| Status | Autorun name | Command | Description |
| X | DriverConf | dvrconf.exe | Added by the AGOBOT-IY WORM! |
| X | DriverDB | svcmdx32.exe | Added by the BERPI TROJAN! |
| X | DriverLoad | svchost.exe | Added by the DELF-KR TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "DriverLoad" sub-directory of the Root folder (C:\), (D:\), etc |
| U | DriverMagicLogon | dmschedule.exe | Part of DriverMagic - "the easiest way to locate device drivers" |
| N | DriverMax | devices.exe | DriverMax from Innovative Solutions - "a new tool that allows you to download the latest driver updates for your computer. No more searching for rare drivers on discs or on the web or inserting one installation CD after the other" |
| X | DriverModule | csrnvrt.exe | Added by the IRCBOT.I TROJAN! |
| X | DriverPath | system32.exe | Added by the PRORAT-S TROJAN! |
| X | Drivers for Internet Explorer | accesweb.exe | Added by the STARTPAGE.FW TROJAN! |
| N | DriverScanner | launcher.exe | Launcher for the DriverScanner driver update utility from Uniblue Systems Limited - which "scans your computer to provide a list of drivers that need to be updated". Drivers are not updated on a regular basis so run manually every so often |
| X | Drives swap | AV1i.exe | Anti-Virus Number-1 rogue security software - not recommended, removal instructions here |
| N | DRIVES~1 | DRIVES~1.EXE | Utility included with some Nero digital media suites (CD/DVD burning, authoring, etc) which allows the user to set the reading speed an spin down time of a CD/DVD drive on-the-fly - typically to avoid read errors on discs with surface scratches and to reduce the noise on high-speed drives |
| N | DriveSelect | driveselect.exe | DVD X Copy XPress by 321 Studios. Creates a pop-up at Windows startup that asks for the DVD drive to be selected. Available via Start -> Programs |
| N | DriveSpeed Application | DRIVES~1.EXE | Utility included with some Nero digital media suites (CD/DVD burning, authoring, etc) which allows the user to set the reading speed an spin down time of a CD/DVD drive on-the-fly - typically to avoid read errors on discs with surface scratches and to reduce the noise on high-speed drives |
| X | DriveSystem | maxpaynowti1.exe | Added by the TIBS.AZT TROJAN! |
| U | drkly16j | rundll32.exe drkly16j.dll, ServiceCheck | KidsWatch Time Control parental control software |
| X | DRM Upgrade | drmupgd.exe | Added by the IRCBOT.AWU BACKDOOR! |
| U | dRMON SmartAgent | SmartAgt.exe | Part of the network monitoring program group for 3Com NIC cards. See here for more info |
| X | drmsrv32 | stmhosts.exe | Added by the AGENT.AGWU TROJAN! |
| X | drmu | W95Mm.exe | Homepage hijacker installing a toolbar: http://tdko.com/. Lop.com in disguise |
| X | Drmupgds | Drmupgds.exe | Maxfiles adware |
| X | drocher | d.exe | Adult content dialler |
| N | Dropbox | Dropbox.exe | System Tray access to the Dropbox online storage service which provides 2GB of space for free for you to save, sync and share files |
| X | DropSpam Lifestyle | dslifestyle.exe | Dropspam adware |
| X | DrProtection | DrProtection.exe | DrProtection rogue security software - not recommended |
| U | DRPU Pc Data manager | apcdm.exe | DRPU PC Data Manager surveillance software. Uninstall this software unless you put it there yourself |
| X | drv_st_key | hidn.exe | Added by the BEAGLE.FF WORM! |
| X | drvddll.exe | drvddll.exe | Added by the BEAGLE.AP WORM! |
| X | Drvddll_exe | drvddll.exe | Added by the BEAGLE.X WORM! |
| U | DrvIcon | DrvIcon.exe | "Vista Drive Icon changes the drive icons shown in Windows "My Computer", to a nearly Vista drive icon, showing the drive's free space with a smooth colored horizontal bar" |
| ? | DrvListnr | DrvListnr.exe | Analog Devices SoundMAX soundcard related. What does it do and is it required? |
| U | drvlsnr | drvlsnr.exe | Compaq/ADI SoundMAX integrated digital audio controller related. May solve a problem if your sound cuts out unexpectedly |
| U | DrvMon.exe | DrvMon.exe | Alcor drive monitor software |
| X | drvnetw | drvnetw.exe | Added by the BROGGER-B TROJAN! |
