Application Database

Application database

Startupapps.com recommends you:

Detect and remove hidden rootkits using UnHackMe Free fully functional 30-days trial.

RegRun Security Suite = 24 system utilities for protecting your computer. Try now!

I would like to say that RegRun has helped me on more than 1 occasion when it comes to spyware/adware by letting me know automatically that a piece of it got added to Windows startup. There is so much spyware/addware out there today it's hard to imagine being without RegRun. I like many other features too including the daily registry backups and file protection.

Chris Wagers

NECESSARY

Updated weekly. Last update: April 9 2018

Improve boot up time Run a free scan to diagnose your PC and identify the system boottle necks slowing you down. Start Test

Fix Windows PC's Fast! Automated Software Repairs damaged & slow windows systems in 1 click.

Downlod Now!

Free Download

%program files%\ink\loginkey.dll

Loginkey.dll is a component of Microsoft Tablet PC
Manufacturer: Microsoft Corporation.
Installed in Winlogon Notification registry key.

%sysdir%\alg.exe

Application Layer Gateway Service provided by Microsoft.
Internal Name: SharedAccess.
Alg.exe is related to Windows Firewall/Internet Connection Sharing (ICS).
Alg.exe (SharedAccess) must be started even if your Windows firewall is turned off or replaced by another firewall.
Alg.exe (SharedAccess) is the low level service for control network connections.
Start mode of Alg.exe (SharedAccess): Auto.
Suggestion: Leave it working.

%sysdir%\alrsvc.dll

ALRSVC.DLL is Microsoft Windows Alerter Service.
ALRSVC.DLL provides messaging services and event alerts.
ALRSVC.DLL (Alerter service) is loaded using svchost.exe manager.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\appmgmt.exe

AppMgmt.exe is Application Management Service.
AppMgmt.exe provides software installation services: Assign, Publish, and Remove.
Manufacturer: Microsoft Corporation
www.microsoft.com

%sysdir%\appmgmts.dll

%SysDir%\APPMGMTS.DLL is a part of Windows XP.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\asycfilt.dll

ASYCFILT.DLL is a module used by Microsoft OLE (Object Linking and Embedding).
ASYCFILT.DLL is a part of Microsoft� Windows� Operating System.

%sysdir%\atl.dll

atl.dll is a Active Template Library (ATL) module, a set of template-based C++ classes.
atl.dll is used for easily creating small, fast Component Object Model (COM) objects.
atl.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\browser.dll

BROWSER.DLL is Microsoft Windows Computer Browser Service.
Manudacturer: Microsoft Corporation
www.microsoft.com

%sysdir%\browseui.dll

browseui.dll is related to the browser UI.
browseui.dll is a part of Microsoft Windows.

%sysdir%\cdd.dll

%SysDir%\CDD.DLL is related to Canonical Display Driver.
CDD.DLL is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\clbcatq.dll

clbcatq.dll is a COM Services product.
clbcatq.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\clipsrv.exe

clipsrv.exe is a core component of Microsoft Windows Operating System.
clipsrv.exe is required for using Microsoft Clipboard-Server.
www.microsoft.ru

%sysdir%\cmd.exe

%SysDir%\cmd.exe is a Microsoft Windows Command Prompt.
%SysDir%\cmd.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\comcat.dll

COMCAT.DLL is a system dll file.
COMCAT.DLLis a part of Microsoft� Windows� Operating System.

%sysdir%\comres.dll

%SysDir%\COMRES.DLL is related to Microsoft Windows Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\conime.exe

%SysDir%\CONIME.EXE is a Microsoft Console IME.
%SysDir%\CONIME.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\csrss.exe

Csrss.exe is the user-mode portion of the Win32 subsystem (with Win32.sys being the kernel-mode portion). Csrss stands for client/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.

%sysdir%\danim.dll

DANIM.DLL is a DirectAnimation component of DirectX Media.
DANIM.DLLis a part of Microsoft� Windows� Operating System.

%sysdir%\ddrawex.dll

DDRAWEX.DLL is a part of DirectDraw.
DDRAWEX.DLLis a part of Microsoft� Windows� Operating System.

%sysdir%\dfssvc.exe

dfssvc.exe is the Distributed File System (DFS) service.
www.microsoft.com

%sysdir%\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235}

%SysDir%\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} is a COM+ system Application service.
It is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\dmadmin.exe

%SysDir%\dmadmin.exe is a Veritias LDM-Service (Logical Disk Manager).
dmadmin.exe is used for manage of disks.
dmadmin.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Veritas Software
www.veritas.com

%sysdir%\dns.exe

dns.exe is a core component of Microsoft Windows DNS server.
dns.exe is required for using DNS Server.
www.microsoft.ru

%sysdir%\dosx.exe

dosx.exe is a part of Windows NT Virtual DOS Machine.
Dosx.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\1394bus.sys

1394bus.sys is a part of Microsoft Network Drivers.
http://support.microsoft.com/?kbid=83098...

%sysdir%\drivers\atmarpc.sys

%SysDir%\drivers\atmarpc.sys is a IP/ATM Arp Client.
atmarpc.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\beep.sys

%SysDir%\drivers\beep.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\cdr4_xp.sys

Cdr4_xp.sys is a driver for CD Recorder devices.
Cdr4_xp.sys is a part of Microsoft� Windows� XP Operating System.

%sysdir%\drivers\dump_dumpata.sys

%SysDir%\Drivers\DUMP_DUMPATA.SYS is related to Microsoft Windows Vista.
DUMP_DUMPATA.SYS is a system driver for managing ATA devices.

%sysdir%\drivers\dump_dumpfve.sys

%SysDir%\Drivers\DUMP_DUMPFVE.SYS is related to Microsoft Windows Vista.
DUMP_DUMPFVE.SYS is a Full Volume Encryption Crashdump Hibernate Filter Driver.
DUMPFVE.SYS is a part of Microsoft� Windows� Vista Operating System.

%sysdir%\drivers\gagp30kx.sys

%SysDir%\drivers\gagp30kx.sys is a MS Generic AGPv3.0 Filter for K8/9 Processor Platforms.
gagp30kx.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\ks.sys

ks.sys is Kernel CSA Library.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\ksecdd.sys

%SysDir%\drivers\ksecdd.sys is a Kernel Security Support Provider Interface.
ksecdd.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\mnmdd.sys

Mnmdd.sys is related to Frame buffer simulator.
Mnmdd.sys is a part of Windows Operating System.

%sysdir%\drivers\mrxsmb.sys

Mrxsmb.sys is related to Windows NT SMB Minirdr.
Mrxsmb.sys is a part of Windows Operating System.
http://support.microsoft.com/?kbid=83112...

