Added by a variant of the SDBOT WORM! This file is located in the Winnt or Windows folder. Note - has a blank entry under the Startup Item/Name field

Added by an unidentified TROJAN - see here

Added by the ALLOCUP.A WORM!

Added by the DDOS_BOXED.X TROJAN!

Added by the DELF.AYF WORM!

Master Control Program for Stardock apps, in development. People should leave it running if they're using any of the Stardock applications

2020Search Toolbar

Added by the SLSORVE-E TROJAN!

2Search adware

Adult content dialler

Related to wireless card (802.11) adapter/standard. System Tray icon that provides a shortcut to "Wireless Connection Status" and allows to turn WL on and off. Supplier unknown. Adapter is miss-spelled

SeekSeek search hijacker related - see here

Loads the executable for Lop.com. mp3serch.exe is the final version

Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys

McAfee VirusScan On-line. See also the McAgentExe entry

Added by the SDBOT.NQ WORM!

Added by the RBOT.DAO TROJAN!

Added by the RBOT-ASK or RBOT-AUS WORMS!

Added by the SDBOT-AKH WORM!

Added by the RBOT-GAT WORM!

System tray access to ADSL modem diagnostic tools. Available via Start -> Programs

Innovative Solutions Advanced Uninstaller PRO - "easy-to-use suite for uninstalling applications and keeping your computer fast, clean, and in its best shape"

Alps Electric USB Server - required according to this article

ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc

Detected by Kaspersky as the VB.PI TROJAN! See here

Added by the NETSKY.H WORM!

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide

PowerChute(r) Personal Edition - "safe system shutdown software with sophisticated power management functions"

Added by the DROPPER.Z TROJAN!

Aztech Labs modem driver

AsdPlug premium rate adult content dialer variant

Added by the RBOT.EVU TROJAN!

Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines, preventing access to the virus cleaning websites

ATI Technologies Control Centre - installed alongside ATI graphics hardware and provides additional configuration options for these devices in the Managed Access to Catalyst Environment (MACE) component

Added by the DELF.EP downloader TROJAN!

Added by the SLAPER.K TROJAN!

Added by the SERFLOG.A WORM!

Added by the SERFLOG.B WORM!

ClientMan parasite variant

Added by the AGOBOT.AKH WORM!

Belkin USB Network Adapter Management utility - can be started manually

Related to Sony VAIO - passwords, encryption, and a biometric fingerprint sensor

Bitdefender anti-virus for MSN Messenger - no longer supported at the BitDefender website

Added by the RBOT.PZ WORM!

Added by a variant of the RBOT WORM!

Added by a variant of the RBOT WORM!

Added by the SDBOT.AML WORM!

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file. Blueyonder Instant Support is required to run with the Help and Support program. If you uncheck it and and then run Help and Support it will add another Blueyonder Instant Support in the startup menu. If you remove Blueyonder Instant Support in add/remove programs some help menus in help and support will not be available. You decide

"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". ntlroadband Help is required to run with the Help and Support program. If you uncheck ntlroadband Help and and then run Help and Support it will add another ntlroadband Help in the startup menu. If you remove the ntlroadband Help in the add/remove program some help menus in help and support will not be available. You decide

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file. BT Broadband Help is required to run with the Help and Support program. If you uncheck BT Broadband Help and and then run Help and Support it will add another BT Broadband Help in the startup menu. If you remove the BT Broadband Help in the add/remove program some help menus in help and support will not be available. You decide

System tray access to Motive's Broadband 2.0 configuration and repair utility

Part of Bullguard antivirus

Added by the BYMER WORM!

C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs

Cannon Multi-Pass status monitor - your choice

Added by the STAP-C WORM!

Added by the SDBOT.ZD WORM!

Added by the VAGON-A TROJAN!

Added by the SMALL-CSK TROJAN!

Added by MSN Messenger Plus, a third party extension to MSN Messenger. This is the auto-update feature - see here for more info.

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Enables special keys on Chicony keyboards. Special combinations include Internet, E-mail, vol+, vol-, mute, etc. Only required for extended features

Added by a VIRUS!

Switch adult content dialler

Switch adult content dialler

Used by McAfee Virusscan to perform product updates. When updates are available the program will download and install them automatically. Recommended to leave enabled

ClickTheButton Downloader-MY adware

Added by the SDBOT-BXQ WORM!

ClientMan parasite variant

Added by the PURSCAN-AI TROJAN!

