| Status | Autorun name | Command | Description |
| N | Bridge | Bridge.exe | Adobe Bridge - part of Adobe CS4 and CS5 products which "lets you organize, browse, and locate the assets you use to create content for print, the web, DVD, video, and mobile devices. Adobe Bridge keeps native Adobe files (such as PSD and PDF) as well as non-Adobe files available for easy access" |
| Y | Brindys BriTray | BRITRAY.EXE | Main process for the following applications: GEDEX, SICARIO, BRINOTES, BRIRESPA, SICURE, TRASGO, UNDOCS, FRESH & BRIFAME (all of them from Brindys Software). Performs the following tasks [un]installation, web software autoupdate, notification windows, interprocess communication, tray bar icons & menus, alarms (brinotes), and common web launching from the mentioned applications. Can be stopped safely once run if so desired |
| U | BrmfRmPA | BrmfRmPA.exe | Brother resource manager - needed for a Brother MFC printer/copiert/scanner and PC to properly communicate |
| X | BrO_AcT | BrO-AcT.exe | Added by the SILLYFDC-D WORM! |
| U | broadband medic | matcli.exe | NTL's Broadband Medic. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". Broadband Medic is required to run with the Help and Support program. If you uncheck Broadband Medic and then run Help and Support it will add another in the startup menu. If you remove Broadband Medic via add/remove program some menus in Help and Support will not be available. You decide |
| N | Broadband Wizard | bbwiz.exe | Starts Broadband Wizard so it runs in the System Tray. This application tests and optimizes your Cable or DSL connection. Available via Start -> Programs |
| Y | Broadbandadvisor | Broadbandadvisor.exe | Virgin Media Broadband Advisor tool installed when you choose to install their older PCGuard or PCGuard Total internet security suite - sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled |
| Y | Broadbandadvisor.exe | Broadbandadvisor.exe | Virgin Media Broadband Advisor tool installed when you choose to install their older PCGuard or PCGuard Total internet security suite - sourced by Radialpoint. Apart from downloading the suite installation files, the exact purpose is unknown at this time but it may be used to source critical updates and alerts so should therefore be left enabled |
| N | BroadCamRun | broadCam.exe | BroadCam is an easy to use video streamer designed to broadcast live video using a webcam (or other camera) and microphone |
| U | Broadcom Wireless Manager UI | bcmntray.exe | Related to Broadcom Network Adapters for additional configuration options for these devices. Should not be terminated unless suspected to be causing problems |
| N | Broadcom Wireless Manager UI | wltray.exe | System tray access to wireless LAN card configuration options |
| X | Bron-Spizaetus | CVT.exe | Added by the RONTOKBRO WORM! |
| X | Bron-Spizaetus | norBtok.exe | Added by the RONTOKBRO.B WORM! |
| X | Bron-Spizaetus | [path to file] | Added by the BRONTOK-F WORM! |
| X | Bron-Spizaetus | bronstab.exe | Added by the RONTOKBRO.C WORM! |
| X | Bron-Spizaetus | eksplorasi.exe | Added by the RONTOKBRO.J WORM! |
| X | Bron-Spizaetus | ElnorB.exe | Added by the RONTOKBRO.D WORM! |
| X | Bron-Spizaetus | sempalong.exe | Added by the BRONTOK-E WORM! |
| X | Bron-Spizaetus | RakyatKelaparan.exe | Added by the BRONTOK-J or BRONTOK-L WORMS! |
| X | Bron-Spizaetus-5118REPM | komodo-6321422.exe | Added by the BRONTOK-R WORM! |
| X | Bron-Spizaetus-cfgmktoq | bbm-qotkmgfc.exe | Added by the BRONTOK-M WORM! |
| X | Bron-Spizaetus-cfgmmnru | bbm-urnmmgfc.exe | Added by the BRONTOK-N WORM! |
| X | BRoNToK | BRoNToK.exe | Added by the BRONTOK-CG WORM! |
| U | BrownsScreenServer | BrownsScreenServer.exe | Screensaver for the Cleveland Browns NFL football team - part of Sports Illustrated's MySI desktop download (by MercurySports Network) for streaming information on NFL football teams. No longer supported |
| X | BrowseProxy | FindService.exe | Actual Names (AdvSearch) Internet Keywords parasite |
| X | browser | msgaol.exe | Added by the TACTSLAY.C TROJAN! |
| X | browser | s_menu.exe | Added by the TACTSLAY.C TROJAN! |
| X | browser | browse.exe | Added by the TACTSLAY.C TROJAN! |
| X | browser | deamon.exe | Added by the TACTSLAY.C TROJAN! |
| X | browser aid | browseraid.exe | BrowserAid/BrowserPal foistware |
| X | Browser Help Svc | BHSV.EXE | Added by the RBOT-AVQ WORM! |
| Y | Browser Hijack Blaster | bhblaster.exe | Browser Hijack Blaster - protects your system from browser hijackers and spyware that alters your IE settings. Now replaced by SpywareGuard |
| U | Browser Launcher | Commandr.exe | Logitech internet keyboard "Commander" software - loads the software for the shortcut keys on the keyboard. Not required unless you want to use the short cut keys |
| X | Browser Pal | adblck.exe | BrowserAid/BrowserPal foistware |
