXE and remove T4API.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

t4skgmr.exe
t4skgmr.exe is a mass-mailing worm W32.Mytob.CM@mm.
t4skgmr.exe tries to terminate antiviral programs installed on a user computer.
t4skgmr.exe opens a back door on TCP port 10082.
t4skgmr.exe spreads by exploiting the Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability (Microsoft Security Bulletin MS03-026) and the Microsoft Windows Local Security Authority Service Remote Buffer Overflow (Microsoft Security Bulletin MS04-011).
Related files:
%System%\t4skgmr.exe
C:\funny pic.scr
C:\see_this!!.scr
C:\my_photo2005.scr
C:\hellmsn.exe
2pac.txt
Adds the value:
"WINTASK" = "t4skgmr.exe"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill t4skgmr.exe process and remove t4skgmr.exe from Windows startup using RegRun Startup Optimizer.

tablog.dll
TABLOG.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq9941...
Kill the file TABLOG.DLL and remove TABLOG.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tagasaurus.exe
TagASaurus.exe is Trojan/Backdoor.
Kill the process TagASaurus.exe and remove TagASaurus.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tagasuarus7.exe
Tagasuarus7.exe is Trojan.TagASaurus.
Read more:
http://www.superadblocker.com/definition...
Kill the process tagasuarus7.exe and remove tagasuarus7.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tajcroc.exe
Tajcroc.exe is Trojan/Backdoor.
Kill the process tajcroc.exe and remove tajcroc.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

takeit.exe
TAKEIT.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq7216...
Kill the process TAKEIT.EXE and remove TAKEIT.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

takpare.exe
TAKPARE.EXE is Trojan.SysMon.
Read more:
http://fileinfo.prevx.com/spyware/qqf56d...
Kill the process TAKPARE.EXE and remove TAKPARE.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

taliban.exe
Taliban.exe is W32.Jhad.
Related files:
%ALLUSERSPROFILE%\Application Data\Administrator.exe
%ALLUSERSPROFILE%\Application Data\taliban.exe
[random]apLembutnya Hati Wanita.exe
[random]My Surat penolakan cinta.exe
[random]Perjanjian Setan.exe
[random]Perbedaan Wanita dan Pria.exe
[random]wiTak ada perjanjian dalam cinta.exe
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process taliban.exe and remove taliban.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tamagotxi.exe
Worm / File virus
Alters Win.ini. "Between midnight and 2.00am on Wednesdays the worm attempts to display an animated graphic of Adolf Hitler shooting himself in the head." (Sophos)

tamas1.exe
TAMAS1.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qqd5cd...
Kill the process TAMAS1.EXE and remove TAMAS1.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tapi32.exe
Name: Shorm
Worm / Steals passwords / Network trojan
Propagates to all shared discs. Autostarts using Windows Startup directory. Passwords and users names are mailed to two addresses in Russia. The .exe file is compressed using ASPack. It connects to a Web page in Russia, both to receive IP addresses to scan and to update itself.

tapi32init.exe
Trojan Delf-KA.
Steals passwords.
Read more:
http://www.sophos.com/virusinfo/analyses...

tapicfg.exe
Tapicfg.exe is Trojan program (TROJ_WINSHOW).
Tapicfg.exe adds the value "SVC Service" to registry startup keys.
Use RegRun Startup Optimizer for removing Trojan.
Read more details:
http://www.trendmicro.com/vinfo/virusenc...

tapiras.exe
Steals passwords

task_bar.exe
Remote Access / FTP Server

task_bar[1.2].exe
Remote Access / FTP Server

task_bar[1.3].exe
Remote Access / FTP Server

taskbarmngr.exe
Taskbarmngr.exe is Trojan/Backdoor Sdbot.
Kill the process taskbarmngr.exe and remove taskbarmngr.exe from Windows startup.

taskbars.exe
Taskbars.exe is Trojan/Backdoor.
Kill the process taskbars.exe and remove taskbars.exe from Windows startup.

taskcntr.exe
Taskcntr.exe is Trojan/Backdoor.
Kill the process taskcntr.exe and remove taskcntr.exe from Windows startup.

taskend.exe
Taskend.exe is Trojan/Backdoor.
Kill the process Taskend.exe and remove Taskend.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tasker.exe
W32.Mydoom.R@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses that it finds on an infected computer.
The email contains a spoofed From address. The subject and message body vary, and the attachment has a .bat, .cmd, .exe, .pif, .scr, or .zip extension.
May also attempt to open a back door on port 5422 and allow a remote attacker to have unauthorized access to the infected system.
This would allow a remote attacker to download and execute remote files.

Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and delete the value: "Task"="%System%\tasker.exe"
Then, navigate to the key: HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32
and delete the value: "(Default)"="%System%\Nemog.dll"
At last, navigate to and delete the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\Version
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\Version

taskgamr.exe
Taskgamr.exe is a mass-mailing worm W32.Mytob.AF@mm.
Taskgamr.exe tries to terminate antiviral programs installed on a user computer.
Taskgamr.exe opens a back door on TCP port 2817.
Related files:
%System%\taskgamr.exe
C:\see_this!!.scr
C:\my_photo2005.scr
C:\funny_pic.scr
Adds the value:
"WINTASK" = "taskgamr.exe"
to the Windows startup registry keys
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill taskgamr.exe process and remove taskgamr.exe from Windows startup using RegRun Startup Optimizer.

taskgmr.exe
Taskgmr.exe is Trojan/Backdoor W32.Mytob.R@mm.
Related files:
%System%\taskgmr.exe
%System%\nethell.exe
Adds the value:
"WINTASK" = "taskgmr.exe"
to the Windows startup registry keys.
Worm taskgmr.exe tries to terminate antiviral programs installed on a user computer.
Trojan taskgmr.exe spreads by e-mail and via IRC channel.
Taskgmr.exe spreads by exploiting the Microsoft Windows Local Security Authority Service Remote Buffer Overflow (Microsoft Security Bulletin MS04-011) and the Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability (Microsoft Security Bulletin MS03-026).
More info:
http://securityresponse.symantec.com/avc...
Remove:
Kill taskgmr.exe process and remove taskgmr.exe from Windows startup using RegRun Startup Optimizer.

taskgmr32.exe
Taskgmr32.exe is a mass-mailing worm W32.Mytob.AP@mm.
Taskgmr32.exe tries to terminate antiviral programs installed on a user computer.
Taskgmr32.exe opens a back door on TCP Port 10087.
Taskgmr32.exe spreads by exploiting the Microsoft Windows Local Security Authority Service Remote Buffer Overflow (Microsoft Security Bulletin MS04-011).
Related files:
%System%\taskgmr32.exe
C:\see_this!!.scr
C:\my_photo2005.scr
C:\funny_pic.scr
Adds the value:
"WINRUN" = "taskgmr32.exe"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill taskgmr32.exe process and remove taskgmr32.exe from Windows startup using RegRun Startup Optimizer.

taskgmrs.exe
Taskgmrs.exe is Worm/Mytob.DJ.
Related files:
%SYSDIR%\taskgmrs.exe
C:\funny_pic.scr
C:\see_this!!.scr
C:\my_photo2005.scr
Read more:
http://www.avira.com/en/threats/section/...
Kill the process taskgmrs.exe and remove taskgmrs.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tasklist.dll
Tasklist.dll is TROJ_ADLOAD.IE.
Read more:
http://www.trendmicro.com/vinfo/virusenc...
Kill the file tasklist.dll and remove tasklist.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskmaneger.exe
Taskmaneger.exe is W32/Sdbot-DHQ.
Read more:
http://www.sophos.com/security/analyses/...
Kill the process taskmaneger.exe and remove taskmaneger.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskmg.exe
Taskmg.exe is Trojan/Backdoor.
Kill the process taskmg.exe and remove taskmg.exe from Windows startup.

taskmgru.exe
TASKMGRU.EXE is Trojan/Backdoor.
Kill the process TASKMGRU.EXE and remove TASKMGRU.EXE from Windows startup.

