Processes beginning with a

Commercials file that registers itself in the system registry and redirects IE to a certain commercial website

Added by the MELO-A WORM!

Added by the MYTOB.BM WORM!

"A Note is a program that lets you create post-it like notes on your Microsoft Windows desktop"

Part of Verizon Online Support Manager

a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a? 'Background Guard' real time protection feature

a-sqaured Anti-Dialer

WinPoET is the industry's first Windows-based PPP over Ethernet client. Developed by iVasion, WinPoET is attractive to equipment providers, modem suppliers, RBOCs and ISPs. For more info read here. It uses dial-up networking for new high-speed internet customers who are more familiar with analogue modems. If unchecked in MSCONFIG it reports Error 360 - Hardware Error in dial-up networking

Compaq A1000 Print Fax All-in-One copy scan printer software. Required in the Startup in order to scan, print, copy and fax. Only required if you use these features

Anonymity 4 Proxy - local proxy server that makes you anonymous when visiting web sites

BrowserAid/BrowserPal foistware. Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

a-Squared antitrojan - can be run on demand but necessary in Startup if you prefer the a? 'Background Guard' real time protection feature

Added by a variant of the IRCBOT BACKDOOR!

??

??

System Tray management utility from Mike Lin which allows you to hide, show, restore icons that are lost in an Explorer crash, remove dead tray icons, minimize any window to the System Tray

Advanced Anti-Keylogger - "Anti-spy software to prohibit operation of any keyloggers currently in use or presently being developed anywhere"

LANDesk? Management Suite software component

LANDesk? Management Suite software component

Added by the DELF.LJ TROJAN!

Added by the BACKDOOR-CPC TROJAN!

PurityScan/Clickspring adware

AdBlaster adware

Appears to be related to software from Accenture.com

Ad-Aware anti-spyware tool from Lavasoft

System Tray access to Ad-aware from Lavasoft - popular spyware/adware removal tool

??

Added by a variant of the Storm/Nuwar/Zhelatin WORM! See here for an example

Installed with the Optical Character Recognition (OCR) software that comes bundled with a Compaq A3000 all-in-one printer/scanner. Its function appears to be to link you to the internet in an attempt to buy the 5.0 version of the software

Keystroke logger/monitoring program - remove unless you installed it yourself!

EPJ TROJAN!

ABIT ?Guru - on motherboards incorporating the ?Guru processor this provides quick access to "hardware monitoring, overclocking, BIOS flashing and audio tweakin

Monitoring utility for ABIT Motherboards. Displays system voltages, temperatures and fan speeds

Added by the DERMON-G TROJAN!

Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?

Absolute Shield Evidence Eliminator - internet history eraser

Absolute Startup - startup monitor from F-Group Software

AbsoluteShield Internet Eraser - "protects your privacy by cleaning up all the tracks of your Internet and computer activities"

Added by the AUTOUPDER TROJAN!

SeekSeek search hijacker related - see here

Loads the executable for Lop.com - final version

Loads the executable for Lop.com - beta version

Abyss web server

Detected by Sophos as the SILLYFDC-A TROJAN!

"Lexmark Scan & Copy Control Program" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan, scan to E-mail, copy, etc

"Lexmark Scan & Copy Control Program" for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan, scan to E-mail, copy, etc

"Lexmark Scan & Copy Control Program" for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan, scan to E-mail, copy, etc

"Lexmark Scan & Copy Control Program" for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan, scan to E-mail, copy, etc

"Lexmark Scan & Copy Control Program" for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Button manager for features such as scan, scan to E-mail, copy, etc

Advanced Call Center - "full-featured yet easy-to-use answering machine software for your voice modem"

Added by the DARBY-O WORM!

Webroot Accelerate - allows you to optimize Windows network registry settings in order to boost surfing speeds. Leave this enabled if you find it improves your connection

Detected by Kaspersky as the AGENT.DGO TROJAN! See here

Monitors your progress on the internet; hang-ups, connection speeds, internet congestion and traffic flow. It prevents some games from running also. To disable the Access Ramp Monitor (1) Open Windows Explorer (2) Open the Program Files folder (3) Open the MindSpring folder (4) Open the AccessRamp folder (5) Double-click on the ARMCfg32.exe file (6) Uncheck Enable Dialup Monitor and click OK (7) Restart the computer and try again

Added by the PPDOOR-M TROJAN!

Part of SmartPipes SecureSite software. "SecureSite enables rapid turnup and enhanced administration of VPNs. It automates and simplifies tasks for VPN design and policy management, access control management, and key management"

My AccessMedia toolbar related, stealth installed!

Clock Plus, part of Accessories Plus allows you to select from dozens of alternatives for the Windows clock

From a visitor "Just wanted to provide you with some info on Access Ramp software installed with Verizon DSL accounts in those areas that use the Winpoet PPPoE software. The Access Ramp TSRs are installed as part of IP Insight software (can't remember the software maker). You can decline to install IP Insight during Winpoet setup, or go into Add/Remove programs uninstall IP Insight by hand if it's already installed. It really doesn't do a darn thing for you. It was intended to help DSL techs monitor QoS, but the backend part was never implemented (at least as of earlier this year). This will not affect the user's ability or inability to access their DSL service."

