| Status | Autorun name | Command | Description |
| U | Desktop iCalendar | Desktop iCalendar.exe | Desktop iCalendar by Desksware - "is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar, share calendars with your family and friends. It also uses high-quality fonts, looks pretty, and has lots of skins" |
| U | Desktop iCalendar Lite | Desktop iCalendar Lite.exe | Desktop iCalendar Lite by Desksware - "is a free desktop calendar for Windows. It allows you to manage your events, to-do list on desktop. It allows subscribing public Google Calendar, such as holidays, election or NBA. It is full customizable. A build in skin editor makes it easy to set the skin by your own taste" |
| U | Desktop iCalendar Lite.exe | Desktop iCalendar Lite.exe | Desktop iCalendar Lite by Desksware - "is a free desktop calendar for Windows. It allows you to manage your events, to-do list on desktop. It allows subscribing public Google Calendar, such as holidays, election or NBA. It is full customizable. A build in skin editor makes it easy to set the skin by your own taste" |
| U | Desktop iCalendar.exe | Desktop iCalendar.exe | Desktop iCalendar by Desksware - "is a handy desktop calendar for Windows. It stays on your desktop and shows the days of the current month. It can sync with your Google Calendar, share calendars with your family and friends. It also uses high-quality fonts, looks pretty, and has lots of skins" |
| N | Desktop Maestro | deskmech.exe | Part of Desktop Maestro from PC Tools - which "combines the features of our award winning products, Registry Mechanic and Privacy Guardian to ensure that you have the range of tools at your fingertips to ensure optimal system performance, stability and user privacy". This entry is created when Desktop Maestro is installed on XP and loads the System Tray icon and runs a registry scan at startup - if either are enabled. Run manually at regular intervals |
| N | Desktop Maestro Vista Tray | RMTray.exe | Part of Desktop Maestro from PC Tools - which "combines the features of our award winning products, Registry Mechanic and Privacy Guardian to ensure that you have the range of tools at your fingertips to ensure optimal system performance, stability and user privacy". This entry is created when Desktop Maestro is installed on Vista and loads the System Tray icon (deskmech.exe) on runs a registry scan at startup - if either are enabled. Run manually at regular intervals |
| N | Desktop Manager | DesktopMgr.exe | Synchronisation manager for the cradles for the Research In Motion range of wireless handhelds, including the "Blackberry" |
| N | Desktop Plant | AZARE10S.PLT | Vritual plant from here - this version is an Azalea, there are others so the filename may be different |
| X | Desktop Search | desktop.exe | iSearch adware |
| X | Desktop Security 2010 | Desktop Security 2010.exe | Desktop Security 2010 rogue security software - not recommended, removal instructions here |
| N | Desktop Service Centre | DSC.exe | OptusNet DSL or Dial-Up connection software |
| N | Desktop Weather | THE WEATHER CHANNEL.exe | Desktop Weather by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather 3 | THE WEATHER CHANNEL.exe | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| N | Desktop Weather 3 | THEWEA~1.EXE | Desktop Weather 3 by The Weather Channel - provides current temperature, conditions, alerts, etc |
| Y | DesktopArmor | DesktopArmor.exe | Desktop Armor from Headlight Software - "watches dozens and dozens of important settings on your computer and warns you if any program has changed them" including those made by malware |
| U | DesktopIconToy | DesktopIconToy.exe | "Desktop Icon Toy is an easy to use desktop icon enhancement tool, which allows you to make many funny but useful patterns out of your windows desktop icons" |
| N | DesktopMaestro | deskmech.exe | Part of Desktop Maestro from PC Tools - which "combines the features of our award winning products, Registry Mechanic and Privacy Guardian to ensure that you have the range of tools at your fingertips to ensure optimal system performance, stability and user privacy". This entry is created when Desktop Maestro is installed on XP and loads the System Tray icon and runs a registry scan at startup - if either are enabled. Run manually at regular intervals |
| N | DesktopMaestro | RMTray.exe | Part of Desktop Maestro from PC Tools - which "combines the features of our award winning products, Registry Mechanic and Privacy Guardian to ensure that you have the range of tools at your fingertips to ensure optimal system performance, stability and user privacy". This entry is created when Desktop Maestro is installed on Vista and loads the System Tray icon (deskmech.exe) on runs a registry scan at startup - if either are enabled. Run manually at regular intervals |