Adult content dialler

Premium rate adult content dialer. Note - this is NOT the MSN Messenger 'MessengerPlus' extension

Added by the TOMPAI-C TROJAN!

Added by a variant of the AGENT.EI TROJAN!

Added by the BEASTY.H TROJAN!

Added by the BEASTY.G TROJAN!

Added by the BEASTY.E TROJAN!

Added by the BEASTY.I TROJAN!

Added by the BEASTDO-O TROJAN!

Added by the SDBOT.CQL WORM!

Added by the RBOT.BKT WORM!

Added by the SDBOT.BWH WORM!

Added by the SDBOT-ADC WORM!

Added by the RBOT.BVF WORM!

Added by the AGOBOT.BD WORM!

Added by the GAOBOT.JB WORM!

Added by the GAOBOT.AUS or SDBOT.J or SDBOT-QG WORMS!

Added by the GAOBOT.AUS WORM!

Added by the LOADCFG or SDBOT TROJANS!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by a variant of the AGOBOT/GAOBOT WORM!

Added by the SDBOT.BT WORM!

Added by the SDBOT-YM WORM!

Displays copyright information on IBM ThinkPads

Related to Corel Photo Album

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Part of CorelDraw bundles for indexing media files - similar to "fast find" in MS Office

Added by the TACTSLAY.C TROJAN!

Added by the TACTSLAY.C TROJAN!

Added by the OPASERV.G WORM!

Added by a variant of the SDBOT WORM!

Added by the CHODE-J WORM!

Added by the DELBOT-E TROJAN!

Added by the JV TROJAN!

Spy Sheriff/SpywareNO malware, also detected as the SPYHOAX-A TROJAN, pretends to be a spyware remover! - file names spotted sofar include VXH8JKDQ2.EXE, NS6281400.so, CVXH8JKDQ2.EXE, down3.exe, sefe.exe, winstall.exe, and tool2.exe

Added by the RBOT-ADQ WORM!

Added by the RANDEX.MS WORM!

Added by the ALLEM WORM!

Dell multimedia keyboard manager. Required if you use the additional keys

Added by a variant of the AGOBOT/GAOBOT WORM!

Adult content dialler

Added by an unidentified WORM or TROJAN!

Shorty adware - also detected as the AGENT.FD TROJAN!

Shorty adware - also detected as the AGENT.FD TROJAN!

Shorty adware - also detected as the AGENT.FD TROJAN!

Shorty adware - also detected as the AGENT.FD TROJAN!

Shorty adware - also detected as the AGENT.FD TROJAN!

Added by the SDBOT-AAP WORM!

Added by the JM TROJAN!

Added by the SERFLOG.B WORM!

Added by a variant of the RBOT WORM!

Related to McAfee AntiVirus suite - used to automatically scan incoming e-mails

The Encompass Monitor. This program is the Connect Direct Program. It is more trouble than it is worth and few use it

Part of Acer Empowering Technology. "Acer eRecovery Management is a powerful utility that does away with the need for recovery disks provided by the manufacturer, and also acts as a versatile standalone backup and recovery manager"

Added by a variant of the SDBOT WORM!

Added by the SDBOT.BXJ WORM!

Conexant (older versions are Brooktree) Wavestream Message Server - associated with Conexant based audio devices

eZula TopText adware

Added by the IRCFLOOD-M WORM!

New version of MS FindFast and still a resource hog?

Added by the DLOADER-OR TROJAN!

Added by the PIEBOT-A TROJAN!

Added by the RBOT-AAQ WORM!

Part of Ontrack's Fix-it Utilities Suite. Loads a System Tray icon that lets you access the full program. Needed if you run the crash guard, intellicluster, anti-virus, or autoupdater. Otherwise not required

Part of Ontrack's Fix-it Utilities Suite anti-virus. Performs a quick check of memory for signs of any virus. Exits afterward and returns all resources used in one user's experience. Not required but could be left without a drain on resources

Added by the SLAPEW.C TROJAN!

Added by an unidentified WORM or TROJAN!

Mouse utility for a Trust brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse

Multimedia keyboard manager. Required if you use the additional keys

Mouse utility for a Labtec brand (and possibly others) mouse. If you disable this entry you will not be able to use any of the non-standard functions of the mouse

Mouse utility for a Medion branded Fellowes mouse

Micro Innovations mouse management

Micro Innovations mouse management

Mouse utility for a Trust brand mouse

Part of Cyber Patrol internet filtering software to restrict access to certain types of material on the internet. It can be disabled but do not ask how it's done

Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations

Added by the AGENT-GQP Trojan

Added by the OPTIX PRO TROJAN!

