| Status | Autorun name | Command | Description |
| X | Duweculey | yujixit.exe | Added by the SDBOT.BRP WORM! |
| X | Duwee wong Cerbon | Cirebons.exe | Added by the BHARAT.A WORM! |
| X | duypvbfn | wimympcxsik.exe | Added by the FAKEAV-DFP TROJAN! |
| X | DVAScvssdfa | AsSDdwd.exe | Added by the LIOTEN.IP TROJAN! |
| U | DVD Device Lock for Win95/98/Me/2k/XP | DDLAgent.exe | Loads DVD Device Lock - which "can be used to restrict read or write access to removable media devices such as CD, DVD, floppy, flash and USB drives. You can also restrict access to partitions of hard disk drives". If disabled, hidden and locked drives still retain their original status so the user will only be able to change their status them via the main UI |
| X | DVD Upgrade | dvdupgd.exe | Added by a variant of the IRCBOT BACKDOOR! |
| N | DVD@ccess | DVDAccess.exe | Part of DVD Studio Pro from Apple Inc. - "The DVD@CCESS feature allows you to add additional interactivity to your DVD title when it is played on a computer" |
| N | dvd43 | DVD43_Tray.exe | DVD43 is "a small tool that integrates into Windows and overrides CSS copy-protection found on DVD movies" |
| U | DVD43 | DVD43.exe | DVD43 is a small tool that overrides CSS copy-protection found on DVD movies |
| X | dvd98 | windvd98.exe | Added by the CULT.P WORM! |
| ? | DVDAgent | DVDAgent.exe | Found on the HP Touchsmart range of desktops and notebooks. What does it do and is it required? |
| U | DVDBitSet | DVDBitSet.exe | DVD+RW Drive/Disc Compatibility Setting. Installed with HP DVD+RW drives to enhance compatibility with existing readers. You can also set a DVD+RW default drive write mode which is always used |
| ? | DVDCheck | DVDCheck.exe | Related to an Intervideo program. What does it do and is it required in startup? |
| X | Dvdcompat | Dvdcompat.exe | Added by the GEMA TROJAN! |
| N | DVDLauncher | DVDLauncher.exe | Part of Cyberlink's Power Cinema - allows you to play DVDs upon insertion |
| N | DVDSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| N | DVDTray | DVDTray.exe | HP CD/DVD Tray icon installed with the DVD writer software. Periodically checks for new drive firmware |
| N | DVDUpgrade | DVDUpgrd.exe | Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs |
| N | DVDXGhost | DVDGhost.EXE | DVD Ghost - "utility to make your software DVD players and DVD copy/backup softwares restriction-free, and copy/backup DVD to hard disk" |
| U | dvHighMem | cfgmng32.exe | PureSight PC parental controls software by Puresight Technologies Ltd - "offers multi-layered cyberbullying protection for your family and it blocks offensive web-content". Also used by CA for their CA Parental Controls 2008 and 2009 utilities (both stand-alone and in suites) |
| Y | Dvp95 | Dvp95.exe | Scan engine for F-Secure and Command antivirus software based on the F-Prot AntiVirus engine |
| Y | dvpapi9x | DVPAPI9X.exe | Command AntiVirus for Windows 95/98/Me |
| Y | DvpInitExe | Dvpinit.exe | Command Antivirus related |
| Y | dvprpt | Dvprpt.exe | Command Antivirus related |
| X | dvraudio | dvraudio.exe | Added by a variant of the CRYPTER.C TROJAN! |
| X | dvsfss | fbsfsdrs.exe | Added by the SDBOT-QA WORM! |
| U | DVSync | dvsync.exe | DVSync is the program that allows you to synchronize your daVinci's PDA's data with your Personal Information Manager on the PC |
| X | DvVideo32 | dvvid32.exe | Added by the TINY.FD TROJAN! |
| X | Dvx | wsxsvc.exe | Promulgate adware |
| X | dw | dw.exe | DownloadWare adware |
| X | DW_Start | rwwnw64d.exe | ZenoSearch adware variant |
| N | DW4 | Weather.exe | Desktop Weather 4 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | DW4 | DesktopWeather.exe | Desktop Weather 4 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | DW6 | DesktopWeather.exe | Desktop Weather 6 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| X | dwgrun | dwgrun.bat | Added by the DWGUN.A VIRUS! |
| U | DWHeartbeatMonitor | DWHeartbeatMonitor.exe | DWHeartbeatMonitor.exe is installed alongside the Weather.com instant messaging utility. This is a non-essential process. Disabling or enabling this is down to user preference |