taskmgrxp.exe
Taskmgrxp.exe is Trojan Bancos FGE.
Related files:
cartao23604.exe
%system%\hosting.exe
%system%\not32.exe
%system%\taskmgrxp.exe
%system%\winini.exe
Read more:
http://www3.ca.com/securityadvisor/pest/...
Kill the process taskmgrxp.exe and remove taskmgrxp.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskmgrzx.exe
TASKMGRZX.EXE is Worm.Ircbot.Gen.
Read more:
http://fileinfo.prevx.com/spyware/qq1278...
Kill the process TASKMGRZX.EXE and remove TASKMGRZX.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskmgs.exe
Taskmgs.exe is Trojan/Backdoor Rbot.
Kill the process taskmgs.exe and remove taskmgs.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskmngr32.exe
Taskmngr32.exe is Malware Trojan Backdoor Gen.
Read more:
http://fileinfo.prevx.com/spyware/qq8757...
Kill the process taskmngr32.exe and remove taskmngr32.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskms.exe
Taskms.exe is Worm/Aimbot.ER.
Read more:
http://www.avira.com/en/threats/section/...
Kill the process taskms.exe and remove taskms.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tasknet.exe
Remote Access / Exe-infector
The whole package comes with a server, an exe infector, a remover and two jokes. The first joke program, Californ.exe makes all the windows on the screen shake and move around. The second program, gravedad.exe displays a picture of the screen flipped.

taskngr.exe
Taskngr.exe is Trojan/Backdoor.
Kill the process taskngr.exe and remove taskngr.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tasksbar.exe
Tasksbar.exe is Trojan/Backdoor.
Kill the process tasksbar.exe and remove tasksbar.exe from Windows startup.

taskshed.exe
Taskshed.exe is W32/Tilebot-FN worm.
Related files:
\remon.sys
Read more:
http://www.sophos.com/security/analyses/...
Kill the process taskshed.exe and remove taskshed.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taskwiz.exe
Taskwiz.exe is Worm Ircbot Gen.
Directory: %WINDIR%\SYSTEM32\
Read more:
http://virusinfo.prevx.com/pxparall.asp?...
Kill the process taskwiz.exe and remove taskwiz.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

taso.exe
We suggest you to remove taso.exe from your computer as soon as possible.
Taso.exe is Troj/PSW-EI.
Related files:
%Temp%\taso0.dll
%Temp%\xgpdlzua.dll
%Temp%\%random name%.sys
Read more:
http://www.sophos.com/security/analyses/...
Kill the process taso.exe and remove taso.exe from Windows startup.

taso0.dll
We suggest you to remove taso0.dll from your computer as soon as possible.
Taso0.dll is Troj/PSW-EI.
Related files:
%Temp%\taso0.dll
%Temp%\xgpdlzua.dll
%Temp%\%random name%.sys
Read more:
http://www.sophos.com/security/analyses/...
Kill the file taso0.dll and remove taso0.dll from Windows startup.

tass .exe
Tass .exe is Trojan/Backdoor.
Kill the process tass .exe and remove tass .exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tazth.dll
TAZTH.DLL is Spyware VirusBurst.
Read more:
http://fileinfo.prevx.com/spyware/qq3c9c...
Kill the file TAZTH.DLL and remove TAZTH.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tbar.exe
Tbar.exe is a Spyware.Dogpile.
Tbar.exe monitors user Internet activity and private information.
It sends stolen data to a hacker site.
Related files:
tbar.exe
ultrabar.dll
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill tbar.exe process and remove tbar.exe from Windows startup using RegRun Startup Optimizer.

tbksche.exe
Tbksche.exe is Trojan/Backdoor.
Directory: %programfiles%\filestream turbobackup\
Read more:
http://fileinfo.prevx.com/QQa3b121288452...
Kill the process tbksche.exe and remove tbksche.exe from Windows startup using RegRun.
www.regrun.com

tbon.exe
Tbon.exe is Adware.Best Offers.
Read more:
http://www.superadblocker.com/definition...
Kill the process tbon.exe and remove tbon.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tbonlchr.dll
TBONlchr.dll is Adware ActivShop/e-zshopper.
Kill the file TBONlchr.dll and remove TBONlchr.dll from Windows startup.

tbonwnd.exe
TBONWnd.exe is Trojan/Backdoor.
Read more:
http://www.spywaredata.com/spyware/malwa...
Kill the process TBONWnd.exe and remove TBONWnd.exe from Windows startup using RegRun.
www.regrun.com

tbps.exe
TBPS.exe is an adware program Adware.Websearch.
TBPS.exe monitors user Internet activity and private information.
It sends stolen data to a hacker site.
Related files:
common.dll
IExploreSkins.exe
PIB.exe
QDow_AS2.dll
setupex.exe
TBPS.exe
toolbar.dll
WSG.exe
WSup.exe
WToolsA.exe
WToolsB.dll
WToolsS.exe
btiein.dll
websearch.exe
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill TBPS.exe process and remove TBPS.exe from Windows startup using RegRun Startup Optimizer.

tbssaver.scr
TBSSAVER.SCR is Spyware.
Kill the process TBSSAVER.SCR and remove TBSSAVER.SCR from Windows startup.

tbtssvc.exe
Tbtssvc.exe is Trojan/Backdoor.
Kill the process tbtssvc.exe and remove tbtssvc.exe from Windows startup.

tclient.exe
Remote Access

tclock_install.exe
TCLOCK_INSTALL.EXE is Malware.TClock.
Read more:
http://www.superadblocker.com/definition...
Kill the process TCLOCK_INSTALL.EXE and remove TCLOCK_INSTALL.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tconf.exe
Mail trojan / Autodialer / ICQ trojan / Steals passwords
It deletes the two system files Regedit.exe and Msconfig.exe.

tconfig.exe
Mail trojan / Autodialer / ICQ trojan / Steals passwords
It deletes the two system files Regedit.exe and Msconfig.exe.

tcp.exe
Remote Access
Disguised as a TCP/IP booster.

tcpg4t.dll
TcpG4T.dll is Trojan/Backdoor DLL.
TcpG4T.dll is installed to the Winlogon Notification registry key.
Kill the file tcpG4T.dll and remove tcpG4T.dll from Windows startup.
http://www.sophos.com/virusinfo/analyses...

tcpipmon.exe
Tcpipmon.exe is installed with rogue anti-spyware products which display fake security alerts in your Windows taskbar.
Kill the process tcpipmon.exe and remove tcpipmon.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tcpklient568d1.dll
TCPKLIENT568D1.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qqc60d...
Kill the file TCPKLIENT568D1.DLL and remove TCPKLIENT568D1.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tcpload.exe
Remote Access / Steals passwords
The client also drops a server! The hacker could choose to log passwords only or all text written. One of the functions is to kill antivirus software.

tcpproxy.exe
Remote Access / Steals passwords
The client also drops a server! The hacker could choose to log passwords only or all text written. One of the functions is to kill antivirus software.

tcpservice2.exe
Tcpservice2.exe is Adware.Admes.
Related files:
%System%\tcpservice2.exe
%System%\wstart.dll
Read more:
http://securityresponse.symantec.com/avc...
Kill the process tcpservice2.exe and remove tcpservice2.exe from Windows startup.

tcpxp.exe
Tcpxp.exe is Trojan/Backdoor.
Kill the process tcpxp.exe and remove tcpxp.exe from Windows startup.

tcv.exe
Remote Access / ICQ trojan
Sockets des Troie is French for Trojan Sockets and was one of the very first Remote Access trojans being published.

tdde.exe
Tdde.exe is Trojan/Backdoor.
Kill the process tdde.exe and remove tdde.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tdiupdate.sys
TdiUpdate.sys is W32/Tdibd-B.
Related files:
%System%\_tdiserv_\autorun.inf
%System%\_tdiserv_\Config.dat
%System%\_tdiserv_\Guid.txt
%System%\_tdiserv_\kill
%System%\_tdiserv_\tdi95dev.vxd
%System%\_tdiserv_\TdiUpdate.sys
%System%\_tdiserv_\_tdicli_.exe
Read more:
http://www.sophos.com/security/analyses/...
Kill the file TdiUpdate.sys and remove TdiUpdate.sys from Windows startup using RegRun Reanimator.
http://www.regrun.com

tdpmx.exe
Tdpmx.exe is Trojan/Backdoor.
Kill the process tdpmx.exe and remove tdpmx.exe from Windows startup.