%sysdir%\drivers\msahci.sys

%SysDir%\drivers\MSAHCI.SYS is related to MS AHCI 1.0 Standard Driver.\MSAHCI.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\mssmbios.sys

Mssmbios.sys is related to System Management BIOS Driver.
Mssmbios.sys is a part of Windows Operating System.
www.microsoft.ru

%sysdir%\drivers\mup.sys

Mup.sys is used for handling Distributed File System (DFS) file I/O requests.
Mup.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\ntfs.sys

NTFS.SYS is related to System Driver Microsoft Corporation.
NTFS.SYS is a part of Windows Operating System.
www.microsoft.ru

%sysdir%\drivers\pci.sys

%SysDir%\drivers\pci.sys is related to PCI Bus Driver.
Manufacturer: Microsoft Corporation
www.microsoft.com

%sysdir%\drivers\pxhelp20.sys

%SysDir%\drivers\pxhelp20.sys is a Px Engine Device Driver for Windows.
pxhelp20.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\rasl2tp.sys

rasl2tp.sys is RAS L2TP mini-port (call-manager driver).
rasl2tp.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\sr.sys

%SysDir%\drivers\sr.sys is a System Restore Filesystem Filter Driver.
sr.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\drivers\tcpip.sys

TCPIP.SYS is a part of TCP/IP drivers.
http://support.microsoft.com/kb/260956/e...

%sysdir%\drivers\wmilib.sys

WMILIB.SYS is related to WMI support library.
WMILIB.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\grpconv.exe

Microsoft group converter.
Used by installers ONLY in the RunOnce keys.

%sysdir%\hal.dll

hal.dll is a Hardware Abstraction Layer DLL.
hal.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\hdaudpropshortcut.exe

HDAUDPROPSHORTCUT.EXE is related to Universal Audio Architecture (UAA) High Definition Audio class driver.
HDAUDPROPSHORTCUT.EXE is a part of Microsoft Windows Operating System.
http://support.microsoft.com/default.asp...

%sysdir%\igfxdev.dll

igfxdev.dll is a Intel(R) integrated graphics controller.
igfxdev.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Intel Corp.
www.intel.com

%sysdir%\iuctl.dll

%SysDir%\IUCTL.DLL is a part of Microsoft� Windows� Operating System.

%sysdir%\iuengine.dll

IUENGINE.DLL is Windows Update Control Engine.
IUENGINE.DLLis a part of Microsoft� Windows� Operating System.

%sysdir%\llssrv.exe

Llssrv.exe is the Microsoft Licensing Logging Service.
Llssrv.exe is a part of Microsoft Windows.
http://support.microsoft.com/kb/296936
www.microsoft.com

%sysdir%\locator.exe

locator.exe is a RPC Locator.
Microsoft tells:
�The Microsoft Locator service is a name service that maps logical names to network-specific names. It is included with Windows NT 4.0, Windows 2000, and Windows XP.�
http://support.microsoft.com/default.asp...

%sysdir%\logonui.exe

LOGONUI.EXE is related to Microsoft Windows XP user switching screen.
LOGONUI.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\lsass.exe

Microsoft Local Security Authority Subsystem Service (LSASS).

%sysdir%\msdxm.ocx

Msdxm.ocx is the Windows Media Player 2 ActiveX Control.
Msdxm.ocx is used to play video in the browser.

%sysdir%\mshta.exe

mshta.exe is a Microsoft HTML Applications.
mshta.exe is a part of Microsoft Windows Operating System.
www.microsoft.com

%sysdir%\msnp32.dll

msnp32.dll is a part of Microsoft Network Provider Library.
www.microsoft.com

%sysdir%\msstdfmt.dll

%SysDir%\MSSTDFMT.DLL is related to Standard Data Formating Object Library.
MSSTDFMT.DLL is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\msvcp60.dll

%SysDir%\msvcp60.dll is a Microsoft C Runtime Library.
msvcp60.dll containts standard C library functions such as printf, memcpy, and cos.
msvcp60.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\nmssvc.exe

NMSSvc.exe is the Intel network card management service.

%sysdir%\ntdll.dll

ntdll.dll is the NT Layer DLL system dll.
ntdll.dll is a part of Microsoft� Windows� NT Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\ntfrs.exe

ntfrs.exe is a File Replication Service.
Microsoft tells:
�The File Replication service (FRS) is a multi-threaded, multi-master replication engine that replaces the LANMan Directory Replication service (LMRepl service) in Microsoft Windows NT versions 3.x and 4.0. Windows 2000-based domain controllers and servers use FRS to replicate system policy and logon scripts for Windows 2000-based and earlier clients.�

%sysdir%\ntkrnlpa.exe

NTKRNLPA.EXE is a part of Microsoft Windows Kernel.
Not applicable for Windows 9X/Me.

%sysdir%\ntoskrnl.exe

NTOSKRNL.EXE is a Microsoft Boot Up Kernel.
NTOSKRNL.EXE is a part of Microsoft Windows Operating System.
http://support.microsoft.com/?kbid=29469...

%sysdir%\ole32.dll

%SysDir%\OLE32.DLL is related to Microsoft OLE Library.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\oleaut32.dll

OLEAUT32.DLL is Microsoft OLE DLL.
OLEAUT32.DLLis a part of Microsoft� Windows� Operating System.

%sysdir%\olepro32.dll

OLEPRO32.DLL is Microsoft OLE Property Support DLL.
OLEPRO32.DLL is a part of Microsoft� Windows� Operating System.

%sysdir%\quartz.dll

QUARTZ.DLL is DirectShow Runtime Library.
QUARTZ.DLL is a part of Microsoft DirectX.
QUARTZ.DLL is a part of Microsoft� Windows� Operating System.

%sysdir%\rasautou.exe

RASAUTOU.EXE is a Microsoft Remote Access Dialler.
RASAUTOU.EXE is used to manage modem connections.
RASAUTOU.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\rdpclip.exe

Rdpclip.exe is a part of File Copy.
Rdpclip.exe is used for copy and paste between Terminal Services server and client.
Rdpclip.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\restore\rstrui.exe

Rstrui.exe is a part of Microsoft system restore component.
Related article:
http://support.microsoft.com/?kbid=26751...

%sysdir%\seclogon.dll

%SysDir%\SECLOGON.DLL is related to Secondary Logon Service DLL.
SECLOGON.DLL is a part of Microsoft� Windows� Operating System.
www.microsoft.com

%sysdir%\services.exe

Services.exe is a serices manager for Windows NT4/2000/XP or higher.
Services.exe is used for executing different standard Windows services.
For example: Event Log, Plug and Play etc.
Services.exe is stored in the Windows\System32 folder.
The other files with name "Services.exe" located in different folders may be the viruses or Trojans.

