| Status | Autorun name | Command | Description |
| X | VirusCheckII | AVIRCHK.EXE | Added by the DASMIN TROJAN! |
| X | VirusCureMain | VirusCure.exe | VirusCure rogue security software - not recommended, removal instructions here |
| X | VirusDifesa | pgs.exe | VirusDifesa, Italian rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusEffaceur | pgs.exe | VirusEffaceur, French rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusForsvar | pgs.exe | VirusForsvar, Danish rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusGarde | pgs.exe | VirusGarde, French rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusGuardPlus | pgs.exe | VirusGuardPlus rogue security software - not recommended, removal instructions here. A member of the AVSystemCare family |
| X | VirusHeal 3.7 | VirusHeal 3.7.exe | VirusHeal rogue security software - not recommended, removal instructions here |
| X | VirusHeal 3.8 | VirusHeal 3.8.exe | VirusHeal rogue security software - not recommended, removal instructions here |
| X | VirusHeal 3.9 | VirusHeal 3.9.exe | VirusHeal rogue security software - not recommended, removal instructions here |
| X | VirusHeal 4.1 | VirusHeal 4.1.exe | VirusHeal rogue security software - not recommended, removal instructions here |
| X | VirusHeat 3.9 | VirusHeat 3.9.exe | VirusHeat rogue security software - not recommended, removal instructions here |
| X | VirusHeat 4.3 | VirusHeat 4.3.exe | VirusHeat rogue security software - not recommended, removal instructions here |
| X | VirusHeat 4.4 | VirusHeat 4.4.exe | VirusHeat rogue security software - not recommended, removal instructions here |
| X | VirusIsolator | VirusIsolator | VirusIsolator rogue security software - not recommended, removal instructions here |
| X | VirusIsolator.exe | VirusIsolator.exe | VirusIsolator rogue security software - not recommended, removal instructions here |
| U | VirusKeeper | VirusKeeper.exe | VirusKeeper uses a powerful real-time threat detection engine |
| X | VirusLocker | VirusLocker.exe | VirusLocker rogue security software - not recommended, removal instructions here |
| X | VirusProtect 3.8 | VirusProtect 3.8.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtect 3.9 | VirusProtect 3.9.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtectPro 3.3 | VirusProtectPro 3.3.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtectPro 3.4 | VirusProtectPro 3.4.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtectPro 3.5 | VirusProtectPro 3.5.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtectPro 3.6 | VirusProtectPro 3.6.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusProtectPro 3.7 | VirusProtectPro 3.7.exe | VirusProtect Pro rogue security software - not recommended, removal instructions here |
| X | VirusRanger | VirusRanger.exe | VirusRanger rogue security software - not recommended |
| X | VirusRay 3.7 | VirusRay.exe | VirusRay rogue security software - not recommended, removal instructions here |
| X | VirusRay 3.8 | VirusRay 3.8.exe | VirusRay rogue security software - not recommended, removal instructions here |
| X | VirusRemover2008 | VRM2008.exe | VirusRemover2008 rogue security software - not recommended, removal instructions here |
| X | VirusRemover2009 | VRM2009.exe | VirusRemover2009 rogue security software - not recommended, removal instructions here |
| X | VirusRescue | VirusRescue.exe | VirusRescue rogue security software - not recommended |
| X | VirusResponseLab2009 | VirusResponseLab2009.exe | VirusResponse Lab 2009 rogue security software - not recommended, removal instructions here |
| X | VirusRL2009 | VirusRL2009.exe | VirusResponse Lab 2009 rogue security software - not recommended |
| Y | VirusScan Online | mcvsshld.exe | ActiveShield - background scanner for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online which scans files in the background as and when they are accessed, including scanning E-mails via the McAfee VirusScan E-mail Scan Module (McVSEscn.exe) |
| ? | VirusScanMSC | VsStat.exe | Part of McAfee VirusScan. System Tray application as with previous versions (were also VsStat.exe), McAfee SecurityCenter integration or something else? Is it required? |
| X | VirusScanner | mnsys.exe | Added by the SDBOT-AFQ WORM! |
| X | VirusSchlacht | pgs.exe | VirusSchlacht, German rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusSeigyo | pgs.exe | VirusSeigyo rogue security software - not recommended. A member of the AVSystemCare family |
