Hi 123art456-ga,
Below I have provided a brief summary of each of the processes you are
running on your computer. If you need any additional information
about the processes, you can rely on the links I have provided for
you.
WUpdater: This is a spyware/adware program. You SHOULD remove it as
soon as possible.
Additional details and removal instructions can be found here:
"Google Search for wupudater.exe"
://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=wupdater.exe&btnG=Google+Search
lexplore: This is a file that was added by the SODABOT virus. You
SHOULD remove it as soon as possible.
Additional details and removal instructions can be found here:
"Norton SecurityReponse - W32.HLLW.Sodabot"
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.sodabot.html
Ymsgr-trayy: While I could not confirm what this program is
completely, it appears to be part of Yahoo's Instant Messaging
program, Yahoo Messenger. It is harmless, however you can remove it
if you have no use for it.
Bartshel: Installed by People PC's dial-up internet service. If you
do not use People PC, you may safely remove it.
"Task List Programs"
http://www.answersthatwork.com/Tasklist_pages/tasklist_b.htm
Ppshared: I could not definitely determine what the purpose of this
file is. However it is not a system process, so it can safely be
deleted. At the same time, it is not a malicious program, and may be
left running safely.
Ueo60.exe: I could not definitely determine what the purpose of this
file is. However it is not a system process, so it can safely be
deleted. At the same time, it is not a malicious program, and may be
left running safely.
Em-Exec: This is a driver for Logitech Mice. If you are not using a
Logitech Mouse, you may safely delete it.
"Windows XP Services - Em_Exec.exe"
http://www.coordinated.co.za/discussions/viewtopic.php?t=103
Uptodate: This is a free program that blocks popups, but at the same
time displays it's own advertisements. You SHOULD remove this
software, as it is considered Adware.
"Uptodate - uptodate.exe - Process Information"
http://www.liutilities.com/products/wintaskspro/processlibrary/uptodate/
Rundll16: This is a program installed by the Sdbot.F virus, a backdoor
trojan. This may be related to the lexplore process.
"Rundll16 - rundll16.exe - Process Information"
http://www.liutilities.com/products/wintaskspro/processlibrary/rundll16/
2if: I could not definitely determine what the purpose of this file
is. However it is not a system process, so it can safely be deleted.
At the same time, it is not a malicious program, and may be left
running safely.
Wmexe: This process contains drivers for your modem. You should keep this.
"US Robotics Modem Drivers"
http://www.modem-drivers.com/drivers/50/50162.htm
Rnaapp: Windows software to manage dialup connections. You should keep this.
"Rnaapp - rnaapp.exe - Process Information"
http://www.liutilities.com/products/wintaskspro/processlibrary/rnaapp/
Rundll32: This is a system process that loads DLLs into memory. This
is a critical system process that SHOULD NOT be deleted.
"Rundll32 - rundll32.exe - Process Information"
http://www.liutilities.com/products/wintaskspro/processlibrary/rundll32/
SEARCH STRATEGY:
I entered the process names you gave me, followed by '.exe' into
Google. The "exe" narrows the results by denoting that the process is
a program.
If you have any questions, feel free to contact me,
rmn-ga |