tduphook.exe
TDuPHook.exe is Trojan/Backdoor.
Kill the process TDuPHook.exe and remove TDuPHook.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tecompntwx.exe
TECOMPNTWX.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq8bd5...
Kill the process TECOMPNTWX.EXE and remove TECOMPNTWX.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

teekids.exe
Lovesan worm.
This worm scans several IP networks (randomly choosen) to get access to port 135 (COM).
The worm sends a buffer-overrun request to vulnerable computers. The newly infected machine then initiates the command shell on TCP port 4444.
Lovesan runs the thread that opens the connection on port 4444 and waits for FTP 'get' request from the victim machine. The worm then forces the victim machine to sends the 'FTP get' request. Thus the victim machine downloads the worm from the infected machine and runs it. The victim machine is now also infected.
Removal:
remove it from startup by RegRun Startup Optimizer.

teleclient.exe
Remote Access

teleserv.exe
Remote Access

tellcom.exe
Tellcom.exe is Trojan/Backdoor.
Tellcom.exe is added to the Registry Run keys as "Microsoft Telecom Center".
Kill the process tellcom.exe and remove tellcom.exe from Windows startup.

telnet.bat
Backdoor.IRC.Aladinz.R is a backdoor server that allows a remote attacker to obtain access to your computer.
The backdoor server uses an mIRC client and client scripts to communicate with a remote attacker.
It also creates a FTP server.

Creates the following folder: %System%\CatRoot.
Creates some files in the CatRoot folder, such as: update.bat; ServUDaemon.exe; dcom.reg; patch.reg; tar.exe etc.
Connects to a remote IRC server and waits for commands.
Listens on TCP ports 3422 and 43958.

Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
and delete the value: "Microsoft Office"="%system%\telnet.bat"
Delete the following keys:
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Security
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\SystemManagementys2

telnet23.exe
Steals passwords
At first Ring0 came as an attached file to Winsock Version Checker. When itґs active and the computer is connected to the Internet, the trojan searches for proxyservers and tries to send the collected information to an FTP server in Russia.

tem.exe
We suggest you to remove tem.exe from your computer as soon as possible.
Tem.exe is W32.Yahack.A.
W32.Yahack.A is a worm that spreads through mapped drives. It logs keystrokes, gathers system information, and steals Yahoo! Messenger passwords.
Related files:
%CurrentFolder%\autorun.inf
%System%\UpDateWinc.exe
%System%\UpDateWind.exe
%Windir%\LogBoy.log
%SystemDrive%\a1.exe
%SystemDrive%\pass1.txt
%SystemDrive%\tem.exe
%SystemDrive%\temp1.bat
%DriveLetter%\NTDETECT.exe
Read more:
http://www.symantec.com/business/securit...
Kill the process tem.exe and remove tem.exe from Windows startup.

temp#01.exe
Steals passwords / Trojan dropper / ICQ trojan
Drops the trojan The Thing 1.6.

temp$01.exe
Steals passwords / Trojan dropper / ICQ trojan
Drops the trojan The Thing 1.6.

temp$1.exe
Steals passwords

temp.dll
Temp.dll is a Adware.BestSearch.
Temp.dll is a Browser Helper Object.
Temp.dll displays advertisement web pages.
Related files:
%UserProfile%\Local Settings\Temp\MegaHost.dll
%UserProfile%\Local Settings\Temp\MegaInstaller.exe
%UserProfile%\Local Settings\Temp\temp.dll
Adds the value:
"@" = "%UserProfile%\Local Settings\Temp\MegaHost.dll"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Remove temp.dll from Windows startup using RegRun Startup Optimizer.

temp.exe
Remote Access / Destructive trojan / Virus dropper
It copies itself to c:\recycled to avoid detection by some antivirus programs.

temp2.exe
TEMP2.EXE is Trojan/Backdoor.
Read more:
http://spywarefiles.prevx.com/RREJHA1880...
Kill the process TEMP2.EXE and remove TEMP2.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tempinetboost.exe
Remote Access / Downloading trojan

tempmbroit.exe
Tempmbroit.exe is Trojan/Backdoor.
Kill the process Tempmbroit.exe and remove Tempmbroit.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tempsysalert.exe
Tempsysalert.exe is Trojan/Backdoor.
Kill the process Tempsysalert.exe and remove Tempsysalert.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tendre.dll
TENDRE.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qqd9c8...
Kill the file TENDRE.DLL and remove TENDRE.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

teqq32.exe
Teqq32.exe is Trojan/Backdoor.
Kill the process teqq32.exe and remove teqq32.exe from Windows startup.

terabyte.exe
Terabyte.exe is Adware-IEDriver.
Read more:
http://vil.mcafeesecurity.com/vil/conten...
Kill the process Terabyte.exe and remove Terabyte.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

termcaps.exe
Termcaps.exe is Trojan/Backdoor.
Kill the process termcaps.exe and remove termcaps.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

termcomp.exe
Termcomp.exe is Trojan/Backdoor.
Read more:
http://www.incodesolutions.com/threats/S...
Kill the process termcomp.exe and remove termcomp.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tesakrmger.exe
tesakrmger.exe is a Backdoor W32.Rbot-AMY.
tesakrmger.exe opens a back door via IRC channels.
tesakrmger.exe monitors user Internet activity and private information.
It sends stolen data to a hacker site.
More info:
http://www.sophos.com/virusinfo/analyses...
Removal:
Kill tesakrmger.exe process and remove tesakrmger.exe from Windows startup using RegRun Startup Optimizer.

tesk.exe
Remote Access / Keylogger / IRC trojan
Doly is hidden in several different programs: in Memory Manager, in an Interactive Game, and in a Downloading program. The trojan also starts using Windows Startup Directory.

testimonials.exe
Testimonials.exe is Trojan/Backdoor.
Kill the process testimonials.exe and remove testimonials.exe from Windows startup.

testtestt.exe
TESTTESTT.EXE is Covert Sys Exec exploit.
Read more:
http://fileinfo.prevx.com/spyware/qq42cf...
Kill the process TESTTESTT.EXE and remove TESTTESTT.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tetriz3.exe
Tetriz3.exe is Trojan/Backdoor.
Kill the process tetriz3.exe and remove tetriz3.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com
Read more:
http://fileinfo.prevx.com/QQ566e15812098...

tform1.exe
TForm1.exe is Trojan/Backdoor.
Kill the process TForm1.exe and remove TForm1.exe from Windows startup.

tfthot.exe
Tfthot.exe is Trojan Forethought.
Related files:
b3f1c.tmp
cvn0.exe
ekuxpv3.exe
ftuninst.exe
ghynf.exe
%system%\mptft.exe
kiuj0v.exe
mptft.exe
tfthot.exe
Read more:
http://www3.ca.com/securityadvisor/pest/...
Kill the process tfthot.exe and remove tfthot.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tgshell.exe
Tgshell.exe is Spyware.
Kill the process tgshell.exe and remove tgshell.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

th3tr41t0r.exe
Worm / IRC trojan

the ringer.exe
The Ringer.exe is Trojan/Backdoor.
Kill the process The Ringer.exe and remove The Ringer.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

the_weather_channel_application.exe
THE_WEATHER_CHANNEL_APPLICATION.exe is part of Desktop Weather potentially unwanted program.
Read more:
http://research.sunbelt-software.com/thr...
Kill the process THE_WEATHER_CHANNEL_APPLICATION.exe and remove THE_WEATHER_CHANNEL_APPLICATION.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

theobbq.exe
Worm / Mail trojan
Uses several different names to name the attachement, which can be mailed by either Netscape Mail, MS Outlook or MSOutlook Express.

thespy.exe
Keylogger
Logs all keys typed on the server computer

thing.exe
Remote Access / ICQ trojan
Version 1.6 autoloads through changes in System.ini and Win.ini. 1.5 uses Registry and System.ini to autoload.

thiselt.exe
Thiselt.exe is MediaMotor adware.
Read more:
http://www.spywareguide.com/product_show...
Kill the process thiselt.exe and remove thiselt.exe from Windows startup using RegRun.
www.regrun.com

thnall.exe
Thnall.exe is Adware Aurora.
Kill the process thnall.exe and remove thnall.exe from Windows startup.

