| Status | Autorun name | Command | Description |
| X | R | rundll32.exe msprt.dll | Chinese originated browser hijacker - redirecting to 4199.com Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| Y | R_server | r_server.exe | Radmin - remote admistrator server. Note - the file is located in %ProgramFiles%\Radmin |
| X | r_server | service.exe | Added by the MULTIDR-CP TROJAN! |
| X | r_server | r_server.exe | Added by the HACDEF-DR TROJAN! Note - do not confuse with the valid Radmin file with the same name which is located in %ProgramFiles%\Radmin. This one is located in %System% |
| U | R2Plus_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Samsung SCX-4x20 Series multifunction printers |
| U | R2Ricoh_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Ricoh MFP Type 103 multifunction printer |
| X | RA Server | Slave.exe | Added by the RA TROJAN! |
| X | RabbitWannaHome | rabbit.exe | Added by the MIMAIL.S WORM! |
| Y | Rabo Session Monitor | RaboSessionMon.exe | Related to RaboBank electronic banking software |
| U | Raccourci vers la page des propriétés de High Definition Audio | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. French version |
| N | Raccourci vers la page des propriétés de High Definition Audio | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required. French version |
| N | RaConfig2500 | RaConfig2500.exe | RaLink wireless LAN configuration utility |
| N | RadarSync | RadarSync.exe | Radarsync utility comes from DFI with their latest motherboards, e.g., DFI LanParty Ultra - checks for BIOS and driver updates periodically |
| U | RadBoot | RadBoot.exe | RadLinker - tweaker/linker for ATI Radeon based graphics cards. It allows you easy access to per game settings |
| Y | Radialpoint Security Services | Rps.exe | Main program for internet security suites by Radialpoint. Radialpoint also source online security services for ISP customers such as Virgin Media, AT&T, Bell Canada, TELUS Corporation and Verizon Online |
| Y | RadialpointServicepoint.exe | RadialpointServicepoint.exe | Servicepoint tool installed when you install internet security suitea sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled |
| U | Radio365Agent | Radio365TrayAgent.exe | Radio365 - create playlists and broadcast live straight from your PC! |
| U | RadioSvr | RadioSvr.EXE | Used to configure wire less networks. Windows automatically detects the Wireless network and it configures the network |
| X | RagesCamera | Ragesn.exe | Added by the SDBOT.AHJ WORM! |
| U | RAID Event Monitor | Iaanotif.exe | Part of Intel® Matrix Storage Manager (formally known as Intel® Application Accelerator and Intel® Application Accelerator RAID Edition). Used in conjunction with the event monitor service (IAANTMON - Iaantmon.exe) to display event notifications (such as RAID volume status changes, HDD I/O errors or HDD SMART event) via a System Tray icon when an event occurs. Via this icon you can then choose to launch the Intel Matrix Storage Console or ignore the current alert |
| X | raidhost | raidhost.exe | Added by the AGENT-LID TROJAN! |
| U | RaidTool | raid_tool.exe | VIA V-RAID Tool - hard disk striping/mirroring utility for increased performance and reliability |
| U | Rainlendar | Rainlendar.exe | Rainlendar is a customizable calendar that displays the current month |
| U | Rainlendar2 | Rainlendar2.exe | Rainlendar is a customizable calendar that displays the current month |
| N | Rainmeter | Rainmeter.exe | Rainmeter is a customizable performance meter, which can display the CPU load, memory utilization, etc |
| X | Rakyat_Kelaparan | Kuli.exe | Added by the SILLYFDC.BDM WORM! |
| X | Rakyat_Miskin | Buruh.exe | Added by the SILLYFDC.BDM WORM! |
| U | Ralink Wireless Utility | RaUI.exe | Wireless configuration utility for Railink based products |
