| Status | Autorun name | Command | Description |
| X | AvSer | msmpatch.exe | Added by the SERFLOG.B WORM! |
| X | AvSer | svosm.exe | Added by the SERFLOG.B WORM! |
| X | AvSer | sysup.exe | Added by the SERFLOG.B WORM! |
| X | avserve.exe | avserve.exe | Added by the SASSER WORM! |
| X | avserve2.exe | avserve2.exe | Added by the SASSER.B or SASSER.C WORMS! |
| X | avserve3.exe | avserve3.exe | Added by the SASSER.G WORM! |
| U | AVStation premium | AVStation agent.exe | Related to Samsung AV Station - instant playback of music, photos, videos |
| X | AVSTRT | navpsrvc.exe | Added by the FORBOT-EF WORM! |
| X | AVSystemCare | pgs.exe | AVSystemCare rogue security software - not recommended. There are number of variants in this family sharing the same filename and user interface - see here |
| X | avtapi | avtapi.exe | Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark" |
| N | Avtray | Avtray.exe | Command Antivirus tray icon |
| X | AVTray | AVTray.exe | Part of the WinAntiVirus Pro 2005 rogue security software when installed in Win98/Me - not recommended, removal instructions here |
| X | AVupdate32 Update | AVupdate32.exe | Added by the RBOT.CNI TROJAN! |
| ? | AVWLPSTA | AVWLPSTA.exe | PRISM Status Tray Applet - but what is it for and is it required? |
| Y | AVWUpd32 | AVWUPD32.EXE | AntiVir® PersonalEdition Classic - updater |
| Y | avx communicator | xcommsur.exe | Anti-virus part of BitDefender virus scanner/firewall |
| Y | Avxlive | avxlive.exe | Bullguard or BitDefender antivirus |
| Y | avxlni | avxinit.exe | Anti-virus part of BitDefender virus scanner/firewall |
| ? | Avxnews | ?? | ?? |
| U | Awatch | Awatch.exe | Diagnosis tool that monitors DSL connections, installed alongside DSL drivers from AVM Fritz's range of modem products |
| U | AwaySch | AwaySch.EXE | Part of the IBM ThinkVantage Productivity Center. "The Away Manager application allows you preselect and run routine tasks to maintain your system's performance" |
| U | AWC | AWC.exe | Advanced SystemCare 3 optimization utility from IObit - "helps protect, optimize, clean, and repair your computer and Registry". The PRO version adds automation, scheduling, registry deep clean and performance tune-ups. Note - runs via the Task Scheduler on Vista for all versions and on Windows 7 for later versions. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up |
| U | Awcl | Awcl.exe | Advanced WindowsCare V2 optimization utility from IObit - "helps protect, optimize, clean, and repair your computer and Registry". The PRO version adds automation, scheduling, registry deep clean and performance tune-ups. Note - runs via the Task Scheduler on Vista/7. Note - in November 2009 IObit were accused of stealing database information from Malwarebytes' Anti-Malware and others so review the links on the Wikipedia page and make your own mind up |
| N | awhost32 | awhost32.exe | Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended |
| U | AWM | AWM.exe | Advanced Wallpaper Manager from PUSH Software |
| X | awm | AWM.exe | AWM Antivirus rogue security software - not recommended, removal instructions here. Note - this is not the same as Advanced Wallpaper Manager from PUSH Software and is located in %AppData%\AWM |
| U | AWMON | Ad-Watch.exe | Part of older versions of the Plus and Pro versions of Ad-Aware from Lavasoft - realtime monitor watching your memory and registry for malware that tries to install or change your system |
| U | AWMON | Ad-Monitor.exe | F-Secure Anti-Spyware |
| X | Awoa | smmo.exe | PurityScan adware |
| X | Awola | Awola.exe | Awola rogue spyware remover - not recommended |
| X | Awola6 | Awola6.exe | Awola AntiSpyware 6.0 rogue spyware remover - not recommended, removal instructions here |
| U | awplite | awplite.exe | AllWallpapers Lite desktop wallpaper changer |
| ? | AWUSGSTA | AWUSGSTA.exe | Reportedly related to a USB Wifi Adapter - is it required at startup? |
| U | awxDTools | awxDTools.dll, awxRegisterDll | AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: *.cue, *.iso, *.ccd ...) |
| N | AxAutoMntSrv | AxAutoMntSrv.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present from version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| N | axcmd | axcmd.exe | Part of the Alcohol 52% and Alcohol 120% CD/DVD emulation utilities from Alcohol Soft - which allow you to store your most used CDs and DVDs as images on your computer (where loading times are significantly reduced as the virtual drive is much faster) and keep the originals in a safe place. This entry is present prior to version 2.* and automatically re-loads a disk image in the virtual CD/DVD drive on a system reboot |
| ? | AxFilter | Rundll32 AXFILTER.DLL, Rundll32 | ?? |