| X | drvr32h | drvr32h.exe | Added by an unidentified VIRUS, WORM or TROJAN! |
| X | drvrmanager | drvrquery32.exe | Added by the BOOHOO WORM! |
| X | DrvStart | HPMedia.exe | Added by the BANCBAN-QE TROJAN! |
| X | drvsys.exe | drvsys.exe | Added by the BEAGLE.W WORM! |
| X | drvsyskit | hidr.exe | Added by the BAGLE.HR WORM! |
| X | drvsyskit | hldrrr.exe | Added by the BAGLE.QU TROJAN! |
| X | drvupd | rundll32 ..drvupd.inf | Hijacker - drvupd.inf file installs a "searchforge.com" hijack |
| X | DrWatson | drwatson_.exe | Added by the LOHAV-S TROJAN! |
| X | DrWatson | drwatson_32.exe | Added by the LOHAV-S TROJAN! |
| X | DrWeb Antivirus | DRWEBAV.EXE | Added by an unidentified WORM or TROJAN! |
| Y | Drwebscheduler | Drwebscd.exe | DrWeb antivirus related - scheduler that allows you to manage an automatic launch of applications, in particular the antivirus scanner or the update subsystem |
| X | ds | ds.exe | Added by the SPYMON TROJAN! |
| U | DS Clock | dsclock.exe | Digital desktop clock including synchronization with atomic servers - see here |
| X | dS35DLL | ffqca.exe | Added by the SDBOT-KV WORM! |
| X | dsa | dsa.exe | Homepage hijacker - redirecting to downseek.com |
| X | DSAcass | [path to file] | Added by the RANKY.M TROJAN! |
| X | DSAcass | CACASP.EXE | Added by the SDBOT.AEL WORM! |
| X | dsadlsa14 | dsakfsak14.exe | Added by the ONLINEG-P TROJAN! |
| X | DSB | DSB.exe | EnergyPlugin adware |
| U | dscactivate | dsca.exe | Dell Support Agent offers additional support and update features for your Dell computer or laptop |
| X | dsd | zz.exe | Added by the RBOT-FOX WORM! |
| N | DSentry | DSentry.exe | Anti-spyware from Dell. Seems that after Dell found out certain applications being installed from DVD's would report back information about what customers were watching, they decided to implement an anti-spyware service. Run manually before installation starts |
| X | dsfghjgj | keepSafe.exe | Added by the KILLAV.KAX TROJAN! Note - this is not the legitimate KeepSafe from Stardock Corporation which shares the same filename and is normally located in a %ProgramFiles%\Stardock subfolder. This one is found in %System% |
| X | dsgb | lcsass.exe | Added by the AGENT.TGZ BACKDOOR! |
| X | Dsi | dp-******.exe | Added by an unidentified adware where ****** are random characters |
| X | Dsi | dp-him.exe | Added by the MULTIDR-AH TROJAN! |
| X | Dskcompat | Dskcompat.exe | Added by the GEMA TROJAN! |
| U | DSKEY | DsKey.exe | Part of PC PhoneHome - "secretly sends an invisible email message to an email address of your choice containing the physical location of your computer every time you get an Internet connection". Security software from Brigadoon Security Group for tracking down lost/stolen computers |
| X | DSKEY | [path to trojan] | Added by the STARTER-G TROJAN! |
| N | DSL Connection Manager | ProDsl.exe | System Tray access to the connection manager for Intel ADSL modems - such as the ProDSL 3200 and ProDSL 2100. Allows you to monitor a number of parameters for you DSL connection and modem |
| N | DSL Monitor | spdstrm.exe | Comes with Efficient Networks DSL Modems. Little red/green/yellow flashing icon in system tray |
| Y | DSLagentexe | DSLagent.exe | Used in conjunction with USB connected ADSL modems from Eicon Networks (now Dialogic). Required for a permanent ADSL connection |
| Y | dslmon | dslmon.exe | Sagem DSL modem related. Apparently needed to detect the modem |
| U | DSLSTATEXE | dslstat.exe | System tray connection status for ADSL modems from Eicon Networks (as used by BT Broadband for example) |
| X | DsmSer | dsm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | msmpatch.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | svosm.exe | Added by the SERFLOG.B WORM! |
| X | DsmSer | sysup.exe | Added by the SERFLOG.B WORM! |
| Y | DSndUp | DSndUp.exe | Utility that only runs once after installing the drivers for Analog Devices SoundMax integrated soundcards. It's exact purpose is unknown at the present time but from the filename it's probably used to configure the default or generic speaker arrangement for the system it's used on |