Version of the AccessRamp Monitor01 entry for LAN connections - a history uploader. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003

Norton? Password Manager - part of Norton SystemWorks 2004 - stores passwords and other personal information, and retrieves the data needed for email logins, shopping orders, banking, and other online activities - all from the safety of your own PC

Desktop weather from AccuWeather

Added by the RULAND.A WORM!

Added by the RULAND.A WORM!

Added by the MAILBOT-BA TROJAN!

ACDSee 8 photo software. Organize, manage, enhance, and share all your valued photo memories

??

"AceGain LiveUpdate can help to automate and optimize product updates. AceGain LiveUpdate will automatically detect new patch updates, driver updates or full product updates and automatically download and install them according to user configuration"

Part of Acer Empowering Technology. "Acer ePower Management is a straightforward interface that allows users to select from pre-configured power usage profiles, or to create their own customized profiles"

Allows you to connect your Acer laptop to a projector

Acer Product Registration - remove when registration is completed

Popup reminder to take the tour of your new Acer laptop

Acer Computer "Goto Drive" Cold Swap Driver - a swappable second disk drive provides convenient backup of large files, or easy importation of data from user's previous computer

System Tray access on some Acer Notebooks to give faster access to system settings

PowerKey utility for Acer TravelMate notebook PCs. Allows the user to quickly switch between different power schemes by pressing Fn+F3

Added by the GAOBOT.PQA WORM!

PurityScan/Clickspring adware

ActivCard Gold from ActivIdentity, Inc. Smart card-based strong authentication software - for photo IDs, proximity badges for facility access and as digital identification and authentication

Altiris AClient Service Windows Tray Icon

Used by HP Instant Support

Button monitor for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Works in conjunction with the "Lexmark Scan & Copy Control Program" button manager whose filename is "AcBtnMgr_X63.exe"

Button monitor for the Lexmark X63 all-in-one multifunction printer/copier/scanner. Works in conjunction with the "Lexmark Scan & Copy Control Program" button manager whose filename is "AcBtnMgr_X63.exe"

Button monitor for the Lexmark X73 all-in-one multifunction printer/copier/scanner. Works in conjunction with the "Lexmark Scan & Copy Control Program" button manager whose filename is "AcBtnMgr_X73.exe"

Button monitor for the Lexmark X83 all-in-one multifunction printer/copier/scanner. Works in conjunction with the "Lexmark Scan & Copy Control Program" button manager whose filename is "AcBtnMgr_X83.exe"

Button monitor for the Lexmark X84-X85 all-in-one multifunction printer/copier/scanner. Works in conjunction with the "Lexmark Scan & Copy Control Program" button manager whose filename is "AcBtnMgr_X84-X85.exe"

Adult content dialler

Adult content dialler

Mouse driver - required if you use non-standard Windows driver features

Adult content dialler

Control panel program for Philips Acoustic Edge soundcard. Not required unless changed settings aren't retained

Program for finding trucks on-line

Added by the SMALL-ECT TROJAN!

Essential for creating PDF files with Adobe Acrobat and Acrobat Distiller. For Win9x/Me systems you can run this file manually beforehand. For WinXP systems this file must run at startup. Hence the "U" recommendation. *.* represents the version

Added by the VANBOT-BQ TROJAN!

Speeds up the time it takes to load Adobe's Acrobat PDF creation and management tool. From version 7.0 onwards

Related to ACROMOUSE Laser mouse control

Part of Acronis Privacy Expert - anti-spyware and security suite

Part of Acronis True Image backup software. Co-operates with the "schedul2.exe" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images

Part of Acronis True Image - backup software. Co-operates with the "schedul2.exe" service to perform backup/restore tasks correctly. Required if you want to use True Image to do some real backup/restore tasks - not if you only want to explore/mount images

Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive

Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage

Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage

Part of Acronis True Image backup software. Monitor for the backup archive explorer for moving and viewing files within an archive

Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage

Sage Software's ACT! "enables individuals and small business customers to instantly access key contact and customer information, manage and prioritize activities, and track all contact-related communications so you can grow productive business relationships"

Associated with a Plustech scanner. Small utility that runs in the background for doing fax/copy/etc. Available via Start -> Programs

"A COM server that runs on the client as part of the Dell OpenManage Client Instrumentation 6.x package; provides a simple method for a remote administrator to perform actions on the instrumented client". Is it required?

Part of Microsoft Money

Packard Bell ActiveBoard keyboard - multimedia keyboard manager. Required if you use the additional keys and want to see the status of the Num Lock, Caps Lock, Scroll Lock keys

Added by the MYTOB.BZ WORM!

Active CPU - "easy to use tool for Windows 95/98/ME/NT/2000 that enables you to watch a graphical representation of your CPU's activity"

XemiComputers Active Desktop Calendar

Active Email Monitor checks multiple accounts for email, serves as a SPAM filter and can also protect you from harmful items that can be sent via email

Active Shield is "an heuristic screen that actively protects your computer from trojans, spyware, adware, trackware, dialers, keyloggers, and even some special kinds of viruses"

Added by the DABOOM WORM!

Added by the OPASERV.T WORM!