%sysdir%\setupapi.dll

%SysDir%\setupapi.dll is related to Microsoft Windows Setup API.
setupapi.dll is used for installers and setup applications.
setupapi.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\sfc_os.dll

%SysDir%\SFC_OS.DLL is a part of Microsoft Windows.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\shdocvw.dll

Shdocvw.dll is a Microsoft Shell Doc Object and Control Library.
Shdocvw.dll is an important part of Microsoft Windows.

%sysdir%\shfolder.dll

shfolder.dll is a Microsoft Shell Folder Service.
shfolder.dll is used for management to special folder of Windows such as My Documents.
shfolder.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\smlogsvc.exe

smlogsvc.exe is a part of Microsoft Windows 2003.
Logging/alerts service.

%sysdir%\smss.exe

SMSS.EXE is the important part of Microsoft Windows NT4/2000/XP or higher.
SMSS.EXE is the session manager subsystem, which is responsible for starting the user session. This process is initiated by the system thread and is responsible for various activities, including launching the Winlogon and Win32 (Csrss.exe) processes and setting system variables. After it has launched these processes, it waits for either Winlogon or Csrss to end. If this happens "normally," the system shuts down; if it happens unexpectedly, Smss.exe causes the system to stop responding (hang).
SMSS.EXE is executed by operation system, this is system service.

%sysdir%\sndvol32.exe

%SysDir%\sndvol32.exe is related to Microsoft Windows audio tool.

%sysdir%\spoolsv.exe

Spoolsv.exe is the part of Microsoft Windows.
The spooler service is responsible for managing spooled print/fax jobs.

%sysdir%\stobject.dll

Part of Microsoft Windows XP.
It's used to manage system tray.
Required.

%sysdir%\svchost.exe

Svchost.exe (Windows NT/2000/XP) is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32
folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of
Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where
Svchost.exe is started. This allows for better control and debugging.
More info:
http://support.microsoft.com/support/kb/...

%sysdir%\svchost.exe -k eapsvcs

%SysDir%\svchost.exe -k eapsvcs is related to Extensible Authentication Protocol Service.
%SysDir%\svchost.exe -k eapsvcs is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
http://technet.microsoft.com/en-us/libra...

%sysdir%\svchost.exe -k localsystemnetworkrestricted

%SysDir%\svchost.exe -k LocalSystemNetworkRestricted is related to Microsoft Windows Vista.
Manages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start

%sysdir%\termsrv.exe

termsrv.exe is a part of Windows Terminal Server Service.
http://support.microsoft.com/?kbid=25684...
www.microsoft.ru

%sysdir%\tscupgrd.exe

tscupgrd.exe is a Setup Custom Action Dll.
tscupgrd.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\unicows.dll

unicows.dll is a part of Microsoft Layer.
unicows.dll is used for providing Unicode support for Windows 9x and ME.
Manufacturer: Microsoft Corp.
www.microsoft.com
Read more: http://thesource.ofallevil.com/globaldev...

%sysdir%\userinit.exe

userinit.exe is a Windows System File.
userinit.exe executes when you log on to your computer.
More info: www.microsoft.ru

%sysdir%\vssvc.exe

vssvc.exe is a Microsoft ShadowCopy process.
vssvc.exe is related to the Volume ShadowCopy service implemented into Windows XP and onwards.
vssvc.exe is used for automatic back up of modified files by operation system.
vssvc.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\watchdog.sys

watchdog.sys is a Watchdog Driver.
watchdog.sys is a driver of PC WATCHDOG SYSTEM hardware.
watchdog.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\wbem\framedyn.dll

framedyn.dll is the WMI SDK Provider Framework system dll.
framedyn.dll is a part of Windows WMI.

%sysdir%\wbem\unsecapp.exe

unsecapp.exe is a Microsoft Windows Management Instrumentation process.
unsecapp.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com
Read more: http://msdn.microsoft.com/library/defaul...

%sysdir%\wbem\winmgmt.exe

Winmgmt.exe is a core component of client management in Windows 2000. This process initializes when the first client application connects or continuously when management applications request its services.
You cannot end this process from Task Manager.

%sysdir%\wbem\wmiapsrv.exe

%SysDir%\wbem\wmiapsrv.exe is a Microsoft WMI Performance Adapter.
wmiapsrv.exe is used for collect information regarding performance.
wmiapsrv.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\wbem\wmiprvse.exe

%SysDir%\wbem\wmiprvse.exe deals with WMI operations through the WinMgmt.exe process.
wmiprvse.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\wdigest.dll

wdigest.dll is a part of Digest Authentication protocol.
wdigest.dll is used with Hypertext Transfer Protocol (HTTP) and Simple Authentication Security Layer (SASL) exchanges.
wdigest.dll is a part of Microsoft� Windows� XP Operating System.
Read more: http://technet2.microsoft.com/WindowsSer...

%sysdir%\wdmaud.drv

Wdmaud.drv is a WDM Audio driver mapper.
wdmaud.drv is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\win32k.sys

WIN32K.SYS is a Multi-User Win32 Driver.
Manufacturer: Microsoft Corporation
www.microsoft.com

%sysdir%\winlogon.exe

%SysDir%\WINLOGON.EXE is related to Microsoft Windows Logon Process.
%SysDir%\WINLOGON.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com
Note: winlogon.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.

%sysdir%\wowexec.exe

Wowexec.exe is part of Microsoft Windows NT4/2000/XP.
Wowexec.exe is internal program used to execute 16-bit applications in 32-bit environment.
Read more:
http://www.microsoft.com/resources/docum...

%sysdir%\wscript.exe

%SysDir%\WSCRIPT.EXE is related to Microsoft Windows Script Host.
WSCRIPT.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\wuauclt.exe

WUAUCLT.EXE is Microsoft web update service.
It is started automatically to check updates on the Microsoft updates servers.

%sysdir%\wuauclt1.exe

%SysDir%\wuauclt1.exe is related to Windows Update.
wuauclt1.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%sysdir%\wuweb.dll

wuweb.dll is Windows Update Web Control.
wuweb.dll is a part of Microsoft� Windows� Operating System.

%sysdir%\xvid.dll

%SysDir%\XVID.DLL is a part of Windows.
Manufacturer: Microsoft Corp.
www.microsoft.com

%windir%\explorer.exe

Windows shell.
Required.

%windir%\msagent\agentdp2.dll

%WinDir%\msagent\agentdp2.dll is related to Microsoft Character Animation Data Provider.
agentdp2.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%windir%\mscoree.dll

%WinDir%\mscoree.dll is related to Microsoft .NET software.
mscoree.dll is the Microsoft .NET Runtime Execution Engine.
mscoree.dll is a system dll of Windows.
Manufacturer: Microsoft Corp.
www.microsoft.com

%windir%\regedit.exe

%WinDir%\REGEDIT.EXE is related to Windows Registry Editor.
Manufacturer: Microsoft Corp.
www.microsoft.com

%windir%\shdocvw.dll

Shdocvw.dll is a Microsoft Shell Doc Object and Control Library.
Shdocvw.dll is an important part of Microsoft Windows.