thnall1.exe
Thnall1.exe is Trojan/Backdoor.
Kill the process thnall1.exe and remove thnall1.exe from Windows startup.

thnall1ac.exe
Thnall1ac.exe is Adware Aurora.
Kill the process thnall1ac.exe and remove thnall1ac.exe from Windows startup.

thnall1b.exe
Thnall1b.exe is an adware program Adware.BetterInternet.
Thnall1b.exe is a Browser Helper Object.
Thnall1b.exe downloads and displays advertisements.
Related files:
%Windir%\Bi.dll
%Windir%\speeryox.dll
%Windir%\Mxtarget.dll
%Windir%\BTGrab.dll
%Windir%\farmmext.exe
%Windir%\dlmax.dll
%Windir%\speer2.dll
%Windir%\VoiceIP.dll
%Windir%\morphacl.dll
%Windir%\Pynix.dll
%Windir%\Biprep.exe
%Windir%\banner.dll
%System%\laziqn.exe
%System%\xxvyaj.exe
%System%\wbtvsffd.exe
%System%\nnmzoq.exe
%Temp%\DrTemp\thnall1b.exe
%Temp%\DrTemp\thnall1p.exe
%Temp%\DrTemp\thnall2r.exe
%Temp%\DrTemp\polall1b.exe
%Temp%\thnall1s.exe
%Temp%\morphrec.exe
Adds the value:
"[File name of adware]" = "[File path to adware]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill thnall1b.exe process and remove thnall1b.exe from Windows startup using RegRun Startup Optimizer.

thnall1p.exe
Thnall1p.exe is an adware program Adware.BetterInternet.
Thnall1p.exe is a Browser Helper Object.
Thnall1p.exe downloads and displays advertisements.
Related files:
%Windir%\Bi.dll
%Windir%\speeryox.dll
%Windir%\Mxtarget.dll
%Windir%\BTGrab.dll
%Windir%\farmmext.exe
%Windir%\dlmax.dll
%Windir%\speer2.dll
%Windir%\VoiceIP.dll
%Windir%\morphacl.dll
%Windir%\Pynix.dll
%Windir%\Biprep.exe
%Windir%\banner.dll
%System%\laziqn.exe
%System%\xxvyaj.exe
%System%\wbtvsffd.exe
%System%\nnmzoq.exe
%Temp%\DrTemp\thnall1b.exe
%Temp%\DrTemp\thnall1p.exe
%Temp%\DrTemp\thnall2r.exe
%Temp%\DrTemp\polall1b.exe
%Temp%\thnall1s.exe
%Temp%\morphrec.exe
Adds the value:
"[File name of adware]" = "[File path to adware]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill thnall1p.exe process and remove thnall1p.exe from Windows startup using RegRun Startup Optimizer.

thnall1s.exe
Thnall1s.exe is an adware program Adware.BetterInternet.
Thnall1s.exe is a Browser Helper Object.
Thnall1s.exe downloads and displays advertisements.
Related files:
%Windir%\Bi.dll
%Windir%\speeryox.dll
%Windir%\Mxtarget.dll
%Windir%\BTGrab.dll
%Windir%\farmmext.exe
%Windir%\dlmax.dll
%Windir%\speer2.dll
%Windir%\VoiceIP.dll
%Windir%\morphacl.dll
%Windir%\Pynix.dll
%Windir%\Biprep.exe
%Windir%\banner.dll
%System%\laziqn.exe
%System%\xxvyaj.exe
%System%\wbtvsffd.exe
%System%\nnmzoq.exe
%Temp%\DrTemp\thnall1b.exe
%Temp%\DrTemp\thnall1p.exe
%Temp%\DrTemp\thnall2r.exe
%Temp%\DrTemp\polall1b.exe
%Temp%\thnall1s.exe
%Temp%\morphrec.exe
Adds the value:
"[File name of adware]" = "[File path to adware]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill thnall1s.exe process and remove thnall1s.exe from Windows startup using RegRun Startup Optimizer.

thnall1z.exe
Thnall1z.exe is Malware.
Kill the process thnall1z.exe and remove thnall1z.exe from Windows startup.
http://shield.prevx.com/pxparall.asp?PXC...

thnall2r.exe
Thnall2r.exe is an adware program Adware.BetterInternet.
Thnall2r.exe is a Browser Helper Object.
Thnall2r.exe downloads and displays advertisements.
Related files:
%Windir%\Bi.dll
%Windir%\speeryox.dll
%Windir%\Mxtarget.dll
%Windir%\BTGrab.dll
%Windir%\farmmext.exe
%Windir%\dlmax.dll
%Windir%\speer2.dll
%Windir%\VoiceIP.dll
%Windir%\morphacl.dll
%Windir%\Pynix.dll
%Windir%\Biprep.exe
%Windir%\banner.dll
%System%\laziqn.exe
%System%\xxvyaj.exe
%System%\wbtvsffd.exe
%System%\nnmzoq.exe
%Temp%\DrTemp\thnall1b.exe
%Temp%\DrTemp\thnall1p.exe
%Temp%\DrTemp\thnall2r.exe
%Temp%\DrTemp\polall1b.exe
%Temp%\thnall1s.exe
%Temp%\morphrec.exe
Adds the value:
"[File name of adware]" = "[File path to adware]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill thnall2r.exe process and remove thnall2r.exe from Windows startup using RegRun Startup Optimizer.

thorxdriver
"ThOrxDriver" is rootkit Trojan.HacDef-BR.
"ThOrxDriver"is used to hide files, processes and registry.
"ThOrxDriver"is a kernel mode rootkit.
Rootkit created new system drivers:
service name: "ThOrxDriver"
Added to registry:
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\
HKLM\SYSTEM\CurrentControlSet\Services\
More info:
http://www.sophos.com/virusinfo/analyses...

tigen001.exe
Tigen001.exe is Spyware SpyFalcon.
Related files:
1 :%CACHE%\CONTENT.IE5\????????\TIGEN001[1].EXE
2 :%localsettings%\temporary...s\content.ie5\809fcrv5\TIGEN001[1].EXE
3 :%localsettings%\temporary...s\content.ie5\gjkngrip\TIGEN001[1].EXE
4 :%localsettings%\temporary...s\content.ie5\gvejklmn\TIGEN001[1].EXE
5 :%localsettings%\temporary...s\content.ie5\oouax1b1\TIGEN001[1].EXE
6 :%profiles%\canary&heathka...s\content.ie5\sb87yz0n\TIGEN001[1].EXE
7 :%profiles%\greg&jamie\loc...s\content.ie5\47pvm2r1\TIGEN001[1].EXE
8 :%profiles%\jeff & karen\l...s\content.ie5\ktejq34d\TIGEN001[1].EXE
9 :%profiles%\lisa nkonoki- ...s\content.ie5\2lurohe3\TIGEN001[1].EXE
10:%profiles%\v?ctor\local s...s\content.ie5\7h04nipn\TIGEN001[1].EXE
Read more:
http://fileinfo.prevx.com/spyware/qqa44b...
Kill the process tigen001.exe and remove tigen001.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tiinject.exe
Tiinject.exe is Rootki&Virus, clone of HackerDefender.
Kill the process tiinject.exe and remove tiinject.exe from Windows startup.
Use UnHackMe to fully remove hidden services and drivers.
www.unhackme.com
Related files:
- mssave.exe
- msinit.exe
- msmail.exe
- mstsk.exe
- lsnr32w.exe
- lsnr32w.dll
- memdrv.sys
- msclean.exe
- msinit.exe
- mslsnre.exe
- pack.exe
- shide32w.exe
- shide32w.ini
- smss.all
- tiinject.exe
- tinject.dll
- tinject.exe
http://webserver1.furman.edu/computing/c...

tiles.exe
Remote Access / Trojan dropper
Alters Win.ini and System.ini. A game hiding and dropping the SubSeven 2.0 server.

timed.exe
Timed.exe is Trojan/Backdoor.
Kill the process timed.exe and remove timed.exe from Windows startup.
http://www3.ca.com/securityadvisor/pest/...