ActiveEyes from TFI Technology is a small utility that you can use to liven up your desktop. It follows your mouse around and can tell you how far your cursor has travelled or point out where the cursor is. It's small, it's free and comes with a range of options and animations. Not needed - if unavailable via Start -> Programs, create your own shortcut

"Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"

Wild Tangent demo games that come with some HP computers. Unchecking it can prevent the games from running occasionally. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

Interactive Agents Plugin for Messenger Plus! (MSN Messenger add-on)

Added by the RBOT-FKQ WORM!

Added by the SOHANA-AJ WORM!

McAfee VirusScan On-line. See also the McAgentExe entry

Ascentive ActiveSpeed internet optimizer - not recommended, see here and here

Added by the MANCSYN-E TROJAN!

ActiveWords from ActiveWord Systems, Inc. Like macro programs, ActiveWords sits in the background and watches as you type. When it recognizes that you?ve typed an ActiveWord, it takes the associated action, such as replacing your keystrokes with the text you?ve defined

Added by the RBOT-DVD WORM!

Added by the SDBOT.NQ WORM!

Added by a variant of the DEDLER.C TROJAN!

ActivityKey keystroke logger/monitoring program - remove unless you installed it yourself!

Packard Bell ActivSurf - automatically detects an internet connection and downloads any available updates

"ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload. You don't need to do any coding, nor are you required to know a lot about the computer"

ActMaker mouse and keyboard toolkit can record the daily operation of your computer and reduce your workload

System Tray icon for ThinkVantage Access Connections - "allowing users to seamlessly switch between wired and wireless environments, managing security settings, printers, home page and other location-specific settings automatically"

Actual Window Manager from Actual Tools - "an innovative desktop organization application which introduces unconventional window controls and also automatic general window operations making your work more productive, convenient and enjoyable"

Actual Window Minimizer - "allows minimizing any window to task tray notification area or to the edge of the screen"

Added by the VB.IS TROJAN!

Atheros wireless Client Utility

Atheros wireless Client Utility

Related to IBM ThinkVantage Connectivity Solution

Ad Blocker - blocks popups, and also removes banners, image ads and flash ads

Ad Away popup and banner remover

Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications

??

Ad-aware from Lavasoft - popular spyware/adware removal tool

Added by the RBOT-ADJ WORM! Note - this is not the popular Ad-aware spware/adware removal tool and is located in the WinntSystem32 or WindowsSystem32 directory

Ad-Eliminator spyware remover - not recommended, see here

Ad Muncher removes adverts, pop-ups and general annoyances in your browser, file-sharing and messenger programs. Causes conflicts with Outlook, game sites and web-building applications

Ad-Protect spyware and spam monitoring tool

Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system

Executable for Active Disk from Iomega disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk

DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later

DirectCD primarily allows you to drag and drop files onto a suitably formatted CD-RW disc. Unless you use this on a frequent basis it isn't required and is available via Start -> Programs. Start the program before inserting a DirectCD formatted CD-RW in the drive. A re-boot is recommended if you close Adaptec DirectCD before re-opening it again later

Added by the RBOT-XN WORM!

Ad-aware from Lavasoft - popular spyware/adware removal tool

RapidBlaster variant (in a "Adaware" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware

RapidBlaster variant (in a "Adaware" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here. Note - this is not the valid Lavasoft Adaware

AdBin - "Free and easy solution to managing your Window's hosts file. A fun way to block ads"

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch Addclass parasite variant

Added by the STARTPAGE.F hijacker

Added by the SECDL-A TROJAN!

Banner advertisment blocker

Virtual Bouncer - malware from Spyware Labs. It is distributed by the same bundling and drive-by download techniques as the parasites it claims to remove, so definitely qualifies as unsolicited commercial software in itself. It also has an update feature that can download and execute arbitrary code. Warning - choose "custom" uninstall as "automatic" may remove other programs - see here

Added by a variant of the IRCBOT TROJAN!

Related to Adobe Photoshop

SoundBlaster Audigy related?

Added with SoundBlaster Live! or Audigy soundcards for headphone autodetection

Added by the SPAMSRV-E TROJAN!

ADSL USB modem related

Added by the TIBS-QT TROJAN!

Part of Advanced Spyware Remover anti-spyware tool

Detected by Kaspersky as the SLAPER.AI TROJAN! See here

Added by a variant of the SDBOT TROJAN!

Adware, probably a Windupdates variant

Windupdates adware variant

Added by the NOVACAL TROJAN!

Added by the RUBBLE-C WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!

Added by the PUNYA-B WORM!

Added by the STARGRUB-A WORM!

Related to Acer Inc. destop tray

Added by an unidentified VIRUS, WORM or TROJAN!

Added by an unidentified WORM or TROJAN!

Added by an unidentified WORM or TROJAN!

Added by the LOWZONES.T TROJAN!

Added by an unidentified TROJAN!

Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly

Added by the RANDEX.DFJ WORM!

Added by a variant of the RBOT WORM!

Speeds up the time it takes to load Adobe's Acrobat PDF creation and management tool. From version 7.0 onwards

Added by the RBOT-OP WORM!

