| Status | Autorun name | Command | Description |
| U | Aero Midnight Clock.exe | Aero Midnight Clock.exe | Clock gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation |
| U | Aero Midnight RSS Reader | Aero Midnight RSS Reader.exe | RSS Reader gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation |
| U | Aero Midnight RSS Reader | AEROMI~1.EXE | RSS Reader gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation |
| U | Aero Midnight RSS Reader.exe | Aero Midnight RSS Reader.exe | RSS Reader gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation |
| U | Aero Midnight Weather | Aero Midnight Weather.exe | Weather gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation. Displays the current and forecasted weather for the selected location from AccuWeather.com |
| U | Aero Midnight Weather | AEROMI~1.EXE | Weather gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation. Displays the current and forecasted weather for the selected location from AccuWeather.com |
| U | Aero Midnight Weather.exe | Aero Midnight Weather.exe | Weather gadget included with the Aero Midnight MyColors theme supplied with Theme Manager from Stardock Corporation. Displays the current and forecasted weather for the selected location from AccuWeather.com |
| X | AERVICESN | AERVICESN.exe | Added by the RANDON-AO WORM! |
| U | AESTFltr | AESTFltr.exe | Part of the XP installation of the AudioCommander user interface for Andrea USB devices - including features such as noise cancellation, graphic equalizer, echo Cancellation and beam forming. The exact purpose of this entry is unknown at present - hence the "U" recommendation |
| N | AeXAgentLogon | AeXAgentActivate.exe | Altiris Agent transmits information about your machine for the purpose of asset management and deployment |
| ? | AeXSWDUsr | AeXSWDUsr.exe | Altiris Express NS Client Manager software. Is it required? |
| U | AEZBProc | aptezbp.exe | IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions |
| U | AFAFilter | windefault.exe | AFAFilter - internet filter software |
| X | afmsmsgs | afmsmsgs.exe | Added by the DLOADR-CUX TROJAN! |
| X | afskfask8 | fsfjasj8.exe | Added by the ONLINEG-L TROJAN! |
| N | AGEIA PhysX SysTray | TrayIcon.exe | System Tray access to display properties for AGEIA PhysX graphics cards. Unless you change your desktop resolution, etc, regularily use Control Panel -> Display Properties or right-click on the desktop |
| N | Agent | Agent.exe | Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs |
| X | Agent | alsys.exe | Added by the DREF-V VIRUS! |
| X | agent | ppl.exe | Added by the DREF-U VIRUS! |
| X | Agent Browser | [random filename] | Added by the PPdoor.M-bdr backdoor TROJAN! |
| X | Agent Explorer | [random filename] | Unidentified adware |
| X | agent.exe | agent.exe | Part of rogue security tools, including Privacy Center, Privacy Components and Control Center |
| ? | Agente | Remupd.exe | Part of an older version of Panda Antivirus. Is this an update reminder (guess because of the name), virus definition update reminder or something similar? |
| X | AgentSpyware | AgentSpyware.exe | AgentSpyware rogue spyware remover - not recommended, removal instructions here |
| X | agentsvr | agentsvr.exe | Detected by Kaspersky as Monker.A adware. Note - do not confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the Windows\Msagent folder |
| U | Agere SoftModem Messaging Applet | AGRSMMSG.exe | Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem |
| X | AgerePadClock | rundll32.exe [path] AgerePadClock.dll | Added by the SEFNIT TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "AgerePadClock.dll" file is found in %AppData%\acxmapdb |
| U | AgfaCLnk | AgfaCLnk.exe | For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive |
| Y | Agnitum Outpost | feedback.exe | Part of the error reporting mechanism for the Outpost range of security products from Agnitum Ltd - including Outpost Firewall Pro, Outpost Antivirus Pro and Outpost Security Suite Pro. Dumps the system information to a log at startup in case it's needed and exits. Located in an "Agnitum" sub-directory of %ProgramFiles% |
| Y | Agnitum Outpost | op_mon.exe | System Tray access to and notifications for the Outpost range of security products from Agnitum Ltd - including Outpost Firewall Pro, Outpost Antivirus Pro and Outpost Security Suite Pro |
| X | agp | agp32.exe | Added by the GAOBOT.SY WORM! |
| X | AGPVideo16 | agp6xdrv.exe | Added by the AUTORUN-WZ WORM! |
| U | AGRSMMSG | AGRSMMSG.exe | Installed with the drivers for internal software modems based upon Lucent/Agere Systems chipsets - required if you use the SoftModem Assistant to configure the modem |
| N | AGSatellite | AGSatellite.exe | Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs |
