| Status | Autorun name | Command | Description |
| X | dc2k5 | SVIQ.EXE | Added by the COIDUNG-A WORM! |
| U | DC300 Monitor | cmonitor.exe | Monitor for a Acer DC300 digital camera |
| X | DC6 | dc6_startupmon.exe | Part of the WinAntiVirus Pro 2006 rogue security software - not recommended, removal instructions here |
| X | DC6_Check | uwasdc.exe | Part of the WinAntiSpyware 2006 and WinAntiSpyware 2007 rogue spyware removers - not recommended |
| X | DC6_check | dc6_startupmon.exe | Part of the WinAntiVirus Pro 2006 rogue security software - not recommended, removal instructions here |
| X | dc6_check | dcmon.exe | SystemDoctor rogue security software - not recommended, removal instructions here |
| X | DC6cw | DC6cw.exe | Part of the DriveCleaner rogue security software - not recommended, removal instructions here |
| X | dcc | dcc_.exe | Added by the AGENT-GBJ TROJAN! |
| X | DCE Manager | dcemgr.exe | Added by the TUMAG TROJAN! |
| U | DCfssvc | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| U | dcfssve | dcfssvc.exe | Associated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can't load pictures from your camera/dock - Kodak's dock is an example |
| X | DCOM Server | [path to trojan] | Added by the AGENT-CCQ BACKDOOR! |
| X | Dcom System Patch | Microsoft.exe | Added by the RANDEX.MS WORM! |
| Y | DCPstrApp | SecurityDeviceInfoSetRegistryString.exe | Part of the Dell ControlPoint Security Manager - which "provides access to your security, user identification, fingerprint readers, and smartcard security technology". Dell ControlPoint is "designed to simplify and unify the execution of what should be simple system functions" and "integrates best-of-breed software and utility solutions into one helpful solution" |
| X | dcsm | dcsm.exe | Part of the PrivacyProtector and DriveCleaner rogue security tools |
| N | DDCActiveMenu | DDCActiveMenu.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCM | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| N | DDCMan | DDCMan.exe | Digital Distribution Channel - formally part of the WildTangent on-line games delivery service. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case |
| X | ddeproc | ddeproc.exe | Webcelerator from eAcceleration speeds your Web browsing by both remembering where you have been and anticipating where you will go. Only needed if you find it improves web browsing. Now no longer available and supported and when available was classed as spyware - see here |
| U | ddhelper | W815DM.EXE | Enuff Parental Control Software by Akrontech |
| X | DDialler | DDialler.exe | Adult content dialler |
| X | ddivmwa | [random filename] | Added by a variant of the SLAPER TROJAN! |
| U | DDLAgent | DDLAgent.exe | Loads DVD Device Lock - which "can be used to restrict read or write access to removable media devices such as CD, DVD, floppy, flash and USB drives. You can also restrict access to partitions of hard disk drives". If disabled, hidden and locked drives still retain their original status so the user will only be able to change their status them via the main UI |
| ? | DDmService | DDmService.exe | Part of the Web Player which is included with the DivX Plus video software package from DivX, LLC. The exact purpose of this entry and whether it's needed is unknown at present but it appears to be associated with clearing the cache - see here |
| U | ddoctorv2 | sprtcmd.exe /P ddoctorv2 | Comcast Desktop Doctor (provided by SupportSoft, Inc) is a free self-help tool for Comcast broadband users. Identifies and automatically fixes typical problems that may occur with your high-speed internet service |
| X | ddqdsxnfqs | DQDDSS.EXE | Added by the SDBOT.AEL WORM! |
| X | DDriver | windrv.exe | Added by the DELF.WG TROJAN! |
| X | DDriver | svchost.exe | Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! The location of this file varies |
| ? | DDT | N/A | ?? |
| U | DDWMon | ddwmon.exe | Direct Disc Writer Event Monitor from TOSHIBA |
| X | de32gen | de32gen.exe | Added by a variant of the CRYPTER.C TROJAN! |
| N | DeadAIM | rundll32.exe DeadAIM.ocm, ExportedCheckODLs | DeadAIM - feature enhancing product for AOL's Instant Messenger program |
| X | DeadKitty | DeadKitty.exe | Added by the DEADCAT-A WORM! |
| X | DealHelperBrwsr | dhbrwsr.exe | DealHelper adware |