Adjusts monitor colours across all programs, including Photoshop. It is needed by some graphics professionals who want their monitor calibrated. Most home users will not need it. In my case I can verify this as Photoshop loads fine

Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here)

Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly

Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly

Speeds up the time it takes to load the Adobe Reader application. Your choice, but not required for Adobe Reader to function properly

Adobe Synchronizer - installed along with Adobe Reader 8.x. "Synchronizer is a small application that runs in the background, providing synchronization of document reviews and Tracker subscriptions so that your data is available when you need it." See the link for more information

File manager that's part of Adobe Creative Suite 2 - "find files fast, track versions across applications, link files together, and share them in creative collaboration without fear of overwriting someone else's work"

Added by the FLOOD.BA TROJAN!

Browser hijacker - redirecting to Hugesearch.net

Detected by Trend Micro as the INJECT.IB TROJAN! See here

Added by the ADCLICKER TROJAN!

Added by the RBOT.DAO TROJAN!

Added by the RBOT-ASK or RBOT-AUS WORMS!

Added by the RBOT-ATY WORM!

Added by the SDBOT-AKH WORM!

Added by the IRCBOT-VQ WORM!

Added by the RBOT-GAT WORM!

Added by the RBOT-BGH WORM!

Automatic updater for Adobe software - run manually

"An exclusive feature of the Adobe? Creative Suite, Version Cue? helps you find files fast, track multiple versions of your files, and share your files for creative collaboration"

Part of an Adobe product. What does it do and is it required?

Downloader of Korean origin, detected as ADOD.28672

Added by an unidentified WORM or TROJAN!

Spyware installed by Net2Phone, Limewire, Cydoor, Grokster, KaZaa, etc

Added by the AGENT-FZ TROJAN!

AdBlaster adware

After Dark for Windows. Screen saver creation program produced before screen savers became integrated into Win95

Added by the DELF.WG TROJAN!

AdRoar adware updater

Added by the SMALL-AQ TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

FakeMessage/AdRotator adware. Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in an "Inetsrv" subfolder

ADS Adware Remover - not recommended, see here

Reported as DILAER.DW by NOD32

"AdsCleaner is a powerful ad blocking software designed to stop ads (block banners ad, kill popup), guard your online privacy"

Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk

AdsGone - pop-up stopper

System tray access to ADSL modem diagnostic tools. Available via Start -> Programs

Apparently Annex A ADSL modem related. What does it do and is it required?

ISP software, initializes DSL modem

Added by the RBOT-AXZ WORM!

Associated with an Integrated Telecom Express (ITeX) ADSL driver installation. What does it do and is it required?

ADSS is part of Access Denied security and privacy software (Access Denied Security Server) that monitors power status and provides some other services for Screen Guard. Important to keep its running while using Access Denied

Adlogix adware variant

Adlogix adware variant

WindUpdates AdStatus Service adware

AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs. Now superseeded by Trend Micro AntiSpyware

Detected by Kaspersky as the STARTPAGE.AW TROJAN!

Detected by Kaspersky as the VB.KC WORM!

Windupdates Adware

Related to Cisco Aironet wireless products. What does it do and is it required?

Adult content dialler and hijacker

Adult content dialler

Adult content dialler

Unidentified adware downloader/updater

Part of Iomega's Active Disk - allows software applications to be run directly from an Iomega Zip? disk. Required if you wish the applications to launch on insertion of a disk

Added by the RANCK-FI TROJAN!

Added by the AGENT.GLQ TROJAN!

Added by a variant of the SPYBOT WORM!

Added by a variant of the RBOT WORM!

Advanced Spyware Remover anti spyware tool

Added by a variant of the RBOT WORM!

Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget

Innovative Solutions Advanced Uninstaller PRO - "easy-to-use suite for uninstalling applications and keeping your computer fast, clean, and in its best shape"

AdvancedCleaner misleading security software - not recommended, see here

MediaAdVantage adware

Detected by Trend Micro as the MUTANT.AT TROJAN! See here

Added by the NETDEVIL.12 WORM!

Checks when you install a new version of a Norton product that you have uninstalled all previous versions. Serves as a reminder if you forget

Advertising Killer - popup stopper

Added by a variant of the CRYPTER.C TROJAN!

Adware Agent popup blocker

Adware Spy adware remover - not recommended, see here

Adware program, previously not recommended (see here). It has now been delisted, so make sure you have the latest version

AdwareDelete adware remover - not recommended, see here

EAdwareKiller spyware remover - not recommended, see here

EAdwareKiller spyware remover - not recommended, see here

Ad-Ware Pro rogue security software - not recommended, see here

AntiTrojan Pro rogue security software - not recommended. Variant of Ad-Ware Pro

AdwareRemover2007 spyware remover - not recommended, see here

IBM High Rate Wireless LAN Adapter driver. Is it required?

Audio Applications Launcher for the Philips Acoustic Edge soundcard

Added by the RANDON-AO WORM!

Altiris Agent transmits information about your machine for the purpose of asset management and deployment

Altiris Express NS Client Manager software. Is it required?

IBM Aptiva keyboard customizer - enables certain special buttons on keyboard for CD operation, volume control, and few quickstart buttons. Keyboard will work without it but you lose the special functions

AFAFilter - internet filter software

Added by the ONLINEG-L TROJAN!

System Tray access to display properties for AGEIA PhysX graphics cards. Unless you change your desktop resolution, etc, regularily use Control Panel -> Display Properties or right-click on the desktop

Cyberlink's Power VCR II 3.0 is a TV tuner recording utility. If you want to schedule recordings you'll need this, otherwise can be disabled. Available via Start -> Programs

Added by the DREF-V VIRUS!

