| Status | Autorun name | Command | Description |
| U | Y!TunnelBasic | YTBasic.exe | Y!TunnelBasic software provides additional features to Yahoo! Messenger |
| U | Y!TunnelPro | YTunnelPro.exe | Spam, bot and ad blocker for Yahoo! Messenger from Digital Asphyxia |
| U | Y!TunnelPro | YTPro.exe | Spam, bot and ad blocker for Yahoo! Messenger from Digital Asphyxia |
| U | Y'z Shadow | YzShadow.exe | Y'z Shadow 'adds a shadow effect to the windows in pursuit of the "beauty of a shadow". It also allows the user the option of making menus transparent' |
| U | Y'z Toolbar | YzToolBar.exe | Y'z Toolbar "allows the user to change the toolbar icons in Explorer and Internet Explorer. The user can also create and add their own themes" |
| X | y1959sar | sv711224030r.exe | Added by the BRONTOK-AK WORM and variants! |
| X | y1959sar | yesbron.com | Added by the BRONTOK-AK WORM and variants! |
| X | Ya Salam | NancyAjram.exe | Added by the JALABED WORM! |
| ? | YaAutoRepair | yrepair.dll | Appears to be related to software from Yahoo China. What does it do and is it required? |
| X | yaemu.exe | yaemu.exe | Added by the WIN32.DNSCHANGER.S TROJAN! |
| X | yahoo groups | upgrdmgr.exe | Added by a variant of the RBOT WORM! |
| ? | Yahoo HP Reminder 1.1 | yr.exe | ?? |
| X | yahoo inc. | ypages.exe | Added by a variant of the SDBOT.62235D21 WORM! |
| X | Yahoo Instant Messengar | YahooMsgr.exe | Added by the SDBOT.GEN TROJAN! |
| X | Yahoo Messenger | Yahoomsg.exe | Added by an unidentified WORM or TROJAN! |
| X | Yahoo Messenger | YPager.exe | Added by the RBOT-QO BACKDOOR! Note - this is not the older version of Yahoo! Messenger which shares the same filename and is located on %ProgramFiles%\Yahoo!\Messenger. This one is found in %System% |
| X | Yahoo Messenger | svchost32.exe | Added by the SOHANA-P WORM! |
| X | Yahoo Messengger | SVICHHOST.exe | Added by the TIOTUA-C TROJAN! |
| X | Yahoo Messengger | RVHOST.exe | Added by the SILLYFDC-G WORM! |
| X | Yahoo Messengger | SSVICHOSST.exe | Added by the SOHANA-R WORM! |
| X | Yahoo Messengger | SCVHOST.exe | Added by the SOHANA-V WORM! |
| X | Yahoo Messengger | SCVHSOT.exe | Added by the HAKAG-A WORM! |
| X | Yahoo Messengger | SCVVHSOT.exe | Added by the SILLYFDC-AE WORM! |
| X | Yahoo Messengger | SSCVIHOST.exe | Added by the SOHANA-W WORM! |
| X | Yahoo Messengger | SSCVIIHOST.exe | Added by the SOHANA-Y WORM! |
| X | Yahoo Messengger | regsvr.exe | Added by the IMAUT.CN WORM! |
| X | Yahoo Messengger | chrome.exe | Added by the AUTORUN-NG WORM! |
| X | Yahoo Messengger | gphone.exe | Added by the TIOTUA-W WORM! |
| X | Yahoo Messengger | IEXPLORERS.exe | Added by the AUTOIT.DH TROJAN! |
| X | Yahoo Messengger | RVHIOST.exe | Added by the SOHANNA-AC WORM! |
| X | Yahoo Messengger | scvhosts.exe | Added by the SOHANNA-AH WORM! |
| X | Yahoo Messengger | scvshosts.exe | Added by the TRAX-A WORM! |
| X | Yahoo Messengger | SSVICSSHOST.exe | Added by the IMAUT.AA WORM! |
| X | Yahoo Messengger | SVICHOOST.exe | Added by the SOHANNA-AE WORM! |
| X | Yahoo Messengger | system3_.exe | Added by the AUTORUN-AOA WORM! |
| X | Yahoo Messengger | winfiles.exe | Added by the AUTORUN-BCY WORM! |
| X | Yahoo Messengger | IEXPLORER.exe | Added by the AUTORUN-BDN WORM! Note - this is not the legitimate Internet Explorer (iexplore.exe) |
| X | Yahoo Messengger | macfee_.exe | Added by the YAHLOV-G WORM! |
| X | Yahoo Update | Yahoo!.exe | Added by the YAHOO! TROJAN! |
| X | Yahoo Update | Yahoo.exe | Added by the RBOT.AH BACKDOOR! |
| X | Yahoo Updater | Messenger.exe | Added by the FORBOT-FE WORM! |
| X | yahoo! | rundll32.exe [random]don.dll,Set | Added by the AGENT.HOZZ TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "[random]don.dll" file is found in %UserTemp% |
