| Status | Autorun name | Command | Description |
| U | U.S.Robotics WLAN Adapter Configuration Utility | USRWLAN.exe | U.S.Robotics LAN Adapter - wireless LAN (WLAN) configuration utility |
| X | UADC_104911963 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, see here. Removal instructions here |
| X | UADC_3240389055 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, removal instructions here |
| X | UADC_3769470239 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, see here. Removal instructions here |
| X | UADC_4242084050 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, removal instructions here |
| X | UADC_599141581 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, removal instructions here |
| X | UADC_815790765 | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, removal instructions here |
| X | UADCcw | UADCcw.exe | AdvancedCleaner rogue security software - not recommended, removal instructions here |
| X | Uate | oocs.exe | PurityScan adware |
| U | Ub4TrayApp | ubtray.exe | System Tray access to UltraBackup backup software from Astase |
| X | ubehu | ubehu.exe | Added by the SDBOT.AUT WORM! |
| U | UberIcon | UberIcon Manager.exe | Uber Icon by Punk Labs. Creates a more customizable atmosphere on your desktop by extending Windows to perform new effects when you launch your icons and folders |
| U | UBSShell | UBSShell.exe | UBS (United Bank of Switzerland) banking software |
| X | ubstcw | ubstcw.exe | Part of the AlfaAntiVirus rogue security software - not recommended |
| N | UC_SMB | ucstart.exe | Part of IBM Update connector on IBM PCs for updating drivers on a new installation. Once you manually run the IBM Update connector program (shortcut) this entry is removed |
| N | UC_Start | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc |
| ? | UCam_Menu | MUIStartMenu.exe | Part of YouCam from CyberLink - effects software for webcams. The exact purpose of this entry is unknown at present but it unloads from memory once run |
| X | UCmd | fallfour.exe | Added by the SDBOT-AZA WORM! |
| U | UCmore XP - The Search Accelerator | rundll32.exe UCMTSAIE.dll, DllShowTB | UCmore toolbar - search accelerator |
| X | ucookw | ucookw.exe | Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| U | UCS Clean Temp | CleanTemp.exe | Version 1.5 of CleanTemp - which automatically deletes the contents of the %Temp% folder that is used to store temporary files at Windows startup and uses no memory or processing power |
| N | ucstartup | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc |
| N | ucstartup.exe | ucstartup.exe | IBM Update Connector - old auto updater feature for IBM machines that connects to IBM to see if there are any new drivers, patches, etc |
| U | UD Agent | UD.EXE | The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start > Programs |
| X | UDC6_cw | UDC6_cw.exe | Part of the DriveCleaner rogue security software - not recommended, removal instructions here |
| X | UDC6cw | UDC6cw.exe | Part of the DriveCleaner rogue security software - not recommended, removal instructions here |
| X | udinajkv.exe | udinajkv.exe | Added by a premium rate adult material dialer! |
| X | udjudwq | sybqnub.exe | Added by the SILLYFDC-AH WORM! |
| X | UDP Service Control CenteRMS | winudp.exe | Added by the VBPIT-A MALWARE! |
| X | udzok | udzou.exe | Added by the SDBOT-CUS WORM! |
| U | Ueproc32 | UEPROC32.exe | Part of Norton Utilities - most likely associated with the Unerase Wizard in older versions |
| X | UERScw | UERScw.exe | Part of the ErrorSafe rogue system error and cleaning utility - not recommended |
| ? | UFD Monitor9382 | ufdlmon.exe | Part of USB Flashdisk software - what does it do and is it required? |
| ? | UFD Utility9382 | UFDTool.exe | Part of USB Flashdisk software - what does it do and is it required? |
| X | UfQshXkFHeIUkQ | UfQshXkFHeIUkQ.exe | Added by the FAKEAV-DVP TROJAN! |
| Y | UfSeAgnt.exe | UfSeAgnt.exe | Part of Trend Micro Internet Security |
| X | uga6pcw | uga6pcw.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | ugac | ugac.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | ugcw | ugcw.exe | Part of the AVSystemCare rogue security software and other members of this family. See here for more examples |
