| Status | Autorun name | Command | Description |
| U | MODEMBTR | MODEMBTR.EXE | Modem Booster from inKline Global to improve ISP connections |
| X | Modeminf | Modeminf.exe | Added by a variant of the CRYPTER.C TROJAN! |
| ? | ModemListener | ModemListener.exe | Related to USB based mobile broadband services such as those available from Virgin Media, VIVCOM and others |
| U | ModemOnHold | MOH.EXE | NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information |
| U | ModemOnHold | netWaiting.exe | NetWaiting/Modem-on-Hold - allows you to place your Internet connection on hold while you take a voice call (if Call Waiting is supported by your phone company). See here for more information |
| N | ModemUtility | mdmsetpe.exe | System Tray configuration icon for Aztech modems |
| X | Modifiet Amateur HTPB | wuaclt.exe | Added by the IRCBOT.AYS WORM! |
| U | ModPS2 | ModPS2Key.exe | Hotkey drivers for Chicony keyboard. Required if you use the hotkeys |
| X | ModularConfig | syscnfg.exe | Added by an unidentified VIRUS, WORM or TROJAN! "syscnfg.exe" is found in %Windir%\fonts\font2 where no *.exe files should reside |
| X | Module Call initialize | RUNDLL32.EXE reg.dll, ondll_reg | Added by the LOVGATE.C WORM! |
| U | Module Loader | DLLML.exe | Creative DLL Module Loader for the Sound Blaster range of internal and external soundcards. Used to load modules such as remote control or mixing |
| X | Module WinMeter | wimmtre.exe | Added by the SDBOT-BF BACKDOOR! |
| X | Modulo 00FE0F01 Host Internet | syschost.exe | Added by the DELF-KW TROJAN! |
| X | MonAppli | [random filename] | Added by the DELF.IF TROJAN! The most common filenames are isys32.exe & msnmsg.exe |
| X | MonContenuassistant | GDC.exe | MonContenuassistant French rogue privacy tool - not recommended. A member of the PCPrivacyTool family |
| N | Money Express | moneyexpress.exe | Part of MS Money. Available via Start -> Programs |
| N | MoneyAgent | money express.exe | Part of MS Money. Available via Start -> Programs |
| N | MoneyAgent | mnyexpr.exe | Microsoft Money |
| N | MoneyStartUp | Money Startup.exe | Microsoft Money |
| N | MoneyStartUp10.0 | Activation.exe | Part of MS Money 2002 |
| X | monitor | monitor.exe | Browser hijacker, redirecting to NCM Search |
| U | Monitor | SD Monitor.exe | "Transfer data quickly between your memory card and your computer with SanDisk's Readers, Writers and Adapters" |
| X | Monitor | explor.exe | Added by the AGOBOT-EF BACKDOOR! |
| U | Monitor | Monitor.exe | Monitor application for the Philips SPC610NC webcam, those based upon CMOS image sensors from PixArt Imaging Inc (such as the PAC207 and PAC7302) and possibly others. Also the Leapfrog Connect Application |
| U | Monitor Apache Servers | ApacheMonitor.exe | Monitoring interface tool for the Apache Web Server package. Useful only if you're running such a server on your PC. Available via Start → Programs |
| X | Monitor calibration | AV1i.exe | Anti-Virus-1 rogue security software - not recommended, removal instructions here |
| U | Monitor Helper | monitor.exe | MyLittleSpy keystroke logger/monitoring program - remove unless you installed it yourself! |
| X | Monitor SynManager | fecwvncd.exe | Added by the SDBOT-IW WORM! |
| X | Monitor Test | [random filename] | Added by the SDBOT-NC WORM! |
| X | monitor1a | monitor1a.exe | Added by the MSNAGEN-A TROJAN! |
| X | Monitoring Service | svchost.exe | Added by the CONE.C WORM! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\tasks |
| X | Monitormgt | Monitormgt.exe | Added by the GEMA TROJAN! |
| U | MonitorSD | SDMonitor.exe | Spyware Detector - spyware remover. Initially not recommended due to false positives but the later versions have since improved - see here |
| X | mono.exe | mono.exe | Added by the SDBOT-DHV WORM! |
| X | MONPluginSrIvcs | n3monap23.exe | Added by a variant of the RBOT WORM! |
| N | Monstersoundtray | Freectrl.exe | Diamond Multimedia sound card control panel |
| X | MonTest | vccxzq.exe | Added by the SDBOT-EA WORM! |
| U | Montreal Canadiens Weather | Montreal Canadiens Weather.exe | Weather gadget included with the Montreal Canadiens theme for MyColors from Stardock Corporation |
| U | MoodBook | mb.exe | MoodBook is a free Windows utility that brings art to your desktop |
| ? | MoodLogic Service | MLService.exe | Part of the MoodLogic music management utility - which "automates the process of fixing and organizing digital music (MP3, WMA, and .wav) files in bulk. Once the tunes are organized, you can sort music by genre, artist, tempo, and mood (aggressive, mellow, upbeat, happy, romantic, sad), and create playlists accordingly". Now discontinued but what does it do and is it required? |