%windir%\srchasst\srchctls.dll

%WinDir%\srchasst\srchctls.dll is related to Search Assistant Controls.
srchctls.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

%windir%\system\msdxm.ocx

Msdxm.ocx is the Windows Media Player 2 ActiveX Control.
Msdxm.ocx is used to play video in the browser.

%windir%\system32\searchindexer.exe /embedding

%WinDir%\System32\SearchIndexer.exe /Embedding is related to Microsoft Windows Vista.
Provides content indexing and property caching for file, email and other content (via extensibility APIs). The service responds to file and email notifications to index modified content. If the service is stopped or disabled, the Explorer will not be able to display virtual folder views of items, and search in the Explorer will fall back to item-by-item slow search.
WSearch service.

%windir%\system32\slsvc.exe

%WinDir%\SysDir\SLsvc.exe is related to Microsoft Windows Vista.
Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a reduced function mode.

%windir%\system32\svchost.exe -k dcomlaunch

%WinDir%\System32\svchost.exe -k DcomLaunch is related to Microsoft Windows.
Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
Service name:PlugPLay.

%windir%\system32\svchost.exe -k localservicenetworkrestricted

%WinDir%\System32\svchost.exe -k LocalServiceNetworkRestricted is related to Microsoft Windows Vista.
Manages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
System Service: Audiosrv.

%windir%\system32\svchost.exe -k localservicenonetwork

%WinDir%\System32\svchost.exe -k LocalServiceNoNetwork is related to Microsoft Windows Vista.
Windows BFE service.
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

%windir%\system32\svchost.exe -k networkservicenetworkrestricted

PolicyAgent is related to Microsoft Windows Vista.
PolicyAgent is a system service execute using:
svchost.exe -k NetworkServiceNetworkRestricted
Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.

%windir%\system32\svchost.exe -k secsvcs

%WinDir%\System32\svchost.exe -k secsvcs is related to Microsoft Windows Vista.
WinDefend system service - Windows Defender.
Scan your computer for unwanted software, schedule scans, and get the latest unwanted software definitions.

%windir%\system32\svchost.exe -k wersvcgroup

%WinDir%\System32\svchost.exe -k WerSvcGroup is related to Microsoft Windows Vista.
Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.
WerSvcGroup is a system service.

%windir%\taskmon.exe

Microsoft Corporation
This creates a database of the application programs you use and which files they load. The information is used by Windows Defrag (and by Norton Speedisk) to optimize the location of files on your hard drive so that Windows startup and program loading is faster.

adquisicion de imagenes de windows (wia)

Adquisicion de imagenes de Windows (WIA)
Actions:
�Windows XP admits the use of devices of fixed images through the interface Acquisition of images of Windows (WIA), that uses the architecture of Model of controller of Windows (WDM). WIA provides a solid communication between the applications and the devices for capture of images that allows to capture images of effective way and to transfer them to the equipment for its edition and use.�
More info: http://www.microsoft.com/latam/windowsxp...

advpack.dll

advpack.dll is used for install hardware and software by reading and verifying .INF files.
ADVPACK.DLL is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

afvxd.vxd

Microsoft TDI transport service provider.
Supports TCP/IP-specific functionality for Microsoft TDI transport service provider for Windows Sockets 2.0.

alerter

Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start.
*If you are connected to a network, set it to Automatic. This service will notify your System Administrator of problems occurring within the network which may aid them in fixing the problem.
http://www.beemerworld.com/tips/services...

application layer gateway service

atapi.sys

ATAPI.SYS is a part of Microsoft Windows Operation system.
atapi.sys is the IDE port driver.
Manufacturer: Microsoft Corp.
www.microsoft.com

atmuni.sys

Atmuni.sys is a ATM UNI Call Manager.
atmuni.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

audiosrv

automatic updates

Used to check up to see if there is any critical or otherwise updates available for download.
Note!
The manual update via Windows Update web site Requires Cryptographic Services to be running.
Recommend: Automatic

background intelligent transfer service (bits)

Microsoft tells:
�Background Intelligent Transfer Service (BITS) asynchronously transfers files in the foreground or background, throttles the transfers to preserve the responsiveness of other network applications, and automatically resumes file transfers after network disconnects and machine restarts.
Applications use the Background Intelligent Transfer Service (BITS) application program interface (API) to create transfer jobs and to monitor the progress of jobs in the transfer queue. The BITS API is included in the Microsoft� Platform Software Development Kit (SDK).�
More info: http://www.microsoft.com/windowsserver20...

bdasup.sys

Bdasup.sys is related to Microsoft BDA Driver Support Library.
bdasup.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

bfe

bios

Plug and Play BIOS driver.
Part of Microsoft Windows 95/98/Me.

biosxlat

BIOS emulation driver.
Part of Microsoft Windows 95/98/Me.

ccdecode.sys

CCDECODE.sys is related to WDM Closed Caption VBI Codec.
CCDECODE.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

charmap.exe

Charmap.exe is used for locate non-standard characters such as foreign letter accents and even Arabic letters.
charmap.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

cidaemon.exe

Cidaemon.exe is a part of Microsoft Windows Operating System.
Cidaemon.exe is the Microsoft Indexing Service.
More info: http://www.microsoft.com/

classpnp.sys

CLASSPNP.SYS is SCSI Class System Dll.
CLASSPNP.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

clfs.sys

CLFS.SYS is related to Common Log File System Driver.
CLFS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

cmbatt.sys

CmBatt.sys is related to Control Method Battery Driver.
CmBatt.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

combuff

Communications buffer driver.
Part of Microsoft Windows 95/98/Me.

configmg

Configuration manager driver.
Part of Microsoft Windows 95/98/Me.

crypt32.dll

Crypt32.dll is a part of Microsoft Windows.
Crypt32.dll is related to Windows Crypto API.

cryptnet.dll

Cryptnet.dll is a part of Microsoft Windows.
Cryptnet.dll is related to Crypto Network Related API.

cryptographic services

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

cscdll.dll

Cscdll.dll is an Offline Network Agent.
Cscdll.dll is a part of Microsoft� Windows Operating System.

dcom server process launcher service (dcomlaunch)

DCOM Server Process Launcher service (DCOMLAUNCH)
Microsoft tells:
�This service is new to the products that are listed in the "Applies to" section, and this service must start before any DCOM-related services can successfully start.�
More info: http://support.microsoft.com/default.asp...

dcom service

dcom service is a part of Microsoft Windows Operating System.
Microsoft tells:
�The Distributed Component Object Model (DCOM) is a protocol that enables software components to communicate directly over a network.�
http://support.microsoft.com/kb/825750/e...