| X | DealHelperDown | download.exe | DealHelper adware |
| X | DealHelperUpdate | DHUpdt.exe | DealHelper adware |
| X | Death.exe | Death.exe | Added by the DELF-ERW TROJAN! |
| U | DeathAdder | razerhid.exe | Razer DeathAdder gaming mouse driver - required if you use the additional features and programmed keys/macros |
| X | Debug | DebugW32.exe | Added by the GUBED TROJAN! |
| X | Debug | SMSS.exe | DreamAd adware. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | Debugger | dbg32.exe | Added by the MYTOB-FW WORM! |
| X | Debugger | explorer32dbg.exe | Added by the CWS-M TROJAN! |
| X | Debugger | iexplore_dbg.exe | Added by the CWS-M TROJAN! |
| X | debugger | help.pif | Added by the DELF-DRA WORM! |
| X | DebugMonitor | debugmonitor.exe | Added by the MYDOOM.BG WORM! |
| U | DeeEnEs | DeeEnEs.exe | DeeEnEs - automatically updates a dynamic IP address when it changes |
| X | deejay | forboo.exe | Added by the FORBOT-AY WORM! |
| X | Deewoo | ncntnkwd.exe | ZenoSearch adware variant |
| X | Default | explore.vbs | Added by the ALLEM WORM! |
| X | Default | mtask.vbe | Added by the ALLEM WORM! |
| X | default | shell32.exe | Added by the BINGHE TROJAN! |
| X | Default | _default.pif | Added by the RUBBLE-C WORM! |
| U | default | mskbw.exe | PC Surveillance PRO surveillance software. Uninstall this software unless you put it there yourself |
| X | Default | lsassM.exe | Added by the RBOT-UW WORM! |
| X | default | kernel.exe | Added by the SALUNI TROJAN! |
| U | Default Manager | DefMgr.exe | Part of MSN Toolbar from version 4.* onwards (renamed "Bing Bar" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing |
| X | Default System Research | vhchost.exe | Added by the TARNO.I TROJAN! |
| X | Default web browser | iexpIore.exe | Added by the OBLIVION.B TROJAN! Note - do not confuse "iexpIore.exe" with "iexplore.exe" (Internet Explorer), the first has a capital "i" in place of lower case "L" |
| X | Default_Page_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | Default_Search_URL | http://find.naupoint.com | Naupoint browser hijacker |
| X | DefaultConfiguration | defaultconfh.exe | Added by the AGOBOT-JC WORM! |
| X | DefendAPc | DefendAPc.exe | DefendAPc rogue security software - not recommended, removal instructions here. A member of the AntiAID family |
| X | defender | [spyware filename] | DollarRevenue spyware. The file is located in %Root% (i.e. C:\ D:\, etc) |
| X | defender | [path to trojan] | Added by the VB-BAQ TROJAN! |
| X | DefensaAntiMalware | pgs.exe | DefensaAntiMalware, Spanish rogue security software - not recommended. A member of the AVSystemCare family |
| X | Defense Center | defcnt.exe | Defense Center rogue security software - not recommended, removal instructions here |
| X | DefenseNetSurfage | GDC.exe | DefenseNetSurfage rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| ? | defergui | defergui.exe | Related to IBM Standard Software Installer. What does it do and is it required? |
| U | DefMgr | DefMgr.exe | Part of MSN Toolbar from version 4.* onwards (renamed "Bing Bar" from version 5.* onwards) which includes the Bing search engine. Via Start → All Programs → Microsoft Default Manager you can elect to keep Bing as the default search engine and set it to notify you of any changes to your browsers default settings. Not required if you choose not to use Bing |
| X | defragm_check | defragment.exe | CoolWebSearch parasite variant |
| X | defragsys | svchost.exe | Added by the BIFROSE-TH TROJAN! Note - this is not the legitimate svchost.exe process which should normally figure in Msconfig/Startup! |
| U | DefragTaskBar | defragTaskBar.exe | System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which "works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk" |
| U | defragTaskBar.exe | defragTaskBar.exe | System Tray access to Ashampoo® Magical Defrag 2 from Ashampoo GmbH & Co. KG - which "works is similar to a screensaver. Whenever the computer is idle the program cuts in automatically and starts cleaning up your hard disk" |
| X | DefSysdify | Syst.exe | Added by the NAUGHTER.D TROJAN! |
| U | defwatch | defwatch.exe | Detects out-of-date virus definitions for Norton Anti-Virus Corporate Edition and runs the Defwatch Wizard. Only required if you don't update the virus definitions manually on a regular basis |
