| Status | Autorun name | Command | Description |
| X | ATI Video Driver Control | atigfx.exe | Added by the RBOT-FWL WORM! |
| X | ATI Video Driver Control | btorrent.exe | Added by a variant of the IRCBOT TROJAN! |
| X | ATI Video Driver Control | ATIControl.exe | Added by the RBOT.DOO BACKDOOR! |
| X | ATI Video Driver Control | btorrent.exe | Added by the RBOT.BLL BACKDOOR! |
| X | ATI Video Driver Control | ftpex.exe | Added by the BZUB.FAS TROJAN! |
| X | ATI Video Driver Control | Messen.exe | Added by a variant of the RBOT WORM! See here |
| X | ATI Video Driver Controls | [path to worm] | Added by the SDBOT-DDS WORM! |
| X | ATI VIDEO REGKEY | ati2vid.exe | Added by the SDBOT.UR WORM! |
| ? | Ati2cwxx | Ati2cwxx.exe | For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it |
| X | Ati2evxx | Ati2evxx.com | Added by the BACKDOOR-CPC TROJAN! |
| X | ati2f104 | ati2f104.exe | Added by the DLOADR-BBW TROJAN! |
| U | Ati2mdxx | Ati2mdxx.exe | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the "U" recommendation |
| N | ATICCC | cli.exe runtime | ATI's Catalyst™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. Recommend that start the program manually via Start → Programs → ATI Catalyst Control Center → Advanced → Restart Runtime as it can cause problems when starting Windows |
| N | ATICCC | CLIStart.exe | Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs |
| X | AtiCpanel | atiphexx.exe | Added by the AGOBOT.IL WORM! |
| X | aticpaxx.exe | aticpaxx.exe | Added by the RBOT-XP WORM! |
| N | ATICustomerCare | ATICustomerCare.exe | Launches registration for ATI graphics cards and sends back bug-reports if a crash occurs (in a game for example) |
| U | AtiCwd | AtiCwd.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd | Ati2cwad.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd32 | AtiCwd32.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| U | AtiCwd32 | Ati2cwad.exe | This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card |
| X | AtiDisplayDrv | atidrvxx.exe | Added by the RBOT-VZ WORM! |
| X | atidriver | reaIplayer.exe | Added by the WARPIGS-E WORM! Note the uppercase "I" in the filename, rather than a lower case "L" |
| N | AtiGart | Atigart.exe | Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed |
| N | AtiKey | atiptkad.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Control Panel → Display |
| N | Atikey | Atitask.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| N | AtiKey | AtiKey32.exe | System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display |
| U | ATIMACE | MACE.exe | ATI Technologies Control Centre - installed alongside ATI graphics hardware and provides additional configuration options for these devices in the Managed Access to Catalyst™ Environment (MACE) component |
| U | ATIModeChange | Ati2mdxx.exe | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. After testing it's exact function isn't known at this time and it doesn't appear to be running even with the startup entry enabled - hence the "U" recommendation |
| X | AtiPanel | atip.exe | Added by the TACTSLAY.U TROJAN! |
| X | atipatxx | atipatxx.exe | Added by the SMALL-ED TROJAN! |
| N | ATIPOLAB | ati2evxx.exe | Hotkey handler for ATI desktop and mobile graphics chipsets. Users report that most of the hotkeys aren't well documented, they aren't therefore used and it can consume lots of CPU resources on some computers. Unless you use the hotkeys leave it disabled. Starts via a registry "Run" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| U | ATIPOLAB | ati2evae.exe | ATI Polling Program - part of the ATI graphics driver e.g. on some Fujitsu-Siemens Notebooks |
| N | ATIPOLL | ati2evxx.exe | Hotkey handler for ATI desktop and mobile graphics chipsets. Users report that most of the hotkeys aren't well documented, they aren't therefore used and it can consume lots of CPU resources on some computers. Unless you use the hotkeys leave it disabled. Starts via a registry "Run" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| U | AtiPTA | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | ATIPTA | ATIPTAXX.EXE | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution, color depth and multi-display schemes), help and troubleshooting. Unless you often change your display settings this isn't really required as all the settings are available via the system Control Panel under "Display" |
| U | AtiPTA | Atiptaab.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start → Settings → Control Panel → Display. Some users may need it if they have optimised their settings |
| U | AtiPTAAA | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | AtiPTAAA | ATIPTAXX.EXE | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution, color depth and multi-display schemes), help and troubleshooting. Unless you often change your display settings this isn't really required as all the settings are available via the system Control Panel under "Display" |
| U | atiptaxx | Ati2ptxx.exe | Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings |
| U | ATIPTAXX | ATIPTAXX.EXE | Installed with the drivers for some ATI based discrete graphics cards and on-board/mobile chipsets. Provides System Tray access to display settings (including desktop resolution, color depth and multi-display schemes), help and troubleshooting. Unless you often change your display settings this isn't really required as all the settings are available via the system Control Panel under "Display" |