| X | VirusTriggerBin | VirusTriggerBin.exe | Virus Trigger rogue security software - not recommended, removal instructions here |
| X | VirusVakt | pgs.exe | VirusVakt, Swedish rogue security software - not recommended. A member of the AVSystemCare family |
| X | visin | visin.exe | Lmir.1DB8!pws spyware |
| N | visionGS | VISIONGS.EXE | visionGS webcam software |
| U | ViSplore | ViSplore.exe | ViSplore (Glass Browser for XP) adds a Vista style file browser for Windows XP users |
| U | Vista Start menu | VistaStartMenu.exe | "Vista Start Menu is the convenient alternative to the plain Start menu you find in Windows XP and Windows Vista". You have the option to either replace standard Start Menu or run it independently and can load at boot time or run it manually |
| X | Vista&Senven | Nourinfo.exe | Added by the AGENT-QXP TROJAN! |
| X | VistaDrive | VistaDrive.exe | VistaDrive malware |
| ? | Vistadrv | vsdrv.exe | Vista Drive - part of ArabLionZ XP Tools. What does it do and is it required? |
| Y | VistaFirewallControl | VistaFirewallControl.exe | Vista Firewall Control from Sphinx Software (forerunner to Windows 7 Firewall Control) - "Protects your applications from undesirable network incoming and outgoing activity, controls applications internet access. Allows you to control personal information leakage via controlling application network traffic" |
| U | ViStart | ViStart.exe | ViStart (Vista Start Menu for XP) adds a Vista style Start Menu for Windows XP users and can be loaded at boot time or started manually |
| U | ViStart - The Vista Start Menu | ViStart.exe | ViStart (Vista Start Menu for XP) adds a Vista style Start Menu for Windows XP users and can be loaded at boot time or started manually |
| N | Vistascan | vistascan.exe | Included in VistaScan are VistaAccess and VistaShuttle. VistaAccess gives you quick and easy access to scanning functions right from your desktop. For Windows users, you'll see a scanner icon in the Windows Tray of the Taskbar. Click this icon and a menu opens |
| U | VistaStartMenu | VistaStartMenu.exe | "Vista Start Menu is the convenient alternative to the plain Start menu you find in Windows XP and Windows Vista". You have the option to either replace standard Start Menu or run it independently and can load at boot time or run it manually |
| X | VistaUpgrade | vistaupgrade.exe | Added by the STRATION-AX WORM! |
| X | VistaUpgrade | vista.exe | Added by the AUTORUN-KQ WORM! |
| X | Visual Element FX5 | [various filenames] | ClearStream Accelerator adware |
| X | VisualStudio | msorunner.exe | Added by a variant of the TACTSLAY TROJAN! |
| U | VisualTaskTips | VisualTaskTips.exe | "Visual Task Tips is a lightweight shell enhancement utility. It provides thumbnail preview image for each task in the Windows Taskbar" |
| U | VisualTooltip | VisualToolTip.exe | Related to VisualTooltip. Shows a thumbnail of a window by placing the mouse cursor over a button on the taskbar |
| X | ViSulaBaCis | lsass.exe | Added by the AUTORUN.DIB WORM! Note - this is not the legitimate lsass.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~� subfolder |
| X | VITAL BOOT PROCESS | taskmnsgr.exe | Added by the Rbot-VY WORM! |
| X | VITAL BOOT PROCESS | taskmngr.exe | Added by a variant of the RBOT WORM! |
| X | Vital Load Process | Spoolsvr.exe | Added by the RBOT.AIF WORM! |
| X | Vital Master-boot DLL | crsss.exe | Added by the RBOT.ASE WORM! |
| X | VividGalut | VividGalut.exe | Adult content related web downloader |
| X | vlc | vlc.exe | Detected as the BUZUS.DVE TROJAN! |
| X | vmcleaner | gxlib.exe | Added by the SMALL-HS TROJAN! |
| ? | VMConsole.exe | VMConsole.exe | Sony VAIO Media Console - installed on the VAIO Media Integrated Server PCs. What does it do and is it required? |
| Y | VMDFW | vmdfw.exe | VirusMD Personal Firewall. Vendor's Note: "VirusMD Personal Firewall is a micro-firewall and should not be use as your primary virus scanner or as your primary firewall. It does not pan-block incoming or outgoing data. Rather, is a diagnostic and therapeutic utility designed to help professionals save time and effort in eradicating Trojan horses" |
| X | vmlib | vmlib.exe | Added by the LOWZONE-AQ TROJAN! |
| X | vmlib | vmlib.exe | Malware installed by different rogue security software including SpyKillerPro. Also detected as the LOWZONE-AQ TROJAN! |