Added by the DREF-U VIRUS!

Added by the PPdoor.M-bdr backdoor TROJAN!

Unidentified adware

Part of Panda Antivirus . Is this an update reminder (guess because of the name), virus definition update reminder or something similar?

Malware, detected by Kaspersky as AdWare.Monker.a. NOTE: do NOT confuse with the Microsoft Agent Server application of the same name as described here - the legitimate file will always be located in the WindowsMsagent folder

For Agfa digital cameras connected via USB. Enables Windows to access the contents of the memory stick (while the stick's still on the camera) via a virtual drive

Added by the GAOBOT.SY WORM!

IBM AMR modem driver

Program from AudioGalaxy that lets you download some MP3s from their server. Available via Start -> Programs

Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"

Advanced Hide Folders - "is powerful file security program. It allows to hide folders or hide files. Advanced Hide Folders is very useful to keep your personal data away from others. Others will not know where your personal files exist and they will not be able to accidentally view, delete or modify them either"

AhnLab V3 antivirus updater - leave enabled unless you manually update on a regular basis

??

Added by a variant of the SDBOT WORM!

Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required

PurityScan/Clickspring adware

Added by the ANACON-B WORM!

Added by the NACO.A WORM!

Added by the CERTIF-M TROJAN!

Part of the "Ai Suite" utility supplied with some Asus motherboards. "With AI Nap, users can instantly snooze your PC without terminating the tasks. System will continue operating at minimum power and noise when user is temporarily away"

ASUS DH Remote media portal launcher for their Digital Home range of motherboards that are designed for users to control the computer at a distance away, such as the M2N DH. "ASUS DH Remote is a convenient PC remote controller that gives users unprecedented control over their PCs from the comfort of their couches"

PurityScan/Clickspring adware

PurityScan/Clickspring adware

PurityScan/Clickspring adware

Keyboard related

Keyboard related

Another IE Popup Killer - pop-up stopper

AOL Instant Messenger. If connected to the internet, automatically runs up AIM. Convenience more than anything. Available via Start -> Programs

AIM plus - a free add-on to AOL's Instant Messenger for Windows from Big-O Software

Added by the RBOT-AFV WORM!

AIM Logger - saves AIM (AOL Instant Messenger) conversations to log files. Can be started when you are using AIM

Added by the GUAP-F WORM!

Added by the BUDDY TROJAN!

AOL Instant Messenger - start it when you want to use it

AOL Instant Messenger - start it when you want to use it

Added by the AGOBOT.AEE WORM!

RapidBlaster variant (in a "Aimaol" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

RapidBlaster variant (in a "Aimaol" folder in Program Files). Recommended you use RapidBlaster Killer to uninstall - see here

IMSufSentinel is a spy program which can record IM conversations, log keystrokes, record URLs visited, and take screenshots. If you didn't install this yourself remove it

AimingClick from AimingTech. Web searching tool. Available via Start -> Programs

AIM Pro - secure instant messaging, video conferencing, on-line meetings and desktop and file sharing

Peer to Peer (P2P) file sharing client that runs over the AOL Instant Messenger network. Available via Start -> Programs

Version of the WildTangent on-line games installer that came with versions of AOL Instant Messenger. Note that WildTanget's privacy policy used to state that they also collect and share individuals information but this is no longer the case

USB interface for Aiptek Graphics Tablet (USB)

Related to "Prutect" malware from e2Give

Airport Base Station Agent utility for Apple's AirPort wi-fi basestations. "Wireless solution for home, school, and business. As it blankets your space with a blazing-fast, secure wireless network, it opens up a world of possibilities for home entertainment, backups, printing, and more"

AJC Active Backup from AJC Software - "Instantly backup files you change on your PC and keep multiple versions to undo"

Added by the EVILBOT.C TROJAN!

"Active Keys is a powerful yet easy-to-use tool for creating and managing keyboard shortcuts for any system action"

Added by the ONLINEG-M TROJAN!

Advertising Killer - popup stopper

Access Lock is a system-tray security utility you can use to secure your desktop when you are away from your computer

Palm alarm event reminder that coordinates what is on your Palm with settings on your desktop

Associated with SynTPEnh and SynTPLpr which are from Synaptics for touchpads on laptops. What does it do and is it required?

Scanner software, not required for scanner to work

RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?

RealTek related - Real-Time SPDIF-in Monitor for nVidia chipset - is it required in startup?

ClickAlchemy adware

Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to data about the customer. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation

Alcohol 120% - CD/DVD emulation/writing/copying software

Alcohol 120% - CD/DVD emulation/writing/copying software

Alcohol 120% is a powerful Windows application that makes it easy to create backups of DVDs* and CDs. In addition, the program lets you store your most used CDs as images on your computer, so you can call them up at the click of a button. This part automounts images disc images

??

RealTek High Definition audio driver related - detects new devices when plugged in, then pops up a dialog box. If everything works as expected you should be able to disable this one

Installed with hardware drivers for a Realtek AC97 audio device. It's believed that Realtek uses this file in order to gather data about the customer. Some users report problems with their on-board sound if this is disabled - hence the "U" recommendation

Added by the RBOT-XS WORM!