| Y | Ahead Software AG InCD | InCD.exe | InCD packet writing utility which allows the user to format CDs/DVDs so that they can be used by simply dragging and dropping files to the disk or by saving to disk from within other applications. Included with Nero digital media suites (CD/DVD burning, authoring, etc) until version 9 (optional install for versions 7 thru 9) and now available as a separate download. If you prefer not to use InCD (due to the obvious alternatives such as USB flash drives) you can disable it |
| N | Ahead Software Gmbh NeroCheck | NeroCheck.exe | Included with some Nero digital media suites (CD/DVD burning, authoring, etc). Looks for known driver conflicts with Nero software and lists these in a log file to help the user determine what may be causing a problem. This is therefore not required if the Nero software is working correctly |
| U | ahfp | ahfp.exe | Advanced Hide Folders - "is powerful security program that allows you to hide any number of files or folders. It is very useful to keep your personal data from others". Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP |
| U | ahfprog | ahfp.exe | Advanced Hide Folders - "is powerful security program that allows you to hide any number of files or folders. It is very useful to keep your personal data from others". Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP |
| Y | AHNSD | AhnSD.exe | AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis |
| ? | AHNUE | AHNUE.exe | ?? |
| X | AhorreMemoria | SysRep.exe | AhorreMemoria rogue system error and cleaning utility - not recommended. A member of the ErrClean family |
| X | ahost | ahost.exe | Added by a variant of the SDBOT WORM! |
| N | AHQInit | ahqinit.exe | Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required |
| X | Ahst | iebs.exe | PurityScan adware |
| X | AHU | [path to worm] | Added by the ANACON-B WORM! |
| X | AHU | ANACON.EXE | Added by the NACO.A WORM! |
| X | ahui32.exe | ahui32.exe | Added by the CERTIF-M TROJAN! |
| U | Ai Gear Help | GearHelp.exe | Included with some ASUS motherboards (such as the Maximus Extreme & Striker II Extreme), AI Gear "is a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features." Provides system performance profiles to adjust CPU frequency and voltage for different computing needs. Part of AI Suite |
| U | Ai Nap | AiNap.exe | Part of the AI Suite system management utility included with some ASUS motherboards. "AI Nap allows you to minimize the power consumption of your computer whenever you are away. Enable this feature for minimum power consumption and quieter system operation" |
| U | Ai Quicker Help | AsRc.exe | ASUS DH Remote media portal launcher for their Digital Home range of motherboards that are designed for users to control the computer at a distance away, such as the M2N DH. "ASUS DH Remote is a convenient PC remote controller that gives users unprecedented control over their PCs from the comfort of their couches" |
| X | Aica | tuaa.exe | PurityScan adware |
| X | Aida | ttuh.exe | PurityScan adware |
| X | Aida | eetu.exe | PurityScan adware |
| ? | AidemHotKey | DVMAIN.EXE | Keyboard related |
| ? | AidemHotKey | KEYAPP.EXE | Keyboard related |
| U | aiepk | aiepk2.exe | Another IE Popup Killer - pop-up stopper |
| N | AIM | aim.exe | AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs |
| U | AIM | AIM+.exe | AIM plus - a free add-on to AOL's Instant Messenger for Windows from Big-O Software |
| X | AIM Instant Message Cookies | [random filename] | Added by the RBOT-AFV WORM! |
| N | AIM Logger | AIMLogger.exe | AIM Logger - saves AIM (AOL Instant Messenger) conversations to log files. Can be started when you are using AIM |
| X | Aim Plugin | aimplugin.exe | Added by the GUAP-F WORM! |
| X | Aim Quick Start | Aim.exe | Added by the FORBOT-BB WORM! Note - this is not the popular AOL Instant Messenger utility |
| X | AIM reminder | AIM reminder.exe | Added by the BUDDY.E TROJAN! |
| N | Aim6 | AOLLaunch.exe | AOL Instant Messenger - start it when you want to use it |
| N | Aim6 | aim6.exe | AOL Instant Messenger - start it when you want to use it |
| X | AIM95 Startup | aim95.exe | Added by the AGOBOT.AEE WORM! |
| X | aimaol lptt01 | aimaol.exe | RapidBlaster variant (in a "aimaol" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| X | aimaol ml097e | aimaol.exe | RapidBlaster variant (in a "aimaol" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| U | aimb.exe" -h | aimb.exe | IMSufSentinel is a spy program which can record IM conversations, log keystrokes, record URLs visited, and take screenshots. If you didn't install this yourself remove it |
| N | AimingClick | AimingClick.exe | AimingClick from AimingTech. Web searching tool. Available via Start -> Programs |
| U | AimMonitor | AimMonitor.exe | AIM Monitor Sniffer surveillance software for the AIM instant messenger. Uninstall this software unless you put it there yourself |
