| Status | Autorun name | Command | Description |
| ? | oadaemon | oadaemon.exe | Background process that establishes connection with a C3-1000 scanner and watch general status of the device and for scanner button presses. Can it be started manually? |
| U | OADP Utility | OadpUtil.exe | Part of the Sabre computer reservations system/global distribution system (GDS) - used by airlines, railways, hotels, travel agents and other travel companies for reservations and ticketing. OADP is the Open Auxiliary Device Platform |
| Y | oahstifr | oahstifr.exe | Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up." |
| U | OAKSTART | OAKSTART.EXE | Sets the spindown timeout and access speeds at startup and displays a splash screen for CD-RW. |
| N | OAKTASK | OAKTASK.EXE | Taskbar utility for a "control panel" for a CD-RW |
| Y | OASClnt | oasclnt.exe | On-access real-time scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files for malware as you access, create, copy or download them |
| Y | oaui | oaui.exe | System Tray access to and main user interface for the Online Armor range of security tools from Tall Emu Pty Ltd. The free version incorporates a firewall, limited startup manager, tamper protection and keylogger detection whilst paid versions add features such as a mail/web shield, phishing filter and anti-malware |
| X | OB Updater | ob.exe | Added by the AGOBOT-IH WORM! |
| Y | Object Store Server | osserver.exe | Comes with HyperTextStudio. From the supplier - "The Osserver maintains the database for HyperText Studio projects - absolutely vital, it verifies all the links etc in a site. It runs as a service in NT, 2K and XP but needs to start up in Win 9.x so you'll see a DOS box for a short while during boot up." |
| X | ObjectDock | Brico.cmd | Added by the BOBANDY-A WORM! |
| ? | objtjprx | objtjprx.exe | ?? |
| Y | OBRCheck | check.exe | Now part of Acer Empowering Technology. "Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer, and also acts as a versatile standalone backup and recovery manager". Whilst the exact purpose of this entry isn't known it runs and closes so leave it enabled in case it's required |
| ? | obsver | obsver.exe | Part of LingoWare translating software - what does it do and is it required? |
| X | OC SpywareExpert | spywareexpert.exe | OneClick Spyware Expert rogue security software - not recommended, removal instructions here |
| N | OCAudioIni | OCAudioIni.exe | One-click Audio Converter - allows you to convert files of multiple audio formats right from Windows Explorer |
| N | ocraware | ocraware.exe | Optical Character Recognition software as part of OmniPage Limited Edition - supplied with some scanners. Scan directly into most word processor applications, such as Word, WordPerfect, etc. Available via Start -> Programs |
| U | Octoshape Streaming Services | OctoshapeClient.exe | Octoshape Live Streaming - "is a revolutionary technology that will reduce your bandwidth cost and improve the quality in sound and picture" |
| X | ocx32 | ocx32.exe | Added by the ASTEF or RESPAN WORMS! |
| X | OCXUPDT32 | ocxupdt32.exe | Added by the AGOBOT-IF WORM! |
| X | OczyszczaczKomputerza | GDC.exe | OczyszczaczKomputerza Polish rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| X | OD | SYSCNTR.EXE | HotVideo dialler |
| X | od-matrxx | od-matrxx.exe | Adult dialler - xx can be any number |
| X | od-stndxx | od-stndxx.exe | Adult dialler - xx can be any number |
| X | od-teenxx | od-teenxx.exe | Adult dialler - xx can be any number |
| U | ODBC BackUp | fdxxl.exe | G Data "PC Spion". PC monitoring and surveilling software, captures all users activity on the PC, see here. Disable/remove if you didn't install it yourself! |
| X | oddworldz.exe | oddworldz.exe | Added by the MULTIDR-EG TROJAN! |
| N | Odebit Multimedia V2 | Odebit.exe | Odébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat |
| N | Odebit Multimedia V3 | Odebit.exe | Odébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat |
| N | Odebit Multimedia V3 - Services | Odebit.exe | Odébit Multimedia - free French multimedia player giving access to the best of television, videos, radio, games and chat |
| X | odnex | odbns.exe | Added by the AGENT-MPM TROJAN! |
| X | odnexy | odbnsy.exe | Added by the VESLORUKI.DWJ TROJAN! |
| N | Odometer | Odometer.EXE | Mouse odometer - tracks how far your pointer/arrow has traveled on the screen. Shortcut available |