Goldensoft CD Ghost related - turns a computer into a 200X-speed CD-ROM tower. Working from the hard drive, users can simultaneously access as many as 23 virtual CD-ROM drives at a speed of 200X for true multitasking

Added by the WOLLF-A TROJAN!

Hornet Monitor - monitoring system that detects and responds to unauthorized access attempts and sources of channel interference on any local DSSS network

Added by the RBOT-APO WORM!

Added by the WOOTBOT.AF WORM!

matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file. HP Instant Support is required to run with the Help and Support program. If you uncheck HP Instant Support and and then run Help and Support it will add another HP Instant Support in the startup menu. If you remove the HP Instant Support in the add/remove program some help menus in help and support will not be available. You decide

Added by a variant of the SDBOT WORM!

Added by the RBOT.EDL WORM!

Added by the TACTSLAY.C TROJAN!

"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". HughesNet Help is required to run with the Help and Support program. If you uncheck HughesNet Help and and then run Help and Support it will add another HughesNet Help in the startup menu. If you remove the HughesNet Help in the add/remove program some help menus in help and support will not be available. You decide

Added by an unidentified WORM or TROJAN!

Added by the TIRBOT-D WORM!

Added by the TIRBOT-G WORM!

Added by the ASOXY TROJAN!

Adware downloader trojan

Added by the JU or BANCBAN-IP TROJANS!

Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename

Added by the HOLAR.C (or GALIL) WORM! Note - this should not be comfused with Windows Media Player which has the same filename

Added by the VB-CYG WORM!

Added by a variant of the SDBOT TROJAN!

InstantAccess premium rate adult content dialer

Added by the SDBOT-ADN WORM!

Added by the MSCONFIG16 TROJAN!

Added by the NYRUBOT-A WORM!

Added by the KWBOT.B WORM!

EasySearch adware

Added by the DLOADR-AWD TROJAN!

Added by the RBOT-GFP WORM!

Added by the RBOT-GQL WORM!

Added by the RBOT-GML WORM!

Detected by Trend Micro as the RBOT.UX TROJAN! See here

Unidentfied adware

Australian ISP's free monthly download meter

Added by the HAWAWI WORM!

Installed with a Panasonic iPalm digital camera. Used to upload photos from the camera. If your camera is not connected (via USB port) you do not need this program loaded

Associated with the iRiver Music Manager

Added by a variant of the RBOT WORM!

Detected by Kaspersky as the BANLOAD.ERP TROJAN! See here

??

Multimedia keyboard manager. Required if you use the multimedia keys

Multimedia keyboard manager. Required if you use the additional keys

Added by the KIFER TROJAN!

Multimedia key handling for the relevant type of Turbo-Media keyboard. Shortcut available. Note that with this running it can crash DirectX8/9 under WinXP when a game switches to full-screen

Konica Minolta Magicolor 2400W colour printer monitor

Added by the BINGHE TROJAN!

Added by the SDBOT-QR WORM!

Added by the LAMEYEAR-A WORM!

Added by the RETSAM TROJAN!

Added by the OBLIVION TROJAN! This executable is one of the most common but there are more

Added by the OPASERV.T WORM!

Auto-update for Movielink - internet movie rental System Tray access

Medload adware

Added by the KAGEN-A TROJAN!

Detected by Kaspersky as the IRCBOT.AOW TROJAN! See here

Updater, part of Logitech Image Studio - installed with Logitech QuickCam cameras

Added by an unidentified malware

Added by the LITMUS.A TROJAN! Note - MSGSRV32.EXE in this case is in a Litmus sub-directory and is not to be confused with the valid version in C:WindowsSystem

Added by the LITMUS.201 TROJAN!

Added by the LITMUS.C TROJAN!

Added by the FC.C TROJAN!

Added by the LITMUS.C TROJAN!

Added by the SERFLOG.A WORM!

Mouse driver - required if you use non-standard Windows driver features

Added by the SDBOT-BJN WORM!

Control Panel Launcher for MobilePre USB bus-powered preamp and audio interface from M-Audio

HTA file which creates an executable on the hard drive which subsequently proceeds to download files from a malware site!

Added by the CRYPTER.A TROJAN!

