| Status | Autorun name | Command | Description |
| U | OpAgent | OpAgent.exe | Part of Nuance (was Scansoft) OmniPage Pro document conversion software |
| X | Open Service Drivers | opiater.exe | Added by a variant of the RBOT WORM! |
| X | Open Site | opnste.exe | OpenSite adware |
| X | Open Site | opensite.exe | OpenSite adware |
| X | Open2Enter | runme.exe | Adult content dialler |
| X | Open2Enter | runme2.exe | Adult content dialler |
| X | OpenApizs | zrscbm.exe | Added by the AGENT.RLH TROJAN! |
| U | OpenDNS Update | OpenDNS Updater.exe | Updater for OpenDNS which "is a free service that works for networks of all sizes, from home networks to K-12 schools, SMBs and large enterprises". Automatically updates your OpenDNS account when your IP address changes and should be allowed to run if you use their Dashboard features |
| X | OpenGL Drivers | 0penGLD.exe | Added by the YIMP-A WORM! |
| X | OpenMstart | [path to dialler] | Switch-E premium rate adult content dialler |
| N | OpenOffice.org *.*.* | quickstart.exe | OpenOffice.org office suite quick start (where "*.*.*" is the version number) |
| N | OpenOffice.org x | QUICKS~1.EXE | Displays OpenOffice quick start applet in System tray. Right clicking on the icon allows rapid starting up of components of the OpenOffice suite. Available via Start -> Programs. Will automatically be started when any OpenOffice component is started from Start -> Programs. A resource hog (takes > 16 MB of memory). "x" represents the version number |
| N | OpenTalk | OpenTalk.exe | OpenTalk - free video and voice conferencing software application that allows you to talk to up to 100 friends in a chat room, using your headset microphone and a Webcam |
| U | openvpn-gui | openvpn-gui.exe | "OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls" |
| U | Openwares LiveUpdate | LiveUpdate.exe | Web-update utility as used by various types of software - see here |
| X | Opera | csrsse.exe | Added by the MDROP-DFQ TROJAN! |
| X | Opera addon | vmm.exe | Added by the AGENT-IBD WORM! |
| X | Operalaunch | svhost.exe | Added by the AGENT-IBD WORM! |
| N | Operations Typhoon Rising Registration | NOVG.EXE | Joint Operations registration reminder |
| N | Operator | ?? | Media Pilot operator, in Win.ini. Locks port open |
| U | Operator | xtmop.exe | Fax/Phone answering facility for Extreem Machine - as supplied with the old Diamond SupraExpress modems. No longer supported |
| X | opesys | propagador.exe | Added by the AUTORUN-BPN WORM! |
| X | OpiStat | OpiStat.exe | NetRatings Premeter spyware |
| X | OPQFile | regedit.exe /s ...rad03FA6.tmp | Unsavoury program that resets your homepage every time you restart - uncheck in MSCONFIG and delete it via a registry edit |
| X | opr | opr.exe | MediaMotor adware |
| U | OpScheduler | OpScheduler.exe | Part of Nuance (was Scansoft) OmniPage Pro document conversion software |
| N | OPSE reminder | Ereg.exe ereg.ini | Registration reminder for OmniPage from Nuance (was ScanSoft) |
| X | opsql update check | opsql.exe | Added by the RBOT-ACJ WORM! |
| N | OptiCAL Startup | OptiCAL.exe | OptiCAL monitor calibration software from ColorVision for advanced amateurs, professionals, animation studios and prepress operations |
| X | Optim[NUMBER] | [path]\regdtopt.exe | Added by the RAMVICRYPE TROJAN! |
| X | Optim1 | regdtopt.exe | Added by the RAMVICRYPE TROJAN! |
| X | Optim2 | regdtopt.exe | Added by the RAMVICRYPE TROJAN! |
| X | Optim3 | regdtopt.exe | Added by the RAMVICRYPE TROJAN! |
| X | Optim4 | regdtopt.exe | Added by the RAMVICRYPE TROJAN! |
| X | Optimize Windows | Kuntilanak.exe | Added by the SILLYFDC WORM! |
| X | OPTIMIZER | iexplore.exe | Added by the EVEVINC BACKDOORNote - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System% |
| X | OPTIMIZER | iexplore.exe | Added by the EVIVINC BACKDOOR! Note - this is not the legitimate Internet Explorer (iexplore.exe) which is always located in %ProgramFiles%\Internet Explorer and should not normally figure in Msconfig/Startup! This one is located in %System% |
| X | Optimum Online | Netsurf.exe | OptimumOnline ISP software related spyware - displays advertising popups and collects information about user activity |