| U | Browser Sentinel | BrowserSentinel.exe | Browser Sentinel - notifies you if a program wants to penetrate into Internet explorer, add itself to the Windows auto-run list or change your home page |
| N | BrowserChoice | browserchoice.exe | In the European Union, Microsoft had to provide the "Browser Choice update to comply with a legal settlement with the European Commission. Microsoft is required to inform customers who currently use Internet Explorer as their default browser that there are other web browser choices available. You can use the Browser Choice update to select and install the web browser you want to use on your computer" - see here for more information |
| X | BrowserUpdateSched | [random filename] | ZenoSearch adware variant |
| N | BrowserWebCheck | loadwc.exe | Checks to make sure that IE is still your default browser |
| U | brs | brs.exe | Part of CyberLink's PowerDVD Blu-ray and DVD player. Allows the user to change the region coding of their player (as long as it isn't hardware coded) up to a maximum of 5 times |
| X | brwdiag | [path to worm] | Added by the STRATIO-BN WORM! |
| X | BS Mediaplayer | bsplyr.exe | Added by the RBOT-OU WORM! |
| N | BS Player | bsplayer.exe | BSplayer - A video player used to play avi, mpg, wmv and other multimedia files |
| N | BsCLiP | BSCLIP.exe | CD recording utility that comes with a lot of CDR/CDRW drives and isn't required |
| ? | BsMnt | BsMnt.exe | Related to a Bison webcam - which is used on notebooks from a number of manufacturers including Acer, Asus, Lenovo & Samsung. What does it do and is it required? |
| U | bsnlLiteTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for Bharat Sanchar Nigam Ltd users |
| X | Bsoft lppt01 | Bsoft.exe | RapidBlaster variant (in a "BelmontSoft" folder in Program Files). A dedicated "RapidBlaster Killer" removal tool used to be available but quality anti-malware tools will now remove it |
| N | bsplayer | bsplayer.exe | BSplayer - a video player used to play avi, mpg, wmv and other multimedia files |
| X | Bsqx | netsfigx.exe | Added by the AUTORUN-BDL WORM! |
| X | Bsqxitat | Bsqxita.exe | Added by the AUTORUN-BDL WORM! |
| X | BsRte | MemoteXZZ.exe | Added by the AUTORUN-AJU WORM! |
| X | BSserver | FileKan.exe | Added by the VB.CBW WORM! |
| X | BSVCHOST | SVCH0ST.EXE | Added by the VOXOM TROJAN! Notice the digit "0" in the filename rather than the upper case "o" |
| X | Bsx3 | RunDLL32.EXE bs3.dll,DllRun | BookedSpace parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "bs3.dll" file is located in %Windir% |
| X | BT | [path to trojan] | Added by the LITEBOT-B TROJAN! |
| U | BT Broadband Basic Help | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide |
| U | BT Broadband Desktop Help | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide |
| U | BT Broadband Help | matcli.exe | "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide |
| X | BT00003* | abcdefg23.exe | Added by the VB-VT TROJAN where * = 5,6 or 7! |
| X | BT00003* | hiklmnop27.exe | Added by the VB-VT TROJAN where * = 2,3 or 4! |
| N | btbb_McciTrayApp | BTHelpNotifier.exe | System tray icon for help from BT Broadband, used to communicate internet problems via the network rather than telephone. Available via desktop shortcut or Start → All Programs - not required |
| U | btbb_wcm_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for BT users |
| U | BtcMaestro | KMaestro.exe | Multimedia keyboard manager. Required if you use the multimedia keys |
| N | btdna | btdna.exe | "BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files". Now a stand-alone product where the user creates the download, DNA used to be included with and used by earlier versions of the main BitTorrent client. As files are downloaded via a file-sharing network make sure you have good, up-to-date virus protection and check any downloads. Start manually via Control Panel → DNA |
| N | btdna.exe | btdna.exe | "BitTorrent DNA is a FREE content delivery service based on the BitTorrent protocol which brings the power of user-contributed bandwidth to traditional content publishers while leaving publishers in full control of their files". Now a stand-alone product where the user creates the download, DNA used to be included with and used by earlier versions of the main BitTorrent client. As files are downloaded via a file-sharing network make sure you have good, up-to-date virus protection and check any downloads. Start manually via Control Panel → DNA |
| U | BTHelena_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for BTHelena users |
| U | BTHelena_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for FAHESS/Suadi Telecom users |
| U | BTHelena_McciTrayApp | McciTrayApp.exe | System tray access to Motive's broadband configuration and repair utility - for Saudi Telecom users |