| X | ugdccw | UGDCcw.exe | Part of SecurePCCleaner, WinAnonymous and other members of the PCPrivacyTool rogue privacy tool and other members of this family. See here for more examples |
| X | ugescw | ugescw.exe | Part of the ErrClean rogue system error and cleaning utility and other members of this family. See here for more examples |
| ? | ugon | aockstrs.exe | ?? |
| X | uhvjsul.dll | rundll32.exe uhvjsul.dll,mrpmvyf | Added by the BUSKY-G TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "uhvjsul.dll" file is found in %System% |
| N | Uidler | Uidler.exe | Uniloc Titlewave Browser used with some shareware |
| X | uiijeg | q3qen9s.exe | Added by the VB-FHC TROJAN! |
| ? | UIUCU | UIUCU.EXE | Universal Device Install Application from Conexant Systems, Inc. What does it do and is it required? |
| N | UIWatcher | UIWatcher.exe | Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2, UnInstaller 3 and UnInstaller 4. These monitor and record program installations and allows you to remove them completely, so that no trace is left. This is the installion monitor that sits in the System Tray and detects the launch of installation programs |
| U | ujm | nm32.exe | Stranget keystroke logger/monitoring program - remove unless you installed it yourself! Found in %Windir%\fyt |
| U | ukl | wmpusrvc.exe | Ultimate Keylogger surveillance software. Uninstall this software unless you put it there yourself |
| X | UKVideo2 | ukvideo2.exe | Adult content dialler |
| N | Ulead AutoDetector | Monitor.exe | Part of Ulead (now Corel) programs such as Photo Express and VideoStudio - automatically detects the presence of a digital camera or memory card and launches the program that supports it |
| N | Ulead AutoDetector v2 | monitor.exe | Part of Ulead (now Corel) programs such as Photo Express and VideoStudio - automatically detects the presence of a digital camera or memory card and launches the program that supports it |
| N | Ulead Calendar Checker | CalCheck.exe | Ulead Photo Express 6 (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Memory Card Detector | Monitor.exe | Part of Ulead (now Corel) programs such as Photo Express and VideoStudio - automatically detects the presence of a memory card and launches the program that supports it |
| N | Ulead Photo Express 3.0 SE Calendar Checker | CalCheck.exe | Ulead Photo Express 3.0 SE (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express 4.0 Calendar Checker | calcheck.exe | Ulead Photo Express 4.0 (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express 4.0 SE Calendar Checker | CalCheck.exe | Ulead Photo Express 4.0 SE (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express Calendar Checker | calcheck.exe | Ulead Photo Express 5 SE and Ulead Photo Express My Scrapbook 2.0 (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express Calendar Checker | CalCheck.exe | Ulead Photo Express 4.0 and Ulead Photo Express 3.0 (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express Calendar Checker For My Custom Edition | CalCheck.exe | Ulead Photo Express 4.0 My Custom Edition (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| N | Ulead Photo Express SE Calendar Checker | CalCheck.exe | Ulead Photo Express 3.0 SE (now Corel) includes the option to create multiple Weekly/Monthly/Yearly calendars to use as your wallpaper and this entry automatically replaces them at the specified intervals. Not required - change them manually |
| X | Ultimate Cleaner | UltimateCleaner.exe | Ultimate Cleaner rogue security software - not recommended, removal instructions here |
| X | Ultimate Defender | UltimateDefender.exe | Ultimate Defender rogue security software - not recommended, removal instructions here |
| X | Ultimate Fixer | UltimateFixer.exe | UltimateFixer rogue system error and cleaning utility - not recommended |
| U | Ultimate Popup Killer | Popupkiller.exe | Ultimate Popup Killer - pop-up killer |
| X | Ultimate System Guard | MainFAVProj.exe | Ultimate System Guard rogue security software - not recommended, removal instructions here |
| X | UltimateBuddy | UltimateBuddy.exe | UltimateBuddy - installs malware, or is bundled with malware |
| X | UltimateServices | ultsvcs.exe | Added by the AGENT-LGT TROJAN! |
