| Status | Autorun name | Command | Description |
| Y | iolo AntiVirus | ioloAV.exe | iolo AntiVirus |
| Y | iolo Personal Firewall | ioloFW.exe | iolo Personal Firewall |
| U | Iolo Task Agent | Task_Agent.exe | Iolo System Mechanic Task Agent. Scheduled maintenance |
| N | iolo Utility Bar | SMUtilityBar.exe | Iolo System Mechanic Utility Bar - can be launched manually |
| U | ioloDelayModule | delay.exe | Part of Iolo System Mechanic. Used to delay the start of an application which loads automatically as Windows loads |
| U | Iomega Active Disk | AD2KClient.exe | Active Disk from Iomega - allows software applications to be run directly from compatible removable media such as Zip®, Rev, FireWire, USB and Mini flash. Required if you wish the applications to launch on insertion of a disk |
| U | Iomega Automatic Backup | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| U | Iomega Automatic Backup 1.0.1 | ibackup.exe | Iomega Automatic Backup - automatic backups for use with Iomega portable HDD |
| N | Iomega Backup Scheduler | dtiom98.exe | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | Iomega Disk Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| U | Iomega Drive Icons | IMGICON.EXE | Displays Iomega icons in Explorer/My Computer, ejects Zip disks on shutdown and displays a special delete confirmation box when deleting files on an Iomega drive. Available via Start -> Programs. If you disable it remember to eject disks first before powering the drive down - hence the "U" recommendation. Note - FreeCell may not run with ImgIcon running |
| U | Iomega ImIconXP | imiconxp.exe | Iomega REV System Software - allows your Iomega REV drive to interact with the operating system via the Iomega REV UDF file system, and provides drag-and-drop file access, access and write protection, and formatting of the disks |
| ? | Iomega QuickSync | Quicksync.exe | ?? |
| N | Iomega Startup Options | IMGSTART.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| N | Iomega Watch | IOWATCH.EXE | Used by Iomega drives. Available via Start -> Programs |
| X | Iomega_loader | Iomega_loader.exe | Added by the ANTINNY.F WORM! |
| N | IomegaWare | COMMANDER.EXE | Used by Iomega drives. Details of its purpose can be found here. Available via Start -> Programs |
| U | Iomon98.exe | Iomon98.exe | PC-Cillin 98 real time virus check. Can cause floppy disk accesses to hang |
| X | ioroxxo microsoft sux | system32.exe | Added by a variant of the RBOT WORM! |
| X | IP | IP.EXE | Added by the AGOBOT-QO WORM! |
| U | IP Changer 2.0 | IPChanger.exe | IP Changer 2.0 from Plustech Inc - network configuration management tool |
| X | IP Packet Redirect Service | ipredirect.exe | Added by the FORBOT.SM WORM! |
| X | IP Stack | ipstack.exe | Added by the AGOBOT.CW WORM! |
| X | IP**.exe [* = random char] | IP**.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| X | IP**32.exe [* = random char] | IP**32.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| N | iPalm | mon.exe | Installed with a Panasonic iPalm digital camera. Used to upload photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded |
| X | IPC Connection | ipcconn.exe | Added by the RBOT-AEG WORM! |
| X | IPC Spool Manager | wnmgre.exe | Added by the SDBOT-ZC WORM! |
| X | IPC Spool Manager | winspec.exe | Added by the SDBOT-BLU WORM! |
| X | ipcfg.exe | ipcfg.exe | Adware - detected by McAfee as a variant of the ADCLICKER-BM TROJAN! |
| X | IPClear | launcher.exe IpClearUp.exe | IPClear rogue security software - not recommended, removal instructions here. Both files are located in %ProgramFiles%\IPClear |
| X | IPConfig | svcxnv32.exe | Added by the HACARMY.E TROJAN! |
| X | IPConfig | svcxnw32.exe | Added by a variant of the HACARMY.E TROJAN! |
| X | IPConfig | ipconfigs.exe | Added by the HACARMY.C BACKDOOR! |
| X | IpCtrl | ipcon32.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | IPFW | ipwf.exe | Added by the DLOADER-YF TROJAN! |
| ? | IPHSend | IPHSend.exe | AOL related. What does it do and is it required? |
