| Status | Autorun name | Command | Description |
| U | DesktopX Widget | Silica To-Do List.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Unit Converter.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Volume Control.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Weather.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Word of the Day.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | SILICA~1.EXE | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Calendar.exe" is shown as "SILICA~1.EXE" |
| U | DesktopX Widget | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Clock.exe" is shown as "SILICA~2.EXE" |
| U | DesktopX Widget | SILICA~3.EXE | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. This is the Vista/7 MSConfig entry where "Silica Picture Frame.exe" is shown as "SILICA~3.EXE" |
| U | DesktopX Widget | SILICA~4.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. This is the Vista/7 MSConfig entry where "Silica Search.exe" is shown as "SILICA~4.EXE" |
| U | DesktopX Widget | Welcome.exe | DesktopX Welcome widget included with the DesktopX desktop utility from Stardock Corporation. Used to load/create widgets, objects and different desktops. Once started, Welcome.exe loads a file called "DXWidget.exe" and exits |
| U | DesktopX Widget | Aero Gmail.exe | Aero Gmail widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Aero Gmail.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | AEROGM~1.EXE | Aero Gmail widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Aero Gmail.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 entry where "Aero Gmail.exe" is shown as "AEROGM~1.EXE" |
| U | DesktopX Widget | Clear meter bar .exe | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | CLEARM~1.EXE | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 entry where "Clear meter bar .exe" is shown as "CLEARM~1.EXE" |
| U | DesktopX Widget | Core Calendar.exe | Core Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Core Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Core Weather.exe | Core Weather widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days from The Weather Channel for the selected location on the desktop. Once started, Core Weather.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | CORECA~1.EXE | Core Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Core Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Core Calendar.exe" is shown as "CORECA~1.EXE" |
| U | DesktopX Widget | COREWE~1.EXE | Core Weather widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days from The Weather Channel for the selected location on the desktop. Once started, Core Weather.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Core Weather.exe" is shown as "COREWE~1.EXE" |
| U | DesktopX Widget | DIGITA~1.EXE | DigitalMETER widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop. Once started, DigitalMETER.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "DigitalMETER.exe" is shown as "DIGITA~1.EXE" |
| U | DesktopX Widget | DigitalMETER.exe | DigitalMETER widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop. Once started, DigitalMETER.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Glassy Calculator II.exe | Glassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Glassy Calendar.exe | Glassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | GLASSY~1.EXE | Glassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Glassy Calculator II.exe" is shown as "GLASSY~1.EXE" |
| U | DesktopX Widget | GLASSY~2.EXE | Glassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Glassy Calendar.exe" is shown as "GLASSY~2.EXE" |
| U | DesktopX Widget | Gmail Checker.exe | Gmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | GMAILC~1.EXE | Gmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Gmail Checker.exe" is shown as "GMAILC~1.EXE" |
| U | DesktopX Widget | MOONPH~1.EXE | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "MoonPhase.exe" is shown as "MOONPH~1.EXE" |
| U | DesktopX Widget | MoonPhase.exe | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | WEATHE~1.EXE | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "WeatherAni.exe" is shown as "WEATHE~1.EXE" |
| U | DesktopX Widget | WeatherAni.exe | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| N | DesktopX.exe | DesktopX.exe | System Tray access to DesktopX from Stardock Corporation - "is a desktop utility designed to enable users to build their own desktops, widgets, and gadgets." Note - if this entry is disabled and DesktopX has been configured to load any desktops, objects or widgets they will still load, along with DesktopX. Also part of the Object Desktop suite |
| N | deskup | deskup.exe | Adds Iomega Zip drive icons to the desktop |
| U | desp2k | desp2k.exe | Part of the Turbo Analyzer tool from LightComm Brazil Telecom that analyzes and corrects ADSL configurations |
| X | destroy11 | destroy11.exe | Added by the DELF-KO TROJAN! |
| X | destroyb11 | destroyb11.exe | Added by the DELF-KO TROJAN! |
| U | Detect | iDetect.exe | iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled |
| ? | detect | turbodetect.exe | ?? |
| N | Detector | detector.exe | USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software |
| U | DetectorApp | DetectorApp.exe | Related to Roxio MyDVD (was Sonic) DVD authoring software |
| X | Deus Cleaner | DCleaner.exe | Deus Cleaner rogue system cleaner utility - not recommended |
| X | Dev Gnu Cpp | devcpp.exe | Added by the RBOT-RU WORM! |
| ? | DevconDefaultDB | READREG | Appears to be related to older Creative Soundblaster soundcards |
| X | Development Environment | devenv.exe | Added by the DELBOT-AH WORM! |
| U | DEventAgent | eventagt.exe | DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this |
| X | devenv | smvss.exe | Added by the DEDLER-G TROJAN! |
