Given the popularity of my first post in this area, here is a second list of Windows processes that recently needed killing to bring a client's PC back to life...First, here's the obligatory disclaimer: Your results may vary...killing processes may screw up your system...you've been warned.
- CxtPls.exe – In a folder (C:\program files\CxtPls) along with CxtPls.dll and CxtPls.htm files. Also found CXTPLS.EXE-254B7FF2.pf. This one had an ‘Uninstall’ file that removed everything but the dll and another file called ProxyStub.dll
- Xdo26uwL.exe – found only XFO26UWL.EXE-2EBD47A6.pf in C:\windows\prefetch
- KagQn.exe -
- Sain.exe – located in C:\windows\system32 – likely a ‘Search Assistant’ from 180solutions. Related Links: here and here.
- TBPS.exe and TBPSSvc.exe – In the C:\Program Files\Toolbar folder…also found TBPS.EXE-2EE5A9EB.pf in C:\windows\prefetch. Related Link: here
- Support.exe - support.exe is a process which is registered as the W32.Akosw@mm virus. This virus comes with it's own SMTP engine which means it has the ability to send e-mails regardless of user interaction, and does so. It is a registered security risk and should be removed immediately
- PIB.exe - PIB.exe is an advertising program. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.
- dxmprxy.exe – located in C:\windows\system32
- fauutils.exe – located in C:\windows\system32
- EbatesMoeMoneyMaker1.exe
- dhbrwsr – located in C:\windows – probably adware - Related Links: here and here
Definitions for Support.exe and PIB.exe are taken directly from www.processlibrary.com, an excellent online (and free!) resource.
Many of the above processes couldn't be killed directly in Task Manager (because they'd pop right back as soon as I killed them). I use SysInternals Process Explorer to delete the entire process tree, and it worked great! Another warning, don't muck around with Process Explorer if you don't know what you're doing, bad things can happen.