| N | IPInSightLAN 01 | IPClient.exe | IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. Included with services from BellSouth, Visual Networks and others. If you have more that one such service installed there may be two or more entries - i.e., IPInSightLAN 02, etc |
| N | IPInSightMonitor 01 | IPMon32.exe | IP Insight is a Quality of Service monitor and diagnostic tool that isn't required - see here for more information. Included with services from BellSouth, Visual Networks and others. If you have more that one such service installed there may be two or more entries - i.e., IPInSightMonitor 02, etc |
| Y | IPinst | N/A | For Gilat Communications internet satellite systems. Gilat rescue (Satellite system restore). Required if you have this system. Can cause a BSOD (blue screen of death) if left out |
| X | IPLog Security | iplogsec.exe | Added by the IRCBOT.GP BACKDOOR! |
| ? | iPlusAgent2 | iAgent2.exe | Related to iriver portable media products. What does it do and is it required? |
| X | ipmon.exe | ipmon.exe | Added by the RECERV or R3C.B TROJANS! |
| X | IpNetwork | ipnetwork.exe | Maxifiles adware |
| X | Ipnuker | Ipnuker.vbs | Added by the INKER.B WORM! |
| N | IPO3 | IP Operator 2005.exe | IP Operator 2005 - found on LG Electronics Notebook. The applet makes network connections easier to view and manage than does the standard Windows Network Connections tool. The WLAN module is easy to turn on or off with the press of a single button |
| X | Ipod Help | [9 random letters].exe | Added by a variant of the RBOT WORM! |
| X | iPOD USB Driver | IPODUSB.EXE | Added by a variant of the RBOT WORM! |
| X | iPod USB Service | iPODService.exe | Added by a variant of the RBOT WORM! Do not confuse with the Apple iPod process of the same name. The legitimate iPod file will always be located in the %ProgramFiles%\iPod\bin folder and is implemented as a system service, thus not listed in Msconfig/Startup! |
| N | iPodder | iPodder.exe | iPodder (now known as Juice) - a free utility that "allows you to select and download audio files from anywhere on the Internet to your desktop". This entry is present if you choose the option to add it to the startup group during installation |
| U | iPodManager | iPodManager.exe | Apple iPod® management software for the iPod® player - updates, formating, restoring and other functions associated with the iPod® |
| ? | iPodWatcher | iPodWatcher.exe | Associated with Apple's iPod® player. Detects when the iPod® is connected? |
| U | ipoint | ipoint.exe | Microsoft IntelliPoint utility (from version 5.5) - required to support the programmable buttons and additional features on Microsoft's range of mice, If this entry is disabled, any programmed buttons or program-specific settings will not be supported |
| X | IPOT Service Drivers | compaq.exe | Added by a variant of the FUROOTKIT TROJAN! |
| X | IPOT USB Service DRIVER | hpsebc087.exe | Added by the SDBOT-WA WORM! |
| X | IPOT USB Service DRV32 | hpsebc08.exe | Added by the SDBOT-WH WORM! |
| N | IPPDetect | IPP4Detect.exe | Part of Presto! Mr.Photo - "an ideal program for creating, sharing, and manag-ing digital images and videos" |
| X | ipreg | ipreg.exe | Added by the ZAGABAN-H TROJAN! |
| ? | iPrint LPT Redirector | nipplpte.exe | Related to Novell iPrint - "a printing solution that enables you to send documents to printers located throughout the Net." Is it required? |
| N | iPrint Tray | iprntctl.exe | Novell® iPrint - based on Novell Distributed Print Services - enables you to send documents to printers located throughout the Net |
| U | iProtectYou | ip.exe | iProtectYou - internet filtering/parental control and network monitoring software |
| X | iprun | iPY.exe | iProtectYou spyware |
| X | IPSEC Configuration | wsupdate.exe | Added by the AGOBOT-IQ WORM! |
| X | iPSec7 | ipsec7.exe | Added by the AGENT.AHVR TROJAN! |
| U | ipsecdialer | IPSECD~1.EXE | Cisco VPN Client - lets local users gain Administrator privileges on the operating system |