timesrv.exe
TimeSRV.exe is Trojan/Backdoor.
TimeSRV.exe registers itself in Windows startup registry.
It connects to hacker IRC channel to get instructions.
TimeSRV.exe spreads using open shared resources.
TimeSRV.exe steals private information.
Kill the process TimeSRV.exe and remove TimeSRV.exe from Windows startup.
Update your WIndows to fix security holes.

timessquare.exe
Timessquare.exe is Trojan/Backdoor Trojan.Win32.StartPage.aw.
Kill the process timessquare.exe and remove timessquare.exe from Windows startup.

timhost.exe
TIMHOST.EXE is Trojan ModalDigits.
Related files:
1 :%CACHE%\CONTENT.IE5\????????\9[1].EXE
2 :%CACHE%\CONTENT.IE5\????????\MY0616[1].EXE
3 :%CACHE%\CONTENT.IE5\????????\MY0616[2].EXE
4 :%TEMP%\1639.EXE
5 :%WINDIR%\SYSTEM32\9.EXE
6 :%WINDIR%\SYSTEM32\K11188392959.EXE
7 :%WINDIR%\SYSTEM32\K11188404949.EXE
Read more:
http://fileinfo.prevx.com/spyware/qq11fe...
Kill the process TIMHOST.EXE and remove TIMHOST.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tinject.exe
Tinject.exe is Rootki&Virus, clone of HackerDefender.
Kill the process tinject.exe and remove tinject.exe from Windows startup.
Use UnHackMe to fully remove hidden services and drivers.
www.unhackme.com
Related files:
- mssave.exe
- msinit.exe
- msmail.exe
- mstsk.exe
- lsnr32w.exe
- lsnr32w.dll
- memdrv.sys
- msclean.exe
- msinit.exe
- mslsnre.exe
- pack.exe
- shide32w.exe
- shide32w.ini
- smss.all
- tiinject.exe
- tinject.dll
- tinject.exe
http://webserver1.furman.edu/computing/c...

tinurak.exe
Remote Access

tisa.dll
TISA.DLL is TrustIn Bar adware.
Read more:
http://www3.ca.com/securityadvisor/pest/...
Kill the file TISA.DLL and remove TISA.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tisky009.exe
Tisky009.exe is Trojan/Backdoor.
Kill the process tisky009.exe and remove tisky009.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

titanshield.exe
Titanshield.exe is a part of TitanShield software.
Related files:
titanshield.exe;
titanshield_setup.exe
Read more:
http://www.symantec.com/avcenter/venc/da...
Kill the process titanshield.exe and remove titanshield.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tiwi.exe
Tiwi.exe is W32.Rahiwi.A.
W32.Rahiwi.A is a worm that spreads by copying itself to the root of all drives, including removable and shared drives.
Related files:
[DRIVE LETTER]:\Data_Rahasia Administrator.exe
[DRIVE LETTER]:\Tiwi_Cute.exe
[DRIVE LETTER]:\autorun.inf
[DRIVE LETTER]:\present.txt
C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\cute.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\imoet.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\smss.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\winlogon.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\smss.exe
C:\Documents and Settings\Administrator\Local Settings\Application Data\winlogon.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Empty.pif
C:\WINDOWS\system32\IExplorer.exe
C:\WINDOWS\system32\rpcss.dll
C:\WINDOWS\system32\shell.exe
C:\WINDOWS\system32\tiwi.scr
C:\WINDOWS\tiwi.exe
C:\tiwi.exe
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process tiwi.exe and remove tiwi.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tkfhbsfa.exe
TKFHBSFA.EXE is Trojan.SysMon.
Read more:
http://fileinfo.prevx.com/spyware/qq45f3...
Kill the process TKFHBSFA.EXE and remove TKFHBSFA.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tksvr99.exe
Tksvr99.exe is Trojan/Backdoor.
Kill the process tksvr99.exe and remove tksvr99.exe from Windows startup.

tlctw32.dll
Tlctw32.dll is Trojan-Spy.Win32.Agent.ir.
Read more:
http://research.sunbelt-software.com/thr...
Kill the file tlctw32.dll and remove tlctw32.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tlhelper.dll
Tlhelper.dll is Trojan/Backdoor.
Kill the file tlhelper.dll and remove tlhelper.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tlii.exe
Tlii.exe is Trojan/Backdoor.
Kill the process tlii.exe and remove tlii.exe from Windows startup.

tloader1.exe
Steals passwords

tloader2.exe
Steals passwords

tloader3.exe
Steals passwords

tmntsrv32.exe
Tmntsrv32.EXE is a Trojan Trojan.StartPage.O.
Tmntsrv32.EXE modifies settings in Internet Explorer
Related files:
%Windir%\explorer32dbg.exe
%Windir%\iexplore_dbg.exe
%System%\SMSSU.EXE
%System%\Tmntsrv32.EXE
%Windir%\xmlib.dll
Adds the value:
"SMSSU" = "%System%\SMSSU.EXE"
"Tmntsrv32" = "%System%\Tmntsrv32.EXE"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill Tmntsrv32.EXE process and remove Tmntsrv32.EXE from Windows startup using RegRun Startup Optimizer.

tmp.ini
Opaserv dangerous trojan. Alters registry Run and win.ini under Windows 9X.
Kill it!

tmp11.tmp.exe
TMP11.TMP.EXE is Trojan/Backdoor.
Kill the process TMP11.TMP.EXE and remove TMP11.TMP.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmp12.exe
Tmp12.exe is Trojan.Adclicker.
Read more:
http://www.symantec.com/security_respons...
Kill the process tmp12.exe and remove tmp12.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmp1a.tmp.exe
TMP1A.TMP.EXE is Trojan/Backdoor.
Kill the process TMP1A.TMP.EXE and remove TMP1A.TMP.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmp2.tmp.dll
Tmp2.tmp.dll is Trojan/Backdoor.
Kill the file tmp2.tmp.dll and remove tmp2.tmp.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmp204.tmp.dll
TMP204.TMP.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/fileinfo.asp?P...
Kill the file TMP204.TMP.DLL and remove TMP204.TMP.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmp3.tmp.dll
Tmp3.tmp.dll is Trojan/Backdoor.
Kill the file tmp3.tmp.dll and remove tmp3.tmp.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmpnt.exe
Tmpnt.exe is Trojan/Backdoor.
Read more:
http://spywarefiles.prevx.com/RREHAI0367...
Kill the process tmpnt.exe and remove tmpnt.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tmxxxh.dll
TMXXXH.DLL is Trojan/Backdoor.
Kill the file TMXXXH.DLL and remove TMXXXH.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tnsrv.exe
Steals passwords / Remote Access
Steals all cached passwords.

tntrbpdc.dll
TNTRBPDC.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq64d8...
Kill the file TNTRBPDC.DLL and remove TNTRBPDC.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tolhack.exe
Tolhack.exe is Phreaking Tool (Any executable that assists in hacking the phone system, such as by using a sound card to imitate various audible tones.)
Read more:
http://www.pestpatrol.com/spywarecenter/...
Kill the process tolhack.exe and remove tolhack.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tomrad.ps5.dll
TOMRAD.PS5.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/fileinfo.asp?P...
Kill the file TOMRAD.PS5.DLL and remove TOMRAD.PS5.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

tool1.exe
Tool1.exe is Trojan/Backdoor.
Kill the process tool1.exe and remove tool1.exe from Windows startup.

tool10.exe
Tool10.exe is Trojan/Backdoor.
Kill the process tool10.exe and remove tool10.exe from Windows startup.

tool11.exe
Tool11.exe is Trojan/Backdoor.
Kill the process tool11.exe and remove tool11.exe from Windows startup.

tool12.exe
Tool12.exe is Trojan/Backdoor.
Kill the process tool12.exe and remove tool12.exe from Windows startup.

tool3.exe
Tool3.exe is Trojan/Backdoor Spy Sheriff Malware.
Kill the process tool3.exe and remove tool3.exe from Windows startup.

tool4.exe
Tool4.exe is Trojan/Backdoor Trojan-Downloader.Win32.Small.brk .
Kill the process tool4.exe and remove tool4.exe from Windows startup.
http://www.avira.com/en/threats/TR_Dldr_...

tool5.exe
Tool5.exe is Trojan/Backdoor TR/Dldr.Small.brk.
Kill the process tool5.exe and remove tool5.exe from Windows startup.
http://www.avira.com/en/threats/TR_Dldr_...

