| Status | Autorun name | Command | Description |
| N | Alcohol 120% | Alcohol.exe | Alcohol 120% CD/DVD emulation and burning utility from Alcohol Soft - which allows you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place |
| N | Alcohol 52% | Alcohol.exe | Alcohol 52% CD/DVD emulation utility from Alcohol Soft - which allows you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place |
| N | Alcohol Soft Development Team | axcmd.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present prior to version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| N | Alcohol Virtual Drive Auto-mount Service | AxAutoMntSrv.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present from version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| N | Alcohol.exe Autorun | Alcohol.exe | Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. Alcohol 120% includes burning capabilities |
| N | AlcoholAutomount | axcmd.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present prior to version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| N | AlcoholAutomount | AxAutoMntSrv.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present from version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| ? | Alcom PCL Capture | FMW_PCAP.EXE | ?? |
| X | alcomrg.exe | alcomrg.exe | Added by the SDBOT-DNT WORM! |
| U | AlcWzrd | ALCWZRD.EXE | RealTek AlcWzrd Application, installed with the drivers for on-board Realtek HD audio codecs. On an ALC885 based test system it runs only once after the drivers have been installed and the startup entry is then removed. Disabling it appears to have no ill effects but it's exact purpose is unknown - hence the "U" recommendation |
| U | AlcxMonitor | Alcxmntr.exe | Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation |
| X | aldefr ere service | tay0x.exe | Added by the RBOT-XS WORM! |
| X | alerter | alerter.exe | MAHA.F spyware |
| X | Alevir | Alevir.exe | Added by the OPASERV-A WORM! |
| X | AlevirOld | [worm filename] | Added by the OPASERV WORM! |
| N | Alexa | alexa.exe | Related to Alexa. Note - collects and stores information about the web pages you view, the data you enter in online forms and search programs and, with versions 5.0 and higher, the products you purchase online whilst using the toolbar. Although Alexa state's they do not attempt to analyze the data it may collect about you to determine who you are, some of your information collected by the software is personally identifiable. Please read the Privacy Policy. Not Recommended |
| X | Alexa bridge | [random].exe | Added by the AGENT-EBL TROJAN! |
| X | AlexaToolbar | alt.exe | Identified by Ewido Security Suite (Ewido is now part of AVG Technologies) as the DELF.EB TROJAN! |
| X | AlfaAntivirus | runbst.exe | AlfaAntiVirus rogue security software - not recommended |
| X | AlfaCleaner | AlfaCleaner.exe | AlphaCleaner rogue security software - not recommended, removal instructions here |
| U | AlfaClock Classic | AlfaClock.exe | AlfaClock Free Edition from AlfaSoft Research Labs - "enhances your taskbar clock (tray clock) with fully customizable clock display, alarms, time synchronization and more" |
| U | AlfaClock2 | AlfaClock2.exe | AlfaClock2 from AlfaSoft Research Labs -"enhances your tray clock functionality. Of course, you can customize the look, adjusting fonts, colors, backgrounds and more. But, the main goal of this program is to extend your tray clock functionality" |
| ? | ALFY Accellerator | AlfyAC~1.exe | ?? |
| X | alg | alg.exe | Added by the SDBOT-DJC WORM! |
| X | ALG.EXE | iexplorer .exe | Added by the DEMOTRY-B WORM! |
| X | ALG32 | ALG32.EXE | Added by the STARTPAGE.K hijacker |
| X | algchk.exe | algchk.exe | Detected by Kaspersky as the VB.ATE TROJAN! |
| X | ALGU | ALGU.EXE | Added by the CWS-I TROJAN! |
| X | ALGU.exe | ALGU.exe | Added by the STARTPAGE.O TROJAN! |
| X | algv.exe | algv.exe | Added by the AUTORUN-BEA WORM! |
| U | ALi5289 | ALi5289.exe | Related to Uli Integrated Drivers from Uli Electronics Inc |
| Y | Aliant Security Services | Rps.exe | Main program for the Aliant Security Services internet security suite for Bell Aliant ISP customers - sourced by Radialpoint |