| N | UltimateZip Quick Start | uzqkst.exe | UltimateZip - file compression utility |
| X | Ultra Edit v5.1 | ultraedit.exe | Added by the SDBOT-RK WORM! |
| N | Ultra Hal Assistant 4.5 Startup | HalAsst.exe | Zabaware Ultra Hal Assistant - artificial intelligence conversation simulator. It is capable of being your digital secretary and companion |
| ? | UltraDVDMon | DVDMon.exe | UltraDVD DVD player software - is it required? |
| X | UltraEdit | uledit.exe | Added by the SDBOT-TO WORM! |
| X | Ulubione | sys[4 random char].exe | Ulubione adware |
| N | UMAX VistaAccess | vsaccess.exe | VistaAccess gives you quick and easy access to scanning functions right from your desktop |
| U | UMonit | umonit.exe | Alerts when USB device is plugged in |
| Y | umxagent | umxagent.exe | Tiny Personal Firewall V4 - main engine |
| Y | umxldra | umxldra.exe | User mode executive module DLL loader - part of Tiny Personal Firewall V4 |
| Y | UMXLDRW | UMXLDRW.exe | Tiny Personal Firewall (pre V4) |
| X | un32info | un32info.Exe | Added by the CRYPTER.A TROJAN! |
| X | Undefined | winter.exe | Added by the KILLAV.LW TROJAN! |
| X | Under20 | anacon32.exe | Added by the ANACON-C WORM! |
| X | UNERI | yujixit.exe | Added by the SDBOT.BOO WORM! |
| U | UnHackMe Monitor | hackmon.exe | UnHackMe allows you to detect and remove a new generation of 'invisible' Trojan programs called "rootkits" |
| U | Uniblue Launcher | Launcher.exe | Launcher for the range of system utilities from Uniblue Systems Limited - namely PowerSuite, RegistryBooster, SpeedUpMyPC and DriverScanner. Normally located in the appropriate sub-directory of %ProgramFiles%\Uniblue |
| N | Uniblue ProcessQuickLink 2 | ProcessQuickLink2.exe | ProcessQuickLink by Uniblue Systems Ltd - gives you quick access to their Process Library entry for a currently running process via the standard Windows Task Manager (CTRL+ALT+DEL). A System Tray icon also allows you to search the library and launch the Task Manager. Run on demand |
| U | Uniblue Quick Access | qaccess.exe | Quick Access application from UniBlue Systems Ltd - "helps you account for all processes on your computer by providing an additional plug-in for the Windows task manager" |
| N | Uniblue Registry Booster | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals |
| N | Uniblue RegistryBooster 2 | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals |
| N | Uniblue RegistryBooster 2009 | RegistryBooster.exe | Old version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system." Run manually at regular intervals |
| U | Uniblue SpeedUpMyPC | SpeedUpMyPC.exe | Older version of SpeedUpMyPC from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" |
| Y | Uniblue SpyEraser | SpyEraser.exe | SpyEraser spyware remover from Uniblue Systems Limited - now discontinued. Provides System Tray access and also required for the real-time Live Guard feature to work to monitor and check for BHOs, toolbars, search hooks, etc |
| N | UniblueRegistryBooster | launcher.exe | Launcher for an older version of the RegistryBooster registry optimizer utility from Uniblue Systems Limited - which will "clean, repair and optimize your system". Run manually at regular intervals |
| U | UniblueSpeedUpMyPC | Launcher.exe | Launcher for an older version of the SpeedUpMyPC from Uniblue Systems Limited - which "lets you monitor and control all your PC resources with easy, one click instructions. System settings, internet usage, disk clutter, RAM and CPU are all automatically scanned, cleaned and optimized for peak performance" |
| X | Unigray | Unigray Antivirus.exe | Unigray Antivirus rogue security software - not recommended |
| ? | UniMessenger | UNI2.exe | Possibly the UNI instant messenger for singles from Voxtel |
| X | uninstal | regsvr32 image.dll | CoolWebSearch parasite variant. Note that regsvr32.exe is a legitimate Microsoft file used to register and unregister OLE controls and shouldn't be deleted. The "image.dll" file is found in %System% |
| X | Uninstall**** | upd.exe | Adult content based screen saver where **** can be any number |
| X | Uninstall_TBPS | TBuninst.exe | WebSearch Toolbar - HuntBar hijacker, toolbar installer variant |
| N | UninstallAbility | uability.exe | UninstallAbility free uninstaller |