| X | Yahoo! | ethernet.exe | Added by the PROSTI.AA BACKDOOR! |
| N | Yahoo! Friend | YahooFriend.exe | Yahoo!_Friend - plug-in for Yahoo! Messenger that add lots of emoticons and windows effects |
| U | Yahoo! Mail | YMailAdvisor.exe | Yahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e., if your default mail client changes). Bundled with some Yahoo! programs, Toolbar or Messenger |
| X | Yahoo! Messanger | ymsngr32.exe | Added by the WOOTBOT.HY WORM! Note - this should not be confused with Yahoo! Messenger |
| N | Yahoo! Messenger | ypager.exe | System tray access to an older version of the Yahoo! Messenger instant messenger |
| N | Yahoo! Pager | ypager.exe | System tray access to an older version of the Yahoo! Messenger instant messenger |
| N | Yahoo! Pager | YAHOOM~1.EXE | System tray access to an older version of the Yahoo! Messenger instant messenger |
| N | Yahoo! Pager | YahooMessenger.exe | System tray access to an older version of the Yahoo! Messenger instant messenger |
| U | Yahoo! Widget Engine | YahooWidgetEngine.exe | Yahoo! Widget Engine lets you run little files called Widgets that can do pretty much whatever you want them to |
| U | Yahoo! Widgets | YahooWidgets.exe | Yahoo! Widgets lets you run little files called Widgets that can do pretty much whatever you want them to |
| X | yahoo_toolbar lptt01 | yahoo_toolbar.exe | RapidBlaster variant (in a "yahoo_toolbar" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
| X | yahoo_toolbar ml097e | yahoo_toolbar.exe | RapidBlaster variant (in a "yahoo_toolbar" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here |
| X | Yahoo2000 | Anti.exe | Added by the RBOT.ATK WORM! |
| X | Yahoo2000 | Anti.exe | Added by an unknown Malware, possibly a variant of the RBOT-RAM WORM! |
| N | YahooMessenger | YahooMessenger.exe | System Tray access to the Yahoo! Messenger instant messenger |
| U | YahooMonitor | YahooMonitor.exe | Yahoo Messenger Monitor Sniffer surveillance software for the Yahoo! instant messenger. Uninstall this software unless you put it there yourself |
| X | yahoomsgr | Yahoomsngr.exe | Added by the AGOBOT.AKZ WORM! |
| X | YahooStock | [path to file] | Adtomi adware |
| ? | YAMAHA AC-XG Power Utility | yacpower.exe | YAMAHA AC-XG Power Utility. What does it do and is it required? |
| N | YAMAHA DS-XG Launcher | dslaunch.exe | System Tray access for the features of the Yamaha DS-XG soundcard unless you regularly change set-ups |
| N | Yankee Clipper III | YankClip.exe | Yankee Clipper III - 'A super powerful Windows clipboard extender/memory - now in its third generation. Handles Pictures, Richtext, URLS, etc - any size. Features printing, drag and drop, optional permanent storage of clippings. Familiar "Outlook" interface'. Freeware |
| U | Yapta Tracker | YaptaClient.exe | Yapta "make it easy for you to secure the best airfare deals available on the Web. We do this by giving you a tool to "tag" the trips you like while shopping online, then we track prices on these trips and alert you when prices drop" |
| X | yay.exe | asass.exe | Added by the AGOBOT-M WORM! |
| N | YBrowser | ybrwicon.exe | SBC Yahoo! Browser system tray icon |
| U | YCentral | YahooCentral.exe | Yahoo! Central - "alerts you if your default home page, search, or email is changed or if updates are available for your Yahoo! software. You can manage your default Internet settings and get updates to your software from Yahoo!" |
| U | YCMMirag Application | YCMMirage.exe | Part of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs" |