| N | Alias SketchBook Snapshot | ALIASS~2.EXE | Screen-capture utility for Alias Sketchbook |
| U | AliceRE_McciTrayApp | MCCITR~1.EXE | System tray access to Motive's broadband configuration and repair utility - for AliceRE |
| U | AliceRE_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for AliceRE |
| U | AliceRV_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for AliceRV |
| N | AlienAutopsy | Test_BS.exe | Alienware computer technical support software |
| U | Alienware News Feed | Alienware News Feed.exe | RSS Reader gadget included with the Alienware theme for MyColors from Stardock Corporation |
| Y | ALiSndMgr | ALiSndMg.exe | ALi AC97 Sound driver |
| ? | AliUSBfix | GREENMK.exe | May be realted to a USB 2.0 PCI card - the IOgear GIC220OU? |
| X | Alive SYstem | scchost.exe | Added by the TOFDROP-B TROJAN! |
| X | Alive SYstem | scchostc.exe | Added by the TOFDROP-B TROJAN! |
| X | alkasr | ?????.exe | Added by the BALKART TROJAN! |
| U | All Aboard Status | stswin.exe | All Aboard! Internet Connection Sharing status icon |
| X | All Sea screen saver | TaskTray.exe | Free screensaver, installs lots of foistware - remove it |
| X | All Sea web link | FWLink.exe | Free screensaver, installs lots of foistware - remove it |
| U | AllegroSurf Tray | ASVOYA~1.EXE | System Tray access to the AllegroSurf web accelerating and content filtering proxy server from Rhino Software, Inc - which allows the sharing of a single Internet connection between multiple computers on a LAN |
| U | AllegroSurf Tray | ASVoyager.exe | System Tray access to the AllegroSurf web accelerating and content filtering proxy server from Rhino Software, Inc - which allows the sharing of a single Internet connection between multiple computers on a LAN |
| U | AllegroSurf® Proxy Server | ASVOYA~1.EXE | System Tray access to the AllegroSurf web accelerating and content filtering proxy server from Rhino Software, Inc - which allows the sharing of a single Internet connection between multiple computers on a LAN |
| U | AllegroSurf® Proxy Server | ASVoyager.exe | System Tray access to the AllegroSurf web accelerating and content filtering proxy server from Rhino Software, Inc - which allows the sharing of a single Internet connection between multiple computers on a LAN |
| N | AllerCalc | AllerCalc.exe | AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually |
| X | alligt | severe.exe | Added by the SLURK.A WORM! |
| X | Allopassw | [path to backdoor] | Added by the RANKY.CU BACKDOOR! |
| U | AllSeeingEye | ase.exe | All-Seeing_Eye security software - "monitors everything that takes place on your computer, and alerts the user as soon as anything suspicious or out-of-the-ordinary is happening, providing the user with alternatives for possible actions" |
| U | allSnap | allSnap.exe | "allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop" |
| U | ALLTEL DSL Check-up Center | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". ALLTEL DSL Check-up Center is required to run with the Help and Support program. If you uncheck ALLTEL DSL Check-up Center and then run Help and Support it will add another ALLTEL DSL Check-up Center in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| U | AllToTray | ALLTOTRAY.EXE | AlltoTray from DNTSoft - minimize any program to your System Tray |
| X | ALM | csrss32.exe | Added by the ANACON-D VIRUS! |
| X | ALM | anacon32.exe | Added by the ANACON-C WORM! |
| U | Almondrv | svcwinra.exe | System Surveillance Pro surveillance software. Uninstall this software unless you put it there yourself |
| X | Alogrithm Link Queue | alq.exe | Added by a variant of the SDBOT WORM! |
| U | Alogserv | Alogserv.exe | From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
| U | ALPass | ALPass.exe | ALPass password manager |
| X | alpha | svchost.exe | Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies |
| X | AlphaAnt | alpha.exe | Alpha Antivirus rogue security software - not recommended, removal instructions here |
| X | AlphaAV | AlphaAV.exe | Alpha Antivirus rogue security software - not recommended, removal instructions here |
