Common Spyware Application Processes
In the past we have covered what are the essential processes needed to run Windows which is useful for allowing you to spot adware/spyware and viruses because you know which ones should be running and which ones shouldnt. We have compiled a list for your convenience of common Adware/Spyware applications and the name of the processes they run allowing you to identify them without the use of scanners.
If any of those processes are spotted on a PC, they should be removed immediately. Luckily alot of them have an install program in Add/Remove Programs under Control Panel.
For example, if you find mwsoemon.exe on your/your clients computer you should look for “MyWebSearch Toolbar” in the Add/Remove Programs list. If it is not there it can be removed with applications such as Hijack This!.
| Process Name | Adware/Spyware Product |
| mwsoemon.exe | MyWebSearch toolbar |
| mediaaccess.exe | WindUpdates.com |
| mediaacck.exe | WindUpdates.com |
| wtoolsa.exe | HuntBar |
| wsup.exe | HuntBar spyware |
| cxtpls.exe | AproposMedia |
| autoupdate.exe | Apropos Media adware |
| wtoolss.exe | HuntBar |
| istsvc.exe | IST adware/hijacker |
| optimize.exe | MoneyTree Dialer |
| gmt.exe | Gator adware |
| cmesys.exe | Gator adware |
| tbps.exe | Neo Toolbar |
| pib.exe | PIB Toolbar |
| gah95on6.exe | ShopAtHome Select |
| mediapass.exe | WindUpdates.com |
| mediapassk.exe | WindUpdates.com |
| tbpssvc.exe | Neo Toolbar |
| bargains.exe | Bargain Buddy |
| save.exe | WhenU SaveNow adware |
| salm.exe | 180Search Assistant |
| rk.exe | Marketscore "monitoring" |
| webrebates0.exe | TopRebates hijacker/adware |
| webrebates1.exe | TopRebates hijacker/adware |
| vmss.exe | Delfin Media Viewer |
Session expired
Please log in again. The login page will open in a new tab. After logging in you can close it and return to this page.
We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.
The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site.
We also use third-party cookies that help us analyse how you use this website, store your preferences, and provide the content and marketing materials that are relevant to you. These cookies will only be stored in your browser with your prior consent.
You can choose to enable or disable some or all of these cookies but disabling some of them may affect your browsing experience.
We use third-party cookies that help us analyse how you use this website, store your preferences, and provide the content and marketing materials that are relevant to you. However, you can opt out of these cookies by checking "Do Not Sell or Share My Personal Information" and clicking the "Save My Preferences" button. Once you opt out, you can opt in again at any time by unchecking "Do Not Sell or Share My Personal Information" and clicking the "Save My Preferences" button.
Your opt-out settings for this website have been respected since we detected a Global Privacy Control signal from your browser and, therefore, you cannot change this setting.
i have the my web search toolbar, it dosent do anything, 4 viruses or contain any!!
Another spyware application process is foool.exe. This spyware hide itself by using the explorer.exe name.
the names explorer.dll, explorer.ex_ and regsvc32x.dll are all spyware/adware, as well as imnotspyware.ex_ and apacheservconnect.exe are spyware, and i’ve tracked all connections from realplay.exe and several datasends are my web history. so realplayer and realone are spyware. i also suspect the government is involved with realplayer’s spying as it atttempted to send my entire browsing history to rp395.gov which is nonexistent in the browser…