| X | DesktopSecurityGuard | wscntfy.exe | Added by the NOKPUDA WORM! Note - this is not the legitimate Windows Security (wscntfy.exe) file which is located in %System%. This one is located in %Windir% |
| X | DesktopUpdate | rundll32.exe MSA64CHK.dll,DllMostrar | MatrixDialer/Mostrar parasite. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "MSA64CHK.dll" file is located in %System% |
| N | DesktopX | DesktopX.exe | System Tray access to DesktopX from Stardock Corporation - "is a desktop utility designed to enable users to build their own desktops, widgets, and gadgets." Note - if this entry is disabled and DesktopX has been configured to load any desktops, objects or widgets they will still load, along with DesktopX. Also part of the Object Desktop suite |
| Y | DesktopX | IconX.exe | IconX from Stardock Corporation - "a program that enhances your Windows desktop icons so that they can be any size, zoom on mouse over, have shadows underneath them and generally make them more attractive and usable." Required if you want to use the features and themes provided. No longer supported - it was formally part of the Object Desktop suite and also available as a separate download |
| U | DesktopX Welcome | Welcome.exe | DesktopX Welcome widget included with the DesktopX desktop utility from Stardock Corporation. Used to load/create widgets, objects and different desktops. Once started, Welcome.exe loads a file called "DXWidget.exe" and exits |
| U | DesktopX Widget | Arcade.exe | 80's Arcade widget included with the DesktopX desktop utility from Stardock Corporation. Allows you to play classic 1980's arcade games such as Pacman and Space Invaders on the desktop. Once started, Arcade.exe loads a file called "DXWidget.exe" and exits |
| U | DesktopX Widget | Fishy.exe | Fishy widget included with the DesktopX desktop utility from Stardock Corporation. Displays a fish swimming on the desktop. Once started, Fishy.exe loads a file called "DXWidget.exe" and exits |
| U | DesktopX Widget | SI2992~1.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Volume Control.exe" is shown as "SI2992~1.exe" |
| U | DesktopX Widget | SI39E3~1.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Weather.exe" is shown as "SI39E3~1.exe" |
| U | DesktopX Widget | SI90AE~1.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica To-Do List.exe" is shown as "SI90AE~1.exe" |
| U | DesktopX Widget | SI985F~1.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Word of the Day.exe" is shown as "SI985F~1.exe" |
| U | DesktopX Widget | SIF08B~1.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 entry where "Silica Unit Converter.exe" is shown as "SIF08B~1.exe" |
| U | DesktopX Widget | Silica Calendar.exe | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Picture Frame.exe | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. Once started, Silica Picture Frame.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Search.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. Once started, Silica Search.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica To-Do List.exe | Silica To-Do List widget included with the DesktopX desktop utility from Stardock Corporation. Adds a "to do" task list on the desktop. Once started, Silica To-Do List.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Unit Converter.exe | Silica Unit Converter widget included with the DesktopX desktop utility from Stardock Corporation. Provides a unit conversion utility on the desktop. Once started, Silica Unit Converter.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Volume Control.exe | Silica Volume Control widget included with the DesktopX desktop utility from Stardock Corporation. Displays a slider to control the speaker volume on the desktop. Once started, Silica Volume Control.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Weather.exe | Silica Weather widget included with the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, Silica Weather.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Silica Word of the Day.exe | Silica Word of the Day widget included with the DesktopX desktop utility from Stardock Corporation. Displays the "Word of the Day" from Wordsmith.org on the desktop. Once started, Silica Word of the Day.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | SILICA~1.EXE | Silica Calender widget included with the DesktopX desktop utility from Stardock Corporation. Displays a calendar on the desktop. Once started, Silica Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Calendar.exe" is shown as "SILICA~1.EXE" |