tool6.exe
Tool6.exe is Trojan/Backdoor.
Kill the process tool6.exe and remove tool6.exe from Windows startup.

tool7.exe
Tool7.exe is Trojan/Backdoor.
Kill the process tool7.exe and remove tool7.exe from Windows startup.

tool8.exe
Tool8.exe is Trojan/Backdoor.
Kill the process tool8.exe and remove tool8.exe from Windows startup.

tool9.exe
Tool9.exe is Trojan/Backdoor.
Kill the process tool9.exe and remove tool9.exe from Windows startup.

toolbar.exe
Toolbar.exe is a virus W32.Bleshare!dr.
Toolbar.exe spreads via open network shares.
Related files:
bleh.exe
slinstaller.exe
emote.exe
loudnew.exe
mmxharr0.exe
toolbar.exe
%Program Files%\windows adstatus\WinStat.exe
%Program Files%\windows adstatus\WinStatComm.dll
%Program Files%\windows adstatus\WinStatKeep.exe
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill toolbar.exe process and remove toolbar.exe from Windows startup using RegRun Startup Optimizer.

toolbar_nieuw14.dll
Toolbar_nieuw14.dll is a Spyware.Dotcomtoolbar.
Toolbar_nieuw14.dll monitors user Internet activity and private information.
It sends stolen data to a hacker site.
Related files:
Redirect2.exe
Redirect7.exe
Redirect9a.exe
toolbar_nieuw14.dll
Adds the value:
"redirect" = "[path to adware file]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Remove toolbar_nieuw14.dll from Windows startup using RegRun Startup Optimizer.

toolbar888.dll
ToolBar888.dll is Spyware/Adware Toolbar888.
Kill the file ToolBar888.dll and remove ToolBar888.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

top10.exe
Top10.exe is Trojan.Mdropper.Y.
Related files:
%Temp%\top10.exe
%System%\wuanserv.dll
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process top10.exe and remove top10.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

topsearch.exe
Topsearch.exe is Spyware Topsearch.
Related files:
topsearch.exe
points manager.exe
cf34003116.exe
%program_files%\altnet\download manager\adm4005.exe
%windows%\temp\altnet\setup.exe
%program_files%\kazaa\topsearch.dll
%program_files%\kazaa lite\topsearch.dll
%program_files%\grokster\topsearch.dll
asmps.dll
amotrpol.dll
altinst2.dll
altinst1.dll
%program_files%\altnet\points manager\sysdetect.dll
Read more:
http://www3.cai.com/securityadvisor/pest...
Kill the process Topsearch.exe and remove Topsearch.exe from Windows startup using RegRun.
www.regrun.com

topsys.exe
Topsys.exe is Trojan/Backdoor.
Kill the process topsys.exe and remove topsys.exe from Windows startup.

torontomail.exe
Torontomail.exe is Wareout.
Read more:
http://research.sunbelt-software.com/thr...
Kill the process torontomail.exe and remove torontomail.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

torrie & stacy nude screensaver.exe
Torrie & Stacy Nude ScreenSaver.exe is a worm W32.Elitper.F@mm.
Torrie & Stacy Nude ScreenSaver.exe spreads using MS Outlook and via open network shares.
Torrie & Stacy Nude ScreenSaver.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%ProgramFiles%\Windows Media Player\svchost.exe
%Userprofile%\Start Menu\Programs\Startup\XPStartup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\XPStartUp.exe
C:\Torrie&Stacy.exe
C:\ProgramFiles\Torrie&Stacy.exe
%ProgramFiles%\SP2 UPDATE.exe
%Windir%\TASKMGR .exe
%ProgramFiles%\Internet Explorer\Iexplore .exe
%ProgramFiles%\Internet Explorer\Norton Internet Security.exe
C:\Virus Detected.txt
C:\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
C:\My Downloads\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Edonkey2000\Incoming\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\BearShare\Shared\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Grokster\My Grokster\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Morpheus\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KaZaA Lite\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Kazaa\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KMD\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\My Documents\Downloads\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\Local Settings\Application Data\Shareaza\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
Adds the value:
"Firewall" = "%Program Files%\SP2 UPDATE.exe"
"Protection" = "%Program Files%\Internet Explorer\Norton Internet Security.exe"
"SysRes" = "%Program Files%\Internet Explorer\IExpIore .exe"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill Torrie & Stacy Nude ScreenSaver.exe process and remove Torrie & Stacy Nude ScreenSaver.exe from Windows startup using RegRun Startup Optimizer.

torrie&stacy.exe
Torrie&Stacy.exe is a worm W32.Elitper.F@mm.
Torrie&Stacy.exe spreads using MS Outlook and via open network shares.
Torrie&Stacy.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%ProgramFiles%\Windows Media Player\svchost.exe
%Userprofile%\Start Menu\Programs\Startup\XPStartup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\XPStartUp.exe
C:\Torrie&Stacy.exe
C:\ProgramFiles\Torrie&Stacy.exe
%ProgramFiles%\SP2 UPDATE.exe
%Windir%\TASKMGR .exe
%ProgramFiles%\Internet Explorer\Iexplore .exe
%ProgramFiles%\Internet Explorer\Norton Internet Security.exe
C:\Virus Detected.txt
C:\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
C:\My Downloads\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Edonkey2000\Incoming\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\BearShare\Shared\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Grokster\My Grokster\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Morpheus\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KaZaA Lite\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Kazaa\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KMD\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\My Documents\Downloads\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\Local Settings\Application Data\Shareaza\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
Adds the value:
"Firewall" = "%Program Files%\SP2 UPDATE.exe"
"Protection" = "%Program Files%\Internet Explorer\Norton Internet Security.exe"
"SysRes" = "%Program Files%\Internet Explorer\IExpIore .exe"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill Torrie&Stacy.exe process and remove Torrie&Stacy.exe from Windows startup using RegRun Startup Optimizer.

torwin32.exe
Torwin32.exe is Trojan/Backdoor.
Kill the process torwin32.exe and remove torwin32.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tossmbnt.sys
TOSSMBNT.SYS is Trojan/Backdoor.
Kill the file TOSSMBNT.SYS and remove TOSSMBNT.SYS from Windows startup using RegRun Reanimator.
http://www.regrun.com

tour98.exe
Remote Access
Modified Acid Shiver Server.

tovbs.exe
Tovbs.exe is Worm.VBS.Netlog.k.
Related files:
c:\windows\startm~1\programs\startup\tovbs.vbs
c:\windows\startm~1\programs\startup\tovbs.exe
Read more:
http://www.viruslist.com/en/viruses/ency...
Kill the process tovbs.exe and remove tovbs.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

toy.exe
Toy.exe is W32/USBToy-A.
Related files:
%Startup%\systemnt.exe
%Startup%\mslogon.exe
Read more:
http://www.sophos.com/security/analyses/...
Kill the process Toy.exe and remove Toy.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tp7543.exe
Tp7543.exe is Trojan/Backdoor.
Kill the process tp7543.exe and remove tp7543.exe from Windows startup.

