| Status | Autorun name | Command | Description |
| X | DownloadLegalMusic | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | DownloadMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | DownloadsAndMP3 | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | DownloadWare | dw.exe | DownloadWare adware |
| X | DownloadWare Engine | Dwe.exe | DownloadWare adware |
| X | downs | downs.exe | Added by the BCKDR-MNR TROJAN! |
| X | Downxz | Downxz.bat | Added by the MYDOOM.W WORM |
| Y | DpAgent | dpagent.exe | Part of the DigitalPersona range of fingerprint authentication applications - which are use to replace passwords with fingerprint recognition. Included on some Dell laptop models (such as the Vostro 1720) for example |
| N | DPAgnt | DPAgnt.exe | digitalPersona fingerprint scanner |
| Y | DPAS | DPASNT.exe | DefenderPro AntiSpy spyware remover - now incorporated Defender Pro 15-in-1 and 5-in-1 |
| Y | DPASUpdate | DPASAutoUpdate.exe | Automatic updates for DefenderPro AntiSpy spyware remover - now incorporated Defender Pro 15-in-1 and 5-in-1 |
| Y | Dpcnav | dpcnav.exe | DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
| N | DPConfig | DPConfig.exe | Compuware DevPartner Studio Configuration Utility, a tool for software developers - System Tray access to configure the utility's analysis. Not required at startup, can be launched from the Start Menu programs group when needed |
| X | dpcproxy | dpcproxy.exe | Added by the GOLDENP-A TROJAN! |
| Y | DPCProxyLoadOnStartup | dpcstart.exe | DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
| Y | Dpcstart | dpcstart.exe | DirecWay from DirectTV (now HughesNet) - satellite based high-speed internet access |
| X | dpi | dpi.exe | Delfin PromulGate adware |
| X | dpnsvr32 | dpnsvr32.exe | Added by the AOLPASS-B TROJAN! |
| U | dpps2 | dpps2.exe | Pop-Up Stopper Companion from Panicware. Pop-up blocker integrated into the IE toolbar. Note that the Pro version doesn't load in startup as it is installed as an Internet Explorer toolbar. Can cause problems with IE if you use WinXP and uninstall Service Pack 1. Uninstalling the software leaves it in the startup group |
| X | dps | dps.exe | SmartestSearch parasite - poses as a foistware, bogus adware/spyware remover called "scumware-remover" |
| N | dptracker | dptracker.exe | CamTrack webcam software that enhances the way people video chat |
| U | DpUtil | TEDTray.exe | Main executable for TOSHIBA DualPoint Utility Main Module. It is a system tray icon program that provides configuration options for dual pointing device |
| X | dpzProtect | n.vbe | Added by the RUNAUTO.H WORM! |
| X | DR service | [path to worm] | Added by the RBOT-CZT WORM! |
| X | Dr. Guard | drguard.exe | Dr. Guard rogue security software - not recommended, removal instructions here |
| X | DR_S | DR_S.exe | IstBar adware |
| N | Drag'n'Drop_Autolaunch | Autolaunch.exe | Iomega HotBurn - CD-RW burning software |
| N | Drag-to-Disc | DrgToDsc.exe | System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly and available via the Start menu |
| ? | DragDrop | DragDrop.exe | ?? |
| N | DragnDrop_Autolaunch | Autolaunch.exe | Iomega HotBurn - CD-RW burning software |
| X | DRam Monitor 23 | tskman3.exe | Added by a variant of the RBOT WORM! |
| X | DRam prmaessor | [random filename] | Added by the RBOT.CSG WORM! |
| X | DRam prosesor | [random filename] | Added by the SPYBOT.EE WORM! |
| X | DRam prosessor | [random filename] | Added by the RBOT.CSG WORM! |
| X | DRam prosessor | plscd.exe | Added by the RBOT.CYA WORM! |
| X | DRam prosessor | HWAPI.exe | Added by a variant of the RBOT WORM! Note - this is not the McAfee HackerWatch process which has the same filename |
| X | DRam prosessor | WindowsUpdate.exe | Added by the RBOT-BBZ WORM! |
| X | DRam prosessor | msupdate.exe | Added by the DELF-FAW TROJAN! |
| X | DRam prosessor | winupl.exe | Added by the RBOT-BCQ WORM! |
| X | DRam rar proc | winupdaterar.exe | Added by a variant of the IRCBOT TROJAN! |
| X | DRam rare proc | updaterarwin.exe | Added by the RBOT-GQW WORM! |
| X | DRan posessor | DAP.exe | Added by a variant of the SDBOT WORM! |
| X | DrAntispy | DrAntispy.exe | DrAntiSpy rogue security software - not recommended, removal instructions here |
| X | DrCache | MSTDC.EXE | Added by the BDOOR-JM BACKDOOR! |
| X | dreams | server.exe | Added by a variant of the SDBOT WORM! |
| X | DrefIW | SysDrefIWv2.exe | Added by the DREF-C WORM! |
| X | DrefIW | SysDref.exe | Added by the DREF-D WORM! |
| ? | dregfix | ph_finder.exe | ?? |
| N | DrgToDsc | DrgToDsc.exe | System Tray access to Roxio Drag-to-Disc - part of the Roxio Easy CD & DVD Creator and Easy Media Creator series of CD/DVD tools. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly and available via the Start menu |
| ? | dried.exe | dried.exe | ?? |
| X | drin | [path to trojan] | Added by the SMALL.DPB TROJAN! |
| U | Drive Xpert | DriveXpert.exe | Hard drive management utility included with some ASUS motherboards. "Without drivers or BIOS setups, the ASUS exclusive Drive Xpert is ideal for anyone who needs to secure data on their hard drives or enhance hard drive performances without the hassles of complicated configurations" |