| X | Optional Web Drivers For WIN32 | phqghume.exe | Added by a variant of the RBOT WORM! |
| U | OPTMOUSEMOUSE | optmouse.exe | Related to a Samsung optical mouse |
| X | optserve | optserve.exe | Optserve adware |
| U | Optus Cable Data Monitor | datamonitor.exe | Allows Optus customers to monitor their actual data usage against Optus' "data allowance limits" |
| N | OptusNet Desktop Service Centre | DSC.exe | OptusNet DSL or Dial-Up connection software |
| U | OptusNetUsage | OptusNet Usage Meter.exe | Designed specifically for OptusNet users who wish to have their connection monitored on a frequent basis. It can also estimate when you are going to hit your usage limit, and how far over your suggested limit you should be |
| N | Opware12 | Opware12.exe | OmniPage from Nuance (was Scansoft) - version 12. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs |
| N | Opware14 | Opware14.exe | OmniPage from Nuance (was Scansoft) - version 14. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs |
| N | Opware15 | Opware15.exe | OmniPage from Nuance (was Scansoft) - version 15. If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs |
| N | OpwareSE2 | OpwareSE2.exe | Hardware bundled version of OmniPage from Nuance (was Scansoft). If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs |
| N | OpwareSE4 | OpwareSE4.exe | Hardware bundled version of OmniPage from Nuance (was Scansoft). If running, a user can call up OmniPage from inside of Word and ask it to scan something, via "File, Acquire Page." Also some of OmniPage's Options dialog boxes are accessible from within Word. Only required by novices and is available via Start -> Programs |
| U | Oracle Web-to-Go | webtogo.exe | "Oracle Web-to-go, a component of Oracle9i Lite, consists of a collection of modules and services that facilitate development, deployment, and management of mobile Web applications" |
| Y | Orange Connection Kit | atdialler1.exe | Part of the Orange Connection Kit - changes the dial-up for Orange Any Time if access problems are encountered |
| N | OrangeShark | OSharkUpdater.exe | Orange Shark updater - online games for all ages |
| U | Orb | OrbTray.exe | Related to Orb Tray from InstallShield Software Corporation now owned by Macrovision |
| X | OrbitUpdate | update.exe | Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here |
| X | OrbitView | view.exe | Xupiter OrbitExplorer toolbar related. Drive-by foistware. Use Spybot S&D, Adware or similar to detect and remove and to prevent it re-installing in the future see here |
| X | order_Shell | order_smey.exe | Added by the BANKSNIF-H TROJAN! |
| X | order_Shell | order_****.exe [* = random letter] | Added by the AGENT.ARO TROJAN! |
| X | order_Shell | order_glsw.exe | Added by the DLOADR-KO TROJAN! |
| X | order_Shell | order_pgum.exe | Added by the AGENT-BSQ TROJAN! |
| N | OrderReminder | OrderReminder.exe | The HP Order Reminder utility is installed with the HP LaserJet printer software and allows you to set specific times for reminders to check the current level of toner in the print cartridge - it also contains an Order Now link to a Web page that helps you order supplies online from a reseller of your choice |
| X | orderShell | order****.exe [* = random char] | Added by the DLOADR-UN TROJAN! |
| U | orec32 | orec32.exe | OnlineRecorder surveillance software that records Yahoo! and AOL instant messages, URLs in browsers, and keystrokes. Uninstall this software unless you put it there yourself |
| ? | org5.exe | org5.exe | Lotus Organizer 5 application file, Lotus Organizer software. What does it do and is it required? |
| X | OrgyCam | OrgyCam.exe | Adult content dialler |
| U | OrigRage128Tweaker | RAGE128TWEAK.EXE | Third party tweaker for ATI Rage 128 Video cards from http://www.rageunderground.com |
| U | ORiNOCO | Cmluc.exe | Client Manager software for a Proxim ORiNOCO 11a/b/g wireless LAN PCI card |
| X | OS Boot Configuration | bootconfig.exe | Added by the IRCBOT.HJ WORM! |
| X | OS Boot Configuration! | bootconf.exe | CoolWebSearch BootConf adware |
| X | OS Boot Load | bootload.exe | Added by a variant of the IRCBOT TROJAN! |
