| Status | Autorun name | Command | Description |
| X | avast | troyan.exe | Added by the SMALL.CZ TROJAN! |
| X | Avast | hmu8399.exe | Added by the VB-ECZ TROJAN! |
| X | avast | Wind.exe | Added by the GENOME.AKNH TROJAN! |
| Y | avast | avastUI.exe | System Tray access to and notifications for the version 6.* series of antivirus and internet security products from avast! - giving left-click access to the main user interface, right-click access to other options and event notifications |
| Y | Avast! | ashServ.exe | Main part of earlier versions of avast! antivirus products - including the resident protection, virus chest and scheduler. Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| Y | avast! | ashDisp.exe | System Tray access to and notifications for the version 4.* series of antivirus products from avast! - giving left-click access to the On-Access Scanner, right-click access to other options and event notifications |
| Y | avast! Antivirus | ashDisp.exe | System Tray access to and notifications for the version 4.* series of antivirus products from avast! - giving left-click access to the On-Access Scanner, right-click access to other options and event notifications |
| Y | avast! Antivirus | avastUI.exe | System Tray access to and notifications for the version 5.* and 6.* series of antivirus and internet security products from avast! - giving left-click access to the main user interface, right-click access to other options and event notifications |
| Y | avast! Web Scanner | Ashwebsv.exe | Web scanning part of earlier versions of avast! antivirus products. Starts via a registry "Run" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| Y | Avast32 | Astart32.exe | Part of earlier versions of avast! antivirus products |
| Y | avast5 | avastUI.exe | System Tray access to and notifications for the version 5.* series of antivirus and internet security products from avast! - giving left-click access to the main user interface, right-click access to other options and event notifications |
| Y | avastUI | avastUI.exe | System Tray access to and notifications for the version 5.* and 6.* series of antivirus and internet security products from avast! - giving left-click access to the main user interface, right-click access to other options and event notifications |
| X | avc | avmon.exe | Added by an unidentified TROJAN! |
| X | AVClean | AVClean.exe | AVClean rogue security software - not recommended, removal instructions here |
| U | AvconsoleEXE | Avconsol.exe | From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it |
| X | Avengine | Avengine.com | Added by the DELF.LJ TROJAN! |
| U | AVFX Engine | StartFX.exe | Advanced Video FX - supported by a number of Creative Web Cameras. "Have more fun by adding a wide range of special effects and backgrounds to your video chat with Advanced Video FX" |
| X | AvG | svchost323.exe | Added by the RBOT-ZA WORM! |
| X | AVG | windows.exe | Added by the POCHI.A WORM! |
| Y | AVG Anti-Spyware | avgas.exe | System Tray access to and notifications for AVG Anti-Spyware 7.5. This has now been superseded by AVG Anti-Virus which includes Anti-Spyware |
| Y | AVG Anti-Virus system | avgcc.exe | System Tray access to and notifications for the 7.* series of anti-virus products from AVG Technologies. If this entry is disabled, the core product functions will work properly but you will lose quick access to the Control Center and miss notifications of potential problems and updates |
| Y | AVG Anti-Virus System | avgemc.exe | E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry, it loads as a service in 2K and higher |
| Y | AVG Anti-Virus System | avgw.exe | This entry is included with the 7.* series of anti-virus products from AVG Technologies. Once installed (or on first run for a different user) it runs the configuration sequence to set up the product and doesn't run on subsequent restarts |
| X | Avg Antivirus | icpldrvx.exe | Added by the BANKER.BYU TROJAN! |
| X | AVG Antivirus 2011 | avg.exe | AVG Antivirus 2011 rogue security software - not recommended, removal instructions here. Note - this should not be confused with the popular and legitimate AVG Anti-Virus 2011 by AVG Technologies |
| X | AVG AntiVirus Scanner | avgscnx.exe | Added by the SILLYFDC.BBE WORM! Note - this is not a legitimate AVG entry |
| X | AVG AntiVirus Updater | avgwusv.exe | Added by the SILLYFDC.BAX WORM! Note - this is not a legitimate AVG entry |
| X | AVG Grisoft Updater | updater.exe | Added by the AGOBOT-OT WORM! |
| Y | AVG IDS | AVGIDSUI.exe | System Tray access to and notifications for AVG Identity Protection - identity theft prevention which is available as a stand-alone product or included with AVG Internet Security. "Always-on identity theft prevention for Windows from one of the world's most trusted security companies. Shop and ensure safe surfing of the web, make yourself secure in the knowledge that your passwords, account information, credit card numbers, social security numbers and other valuables are safe from identity thieves." It also loads the background activity monitoring process (AVGIDSMonitor.exe) |
| U | AVG Internet Security | avgtray.exe | System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security, Anti-Virus and their free products such as Anti-Virus Free and LinkScanner®. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates |
| Y | AVG_CC | avgcc32.exe | System Tray access to and notifications for the 6.* (and maybe earlier) series of anti-virus products from AVG Technologies. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
| Y | AVG_EMC | AVGEMC.exe | AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses |
| Y | AVG_RegCleaner | AVGREGCL.exe | Boot time registry cleaner for the 7.* series of anti-virus products from AVG Technologies - for checking the registry for virus additions and other security problems |
| Y | AVG7_AMSVR | AVGAMSVR.EXE | This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher |
| Y | AVG7_CC | avgcc.exe | System Tray access to and notifications for the 7.* series of anti-virus products from AVG Technologies. If this entry is disabled, the core product functions will work properly but you will lose quick access to the Control Center and miss notifications of potential problems and updates |
| Y | AVG7_EMC | avgemc.exe | E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry, it loads as a service in 2K and higher |
| Y | AVG7_Run | avgw.exe | This entry is included with the 7.* series of anti-virus products from AVG Technologies. Once installed (or on first run for a different user) it runs the configuration sequence to set up the product and doesn't run on subsequent restarts |
| U | AVG8_TRAY | avgtray.exe | System Tray access to and notifications for the 8.* series of internet security products from AVG Technologies - including Internet Security, Anti-Virus and their free products such as Anti-Virus Free and LinkScanner®. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates |
| U | AVG9_TRAY | avgtray.exe | System Tray access to and notifications for the 9.* series of internet security products from AVG Technologies - including Internet Security, Anti-Virus and their free products such as Anti-Virus Free and LinkScanner®. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates |
| Y | avgamsvr.exe | Avgamsvr.exe | This is the AVG7 Alert Manager for the 7.* series of anti-virus products from AVG Technologies. It is essential for both scheduled activities (such as automatic updates and scans) and for displaying alerts and reports via the Control Center (avgcc.exe). Appears in 9x/Me as a startup entry and as a service in 2K and higher |
| Y | avgas | avgas.exe | System Tray access to and notifications for AVG Anti-Spyware 7.5. This has now been superseded by AVG Anti-Virus which includes Anti-Spyware |
| Y | avgcc | avgcc.exe | System Tray access to and notifications for the 7.* series of anti-virus products from AVG Technologies. If this entry is disabled, the core product functions will work properly but you will lose quick access to the Control Center and miss notifications of potential problems and updates |
| Y | avgcc32 | avgcc32.exe | System Tray access to and notifications for the 6.* (and maybe earlier) series of anti-virus products from AVG Technologies. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates |
| Y | AVGCtrl | AVGCtrl.exe | Part of AntiVir® PersonalEdition Classic antivirus |
| Y | avgemc | avgemc.exe | E-mail scanner for the 7.* series of anti-virus products from AVG Technologies. This process scans incoming and outgoing E-mails for viruses and other malware. From version 7.1 onwards this entry only appears in 9x/Me as a startup entry, it loads as a service in 2K and higher |
| Y | avgfwsrv | AVGFWSRV.EXE | Integrated firewall for the 7.* series of anti-virus products from AVG Technologies. Protects the users computer from outside attacks, typically from the internet. Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows 2K/XP/Vista |
| Y | AVGIDS | AVGIDSUI.exe | System Tray access to and notifications for AVG Identity Protection - identity theft prevention which is available as a stand-alone product or included with AVG Internet Security. "Always-on identity theft prevention for Windows from one of the world's most trusted security companies. Shop and ensure safe surfing of the web, make yourself secure in the knowledge that your passwords, account information, credit card numbers, social security numbers and other valuables are safe from identity thieves." It also loads the background activity monitoring process (AVGIDSMonitor.exe) |
| Y | AVGIDSUI | AVGIDSUI.exe | System Tray access to and notifications for AVG Identity Protection - identity theft prevention which is available as a stand-alone product or included with AVG Internet Security. "Always-on identity theft prevention for Windows from one of the world's most trusted security companies. Shop and ensure safe surfing of the web, make yourself secure in the knowledge that your passwords, account information, credit card numbers, social security numbers and other valuables are safe from identity thieves." It also loads the background activity monitoring process (AVGIDSMonitor.exe) |
| Y | avgmsvr.exe | avgmsvr.exe | AVG Anti-Virus 7.0 related |
| Y | AVGnt | AVGnt.exe | AntiVir® PersonalEdition Classic antivirus. System Tray icon and control program |
| Y | Avgserv9.exe | Avgserv9.exe | Background monitoring and scanning for the 6.* (and maybe earlier) series of anti-virus products from AVG Technologies when running on 9x/Me. Loaded from the "RunServices" registry key |