| U | AXIS Print System DriverScanner | DriverScanner.exe | Part of AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| U | AXIS Print System DriverServer | DriverServer.exe | Part of AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| U | AXIS Print System TrayIcon | TrayIcon.exe | System Tray access to AXIS Print System from AXIS Communications - "adds printer discovery, printer driver installation printing on Windows platforms. Printing is enabled by AXIS Print Monitor, which is one of the components. Another component in AXIS Print System is AXIS IP Installer." Now discontinued |
| X | AXPDefender | AXPDefender.exe | Advanced XP Defender rogue security software - not recommended, removal instructions here |
| X | AXPFixer | AXPFixer.exe | AdvancedXPFixer rogue security software - not recommended, removal instructions here |
| X | AXVenore | AXVenore.exe | Added by an unidentified TROJAN - see here |
| X | ayRmyfbCTPl | ayRmyfbCTPl.exe | Added by the FAKEAV-DTZ TROJAN! |
| X | azixegoira | efipef.exe | Added by the SDBOT.AWU WORM! |
| X | Azixegoira | yikylohi.exe | Added by the SDBOT.ASP WORM! |
| U | AzMixerSel | AzMixerSel.exe | Related to Realtek_Azalia Mixer Selector |
| Y | azmodem | azexe.exe | Aztech Labs modem driver |
| N | B'sCLiP | BSCLIP.exe | CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
| X | b.exe | b.exe | Added by the SDBOT.BND WORM! |
| N | B.Reader | remin.exe | Birthday Reminder 5.0 - as the name implies |
| X | b3d | BDEsecureinstall.exe | B3d Projector foistware - periodically trys to access the internet. (1) Uninstall it via Start -> Settings -> Control Panel -> Add/Remove Programs. (2) Remove the BDEsecureinstall.exe if still present in the "System" directory. (3) Disable and ideally delete it from the registry. (4) Remove the "BDE" directory and all its contents |
| X | b3dUpdate | Zupdate.exe | Associated with B3d Projector foistware - see here |
| U | b4aOTB | b4aOTB.exe | Supports the "one-touch" backup button on external hard drives for versions of Backup4all that support this feature. "Some USB enclosures have a button to start the execution of an associated program. If you have such a device, you can configure Backup4all to execute a backup job or a backup group when this button is pressed (works only with certain USB enclosures)" |
| X | b5700x drive | cnssr.exe | Added by the MAHA-T TROJAN! |
| Y | b9 | B9.exe | FireTrust Benign - allows you to receive e-mail which is safe from viruses, worms, scripts, web bugs, privacy threats and other security risks, without affecting your e-mail. "Benign neutralizes or strips out the code that makes viruses, worms, scripts and other potentially harmful things run" |
| X | b99 | msmm.exe | ClientMan parasite variant |
| X | bab | svchst32.exe | Added by the AGENT.Q TROJAN! |
| X | babeie | rundll32 cnbabe.dll, dllstartup | CommonName Toolbar spyware. To uninstall see here |
| N | Babylon Client | Babylon.exe | Core program for the Babylon translation and dictionary tool |
| N | Babylon Translator | Babylon.exe | Part of an older version of the Babylon translation and dictionary tool |
| N | BabylonToolbar | BabylonToolbarsrv.exe | Toolbar installed with the Babylon translation and dictionary tool |
| X | Back Updates | Uninstall.log.vbs | Added by the YPSAN.D WORM! |
| U | Back2zip | Back2zip.exe | Back2zip is a simple and elegant backup solution which uses the industry's most powerful ZIP and ZIP-64 technologies to constantly monitor your documents and make sure that they are always properly backed up |
| X | Backdoor.NuAgent | agent.exe | Added by the AGENT-DP TROJAN! |
| X | Background Intelligent Transfer Service | [path] rundll32.exe | Added by the VB-ZD TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP) |
| U | BackgroundSwitcher | bgswitch.exe | Originally included with Microsoft's XP PowerToys (but now withdrawn - see here, Background Switcher allows your desktop background to periodically change |
| U | BackgroundSwitcher | BackgroundSwitcher.exe | John's Background Switcher (or JBS for short) periodically changes the background image on your computer (like every hour or every day) to something interesting |
| N | Backpack UDF | bpudfmon.exe | Backpack UDF packet writing software for Microssolutions' Back Pack external CD-RW drive. Similar to DirectCD. Run manually before insert an appropriately formatted CD-RW disk |
| X | backup | [path to worm] | Added by the AGOBOT-H WORM! |
| U | Backup NOW! Scheduler | Schdlr32.exe | Scheduled backups for the NTI Backup Now archiving utility. If a backup job has been scheduled, this entry places an icon in the System Tray and will automatically load the main program and execute the backup at the set time - as long as the backup media is present |
| X | Backup One | smbguard.exe | Added by the SDBOT-MI WORM! |
| X | Backup Service | backup.svc | Unidentified adware |
| X | BackUp Windows 2009 | [random].exe | Added by the AGENT-LUJ TROJAN! |
| U | Backup4all | Backup4all.exe | Backup4all by Softland SRL - "is a backup program for Windows that protects your data from partial or total loss. It automates the backup process saving you time, compresses the data to save storage space (using standard zip format) and encrypts your backup to protect from unauthorized usage" |