| U | ODSPConfig | ODSPConfig.exe | DsktopSurveil surveillance software. Uninstall this software if you did not install it yourself |
| X | oe_drop_spam | oesrv.exe | Dropspam adware |
| Y | OE_OEM | TMAS_OEMon.exe | Related to Trend Micro PC-cillin - Internet Security 12 |
| X | Oeloader | Oeloader.exe | Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here |
| X | OEM Tools 32 | tres32.exe | Added by the RBOT.QB WORM! |
| U | OEM02Mon.exe | OEM02Mon.exe | Creative Live! Cam Console Auto Launcher |
| ? | OEM07Mon.exe | OEM07Mon.exe | Related to Live Camera Console Auto Launcher by Creative Technology LTD. What does it do and is it required? |
| X | OEM32 Tools | sres32.exe | Added by the RBOT.AML BACKDOOR! |
| N | OEMCLEANUP | oemreset.exe | Resets OEM installation settings at bootup. Not required unless you're new to PC's |
| U | OEMRESET | oemreset.exe | Resets OEM installation settings at bootup. Not required unless you're new to PC's |
| U | OEMRUNONCE | oemrun.exe | Windows Millennium file - used by setup when installing the OEM 'express' version of the operating system. Uncheck after setup has finished |
| U | oeplugin | bxOEPlugin.exe | noHTML for Outlook Express is an add-on that protects Outlook Express from email viruses and email scripts by converting incoming email messages from HTML format to simple text |
| ? | OEPowerPlugs | winoeinit.exe | ?? |
| Y | oeprsrv | oeprsrv.exe | Outlook Express Privacy - which "lets you control access to Outlook Express and its email message database. When you enable protection, the program disables access to the message database and address book files. As a result, when you open Outlook Express or Windows Address Book, a password will be asked for authentication." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| Y | oeprsrv.exe | oeprsrv.exe | Outlook Express Privacy - which "lets you control access to Outlook Express and its email message database. When you enable protection, the program disables access to the message database and address book files. As a result, when you open Outlook Express or Windows Address Book, a password will be asked for authentication." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| Y | oepsrv | oepsrv.exe | Outlook Express Protector from Ixis Research, Ltd - which is "designed for controlling access to Outlook Express and its e-mail and address data bases. Outlook Express Protector does not encrypt protected files and folders, however no programs can get access to them when the program is active." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| Y | oepsrv.exe | oepsrv.exe | Outlook Express Protector from Ixis Research, Ltd - which is "designed for controlling access to Outlook Express and its e-mail and address data bases. Outlook Express Protector does not encrypt protected files and folders, however no programs can get access to them when the program is active." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| X | OESET | setup60.exe | Added by the WAREZDL.28672 TROJAN! |
| X | Oesi | srts.exe | PurityScan adware |
| U | OESpamTest | OESpamTest.ExE | Kaspersky Anti-Spam |
| Y | oessrv | oessrv.exe | Outlook Express Security - which is used "to control access to Outlook Express and its databases. When it is active, Outlook Express becomes locked and no third-party programs can access its message base files and the address book. As a result, when you try to start Outlook Express, open the address book or access the files, a password will be asked to allow access." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| Y | oessrv.exe | oessrv.exe | Outlook Express Security - which is used "to control access to Outlook Express and its databases. When it is active, Outlook Express becomes locked and no third-party programs can access its message base files and the address book. As a result, when you try to start Outlook Express, open the address book or access the files, a password will be asked to allow access." If protection within the program is enabled and this entry is disabled Outlook Express will fail to run |
| N | OEXCheck | EA2Check.exe | Express Assist from AJSystems.com. Utility for use with Outlook Express to backup, restore, synchronize amongst others |
| X | Offer Companion | offers.exe | Adware |
| X | Offers | offers.exe | Adware |
| X | Offica Monitor Secura Systeme | winxp_sp3.exe | Added by a variant of the RBOT WORM! |
| X | Office | Office.exe | Added by the KRAIMER.12 TROJAN! |
| X | Office Desktops | imag.exe | Added by the SPYBOT.AQR WORM! |