tpcb_winexe.exe
TPCB_WINEXE.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/fileinfo.asp?P...
Kill the process TPCB_WINEXE.EXE and remove TPCB_WINEXE.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tpchrsrv.exe
TPCHRSRV.exe is W32.CTX and W32.Cholera worm.
Read more:
http://securityresponse.symantec.com/avc...
Kill the process TPCHRSRV.exe and remove TPCHRSRV.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tpedvf.dll
Tpedvf.dll is Hoax.Win32.Renos.gen.i.
Kill the file tpedvf.dll and remove tpedvf.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tpifle.exe
TPIFLE.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq3e5f...
Kill the process TPIFLE.EXE and remove TPIFLE.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tracert.dll
Tracert.dll is Trojan.VMMSWM.
Related files:
%WINDIR%\SYSTEM32\ALG.DLL
%WINDIR%\SYSTEM32\CHKNTFS.DLL
%WINDIR%\SYSTEM32\CMD.DLL
%WINDIR%\SYSTEM32\CSRSS.DLL
%WINDIR%\SYSTEM32\DVDPLAY.DLL
%WINDIR%\SYSTEM32\JAVAW.DLL
%WINDIR%\SYSTEM32\LOGONUI.DLL
%WINDIR%\SYSTEM32\MMC.DLL
%WINDIR%\SYSTEM32\MSHTA.DLL
%WINDIR%\SYSTEM32\MSIEXEC.DLL
Read more:
http://virusinfo.prevx.com/pxparall.asp?...
Kill the file tracert.dll and remove tracert.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

trafnet.exe
TRAFNET.EXE is Trojan/Backdoor.
Kill the process TRAFNET.EXE and remove TRAFNET.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

trance.exe
Shadow Phyre
Remote Access / IRC trojan

transscout.exe
Remote Access / Steals passwords / Keylogger

trass.exe
Trass.exe is Trojan/Backdoor W32/Rbot-AIX.
Kill the process trass.exe and remove trass.exe from Windows startup.
www.sophos.com/virusinfo/analyses/w32rbotaix.html

traysys.exe
Traysys.exe is Trojan/Backdoor.
Kill the process traysys.exe and remove traysys.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trayz.exe
Trayz.exe is Trojan/Backdoor.
Kill the process trayz.exe and remove trayz.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trelew.exe
Trelew.exe is Downloader Drev A.
Read more:
http://virusinfo.prevx.com/pxparall.asp?...
Kill the process trelew.exe and remove trelew.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trjp.exe
Remote Access

trkwks.exe
Trkwks.exe is Trojan/Backdoor.
Kill the process Trkwks.exe and remove Trkwks.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trmgfyg.exe
We suggest you to remove trmgfyg.exe from your computer as soon as possible.
Trmgfyg.exe is Trojan/Backdoor.
Kill the process trmgfyg.exe and remove trmgfyg.exe from Windows startup.

trnalo.exe
TRNALO.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq3aaa...
Kill the process TRNALO.EXE and remove TRNALO.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

trocert.exe
Trocert.exe is Trojan/Backdoor.
Kill the process trocert.exe and remove trocert.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trojan.exe
Senna Spy Trojan Generator
Trojan constructor / Remote Access
Has the ability to kill Firewall and Antivirus software from Memory.

trojanhrs.exe
Remote Access

trojspirit2001.exe
Remote Access / Steals passwords
Also has a function called ""Burn Monitor"". This option constantly resets the Screenresolution.

trpt.exe
TRPT.exe is Wareout.
Kill the process TRPT.exe and remove TRPT.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

truecodec[1].exe
TRUECODEC[1].EXE is Trojan TrueCodec.
Read more:
http://fileinfo.prevx.com/fileinfo.asp?P...
Kill the process TRUECODEC[1].EXE and remove TRUECODEC[1].EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

trueweather.exe
TrueWeather.exe is TrueWeather Download Manager.
Read more:
http://www3.ca.com/securityadvisor/pest/...
Kill the process TrueWeather.exe and remove TrueWeather.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

trustincontext.dll
TRUSTINCONTEXT.DLL is Adware.TrustInBar.
Read more:
http://www.symantec.com/avcenter/venc/da...
Kill the file TRUSTINCONTEXT.DLL and remove TRUSTINCONTEXT.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

trxwin.dll
Trxwin.dll is Downloader.INK.
Related files:
DOTDR.EXE
WW32.EXE
trxwin.dll
Read more:
http://www.precisesecurity.com/computer-...
Kill the file trxwin.dll and remove trxwin.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

trycrt.exe
Trycrt.exe is Trojan/Backdoor.
Kill the process trycrt.exe and remove trycrt.exe from Windows startup.

tryit.exe
Worm / Mail trojan
Alters Win.ini. The worm is encrypted. It propagates to users who earlier has mailed the user of the infected computer.

ts2.exe
ts2.exe is an adware program Adware.TargetSaver.
ts2.exe displays advertisements.
ts2.exe monitors user Internet.
Related files:
ts2.exe
tsl2.exe
tsm2.exe
tsp2.exe
%System%\tsuninst.exe
Adds the value:
"Tsa2" = "[path to the adware program]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill ts2.exe process and remove ts2.exe from Windows startup using RegRun Startup Optimizer.

ts5602.exe
Keylogger / Remote Access

tsad.exe
Tsad.exe is Trojan/Backdoor.
Kill the process tsad.exe and remove tsad.exe from Windows startup using RegRun.
www.regrun.com

tsd32.exe
Tsd32.exe is Trojan/Backdoor.
Kill the process tsd32.exe and remove tsd32.exe from Windows startup.

tskdbg.exe
Tskdbg.exe is Troj/MDrop-BPQ.
Related files:
%Windows%\ichan.txt
%Windows%\inv.txt
%Windows%\libparse.exe
%Windows%\login.txt
%Windows%\mcop.dll
%Windows%\os32.txt
%Windows%\ping.exe
%Windows%\pnp11.exe
%Windows%\psexec.exe
%Windows%\r.ini
%Windows%\reader.w
%Windows%\stde9.exe
%Windows%\tskdbg.exe
%Windows%\vlxd.bat
%Windows%\x89.reg
Read more:
http://www.sophos.com/security/analyses/...
Kill the process tskdbg.exe and remove tskdbg.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tskman.exe
tskman.exe is a Trojan.Bdoor-JO.
tskman.exe opens a back door.
Related files:
caclsENG.exe
carun.dll
carun.ocx
install.cmd
settimedate.exe
tskman.exe
More info:
http://www.sophos.com/virusinfo/analyses...
Removal:
Kill tskman.exe process and remove tskman.exe from Windows startup using RegRun Startup Optimizer.

tskmngr.exe
Remote Access

tsl.exe
Tsl.exe is Trojan/Backdoor Travelling Salesman Spyware.
Kill the process tsl.exe and remove tsl.exe from Windows startup.

tsl2.exe
tsl2.exe is an adware program Adware.TargetSaver.
tsl2.exe displays advertisements.
tsl2.exe monitors user Internet.
Related files:
ts2.exe
tsl2.exe
tsm2.exe
tsp2.exe
%System%\tsuninst.exe
Adds the value:
"Tsa2" = "[path to the adware program]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill tsl2.exe process and remove tsl2.exe from Windows startup using RegRun Startup Optimizer.

tsm2.exe
tsm2.exe is an adware program Adware.TargetSaver.
tsm2.exe displays advertisements.
tsm2.exe monitors user Internet.
Related files:
ts2.exe
tsl2.exe
tsm2.exe
tsp2.exe
%System%\tsuninst.exe
Adds the value:
"Tsa2" = "[path to the adware program]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill tsm2.exe process and remove tsm2.exe from Windows startup using RegRun Startup Optimizer.

tsmsetup.exe
Tsmsetup.exe is Trojan/Backdoor Adware MsnList.
Kill the process tsmsetup.exe and remove tsmsetup.exe from Windows startup.

tsnpstd3.exe
Tsnpstd3.exe is Trojan/Backdoor.
Read more:
http://www.superadblocker.com/E/EPSWAD3....
Kill the process tsnpstd3.exe and remove tsnpstd3.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tsp2.exe
tsp2.exe is an adware program Adware.TargetSaver.
tsp2.exe displays advertisements.
tsp2.exe monitors user Internet.
Related files:
ts2.exe
tsl2.exe
tsm2.exe
tsp2.exe
%System%\tsuninst.exe
Adds the value:
"Tsa2" = "[path to the adware program]"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill tsp2.exe process and remove tsp2.exe from Windows startup using RegRun Startup Optimizer.

tsrv.exe
Tsrv.exe is W32.Stration.AC@mm.
Related files:
%Windir%\tsrv.exe
%Windir%\tsrv.dll
%Windir%\tsrv.s
%Windir%\tsrv.wax
%System%\cmut449c14b7.dll
%System%\hpzl449c14b7.exe
%System%\msji449c14b7.dll
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process tsrv.exe and remove tsrv.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tsserv.exe
TSServ.exe is a part of TrojanSimulator software.
Trojan Simulator is a potentially unwanted application that tries to act as a Trojan Horse by creating a harmless process and by modifying the RUN key. The program notifies the user by displaying a dialog box stating that Trojan Simulator will be installed. Trojan Simulator may be used to verify whether a virus scanner can properly detect the file.
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process TSServ.exe and remove TSServ.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

ttc-4444.exe
We suggest you to remove TTC-4444.exe from your computer as soon as possible.
TTC-4444.exe is Trojan/Backdoor.
Kill the process TTC-4444.exe and remove TTC-4444.exe from Windows startup.

