| Status | Autorun name | Command | Description |
| X | Hardware Profile | hxdef.exe... | Added by the LOVGATE.Z WORM! |
| U | Hardware Sensors Monitor | hmonitor.exe | Hardware Sensors Monitor by AB Software - "utilizes sensor chips on smart motherboards to track system and CPU core temperatures, voltages and cooling fans." Only required if you overclock your system or live in a hot environment and want to monitor the status or execute tasks such as sounding audio alarms are shutting down the computer |
| X | Hardware Shell Detection | WinHSD.exe | Added by a variant of the RBOT WORM! |
| X | Hardware Virtualization | SPY_NET_RAT.exe | Added by a variant of the AGENT-LRO TROJAN! See here |
| U | Hare | hare.exe | Hare - improve and optimize performance of desktop/laptop PCs |
| U | Harmony 98 - CasioOrg | CasAgnt.exe | Enterprise Harmony 98 for CASIO - synchronization software for use with Microsoft® Outlook 97/98/2000 |
| X | HataDuzelticisi | SysRep.exe | HataDuzelticisi, Turkish rogue system error and cleaning utility - not recommended. A member of the ErrClean family |
| X | HATAPE | [path to trojan] | Added by the BANKER-QF TROJAN! |
| U | HawkEye | HAWK_95.EXE | Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs |
| U | HawkEye IV Control Panel | HAWK_32.EXE | Control Panel application for the old Number Nine graphics cards to change resolution, colour depth, etc. Available via Start -> Programs |
| U | Hawking HWU54G Utility | HWU54G.exe | Wireless management utility for the HWU54G Mini Wireless-G USB Adapter from Hawking Technologies, Inc |
| U | Hawking Wireless Utility | HWU8DD.exe | Wireless management utility for the HWU8DD Hi-Gain™ USB Wireless-G Dish Adapter from Hawking Technologies, Inc |
| X | Hbinst | Hbinst.exe | Hotbar adware |
| X | HbTools | HbtOEAddOn.exe | Hotbar adware |
| N | HC Reminder | hc.exe | For Compaq PC's. Help Compiler, crunches help database, will run without being in startup when needed |
| N | HCDetect | HCDetect.exe | MS HomeClick Network - simple home network setup and configuration program included with 3Com HomeConnect home networking products. Runs in the background for network printer notification, detection, and Internet Connection Sharing (ICS) taskbar icon. Not required - network can be set-up manually, also has a known memory leak problem |
| U | HCEmployee | Hce.exe | HiddenCamera surveillance software. Uninstall this software unless you put it there yourself |
| X | hcen | hcen.exe | Added by the SMALL.LR TROJAN! |
| U | hcenter | tgcmd.exe | Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the TgAddServer entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation" |
| U | hcenter | hcenter.exe | Bellsouth help center. Part of software from SupportSoft (aka Support.com) provided to manufacturers and ISPs that allows them to offer on-line support - to update drivers, fix faults, etc. Also see the TgAddServer entry. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox. Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation" |
| X | hchos | hchos.exe | Added by the SCAR.BVBM TROJAN! |
| X | hclean32.exe | hclean32.exe | Wareout - malware masquerading as a spyware and dialer remover |
| U | Hcontrol | hcontrol.exe | Hotkeys on an ASUS Notebook. Only required if you use the additional keys |
| X | hcontrol32.exe | hcontrol32.exe | Added by the VB-EUF WORM! |
| U | HControlUser | HControlUser.exe | Hotkeys on an ASUS Notebook. Only required if you use the additional keys |
| N | hcsystray | hc_tray.exe | Kuma Notifier for the Shootout! game from the History Channel. "It lets you know whenever there's a new episode that's been released or an announcement from the Kuma team. Just click it to get up-to-the-minute game and event information" |
| N | HD Audio Control Panel | RtHDVCpl.exe | Realtek HD Audio Manager, installed with the Vista/7 drivers for on-board Realtek HD audio codecs. Unless you have the default (but optional) System Tray icon enabled, the only purpose this entry serves is to detect and allow you to configure any devices plugged into the jacks - such as headphones and a microphone. With the System Tray icon enabled it will also inform you when devices are removed and give you access to the Sound Manager and other multimedia functions. The Sound Manager is also available via the Control Panel and this entry is therefore only required if you regularly change sound schemes |
