| Status | Autorun name | Command | Description |
| Y | Mamutu | mamutu.exe | Background Guard feature of Mamutu from Emsi Software GmbH - which provides behaviour rather than signature based protection that "recognizes new and unknown Trojans, Worms and Viruses (Zero-Day attacks), without daily updates". The Background Guard "recognizes and blocks all potentially dangerous programs before they can cause any damage" |
| Y | Mamutu Guard | mamutu.exe | Background Guard feature of Mamutu from Emsi Software GmbH - which provides behaviour rather than signature based protection that "recognizes new and unknown Trojans, Worms and Viruses (Zero-Day attacks), without daily updates". The Background Guard "recognizes and blocks all potentially dangerous programs before they can cause any damage" |
| U | ManageDesk Lite | ManageDesk Lite.exe | ManageDesk Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use |
| X | ManageProtocolCtrl | csmsv.exe | Added by the LOOKSKY.B TROJAN! |
| X | manager | manager.exe | Detected by Kaspersky as the SMALL.CVT TROJAN! |
| X | Manager | 7r2pt6c5.exe | Added by the VIRUT.CE VIRUS! |
| X | Manager | Managee.exe | Added by the VB-FGC TROJAN! |
| U | Manager Monitor | monitor.exe | MindStorm AnalyzerPro from Secure Associates. "A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices" |
| X | Managment Service | [random].exe | Added by the RBOT-GQM WORM! |
| N | Mania Win Restore | RESWIN.EXE | Pinball Mania for Windows from 21st Century Entertainment LTD (1995). Runs briefly at start-up then terminates. Available via Start -> Programs |
| N | ManifestEngine | ManifestEngine.exe | Automatic updater for versions of Logitech QuickCam webcam software. Check for updates via the System Tray icon - see the LogitechVideoTray entry |
| X | manrotce | manrotce.exe | Added by unidentified malware |
| X | Mantis | [filename] | Added by the MANTIBE VIRUS! |
| X | MapEDC | MapEDC.exe | Added by the WaveRevenue-McBoo TROJAN! |
| X | MapiDrv | mpisvc.exe | Added by the MIPSIV TROJAN! |
| X | mapisvc32 | mapisvc32.exe | Added by the KX VIRUS and also recognised by Symantec as FPAI adware |
| X | Mapiyasha | Mapiyasha.exe | Added by the SILLYFDC-DM WORM! |
| U | Maple_S2P | Scan2pc.exe | Scan to PC application for the scanning function of the Samsung CLX-216x Series multifunction printers |
| X | mark the service | xxtra32.exe | Added by the SDBOT.APP WORM! |
| X | Martini | pinmart.exe | Added by a variant of the SDBOT WORM! |
| X | Mascro soft SDK updates2 | SDKrepair2.exe | Added by the SDBOT.BXM WORM! |
| X | maskrider | maskrider2001.vbs | Added by the SOLOW-G WORM! |
| U | masqform.exe | masqform.exe | PureEdge Viewer - provides automation framework to manage and deploy XML forms-based processes for e-business and e-government systems. PureEdge was taken over by IBM and the product eventually became IBM Forms |
| N | Mass storage check registry | rundll32.exe MSDServ.dll, check registry | Used with a USB based smartmedia card reader |
| X | Master | svcghost.exe | Added by the IRCBOT.RB BACKDOOR! |
| X | Master Card Updaate 32 | Mastercard32.exe | Added by a variant of the RBOT WORM! |
| U | Master Volume Spy | MASTERVOLUMESPY.EXE | Volume control for the Gateway Destination "DestiVu" media interface |
| X | MasterBoot Switch | popupkill.exe | Added by a variant of the RBOT WORM! |
| U | Matador | mlfbuddy.exe | MailFrontier - anti-spam application |
| U | Matador | mantispm.exe | MailFrontier Desktop (Matador) email spam blocker software |
| U | Matrix Screen Locker | matrix.exe | Matrix Screen Locker is a system tray application that allows for quick and secure PC lock when you wish. The screen does a "matrix style" scrolling characters effect when the lock is running |
| X | MatrixScreen | [filename] | Added by the MATRIXSCREEN TROJAN! |
| X | MatrixScreenSaver | mss.exe | Unidentified malware |
| N | Matrox Color Control | hgcctl95.exe | For Matrox video cards. Quick access to changing colors |
| N | Matrox Control Center | mgactrl.exe | For Matrox video cards. Quick access to settings |
| N | Matrox Diagnostic | mgadiag.exe | For Matrox video cards. Quick access to diagnostics |
| N | Matrox Powerdesk | PDesk.exe | "Matrox PowerDesk software provides extra multi-display desktop management controls" |
| N | Matrox PowerDesk 8 | matrox.powerdesk.exe | "Matrox PowerDesk software provides extra multi-display desktop management controls" |
| N | Matrox PowerDesk SE | Matrox.PowerDesk SE.exe | Matrox PowerDesk SE - multi-display desktop management controls |
| N | Matrox QuickDesk | mgaqdesk.exe | For Matrox video cards. Quick access to tweak your card to your liking |
| X | MAV_check | mav_startupmon.exe | Part of the WinAntiVirus Pro 2007 rogue security software - not recommended, removal instructions here |