| X | AVGT | antivirusGT.exe | AntivirusGT rogue security software - not recommended, removal instructions here |
| U | avgtray | avgtray.exe | System Tray access to and notifications for the range of internet security products from AVG Technologies - including Internet Security, Anti-Virus and their free products such as Anti-Virus Free and LinkScanner®. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates |
| Y | AVGuard | AVGuard.exe | AntiVir® PersonalEdition Classic antivirus. Background task which scans files transparently |
| X | avguard3876 | 000b09274b.exe | AntiVirus ransomware security software - not recommended, removal instructions here |
| X | avidrv | drvsc.exe | Detected by Kaspersky as the AGENT.PH TROJAN! |
| X | Avimgt | Avimgt.exe | Added by the GEMA TROJAN! |
| X | Avimgt32 | Avimgt32.exe | Added by the GEMA TROJAN! |
| Y | avinit | AVINIT9X.EXE | Command Antivirus related |
| X | Avira Anti-Virus Pro 2008 | explorear.exe | Added by an unidentified WORM or TROJAN! |
| X | AvirTr | AvirTr.exe | AntivirusTrigger rogue security software - not recommended, removal instructions here |
| Y | AVK Mail Checker | AVKPop.exe | eXtendia AVK AntiVirus email checker |
| Y | AVKBar | AVKBar.exe | GData AntiVirusKit Anti-virus |
| Y | AVKTray | AVKTray.exe | System Tray access to and notifications for the range of internet security products from G Data Software AG - including NotebookSecurity, TotalSecurity, InternetSecurity and AntiVirus. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates. Also used by versions of Lavasoft's Ad-Aware Total Security |
| Y | AvMaiSrv | Avmaisrv.exe | Part of Avast! anti-virus software - E-mail scanner |
| X | AVManager | csrss.exe | Added by the AUTORUN-DV WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder |
| ? | AvMenu | AVMenu.exe | Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do and is it required? |
| Y | AVMWlanClient | wlangui.exe | Related to broadband products from avm.de |
| X | avnort | formatsys.exe | Added by the SERFLOG.A WORM! |
| X | avnort | msmbw.exe | Added by the SERFLOG.A WORM! |
| X | avnort | serbw.exe | Added by the SERFLOG.A WORM! |
| Y | AVP | avp.exe | System Tray access to and notifications for the range of internet security products from Kaspersky Lab - including PURE, Internet Security and Anti-Virus. Runs together with a related service - such as "Kaspersky Internet Security (AVP)" - which runs a separate instance of the same file. Also AOL's Active Virus Shield and Steganos AntiVirus 2007 - both by Kaspersky and now discontinued. Found in either a Kaspersky, AOL or Steganos sub-directory |
| X | AVP | [path to trojan] | Added by the MUTBO-A TROJAN! |
| X | avp | avp.exe | Added by the DWNLDR-GWB TROJAN! Not to be confused with Kaspersky internet security products and AOL's Active Virus Shield (by Kaspersky) - which are found in either a Kaspersky or AOL sub-directory. This one is located in %Windir% |
| X | avp | win*.tmp.exe [* is a number] | Added by a variant of the ALPHABET TROJAN! |
| X | avp | xar6000v7.exe | Detected by Kaspersky as the ALPHABET.B TROJAN! |
| X | AVP-SE | avp-32.exe | Added by the AGOBOT.FS WORM! |
| X | AVP32 | KAV.exe | Added by the AUTORUN.BCYC WORM! |
| X | avpa | avpo.exe | Added by the LEGMIR-ARK TROJAN! |
| Y | AVPCC | avpcc.exe | Part of an older version of Kaspersky Anti-Virus from Kaspersky Labs. Runs together with a related service - AVP Control Centre Service (AVPCC) - which runs a separate instance of the same file |
| X | avpl | Antivirus.exe | AntiVirus Plasma rogue security software - not recommended, removal instructions here |
| X | AvpM | AvpM.exe | Added by the STARTPAGE-ID TROJAN! Note - this is not the popular Kaspersky antivirus and this file is located in %Windir%\pchealth\UploadLB\Config |
| X | avpms | avpms.exe | Added by the ONLINEGAMES.CPV TROJAN! |
| X | Avpr | avpr.exe | Added by the MYDOOM.AF WORM! |
| X | AVPSrv | AVPSrv.exe | Added by the ONLINE-GEN TROJAN! |
| X | avptask | [path to trojan] | Added by the NOFERE-G TROJAN! |
| X | avptask | expl0rer.exe | Added by the AGENT.JJO TROJAN! |
| X | Avptask | rund1132.exe | Added by the AGENT.PKZ TROJAN! |
| X | AvpWx | WErcx.exe | Detected by Kaspersky as a variant of the AGENT.A TROJAN! |
| X | Avril Lavigne - Muse | [random filename] | Added by the AVRIL-A WORM! |
| X | avrlabs | avrlabs.exe | VirusResponse Lab 2009 rogue security software - not recommended |
| X | avscan | avscan.exe | Added by the SILLYFDC.BCR WORM! The file is in the users %Temp% directory |
| X | AVScan | winav.exe | Unidentfied rogue security software |
| X | AvScan | avscan.exe | Antivirus System PRO and Spyware Protect 2009 rogue security software. The file is located in %ProgramFiles%\<rogue name> |
| X | avscan | Usbconeted.exe | Added by the PROVIS-A TROJAN! |
| Y | AVSCHED32 | AVSched32.exe | AntiVir® PersonalEdition Classic - antivirus |
| Y | AVSchedScan | SCHSC9X.EXE | Command Antivirus related |
| X | AVScheduler | AVSCHSVC.EXE | Part of the WinAntiVirus Pro 2005 rogue security software when installed in Win98/Me - not recommended, removal instructions here |
| X | AVSeguro | pgs.exe | AVSeguro, Spanish rogue security software - not recommended. A member of the AVSystemCare family |
| X | AvSer | dsm.exe | Added by the SERFLOG.B WORM! |