| U | ipsecdialer | ipsecdialer.exe | Cisco VPN Client - lets local users gain Administrator privileges on the operating system |
| Y | IPSecMon | IPSecMon.exe | Microsoft L2TP/IPSec VPN Client that loads via HKLM\RunServices on Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| X | IPSecMon | IPSecMon.exe | Added by the LAZAR.B TROJAN! Note - this is not the legitimate MS L2TP/IPSec file with the same name which is located in a %Program Files%\Microsoft IPSec VPN. This one is located in %ProgramFiles%\Common files\VPN Network |
| X | IPTable Configuration | Winipcfgs.exe | Added by a variant of the RBOT WORM! |
| N | iptray | iptray.exe | System Tray access to Intel Desktop Utilities - "provides you with the means to monitor system temperatures, voltages, fan speeds, and hard drive health; view detailed system information, and test your system hardware for common errors" |
| X | IPv6 Helper Driver | csass.exe | Added by the AGOBOT.TC WORM! |
| X | IPv6 STUN Service | netstun.exe | Added by a variant of the SDBOT WORM! |
| N | IPW | IPW.exe | Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone" |
| N | ipw | usbipw.exe | Related to Internet Phone Wizard from Actiontec - Voice over IP (VoIP) that allows you to "make and receive free Internet calls on your regular phone" whilst "at the same time, make and receive regular (landline) calls on your phone" |
| X | ipwf | ipwf.exe | Added by the SCHOEBERL TROJAN! |
| X | IpWins | ipwins.exe | IPWins adware |
| X | ipxwshel | ipxwshel.exe | Added by the WAREZOV.DG WORM! |
| X | ipyjy | woniz.exe | Added by the SDBOT.BQD WORM! |
| ? | IQES.exe | iqes.exe | ?? |
| X | iqmanager.exe | iqmanager.exe | IQ-Manager ransomware copyright scanner - not recommended, removal instructions here |
| X | ir_ftp | ir_ftp.exe | Added by the IRFTP TROJAN! |
| X | ir_ftp | irwftp.exe | Added by the BANCOS.H TROJAN! |
| U | Ir41_32.ax | regsvr32.exe Ir41_32.ax | Intel® Indeo® video 4.4 Decompression Filter related. The "Ir41_32.ax" file is located in %System% |
| X | irassync | irasyncd.exe | IRASSync adware |
| X | IRBMe Sucks!! | IRBMe.exe | Added by the RANDEX-Y WORM! |
| X | irc session | sessionmgr.exe | Added by the SDBOT-ACE WORM! |
| Y | IREIKE | IreIKE.exe | Microsoft L2TP/IPSec VPN Client for Win98/Me/NT. Secure technology for making remote access virtual private network (VPN) connections across public networks such as the Internet |
| N | IridiumTimeWizard | iridium.exe | Iridium TimeWizard - a small program for finding out the time in different parts of the world |
| N | iRis Active Monitor | winmon32.exe | Iris Antivirus - discontinued, replace with good alternative |
| N | iRiS AntiVirus Active Monitor | WIMMUN32.exe | Iris Antivirus - discontinued, replace with good alternative |
| U | IRIS_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Samsung CLX-3160 Series multifunction laser printer |
| U | IRIS_XRX_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Xerox Phaser 6110MFP multifunction laser printer |
| ? | iRiver AutoDB | MLService.exe | Part of the iRiver AutoDB music management utility for some of their music players which appears to be based upon (or is a rebranded version of) MoodLogic - which has now been discontinued. some users claim it is worthless, prone to lock-ups, and slow as a turtle but what does it do and is it required? |
| N | iRiver Updater | Updater.exe | Updater for the iRiver AutoDB music management utility for some of their music players which appears to be based upon (or is a rebranded version of) MoodLogic |
| U | IrMon | IRMON.EXE | System Tray access to infra-red devices. Not required unless you use infra-red devices |
| ? | IRPMonitor | itcnmon.exe | ?? |
| X | IRQ Assigning Agent | IRQconf.exe | Added by the SDBOT-CSV WORM! |
| X | irssyncd | irssyncd.exe | SafeSurfing adware variant |
| X | Irwftp | [path to trojan] | Added by the BANCOS-AP TROJAN! |
| X | irwftp | iexplorer.exe | Added by the BANKER-AN TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) |