| U | Deko550 | Deko550.exe | Associated with the Deko550 entry-level SD real-time graphics system from Avid Technology |
| U | Delay | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| X | DelayLoad | msprint.exe | Added by a variant of the Win32.Agent.ryo malware - see here |
| U | Delayrun | delayrun.exe | On HP PCs this program is used to help prevent conflicts or timing issues on fast computers |
| N | DelayShred | ShrCL.EXE | McAfee Shredder - not required at startup. You can run it manually via McAfee Security Center |
| ? | delcab | deltreew.exe C:\cabs | ?? |
| X | Delete Me | worm.exe | Added by the DOOMHUNTER WORM! |
| Y | Delete USB Error Key | SPS3_USB_Driver_Setup.exe | Installed with SAMSUNG PC Studio and New PC Studio mobile device management utilities. The exact purpose is unknown at present and it runs only once on the first boot after installation is complete before exiting |
| U | DeleteHistoryFree | dhf.exe | Delete History Free - "Privacy protection software for deleting Internet surfing and other computer activity tracks from your PC" |
| ? | Delivery Center | DeliveryCenter.exe | ?? |
| U | Dell 968 AIO Printer | fm3032.exe | FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Bundled version for the Dell 968 AIO printer |
| U | Dell 968 AIO Printer Fax Server | fm3032.exe | FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Bundled version for the Dell 968 AIO printer |
| U | Dell AIO Printer 948 | fm3032.exe | FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Bundled version for the Dell AIO Printer 948 |
| U | Dell AIO Printer 948 Fax Server | fm3032.exe | FaxMan integrates complete fax send and receive support into Windows applications without requiring additional fax software. Bundled version for the Dell AIO Printer 948 |
| U | Dell AIO Printer A920 | dlbkbmgr.exe | System Tray application for the Dell Photo AIO Printer 920 that enables scan or fax functions to run directly from the printer via the buttons |
| U | Dell AIO Printer A940 | dlbabmgr.exe | System Tray application for the Dell Photo AIO Printer 940 that enables scan or fax functions to run directly from the printer via the buttons |
| U | Dell AIO Printer A960 | dlbfbmgr.exe | System Tray application for the Dell Photo AIO Printer 960 that enables scan or fax functions to run directly from the printer via the buttons |
| U | Dell DataSafe Online | DataSafeOnline.exe | "Dell DataSafe Online helps protect your music, photos and other important files by placing backup copies on a secure storage site using your internet connection. For your security all data is encrypted and compressed before ever leaving your computer." Required for the automatic backups to run |
| U | Dell DataSafe Scheduler | DataSafeOnlineScheduler.exe | Scheduler for Dell DataSafe™ Online which "helps protect your music, photos and other important files by placing backup copies on a secure storage site using your internet connection" |
| U | Dell Dock | DellDock.exe | Dell Dock by Stardock Corporation - "created to bring greater organization, personalization and productivity to Dell customers around the globe". Based upon Stardock's own ObjectDeck which is used to "organize your shortcuts, programs and running tasks into an attractive and fun animated dock" |
| U | Dell Dock First Run | DellDock.exe | Dell Dock by Stardock Corporation - "created to bring greater organization, personalization and productivity to Dell customers around the globe". Based upon Stardock's own ObjectDeck which is used to "organize your shortcuts, programs and running tasks into an attractive and fun animated dock" |
| U | Dell PanelMgr | SSMMgr.exe | Monitors ink levels, paper present and other parameters for some Dell printers |
| U | Dell Photo AIO Printer 922 | dlbtbmgr.exe | System Tray application for the Dell Photo AIO Printer 922 that enables scan or fax functions to run directly from the printer via the buttons |
| U | Dell Photo AIO Printer 942 | dlbubmgr.exe | System Tray application for the Dell Photo AIO Printer 942 that enables scan or fax functions to run directly from the printer via the buttons |
| U | Dell Photo AIO Printer 962 | dlbxmon.exe | DellPhoto AIO Printer 962 Device Monitor |