| X | atiptext | atiptext.exe | Added by the COSIAM-A TROJAN! |
| U | AtiQiPcl | AtiQiPcl.exe | Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's |
| Y | ATIRmtWndr | ATIX10.exe | ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it |
| U | ATISmart | ati2s9ag.exe | ATI's "SMARTGART", which is included with the Catalyst™ drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings |
| U | AtiSound | csrss.exe | WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "ComRoot" subfolder |
| X | atisrc2 | windfind.exe | Added by the WINDFIND-A TROJAN! |
| X | ATITech | Active.exe | Added by the ROAMER-A TROJAN! |
| U | atitray | atitray.exe | ATI Tray Tools - allows quick access to ATI graphics card settings |
| U | AtiTrayTools | atitray.exe | ATI Tray Tools - allows quick access to ATI graphics card settings |
| X | atiupdate | ATIUPDATE5.EXE | Added by the DEBESKI.A TROJAN! |
| X | atiupdate | msshed32.exe | Added by the DELF.EP downloader TROJAN! |
| X | ATIUpdater | atiupdxx.exe | Added by the RBOT-ABX WORM! |
| X | Atiupdpl | atiupdpl.exe | Added by the SMALL.AOS TROJAN! |
| X | ativopen | ativopen.exe | Premium rate adult content dialler |
| Y | ATIX10 | atix10.exe | ATI Remote Wonder™ - PC wireless remote control driver. Required if you use it |
| U | ATKMEDIA | DMEDIA.EXE | Driver for the media buttons on the front of some Asus laptops, such as Forward,back,stop,pause etc |
| U | ATKOSD2 | ATKOSD2.exe | On-screen display utility bundled with laptops from ASUS. If this utility is not installed then you will not be able to properly use other AsusTek utilities such as Splendid and Power Gear |
| X | Atl**.exe [* = random char] | Atl**.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| X | Atl**32.exe [* = random char] | Atl**32.exe [* = random char] | CoolWebSearch/HomeSearch adware - for examples, see this log |
| U | atlcontrol | atlcontrole.exe | Atlcontrol adware |
| X | ATM Control | adpn.exe | Added by the MMS.A WORM! |
| N | ATnotes | atnotes.exe | Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs |
| U | Atomic Time Synchronizer | TimeSync.exe | TimeSync - lets you synchronize your computer's clock with any internet atomic clock |
| X | Atomic-x27 | Atomic-x27.exe | Added by the KATOMIK-A WORM! |
| X | Atomic-x27C | AtomicpartC.exe | Added by the KATOMIK-A WORM! |
| U | Atomic.exe | Atomic.exe | Atomic Clock Sync - synchronizes your computer's time with the NIST time server |
| N | Atomica | atomica.exe | Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key |
| U | AtomicTime | ATOMICTIME.EXE | AtomicTime - utility that synchronizes your PC clock to an atomic clock |
| U | AtomSync | atomsync.exe | AtomSync - "this NTP client synchronizes your PC clock with an internet atomic time server or with a time server on your LAN" |
| U | Atrack | atrack.exe | New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert |
| U | Atray | Atray.exe | Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons |
| U | ATSpooler | AppsTraka.exe | DeskTopScout keystroke logger/monitoring program - remove unless you installed it yourself! |
| U | ATT-SST_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for AT&T users |
| U | ATTBroadbandUpdate | SAUpdate.exe | Big Brother from Quest Software. System and network monitor |
| U | ATTRedUpdate | AutoUpdate.exe | Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates |
| X | Attune Download | Attunel.exe | Aveo Attune automated helpdesk software - regarded as adware |
| X | AttuneClientEngine | attune_ce.exe | Aveo Attune automated helpdesk software - regarded as adware |
| X | AttuneContentUpdater | attune_cu.exe | Aveo Attune automated helpdesk software - regarded as adware |
| X | AttuneDiscovery | attune_di.exe | Aveo Attune automated helpdesk software - regarded as adware |
| X | Attunel | Attunel.exe | Aveo Attune automated helpdesk software - regarded as adware |
| X | AttuneSystray | attune_st.exe | Aveo Attune automated helpdesk software - regarded as adware |
| N | aTuner | atuner.exe | aTuner - tweak tool for GeForce based graphics cards |
| U | atuvp | dtor.exe | EZKeylogger keystroke logger/monitoring program - remove unless you installed it yourself! |
| Y | atwtusb | atwtusb.exe | USB interface for Aiptek Graphics Tablet (USB) |
| X | AtxBrw | Iexplor.exe | "Pop Marketing" adware |
| U | au | DealioAu.exe | Dealio Toolbar is a free shopping comparison toolbar that allows users to search for a wide range of consumer products |
| U | AU Agent | AUagent.exe | Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon |
| X | au.exe | au.exe | Added by the BEAGLE.B WORM! |
| Y | AUCBPNP | aucbnpn.exe | Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot |
| X | Aucompat | Aucompat.exe | Added by the GEMA TROJAN! |
| X | Audcntr | audcntr.exe | Added by the GEMA TROJAN! |
| ? | AudCtrl | RunDll32 AudCtrl.dll, RCMonitor | Audio control panel? |
| X | audi32 | audi32.exe | Added by the RANCK-FL TROJAN! |
| X | AUDIO | SOUND.exe | Added by the PLOYB-A TROJAN! |
| X | Audio Device Manager | winfp.exe | Added by the IRCBOT-XS WORM! |
| X | Audio Device Manager | WinNT.exe | Added by the IRCBOT.USP BACKDOOR! |
| X | Audio Device Manager | WNDXP.exe | Added by the IRCBOT.AJL BACKDOOR! |
| X | Audio Device Manager | sfhgj.exe | Added by the IRCBOT-ZA BACKDOOR! |
| X | Audio HD Driver | [random.exe] | Added by the AGENT-OAL TROJAN! |