WhenU.Save adware

Movielink - internet movie rental System Tray access

Related to MarkAny - a solution to prevent is unauthorized distribution of information through Floppy, CD, email, etc

Added by the RBOT-NP WORM!

Used by developers for debugging. Those who have encountered it have unchecked it with no degradation in performance. May cause your computer to "hang" if you have MS Visual Studio installed and this disabled because it appears to take over error handling - hence the U recommendatioon. Can also be listed as MDM7. See here to disable

Added by a variant of the RBOT WORM!

Added by the SDBOT-DID WORM!

Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks

Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks

Part of Conversions Plus from DataViz - allowing PC and MAC owners to share disks

Added by the AGOBOT-RI WORM!

MAD.exe is the MS Exchange 5.5 System Attendant and can also consume a large amount of resources - resolved by the latest Exchange 5.5 Service Pack. Also part of Exchange 2000 Server but does it have the same problems?. Apparently you need to leave this running but is it needed at start-up?

Drivers for the M-Audio Firewire Audiophile - Interface

Magic DeskTop is a small and novel utility which will allow you the option of hiding or showing your desktop icons

ThaiSoftware Thai Dictionary

Magitime - connection tracking utility which monitors online time, expense, data transfer

Mail.com - free web-mail service. Does mcalert.exe notify you when new mail has arrived?

MailBell e-mail notification tool that will notify you about new messages arrived to your mailbox. Works with both POP3 mailboxes and web-mail based systems. You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)

Mailbox Verifier (MV) is free software that will notify you about new messages arrived to your mailbox. Only works with POP3 mailboxes (not web-mail based systems). You should be able to set your mail system to check all accounts at regular intervals anyway if you prefer (in Outlook for instance)

MailCleaner "protect your computer from viruses sent to your machine via the popular e-Mail reader Incredimail. In addition the program will check all incoming files downloaded by Internet Explorer, Netscape Navigator, ICQ and iMesh". Not recommended as it bundles GAIN adware. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Added by the CERTIF-E TROJAN!

Added by the PANOIL.C WORM!

SpyCop surveillance software detection - checks to see when your machine was last scanned and if it was more than a week asks if you want to scan

Added by the CRYPTER.A TROJAN!

Added by the CRYPTER.A TROJAN!

Added by the GEMA.D TROJAN!

Malware Sweeper - "Protects the user from malicious malware and monitors the sanity of the running programs"

Malware remover - not recommended, see here

Malware remover - not recommended, see here

MalwareAlarm misleading malware remover - not recommended, see here

MalwareBot spyware remover - not recommended, see here

MalwareCrush spyware remover - not recommended, see here

MalwareStopper misleading malware remover - not recommended, see here

Spyware remover - not recommended, see here

Malware remover - not recommended, see here

Malware remover - not recommended, see here

ManageDesk Lite from Managebytes Desktop management software. Each desktop is a separate working space for you to use

Detected by Kaspersky as the SMALL.CVT TROJAN!

MindStorm AnalyzerPro from Secure Associates. "A security management tool for customers easy to manage report and analyze security events across heterogeneous security devices"

Added by unidentified malware

Added by the WaveRevenue-McBoo TROJAN!

Added by the MIPSIV TROJAN!

Added by the KX VIRUS and also recognised by Symantec as FPAI adware

Added by the SOLOW-G WORM!

PureEdge Viewer 6.0, reportedly associated with viewing and text editing US Air Force electronic forms

PureEdge Viewer - provides automation framework to manage and deploy XML forms-based processes for e-business and e-government systems. PureEdge was taken over by IBM (see here) and the product became Workplace Forms

Added by a variant of the RBOT WORM!

Volume control for the Gateway Destination "DestiVu" media interface

MailFrontier - anti-spam application

MailFrontier Desktop (Matador) email spam blocker software

Matrix Screen Locker is a system tray application that allows for quick and secure PC lock when you wish. The screen does a "matrix style" scrolling characters effect when the lock is running

Malware, see here

For Matrox video cards. Quick access to settings

For Matrox video cards. Quick access to diagnostics

For Matrox video cards. Quick access to tweak your card to your liking

"Matrox PowerDesk software provides extra multi-display desktop management controls"

For Matrox video cards. Quick access to tweak your card to your liking

WinAntiVirus Pro 2007 virus software - not recommended, see here

Bonzi MaxALERT - spyware

Backup scheduler for the Maxtor (now Seagate) range of external hard drives - part of Maxtor Quick Start