| Status | Autorun name | Command | Description |
| N | ashampoo UnInstaller Watcher | UIWatcher.exe | Part of the Ashampoo® UnInstaller series from Ashampoo GmbH & Co. KG - including UnInstaller Platinum 2, UnInstaller 3 and UnInstaller 4. These monitor and record program installations and allows you to remove them completely, so that no trace is left. This is the installion monitor that sits in the System Tray and detects the launch of installation programs |
| Y | ashAvast | ashAvast.exe | Part of earlier versions of avast! antivirus products |
| Y | ashAvast.exe | ashAvast.exe | Part of earlier versions of avast! antivirus products |
| X | ashcap | servirsess.exe | SpySure spyware |
| X | ashDip.exe | ashDip.exe | Added by the DROPR-CZ TROJAN! |
| Y | ashDisp | ashDisp.exe | System Tray access to and notifications for the version 4.* series of antivirus products from avast! - giving left-click access to the On-Access Scanner, right-click access to other options and event notifications |
| X | ashDsp.exe | ashDsp.exe | Added by a variant of the SDBOT WORM! |
| X | ASHLT | Ashlt.exe | Ashlt adware |
| Y | ashMaiSv | ashmaisv.exe | E-mail scanning part of earlier versions of avast! antivirus products. Starts via a registry "Run" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| X | Asia | easm.exe | PurityScan adware |
| X | Asicfc | icfca.exe | Added by the AGENT.AAJE WORM! |
| U | AsioReg | regsvr32.exe ctasio.dll | ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
| U | AsioThk32Reg | rregsvr32.exe ctasio.dll | ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality |
| U | ASK | rundll32.exe [path] ASK.dll rdl | Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| U | Ask and Record FLV Service | FLVSrvc.exe | Part of Applian Technologies Replay Media Catcher (streaming video and audio/MP3 downloader) and Freecoder (save video and audio from the web and convert to many popular formats - formally known as Ask & Record Toolbar). "Allows the video history tool to save videos you've played from your computer's cache" - see here. As it's based upon the Ask.com tooblar it sets your default search engine to Ask if not unchecked |
| X | asl | Aslru.exe | Added by the BANCOS-CU TROJAN! |
| U | ASM | ASMonitor.exe | Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses, spyware and other dangers and learn what steps you can take to improve your protection |
| U | Asmw Soft Popups Burner | popups burner.exe | Popup blocker, part of Asmw Soft PC Optimizer |
| X | asnconsole | msasn.exe | Added by the RBOT.EVU TROJAN! |
| U | ASO | aso.exe | Mildware ASO screenshot capturing utility. Uninstall this software unless you put it there yourself |
| X | ASocksrv | SocksA.exe | Added by the VB.CBW WORM! |
| X | asp-srvc | asp-srvc.exe | Added by the AGOBOT-KG WORM! |
| X | ASP.NET State Service | csrss.exe | Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | ASP.NET State Service | crsass.exe | Added by the BANLOAD-M TROJAN! |
| X | ASP.NET State Service | servicos..exe | Added by the DADOBRA-I TROJAN! |
| N | asp4tray | asp4tray.exe | System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel |
| ? | AspireService | AspireService.exe | Found on Acer laptops, the process name for this entry is "Win32 Service for Control Board and Remote Control" and it's part of Acer eMode Management. What does it do and is it required? |
| Y | AspireTimeMachine | acertmb.exe | System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry |
| X | ASpyC | ASpyC.exe | AntiSpyCheck rogue spyware remover - not recommended, removal instructions here |
| X | asr64_ldm.exe | asr64_ldm.exe | Added by the Dr. Guard rogue security software - not recommended, removal instructions here |
| X | asrupdate.exe | asrupdate.exe | Added by the VB.ATZ TROJAN! |
| X | Ass and titties | CMD32.EXE | Added by the SDBOT-GG BACKDOOR! |
| N | AsShare | AsShare.exe | System Tray access to and notifications for the AI Direct Link data transfer utility included with some ASUS motherboards. "Lightning Fast Data Linkage between Your PC & Laptop AI Direct Link can easily and efficiently transfer large amounts of data via the network cable - saving up to 70% of the total time taken. With AI Direct Link, it becomes easy to backup or share large data files like movies or other media content" |
| N | AsShare.exe | AsShare.exe | System Tray access to and notifications for the AI Direct Link data transfer utility included with some ASUS motherboards. "Lightning Fast Data Linkage between Your PC & Laptop AI Direct Link can easily and efficiently transfer large amounts of data via the network cable - saving up to 70% of the total time taken. With AI Direct Link, it becomes easy to backup or share large data files like movies or other media content" |
