| Status | Autorun name | Command | Description |
| U | Camaro Clock | Camaro Clock.exe | Clock gadget included with the Camaro theme for MyColors from Stardock Corporation |
| U | Camaro Weather | Camaro Weather.exe | Weather gadget included with the Camaro theme for MyColors from Stardock Corporation |
| N | CamCheck | CamCheck.exe | NuCam camera software related |
| U | Cameno | Cameno.exe | Cameno is a program which brings tabbed windows to MSN Messenger 6.0 and above |
| U | Camera Assistant Software | traybar.exe | Camera Assistant Software utility for Toshiba laptops - allows you to take pictures with and control the integrated WebCam |
| U | Camera Detector | CAMDET~*.EXE | ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
| U | Camera Detector | Camdetect.exe | ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
| U | Camera Detector | DEVDET~*.EXE | ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
| ? | CameraApplicationLauncher | CameraApplicationLaunchpadLauncher.exe | Supports the integrated webcam on IBM/Lenovo Thinkpad notebooks. What does it do and is it required? |
| U | CameraAssistant | CameraAssistant.exe | Entry added when you install versions of the Logitech QuickCam webcam software and used to configure and tweak your webcam settings. Includes support for the Quick Assistant - which launches when a video application (such as video conferencing in an instant messaging client) accesses to camera so you can quickly fine tune face tracking and zoom, for example. If you don't use the camera on a daily basis create your own shortcut and run it manually when required |
| N | Camfrog | CamfrogNet.exe Camfrog Video Chat.exe | Camfrog video chat software by Camshare Inc |
| N | Camio Viewer | IXApplet.exe | Part of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them |
| N | Camio Viewer 1.8.7 | IXApplet.exe | Part of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them |
| N | Camio Viewer 2.0 | IXApplet.exe | Part of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them |
| N | Camio Viewer 3.2 | IXApplet.exe | Part of Sierra Image Expert, an image viewing program that comes with digital cameras which shows pictures that are in the camera before downloading them |
| ? | CamMonitor | hpqcmon.exe | From HP and related to digital imaging |
| Y | CamWizard | CamWizrd.exe | Launches the Logitech Camera Wizard on the first reboot after installing versions of Logitech QuickCam webcam software |
| N | Canada | Canada.exe | Known to be a dialler - but is it maliscous or clean? |
| U | Canary | canary-std.exe | Canary keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | candy | command32.exe | Added by the RBOT-LV WORM! |
| X | candynet | Taskmsg.exe | Added by the RBOT-NA WORM! |
| U | CANoe | CANoe32.exe | CANoe from Vector Informatik. Development and test tool for Engine Control Units (ECU) based upon the CAN, LIN, MOST, FlexRay, Ethernet and J1708 bus systems |
| U | Canon MultiPASS Status Monitor | monitr32.exe | Cannon Multi-Pass status monitor |
| ? | Canon PC1200 iC D600 iR1200G Status Window | CAPM1LAK.EXE | Cannon printer related - is it required in startup? |
| U | CanonMyPrinter | BJMyPrt.exe | Printer software for Canon Bubblejet printers |
| U | CanonSolutionMenu | CNSLMAIN.exe | Canon's Solution Menu dialog box leads you quickly toward documentation, utilities, and help files |
| ? | CAP3ON | CAP3ONN.EXE | Canon driver, purpose unknown. Is it required in startup? |
| Y | capfasem | capfasem.exe | Runs the core program for older versions of CA Personal Firewall (installed as either as a stand-alone product or as part of CA Internet Security Suite) |
| N | Capfax | capfax.exe | PhoneTools fax software |
| ? | capfupgrade | capfupgrade.exe | Installed with older versions of CA Personal Firewall (either as a stand-alone product or as part of CA Internet Security Suite). The exact purpose is unknown at present and it does not normally appear to run |
| U | CAPing | CAPing.exe | Citibank Citianywhere software |
| Y | Capon | Capon.exe | Canon printer driver |
| Y | Capon | Caponn.exe | Canon printer driver |