| U | Backup4all 3 | Backup4all.exe | Backup4all by Softland SRL - "is a backup program for Windows that protects your data from partial or total loss. It automates the backup process saving you time, compresses the data to save storage space (using standard zip format) and encrypts your backup to protect from unauthorized usage." Version 3.* |
| U | Backup4all 3 OTB Agent | B4aOTB.exe | Supports the "one-touch" backup button on external hard drives for versions of Backup4all that support this feature. "Some USB enclosures have a button to start the execution of an associated program. If you have such a device, you can configure Backup4all to execute a backup job or a backup group when this button is pressed (works only with certain USB enclosures)." Version 3.* |
| U | Backup4all Lite 4 | Backup4all.exe | Backup4all Lite by Softland SRL - is a backup program for Windows that is "designed to protect your valuable data from partial or total loss by automating backup tasks, password protecting and compressing it to save storage space." Version 4.* |
| U | Backup4all OTB Agent | b4aOTB.exe | Supports the "one-touch" backup button on external hard drives for versions of Backup4all that support this feature. "Some USB enclosures have a button to start the execution of an associated program. If you have such a device, you can configure Backup4all to execute a backup job or a backup group when this button is pressed (works only with certain USB enclosures)" |
| U | Backup4all Professional 4 | Backup4all.exe | Backup4all Professional by Softland SRL - is a backup program for Windows that is "designed to protect your valuable data from partial or total loss by automating backup tasks, password protecting and compressing it to save storage space." Version 4.* |
| U | Backup4all Professional 4 OTB Agent | B4aOTB.exe | Supports the "one-touch" backup button on external hard drives for Backup4all Professional. "Some USB enclosures have a button to start the execution of an associated program. If you have such a device, you can configure Backup4all to execute a backup job or a backup group when this button is pressed (works only with certain USB enclosures)." Version 4.* |
| U | Backup4all Standard 4 | Backup4all.exe | Backup4all Standard by Softland SRL - is a backup program for Windows that is "designed to protect your valuable data from partial or total loss by automating backup tasks, password protecting and compressing it to save storage space." Version 4.* |
| U | Backup4all Standard 4 OTB Agent | B4aOTB.exe | Supports the "one-touch" backup button on external hard drives for Backup4all Standard. "Some USB enclosures have a button to start the execution of an associated program. If you have such a device, you can configure Backup4all to execute a backup job or a backup group when this button is pressed (works only with certain USB enclosures)." Version 4.* |
| U | BackupExecScheduler | besch.exe | Veritas "Back Up My PC" software |
| ? | BackupManagerTray | BackupManagerTray.exe | Acer Backup Manager, Packard Bell MyBackup and Gateway MyBackup - OEM backup software by NewTech Infosystems, Inc, makers of NTI Backup Now EZ and NTI Backup Now |
| N | BackupNotify | backupnotify.exe | System Tray "balloon" backup reminder for HP Image Zone Plus |
| N | BackWeb | backweb.exe | Automatically detects an internet connection and downloads any available updates. Typical on Compaq and HP PC's but not restricted to those OEM's. Resource hog and often causes malfunctions. Available via Start -> Programs |
| N | backWeb-8876480 | backweb-8876480.exe | Installed with older versions of the software for Logitech products. Automatically checks for software upgrades and new products, services and special offers from Logitech |
| N | Backwork | Backwork.exe | Backwork trojan detector |
| U | BACPI10 | bacpi10a.exe | Known as "PowerKey" - a minimalist keyboard driver that allows power management keys on BTC keyboards to function properly in older OS's (i.e. Win9x/NT4). Also adds an icon to the system tray |
| N | BacsTray | BacsTray.exe | Broadcom Advanced Control Suite - for modems and set top boxes based upon Broadcom chipsets. Not required unless you have networking problems |
| X | BADDATE | BADDATE.EXE | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | Badx | HELLRAIDER.EXE | Added by the MINDCTRL.A BACKDOOR! |
| X | BagleAV | csrss.exe | Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir% |
| X | baidu | smss.exe | Added by the AGENT-FV MALWARE! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\dmcz |
| U | Baigoo.exe | Baigoo.exe | Baigoo surveillance software. Uninstall this software unless you put it there yourself |
| X | Bakra | IEHost.EXE | Added by the MULTIDR-AH TROJAN! |
| X | bal | SYSMONMS.EXE | Added by the FAKEALERT TROJAN! |
| X | Band-Aid | [path to file] | Added by the RANKY.O TROJAN! |
| U | bandmon | bandmon.exe | Rokario Bandwidth Monitor |