dcomlaunch

DCOMLaunch is an important system service for Microsoft Windows XP.
DCOMLaunch was added with Service Pack2.
Microsoft tells:
"To reduce the attack surface of Windows and provide defense in depth, the RPCSS service functionality was split into two services. The RPCSS service with all the original functionality that did not require Local System privileges now runs under the Network Service account. A new DCOMLaunch service that includes functionality that requires Local System privileges runs under the Local System account.
This change reduces the attack surface and provides defense in depth for the RPCSS service since an elevation of privilege in the RPCSS service will now be limited to the Network Service privilege."
http://www.microsoft.com/technet/prodtec...

dfs.vxd

Microsoft Networking

dhcp

DHCP is related to Microsoft Windows.
System service.
Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.
Executed using svchost.exe -k LocalServiceNetworkRestricted.

dllhost.exe

dllhost.exe is a part of the Microsoft Windows Operating System.
dllhost.exe is a core component Microsoft DCOM DLL Host Process.
www.microsoft.com

dosmgr

MS-DOS emulation manager.
Part of Microsoft Windows 95/98/Me.

dosnet

Windows 3.1-compatible network helper driver.
Part of Microsoft Windows 95/98/Me.

dot4scan.sys

Dot4Scan.sys is related to One Cool Transport.
Dot4Scan.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

drmkaud.sys

Microsoft Kernel DRM Audio Descrambler Filter.
Required.

dump_atapi.sys

Dump_atapi.sys is a part of Microsoft Windows Operation system.
Dump_atapi.sys is the IDE port driver.

dump_diskdump.sys

Dump_diskdump.sys is a driver for creating disk crash dumps.

dump_idechndr.sys

DUMP_IDECHNDR.SYS is a system driver for IDE devices.

dump_msahci.sys

DUMP_MSAHCI.SYS is related to MS AHCI 1.0 Standard Driver.
DUMP_MSAHCI.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

dump_viadsk.sys

Dump_viadsk.sys is a VIA chipset related device driver.

dump_wmilib.sys

dump_WMILIB.SYS is a part of Microsoft Windows Operation system.
dump_WMILIB.SYS is the WMI driver.

ebios

Extended BIOS driver.
Part of Microsoft Windows 95/98/Me.

ehstart

Ehstart is related to Microsoft Windows Vista.
Starts Windows Media Center Scheduler and Windows Media Center Receiver services at startup if TV is enabled within Windows Media Center.
Execute using svchost.exe -k LocalServiceNoNetwork.

enable

Accessibility Driver.
Part of Microsoft Windows 95/98/Me.

error reporting service

Microsoft tells:
�The Windows Error Reporting feature in Windows XP Professional with Service Pack 1 (SP1) provides a service that allows Microsoft to track and address errors relating to the operating system, Windows components, and applications. This service, called the Error Reporting service, gives users the opportunity to send data about errors to Microsoft and to receive information about them. Microsoft developers can use the Error Reporting service as a problem-solving tool to address customer problems in a timely manner and to improve the quality of Microsoft products.�
More info: http://www.microsoft.com/technet/prodtec...

ersvc.dll

ERSvc.dll is Windows Error Reporting Service.
ERSvc.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

eventlog

Eventlog is related to Microsoft Windows.
Eventlog is a system service.
This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.
Executed using svchost.exe -k LocalServiceNetworkRestricted.

fastprox.dll

Fastprox.dll is related to WMI Microsoft Corporation.
fastprox.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

fips.sys

FIPS.SYS is related to FIPS Crypto Driver.
FIPS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

hdaudbus.sys

HDAUDBUS.SYS is related to High Definition Audio Bus Driver v1.0a Windows (R) Server 2003 DDK.
HDAUDBUS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

hdaudio.sys

HdAudio.sys is related to Universal Audio Architecture (UAA) High Definition Audio class driver.
HdAudio.sysis a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com
http://support.microsoft.com/kb/835221/e...

hhctrl.ocx

hhctrl.ocx is the Microsoft HTML Help component. I think
you've installed a program that using HTML help. To use hhctrl.ocx it
must be registered in the system. Usually the installer uses RunOnce
keys to register hhctrl.ocx.
Recommendation: Ignore this change. You may check for the version of
the hhctrl.ocx to be sure that you have the working version.

hidserv.dll

Hidserv.dll is related to HID Audio Service.
Hidserv.dll is a part of Microsoft Windows.

hidservice.exe

C:\APPS\HIDSERVICE\HIDSERVICE.EXE
HIDSERVICE.exe is Generic Service for HID Keyboard Input Collections (GenericHidService).
http://www.microsoft.com/whdc/device/inp...

ifsmgr

File system manager driver.
Part of Microsoft Windows 95/98/Me.

igfxdev.dll

igfxdev.dll is a Intel(R) integrated graphics controller.
igfxdev.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Intel Corp.
www.intel.com

imapi.sys

%SysDir%\drivers\imapi.sys is a IMAPI Kernel Driver.
imapi.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

imscmig.exe

IMSCMIG.EXE is related to Microsoft Pinyin IME Installer
IMSCMIG.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

indexing service

Indexing Service is a part of Microsoft Windows Operating System.
Process File: Cidaemon.exe
More info: http://www.microsoft.com/

int13

BIOS hard disk emulation driver.
Part of Microsoft Windows 95/98/Me.

internat.exe

Language indicator. Microsoft Corporation.
Used for Windows 95/98/Me only.
May be a virus in the Windows NT/2000/XP/Vista.

ios

I/O Supervisor driver.
Part of Microsoft Windows 95/98/Me.

ios.vxd

Many Windows 95 driver models, such as IOS (for disk drivers) and the network, support dynamically loaded device drivers. These VxDs are not loaded by the VMM32 real-mode loader, but are loaded by a device loader that is responsible for loading and initializing the drivers at the correct time and in the correct order.
For example, for SCSI adapter miniport drivers, the device loader is *IOS. The entries for a SCSI adapter are found in this Registry key:
Hkey_Local_Machine\System\CurrentControlSet\Services\Class
Because there is no StaticVxD=xxx line in this Registry entry, the VMM32 real-mode loader does nothing when Windows 95 identifies this device.
Configuration Manager attempts to find any device node that has a DevLoader= entry in the Registry. The device loader (in the previous example, *IOS) examines the Registry, finds the PortDriver= entry, loads the driver and any associated support drivers, and initializes the adapter.
Copyright (c) Microsoft Corporation

ipsec services

IPSEC SERVICES
Microsoft tells:
�Internet Protocol security (IPSec) is a framework of open standards for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services.�
More info: http://www.microsoft.com/technet/prodtec...

javasup.vxd

Microsoft Java

kb918547.exe

KB918547.EXE is related to Microsoft Knowledge Base Article 918547 documents.
Read more: http://www.microsoft.com/technet/securit...
Manufacturer: Microsoft Corp.
www.microsoft.com

kmixer.sys

kmixer.sys is kernel audio mixer of Microsoft Windows.
I suggest you to add it to the Exclusion list (click on the "scissors" icon in the WatchDog window).
Kmixer may be closed and unloaded if it's not used. When you use audio it will be loaded again.