| N | MoodLogic Updater | Updater.exe | Updater for the MoodLogic music management utility - which "automates the process of fixing and organizing digital music (MP3, WMA, and .wav) files in bulk. Once the tunes are organized, you can sort music by genre, artist, tempo, and mood (aggressive, mellow, upbeat, happy, romantic, sad), and create playlists accordingly". Now discontinued |
| ? | MoodLogicTV | mtv.exe | Related to the integration between the MoodLogic music management utility and the TiVo Home Media Option (HMO). What does it do and is it required? |
| N | moon phase | moon.exe | Moon Phase - tray icon that indicates the phases of the moon |
| U | Moon Phase | MOONPH~1.EXE | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits. This is the XP MSConfig entry where "MoonPhase.exe" is shown as "MOONPH~1.EXE" |
| U | Moon Phase | MoonPhase.exe | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits |
| X | MooNlight | MySqld-nt.cmd | Added by the BOBANDY-A WORM! |
| U | Moony | moony.exe | Moony - ISDN software that lets you "always know who is calling or who called when you were away" |
| X | MoreContent | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| X | MoreResults | MoreResults.exe | MoreResults adware |
| N | Morpheus | morpheus.exe | MusicCity Networks' Morpheus - another peer-to-peer client based on Kazaa. Notable in that this one doesn't seem to install the adware that clog the Kazaa download. They claim they are adware free, and a visitor quotes "I have seen no instance of any since using it" |
| X | morphstb | morphstb.exe | Adware - detected by Kaspersky as the STUBBY.C TROJAN! |
| X | mosadl | mosadl.exe | Added by the RBOT-GWN WORM! |
| X | mosearch | mosearch.exe | Fast Search in Office XP - similar to the new revision of the Find Fast feature in Office 2000. Fast Search uses the Indexing Services in Office XP to create a catalog of Office files on your computer's hard disk. As with Find Fast - a waste of resources. If it can't be disabled via MSCONFIG try here |
| X | Motherboard Config | Ati2xxx.exe | Added by the RBOT-AIK WORM! |
| X | MotherBoard Sounds | Sounds.exe | Added by the RBOT-AAP WORM! |
| N | Motive SmartBridge | mpbtn.exe | System tray icon for the Virtual Assistant from AT&T Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start -> Programs - not required |
| N | Motive SmartBridge | MotiveSB.exe | System tray icon for the virtual assistant from a number of internet providers - used to communicate internet problems via the network rather than telephone. Known to cause various issues with slow performance and crashes so it's suggested you disable this software and run it only if instructed by your ISP's support staff |
| N | Motive SmartBridge | BTHelpNotifier.exe | System tray icon for help from BT Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start → All Programs - not required |
| U | MotiveMonitor | motmon.exe | Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used by the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufacturer. For most users it's not required |
| N | MotiveSB | MotiveSB.exe | System tray icon for the virtual assistant from a number of internet providers - used to communicate internet problems via the network rather than telephone. Known to cause various issues with slow performance and crashes so it's suggested you disable this software and run it only if instructed by your ISP's support staff |
| U | MotMon | motmon.exe | Found on HP/Dell and Compaq systems (and maybe others). MotiveMonitor is used by the suppliers on-line support and allows the agent at the far end to do harddrive/ram/video/etc tests on the computer. Can cause some users problems with IE and Netscape by disabling this - in this case leave it to run. You may also wish to leave it alone if the PC is still within the support period from the manufacturer. For most users it's not required |
| X | motoin | mm15201518.Stub.exe | Delfin Promulgate adware variant |
| U | Motor_Tracking_Tool | MTTool.exe | Sweex Motion Tracking Webcam utility. "The motion tracking function ensures that the camera can follow all your movements. So you can move and chat, without disappearing from view" |
| U | Motorola Desktop Suite | DesktopSuite.exe | Related to Motorola Desktop Suite - PC software managing Motorola mobiles such as the A1000 |
