| Name | Status | Filename | Description |
|---|
| CamMonitor (uCamMonitor) | L | uCamMonitor.exe | Related to Cam_Monitor from Arcsoft Inc. Note: Located in \%Program Files%\ArcSoft\Magic-i Visual Effects\ |
| CanerServer | X | caner.exe | Troj/Hupigon-ES |
| Canon BJ Memory Card Manager (Bjmcmng) | L | Bjmcmng.exe | Canon Bubblejet Memory Card Utility |
| Canon Camera Access Library 8 (CCALib8) | L | CALMAIN.exe | Canon digital camera software that provides additional configuration options for the devices. |
| Canon Driver Information Assist Service | L | CnxDIAS.exe | CANON
Driver Information Assist Core Module. This file should be found in the Program Files\Canon\DIAS folder. |
Canon PIXMA iP6000D Memory Card Manager
(PDUiP6000DMemCrdMgr) | L | PDUiP6000DMemCrdMgr.exe | Related to Canon PIXMA iP6000D Bubble Jet printer |
| Capture Device Service | L | DevSvc.exe | Related to Capture_Device InterVideo Service. Note: Located in C:\Program Files\Common Files\InterVideo\ |
| Capture Service (CaptureService) | L | CaptureService.exe | Related to Impact_360 from Witness Systems, Inc. Workforce management. Note: Located in C:\WINDOWS\system32\DirectX\ |
| Carbon Copy Scheduler (CarbonCopyScheduler) | L | schdsrvc.exe | Related to Alteris services. http://www.altiris.com |
| CarboniteService | L | carboniteservice.exe | Related to Carbonite_online_backup automatically backs up all the the files on your computer. |
| Card Adapter (NETDown) | X | smss.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This is not the legitimate Windows Process smss.exe. (Which is found in the System32 folder.) This worm/trojan file (smss.exe) is found in the Windows or Winnt folder. |
| CaReTaKeR-CT NetMgr 1.2.1 (sfmgr) | L | sfmgr.exe | Related to Brazil_r/s_CaReTaKeR-CT NetMgr. Brazil r/s is the industry standard for high-end quality, flexibility, reliability, and artist-friendly workflow in 3ds Max. Note: Located in \%ROOT%\sfmgr\ |
| CbEvtSvc | X | CbEvtSvc.exe | Identified by Kaspersky as a variant of the Trojan-Downloader.Win32.Agent.jhj Trojan. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| ccEvtMgr | L | ccSvcHst.exe | Related to LiveUpdate_Notice_Service from Symantec |
| CcEvtSvc | X | CcEvtSvc.exe | Identified by Kaspersky as a variant of the Trojan.Win32.Agent.elr malware. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. |
| ccSetMgr | L | ccSvcHst.exe | Related to LiveUpdate_Notice_Service from Symantec |
| CD-ROM drive | X | Qtime.exe | Identified by Kaspersky as a variant of the Backdoor.Win32.SdBot.aad worm and IRC backdoor. Note: located in \%WINDIR%\ Note: Use SDFix under supervision. |
| cdmonsvc32 | X | cmmonsvc32.exe | Worm.Opanki_Variant.Process Note: Located in %windir% |
| Cdsys (Cdsys) | X | cdcd.sys | Added by the Troj/Agent-IA
TROJAN!
Note: This trojan file is found in the System32 folder.