l3codeca.acm

L3codeca.acm is related to MPEG Layer-3 Audio Codec for MSACM.
l3codeca.acm is a part of Microsoft� Windows� Operating System.
Manufacturer: Fraunhofer Institut Integrierte Schaltungen IIS
www.iis.fraunhofer.de

lmhosts

Lmhosts is related to Microsoft Windows.
Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Executed using svchost.exe -k LocalServiceNetworkRestricted.

mhndrv.sys

Mhndrv.sys is related to Microsoft Multimedia Home Network (MHN) Support Driver.
Mhndrv.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

mmc.exe

MMC.EXE is related to Microsoft Management Console application.
MMC.EXE is used to display various management plug-ins accessed from the Control Panel, such as the Device Manager.
MMC.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

moufiltr.sys

MOUFILTR.SYS is related to Windows (R) 2000 DDK driver.
MOUFILTR.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

mountmgr.sys

Windows Mount Manager.
Read more:
http://www.win2000mag.com/Articles/Index...

mpssvc

MpsSvc service is related to Microsoft Windows Vista.
Executed using svchost.exe -k LocalServiceNoNetwork
Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.

mqac.sys

Mqac.sys is related to Windows NT MQ Access Control Device Driver.
mqac.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

msacm32.drv

Msacm32.drv is a a Microsoft Sound Mapper.
msacm32.drv is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

msadp32.acm

Msadp32.acm is related to Microsoft ADPCM CODEC.
msadp32.acm is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

msafd.dll

Msafd.dll is Microsoft Windows Sockets service provider.
Manufacturer: Microsoft Corporation.
http://msdn.microsoft.com/library/defaul...

mscorwks.dll

mscorwks.dll Microsoft .NET Runtime Common Language.
mscorwks.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

msdtc.exe

Msdtc.exe is the Microsoft Distributed Transaction Coordinator.
Msdtc.exe loads into the system by Microsoft Personal Web Server and Microsoft SQL Server.
More info: http://www.microsoft.com

msgina.dll

MSGINA.DLL is related to graphical identification and authentication (GINA) library.
The graphical identification and authentication (GINA) library is a component of some Microsoft Windows operating systems that provides secure authentication and interactive logon services.
Manufacturer: Microsoft Corp.
www.microsoft.com

msiexec.exe

Msiexec.exe is a part of the Microsoft Windows Operating.
Msiexec.exe is the Windows Installer Service.
More info: http://www.microsoft.com/

msisadrv.sys

Msisadrv.sys is related to ISA Driver.
msisadrv.sys is a part of Microsoft Windows Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

msmouse.vxd

Microsoft Mouse

msmpu401.sys

Msmpu401.sys is MPU-401MIDI interface driver.

msvcr71.dll

MSVCR71.dll is related to Microsoft� C Runtime Library.
MSVCR71.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

mswsock.dll

mswsock.dll is a Microsoft extensions to Winsock.
Mswsock.dll is an API that supplies services that are not part of Winsock.

mswsosp.dll

Mswsosp.dll is the Microsoft Windows Sockets provider.
Manufacturer: Microsoft Corporation.

nabtsfec.sys

NABTSFEC.sys is related to WDM NABTS/FEC VBI Codec.
NABTSFEC.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

napinsp.dll

%WinDir%\System32\napinsp.dll is related to Microsoft Windows Vista.
E-mail Naming Shim Provider.
napinsp.dll is Winsock2 LSP component.

ndis.sys

NDIS.SYS is related to NDIS System Driver.
NDIS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

ndis.vxd

Microsoft Networking

ndis2sup.vxd

Microsoft Networking

ndisip.sys

NdisIP.sys is related to Microsoft IP Driver.
NdisIP.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

ndiswan.vxd

Microsoft Networking

netshell.dll

Microsoft DLL file. It contains the functions for supporting
network connections.

nlaapi.dll

%WinDir%\System32\NLAapi.dll is related to Microsoft Windows Vista.
Network Location Awareness 2.
NLAapi.dll is Winsock2 LSP component.

ntkern

Windows Driver Model.
Part of Microsoft Windows 95/98/Me.

nuidfltr.sys

NUIDFLTR.SYS is related to Microsoft HID Non-User Input Data Filter update.
NUIDFLTR.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

ohci1394.sys

Ohci1394.sys is related to 1394 OpenHCI Port Driver.
ohci1394.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

oprghdlr.sys

OPRGHDLR.SYS is a ACPI Operation Registration Driver.
Manufacturer: Microsoft Corporation

pagefile

Swapfile driver.
Part of Microsoft Windows 95/98/Me.

pageswap

Swapfile manager driver.
Part of Microsoft Windows 95/98/Me.

parallel.sys

PARALLEL.SYS is related to Parallel Printer Driver.
PARALLEL.SYS is a part of Microsoft Windows Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

parity

Memory parity driver.
Part of Microsoft Windows 95/98/Me.

pciidex.sys

PCIIDEX.SYS is related to PCI IDE Bus Driver Extension.
PCIIDEX.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

perf

System Monitor data collection driver.
Part of Microsoft Windows 95/98/Me.

plugplay

pmemnt.sys

PMEMNT.SYS is related to Physical Memory Driver.
PMEMNT.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

pnpmem.sys

PNPMEM.SYS is related to Plug and Play Memory Driver.
PNPMEM.SYSis a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

policyagent

portabledeviceapi.dll

PortableDeviceApi.dll is a Windows Portable Device API Components.
PortableDeviceApi.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

portabledevicetypes.dll

PortableDeviceTypes.dll is a Windows Portable Device (Parameter) Types Component.
PortableDeviceTypes.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

powrprof.dll

Microsoft Corporation software.
Used in Windows 95/98/Me only.
Loads Power Management settings.
Two entries are necessary, because the first is used before a user logon to Windows.
Not required if power management is not used.

ptilink.sys

PTILINK.SYS is related to Parallel Technologies DirectParallel IO Library.
PTILINK.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Parallel Technologies, Inc.
www.ptnet.com

rassstp.sys

RASSSTP.SYS is related to RAS SSTP Miniport Call Manager.
RASSSTP.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

reboot

Ctrl+Alt+Del manager.
Part of Microsoft Windows 95/98/Me.

redbook.sys

Microsoft system driver.
"The Redbook system driver (redbook.sys) is the KS filter that manages the rendering of CD
digital audio. The Redbook driver is a client of the SysAudio system driver. The system routes
CD digital audio through the file system to the Redbook driver and then to the SysAudio driver.
The CD digital audio is rendered on the preferred wave output device (as set in the Multimedia
property pages in Control Panel)".
More info:
http://msdn.microsoft.com/library/defaul...