| U | RAM Idle Professional | RAM_XP.exe | RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| U | RAMASST | RAMASST.exe | Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs |
| X | RamBooster2 | rb.exe | Added by the AKAK TROJAN! |
| ? | RAMConnectionChecker | RAMConnChecker.exe | Part of Remote Access Manager (RAM) for Nortel Networks - which "combines an intuitive, user-friendly remote access interface for dialup, cable, LAN, wireless, and DSL users with state-of-the-art phonebook, dialing, and seamless software distribution and update capabilities". Is it required? |
| U | RAMDef | ramdef.exe | Ram Def Xtreme - monitors and defragments your system RAM to improve reliability and speed. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| U | RAMDrive | RDTask.exe | Virtual Hard Drive Pro from Farstone - "takes a portion of your system memory and creates a RAM disk drive, which functions like a physical hard drive, only with much better access rates" |
| ? | RAMGINAConnWatch | RAMConnWatcher.exe | Part of Remote Access Manager (RAM) for Nortel Networks - which "combines an intuitive, user-friendly remote access interface for dialup, cable, LAN, wireless, and DSL users with state-of-the-art phonebook, dialing, and seamless software distribution and update capabilities". Is it required? |
| U | RamIdle | ramidle.exe | RAM Idle LE - "A smart memory management program that will keep your computer running better, faster, and longer. RAM Idle works by freeing up physical RAM wasted by Windows and other applications. In addition, RAM Idle also includes Cache and startup manager program that will give you more power to optimize your Windows." MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| U | RAMpage | RAMpage.exe | Small Windows utility that displays the amount of available memory in an icon in the System Tray. It can also free memory by double clicking the tray icon, or by setting a threshold that activates the program automatically, or by having it run automatically when an application exits. RAMpage is free, and open source |
| U | RAMRush | RAMRush.exe | RAMRush by FTweak Inc - "is a free memory management and optimization tool. It can efficiently optimize memory usages of your Windows system, free up physical RAM and make your system work better" |
| X | Randex virus built for IRBMe | irbme.exe | Added by the RANDEX.RH WORM! |
| X | random | random.exe | Added by the DLOADER-KM TROJAN! |
| X | Random Interface Network | rst.exe | Added by the DELBOT-P WORM! |
| X | Random Interface Network Manager | rinsv.exe | Added by the DELBOT-L WORM! |
| X | Random Unique ID | [worm filename] | Added by the XROVE-A WORM! |
| X | RandomWin32 | mgnwin32.exe | Added by the SDBOT-DV WORM! |
| U | Randsoft Harmony '98 | rsMenu.exe | Randsoft Harmony '98 (superseded by Enterprise Harmony 99) for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000 |
| X | rant | rant.exe | Added by the RBOT-ZB WORM! |
| Y | RapApp | RAPAPP.EXE | Application protection component of BlackICE PC Protection (was Defender) firewall, informing you of any modifications to programs, files or folders and detecting unknown programs trying to launch |
| X | Rapdata | ravsecs.exe | Added by the QQPASS-V TROJAN! |
| X | Rapdatae | rabseuser.exe | Added by the QQPASS-S TROJAN! |
| X | Rapdatybs | ravseteyns.exe | Added by the PWS-ACP TROJAN! |
| X | Rapid Antivirus | Rapid Antivirus.exe | Rapid Antivirus rogue security software - not recommended, removal instructions here |
| U | Rapid Restore | rrpcsb.exe | XPoint "Rapid Restore PC" - "a Managed Recovery solution that enables IT Administrators to protect the corporate image, while offloading personal data backup and recovery chores to the end user" |