| Y | CAPPActiveProtection | CAPPActiveProtection.exe | Part of CA Anti-Spyware until 2009 (either as a stand-alone product or as part of a suite). Works in conjunction with the CA Pest Patrol Realtime Protection Service (ITMRTSVC) service to monitor software installations for potentially malicious behaviour, warn the user if any is detected and request user input on how to handle them |
| U | CaPPcl | CAAntiSpyware.exe | Part of CA Anti-Spyware (either as a stand-alone product or as part of a suite). Runs a scan for spyware on startup |
| X | Captcha7 | rundll captcha.dll | Added by the TINY.WRE TROJAN! |
| X | CaptionMgr32 | crssr.exe | Added by the ZAR.A WORM! |
| X | capture | capture.exe | Added by the THEEF-B TROJAN! |
| N | Capture Express 2000 | capexp.exe | Capture Express - screen capture utility |
| U | CaptureAssistant | CaptureAssistant.exe | Capture Assistant "is a convenient and easy-to-use text and graphics capture tool". It allows you to capture text, font information, graphics, etc |
| N | CaptureBat | Capture.exe | !Quick Screen Capture from EtruSoft Inc. - "allows you to take screenshots from any part of your screen in more than 10 ways, and save images in BMP/JPG/GIF formats" |
| N | Carbonite Backup | CarboniteUI.exe | "Carbonite's online backup service starts automatically and works quietly and continuously in the background protecting your data" |
| N | Card Monitor | REGCNT09.exe | For the USB connection on a Panasonic PV-DV701 Digital Camcorder. Available via Start -> Programs |
| ? | CardScan AutoSync | CSyncCfg.exe | Related to the CardScan business card reader range of products. May be related to synchronization with E-mail software and mobile devices (see here)? |
| X | Care20 | Care20.exe | TopMoxie adware |
| U | Care2GTU | Care2GTU.exe | Care2 Green Thumbs-Up (from the Care2 site). Every online purchase helps environmental causes; tells you how eco-friendly a company really is, thanks to over 200 company profiles from Coop America. Saves 1 square foot of rainforest every day you use it. If it works and you like it, keep it |
| U | carpserv | carpserv.exe | Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example |
| X | CARPserver | CARPserver.exe | Added by the BANKER-AN TROJAN! |
| U | CARPservice | carpserv.exe | Associated with Zoltrix and Conexant modems - enables the internal modem speaker, allowing you to listen to the dial-up sounds for example |
| X | cartao | [path to file] | Added by the DLOADER-QD TROJAN! |
| X | cartao | conflicted.exe | Added by the DADOBRA-DV TROJAN! |
| X | cartao | killing.exe | Added by the DLOADER-QN TROJAN! |
| X | cartao | cartao.exe | Added by the BANKER-FA TROJAN! |
| X | CAS Client | casclient.exe | CasinoClient adware |
| X | CAS2 | system.exe | CasinoClient adware |
| X | Cas2Stub | cas2stub.exe | CasinoClient adware |
| U | CasAgnt | CasAgnt.exe | Program by Extended Systems which allows you to sync your Casio PDA with your PC |
| U | casc | casc.exe | Installed with both stand-alone security tools and suites from CA. Provides System Tray access to the Control Center - which indicates the current tool status and can be used to launch scans, updates or access product information. The icon changes appearance if a warning or issue is detected |
| X | Casdvqwa | bmqnzkg.exe | Added by the RANDEX.BE WORM! |
| X | caseyvideo | caseyvideo.exe | Malware causing adult content popups |
| X | caseyvideo[*] [* = digit] | caseyvideo[*].exe [* = digit] | Malware causing adult content popups |
| X | CashBack | cashback.exe | CashBackBuddy adware |
| X | CashFiesta | Cashfiesta.exe | CASHFIESTA.A pay-per-surf adware |
| N | Cashsurfers Cashbar Navigator | Cashbar.Exe | Cashsurfers CashBar Navigator - "The CashBar rotates banner advertisements once per minute and provides you with access to up to date special offers and deals" |
| X | CashToolbar | MSCStat.exe | Added by the DOWNLOADER-MY TROJAN! |
| X | CashToolbar | svchost.exe | BrowserAid/CashToolbar adware. Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "inetsrv" sub-directory |
| X | Casino Royale | jamesbond.exe | Added by the RBOT-FZO WORM! |
| X | Cassandra | [10 to 14 random char]THD.EXE | Added by the KREPPER-AI TROJAN! |
| X | Cassandra | cassandra.exe | SuperSpider hijacker - a CoolWebSearch parasite variant. Also detected as a variant of the KREPPER TROJAN! |