| U | Motorola Desktop Suite mRouter Config | mRouterConfig.exe | Configuration for Motorola's version of Intuwave's m-Router - "that enables easy connectivity between mobile devices and PCs across Bluetooth, Infrared, USB and serial cable connections". It was licensed and used by the Symbian OS but m-Router is no longer readily available since Intuwave went into administration in 2006 |
| U | Mount Safe & Sound | Fbmount.exe | From McAfee VirusScan version 5.x. Creates back-up sets of critical files in a separate area of a hard drive. If you make regular back-ups it's not needed and can be painful during system start |
| U | mount.exe | mount.exe | Part of "GiPo@FileUtilities - GiPo@Mount "Provides advanced substitutional and mounting services. It allows to attach a local drive to an empty folder on an NTFS volume (only for Windows 2000/XP) and to substitute a local folder for a drive letter" |
| X | mouse | mouse.exe | Added by the RBOT-AHJ WORM! |
| U | Mouse 32A | Mouse32A.exe | Mouse utility. If you disable this entry you will not be able to use any of the non-standard functions of the mouse |
| N | Mouse Suite 98 Daemon | pelmiced.exe | Mouse driver. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
| U | Mouse Suite 98 Daemon | ICO.EXE | Found on some Sony Vaio, IBM Thinkpad and Dell (and possibly other) laptops and seems to be related to Mouse Suite 98 Daemon according to the properties. Required on the Dell Inspirion 530 as without it the Dell mouse suite does not load and mouse settings are not retained on a reboot. Appears to cause a behaviour where the desktop suddenly flips back up when playing DirectX associated games |
| X | mousebut | mousebut.exe | Added by the CRYPTER.A TROJAN! |
| X | Mousecntl | mousecntl.exe | Added by a variant of the CRYPTER.C TROJAN! |
| N | MouseCount | MC.exe | MouseCount by Kittyfeet Software. "Utility for counting how many times us computer junkies click our mouse in a given session/day/week/month/year." Not required |
| X | mousedrive.exe | instantmsgrs.exe | Added by the FORBOT-ER WORM! |
| X | MouseDrv | [path to worm] | Added by the ZOLOAD-B WORM! |
| X | MouseDrv | update.exe | Added by the ZOTOB.N WORM! |
| U | mouseElf | MC.exe | Genius NetScroll mouse driver - required if you use non-standard Windows driver features |
| U | mouseElf | mouseElf.exe | System Tray access to the mouse control panel for Genius Netscroll mice. Required if you use non-standard Windows driver features |
| U | MouseImp | MImpHost.exe | MouseImp Pro - "A reliable assistant that turns your mouse into a simple, native but powerful controlling device" |
| X | mousepad | mousepad.exe | Added by the CLICKER TROJAN! |
| U | MouseWare | Logi_MwX.exe | Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs such as "SmartMove". If you disable it and find you don't need it leave it disabled |
| U | Mousinfo | mousinfo.exe | MS mouse information tool - for troubleshooting mouse problems |
| X | MoussaEvil | [path to file] | Added by the MUSANUB-A WORM! |
| X | MoveSearch | Search.exe | PigSearch adware |
| X | MoveSearch | zsearch.exe | PigSearch adware |
| N | Movielink Manager Uninstall | msvcmm32.exe | Auto-update for the now defunct Movielink "web-based video on demand (VOD) and electronic sell-through (EST) service offering movies, TV shows and other videos for rental or purchase". Movielink LLC were acquired by Blockbuster in 2008 |
| X | MovieM | lmovie.exe | Added by the BEAGLE.DS WORM! |
| X | moviemk | moviemk.exe | Added by the DWNLDR-GTB TROJAN! |
| X | MovieNetworks | MovieNetworks.exe | MovieNetworks will connect you by a domestic premium rate telephone number 900-xxx-xxxx - so you get xxx rated pictures and junk and high internet costs. Remove the %ProgramFiles%\MovieNetworks directory |
| X | Movieplace | Movieplace.exe | MediaCharger\MoviePlace malware |
| X | Mozila | mozila.exe | Added by the DELBOT-AJ WORM! |
| X | Mozila Firefox | firebox.exe | Added by the RBOT-AIP WORM! |
| X | Mozilla Firebird v0.8 Internet Browser | netstats.exe | Added by the IRCBOT.MC BACKDOOR! |
| X | Mozilla Firefox | F1REF0X.EXE | Added by the SDBOT-UP BACKDOOR! Note that the filename has the numbers "1" and "0" in place of upper case "i" and "o" respectively |
| X | Mozilla Firefox | firefox.exe | Added by the AUTOTUN.POM WORM! Note - this is not the popular FireFox web browser and is located in %System% |
| N | Mozilla Quick Launch | Netscp6.exe | Netscape 6 and Mozilla browsers |
| N | Mozilla Quick Launch | Mozilla.exe | Netscape 6 and Mozilla browsers |
| N | mozilla_cleanup | xpicleanup.exe | Firefox Mozilla cleans up after installation. It is invoked on a restart after installation, to remove the bits and pieces resulting from the installation |
| X | Mozillacorp | system.exe | Added by the SILLYFDC WORM! |