| U | Office Mail | off_mail.exe | Office Mail from Burrotech Ltd - "complete email solution for small/medium businesses, homes, schools and colleges. It is a small email server which forms the perfect gateway between your internal and external email" |
| U | Office Mail Alerter | om_Alerter.exe | Office Mail Alerter - "alert Office Mail users when they receive new emails" via a System Tray icon |
| X | Office Monitor | adv32.exe | Added by the SDBOT-CWO WORM! |
| X | Office Monitor | alg32.exe | Added by the RBOT-GMM WORM! |
| X | Office Monitor | nvsvc86.exe | Added by the IRCBOT.BVO BACKDOOR! |
| X | Office Monitor Secure Systema | absecure32.exe | Added by the RBOT.FPW WORM! |
| X | Office Monitor Word Exel R | svch.exe | Added by the DWNLDR-GWW TROJAN! |
| X | Office Monitor Word Exel R | u.exe | Added by the SDBOT-DEE WORM! |
| X | Office Monitor Word Exel R | [trojan filename] | Added by the IRCBOT-VX TROJAN! |
| X | Office Monitors | GoogleUpdater.exe | Added by the RBOT-GKZ WORM! Note - this is not the updater for the popular Google tools |
| X | Office Monitorse | [path to worm] | Added by the SDBOT-CZX WORM! |
| N | Office Startup | osa.exe | On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs |
| X | Office Startup | Exploer.exe | Added by the GAOBOT.BV WORM! Note the different filename to the valid MS Office entries |
| N | Office Startup | Osa9.exe | On older versions of MS Office this launches common Office components to help speed up the launch of Office programs. On slower machines it can be a resource hog and some users claim there's no difference with or without it - but it usually isn't required. This must be left enabled if you use the Microsoft Office Shortcut Bar (MSOFFICE.EXE) and have set it to load at startup. Available via Start → All Programs |
| X | Office SturtUp | osa9.exe | Added by the CLICKER-EC TROJAN! Note - this trojan is located in %Windir% and should not be confused with the Microsoft office program, located in %Program Files%\Microsoft Office\Office |
| X | Office_app | msnmrgs.exe | Added by a variant of the VBBANC-A TROJAN! |
| X | office_update | [path to trojan] | Added by the DLOADER-ZB TROJAN! |
| X | OfficeAgent | expIorer.exe | Added by the TACTSLAY.A TROJAN! |
| X | OfficeAgent | outIook.exe | Added by the TACTSLAY.A TROJAN! |
| X | OfficeAgent | svcrhost.exe | Added by the TACTSLAY.A TROJAN! |
| X | OfficeAgent | svcshost.exe | Added by the TACTSLAY.A TROJAN! |
| X | OfficeDeamon | msorunner.exe | Added by a variant of the TACTSLAY TROJAN! |
| Y | OfficeGuard RegChecker | ogrc.exe | Kaspersky Labs anti-virus |
| X | OfficeGuardUI | svcss.exe | Added by the DEDLER-C TROJAN! |
| ? | officejet 6100 | hposol08.exe | Associated with a HP PSC2110 (and maybe others) all-in-one machine |
| U | OFFICEKB | kbdap32a.EXE | Keyboard utility for a Micro Innovations brand keyboard. If you disable this entry you will not be able to use any of the keyboard hotkeys or other non-standard functions on the keyboard |
| X | OfficeQuickAccess | OfficeHost.vbs | Added by the PEXMOR WORM! |
| X | Offices | msnmgd32.exe | Added by the FORBOT-DV WORM! |
| X | Offices Monitors | [path to worm] | Added by the RBOT-GKO WORM! |
| X | Offices Monitorse | [path to worm] | Added by the RBOT-GKO WORM! |
| X | Offices Monitorse | algose32.exe | Added by the RBOT-GDD WORM! |
| Y | OfficeScan95 | pccwin97.exe | Trend Micro antivirus OfficeScan |
| Y | OfficeScanNT Monitor | pccntmon.exe | Trend Micro OfficeScan Antivirus real-time scan monitor |
| X | OfficeWord Monitor | msn32.exe | Added by the RBOT-GUE WORM! |
| X | OfficeWord Monitors | Offlce.exe | Added by the IRCBOT.JZ TROJAN! |
| X | OFFICEXP | OFFICEXP.exe | Added by the WOOTBOT.HE WORM! |
| U | OfflineFileSync | OfflineFileSyn.exe | Offline synchronization part of ZANTAZ EAS (Enterprise Archive Solution) - which "is a secure, scalable set of tools for managing the the enormous amounts of 'unstructured information' held in corporate e-mails, files and SharePoint content" |
| N | OfotoNow USB Detection | Rundll32.exe OFUSBS.DLL, WatchForConnection OfotoNow | Autodetects when a digital camera is attached to a USB port and launches OfotoNow image software. Available via Start -> Programs |
| Y | ogrc | ogrc.exe | Kaspersky Labs anti-virus |
| N | Oil Change | OCTray32.exe | From CyberMedia/Network Associates. Checks for updates to software installed on your PC. Available via Start -> Programs |