| X | assistse | ASSISTSE.EXE | CnsMin (Chinese Keywords) hijacker related |
| X | AST | AST | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | AST | AST.exe | AutoStartup spyware |
| U | ASTART | astart.exe | ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| X | AStart | AStart | Added by the VB.AH TROJAN! |
| N | asTray | Astray.exe | Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer |
| N | Astro | Astro.exe | Checks for updates to Quicken on a system reboot |
| X | Astrum | Astrum.exe | Astrum Antivirus Pro rogue security software - not recommended, removal instructions here |
| X | asus | asus.exe | Added by the RBOT-OC WORM! |
| ? | ASUS Camera ScreenSaver | ASScrProlog.exe | Either a valid program on some ASUS laptops - such as the F3 and F5 series or unsafe, according to PREVX and InCode Solutions. Can any ASUS owners with this file confirm? File is located in %Windir% |
| U | ASUS ChkMail | ChkMail.exe | Mail-checking utility supplied with some ASUS notebooks that uses an LED to notify the user when an E-mail has arrived |
| U | ASUS Energy Saving | PwSave.exe | Part of the AI Suite system management utility included with some ASUS motherboards. This entry is part of AI Gear 3+ - "a utility designed to configure and support all ASUS EPU (Energy Processing Unit) features. This easy-to-use utility provides four system performance profiles that adjusts the processor frequency and vCore voltage for different computing needs." Monitors the energy savings made via the EPU and when the Energy Saving option of AI Gear 3+ is selected it displays the current status and provides access to the calculator |
| N | ASUS Live Update | ALU.exe | ASUS Live Update utility for their motherboards |
| N | ASUS Probe | AsusProb.exe | ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area |
| ? | ASUS Screen Saver Protector | ASScrPro.exe | Either a valid program on some ASUS laptops - such as the F3 and F5 series or unsafe, according to PREVX and InCode Solutions. Can any ASUS owners with this file confirm? File is located in %Windir% |
| U | ASUS SmartDoctor | VGAProbe.exe | "ASUS SmartDoctor is a group of special tools to help users make the most of their ASUS graphics cards. It monitors the Fan RPM, AGP Power Level, GPU and RAM temperature, and has a slide bar for easy manual overclocking" |
| U | ASUS SmartDoctor | SmartDoctor.exe | "ASUS SmartDoctor is a group of special tools to help users make the most of their ASUS graphics cards. It monitors the Fan RPM, AGP Power Level, GPU and RAM temperature, and has a slide bar for easy manual overclocking" |
| U | ASUS TweakEnable | astart.exe | ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| N | ASUS Update Checker | UpdateChecker.exe | Part of the ASUS Update Windows based BIOS update utility included with some ASUS motherboards. Checks the current BIOS revision. Note that with the version tested (7.16.02 Beta) if this entry was allowed to run at startup, ASUS Update would not run properly and casued system errors |
| ? | AsusACPIServer | AsAcpiSvr.exe | Part of the ACPI driver for the Asus Eee PC range. What does it do and is it required? |
| U | AsusEPCMonitor | AsEPCMon.exe | Part of the ACPI driver for the Asus Eee PC range. Manages the Fn function keys and "on screen display" |
| N | ASUSGamerOSD | GamerOSD.exe | GamerOSD by ASUS - for "real-time overclocking, benchmarking and video capturing in any PC game". Free for ASUS graphics cards, 30-day trial for non-ASUS graphics cards |
| N | ASUSKey | V38SHELL.EXE | System tray Icon for quickly changing video modes |
| ? | AsusStartupHelp | AsRunHelp.exe | Unknown ASUS motherboard utility. What does it do and is it required? |
| X | asussvc | asussvc.exe | Added by the AGENT-FPB TROJAN! |
| U | AsusTray | AsTray.exe | Part of the ACPI driver for the Asus Eee PC range. Watches the sensors of the motherboard such as power and temperature |
| U | asustweakenable | ATweak.exe | ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings |
| N | ASUSWebStorage | ASUSWSDashBoard.exe | System Tray access to an older version of the ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts |
| N | ASUSWebStorage | AsusWSPanel.exe | System Tray access to the ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts |
| N | AsusWSDashBoard | ASUSWSDashBoard.exe | System Tray access to an older version of the ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts |
| N | AsusWSPanel | AsusWSPanel.exe | System Tray access to the ASUS Webstorage online backup and sharing utility which is pre-installed on some ASUS systems or available for free (with 1GB available) for others. Disable unless you want to automatically backup and sync your files every time your system starts |