ttps.exe
Ttps.exe is a Trojan.Download.Chekin.
Ttps.exe monitors user Internet activity and private information.
It sends stolen data to a hacker site.
Related files:
Ttps.exe
Sifxinst.exe
Sbsrch_v22.dll
%System%\Sysreg.exe
%System%\OWMngr.exe
Adds the value:
"Sysreg"="%System%\Sysreg.exe"
"OWMngr"="%System%\OWMngr.exe"
to the Windows startup registry keys.
More info:
http://securityresponse.symantec.com/avc...
Removal:
Kill Ttps.exe process and remove Ttps.exe from Windows startup using RegRun Startup Optimizer.

ttuh.exe
Ttuh.exe is Trojan/Backdoor.
Kill the process ttuh.exe and remove ttuh.exe from Windows startup.
http://www.2-spyware.com/file-ttuh-exe.h...

ttupt.exe
Ttupt.exe is Trojan/Backdoor.
Kill the process ttupt.exe and remove ttupt.exe from Windows startup.

tube_backend.exe
TUBE_BACKEND.EXE is Trojan.ADIRSS.
Read more:
http://fileinfo.prevx.com/spyware/qq1111...
Kill the process TUBE_BACKEND.EXE and remove TUBE_BACKEND.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tukernel.exe
TUKERNEL.EXE is Trojan/Backdoor.
Kill the process TUKERNEL.EXE and remove TUKERNEL.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tupss.dll
tupss.dll is a Trojan.ServU-BQ.
tupss.dll opens a back door on IRC channels.
More info:
http://www.sophos.com/virusinfo/analyses...
Removal:
Remove tupss.dll from Windows startup using RegRun Startup Optimizer.

tutcdchk.exe
TUTCDCHK.EXE is a part of Malware group - Covert Sys Exec.
Related files:
%CACHE%\CONTENT.IE5\????????\TOHAKT[1].HTM
?:\KUNVXF.EXE
?:\YVQY.EXE
Read more:
http://fileinfo.prevx.com/spyware/qq1b91...
Kill the process TUTCDCHK.EXE and remove TUTCDCHK.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

tutcdchk2.exe
Tutcdchk2.exe is Trojan VXGAME.
Related files:
1 :%CACHE%\CONTENT.IE5\????????\TUTCD07[1].EXE
2 :%CACHE%\CONTENT.IE5\????????\TUTCD07[2].EXE
3 :%WINDIR%\SYSTEM32\DXVWAGLF.EXE
4 :%WINDIR%\SYSTEM32\DXVWBHOA.EXE
5 :%WINDIR%\SYSTEM32\DXVWDZAE.EXE
6 :%WINDIR%\SYSTEM32\DXVWDZKV.EXE
7 :%WINDIR%\SYSTEM32\DXVWJSQU.EXE
8 :%WINDIR%\SYSTEM32\DXVWLDFP.EXE
9 :%WINDIR%\SYSTEM32\DXVWNBPW.EXE
10:%WINDIR%\SYSTEM32\DXVWOITL.EXE
Read more:
http://fileinfo.prevx.com/spyware/qq975f...
Kill the process tutcdchk2.exe and remove tutcdchk2.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tutgvcn.exe
Remote Access
May alter System.ini and/or Win.ini. One can choose to let Mosucker randomly decide what autostart method to use. Produces an error message while installing ""Could not find setuplog.bat"" which apparently is used for autostarting. It copies itself to $temp first, as a file named pkg*.exe, ""pkg"" being a fix string. It also copied itself to $windows/unin0686.exe.

tuvvstu.dll
Tuvvstu.dll is Trojan/Backdoor.
Kill the file tuvvstu.dll and remove tuvvstu.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tuvvusp.dll
Tuvvusp.dll is Trojan/Backdoor.
Kill the file tuvvusp.dll and remove tuvvusp.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

tvchost32.exe
TVCHOST32.EXE is Trojan/Backdoor.
Kill the process TVCHOST32.EXE and remove TVCHOST32.EXE from Windows startup.
http://www.trendmicro.com/vinfo/virusenc...

twink64.exe
Troj/Dloader-BW.
Attempts to download and execute EXE files from remote websites to the Windows system folder as intron.exe, ir.exe, lpt.exe and usb.exe.
Copies itself to the Windows system folder as twink64.exe and creates the following registry entry to run itself on system logon:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ControlPanel = \twink64.exe internat.dll,LoadKeyboardProfile

Use RegRun Startup Optimizer to automatically remove it from startup.

twinkpeb.exe
TWINKPEB.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq1569...
Kill the process TWINKPEB.EXE and remove TWINKPEB.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

twinkpeg.exe
TWINKPEG.EXE is Malware.
Read more:
http://fileinfo.prevx.com/spyware/qq3fb2...
Kill the process TWINKPEG.EXE and remove TWINKPEG.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

twinmmdt.exe
Twinmmdt.exe is Trojan/Backdoor.
Kill the process twinmmdt.exe and remove twinmmdt.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

twinmoea.exe
TWINMOEA.EXE is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qqc1c2...
Kill the process TWINMOEA.EXE and remove TWINMOEA.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

twinmrag.exe
Twinmrag.exe is Trojan/Backdoor.
Kill the process twinmrag.exe and remove twinmrag.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

twintpex.exe
Twintpex.exe is Trojan/Backdoor.
Kill the process twintpex.exe and remove twintpex.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

twpkbd.sys
Twpkbd.sys is Goldun.Fam Malware.
Read more:
http://research.sunbelt-software.com/thr...
Kill the file twpkbd.sys and remove twpkbd.sys from Windows startup using RegRun Reanimator.
http://www.regrun.com

twpr32.dll
Twpr32.dll is Haxdoor variant.
Read more:
http://users.pandora.be/marcvn/spyware/1...
Kill the file twpr32.dll and remove twpr32.dll from Windows startup using RegRun Reanimator.
http://www.regrun.com

twstkdrv.dll
TWSTKDRV.DLL is Trojan/Backdoor.
Read more:
http://fileinfo.prevx.com/spyware/qq047c...
Kill the file TWSTKDRV.DLL and remove TWSTKDRV.DLL from Windows startup using RegRun Reanimator.
http://www.regrun.com

twunk32.exe
Twunk32.exe is W32/Small.BOB!tr.dldr.
Related files:
%SYSTEM%\twunk32.exe
%SYSTEM%\drivers\usbme.sys
Read more:
http://www.fortinet.com/VirusEncyclopedi...
Kill the process twunk32.exe and remove twunk32.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

typeconf.exe
TYPECONF.EXE is Wareout.
Kill the process TYPECONF.EXE and remove TYPECONF.EXE from Windows startup using RegRun Reanimator.
http://www.regrun.com

typeteller.exe
Typeteller.exe is Spyware.TypeTeller.
Spyware.TypeTeller is a spyware program that records keystrokes on the computer and saves them to a log file.
Related files:
%CurrentFolder%\TypeTeller 2006\typeteller.exe
%CurrentFolder%\TypeTeller 2006\typeteller.dll
%CurrentFolder%\TypeTeller 2006\typeteller.txt
%CurrentFolder%\TypeTeller 2006\affiliates.txt
%CurrentFolder%\TypeTeller 2006\rebrandit.txt
%CurrentFolder%\TypeTeller 2006\first.run
%CurrentFolder%\TypeTeller 2006\readme.txt
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process typeteller.exe and remove typeteller.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com

tzfst.exe
Tzfst.exe is Trojan.Flush.H.
Read more:
http://www.symantec.com/enterprise/secur...
Kill the process tzfst.exe and remove tzfst.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com


Quick Links
What's new?
RSS Feed
Add to AppDatabase
Ask Experts
Join forum
Links

Articles
Virus or not? SPTD####.sys
What is mc21.tmp, mc22.tmp, mc23.tmp?

Select
Necessary
Useless
At your option
Dangerous

Copyright © 1998-2010 Greatis Software