| N | HD Audio Control Panel | RAVCpl64.exe | Realtek HD Audio Manager, installed with the 64-bit Vista/7 drivers for on-board Realtek HD audio codecs. Unless you have the default (but optional) System Tray icon enabled, the only purpose this entry serves is to detect and allow you to configure any devices plugged into the jacks - such as headphones and a microphone. With the System Tray icon enabled it will also inform you when devices are removed and give you access to the Sound Manager and other multimedia functions. The Sound Manager is also available via the Control Panel and this entry is therefore only required if you regularly change sound schemes |
| X | HD Audio Controller Helper | audiohdr.exe | Added by the BLAHAVI.A BACKDOOR! |
| N | HDAShCut | HDAShCut.exe | High definition audio page shortcut for Realtek audio devices - not required |
| U | HDAudDeck | HDAudioCPL.exe | Vista control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B |
| U | HDAudDeck | HDeck.exe | XP control panel for VIA Vinyl HD Audio Codecs from VIA Technologies, Inc - such as the VT1708B |
| U | HDAudDeck | VDeck.exe | Via HD Audio Deck - audio control panel for motherboards with supported on-board VIA HD audio chipsets |
| X | HDAudio | hda.exe | Added by the TACTSLAY.U TROJAN! |
| X | HDAudio Driver 1.0 | [random filename].exe | Added by the TEADOOR-D TROJAN! |
| X | HDAudio Driver 2.0 | [random filename].exe | Added by the TEADOOR-E TROJAN! |
| U | HDDControlGuard | HDDControlGuard.exe | Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access |
| U | HDDControlGuard.exe | HDDControlGuard.exe | Part of Ashampoo® HDD Control from Ashampoo GmbH & Co. KG - a hard drive monitoring utility which also incorporates defragmentation and cleaners for browsing history and unnecessary files. This entry loads the Ashampoo HDD Control Guard component on startup which runs in the background and monitors the hard drives and provides System Tray access |
| U | HDDHealth | hddhealth.exe | HDD Health is a "full-featured failure-prediction agent for machines using Windows 95, 98, NT, Me, 2000 and XP. Sitting in the system tray, it monitors hard disks and alerts you to impending failure" |
| U | HDDlife | HDDlife.exe | HDDlife checks the health of your hard drives at regular intervals and informs you about the results of these checks |
| ? | HDhelp | tbhdhelp.exe | Associated with Philips Edge series soundcards. Is it required? |
| X | hdlfoe df98ndf | svchots.exe | Added by a variant of the RBOT WORM! |
| X | hdlpscom | [8 random letters].exe | Added by the RBOT-FUL WORM! |
| X | hdlpscom | netilxgn.exe | Added by the RBOT-FXD WORM! |
| ? | HDMICtrlMan | HDMICtrlMan.exe | Related to HD video support on some Toshiba laptops. What does it do and is it required? |
| X | HDriveSweeper | HDriveSweeper.exe | HDriveSweeper rogue privacy program - not recommended, removal instructions here |
| N | HDtray | HDtray.exe | Philips Edge Series Control Panel Tray Utility - system tray icon for a Philips Edge series soundcards. Available via Start -> Settings -> Control Panel |
| X | he3bbcff | rundll32.exe he3bbcff.dll,EnableRunDLL32 | LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "he3bbcff.dll" file is found in %System% |
| X | he3e3fc4 | rundll32.exe he3e3fc4.dll, EnableRunDLL32 | LZIO.com adware downloader. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "he3e3fc4.dll" file is found in %System% |
| X | Hekio Startups | Hnksvc32.exe | Added by the AGOBOT-QE WORM! |
| X | HELLBOT TEST | 1hellbot.exe | Added by the MYDOOM.BO WORM! |
| X | HELLBOT3 | coolbot.exe | Added by the MYTOB.AB WORM! |
| X | hellfire | svchost.exe | Added by the LEOX.D TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | hellodolly | shost.exe | Added by the YODO WORM! |
| X | HelloInt | hello3.exe | Added by the CASAL.A TROJAN! |
| X | helloserv | helloserv.exe | Added by the ZHELATI.BHA WORM! |
| X | helloworld | nb32ext2.exe | Added by the MYDOOM.BV WORM! |
| X | helloworld | nb32ext3.exe | Added by the MYTOB.JT WORM! |
| X | helloworld3 | nb32ext4.exe | Added by the RITDOOR.A WORM! |
| ? | Help | helpext.exe | ?? |
| X | help | help.scr | Added by the BANCOS-BBU TROJAN! |
| X | Help | Wizardnil.exe | Added by the BANCOS-BCZ TROJAN! |
