| Status | Autorun name | Command | Description |
| X | ALM | csrss32.exe | Added by the ANACON-D VIRUS! |
| X | ALM | anacon32.exe | Added by the ANACON-C WORM! |
| U | Almondrv | svcwinra.exe | System Surveillance Pro surveillance software. Uninstall this software unless you put it there yourself |
| X | Alogrithm Link Queue | alq.exe | Added by a variant of the SDBOT WORM! |
| U | Alogserv | Alogserv.exe | From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up |
| U | ALPass | ALPass.exe | ALPass password manager |
| X | alpha | svchost.exe | Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies |
| X | AlphaAnt | alpha.exe | Alpha Antivirus rogue security software - not recommended, removal instructions here |
| X | AlphaAV | AlphaAV.exe | Alpha Antivirus rogue security software - not recommended, removal instructions here |
| Y | Alps Electric USB Server | Monserv.exe | Alps Electric USB Server - required according to this article |
| U | AlpsPoint | Apoint.exe | Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work |
| U | ALServ | ALServ.exe | Utility that enables a user to control the volume and surround sound and select Pro Logic/Stereo on 2 satellite speakers and subwoofer of old Altec Lansing speaker systems. The right-side speaker has 4 controls on top providing same functionality |
| X | alt CTRL Shift | et3rd.exe | Added by the SDBOT-RH BACKDOOR! |
| X | alt CTRLx Shift | et3rd.exe | Added by the SDBOT-RG WORM! |
| X | ALTER DATA | [path] repcale.exe [path] beird.exe | Added by the IRCFLOOD.CD TROJAN! Both files are located in %System%\ccdew |
| X | Altnet | points manager.exe | Altnet TopSearch adware |
| X | AltnetPointsManager | points manager.exe | Altnet TopSearch adware |
| U | AltoMB_service | AltoMBsrv.exe | Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind |
| U | ALTOOLS | AccessL.exe | ALTools family of PC utilities |
| X | AltPayments | AltPayments.exe | WeirdOnTheWeb adware |
| Y | ALU Scheduler Service | ALUSchedulerSvc.exe | LiveUpdate scheduler for older versions of Symantec's security products including Norton Internet Security, Norton AntiVirus and the now discontinued Norton SystemWorks suite. Leave alone to ensure virus definitions are updated. Loads via a registry "RunServices" key in 98/Me and as a service in XP/Vista |
| U | ALUAlert | ALUNotify.exe | Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis |
| N | Aluria Security Center | SecurityCenter.exe | Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
| U | Aluria's Pop-Up Stopper | eps.exe | Aluria Pop-Stopper |
| N | Aluria's Spyware Eliminator | ASE.exe | Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here |
| U | AlwaysOnTopMaker | AlwaysOnTopMaker.exe | Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop |
| U | AlwaysReady Power Message APP | ARPWRMSG.EXE | "Away Mode" feature added with Update Rollup 2 for Windows XP Media Center Edition 2005 that allows the computer to appear off to the user while it continues to perform tasks that do not require user input, such as recording television and viewing Media Center Extender sessions. For more information see here |
| X | AmazingTens | AmazingTens.exe | Premium rate adult content dialler |
| U | AMD PowerNow! | GemBack.exe | AMD PowerNow! - "an innovative solution available on all AMD mobile processor-based notebooks that can effectively increase notebook battery life, while delivering performance on demand" |
| Y | amd_dc_opt | amd_dc_opt.exe | AMD Dual-Core Optimizer - "can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction" |
| N | AME_CSA | rundll32 amecsa.cpl, RUN_DLL | Loads ADSL modem Control Panel applet |
| N | America Online | aoltray.exe | Adds the AOL icon in the System Tray (*.* denotes version if present) for versions of AOL up to and including 9.0. Start AOL via the desktop or quick launch shortcuts or via Start → All Programs |