Added by the MAHA.F TROJAN!

Added by the OPASERV-A WORM!

Added by the OPASERV WORM!

Related to Alexa. Note - collects and stores information about the web pages you view, the data you enter in online forms and search programs and, with versions 5.0 and higher, the products you purchase online whilst using the toolbar. Although Alexa state's they do not attempt to analyze the data it may collect about you to determine who you are, some of your information collected by the software is personally identifiable. Please read the Privacy Policy. Not Recommended

Reported as the DELF.EB hijacker by Ewido Security Suite

AlphaCleaner is now a stealth install using exploits on unpatched systems. Seen alongside RazeSpyware

AlfaClock from AlfaSoft Research Labs - "enhances your taskbar clock (tray clock) with fully customizable clock display, alarms, time synchronization and more"

AlfaClock2 - tray/desktop clock and time synchronization software

??

Added by the DEMOTRY-B WORM!

Added by the STARTPAGE.K hijacker

Detected by Kaspersky as the VB.ATE TROJAN!

Added by the CWS-I TROJAN!

Related to Uli Integrated Drivers from Uli Electronics Inc

Screen-capture utility for Alias Sketchbook

Alienware computer technical support software

ALi AC97 Sound driver

May be realted to a USB 2.0 PCI card - the IOgear GIC220OU?

Added by the TOFDROP-B TROJAN!

Added by the TOFDROP-B TROJAN!

Added by the BALKART TROJAN!

All Aboard! Internet Connection Sharing status icon

Free screensaver, installs lots of foistware - remove it

Free screensaver, installs lots of foistware - remove it

AllerCalc is an expression calculator which allows you to directly enter an expression to be evaluated. Can be started manually

Added by the RANKY.CU TROJAN!

All-Seeing_Eye security software - "monitors everything that takes place on your computer, and alerts the user as soon as anything suspicious or out-of-the-ordinary is happening, providing the user with alternatives for possible actions"

"allSnap is a small system tray app that makes all top level windows automatically align like they do in programs such as Winamp or Photoshop"

AlltoTray from DNTSoft - minimize any program to your System Tray

Added by a variant of the SDBOT WORM!

From McAfee VirusScan for logging scanning activities. In some cases, if left running it can cause CPU % usage to go between 5-95% or go to and stay at 100%. Disabling it impacts on the reported last scan date. It is reported to cause jerky graphics response in many games. As of version 6, this is a critical component of McAfee and disabling it can cause a PC to lock up

ALPass password manager

Added by a variant of the DELF.IT TROJAN! Note - this is not the legitimate svchost.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Alps Electric USB Server - required according to this article

Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work

Altec Lansing AMS speaker related. What does it do and is it required?

Altnet TopSearch adware

Altnet TopSearch adware

Alto Memory Booster from Alto Software - boost the computers performance via more intelligent and efficient memory management. MS MVPs (Most Valued Professional) recommend not using memory managers with Win98/SE/ME. See this article and make up your own mind

ALTools family of PC utilities

WeirdOnTheWeb adware

Symantec LiveUpdate scheduler for programs such as Norton AV or Internet Security

Notification reminder for Symantec's LiveUpdate. Leave enabled unless you manually run LiveUpdate on a regular basis

Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here

Aluria Pop-Stopper

Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here

Always On Top Maker - utilty to enable an application to always be displayed "on top" of others on the desktop

Related to HP and Compaq Desktop PCs. Read this article

Premium rate adult content dialler

AMD PowerNow! - "an innovative solution available on all AMD mobile processor-based notebooks that can effectively increase notebook battery life, while delivering performance on demand"

AMD Dual-Core Optimizer - "can help improve some PC gaming video performance by compensating for those applications that bypass the Windows API for timing by directly using the RDTSC (Read Time Stamp Counter) instruction"

Puts AOL icon in System Tray (*.* denotes version if present). Connect to AOL via the desktop shortcut or Start -> Programs

Loads ADSL modem Control Panel applet

ModemLockDown - allows you to supervise internet access by disabling the modem, protects againt dialers accessing dial-up connections, etc

Monitoring part of Eset's NOD32 virus-scanner

Tiny Personal Firewall

WinOFF is " a utility designed to shut down Windows computers automatically, in a fully configurable way"

Part of the IBM ThinkVantage Productivity Center. "The Message Center sends automatic notification on ThinkVantage Technologies integrated with your system. Once you're online"

Added by a variant of the MAILBOT TROJAN!

aMSN Messenger is a multiplatform MSN messenger clone

Added by the BANKER-BNZ TROJAN!

Added by the SILLYFDC-BR WORM!

Anapod Explorer "is the most advanced Windows iPod software available, offering iPod management through full Windows Explorer integration under My Computer"

Added by the TITOG.C WORM!

Detected by Kaspersky as the VB.PI TROJAN! See here

ALPHA Networks wireless driver

D-Link wireless PCI adapter related. In some cases reported to cause excessive CPU activity

Genius Wizard Pen Tablet driver related. Is it required?

MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). If you don't use it - uninstall it

Caere Pagekeeper text annotation server

Anonymity Gateway - privacy protection tool that conceals IP address preventing your surfing habits and your internet activity form being tracked by websites or Internet Service Providers

Anonymizer Total Net Shield - ID protection and privacy software

Anonymizer Spyware Killer - now Anti-Spyware

Anonymizer Spyware Killer - now Anti-Spyware

Another IE Popup Killer - pop-up stopper

Added by the RANDON-AN WORM!