redir.exe

Redir.exe is related to Virtual Device Driver (VDD) redirector for the MS-DOS Virtual DOS Machine (VDM).
redir.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

rnapapp.exe

Dial-Up Networking Application.
Microsoft Corporation. Never used in the startup sections. Launched automatically when connecting using dial-up.

rndismpx.sys

Rndismpx.sys is related to Remote NDIS Miniport Network Driver.
rndismpx.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

rnr20.dll

Rnr20.dll is Windows Socket2 NameSpace DLL.
Manufacturer: Microsoft Corporation.

rsrcmtr.exe

Microsoft Corporation Windows 9X/ME only.
Resource meter. Very useful for check resources. Not used with Windows NT4/W2K/XP.

rundll32 mmhid.dll,startmmhid

MMHID.DLL is a part of operation system.
It's required if you use audio devices connected via USB port.

rundll32.exe

%SysDir%\rundll32.exe is a process which executes DLL's and places their libraries into the memory.
rundll32.exe can be used more efficiently by applications.
rundll32.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

rundll32.exe iernonce.dll,runonceexprocess

Executes RunOnceEx applications. Used only with Windows 95 in the RunOnce key. Leave it working and add to the Exclusion list.

rundll32.exe powrprof.dll,loadcurrentpwrscheme

Microsoft Corporation
Loads Power Management.
Two entries are nesessary, because the first (RunServices) works before user logon.
You may suspend of running powrprof.dll if you don't want to use power management.

sclgntfy.dll

Sclgntfy.dll is a part of Microsoft Windows.
Sclgntfy.dll is the Secondary Logon Service Notification DLL.

sdvxd

Smartdrive driver.
Part of Microsoft Windows 95/98/Me.

sentry.sys

Sentry.sys is related to Sentry H/W lock Driver.
sentry.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

setupx.dll

setupx.dll is a Windows Setup Library.
setupx.dll contains functions that are used by the common installation and setup programs.
setupx.dll is a part of Microsoft Windows Operation system.

shdocvw.dll

Shdocvw.dll is a Microsoft Shell Doc Object and Control Library.
Shdocvw.dll is an important part of Microsoft Windows.

shell

Shell device driver.
Part of Microsoft Windows 95/98/Me.

shell32.dll

Windows Shell common DLL. Required!

sis.sys

SIS.SYS is related to Single Instance Storage Filter.
SIS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

slip.sys

SLIP.sys is related to Microsoft Slip Deframing Filter Minidriver.
SLIP.sysis a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

spooler

Spoolsv.exe is the part of Microsoft Windows.
The spooler service is responsible for managing spooled print/fax jobs.

statemgr.exe

Microsoft Corporation.
Windows ME only.
Windows default for System Restore.

stimon.exe

Still Image Monitor (Stimon.exe) is a tool that is installed by Windows Millennium Edition (Me) and Windows 98 when a Universal Serial Bus (USB) scanning device is successfully enumerated. Stimon.exe is configured to start automatically during the Windows startup process, and is loaded from the following registry key:
HKLM\...\Run
Stimon contains two modules: Event Monitor and Control Center.

stisvc.exe

stisvc.exe is a Microsoft Still Image Service.
Microsoft tells:
�Windows Image Acquisition (WIA) enables imaging programs, such as Microsoft Picture It! 2000, Kodak Imaging, or Adobe Photoshop, to communicate with imaging devices such as digital cameras and scanners. WIA supports digital still cameras and both low-end and high-end scanners; it also enables you to retrieve still images from IEEE 1394-based digital video (DV) camcorders and Universal Serial Bus (USB) Web cameras.�
More info:
http://support.microsoft.com/default.asp...

stobject.dll

System tray related DLL.
Used for supporting system icons, styles etc.
Manufacturer: Microsoft

streamip.sys

STREAMIP.SYS is related to Microsoft IP Driver.
STREAMIP.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

svchost -k dcomlaunch

svchost -k rpcss

svchost.exe -k rpcss is the standard part of Windows system.
Provides the RPC services.

svchost.exe -k localservice

"svchost.exe -k LocalService" is the standard part of Windows.
It is the universal commmand for auto starting of the locall services.
Related services (Windows XP):
Alerter
WebClient
LmHosts
RemoteRegistry
upnphost
SSDPSRV

svchost.exe -k netsvcs

Svchost.exe is a generic process name for services for loading dynamic link libraries (DLLs).
When you start Windows XP, Svchost,exe constructs multiple lists of service groupings that need to be loaded.
Each instance can run at the same time. Svchost,exe groups are delineated at:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Svchost.
The command:
svchost -k netsvcs starts the network related services:
6to4
AppMgmt
AudioSrv
Browser
CryptSvc
DMServer
DHCP
ERSvc
EventSystem
FastUserSwitchingCompatibility
HidServ
Ias
Iprip
Irmon
LanmanServer
LanmanWorkstation
Messenger
Netman
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
Schedule
Seclogon
SENS
Sharedaccess
SRService
Tapisrv
Themes
TrkWks
W32Time
WZCSVC
Wmi
WmdmPmSp
winmgmt
TermService
wuauserv
BITS
ShellHWDetection
helpsvc
uploadmgr

Status: this command is required to start network features in the Windows.

svchost.exe -k netsvcs

"svchost.exe -k netsvcs" is the standard part of Windows.
It is the universal commmand for auto starting of the network services.
Related services (Windows XP):
6to4
AppMgmt
AudioSrv
Browser
CryptSvc
DMServer
DHCP
ERSvc
EventSystem
FastUserSwitchingCompatibility
HidServ
Ias
Iprip
Irmon
LanmanServer
LanmanWorkstation
Messenger
Netman
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
Schedule
Seclogon
SENS
Sharedaccess
SRService
Tapisrv
Themes
TrkWks
W32Time
WZCSVC
Wmi
WmdmPmSp
winmgmt
TermService
wuauserv
BITS
ShellHWDetection
helpsvc
xmlprov
wscsvc
WmdmPmSN

svchost.exe -k networkservice

svchost.exe -k NetworkService is the standard part of Windows system.
"NetworkService " is used for starting Dnscache service.
Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.

svchost.exe -k rpcss

svchost.exe -k rpcss is the standard part of Windows system.
Provides the RPC services.

systray.exe

Microsoft Corporation
System Tray loads tray icons, like the Volume Control, Keyboard, Display, etc.

tabbtnwl.dll

TabBtnWL.dll is a Microsoft Tablet PC Buttons component.
Microsoft Corporation.
Winlogon Notification component.

tpgwlnot.dll

Tpgwlnot.dll is Microsoft Tablet PC Component.