| N | DwlClient | support.exe | Download manager for Dell support alerts |
| X | dwm | dwm.exe | Added by the AGENT-WS MALWARE! Note - this is not the legitimate Desktop Window Manager (dwm.exe) process from Vista/7 which loads as a service and is found in %System%. This one is located in %Temp% |
| X | dwqblwppx.exe | [random].exe | Okcashbackmall adware |
| X | dwqblwpvl.exe | [random].exe | Okcashbackmall adware |
| X | dwqblwrsq.exe | [random].exe | Okcashbackmall adware |
| U | DWQueuedReporting | dwtrig20.exe | Used to launch Microsoft Error Reporting (DW20.exe) - if, for example, there have been an error downloading malware definition updates for Windows Defender - which gives the user the chance to send the error report to Microsoft to improve their software |
| N | dwStart | FireWall.exe | The Shield firewall from pcsecurityshield.com. Not recommended by some (see here) and there are better free alternatives out there such as Zone Alarm. Located in %ProgramFiles%\PCSecurityShield\The Shield Firewall |
| U | dwtrig20 | dwtrig20.exe | Used to launch Microsoft Error Reporting (DW20.exe) - if, for example, there have been an error downloading malware definition updates for Windows Defender - which gives the user the chance to send the error report to Microsoft to improve their software |
| X | Dx | sys*.exe [* = random number] | Added by the DEXTER.A WORM! |
| X | Dx8compat | Dx8compat.exe | Added by the GEMA TROJAN! |
| X | dxdiag diagnose | msidxdia.exe | Added by a variant of the RBOT WORM! |
| X | dxdiags.exe | dxdiags.exe | Added by the CERTIF-G TROJAN! |
| X | DxDialog | dxdlg32.exe | Added by the VB-CXT TROJAN! |
| X | dxdll32 | ntxdll.exe | Added by the GAOBOT.CPX WORM! |
| N | dxdllreg | dxdllreg.exe | Registers with Windows the DLL (Dynamic Link Library) files that are part of Microsoft DirectX9. Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it after a manual installation or after a new application is installed that also installs DirectX9. This entry should only appear once and can cause boot error messages if it remains so remove it |
| N | DXDllRegExe | dxdllreg.exe | Registers with Windows the DLL (Dynamic Link Library) files that are part of Microsoft DirectX9. Created when you select "Yes" to check the "WHQL Digital signatures" in the DirectX9 files at the first time you open it after a manual installation or after a new application is installed that also installs DirectX9. This entry should only appear once and can cause boot error messages if it remains so remove it |
| X | DxLoad | DX3DRndr.exe | Added by the GIBE.B WORM! |
| N | DXM6Patch_981116 | p_981116.exe | Win32 cabinet self extractor. More info here |
| X | dxmsrv | dxmsrv.exe | Added by an unidentified WORM or TROJAN! |
| X | Dxsty | Dxsty.exe | Added by the GEMA TROJAN! |
| X | Dxupdate.exe | Dxupdate.exe | Added by the MAFEG WORM! |
| X | dxvid | dxvid.exe | Added by the DLUCA-Y TROJAN! |
| X | DyFuCA | optimize.exe | Adult content dialler - see here |
| X | DyFuCA Active Alert | actalert.exe | Adult content dialler - see here |
| X | Dynamic DHCP | dydhcp.exe | Added by the RINBOT.B BACKDOOR! |
| X | Dynamic Dns Binary | dynitora.exe | Added by the RBOT-WT WORM! |
| X | Dynamic Dns Binary | CMD16.EXE | Added by the RBOT-XM WORM! |
| X | Dynamic Dns Binary | winxp34.exe | Added by a variant of the RBOT WORM! |
| X | Dynamic Dns Binary | WinHelpcfn.exe | Added by a variant of the RBOT WORM! |
| X | Dynamic Link Library loader | Loader32.exe | Added by the KOL TROJAN! |
| U | DynDNS Updater | DynDNS.exe | Dynamic DNS IP address updater tool, used as a client for Dynamic DNS service providers such as http://www.DynDNS.org |
| N | DynDNS-Updater Traytool | ddutray.exe | DynDNS updater tray icon - allows easy configuration of the Dynamic DNSSM service. Can be run manually |
| X | DynHttp Dns Binary | dynizari.exe | Added by a variant of the RBOT WORM! |
| U | DynSite | DynSite.exe | DynSite - dynamic DNS client, also called an automatic IP updater |
| U | Dynu Basic Client | dynubas.exe | Dynu online dynamic IP update client. Useful when using a dial up modem |
| ? | DZKillMe | DZSAVEME.EXE | ?? |