| Y | Alps Electric USB Server | Monserv.exe | Alps Electric USB Server - required according to this article |
| U | AlpsPoint | Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
| U | ALServ | ALServ.exe | Utility that enables a user to control the volume and surround sound and select Pro Logic/Stereo on 2 satellite speakers and subwoofer of old Altec Lansing speaker systems. The right-side speaker has 4 controls on top providing same functionality |
| X | alt CTRL Shift | et3rd.exe | Added by the SDBOT-RH BACKDOOR! |
| X | alt CTRLx Shift | et3rd.exe | Added by the SDBOT-RG WORM! |
| X | ALTER DATA | [path] repcale.exe [path] beird.exe | Added by the IRCFLOOD.CD TROJAN! Both files are located in %System%\ccdew |
| X | Altnet | points manager.exe | Altnet TopSearch adware |
| X | AltnetPointsManager | points manager.exe | Altnet TopSearch adware |
| U | AltoMB_service | AltoMBsrv.exe | Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| U | ALTOOLS | AccessL.exe | ALTools family of PC utilities |
| X | AltPayments | AltPayments.exe | WeirdOnTheWeb adware |
| Y | ALU Scheduler Service | ALUSchedulerSvc.exe | LiveUpdate scheduler for older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Leave alone to ensure virus definitions are updated. Loads via a registry "RunServices" key in 98/Me and as a service in XP/Vista |
| U | ALUAlert | ALUNotify.exe | Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
| N | Aluria Security Center | SecurityCenter.exe | Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
| U | Aluria's Pop-Up Stopper | eps.exe | Aluria Pop-Stopper |
| N | Aluria's Spyware Eliminator | ASE.exe | Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
| U | AlwaysOnTopMaker | AlwaysOnTopMaker.exe | Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
| U | AlwaysReady Power Message APP | ARPWRMSG.EXE | "Away Mode" feature added with Update Rollup 2 for Windows XP Media Center Edition 2005 that allows the computer to appear off to the user while it continues to perform tasks that do not require user input, such as recording television and viewing Media Center Extender sessions. For more information see here |
| X | AmazingTens | AmazingTens.exe | Premium rate adult content dialler |
| U | AMD PowerNow! | GemBack.exe | AMD PowerNow! - "an innovative solution available on all AMD mobile processor-based notebooks that can effectively increase notebook battery life, while delivering performance on demand" |
| Y | amd_dc_opt | amd_dc_opt.exe | AMD Dual-Core Optimizer - "can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction" |
| N | AME_CSA | rundll32 amecsa.cpl, RUN_DLL | Loads ADSL modem Control Panel applet |
| N | America Online | aoltray.exe | Adds the AOL icon in the System Tray (*.* denotes version if present) for versions of AOL up to and including 9.0. Start AOL via the desktop or quick launch shortcuts or via Start → All Programs |
| N | America Online *.* Tray Icon | aoltray.exe | Adds the AOL icon in the System Tray (*.* denotes version if present) for versions of AOL up to and including 9.0. Start AOL via the desktop or quick launch shortcuts or via Start → All Programs |
| X | ami.exe | ami.exe | Added by the SILLYFDC-AY WORM! |
| U | AmIcoSinglun | AmIcoSinglun.exe | Single LUN Icon Utility - System Tray access/notification for card readers using controllers from Alcor Micro which incorporate Single LUN, such as the AU6336, AU6439 and AU6431 |
| U | AmIcoSinglun64 | AmIcoSinglun64.exe | Single LUN Icon Utility - System Tray access/notification for card readers using controllers from Alcor Micro which incorporate Single LUN, such as the AU6336, AU6439 and AU6431 |
| X | Amie Release V6.9D | services.exe | Added by the VB-EAN TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | amircivil | svchost.exe… | Added by the AMIRECIVEL WORM! |
| U | AMO_TA~1 | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AMO_TA~1.EXE | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AMO_Taskplaner.exe | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AModemLockDown | ModemLockDown.exe | ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc |
| Y | Amon | AMON.EXE | Monitoring part of Eset's NOD32 antivirus |