| X | RapidBlaster | rb32.exe | RapidBlaster parasite. A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| X | Raptelnet | ravspeger.exe | Added by the QQPASS-AA TROJAN! |
| X | Raptelt | ravspegtl.exe | Added by the QQPASS-AB TROJAN! |
| Y | Raptor Mobile | vpnservices.exe | Symantec VPN Client used to connect to corporate networks. If unchecked, must be uninstalled using Add/Remove Programs as it tightly integrates into networking |
| X | RaptorDefence | RaptorDefence.exe | RaptorDefence rogue security software - not recommended, removal instructions here |
| X | RasCon Remote Access Service Manager | rasmngr.exe | Added by the SPYBOT.EM WORM! |
| X | rasctrs | rasctrs.exe | Hijacker, also detected as the ADWAHECK TROJAN! |
| X | Rase | boln.exe | PurityScan adware |
| X | rasman | rasman32.exe | Added by the BCKDR-QGN BACKDOOR! |
| X | RasMan.exe | RasMan.exe | Added by the FEUTEL-H TROJAN! |
| X | rate.exe | i11r54n4.exe | Added by the BEAGLE-I WORM! |
| X | rate.exe | i1ru74n4.exe | Added by the BEAGLE.E WORM and variants! |
| ? | rav_temp.exe | rav_temp.exe | ?? |
| Y | RAV8Tray | ravtray8.exe | RAV anti-virus related |
| X | RavAv | RavMonE.exe | Added by the RJUMPF-F WORM! |
| X | RavAv | AdobeR.exe | Added by the RJUMP.D WORM! |
| X | RAVEN_VLZS.EXE | RAVEN_VLZS.EXE | DownloadReceiver parasite - no longer in existence |
| Y | RavMon | RavMon.exe | RAV AntiVirus |
| X | ravshell | expl0rer.exe | Added by the DLOADER.MAR TROJAN! |
| X | Ravshell | explore3.exe | Added by the PAKES.HZ TROJAN! |
| X | Ravshell | IEXPLORER.EXE | Added by the AGENT.URZ TROJAN! Note - this is not the legitimate Internet Explorer (iexplore.exe) |
| X | Ravshell | rund1132.exe | Added by the AGENT.OKZ TROJAN! |
| X | Ravshell | svch0st.exe | Added by the NSPM.PU TROJAN! Notice the digit "0" in the filename rather than the lower case "O" |
| X | ravshell | 1explore.exe | Added by the DLOADER.MJF TROJAN! |
| X | ravshell | iexpl0re.exe | Added by the NOFERE-A TROJAN! Note the number "0" in the filename |
| Y | RavStub | ravstub.exe | Rising antivirus |
| X | ravtask | rund1132.exe | Added by the DLOADER.IYT TROJAN! |
| X | ravtask | svch0st.exe | Added by the LINEAG-AIN TROJAN! |
| Y | RavTask | RavTask.exe | Rising antivirus |
| X | ravtask | iexpl0re.exe | Added by the AGENT.AIR BACKDOOR! Note the number "0" in the filename |
| X | RavTime | Mstray.exe | Added by the WUKILL.A WORM! |
| Y | RavTimer | RavTimer.exe | RAV AntiVirus |
| X | RavTimer | explores.exe | Added by the HOMEY-A TROJAN! |
| X | RavTimeXP | [worm filename] | Added by the WULLIK.B WORM! |
| X | RavTimeXP | Virus | Added by the CAGER.A WORM! |
| X | RavTimXP | [worm filename] | Added by the WULLIK.B WORM! |
| X | RavUptets | agetlke.exe | Added by the QQPASS-AK TROJAN! |
| X | RavUptkt | agetlktz.exe | Added by the QQPASS-AJ TROJAN! |
| X | RavUptpe | ravsesur.exe | Added by the QQPASS-T TROJAN! |
| X | rawload | [path to trojan] | Added by the DARKIRC.QZ BACKDOOR! |
| X | RAX SYSTEM | scrigz.exe | Added by the MYTOB.KR WORM! |
| N | Ray Process Killer | Prkill.exe | Ray Process Killer - clicking right mouse button produces popup menu with current active tasks. You can choose any task and click "Ok" to terminate it. Use CTRL+ALT+DEL instead |
| X | Raymond present | friska_w32.exe | Added by the RUBBLE-C WORM! |
| U | razer | razerhid.exe | Razer gaming mouse/keyboard driver - required if you use the additional features and programmed keys/macros |
| X | RazeSpyware | RazeSpyware.exe | RazeSpyware rogue spyware remover - not recommended |
| X | RazeSpyware Monitor | RazeSpyware_monitor.exe | RazeSpyware rogue spyware remover - not recommended |
| X | razor.exe | razor.exe | Added by the SILLYFDC-AY WORM! |
| X | rb32 lptt01 | rb32.exe | RapidBlaster variant (in a "RapidBlaster" or "rb32" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