| N | America Online *.* Tray Icon | aoltray.exe | Adds the AOL icon in the System Tray (*.* denotes version if present) for versions of AOL up to and including 9.0. Start AOL via the desktop or quick launch shortcuts or via Start → All Programs |
| X | ami.exe | ami.exe | Added by the SILLYFDC-AY WORM! |
| U | AmIcoSinglun | AmIcoSinglun.exe | Single LUN Icon Utility - System Tray access/notification for card readers using controllers from Alcor Micro which incorporate Single LUN, such as the AU6336, AU6439 and AU6431 |
| U | AmIcoSinglun64 | AmIcoSinglun64.exe | Single LUN Icon Utility - System Tray access/notification for card readers using controllers from Alcor Micro which incorporate Single LUN, such as the AU6336, AU6439 and AU6431 |
| X | Amie Release V6.9D | services.exe | Added by the VB-EAN TROJAN! Note - this is not the legitimate services.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | amircivil | svchost.exe… | Added by the AMIRECIVEL WORM! |
| U | AMO_TA~1 | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AMO_TA~1.EXE | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AMO_Taskplaner.exe | AMO_TA~1.EXE | Part of Ashampoo® Magical Optimizer from Ashampoo GmbH & Co. KG - which removes stagnant and unnecessary hard drive files, deletes Internet tracks and streamlines the registry by erasing invalid and orphaned entries. The Taskplaner automates this system optimization according to the user defined schedule and gives System Tray access to the main program |
| U | AModemLockDown | ModemLockDown.exe | ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc |
| Y | Amon | AMON.EXE | Monitoring part of Eset's NOD32 antivirus |
| Y | Amonitor | amon.exe | Tiny Personal Firewall |
| U | AMP WinOFF | winoff.exe | WinOFF is " a utility designed to shut down Windows computers automatically, in a fully configurable way" |
| U | AMSG | Amsg.exe | Part of the IBM ThinkVantage Productivity Center. "The Message Center sends automatic notification on ThinkVantage Technologies integrated with your system. Once you're online" |
| X | amsgupdate | ams.exe | Added by a variant of the MAILBOT TROJAN! |
| N | AMSN | amsn.exe | aMSN Messenger is a multiplatform MSN messenger clone |
| X | amsn | amsn.exe | Added by the BANKER-BNZ TROJAN! |
| U | AMsnMonitor | A_MSN_Monitor.exe | Msn Chat Monitor & Sniffer by AwinSoft Inc - "is a handy network-control utility for capture and observe MSN chat conversations on all computers in network". Surveillance software - uninstall this software unless you put it there yourself |
| X | amva | amvo.exe | Added by the SILLYFDC-BR WORM! |
| N | Anapod Manager | anamgr.exe | Anapod Explorer from Red Chair Software "is the most advanced Windows iPod® software available, offering iPod® management through full Windows Explorer integration under My Computer." The models supported have been discontinued so the software is no longer available for new sales |
| X | anbv32 | nabv32.exe | Added by the TITOG.C WORM! |
| X | Andware Defence | Zsoft32.exe | Added by the GAOBOT.OO WORM! |
| X | angeleyes | msdll.exe | Added by the VB.PI TROJAN! |
| X | anhtaaa | kacsde.exe | Added by the FRETHOG-B TROJAN! |
| X | anhxox | anhzxc.exe | Added by the PSW-IH TROJAN! |
| X | animalss | animalss.exe | Added by the AGOBOT-VE WORM! |
| Y | ANIWZCS2Service | WZCSLDR2.exe | ALPHA Networks wireless driver |
| ? | ANIWZCSService | WZCSLDR.exe | D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity |
| ? | AnnotateCheck | AnnCheck.exe | Genius Wizard Pen Tablet driver related. Is it required? |
| N | Announcements | Annclist.exe | MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it |
| N | Anntext | Anntext.exe | Caere Pagekeeper text annotation server |
| U | AnonymityGateway | Anonymity Gateway.exe | Anonymity Gateway - privacy protection tool that conceals IP address preventing your surfing habits and your internet activity form being tracked by websites or Internet Service Providers |