| U | DesktopX Widget | Silica Clock.exe | Silica Clock widget included with the DesktopX desktop utility from Stardock Corporation. Displays a clock on the desktop. Once started, Silica Clock.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Silica Clock.exe" is shown as "SILICA~2.EXE" |
| U | DesktopX Widget | SILICA~3.EXE | Silica Picture Frame widget included with the DesktopX desktop utility from Stardock Corporation. Displays either a static user selected picture or slide show in a resizable picture frame on the desktop. This is the Vista/7 MSConfig entry where "Silica Picture Frame.exe" is shown as "SILICA~3.EXE" |
| U | DesktopX Widget | SILICA~4.exe | Silica Search widget included with the DesktopX desktop utility from Stardock Corporation. Provides a search box powered by Google on the desktop. This is the Vista/7 MSConfig entry where "Silica Search.exe" is shown as "SILICA~4.EXE" |
| U | DesktopX Widget | Welcome.exe | DesktopX Welcome widget included with the DesktopX desktop utility from Stardock Corporation. Used to load/create widgets, objects and different desktops. Once started, Welcome.exe loads a file called "DXWidget.exe" and exits |
| U | DesktopX Widget | Aero Gmail.exe | Aero Gmail widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Aero Gmail.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | AEROGM~1.EXE | Aero Gmail widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Aero Gmail.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 entry where "Aero Gmail.exe" is shown as "AEROGM~1.EXE" |
| U | DesktopX Widget | Clear meter bar .exe | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | CLEARM~1.EXE | Clear Meter Bar widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop with a clear background. Once started, Clear meter bar .exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 entry where "Clear meter bar .exe" is shown as "CLEARM~1.EXE" |
| U | DesktopX Widget | Core Calendar.exe | Core Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Core Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Core Weather.exe | Core Weather widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days from The Weather Channel for the selected location on the desktop. Once started, Core Weather.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | CORECA~1.EXE | Core Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Core Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Core Calendar.exe" is shown as "CORECA~1.EXE" |
| U | DesktopX Widget | COREWE~1.EXE | Core Weather widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days from The Weather Channel for the selected location on the desktop. Once started, Core Weather.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Core Weather.exe" is shown as "COREWE~1.EXE" |
| U | DesktopX Widget | DIGITA~1.EXE | DigitalMETER widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop. Once started, DigitalMETER.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "DigitalMETER.exe" is shown as "DIGITA~1.EXE" |
| U | DesktopX Widget | DigitalMETER.exe | DigitalMETER widget for the DesktopX desktop utility from Stardock Corporation. Displays free drive space, free memory, CPU usage and system running time on the desktop. Once started, DigitalMETER.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Glassy Calculator II.exe | Glassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | Glassy Calendar.exe | Glassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | GLASSY~1.EXE | Glassy Calculator II widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calculator II.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Glassy Calculator II.exe" is shown as "GLASSY~1.EXE" |
| U | DesktopX Widget | GLASSY~2.EXE | Glassy Calendar widget for the DesktopX desktop utility from Stardock Corporation. Once started, Glassy Calendar.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Glassy Calendar.exe" is shown as "GLASSY~2.EXE" |
| U | DesktopX Widget | Gmail Checker.exe | Gmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | GMAILC~1.EXE | Gmail Checker widget for the DesktopX desktop utility from Stardock Corporation. Checks for new E-mail on Google via their Atom feed. Once started, Gmail Checker.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "Gmail Checker.exe" is shown as "GMAILC~1.EXE" |
| U | DesktopX Widget | MOONPH~1.EXE | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "MoonPhase.exe" is shown as "MOONPH~1.EXE" |
| U | DesktopX Widget | MoonPhase.exe | Moon Phase widget for the DesktopX desktop utility from Stardock Corporation. Displays the current phase of the Moon in true color using NASA imagery. Once started, MoonPhase.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| U | DesktopX Widget | WEATHE~1.EXE | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits. This is the Vista/7 MSConfig entry where "WeatherAni.exe" is shown as "WEATHE~1.EXE" |