| X | dso32 | dsoqq.exe | Added by the TATERF-AO WORM! |
| X | DsplObjects | windspl.exe | Added by the BEAGLE.DN WORM! |
| X | DSS | dssagent.exe | Registration reminder for Mattel Interactive (Broderbund) applications and games. Spyware as it sends encrypted emails about the system back to the originators of the program. Also a resource hog. See here for more info |
| X | DSS | [path to trojan] | Added by the DSSDOOR-C TROJAN! |
| X | DSS | winoscnfg.exe | HTTPBruteForcer hacking utility that uses a brute force attack via HTTP to gain access to web pages or HTML forms which require a username or password |
| X | DSService | dmrss.exe | Added by the AGOBOT-XX WORM! |
| ? | DSSSGENS | dssagens.exe | ?? |
| X | dstiosys | plsitctl.exe | Added by the MAILBOT-BX TROJAN! |
| X | DSystemDriver | windrv.exe | Added by the DELF.WG TROJAN! |
| U | DT 11Mbps WLAN PC Card Station | DTCARDMonitor.exe | 11Mbps PC Card based wireless LAN connection monitor - possibly from Deutsche Telekom |
| U | DT 11Mbps WLAN USB Station | DTUSBMonitor.exe | 11Mbps USB based wireless LAN connection monitor - possibly from Deutsche Telekom |
| U | DT HPW | DTHtml.exe | HP My Display from HP. Rebranded version of Display Tune from Portrait Displays, Inc. - which "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface" |
| U | DT Task | DTHtml.exe | Display Tune from Portrait Displays, Inc. - which "is the perfect software utility to initially set-up and adjust your display to achieve its optimum performance. All adjustments are made through a simple graphical user interface." Also licensed and renamed by manufacturers such as Gateway (EzTune), HP (HP My Display), Hyundai ImageQuest (ImageTune), LG (forteManager) and ViewSonic (PerfectSuite™ Plus) |
| N | DTAgent | DTAgent.exe | System Tray access to DAEMON Tools Pro from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso, .bin, etc) to a virtual CD/DVD/Blu-ray drive. The original can be stored in a safe place and the loading times are significantly reduced as the virtual drive is much faster. Required if you use the automount feature to reload images on a reboot |
| N | DTlite | DTlite.exe | Daemon Tools Lite from DT Soft Ltd - used to create an image of a CD/DVD/Blu-ray disc and mount the created image-file (.iso, .bin, etc) to a virtual CD/DVD/Blu-ray drive. The original can be stored in a safe place and the loading times are significantly reduced as the virtual drive is much faster. Required if you use the automount feature to reload images on a reboot. This version is free for personal use and has a limited feature set |
| N | DU Meter | DUMeter.exe | Hagel Technologies internet bandwidth monitor |
| U | DualCoreCenter | StartUpDualCoreCenter.exe | Unified control center for overclocking both the graphics card and the CPU, but for the program to have its full functionality you must have an MSI mainboard with a CoreCell chip |
| ? | Duane Reade Insert Detect | InsDetect.exe | Part of Duane Read Picture Suite & Digital Image Pack. Detects a digital camera is plugged into a USB port or when a memory card with photos is inserted? |
| X | duck | duck.exe | Added by the AGOBOT-AVG WORM! |
| N | Dulux WeatherShield WeatherDesk | weather.exe | Dulux WeatherShield WeatherDesk - latest weather information from across Australia |
| X | Dumeter Services | dumeter.exe | Added by the SDBOT-AEQ WORM! |
| X | Dump | Dump.exe | Added by the ZIMUSE WORM! |
| X | dumprep | spoolc.exe | Detected by Kaspersky as a variant of the AGENT.CXF TROJAN! |
| X | dumprep | dump-k.exe | Added by the BUZUS-U WORM! |
| X | dumprep | dump.exe | Added by the CODOX-A WORM! |
| N | dumprep 0 -k | dumprep 0 -k | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| N | dumprep 0 -u | dumprep 0 -u | Used in connection with memory dumps - you can disable these by - right clicking on My Computer, selecting Properties and then the Advanced tab. Click on the Settings button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - OK your way out |
| X | DUN_SERVICES3 | dun3.exe | Added by the SOKIRON TROJAN! |