| X | CasStub | casstub.exe | Added by the CASS-A TROJAN! |
| X | Catalyst Control Centre | atixvdm.exe | Added by the RBOT.DMW BACKDOOR! Note - this is not related to any legitimate AMD graphics software |
| Y | CATEYE | CATEYE.EXE | Part of older versions of the range of internet security products from Quick Heal - including Total Security, Internet Security and AntiVirus. "Prevents your system from virus attack by continuously monitoring the system and prevents virus infection from e-mail attachments, Internet Downloads, network, ftp, floppy, Data storage devices, CD-DVD ROM file executables and during suspected file copying." Also included by vendors who use the Quick Heal engine such as Omniquad and iQon |
| X | catsrv | catsrv.exe | Added by the PAPLOK TROJAN! |
| X | catxml | catxml.exe | Added by the AGENT.CE BACKDOOR! |
| Y | CAVRID | CAVRID.exe | Real-time scanning engine for versions of CA Anti-Virus products until 2009 (both stand-alone and as part of security suites) - including eTrust EZ Antivirus, eTrust Vet Antivirus and a version available from Yahoo! Scans files for viruses and other malware when you access, create or download them |
| Y | CAVS | CAVS.exe | Cheyenne AntiVirus - acquired by CA and no longer available |
| X | CAZNOVAS | CAZNOVAS.exe | Added by the CAZNO TROJAN! |
| X | CBACK.EXE | CBACK.EXE | Added by the PENTA-A TROJAN! |
| U | cbInterface | cbInterface.exe | System Tray access to Cobian Backup versions 8 thru 10 - a multi-threaded backup program which makes backup copies of your file and folders (in compressed or uncompressed form) to another location. This entry appears if you choose to install the program using the default settings as service on an NT based OS (NT/2K/XP/Vista/7). If you don't have regularly scheduled backups then choose the startup installation option and run it manually when required |
| X | cbvcs | urretnd.exe | Added by the FRETHOG-C WORM! |
| U | CBWAttn | CBWAttn.exe | Required for Bitware to answer incoming faxes, can cause sleep mode problems |
| U | CBWHost | CBWHost.exe | Required for Bitware to answer incoming faxes, can cause sleep mode problems |
| ? | CBWUser | CBWDial.exe | Associated with Bitware that integrates fax, voice, pager, and data communications on your desktop |
| X | CC2KUI | comet.exe | Comet Cursor adware |
| X | ccagent.exe | ccagent.exe | Control Center and Control Components rogue security software - not recommended, removal instructions here and here |
| X | Ccao | regedit.exe | Probably a variant of MediaTickets adware. Note - this is not the valid Windows registry editor which resides in %Windir% and will not figure in Msconfig/Startup! This version resides in a "mduu" subfolder, which may change |
| Y | ccApp | ccApp.exe | Part of older versions of Symantec's security products including Norton 360, Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Effectively the "master" process which calls the different program features and makes sure they are running. Auto-protect and E-mail check will not function without this |
| X | ccApp | [random filename] | Added by the OBSORB TROJAN! Note the random filename compared to the valid Norton AntiVirus |
| X | ccApp | WMADZ.EXE | Added by the RBOT-LJ WORM! |
| X | ccApp | .EXE | Added by the RBOT-LJ WORM! |
| X | ccApp | gcasServ.exe | Added by a variant of the RBOT WORM! Do not confuse with the Microsoft AntiSpyware executable of the same name |
| X | ccApp | example.exe | TwoSeven spyware |
| X | ccApp.exe | ccApp.exe | Added by the RBOT-HJ WORM! Note - this is not the legitimate Symantec/Norton file normally located in %ProgramFiles%\Common Files\Symantec Shared. This one is located in %System% |
| X | ccAppr | svcrhost.exe | Added by the TACTSLAY.A TROJAN! |
| X | ccAppr | expIorer.exe | Added by the TACTSLAY.A TROJAN! Note that the filename has a capital "i" in it |
| X | ccAppr | outIook.exe | Added by the TACTSLAY.A TROJAN! Note that the filename has a capital "i" in it |
| X | ccAppr | svcshost.exe | Added by the TACTSLAY.A TROJAN! |
| X | ccApps | services.exe | Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | ccApps | winlogon.exe | Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| X | ccApps | N/A | Added by the KANGAROO-A TROJAN! |
