| Status | Autorun name | Command | Description |
| X | Avimgt32 | Avimgt32.exe | Added by the GEMA TROJAN! |
| Y | avinit | AVINIT9X.EXE | Command Antivirus related |
| X | Avira Anti-Virus Pro 2008 | explorear.exe | Added by an unidentified WORM or TROJAN! |
| X | AvirTr | AvirTr.exe | AntivirusTrigger rogue security software - not recommended, removal instructions here |
| Y | AVK Mail Checker | AVKPop.exe | eXtendia AVK AntiVirus email checker |
| Y | AVKBar | AVKBar.exe | GData AntiVirusKit Anti-virus |
| Y | AVKTray | AVKTray.exe | System Tray access to and notifications for the range of internet security products from G Data Software AG - including NotebookSecurity, TotalSecurity, InternetSecurity and AntiVirus. If this entry is disabled, the core product functions will work properly but you will lose quick access to the main window and miss notifications of potential problems and updates. Also used by versions of Lavasoft's Ad-Aware Total Security |
| Y | AvMaiSrv | Avmaisrv.exe | Part of Avast! anti-virus software - E-mail scanner |
| X | AVManager | csrss.exe | Added by the AUTORUN-DV WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder |
| ? | AvMenu | AVMenu.exe | Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do and is it required? |
| Y | AVMWlanClient | wlangui.exe | Related to broadband products from avm.de |
| X | avnort | formatsys.exe | Added by the SERFLOG.A WORM! |
| X | avnort | msmbw.exe | Added by the SERFLOG.A WORM! |
| X | avnort | serbw.exe | Added by the SERFLOG.A WORM! |
| Y | AVP | avp.exe | System Tray access to and notifications for the range of internet security products from Kaspersky Lab - including PURE, Internet Security and Anti-Virus. Runs together with a related service - such as "Kaspersky Internet Security (AVP)" - which runs a separate instance of the same file. Also AOL's Active Virus Shield and Steganos AntiVirus 2007 - both by Kaspersky and now discontinued. Found in either a Kaspersky, AOL or Steganos sub-directory |
| X | AVP | [path to trojan] | Added by the MUTBO-A TROJAN! |
| X | avp | avp.exe | Added by the DWNLDR-GWB TROJAN! Not to be confused with Kaspersky internet security products and AOL's Active Virus Shield (by Kaspersky) - which are found in either a Kaspersky or AOL sub-directory. This one is located in %Windir% |
| X | avp | win*.tmp.exe [* is a number] | Added by a variant of the ALPHABET TROJAN! |
| X | avp | xar6000v7.exe | Detected by Kaspersky as the ALPHABET.B TROJAN! |
| X | AVP-SE | avp-32.exe | Added by the AGOBOT.FS WORM! |
| X | AVP32 | KAV.exe | Added by the AUTORUN.BCYC WORM! |
| X | avpa | avpo.exe | Added by the LEGMIR-ARK TROJAN! |
| Y | AVPCC | avpcc.exe | Part of an older version of Kaspersky Anti-Virus from Kaspersky Labs. Runs together with a related service - AVP Control Centre Service (AVPCC) - which runs a separate instance of the same file |
| X | avpl | Antivirus.exe | AntiVirus Plasma rogue security software - not recommended, removal instructions here |
| X | AvpM | AvpM.exe | Added by the STARTPAGE-ID TROJAN! Note - this is not the popular Kaspersky antivirus and this file is located in %Windir%\pchealth\UploadLB\Config |
| X | avpms | avpms.exe | Added by the ONLINEGAMES.CPV TROJAN! |
| X | Avpr | avpr.exe | Added by the MYDOOM.AF WORM! |
| X | AVPSrv | AVPSrv.exe | Added by the ONLINE-GEN TROJAN! |
| X | avptask | [path to trojan] | Added by the NOFERE-G TROJAN! |
| X | avptask | expl0rer.exe | Added by the AGENT.JJO TROJAN! |
| X | Avptask | rund1132.exe | Added by the AGENT.PKZ TROJAN! |
| X | AvpWx | WErcx.exe | Detected by Kaspersky as a variant of the AGENT.A TROJAN! |
| X | Avril Lavigne - Muse | [random filename] | Added by the AVRIL-A WORM! |
| X | avrlabs | avrlabs.exe | VirusResponse Lab 2009 rogue security software - not recommended |
| X | avscan | avscan.exe | Added by the SILLYFDC.BCR WORM! The file is in the users %Temp% directory |
| X | AVScan | winav.exe | Unidentfied rogue security software |
| X | AvScan | avscan.exe | Antivirus System PRO and Spyware Protect 2009 rogue security software. The file is located in %ProgramFiles%\<rogue name> |
| X | avscan | Usbconeted.exe | Added by the PROVIS-A TROJAN! |
| Y | AVSCHED32 | AVSched32.exe | AntiVir® PersonalEdition Classic - antivirus |
| Y | AVSchedScan | SCHSC9X.EXE | Command Antivirus related |
| X | AVScheduler | AVSCHSVC.EXE | Part of the WinAntiVirus Pro 2005 rogue security software when installed in Win98/Me - not recommended, removal instructions here |
| X | AVSeguro | pgs.exe | AVSeguro, Spanish rogue security software - not recommended. A member of the AVSystemCare family |
| X | AvSer | dsm.exe | Added by the SERFLOG.B WORM! |
| X | AvSer | msmpatch.exe | Added by the SERFLOG.B WORM! |
| X | AvSer | svosm.exe | Added by the SERFLOG.B WORM! |
| X | AvSer | sysup.exe | Added by the SERFLOG.B WORM! |
| X | avserve.exe | avserve.exe | Added by the SASSER WORM! |
| X | avserve2.exe | avserve2.exe | Added by the SASSER.B or SASSER.C WORMS! |
