| Type |
Caption |
Section |
File name |
Description |
 |
SQConfigChecker |
|
cc.exe |
Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants Read more |
 |
SQUpdatesChecker |
|
uc.exe |
Xupiter SQWire variant - adware and homepage hijacker. Note - cannot be removed via the Xupiter website in the same way as other Xupiter variants Read more |
 |
SSBkgdUpdate |
|
SSBkgdupdate.exe |
ScanSoft OmniPage auto updater. Can be disabled using the main program's options |
 |
SSPrnAgent |
HKEY_LM\Run |
SPrnAgent.exe |
OmniPage Pro 14.0, ScanSoft, Inc.. Read more |
 |
Start |
|
windows.vbs |
Homepage hijacker |
 |
start page |
|
svcnt32.exe |
Homepage hijacker, also detected as Trojan-Downloader.Win32.Delf.ks |
 |
STARTPAGE |
|
start1.exe |
NoSpy.org - prevents spyware from changing your startpage and other browser properties. The start1.exe file is located in a NOSPY.ORG folder Read more |
 |
startpage |
|
startpage.exe |
Browser hijacker - redirecting to pages2start.com |
 |
Subtract the Ads |
|
AdSub.exe |
Removes adverts from web pages. Although useful - not required |
 |
SurfStream |
|
SurfStream.exe |
Conceiva "SurfStream lets you surf the Web faster. It contains a fully featured proxy server that lets you surf the Web significantly faster. It also blocks all pop-up windows and banner ads from Web pages. An intelligent tune-up tool automatically analyzes and optimizes your computer's Internet connection and TCP/IP settings" |
 |
svchost |
|
Rundll16.exe |
Added by the Troj/StartPa-PB TROJAN! Redirecting of browser start & search pages will result. DBG.EXE and RUNDLL.EXE are copied to the Windows folder to initiate the actions of this trojan. Read more |
 |
SVCHOST |
|
svchost.exe |
System1060 homepage hi-jacker. Found in a Windows\System1060 directory. Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Read more |
 |
SWCaller |
|
SWcaller.exe |
Homepage hijacker - see here Read more |
 |
SWCaller |
|
Swcaller2.exe |
Homepage hijacker - see here Read more |
 |
Switchboard.com Toolbar |
|
AtHoc.exe |
Toolbar for the on-line version of Yellow Pages in the US - Switchboard.com Read more |
 |
Sysctl Desktop Handler |
|
systr.dll |
This file will hijack Internet Explorer to show the start page of jimbutt.com or globolook.com.br /br /Uses CLSID: b{12345678-0000-0010-8000-00AAFF6D2EA4}/b. |
 |
sysPnP |
|
bootconf.exe |
Homepage hijacker, redirecting to coolwwwsearch.com; see for example here Read more |
 |
SysSearch |
|
Regedit.exe -s [path] pcsearch.reg |
Added by the StartPage-FN browser hijacker Read more |
 |
system |
|
regedit -s system.dll |
Homepage hijacker |
 |
SystemExplorer |
|
explore.exe |
Homepage hijacker - file located in the "Services" folder in Common Files |