| X | mav_startupmon | mav_startupmon.exe | Part of the WinAntiVirus Pro 2007 rogue security software - not recommended, removal instructions here |
| X | MaxAlerts | max.exe | Bonzi MaxALERT - spyware |
| X | MaxAntiSpy | MaxAntiSpy.exe | MaxAntispy Russian rogue spyware remover - not recommended |
| U | MaxBackSchedule | maxbackservice.exe | Backup scheduler for the Maxtor (now Seagate) range of external hard drives - part of Maxtor Quick Start |
| U | MaxBlastMonitor | MaxBlastMonitor.exe | Maxblast hard drive utility for Maxtor (Seagate) drives |
| U | MaxMenuMgr | StxMenuMgr.exe | Status manager for the Seagate FreeAgent range of external hard drives. It monitors your PC to see if you have connected any supported drives to launch the backup utility |
| X | Maxsized | gqasqs.exe | Added by the LIOTEN.IR WORM! |
| Y | MaxtorCombo | ComboButton.exe | Required to be able to use the Maxtor OneTouch button on your external Maxtor harddrive. It is used to start up backup software (Retrospect) |
| U | MaxtorOneTouch | OneTouch.exe | Maxtor OneTouch Hard Drives/OneTouch Family hard disk backup software |
| U | MaxtorReg | AUTOREG.EXE | Part of SYSagent - small utility for retrieving all the hardware and software information required by anyone administering a machine and/or the network it's a part of |
| Y | MayaPan | MayaPan.Exe | Audiotrak Maya soundcard driver |
| X | mb2np | [random filename] | Added by the IRCBOT.TJ WORM! |
| Y | mbamgui | mbamgui.exe | System tray access to and realtime protection agent for the registered version of MalwareBytes' Anti-Malware - which is "considered to be the next step in the detection and removal of malware. In our product we have compiled a number of new technologies that are designed to quickly detect, destroy, and prevent malware." This entry also appears under the HKLM\RunOnce registry key during installation |
| X | MbarInstall | [random filename] | Mirar adware |
| N | MBFreeSubliminalMessageSoftware | MBFreeSubliminalMessageSoftware.exe | "MB Subliminal Message Software is a wonderful personality development program that reaches out to your subconscious mind and creates a positive impact. This program aims at helping you increase your confidence and program your mind to set goals and be able to achieve them" |
| U | MBkLogOnHook | LogOnHook.exe | Part of McAfee Data Backup (now Online Backup) - which "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup |
| U | MBM 4 | MBM4.exe | Motherboard Monitor 4 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| U | MBM 5 | MBM5.exe | Motherboard Monitor 5 - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| U | MBMon | Rundll32 CTMBHA.DLL,MBMon | Creative Filter AudioControlMB Module - installed with the Creative Audigy line of sound cards and processors. Can be disabled without causing a problem |
| U | MBNet | mbnet.exe | MBNet (Portugal) Credit Card Processing software |
| U | MBProbe | mbrpobe.exe | MBProbe - only needed if you overclock your system and want to keep a check on system temperatures/voltages/etc. Available via Start -> Programs |
| X | mbsmon32 | mbsmon32.exe | Micro Bill Systems Billing Software - "is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet" |
| X | mbssm32 | mbssm32.exe | Micro Bill Systems Billing Software - "is a potentially unwanted application that uses aggressive billing and collection service techniques to demand payment for Web site access after a three-day trial period has elapsed. It has been reported that these techniques may even result in a user no longer being able to browse the Internet" |
| X | mbssm32 | monstu.exe | Detected by AVG as the AGENT.CNM TROJAN - see here |
| X | MC | wintrims.exe | Added by the WINTRIM TROJAN! |
| X | MC | MAGICON.EXE | Added by the MAGICON.A TROJAN! |
| X | MC | N/A | Added by the SIMCSS TROJAN! |
| X | MC | WINTRIM.EXE | Added by the WINTRIM.A TROJAN! |
| X | McAfee | McAffeAv.exe | Added by the NETSKY.AL WORM! |
| X | mcafee | Win32.dll.vbs | Added by the CATCHER-B WORM! |
| X | Mcafee Anti Scan | NortonScn.exe | Added by a variant of the RBOT WORM! |
| X | McAfee Antivirus | McAfeeAV.exe | Added by a variant of the RBOT WORM! |
| X | McAfee Antivirus 32 | MCAFEEAV32.EXE | Added by the SPYBOT-EH WORM! |
| X | Mcafee Antivirus Monitoring System326 | VSStatmn326.exe | Added by a variant of the SDBOT WORM! |
| X | Mcafee Antivirus Monitoring System32mn | VSStatmn32.exe | Added by a variant of the RBOT WORM! |
| X | McAfee Antivirus Protection | mcafeeAV.exe | Added by a variant of the RBOT WORM! |
| Y | McAfee Application Installer | mcappins.exe | Used by older versions of McAfee internet security related products to clean up installation files that are no longer required once the product is installed. This entry will normally only appear once the product has been installed before the system is rebooted |