|
CE-Infosys Security System (CE-Infosys Security
Service) | ? | ceisvc.exe | Seems to be legit, belongs to this company Ce-infosys_suite
It will be left as unknown until more is found out about the company. |
| CeEPwrSvc | L | CeEPwrSvc.exe | Related to TOSHIBA and COMPAL ELECTRONIC INC. |
| CelInDrv | X | CelInDriver.sys | Win32/Agent.ABF Note:Located in %system% Read the link, collects sensitive information |
| CentennialClientAgent | L | CAgent32.exe | Related to Centennial UK Limited - http://www.centennial.co.uk/ |
| CentennialIPTransferAgent | L | xferwan.exe | Related to Centennial UK Limited - http://www.centennial.co.uk/ |
| Cepstral License Server | L | CepstralLicSrv.exe | Related to Cepstral_License Server from Sepstral, LLC Note: Located in \%Program Files%\Cepstral\bin\ |
| Certificate Propagation (CertPropSvc) | L | svchost.exe -k netsvcs | Part of Windows Vista
Note:Located in C:\%WINDIR%\System32 |
| CesarFTP FTP Server (CesarFTP) | L | server.exe | Related to CesarFTP from ACLogic. FTP server. Note: Located in \%Program Files%\CesarFTP\ |
| cFosSpeed System Service (cFosSpeedS) | L | spd.exe | cFos_Software
Internet acceleration program related. Note: May be necessary for the software to work properly.
|
| change me please (VIRUS) | X | sysdat.exe | Added by the W32/Tilebot-L
WORM!
|
| Changed me (Patch) | X | systemz32.exe | W32/Tilebot-JD Read the link, allows remote access and uses rootkit stealth |
| ChanService (ChanSirv) | X | 2pack.exe | Identified as a variant of Backdoor.Win32.SpyBoter.fb Note: located in \%WINDIR%\ |
| Charter High-Speed Security Suite | O | SERVIC~1.EXE | Related to F-Secure, Backweb application |
| chckntfs | X | chckntfs.exe | Added by the W32/Tilebot-EF WORM! Note: This worm\trojan is located in C:\%WINDIR%\ |
| Check Point SecuRemote Service (SR_Service) | L | SR_Service.exe | Related to Check_Point_Software Technologies Note: Located in C:\Program Files\CheckPoint\ |
| Check Point SecuRemote WatchDog (SR_WatchDog) | L | SR_WatchDog.exe | Related to Check_Point Software Technologies Note: Located in C:\Program Files\CheckPoint\SecuRemote\bin\
|
| Check Point SSL Network Extender (cpextender) | L | slimsvc.exe | Related to SSL_Network_Extender from Check Point Tech. Note: Located in \%Program Files%\CheckPoint\SSL Network Extender\ |
| chkext(chkext) (chkext) | X | chkext.exe | Added by the W32/Sdbot-CRW WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Chong3 Me (MlCR0SOFTS UPDATE) | X | N0RTAN.EXE | Added by the SDBOT.CNM
WORM!
Read the link, rootkit type stealth involved.
|
| Chong3 Me (MlCR0SOFTS UPDATEe) | X | lexplarer.exe | Added by the SDBOT.CWB
WORM!
Read the link, rootkit type stealth involved.
|
| cics.REGION1 | L | cicssvc.exe | Related to IBM Corp. |
| cics.REGION2 | L | cicssvc.exe | Related to IBM Corp. |
| cicssfs.SCMMC223 | L | cicssfssvc.exe | Related to IBM Corp. |
| cidaemon | L | .exe | Microsoft Indexing Service filter daemon |
| cidaemon | L | cidaemon.exe | Microsoft Indexing Service filter daemon |
| Cisco Configuration Service (CCS) | L | ccs.exe | Related to Related to Cisco_Systems Note: Located in C:\WINDOWS\system32\ |
| Cisco Systems, Inc. STC Agent (STCAgent) | L | agent.exe | Related to Cisco Systems inc. SSL VPN Client, Note: located in C:\Program Files\Cisco Systems\SSL VPN Client\ |
| Cisco Systems, Inc. VPN Service (CVPND) | L | cvpnd.exe | part of Cisco VPN |
| Citrix CPU Utilization Mgmt/CPU Rebalancer (CTXCPUBal) | L | ctxcpubal.exe | Related to Citrix MetaFrame |
| Citrix CPU Utilization Mgmt/Resource Mgmt (ctxcpuSched) | L | ctxcpusched.exe | Related to Citrix MetaFrame |
Citrix CPU Utilization Mgmt/User-Session Sync
(CTXCPUUsync) | L | ctxcpuusync.exe | Related to Citrix MetaFrame |