| X | E-Card | ecard.exe | Added by the YODI WORM! |
| U | E-color | IconMgr.Exe | Sets the colour of your monitor when running games that recognise E-Color so that you get 'what the game designer intended' when you see the game. Also allows monitor callibration through a program called 3-Deep. If you play a lot of games it can be useful. Can be disabled from starting up from within the program |
| N | E-Color Registration | SonnReg.exe | Registration for Colorific® and 3Deep® monitor calibration software from E-Color. Now superseded by ColorWizzard™ and 3DxWizzard™ |
| X | E-nrgyPlus | E-nrgyPlus.exe | Energyplus - tracks internet activity including websites visited and queries made at popular search engines. This information along with some system information is sent to a remote site |
| X | E-Set 2011 | e-set.exe | E-Set Antivirus 2011 rogue security software - not recommended, removal instructions here. Note - this should not be confused with the legitimate antivirus product from ESET |
| U | e-Surveiller Station | estation.exe | ESurveiller - surveillance software. Uninstall this software unless you put it there yourself |
| U | E_S[numbers] | [path] E_[various].EXE [path] E_S[numbers].tmp | Temporary entry related to Epson Status Monitor 3 for their range of printer and AIO devices - for monitoring printer status, checking ink levels, etc |
| U | E_S10IC2 | E_S10IC2.EXE | Epson Status Monitor 3 - for monitoring printer status, checking ink levels, etc |
| U | E_S23 | E_SICN03.exe | Epson printer status monitor - for checking ink levels, etc. |
| U | E_S4I2F1 | E_S4I2F1.EXE | Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status, checking ink levels, etc |
| U | E_S4I2G1 | E_S4I2G1.EXE | Epson Status Monitor 3 for the Stylus CX5400 printer - for monitoring printer status, checking ink levels, etc |
| U | E_SOEIC1 | E_SOEIC1.exe | Epson Status Monitor 3 - for monitoring printer status, checking ink levels, etc |
| U | E06DXLRD_7604703 | EDICT.EXE | Related to Microsoft Encarta dictionary functions |
| N | E6TaskPanel | TaskPanl.exe | Earthlink Task Panel - part of Earthlink TotalAccess 2003 internet access software. Quick access to internet, E-mail and web-space |
| N | EA Core | Core.exe | Electronic Arts EA Link software - "gives you a secure yet simple way to download EA PC games and patches, as well as other exclusive content" |
| U | eabconfg.cpl | EabServr.exe | Easy Access Buttons control panel on Compaq laptops. Only required if you use the extra keys |
| X | Eac Download | download.exe | Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here |
| X | Eac_Cnry | canary.exe | Added by the CANARY TROJAN! |
| ? | Eac_rnvdl | ANTIVIRUS_INSTALL.EXE | ?? |
| U | EACLEAN | eaclean.exe | For Compaq PC's. Easy Access button support for the keyboard |
| N | EADM | EADMUI.exe | EA Download Manager (EADM) "brings an entire universe of EA Games into a single, convenient application. With EADM you can chat with your friends, browse the web from within select games, and purchase or play your favorite EA games - any time and any place you want" |
| Y | EAFRCliStart | EAFRCliStart.exe | Related to Encryption Anywhere hard disk encryption products from GuardianEdge |
| U | eanth_critical_update_alert | sys_alert.exe | Updates for eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | eanth_critical_update_alert | EANTH_~1.EXE | Updates for eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | eanth_system_patcher | sys_alert.exe | Updates for eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | eanthology_install.exe | eanthology_install.exe | Installer for eAcceleration Stop-Sign security software - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation |
| U | EanthologyApp | EANTHO~1.EXE | eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation. Still detected as WREN.D by Trend |
| U | EanthologyApp | eanthology.exe | eAcceleration Stop-Sign security software related - previously not recommended (see here). It has now been delisted, so make sure you have the latest version - hence the "U" recommendation. Still detected as WREN.D by Trend |
