| Status | Autorun name | Command | Description |
| X | drvrmanager | drvrquery32.exe | Added by the BOOHOO WORM! |
| X | DrvStart | HPMedia.exe | Added by the BANCBAN-QE TROJAN! |
| X | drvsys.exe | drvsys.exe | Added by the BEAGLE.W WORM! |
| X | drvsyskit | hidr.exe | Added by the BAGLE.HR WORM! |
| X | drvsyskit | hldrrr.exe | Added by the BAGLE.QU TROJAN! |
| X | drvupd | rundll32 ..drvupd.inf | Hijacker - drvupd.inf file installs a "searchforge.com" hijack |
| X | DrWatson | drwatson_.exe | Added by the LOHAV-S TROJAN! |
| X | DrWatson | drwatson_32.exe | Added by the LOHAV-S TROJAN! |
| X | DrWeb Antivirus | DRWEBAV.EXE | Added by an unidentified WORM or TROJAN! |
| Y | Drwebscheduler | Drwebscd.exe | DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem |
| X | ds | ds.exe | Added by the SPYMON TROJAN! |
| U | DS Clock | dsclock.exe | Digital desktop clock including synchronization with atomic servers - see here |
| X | dS35DLL | ffqca.exe | Added by the SDBOT-KV WORM! |
| X | dsa | dsa.exe | Homepage hijacker - redirecting to downseek.com |
| X | DSAcass | [path to file] | Added by the RANKY.M TROJAN! |
| X | DSAcass | CACASP.EXE | Added by the SDBOT.AEL WORM! |
| X | dsadlsa14 | dsakfsak14.exe | Added by the ONLINEG-P TROJAN! |
| X | DSB | DSB.exe | EnergyPlugin adware |
| U | dscactivate | dsca.exe | Dell Support Agent offers additional support and update features for your Dell computer or laptop |
| X | dsd | zz.exe | Added by the RBOT-FOX WORM! |
| N | DSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| X | dsfghjgj | keepSafe.exe | Added by the KILLAV.KAX TROJAN! Note - this is not the legitimate KeepSafe from Stardock Corporation which shares the same filename and is normally located in a %ProgramFiles%\Stardock subfolder. This one is found in %System% |
| X | dsgb | lcsass.exe | Added by the AGENT.TGZ BACKDOOR! |
| X | Dsi | dp-******.exe | Added by an unidentified adware where ****** are random characters |
| X | Dsi | dp-him.exe | Added by the MULTIDR-AH TROJAN! |
| X | Dskcompat | Dskcompat.exe | Added by the GEMA TROJAN! |
| U | DSKEY | DsKey.exe | Part of PC PhoneHome - "secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection". Security software from Brigadoon Security Group for tracking down lost/stolen computers |
| X | DSKEY | [path to trojan] | Added by the STARTER-G TROJAN! |
| N | DSL Connection Manager | ProDsl.exe | System Tray access to the connection manager for Intel ADSL modems - such as the ProDSL 3200 and ProDSL 2100. Allows you to monitor a number of parameters for you DSL connection and modem |
| N | DSL Monitor | spdstrm.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| Y | DSLagentexe | DSLagent.exe | Used in conjunction with USB connected ADSL modems from Eicon Networks (now Dialogic). Required for a permanent ADSL connection |
| Y | dslmon | dslmon.exe | Sagem DSL modem related. Apparently needed to detect the modem |
| U | DSLSTATEXE | dslstat.exe | System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example) |
| X | DsmSer | dsm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | msmpatch.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | svosm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | sysup.exe | Added by the SERFLOG.B WORM! |
| Y | DSndUp | DSndUp.exe | Utility that only runs once after installing the drivers for Analog Devices SoundMax integrated soundcards. It's exact purpose is unknown at the present time but from the filename it's probably used to configure the default or generic speaker arrangement for the system it's used on |
| X | dso32 | dsoqq.exe | Added by the TATERF-AO WORM! |
| X | DsplObjects | windspl.exe | Added by the BEAGLE.DN WORM! |
| X | DSS | dssagent.exe | Registration reminder for Mattel Interactive (Broderbund) applications and games. Spyware as it sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info |
| X | DSS | [path to trojan] | Added by the DSSDOOR-C TROJAN! |
| X | DSS | winoscnfg.exe | HTTPBruteForcer hacking utility that uses a brute force attack via HTTP to gain access to web pages or HTML forms which require a username or password |
| X | DSService | dmrss.exe | Added by the AGOBOT-XX WORM! |
| ? | DSSSGENS | dssagens.exe | ?? |
| X | dstiosys | plsitctl.exe | Added by the MAILBOT-BX TROJAN! |
| X | DSystemDriver | windrv.exe | Added by the DELF.WG TROJAN! |
| U | DT 11Mbps WLAN PC Card Station | DTCARDMonitor.exe | 11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom |
| U | DT 11Mbps WLAN USB Station | DTUSBMonitor.exe | 11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom |
| U | DT HPW | DTHtml.exe | HP My Display from HP. Rebranded version of Display Tune from Portrait Displays, Inc. - which "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface" |
| U | DT Task | DTHtml.exe | Display Tune from Portrait Displays, Inc. - which "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface." Also licensed and renamed by manufacturers such as Gateway (EzTune), HP (HP My Display), Hyundai ImageQuest (ImageTune), LG (forteManager) and ViewSonic (PerfectSuite™ Plus) |