| U | Anonymizer Total Net Shield | AnonTns.exe | Anonymizer Total Net Shield - ID protection and privacy software |
| Y | ANONYMIZER_SPYWAREKILLER | SpyWareKiller.exe | Anonymizer Spyware Killer, which was superseded by Anti-Spyware but is now discontinued |
| Y | ANONYMIZER_SPYWAREKILLER | AnonAntiSpyware.exe | Anonymizer Anti-Spyware - now discontinued |
| U | Another Internet Explorer Popup Killer | aiepk2.exe | Another IE Popup Killer - pop-up stopper |
| X | ansjava | [path to worm] | Added by the RANDON-AN WORM! |
| X | Anskya | PYSKY.NET.exe | Added by the DLOADER-MW TROJAN! |
| X | Answer Problem | dSAFsqs.exe | Added by the SDBOT-SC WORM! |
| U | AnswerTool | AnswerTool.exe | AnswerTool - save your E-mail replies in AnswerTool, then reuse them again and again |
| X | Anti | Isass.exe | Added by the BROPIA.K WORM! |
| X | Anti Spam Service | spamsvc.exe | Added by the MYTOB-BK WORM! |
| Y | Anti Trojan Elite | TJEnder.exe | Anti Trojan Elite (ATE) anti-malware tool |
| N | Anti-Blaxx Manager | Anti-Blaxx.exe | Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives |
| U | Anti-keylogger check | antikey.exe | Anti-keylogger - protects against keylogger programs monitoring your keystrokes |
| U | Anti-Trojan-Watch | ATWatch.exe | Anti-Trojan Watch - trojan detector |
| X | Anti-Virus | vpms.exe | Added by a variant of the SLAPER TROJAN! |
| X | Anti-Virus | [random filename].exe | Added by the CAPROBAD-A TROJAN! |
| X | Anti-Virus | Abaddon.exe | Added by the NODDABA WORM! |
| X | Anti-Virus Product Sync | [unprintable character][3 characters]log.exe | Added by the KEDEBE.D WORM! |
| X | Anti-Virus Update | avupdate.exe | Added by the TIOTUA-CO WORM! |
| X | Anti-Virus Update Scheduler | [path to trojan] | Added by the SPAMMIT-A TROJAN! |
| X | Anti-Virus Update Scheduler | winsp3.exe | Malware - detected by Kaspersky as the AGENT.FP TROJAN! |
| X | Anti-Virus Update Scheduler V1.39.12R | [path to trojan] | Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe, kaspersky.exe, nrton.exe, wins.exe, gah32.exe, 1.tmp, syste.exe, alg.exe, socks.exe, winxpsp2.exe, tek9.exe, sks.exe, hihi.exe, s.exe, xps2.exe, dns2.exe, ikav32.exe and more... |
| X | anti_troj | anti_troj.exe | Malware installed by different rogue security software including SpyKillerPro. Also detected as the LODEAR.D TROJAN! |
| X | AntiAdd.exe | AntiAdd.exe | AntiAdd rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | AntiAID | AntiAID.exe | AntiAID rogue security software - not recommended, removal instructions here. There are number of variants in this family sharing the same user interface - see here |
| X | AntiCareMain | AntiCare.exe | AntiCare rogue security software - not recommended |
| X | AnticlearMain | Anticlear.exe | Anticlear rogue security software - not recommended |
| X | AntiClicker | SVCHST32.EXE | Added by the CBH TROJAN! |
| U | antidialer.co.uk | Dialer_Watcher.exe | Dialer_Watcher is an application that allows you to detect dialers on your computer |
| Y | AntiFreeze | AntiFreeze.exe | AntiFreeze from Resplendence Software Projects - "offers a last recourse when you find your computer in a hung state". If your system has hung and AntiFreeze is running, a hotkey combination will suspend all but critical processes and allow you to save or recover your work |
| X | AntiGuard | AntiGuard.exe | AntiGuard rogue security software - not recommended, removal instructions here |
| X | antihost | ahr.exe | Added by the BANCBAN-QJ TROJAN! |
| X | antike | wingate32.exe | Added by a variant of the RBOT WORM! See here |
| X | AntiKeep | AntiKeep.exe | AntiKeep rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | AntiKeep.exe | AntiKeep.exe | AntiKeep rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | AntiMalware | AntiMalware.exe | AntiMalware rogue security software - not recommended, removal instructions here |