| X | Device Configuration Loader | msdvc32.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| U | Device Detector | DevDetect.exe | ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
| N | Device Detector 2 | DevDtct2.exe | Installed by various Olympus products, this program detects the active connection of a speech device (voice recorder, etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a "high" priority level which can negatively impact system resources |
| X | Device Hardware | devicehnd.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device IO System | deviceio.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Management | wnsystem.exe | Added by the AGOBOT-LH WORM! |
| X | Device Manager | wfxmgr.exe | Added by the RBOT.AJU WORM! |
| X | Device Security | dvcsecure.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Security Driver | devicesec.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Security Manager | dvcsecure.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| U | DeviceDiscovery | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products |
| X | DevicePath | Proyecto1.exe | Added by the GRUEL WORM! |
| X | DevicePath | Root.exe | Added by the GRUEL WORM! |
| U | Devices | olesvr.exe | Salfeld Child Control - parental control software |
| X | Devicewin | [path to trojan] | Added by the BANKER-AEV TROJAN! |
| U | devldr16 | devldr16.exe | Associated with some Creative Labs sound cards in Win98/Me. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| U | devldr16.exe | devldr16.exe | Associated with some Creative Labs sound cards in Win98/Me. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| ? | Devlog | devlog.exe | Apparently mainboard/chipset related, by a French company called AS Media - what exactly is it, and is it required |
| X | dfgfdgrergd | [path to backdoor] | Added by the RANKY.CK BACKDOOR! |
| X | DfqwSfS | ffsqsd.exe | Added by the SDBOT-SH WORM! |
| ? | DGJM | DGJM.exe | ?? |
| X | dgtstart | dgtstart.exe | DigitalNames.g adware |
| U | dguard | dguard.exe | Download guard function of eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| X | DHCP | smss.exe | Added by the WINSPY.88 TROJAN! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display |
| X | DHCP Server | regsvr.exe | Added by the RBOT-PR WORM! |
| X | DHCP32 | services.exe | Added by the WINSPY.AG TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\display |
| Y | dhcpagnt | dhcpagnt.exe | Intel DSL modem driver - leave enabled or you'll have to re-install the drivers |
| X | DhcpCep | PYJJKIME.exe | Added by the AGENT-BXQ TROJAN! |
| ? | DHNUXB | DHNUXB.exe | ?? |
| X | DI2 | [path to file] | BroadcastPC adware |
| N | diagent | diagent.exe | System Tray access for Creative Diagnostics for the Creative SoundBlaster series soundcards. Available via Start -> Programs |
| X | Diagnostic | diagnostic.exe | Added by the ALPHA-C TROJAN! |
| X | Diagnostic Agent | diagent.exe | Added by the AGOBOT-CW WORM! |
| X | Diagnostic Manager | [path to trojan] | Added by the AGENT-JPS TROJAN! |
| X | DiagnosticConfiguration | diagcfg.exe | Added by the GWGIRL BACKDOOR! |
| X | Dial22 | dlm.exe | Adult content dialler |
| X | Dial33 | dlm.exe | Adult content dialler |
| X | Dialer | rundll32.exe MSA32CHK.dll,Reg | MatrixDialer/Lanzar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA32CHK.dll" file is located in %System% |
| U | Dialer Control | dc.exe | Dialer-Control. Detects and protects from premium rate adult content diallers |
| U | Dialer Detect | dd.exe | DialerDetect detects stealth installed premium rate diallers, and sounds the alarm when such a connection is being installed without you knowing it |
| U | Dialgo SDK | PhoneAnswer.exe | Dialgo Wave Modem ActiveX - "Telephone Answering Machine for scripting your own professional call center business scripts using a voice modem. Features Caller-ID, Wave Playback, Wave Recording, Digit Monitoring, POP3 e-mail Manipulation, Speech Recognition and Synthesis" |
| X | DialNet | mxt32.exe | Adult content dialler |
| N | Dialog Box Assistant | OSDEx.exe | Dialog Box Assistant from Duality Software. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders |
| N | Dialog Helper | PDDLGHLP.EXE | Dialog Helper from PowerDesk Pro by Ontrack. Helps with the standard Open and Save As dialog boxes by showing recently used files and folders. Available via Start -> Programs |
| X | DialUp Network Application | Rnaap.exe | Added by a variant of the SDBOT WORM! |
| X | Diam prlaer | oqedrhg.exe | Added by the SDBOT-DEU WORM! |
| ? | Diamond Delivery Center | DeliveryCenter.exe | ?? |
| U | Diamondback | razerhid.exe | Razer Diamondback 3G gaming mouse driver - required if you use the additional features and programmed keys/macros |
| ? | Diamondview | Diamondview.exe | Manulife Financial Insurance program. Is it required at startup? |
| X | DIECOX | csrss.exe | Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! |
| X | Diesel | Recalculate.exe | Added by the LAZAR TROJAN! |
| U | DietK | DietK.exe | Diet Kazaa add-on for Kazaa Media Desktop - "removes all adware and popups, built in Download Accelerator, makes searches faster and helps produce more results" |
| U | DigiCell | DigiCell.exe | MSI DigiCell - "the most useful and powerful utility that MSI has spent much research and efforts to develop, helps users to monitor and configure all the integrated peripherals of the system, such as audio program, power management, MP3 files management and communication / 802.11g WLAN settings. Moreover, with this unique utility, you will be able to activate the MSI well-known features, Live Update and Core Center" |
| X | DigiD | DigitalSound.exe | Adware downloader |
| N | DigiGuide | CLIENT.EXE | TV guide and reminder |