| ? | btinst | btinst.exe | Associated with an Anycom bluetooth wireless card. What does it do and is it required? |
| U | BTModemProtection | BTModemProtection.exe | BT Privacy Online modem protection software, see here |
| X | btmsre.exe | btmsre.exe | Added by the SDBOT.AM WORM! |
| U | BTopenworld | DialBTYahoo.exe | BT Yahoo! internet connection manager |
| ? | BTSETBOOTKEY | BTSetBootKey.exe | Related to a USB Bluetooth adaptor. What does it do and is it required? |
| X | BTStacFrr | BTStacFrr.exe | Added by the BANCOS.AAI TROJAN! |
| X | BTStacLrj | BTStacLrj.exe | Added by the BANCOS.AAI TROJAN! |
| X | BTStacPgn | BTStacPgn.exe | Added by the BANCOS.AAI TROJAN! |
| U | BtStart | btstart.exe | Broadcom (formerly WIDCOMM) Bluetooth Connectivity Software |
| U | BTTray | BTTray.exe | System tray icon which shows the status of a Bluetooth wireless module (either integrated or via an adapter). Most systems with such a module installed can enable/disable the module and the icon changes from blue/white to blue/red when the module is turned off. Also allows access to explore bluetooth places, setup wizard, advanced configuration, quick connect and shutdown device. This entry is required in order to successfully "pair" your system with a Bluetooth device (such as a mobile phone, PDA, headset) using this wireless protocol (via a PIN) |
| Y | BTUSRBDG | BtUsrBdg.exe | Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
| Y | BTUSRBDGF | BtUsrBdg.exe | Used with a Mitsumi USB Bluetooth adaptor (and maybe others) |
| X | BTV | btv.exe | BroadcastPC adware |
| X | BtvC | btvclean.exe | BroadcastPC adware |
| X | btwdins.exe | btwdins.exe | Added by the AUTORUN-ML WORM! Note - this is not the valid Widcomm/Broadcom Bluetooth file with the same name which is typically located in %ProgramFiles%\WIDCOMM\Bluetooth Software. This one is located in %System%\drivers |
| Y | Bubble | Bubble.exe | Part of Windows SteadyState, which is designed to make life easier for people who set up and maintain shared computers - enabling the system administrator to prevent users from making changes to the system configuration, windows desktop, restricting program access, etc. It's intended for shared user environments such as internet cafés, libraries and schools but can be used in any environment. Bubble allows notification messages to appear on a computer managed by Windows SteadyState |
| N | Buddyizer | Buddyizer.exe | Part of the AIMster Peer to Peer (P2P) file sharing application that runs over the AOL Instant Messenger network |
| N | BudgetSip | BudgetSip.exe | BudgetSip - internet telephony utility using the VoIP (Voice over Internet Protocol). Call online friends for free and regular phones either for free (limited use) or low rates. One of a number provided by Betamax - the others generally have different rate plans. Similar to the more popular Skype |
| U | BUFFALO Power Save Utility for HD | HDManage.exe | Power Save utility for Buffalo backup hard discs |
| Y | BufferZone | CLIENTGUI.EXE | BufferZone from Trustware - "is the only security software that creates a separate environment allowing you unlimited freedom to enjoy all Internet activities without the fear of external threats" |
| N | Bug Eliminator | Bug_Elim.exe | Bug Eliminator - "performs a complete health check on your computer safely, securely, and silently!" |
| X | BugsDestroyer | SysRep.exe | BugsDestroyer rogue system error and cleaning utility - not recommended, removal instructions here. A member of the ErrClean family |
| U | bugwatcher service | bugwatcher.exe | Bugtoaster is a service that sends reports on system/program crashes (certain types) back to Bugtoaster. They relay information to program authors and provide, if available, any known solutions to the crashes. It doesn't take up any room in memory, just activates in the event of certain program failures |
| N | BuildBU | bldbubg.exe | Part of Dell Alerts which provides customers with an update on latest updates for his/her system |
| X | BuildLab | services.exe | Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup! |
| X | BuildLab | winlogon.exe | Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! |
| X | BuildLabs | csrss.exe | Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup! |
| X | BuildLabs | lsass.exe | Added by the WEBUS.B TROJAN! Note - this is not the legitimate lsass.exe process which should not normally figure in Msconfig/Startup! |
| X | bulk | bulk.exe | Added by the AGOBOT-ACR WORM! |
| Y | Bulldog Service | upsd.exe | Provides System Tray access to the management options and displays notifications for earlier versions of Belkin Bulldog UPS management software. Runs as a service on later versions |
| N | BulletProof FTP Server | bpftpserver.exe | BulletProof FTP Server |
| Y | BullGuard | mgui.exe | Part of Bullguard antivirus |
| Y | BullGuard | BullGuard.exe | Part of BullGuard antivirus |