| X | avserve3.exe | avserve3.exe | Added by the SASSER.G WORM! |
| U | AVStation premium | AVStation agent.exe | Related to Samsung AV Station - instant playback of music, photos, videos |
| X | AVSTRT | navpsrvc.exe | Added by the FORBOT-EF WORM! |
| X | AVSystemCare | pgs.exe | AVSystemCare rogue security software - not recommended. There are number of variants in this family sharing the same filename and user interface - see here |
| X | avtapi | avtapi.exe | Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark" |
| N | Avtray | Avtray.exe | Command Antivirus tray icon |
| X | AVTray | AVTray.exe | Part of the WinAntiVirus Pro 2005 rogue security software when installed in Win98/Me - not recommended, removal instructions here |
| X | AVupdate32 Update | AVupdate32.exe | Added by the RBOT.CNI TROJAN! |
| ? | AVWLPSTA | AVWLPSTA.exe | PRISM Status Tray Applet - but what is it for and is it required? |
| Y | AVWUpd32 | AVWUPD32.EXE | AntiVir® PersonalEdition Classic - updater |
| Y | avx communicator | xcommsur.exe | Anti-virus part of BitDefender virus scanner/firewall |
| Y | Avxlive | avxlive.exe | Bullguard or BitDefender antivirus |
| Y | avxlni | avxinit.exe | Anti-virus part of BitDefender virus scanner/firewall |
| ? | Avxnews | ?? | ?? |
| U | Awatch | Awatch.exe | Diagnosis tool that monitors DSL connections, installed alongside DSL drivers from AVM Fritz's range of modem products |
| U | AwaySch | AwaySch.EXE | Part of the IBM ThinkVantage Productivity Center. "The Away Manager application allows you preselect and run routine tasks to maintain your system's performance" |
| U | AWC | AWC.exe | Advanced SystemCare 3 optimization utility from IObit - "helps protect, optimize, clean, and repair your computer and Registry". The PRO version adds automation, scheduling, registry deep clean and performance tune-ups. Note - runs via the Task Scheduler on Vista for all versions and on Windows 7 for later versions. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up |
| U | Awcl | Awcl.exe | Advanced WindowsCare V2 optimization utility from IObit - "helps protect, optimize, clean, and repair your computer and Registry". The PRO version adds automation, scheduling, registry deep clean and performance tune-ups. Note - runs via the Task Scheduler on Vista/7. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up |
| N | awhost32 | awhost32.exe | Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended |
| U | AWM | AWM.exe | Advanced Wallpaper Manager from PUSH Software |
| X | awm | AWM.exe | AWM Antivirus rogue security software - not recommended, removal instructions here. Note - this is not the same as Advanced Wallpaper Manager from PUSH Software and is located in %AppData%\AWM |
| U | AWMON | Ad-Watch.exe | Part of older versions of the Plus and Pro versions of Ad-Aware from Lavasoft - realtime monitor watching your memory and registry for malware that tries to install or change your system |
| U | AWMON | Ad-Monitor.exe | F-Secure Anti-Spyware |
| X | Awoa | smmo.exe | PurityScan adware |
| X | Awola | Awola.exe | Awola rogue spyware remover - not recommended |
| X | Awola6 | Awola6.exe | Awola AntiSpyware 6.0 rogue spyware remover - not recommended, removal instructions here |
| U | awplite | awplite.exe | AllWallpapers Lite desktop wallpaper changer |
| ? | AWUSGSTA | AWUSGSTA.exe | Reportedly related to a USB Wifi Adapter - is it required at startup? |
| U | awxDTools | awxDTools.dll, awxRegisterDll | AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: *.cue, *.iso, *.ccd ...) |
| N | AxAutoMntSrv | AxAutoMntSrv.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present from version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| N | axcmd | axcmd.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present prior to version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| ? | AxFilter | Rundll32 AXFILTER.DLL, Rundll32 | ?? |
| U | AXIS Print System DriverScanner | DriverScanner.exe | Part of AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| U | AXIS Print System DriverServer | DriverServer.exe | Part of AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| U | AXIS Print System TrayIcon | TrayIcon.exe | System Tray access to AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| X | AXPDefender | AXPDefender.exe | Advanced XP Defender rogue security software - not recommended, removal instructions here |
| X | AXPFixer | AXPFixer.exe | AdvancedXPFixer rogue security software - not recommended, removal instructions here |
| X | AXVenore | AXVenore.exe | Added by an unidentified TROJAN - see here |
| X | ayRmyfbCTPl | ayRmyfbCTPl.exe | Added by the FAKEAV-DTZ TROJAN! |
| X | azixegoira | efipef.exe | Added by the SDBOT.AWU WORM! |
| X | Azixegoira | yikylohi.exe | Added by the SDBOT.ASP WORM! |
| U | AzMixerSel | AzMixerSel.exe | Related to Realtek_Azalia Mixer Selector |
| Y | azmodem | azexe.exe | Aztech Labs modem driver |