| X | Vmlist | apphelps.dll | Added by the ALAMNAHE.A VIRUS! |
| X | Vmmon32 | vmmon32.exe | Browser hijacker |
| X | vmnetdhcp | vmnetdhcp.exe | Added by the DWNLDR-GTC TROJAN! |
| X | VMount drive | vmount.exe | Added by the RIZO.A TROJAN! |
| N | VMSnap3 | VMSnap3.EXE | Vimicro based webcam driver - as used by both internal (laptop) and external webcams from Vimicro themselves, A4tech, Canon and others |
| X | vmsnGraber | VMSNGRABER.EXE | Added by the ENVID.B WORM! |
| X | vmss | vmss.exe | Promulgate adware |
| X | vmtuner | gclib.exe | Hijacker - detected by Kaspersky as the SMALL.FH TROJAN! |
| X | vmtuner | gglib.exe | Added by the QLOWZON-D TROJAN! |
| X | VMware hptray | hpmon.exe | Trojan that is typically bundled with rogue security programs (such as Virus Trigger and AntivirusTrigger) and fake codecs. Note - this is not a legitimate VMware entry |
| N | VMware hqtray | hqtray.exe | VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to "run multiple operating systems simultaneously on a single PC." It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product |
| X | VMware Tools | Xplorer.exe | Added by the AUTOIT.K TROJAN! |
| X | VMware User Process | KHATRA.exe | Added by the AUTOIT.K TROJAN! |
| U | VMware Workstation | vmware-tray.exe | System Tray access to virtual machines (VMs) currently in a "powered on" state in VMware Workstation - which "makes it simple to create and run multiple virtual machines on your desktop or laptop computer". Can be helpful if VMs are configured to run "headless" at Windows startup, in which case it can help you interact with the headless VMs. In that case, VMs could be powered on headless without ever starting up Workstation. If VMs aren't configured to run headless it isn't really required |
| N | VMware Workstation | hqtray.exe | VMware Host Network Access Status Tray Application - part of both VMware Player (from version 2.0) and Workstation (until version 6.5) - which allow you to "run multiple operating systems simultaneously on a single PC." It's function is uknown at present and it displays no tray icon as the name suggests. Can be disabled without affecting the operation of either product |
| X | VMware Workstation | vmware.exe | Added by the KOLABC-A WORM! Note - this is note the legitimate VMware Player/Workstation file with the same name which is located in a %ProgramFiles%\VMware directory. This one is located in %System% |
| U | vmware-tray | vmware-tray.exe | System Tray access to virtual machines (VMs) currently in a "powered on" state in VMware Workstation - which "makes it simple to create and run multiple virtual machines on your desktop or laptop computer". Can be helpful if VMs are configured to run "headless" at Windows startup, in which case it can help you interact with the headless VMs. In that case, VMs could be powered on headless without ever starting up Workstation. If VMs aren't configured to run headless it isn't really required |
| X | VnCplUpdate | msdm.exe | Masssend - spam relayer. Listens on a port for the spammers to feed it a list of addresses and what to send out. More information in this advisory |
| X | vnmispoisn downloader | vnmispoisn downloader.exe | SearchBarCash adware variant |
| X | VnrBlock20 | VnrBlock20.exe | Berlinads adware |
| X | VnrBlock21 | VnrBlock21.exe | Internet Speed Monitor adware |
| X | VnrPack15 | VnrPack15.exe | Zeno Search Assistant adware |
| X | VnrPack16 | VnrPack16.exe | Zeno Search Assistant adware |
| X | VnrPack17 | VnrPack17.exe | Internet Speed Monitor adware related - see example here |
| X | VnrPack20 | VnrPack20.exe | Internet Speed Monitor adware related - see example here |
| U | VOBID | InstantDrive.exe | Pinnacle Systems (ex VOB) InstantDrive - creates a virtual CD-ROM drive on the computer's hard drive. Part of InstantCD/DVD burning software |
| Y | VOBRegCheck | VOBRegCheck.exe | Part of Pinnacle Systems InstantCD/DVD and InstantCopy CD/DVD copying software that verifies drive settings. Once loaded it doesn't use any resources so you can leave it enabled |
| U | VoiceCenter | AndreaVC.exe | Related to Andrea's Superbeam microphone utility |
| U | voip phone | voip phone.exe | Related to Acer Bluetooth VoIP phone - as optionally supplied with some of their notebooks such as the TravelMate 8200 |
| N | VoipBuster | VoipBuster.exe | VoipBuster - free internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