| U | YCMMirage | YCMMirage.exe | Part of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs" |
| X | YDTMain.exe | YDTMain.exe | 180solutions adware |
| X | yeahdude.exe | hallowelt.exe | Added by the GAOBOT.RS or GAOBOT.SA WORMS! |
| X | yemarvd | sysmon.exe | Added by the AGENT-CH TROJAN! |
| N | YeppStudioAgent | SamsungMediaStudioAgent.exe | Samsung Media Studio MP3 player file management software - see here for an example |
| X | YhooUapdates | ymssmsgs.exe | Added by a variant of the SMALL_K TROJAN! |
| X | YhooUpdates | ymsmsgs.exe | Added by the SMALL_K TROJAN! |
| X | ying | ying.exe | Constructor VC2000 malware |
| X | ylbrooht | ygtowvqtssd.exe | Added by the AGENT-NFX TROJAN! |
| N | YLive.exe | Ylive.exe | Yahoo! Assistant (formerly 3721 Internet Assistant) - not recommended |
| U | YMailAdvisor | YMailAdvisor.exe | Yahoo! Mail Advisor - informs you of any changes to your Yahoo! Mail settings (i.e., if your default mail client changes). Bundled with some Yahoo! programs, Toolbar or Messenger |
| N | ymetray | ymetray.exe | Yahoo! Music system tray icon |
| X | ynavmrcd.exe | ynavmrcd.exe | Added by the DLOADR-AVC TROJAN! |
| N | YOP | yop.exe | Dashboard Module for SBC Yahoo! Online Protection |
| U | You've Got Pictures Screensaver | ygpsstra.exe | AOL You've Got Pictures Screensaver |
| N | YouCam | YouCam.exe | System Tray access to YouCam from CyberLink - effects software for webcams |
| U | YouCam Mirage | YCMMirage.exe | Part of YouCam from CyberLink - effects software for webcams. From the CyberLink forum: "YCMMirage.exe is a background process which will monitor if any AP is using our virtual driver. Once it is detected, YCMMirage will launch YouCam, and then YouCam will provide and share the webcam video to client APs" |
| N | YouCam Mirror Tray icon | YouCamTray.exe | System Tray access to YouCam from CyberLink - effects software for webcams |
| N | YouCam Tray | YouCam.exe | System Tray access to YouCam from CyberLink - effects software for webcams |
| N | YouCamTray | YouCamTray.exe | System Tray access to YouCam from CyberLink - effects software for webcams |
| X | Your Protection | urpprot.exe | Your Protection rogue security software - not recommended, removal instructions here |
| X | YourMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | YourPrivacyGuard | GDC.exe | YourPrivacyGuard rogue privacy tool - not recommended, removal instructions here. A member of the PCPrivacyTool family |
| ? | YOW tuner | WatchPNM.exe | ?? |
| N | ypager | ypager.exe | System tray access to an older version of the Yahoo! Messenger instant messenger |
| N | Ypager.exe | ypager.exe | System tray access to an older version of the Yahoo! Messenger instant messenger |
| U | YPC | ypc.exe | Yahoo Parental controls - "Let you decide what type of sites and Yahoo! services your kids can access" |
| U | YPOPs | YPOPs.exe | YPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook, Netscape, Eudora, Mozilla, etc., to download email from Yahoo! account |
| U | YPOPs | YPOPs | YPOPs! - an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook, Netscape, Eudora, Mozilla, etc., to download email from Yahoo! account |
| U | YSearchProtection | SearchProtection.exe | "Yahoo! Search Protection will alert you if an attempt is made to change your default browser search engine from Yahoo!" |
| Y | YTrayMagic Lite 1 | YTRAYMAGIC.EXE | YTrayMagic from YoconSoft automatically restores your tray icons after an Explorer(the windows shell) crash. Leave to run at startup since only those icons that are in the taskbar after YTrayMagic has initialized will be restored |
| U | Yumgo's Homepage Protector V1 | YumgoHomepageProtector.exe | Yumgo's Homepage Protector |