| N | DTAgent | DTAgent.exe | System Tray access to DAEMON Tools Pro from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso, .bin, etc) to a virtual CD/DVD/Blu-ray drive. The original can be stored in a safe place and the loading times are significantly reduced as the virtual drive is much faster. Required if you use the automount feature to reload images on a reboot |
| N | DTlite | DTlite.exe | Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso, .bin, etc) to a virtual CD/DVD/Blu-ray drive. The original can be stored in a safe place and the loading times are significantly reduced as the virtual drive is much faster. Required if you use the automount feature to reload images on a reboot. This version is free for personal use and has a limited feature set |
| N | DU Meter | DUMeter.exe | Hagel Technologies internet bandwidth monitor |
| U | DualCoreCenter | StartUpDualCoreCenter.exe | Unified control center for overclocking both the graphics card and the CPU, but for the program to have its full functionality you must have an MSI mainboard with a CoreCell chip |
| ? | Duane Reade Insert Detect | InsDetect.exe | Part of Duane Read Picture Suite & Digital Image Pack. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted? |
| X | duck | duck.exe | Added by the AGOBOT-AVG WORM! |
| N | Dulux WeatherShield WeatherDesk | weather.exe | Dulux WeatherShield WeatherDesk - latest weather information from across Australia |
| X | Dumeter Services | dumeter.exe | Added by the SDBOT-AEQ WORM! |
| X | Dump | Dump.exe | Added by the ZIMUSE WORM! |
| X | dumprep | spoolc.exe | Detected by Kaspersky as a variant of the AGENT.CXF TROJAN! |
| X | dumprep | dump-k.exe | Added by the BUZUS-U WORM! |
| X | dumprep | dump.exe | Added by the CODOX-A WORM! |
| N | dumprep 0 -k | dumprep 0 -k | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| N | dumprep 0 -u | dumprep 0 -u | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| X | DUN_SERVICES3 | dun3.exe | Added by the SOKIRON TROJAN! |
| X | Duweculey | yujixit.exe | Added by the SDBOT.BRP WORM! |
| X | Duwee wong Cerbon | Cirebons.exe | Added by the BHARAT.A WORM! |
| X | duypvbfn | wimympcxsik.exe | Added by the FAKEAV-DFP TROJAN! |
| X | DVAScvssdfa | AsSDdwd.exe | Added by the LIOTEN.IP TROJAN! |
| U | DVD Device Lock for Win95/98/Me/2k/XP | DDLAgent.exe | Loads DVD Device Lock - which "can be used to restrict read or write access to removable media devices such as CD, DVD, floppy, flash and USB drives. You can also restrict access to partitions of hard disk drives". If disabled, hidden and locked drives still retain their original status so the user will only be able to change their status them via the main UI |
| X | DVD Upgrade | dvdupgd.exe | Added by a variant of the IRCBOT BACKDOOR! |
| N | DVD@ccess | DVDAccess.exe | Part of DVD Studio Pro from Apple Inc. - "The DVD@CCESS feature allows you to add additional interactivity to your DVD title when it is played on a computer" |
| N | dvd43 | DVD43_Tray.exe | DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies" |
| U | DVD43 | DVD43.exe | DVD43 is a small tool that overrides CSS copy-protection found on DVD movies |
| X | dvd98 | windvd98.exe | Added by the CULT.P WORM! |
| ? | DVDAgent | DVDAgent.exe | Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required? |
| U | DVDBitSet | DVDBitSet.exe | DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used |
| ? | DVDCheck | DVDCheck.exe | Related to an Intervideo program. What does it do and is it required in startup? |
| X | Dvdcompat | Dvdcompat.exe | Added by the GEMA TROJAN! |
| N | DVDLauncher | DVDLauncher.exe | Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion |
| N | DVDSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| N | DVDTray | DVDTray.exe | HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware |
| N | DVDUpgrade | DVDUpgrd.exe | Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs |
| N | DVDXGhost | DVDGhost.EXE | DVD Ghost - "utility to make your software DVD players and DVD copy/backup softwares restriction-free, and copy/backup DVD to hard disk" |
| U | dvHighMem | cfgmng32.exe | PureSight PC parental controls software by Puresight Technologies Ltd - "offers multi-layered cyberbullying protection for your family and it blocks offensive web-content". Also used by CA for their CA Parental Controls 2008 and 2009 utilities (both stand-alone and in suites) |
| Y | Dvp95 | Dvp95.exe | Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine |
| Y | dvpapi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me |
| Y | DvpInitExe | Dvpinit.exe | Command Antivirus related |
| Y | dvprpt | Dvprpt.exe | Command Antivirus related |
| X | dvraudio | dvraudio.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | dvsfss | fbsfsdrs.exe | Added by the SDBOT-QA WORM! |
| U | DVSync | dvsync.exe | DVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC |
| X | DvVideo32 | dvvid32.exe | Added by the TINY.FD TROJAN! |
| X | Dvx | wsxsvc.exe | Promulgate adware |
| X | dw | dw.exe | DownloadWare adware |
| X | DW_Start | rwwnw64d.exe | ZenoSearch adware variant |
| N | DW4 | Weather.exe | Desktop Weather 4 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | DW4 | DesktopWeather.exe | Desktop Weather 4 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | DW6 | DesktopWeather.exe | Desktop Weather 6 by The Weather Channel - provides current temperature, conditions, alerts, etc |