| X | Mcafee Auto Protect | mcafeshield.exe | Added by the RBOT-UH WORM! |
| U | McAfee Backup | McAfeeDataBackup.exe | McAfee Online Backup (formerly Data Backup) - "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection |
| U | McAfee Backup and Restore | McAfeeDataBackup.exe | McAfee Online Backup (formerly Data Backup) - "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection |
| U | McAfee Data Backup | LogOnHook.exe | Part of McAfee Data Backup (now Online Backup) - which "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection. The exact purpose of this entry is unknown at present but it unloads after startup |
| U | McAfee Data Backup | McAfeeDataBackup.exe | McAfee Data Backup (now Online Backup) - "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection |
| Y | McAfee Desktop Firewall Tray | FireTray.exe | McAfee Desktop Firewall |
| Y | McAfee Family Protection | mfp.exe | McAfee Family Protection - which 'is easy-to-use and built to empower parents to say "yes" to their children's online interests while protecting them as they learn and explore' and "protects children of all ages from exposure to inappropriate content, social networking risks, strangers, and other threats" |
| Y | McAfee Firewall | CPD.EXE | Firewall bundled with McAfee VirusScan 6.*. Can also be listed as CPD_EXE |
| U | McAfee Guardian | CMGrdian.exe | McAfee Guardian shortcut menu on the System Tray (looks like a castle) given access to Internet Security, Browser Buddy, File Guardian and help. Included with older versions of McAfee Internet Security and possibly others |
| Y | McAfee Managed Desktop Agent | MYAGTSVC.EXE | Part of the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Starts via a registry "RunServices" key on Windows 98/Me and as a service on Windows NT/2K/XP |
| U | McAfee Managed Services Tray | StartMyagtTry.exe | System tray notification for the now obsolete McAfee Managed VirusScan anti-virus and anti-spyware security tool for small businesses. Not required to be protected but you lose notifications |
| U | McAfee Online Backup | MOBKstat.exe.htm | System Tray access to McAfee Online Backup (formerly Data Backup) - "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection |
| U | McAfee Online Backup Status | MOBKstat.exe.htm | System Tray access to McAfee Online Backup (formerly Data Backup) - "takes the hassle out of manually backing up all of your valuable digital files - from Microsoft Outlook email and contacts to treasured family photos". Available as a stand-alone product or included in Internet Security and Total Protection |
| X | McAfee Online virus Scanner | avp.exe | Added by the RBOT-GCV WORM! Not to be confused with Kaspersky internet security products and AOL's Active Virus Shield (by Kaspersky) - which are found in either a Kaspersky or AOL sub-directory. This one is located in %System% |
| X | McAfee Online Virus Scanner | nzm.exe | Added by the IRCBOT.XV WORM! |
| U | McAfee QuickClean Imonitor | Plguni.exe | Part of McAfee's QuickClean - which removes internet clutter and unwanted programs. This entry monitor changes made to the registry so that they can be undone later using QuickClean - such as removing programs. QuickClean is now integrated into their Total Protection, Internet Security and AntiVirus Plus products primarily as a file cleaner/shredder and no longer supports program removal |
| Y | McAfee SecurityCenter | mcagent.exe | McAfee SecurityCenter is the main support center for McAfee's range of internet security products such as Total Protection, Internet Security and VirusScan. As well as providing System Tray access (via the "M" icon) for product configuration it also communicates with McAfee's servers to manage updates and virus alerts |
| Y | McAfee SecurityCenter | McUpdate.exe | Automatic virus definition and software updates/upgrades for older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online |
| X | mcafee Software Intrenet | mcafee.exe | Added by the RBOT-ATR WORM! Note - this is not a valid McAfee program |
| U | McAfee SpamKiller | MskAgent.exe | McAfee SpamKiller - rule-based and list-based spam filter. Available as a stand-alone product or included in older versions of Internet Security and Total Protection |
| X | McaFee virus detect program. | McaUpdate.exe | Added by the AUTORUN-T WORM! Note - this is not a legitimate McAfee program |
| Y | McAfee VirusScan | mcmnhdlr.exe | Part of older versions of McAfee VirusScan and the now obsolete McAfee VirusScan Online. When Windows boots it checks whether a virus scan is necessary before you do anything with your PC. Typically, this would be the case if a scan was scheduled at boot-up or if a virus was found during a previous scan and VirusScan determined a scan should be run at this time |