| X | DriveCleaner 2006 Free | UDC2006.exe | DriveCleaner rogue security software - not recommended, removal instructions here |
| X | DriveCleaner Free | UDC.exe | DriveCleaner rogue security software - not recommended, removal instructions here |
| X | DriveDefender | GDC.exe | DriveDefender rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| U | DriveIcons | DriveIcon.exe | Drive Icons from Realtek - shows a specific icon for each card type for their card reader controllers |
| U | DriveLED | OODLed.exe | O&O DriveLED - hard disk monitoring and crash prevention |
| X | Driver | gbot.exe | Added by the JUNTADOR.K TROJAN! |
| X | Driver Control Manager v3.2 | brdevet.exe | Added by the AUTORUN-BHS WORM! |
| X | Driver Control Manager v4.6 | devetnae.exe | Added by the IRCBOT-AGY WORM! |
| X | Driver Control Manager v5.1 | dvadescetr.exe | Added by the AGENT-OVL TROJAN! |
| X | Driver Control Manager v7.1 | cetrdeje.exe | Added by the AUTORUN-BKK WORM! |
| X | Driver Control Manager v7.5 | cetrdeosa.exe | Added by the SILLYFDC-FF WORM! |
| X | Driver32 | Scam32.exe | Added by the SIRCAM WORM! |
| X | Driverab | helz.exe | Added by the RBOT-ABH WORM! Note - the file is a hidden, read-only, system file |
| X | DriverCheck | svchost.exe | Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc |
| X | DriverConf | dvrconf.exe | Added by the AGOBOT-IY WORM! |
| X | DriverDB | svcmdx32.exe | Added by the BERPI TROJAN! |
| X | DriverLoad | svchost.exe | Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc |
| U | DriverMagicLogon | dmschedule.exe | Part of DriverMagic - "the easiest way to locate device drivers" |
| N | DriverMax | devices.exe | DriverMax from Innovative Solutions - "a new tool that allows you to download the latest driver updates for your computer. No more searching for rare drivers on discs or on the web or inserting one installation CD after the other" |
| X | DriverModule | csrnvrt.exe | Added by the IRCBOT.I TROJAN! |
| X | DriverPath | system32.exe | Added by the PRORAT-S TROJAN! |
| X | Drivers for Internet Explorer | accesweb.exe | Added by the STARTPAGE.FW TROJAN! |
| N | DriverScanner | launcher.exe | Launcher for the DriverScanner driver update utility from Uniblue Systems Limited - which "scans your computer to provide a list of drivers that need to be updated". Drivers are not updated on a regular basis so run manually every so often |
| X | Drives swap | AV1i.exe | Anti-Virus Number-1 rogue security software - not recommended, removal instructions here |
| N | DRIVES~1 | DRIVES~1.EXE | Utility included with some Nero digital media suites (CD/DVD burning, authoring, etc) which allows the user to set the reading speed an spin down time of a CD/DVD drive on-the-fly - typically to avoid read errors on discs with surface scratches and to reduce the noise on high-speed drives |
| N | DriveSelect | driveselect.exe | DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs |
| N | DriveSpeed Application | DRIVES~1.EXE | Utility included with some Nero digital media suites (CD/DVD burning, authoring, etc) which allows the user to set the reading speed an spin down time of a CD/DVD drive on-the-fly - typically to avoid read errors on discs with surface scratches and to reduce the noise on high-speed drives |
| X | DriveSystem | maxpaynowti1.exe | Added by the TIBS.AZT TROJAN! |
| U | drkly16j | rundll32.exe drkly16j.dll, ServiceCheck | KidsWatch Time Control parental control software |
| X | DRM Upgrade | drmupgd.exe | Added by the IRCBOT.AWU BACKDOOR! |
| U | dRMON SmartAgent | SmartAgt.exe | Part of the network monitoring program group for 3Com NIC cards. See here for more info |
| X | drmsrv32 | stmhosts.exe | Added by the AGENT.AGWU TROJAN! |
| X | drmu | W95Mm.exe | Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise |
| X | Drmupgds | Drmupgds.exe | Maxfiles adware |
| X | drocher | d.exe | Adult content dialler |
| N | Dropbox | Dropbox.exe | System Tray access to the Dropbox online storage service which provides 2GB of space for free for you to save, sync and share files |
| X | DropSpam Lifestyle | dslifestyle.exe | Dropspam adware |
| X | DrProtection | DrProtection.exe | DrProtection rogue security software - not recommended |
| U | DRPU Pc Data manager | apcdm.exe | DRPU PC Data Manager surveillance software. Uninstall this software unless you put it there yourself |
| X | drv_st_key | hidn.exe | Added by the BEAGLE.FF WORM! |
| X | drvddll.exe | drvddll.exe | Added by the BEAGLE.AP WORM! |
| X | Drvddll_exe | drvddll.exe | Added by the BEAGLE.X WORM! |
| U | DrvIcon | DrvIcon.exe | "Vista Drive Icon changes the drive icons shown in Windows "My Computer", to a nearly Vista drive icon, showing the drive's free space with a smooth colored horizontal bar" |
| ? | DrvListnr | DrvListnr.exe | Analog Devices SoundMAX soundcard related. What does it do and is it required? |
| U | drvlsnr | drvlsnr.exe | Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly |
| U | DrvMon.exe | DrvMon.exe | Alcor drive monitor software |
| X | drvnetw | drvnetw.exe | Added by the BROGGER-B TROJAN! |
| X | drvr32h | drvr32h.exe | Added by an unidentified VIRUS, WORM or TROJAN! |