| X | asvhost.exe | asvhost.exe | Added by the ICEDOOR-A TROJAN! |
| N | ASWDP | ASWDP.exe | MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market |
| X | ASWnk | aswnk.exe | Adult content dialler |
| Y | AT&T Internet Security Suite | Rps.exe | Main program for the AT&T Internet Security Suite for AT&T ISP customers - sourced by Radialpoint |
| U | AT&T Self Support Tool | matcli.exe | AT&T Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Resolution Assistant is required to run with the Help and Support program. If you uncheck AT&T Self Support Tool and then run Help and Support it will add another in the startup menu. If you remove Resolution Assistant via add/remove programs some menus in help and support will not be available. You decide |
| U | AT-Watch | ATWatch.exe | Anti-Trojan Watch - trojan detector |
| U | Atalho para a Página de Propriedades do High Definition Audio | HDAudPropShortcut.exe | Realtek audio card related. Probably adds the odd feature to one of the "Sounds" Control Panel applet tabs - doesn't appear to be required. Portuguese version |
| X | atapidrv | atapidrv.exe | Added by the AGOBOT-SL WORM! |
| U | atchk | atchk.exe | AMT Status Message from Intel. Users can manage this, read the article. See here for more information on Intel AMT |
| X | atf.exe | pgs.exe | Part of the PCSecureSystem rogue security software - not recommended. A member of the AVSystemCare family |
| X | atf_reinstall | atf.exe | Part of the AVSystemCare rogue security software - not recommended. See here |
| U | Athan | Athan.exe | Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world |
| U | ATI 2D Component | Ati2mdxx.exe | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the "U" recommendation |
| X | ATI Active Graphics Card Monitor | atievx.exe | Added by the IRCBOT-TL WORM! |
| X | ATI AS Filter | msnse.exe | Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines, preventing access to the virus cleaning websites |
| N | ATI CATALYST System Tray | CLI.exe SystemTray | System Tray access to ATI's Catalyst™ Control Center. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop |
| X | Ati Control Panel | atiphexx.EXE | Added by the RBOT-BR WORM! |
| X | ATI Cpanel | atiphexx.exe | Added by the AGOBOT-NV WORM! |
| N | ATI Customer Care | ATICustomerCare.exe | Launches registration for ATI graphics cards and sends back bug-reports if a crash occurs (in a game for example) |
| U | ATI Desktop Component | ATIPTAXX.EXE | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution, color depth and multi-display schemes), help and troubleshooting. Unless you often change your display settings this isn't really required as all the settings are available via the system Control Panel under "Display" |
| N | ATI DeviceDetect | ATIDtct.EXE | Utility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled |
| X | ATI Display | ATIDisplay.exe | Added by the BDOOR-AFH BACKDOOR! |
| X | ATI Display Driver | atixd.exe | Added by the RBOT-FOV WORM! |
| X | Ati Display Settings | atividx.exe | Added by the RBOT-GAS WORM! |
| N | ATI GART Set-up Utility | Atigart.exe | Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed |
| U | ATI Launchpad | launchpd.exe | Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu |
| X | ATI Rage3d Pro | AtiRage4dPro.exe | Added by the AGOBOT-OG WORM! |
| Y | ATI Remote Control | ATIRW.exe | ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it |
| Y | ATI Remote Control | ATIX10.exe | ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it |
| N | ATI Scheduler | Atisched.exe | Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see |
| N | ATI Task Application | Atitkad.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| N | ATI Task Application (Atikey) | Atitask.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| U | ATI Technologies Inc. HydraVision Desktop Manager | HydraDM.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is the HYDRAVISION Desktop Manager - which "customizes the behaviour of windows and dialog boxes, allows you to set up Hotkeys for navigation in multiple display configurations and applies special effects like transparency and shadows to you desktop" |
| U | ATI Technologies Inc. HydraVision Viewport | HydraMD.exe | Part of HYDRAVISION - ATI's software for managing mutliple displays and virtual desktops. This is HYDRAVISION MultiDesk - which "creates, organizes and arranges up to nine active multi-monitor desktop combinations and allows you to cycle between them with a mouse." There is an optional System Tray icon or a hotkey can be configured to cycle through the desktops |
| X | ATI Technology Startup | techstart.exe | Added by the RBOT-AEU WORM! |