| X | OS Security | mswind32.pif | Added by the RBOT-ASU WORM! |
| X | OSA | winword.exe | Added by the KANGAROO-A TROJAN! |
| X | Osa32 | NTOSA32.exe | Added by the ANIG WORM! |
| U | osCheck | osCheck.exe | Part of older versions of Symantec's security products including Norton 360, Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Checks at boot-time to see if you are still using the same OS as your last Windows session and terminates if you are. If Windows has been upgraded it will attempt to download the relevant updates for the new OS on the first reboot |
| U | OSD | OSD.exe | Displays a message or graphic on-screen when you press a corresponding "hotkey" - such as volume increase/decrease, display brightness, etc. Nice but not required if you don't adjust things regularly - and also known to cause a system freeze in some cases |
| X | OSD | ALG.exe | Added by the STARTPAGE-ID TROJAN! |
| U | OsdMaestro | OSD.exe | Displays a message or graphic on-screen when you press a corresponding "hotkey" on some HP machines - such as volume increase/decrease, display brightness, etc. Nice but not required if you don't adjust things regularly - and also known to cause a system freeze in some cases |
| U | OsdMaestro | OSD64.exe | "Provides an interface to configure onscreen display settings." For HP systems - see here |
| U | OsdMaestroOSD.exe | OSD.EXE | Displays a message or graphic on-screen when you press a corresponding "hotkey" on some HP machines - such as volume increase/decrease, display brightness, etc. Nice but not required if you don't adjust things regularly - and also known to cause a system freeze in some cases |
| X | OSS | ossproxy.exe | MarketScore parasite - ActiveX control used to download premium-rate diallers |
| X | OSS | rk.exe | MarketScore parasite - ActiveX control used to download premium-rate diallers |
| X | OSS | rlvknlg.exe | MarketScore parasite - ActiveX control used to download premium-rate diallers |
| U | OSSelectorReinstall | oss_reinstall.exe | Related to Acronis Disk Director Suite |
| X | OSSProxy | OSSProxy.exe | MarketScore parasite - ActiveX control used to download premium-rate diallers |
| U | OStivityInvAgt | ostivity.exe | OStivity - "a desktop and server hardware and software asset/inventory solution for small to enterprise sized organizations that need to quickly gain knowledge of 'what's installed' without having to manually touch every computer in the company. The next time the computer logs into the network, a complete inventory (software and hardware) is taken of the system" |
| X | Osus | acao.exe | PurityScan adware |
| X | Osus | rrup.exe | PurityScan adware |
| X | otcx | otcxxh.exe | Added by the CAROOL TROJAN! |
| U | oukwcm_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for Orange users |
| N | OurPictures | OurPictures.exe | Related to RitzPix Online Photo Print services |
| X | Outerinfo | Outerinfo.exe | Clickspring.Outerinfo adware |
| X | OuterinfoUpdate | OuterinfoUpdate.exe | Clickspring.Outerinfo adware |
| X | outlook | outlook.exe | Added by the SDBOT-RU WORM! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %System% |
| X | outlook | outlook.exe | Added by the ALCRA.F WORM! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %ProgramFiles%\Outlook |
| X | Outlook Express | msinm.exe | Added by a variant of the RBOT WORM! Note - this should not be confused with the legitimate Outlook Express file which has the filename "msimn.exe" and is located in %ProgramFiles%\Outlook Express. The file is located in %System% |
| N | Outlook Express | msimn.exe | Loads Outlook Express when Windows starts |
| X | Outlook Express Config | *****.exe [* = random char] | Added by a variant of the RBOT WORM! |
| X | Outlook Express Protocol | look.exe | Added by the RBOT-ACS WORM! |
| X | Outlook Mail Services | express.exe | Added by the RBOT.CJN WORM! |
| X | Outlook Mail Services | outlook.exe | Added by the RBOT-BKA TROJAN! Note that the valid Microsoft Outlook executeable is located in %ProgramFiles%\Microsoft Office\Office whereas this one is located in %System% |
| X | OutlookExpress | goawv.exe | Added by the RBOT-CC WORM! |