| U | DesktopX Widget | WeatherAni.exe | Weather Forecaster (animated) widget for the DesktopX desktop utility from Stardock Corporation. Displays the current weather and forecast for up to 5 days for the selected location on the desktop. Once started, WeatherAni.exe loads a file called "DXWidget.exe" and exits. This is the Windows Defender entry |
| N | DesktopX.exe | DesktopX.exe | System Tray access to DesktopX from Stardock Corporation - "is a desktop utility designed to enable users to build their own desktops, widgets, and gadgets." Note - if this entry is disabled and DesktopX has been configured to load any desktops, objects or widgets they will still load, along with DesktopX. Also part of the Object Desktop suite |
| N | deskup | deskup.exe | Adds Iomega Zip drive icons to the desktop |
| U | desp2k | desp2k.exe | Part of the Turbo Analyzer tool from LightComm Brazil Telecom that analyzes and corrects ADSL configurations |
| X | destroy11 | destroy11.exe | Added by the DELF-KO TROJAN! |
| X | destroyb11 | destroyb11.exe | Added by the DELF-KO TROJAN! |
| U | Detect | iDetect.exe | iNTERNET Turbo from Clasys Ltd. "It accelerates any Windows 95/98/Me/NT/2000/XP internet connection in seconds". If you find it helps your connectivity leave it enabled |
| ? | detect | turbodetect.exe | ?? |
| N | Detector | detector.exe | USB port detector for LG scanners. Sits in the System Tray, and when it detects the scanner through the USB port, you can run the scanner software from the tray. It is not required at all, since you can use the scan software from almost any photo editing software |
| U | DetectorApp | DetectorApp.exe | Related to Roxio MyDVD (was Sonic) DVD authoring software |
| X | Deus Cleaner | DCleaner.exe | Deus Cleaner rogue system cleaner utility - not recommended |
| X | Dev Gnu Cpp | devcpp.exe | Added by the RBOT-RU WORM! |
| ? | DevconDefaultDB | READREG | Appears to be related to older Creative Soundblaster soundcards |
| X | Development Environment | devenv.exe | Added by the DELBOT-AH WORM! |
| U | DEventAgent | eventagt.exe | DEvent Agent Module client - part of Dell OpenManage and used for server management. Only required if you use this |
| X | devenv | smvss.exe | Added by the DEDLER-G TROJAN! |
| X | Device Configuration Loader | msdvc32.exe | Added by a variant of the AGOBOT/GAOBOT WORM! |
| U | Device Detector | DevDetect.exe | ACDSee Auto Device Detector detects when a device is connected to your PC and gives you the option to acquire images from it automatically |
| N | Device Detector 2 | DevDtct2.exe | Installed by various Olympus products, this program detects the active connection of a speech device (voice recorder, etc) to a USB port then runs specific client software used to access that device. The DevDtct2 process has a "high" priority level which can negatively impact system resources |
| X | Device Hardware | devicehnd.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device IO System | deviceio.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Management | wnsystem.exe | Added by the AGOBOT-LH WORM! |
| X | Device Manager | wfxmgr.exe | Added by the RBOT.AJU WORM! |
| X | Device Security | dvcsecure.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Security Driver | devicesec.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| X | Device Security Manager | dvcsecure.exe | Added by a variant of the IRCBOT BACKDOOR! See here |
| U | DeviceDiscovery | hpotdd01.exe | Detection of new imaging, printing and other peripherals on HP machines such as USB printers, cameras and Bluetooth products |
| X | DevicePath | Proyecto1.exe | Added by the GRUEL WORM! |
| X | DevicePath | Root.exe | Added by the GRUEL WORM! |
| U | Devices | olesvr.exe | Salfeld Child Control - parental control software |
| X | Devicewin | [path to trojan] | Added by the BANKER-AEV TROJAN! |
| U | devldr16 | devldr16.exe | Associated with some Creative Labs sound cards in Win98/Me. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| U | devldr16.exe | devldr16.exe | Associated with some Creative Labs sound cards in Win98/Me. Provides audio support for DOS applications. Not needed if you don't have those. Required if you use "Sound Play Control" and "Sound Recorder". To disable: (1) Disable via MSCONFIG (2) Start → Settings → Control Panel → System → Device Manager then disable "Creative SB16 Emulation" under Creative Miscellaneous Devices |
| ? | Devlog | devlog.exe | Apparently mainboard/chipset related, by a French company called AS Media - what exactly is it, and is it required |
| X | dfgfdgrergd | [path to backdoor] | Added by the RANKY.CK BACKDOOR! |
| X | DfqwSfS | ffsqsd.exe | Added by the SDBOT-SH WORM! |
| ? | DGJM | DGJM.exe | ?? |