| X | Help | lshost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.aro malware |
| X | Help Temp Files | netreg.exe | Added by the FORBOT-EM WORM! |
| X | Help Temp Files | emp32.exe | Added by the FORBOT-EC WORM! |
| U | HelpCenter | sprtcmd.exe /P HelpCenter | Self-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft, Inc). Identifies and automatically fixes typical problems that may occur with your high-speed internet service |
| U | HelpCenter4.1 | sprtcmd.exe /P HelpCenter4.1 | Self-help support tool for BellSouth's FastAccess® DSL (now owned by AT&T) broadband service (provided by SupportSoft, Inc). Identifies and automatically fixes typical problems that may occur with your high-speed internet service |
| X | helpctl.exe | helpctl.exe | Added by the GASLIDE TROJAN! |
| X | HelpDesk | HelpDesk.exe | Added by the BANKER.CIY TROJAN! |
| X | Helper | eschlp.exe | Added by the BLASTER.T WORM! |
| X | HELPER | greece_nm.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | Netherlands.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | new_zealand.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | sweden.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | canada.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | france.exe | AsdPlug premium rate adult content dialer variant |
| X | HELPER | temp532.exe | AsdPlug premium rate adult content dialer variant |
| X | helper.dll | rundll32.exe [path] helper.dll | CnsMin (Chinese Keywords) hijacker related. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted |
| X | HelpExp.exe | HelpExp.exe | Attune HelpExpress - spyware. Disable and uninstall - see here |
| X | helpmanager | spoler.exe | Added by the RANDEX.J WORM! |
| X | helpo | helpo.exe | Added by the BANLOA-BU TROJAN! |
| X | helpw | helpw.exe | Adware downloader |
| X | hen | [filename].exe | Added by the TARNO.G TROJAN! |
| X | heomstool | heomstool.exe | Added by the HEOMS TROJAN! |
| Y | HEProtect | HSockPE.exe | Part of the AntiSpam function of the HAURI ViRobot Desktop internet security suite |
| ? | HerculesCamService | CamService.exe | Related to the Hercules Dualpix HD Webcam. What does it do and is it required? |
| X | hErcUnes | softhost.exe | Added by the GARROCH WORM! |
| X | herjek | herjek.exe | Added by the NUWAR.APJ WORM! |
| U | Hermes Messenger | DGDRHE~1.EXE | A LAN messenger alternative to WinPopUp - Digital Dreams Software |
| X | Hewlett Packard Manager | hpmanager.exe | Added by the MYTOB.KE WORM! Note - this is not a valid Hewlett-Packard program |
| N | Hewlett Packard Recorder | Remind32.exe | HP multifunction registration |
| X | HeypPtdMGKlWj | HeypPtdMGKlWj.exe | Added by the FAKEAV-DVM TROJAN! |
| U | Hf | Hf.exe | Hide Folders - hide your folders so only you can view them |
| X | HF Security | hfsecure.exe | Added by the AGOBOT-TI WORM! |
| X | hfdtubvnx | keepSafe.exe | Added by the KILLAV.KAX TROJAN! Note - this is not the legitimate KeepSafe from Stardock Corporation which shares the same filename and is normally located in a %ProgramFiles%\Stardock subfolder. This one is found in %System% |
| Y | hffsrv | hffsrv.exe | Hide Files & Folders - "great easy-to-use password-protected security utility working at Windows kernel level you can use to password-protect certain files and folders, or to hide them securely from viewing and searching just with a click of mouse". If this entry is disabled, any files/folders that are protected/hidden will no longer be accessible without first accessing the main program |
| Y | hffsrv.exe | hffsrv.exe | Hide Files & Folders - "great easy-to-use password-protected security utility working at Windows kernel level you can use to password-protect certain files and folders, or to hide them securely from viewing and searching just with a click of mouse". If this entry is disabled, any files/folders that are protected/hidden will no longer be accessible without first accessing the main program |
| U | hfxp | hfxp.exe | Hide Folders XP - hide your folders so only you can view them |
| X | hgkytwe | keepSafe.exe | Added by the KILLAV.KAX TROJAN! Note - this is not the legitimate KeepSafe from Stardock Corporation which shares the same filename and is normally located in a %ProgramFiles%\Stardock subfolder. This one is found in %System% |
| X | hgqhp.exe | hgqhp.exe | Added by the FLUSH.F TROJAN! |