| U | AIMPro | aimpro.exe | AIM Pro - secure instant messaging, video conferencing, on-line meetings and desktop and file sharing |
| N | AIMster | ?? | Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs |
| N | AIMWDInstall | AIMWDInstall.exe | Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| U | AiNap | AiNap.exe | Part of the AI Suite system management utility included with some ASUS motherboards. "AI Nap allows you to minimize the power consumption of your computer whenever you are away. Enable this feature for minimum power consumption and quieter system operation" |
| U | AiNap.exe | AiNap.exe | Part of the AI Suite system management utility included with some ASUS motherboards. "AI Nap allows you to minimize the power consumption of your computer whenever you are away. Enable this feature for minimum power consumption and quieter system operation" |
| Y | Aiptek Graphics Tablet (USB) | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| ? | Air2Data | a2dservice.exe | Related to the Air2Data Wireless HISA (High-Speed Internet Access) service. What does it do and is it required? |
| X | aircity | aircity.exe | Related to "Prutect" malware from e2Give |
| Y | AirGCFG | AirGCFG.exe | Driver and configuration utility for a number of wireless routers and adapters from D-Link |
| Y | AirNCFG | AirNCFG.exe | Driver and configuration utility for a number of wireless routers and adapters from D-Link |
| Y | AirPlusCFG | AirPlusCFG.exe | Driver and configuration utility for a number of wireless routers and adapters from D-Link |
| U | AirPort Base Station Agent | APAgent.exe | Airport Base Station Agent utility for Apple's AirPort wi-fi basestations. "Wireless solution for home, school, and business. As it blankets your space with a blazing-fast, secure wireless network, it opens up a world of possibilities for home entertainment, backups, printing, and more" |
| U | AJC Active Backup | AJCActBk.exe | AJC Active Backup from AJC Software - "Instantly backup files you change on your PC and keep multiple versions to undo" |
| X | AKEYNAME | WinServ.exe | Added by the EVILBOT.C TROJAN! |
| U | akeys | akeys.exe | "Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action" |
| X | akgkagaksad9 | fsakfask9.exe | Added by the ONLINEG-M TROJAN! |
| U | AKiller | akiller.exe | Advertising Killer - popup stopper |
| U | ala | ala.exe | Access Lock - "an easy-to-use system-tray security utility you can use to secure your desktop when you are away from your computer. Just configure the program, define a password and double click the Access Lock system-tray icon every time you need to disable and hide your desktop." The same program as 1 Click & Lock and Access Controller (and maybe others) - the same file for the same version is used by all programs but the filename is different in each case |
| U | ala.exe | ala.exe | Access Lock - "an easy-to-use system-tray security utility you can use to secure your desktop when you are away from your computer. Just configure the program, define a password and double click the Access Lock system-tray icon every time you need to disable and hide your desktop." The same program as 1 Click & Lock and Access Controller (and maybe others) - the same file for the same version is used by all programs but the filename is different in each case |
| U | Alarm Manager | Alarmapp.exe | Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop |
| ? | AlarmWatcher | AlarmWatcher.exe | Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required? |
| Y | Alaunch | Alaunch | Part of Acer eRecovery - "a powerful utility that does away with the need for recovery disks provided by the manufacturer, and also acts as a versatile standalone backup and recovery manager". This entry isn't normally running but once eRecovery starts it's used to re-install the software included with the system |
| N | Album Fast Start | ABMTSR.EXE | Scanner software, not required for scanner to work |
| ? | AlcFDMonitor | ALCFDRTM.EXE | RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
| ? | ALCFDRTM16 | ALCFDRTM16.com | RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup? |
| X | Alchem | Alchem.exe | ClickAlchemy adware |
| U | Alcmtr | ALCMTR.EXE | Realtek Azalia Audio - Event Monitor, installed with the XP/2K drivers for on-board Realtek HD audio codecs. Some users believe that Realtek uses this file in order to gather data about the customer but it's exact purpose is unknown and it doesn't run on an ALC885 based test system or try to access the internet. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation |
| X | Alcmtr | Malware Doctor.exe | MalwareDoc rogue security software - not recommended, removal instructions here |
| N | Alcohol | Alcohol.exe | Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. Alcohol 120% includes burning capabilities |