uimbus.sys

UIMBUS.SYS is related to Universal Image Mounter Controller.
UIMBUS.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

update.sys

Microsoft driver for updating system components.
It works with Windows'98 or higher.

usbohci.sys

USBOHCI.SYS is related to OHCI USB Miniport Driver.
USBOHCI.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

utilman.exe

UtilMan.exe is a Utility Manager.
UtilMan.exe enables users to check an accessibility program's status and start or stop an accessibility program.
UtilMan.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
http://www.microsoft.com/enable/training...

uwdf.exe

Uwdf.exe is related to Windows User-Mode Driver Framework.
uwdf.exe is used for additional multimedia features.
uwdf.exe is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

v86mmgr

MS-DOS memory manager.
Part of Microsoft Windows 95/98/Me.

vcache

Cache manager driver.
Part of Microsoft Windows 95/98/Me.

vcd

Communications port driver.
Part of Microsoft Windows 95/98/Me.

vcdfsd

CD-ROM filesystem driver.
Part of Microsoft Windows 95/98/Me.

vcomm

Communications port Plug and Play driver.
Part of Microsoft Windows 95/98/Me.

vcond

Console subsystem driver.
Part of Microsoft Windows 95/98/Me.

vdd

Display driver.
Part of Microsoft Windows 95/98/Me.

vdef

Default file system driver.
Part of Microsoft Windows 95/98/Me.

vdmad

Direct Memory Access controller driver.
Part of Microsoft Windows 95/98/Me.

vfat

FAT filesystem driver.
Part of Microsoft Windows 95/98/Me.

vfbackup

Floppy backup helper driver.
Part of Microsoft Windows 95/98/Me.

vfixd.vxd

Microsoft Video Phone helper

vflatd

Linear aperture video driver.
Part of Microsoft Windows 95/98/Me.

vgapnp.sys

Vgapnp.sys is related to VGA/Super VGA Video Driver.
vgapnp.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

vi_grm.exe

Driver for SIS 6326 graphics.
Required if use this chip..

viagart.vxd

VIA vxd path for VMM. Required.

viaide.sys

Viaide.sys is related to Generic PCI IDE Bus Driver.
viaide.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

vistaui.exe

VISTAUI.EXE is related to Windows Logon UI for Windows Vista.
VISTAUI.EXE is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

vkd

Keyboard Driver.
Part of Microsoft Windows 95/98/Me.

vmcpd

Math coprocessor driver.
Part of Microsoft Windows 95/98/Me.

vmd

Windows 3.1-compatible mouse driver.
Part of Microsoft Windows 95/98/Me.

vmm

Virtual Machine Manager.
Important part of the Microsoft Windows 9X.

vmm32.vxd

Status: this is the kernel of Windows 95/98/Me.
Required for Windows working

vmouse

Mouse Driver.
Part of Microsoft Windows 95/98/Me.

vmpol

System idle-time driver.
Part of Microsoft Windows 95/98/Me.

vnetbios.vxd

Microsoft Networking

vnetsup.vxd

Microsoft network client support.
Virtual device driver for Windows 95/98/Me.

vpd

Printer driver.
Part of Microsoft Windows 95/98/Me.

vpicd

Hardware interrupt manager.
Part of Microsoft Windows 95/98/Me.

vpowerd

Advanced Power Management Driver.
Part of Microsoft Windows 95/98/Me.

vredir.vxd

Microsoft Networking

vrtwd.386

Microsoft clock management

vrtwd.vxd

Microsoft clock management

vsd

Speaker driver.
Part of Microsoft Windows 95/98/Me.

vserver.vxd

This VxD is used to execute network server on your computer.
If you have a problem with this file during Windows boot, read the article how to resolve this problem:
http://support.microsoft.com/default.asp...

vshare

File sharing driver.
Part of Microsoft Windows 95/98/Me.

vtd

Timer device driver.
Part of Microsoft Windows 95/98/Me.

vtdapi

Multimedia timer driver.
Part of Microsoft Windows 95/98/Me.

vwin32

Win32 subsystem driver.
Part of Microsoft Windows 95/98/Me.

vxdldr

Dynamic device driver loader.
Part of Microsoft Windows 95/98/Me.

wbemcomn.dll

Wbemcomn.dll is related to WMI Microsoft Corporation.
fastprox.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wbemprox.dll

Wbemprox.dll is related to WMI Microsoft Corporation.
fastprox.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wbemsvc.dll

Wbemsvc.dll is related to WMI Microsoft Corporation.
fastprox.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wersvcgroup

windefend

winnotify.dll

winnotify.dll is a part of SP3 for Microsoft Windows 2000.
Manufacturer: Microsoft Corp.
www.microsoft.com

winrnr.dll

Winrnr.dll is used for LDAP name resolution.
Winrnr.dll is a part of Microsoft Windows Operation system.

winspool.dll

Winspool.dll is related to Windows Spooler Driver.
winspool.dll is a renamed version of winspool.drv.
winspool.dll is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

winspool.drv

WINSPOOL.DRV is a Windows Spooler Driver.
WINSPOOL.DRV is used for interface with the printer.
WINSPOOL.DRVis a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wlnotify.dll

Wlnotify.dll is a part of Microsoft Windows.
Wlnotify.dll is a common DLL to receive Winlogon notifications.

wsearch

wshbth.dll

Wshbth.dll is a Windows Sockets Helper DLL.
Wshbth.dll is a part of Microsoft Windows Operation system.

wshtcp.vxd

TCP/IP TDI transport support.
Supports TCP/IP-specific functionality for Microsoft TDI transport service provider for Windows Sockets 2.0

wsipx.vxd

Windows Sockets over IPX/SPX.
Supports IPX/SPX Windows Sockets 1.1�compatible transport.

wsock.vxd

Windows Sockets 1.1 transport service provider.
Kernel mode support for Windows Sockets 1.1�compatible transport service providers (currently only IPX/SPX).

wsock2.vxd

Windows Sockets 2.0 transport service provider.
Kernel mode support for Windows Sockets 2.0�compatible transport service providers (currently only TCP/IP).

wstcodec.sys

WSTCODEC.SYS is related to WDM WST Codec Driver.
WSTCODEC.SYS is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wuaueng.dll

WUAUENG.DLL is related to Microsoft Windows Update.
WUAUENG.DLL ia a part of Microsoft Windows Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

wudfrd.sys

Wudfrd.sys is related to Windows Driver Foundation - User-mode Driver Framework Reflector.
wudfrd.sys is a part of Microsoft� Windows� Operating System.
Manufacturer: Microsoft Corp.
www.microsoft.com

Quick Links: What's new?
RSS Feed
Add to AppDatabase
Ask Experts
Join forum
Links
Articles: Virus or not? SPTD####.sys
What is mc21.tmp, mc22.tmp, mc23.tmp?
Select: Necessary
Useless
At your option
Dangerous

Downlod Now!