Added by the DLOADER-MW TROJAN!

Added by the SDBOT-SC WORM!

AnswerTool - save your E-mail replies in AnswerTool, then reuse them again and again

Added by the BROPIA.K WORM!

Added by the MYTOB-BK WORM!

Anti-Blaxx - bypass blacklistings from different copy protections bypassing methods like virtual CD or DVD drives

Anti-keylogger - protects against keylogger programs monitoring your keystrokes

Anti-Trojan Watch - trojan detector

Added by a variant of the SLAPER TROJAN!

Added by the CAPROBAD-A TROJAN!

Added by the KEDEBE.D WORM!

Added by the SPAMMIT-A TROJAN!

Malware - detected by Kaspersky as the AGENT.FP TROJAN!

Added by the HEPLANE or STAPREW.B TROJANS! - different filenames have been spotted; examples: msvc.exe, kaspersky.exe, nrton.exe, wins.exe, gah32.exe, 1.tmp, syste.exe, alg.exe, socks.exe, winxpsp2.exe, tek9.exe, sks.exe, hihi.exe, s.exe, xps2.exe, dns2.exe, ikav32.exe and more...

Added by the CBH TROJAN!

Dialer_Watcher is an application that allows you to detect dialers on your computer

Added by the BANCBAN-QJ TROJAN!

AntiMalwareGuard rogue spyware remover - not recommended, see here

AntiPopUp for IE - pop-up stopper

IE AntiVirus rogue security software - not recommended, see here

IE AntiVirus rogue security software - not recommended, see here

IE AntiVirus rogue security software - not recommended, see here

IE AntiVirus rogue security software - not recommended, see here

EAdwareKiller spyware remover, where *.* represents the version number - not recommended, see here

AntiSpyStorm misleading security software - not recommended, see here

AntiSpywareApp spyware remover - not recommended, see here

AntiSpywareBot spyware remover - not recommended, see here

AntiSpywareExpert rogue spyware remover - not recommended, see here

AntiSpywareMaster spyware remover - not recommended, see here

AntiSpywareShield spyware remover - not recommended, see here

AntiVerminser spyware remover - not recommended, see here

Added by a variant of the AGENT.KEU TROJAN!

Added by the RAGRUK-A TROJAN!

Added by the AGENT-DSF TROJAN!

Added by the IRCBOT-TJ TROJAN!

AntiVir? PersonalEdition Classic - antivirus

Antivir64 rogue security software - not recommended, see here

AntiVirGear misleading security software, where *.* represents the version number - not recommended, see here

Added by the SINKIN TROJAN! Resets IE start page to realphx.com

Added by the NETSKY.H WORM!

Added by an unidentified WORM or TROJAN!

Added by a variant of the RBOT WORM!

Added by the BANKER-EHB TROJAN!

Antivirus 2008 rogue security software - not recommended, see here

Antivirus Master rogue security software - not recommended, see

Vista Antivirus 2008 rogue security software - not recommended, see here

Added by the BADGENT-A TROJAN!

Added by a variant of the SDBOT WORM!

Added by the RBOT.EXI WORM!

Added by the RBOT-JF WORM!

Added by the RBOT-IF WORM!

Antivirus 2008 rogue security software - not recommended. Detected by Sophos as the FAKEAV-BK TROJAN!

Antivirus 2008 PRO rogue security software - not recommended. Detected by Sophos as the FAKEAV-AW TROJAN!

Antivirus-Golden misleading security software - not recommended, see here

Antivirus 2008 rogue security software - not recommended, see here

Added by the SPYBOT.KAI WORM!

AntivirusGold malware

AntiVirusPro misleading security software - not recommended, see here

AntiVirusPro misleading security software - not recommended, see here

??

Added by the BAS.A WORM!

Added by the DLOADER-HW TROJAN!

Anti-Windows_Messenger is a small application that prevents Windows Messenger from remaining resident in memory

Added by the LODEAR.D TROJAN!

AnVir Task Manager - protects computer against viruses and manages running processes and startup files

AnVir Task Manager - protects computer against viruses and manages running processes and startup files

System Tray tool for ASUS video cards. If disabled you lose all the ASUS specific video card options in Control Panel -> Display Properties -> Advanced as well as the System Tray shortcuts toolbar

Any To-Do List "the ultimate software solution to keep yourself organized and reminded"

Associated with an Anycom bluetooth wireless card. What does it do and is it required?

AnyDVD - descrambles DVD-Movies automatically in the background and the DVD appears unprotected and region code free. Also removes prohibited operations from the DVD such as skipping adverts - hence the "U" recommendation

AnyTime Organizer Deluxe from Individual Software Inc - "all the tools you need to organize your calendar, to-do list, and address book are combined in a familiar interface with hundreds of printable calendars, detailed expense reports, and a full range of programmable alarms"

AnyTime Organizer Deluxe from Individual Software Inc - "all the tools you need to organize your calendar, to-do list, and address book are combined in a familiar interface with hundreds of printable calendars, detailed expense reports, and a full range of programmable alarms"

AnyTime Organizer Deluxe from Individual Software Inc - "all the tools you need to organize your calendar, to-do list, and address book are combined in a familiar interface with hundreds of printable calendars, detailed expense reports, and a full range of programmable alarms"

System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel

AOL's Active Virus Shield (by Kaspersky) - found in an AOLActive Virus Shield sub-directory

Added by the SPYBOTER.A TROJAN!

"matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, county, etc and gets written to a log file". The AOL Self Support Tool is required to run with the Help and Support program. If you uncheck AOL and and then run Help and Support it will add another AOL entry in the startup menu. If you remove this software in "add/remove programs" some help menus in help and support will not be available. You decide

Part of the AOL Connection Suite and installs an icon on the system tray offering easy access to AOL's additional utilities and functions. This program is a non-essential process, and is installed for ease of use

Added by the SDBOT-XE WORM!

AOL ISP software related. What does it do and is it required?

Added by the SDBOT-YT WORM! Note - this is not the popular AOL Instant Messenger utility

Added by the AGOBOT-FN WORM!

Added by unidentified malware. Note - there ia a lower case "L" between the A and M in the filename

Added by the KELVIR.AL WORM!

Added by the IRCBOT.N TROJAN!

Added by the SDBOT-ZF WORM!

Added by the SDBOT-ABJ WORM!

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the SDBOT-JF WORM!

Added by the AOLOPT TROJAN!

Added by an unidentified WORM or TROJAN!

AOL's spyware protection program

AOL's TopSpeed web acceleration technology supposedly helps to make web browsing faster. Most important for those users who still access AOL via dial-up

AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually

AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Negates having to go through the procedure of signing back on manually

AOL ISP software related, file located in a "AOL Computer Check-Up" folder. What does it do and is it required?

Added by the TAPLAK WORM!

AOL ISP software dialer - can be activated through a desktop shortcut

Run on Gateway Astra computers, and maybe a few others. Designed to repair a bad registry key in Gateway computers that would not allow AOL to run correctly. Not seen much any more and should only run once

Unidentified malware - see here

AOL ISP related. What does it do and is it required?

Added by the KRAIMER.12 TROJAN!

Added by a variant of the IRCBOT TROJAN!

Installed along with iWon Prize Machine. Based upon their privacy statement this can be regarded as spyware

System Tray application for AOpen soundcards. Can be run manually via Start -> Settings -> Control Panel

Chivio dialer

APC PowerChute Personal Edition status icon

PowerChute? Personal Edition - "safe system shutdown software with sophisticated power management functions"

Part of the APC UPS software loaded with the BACK-UPS CS 350 unit. Required to monitor the APC unit in case of power failure

PacerD Media/Pacimedia.com adware

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the IRCBOT-B TROJAN!

Added by the MSNOPT-A TROJAN!

Added by the DROPPER.Z TROJAN!

Added by the TIBSER.A downloader TROJAN!

Added by a variant of the TIBSER.A downloader TROJAN!

Added by a variant of the LAMEBOT TROJAN!

Sage Software's ACT! The application pre-loader (apl.exe) is a self contained executable that pre-loads the necessary .NET framework and ACT! 2005 assemblies. This pre-loading of assemblies enhances ACT! startup, view load and dialog load times in some areas of the application

Intel AnyPoint Wireless II Home Network related. Now discontinued. What does it do and is it required?

Touchpad software for laptop PC's. For instance it is found on the Panasonic and Sony Vaio machines and allows part of the touchpad to be used for document or Web-page scrolling. Required for proper functioning of the pointing software but not required for the laptop to work

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the BODIRU WORM!

Vital Application Console - part of POS-partner 2000 point-of-sale software from Vital. This is the taskbar icon and is enabled at startup by the "Auto-start when OS starts" option. Required for a connection to be established

Added by the CARGAO WORM!

Loads the Confimax add-in for popular E-mail programs to confirm E-mails have been sent and received

Added by the AGENT-BC TROJAN!

From WinPatrol PLUS by BillP Studios - "This file installs with iTunes and is used when syncing your iPhone, iTouch, iPod, etc." See here for more information

Added by the AGOBOT.XV TROJAN!

Aztech Labs modem driver

Added by the CHECKOUT WORM! See here

Novell Zenworks Application Explorer Executable. "For almost all users the Novell ZENworks agent (either Application Launcher or Application Explorer) will be run via the user's login script on each successful login. ZENworks is used to periodically deliver software updates and is also used to install the remote management components."

Application Explorer - file manager type access to Novell Application Launcher for installing and updating network residing applications

Application launcher from the Sony Ericsson PC Suite for their mobile phones

Added by the ULPM.FX TROJAN!

Added by the CHECKOUT WORM! See here

Added by the LINKBOT.M WORM!

Detected by PCTools as the IRCBOT.BJJ TROJAN! See here

Detected by PCTools as the IRCBOT.BJM TROJAN! See here

Added by a variant of the IRCBOT TROJAN!

Added by the IRCBOT-CX TROJAN!

AppPlus - "menu bar or tray launcher that docks to your desktop, floats or sits in your System Tray. Create graphic/text-based buttons that launch any number of programs, Websites, e-mail addresses or folders (which open in the AppPlus Menu System)"

Part of Panda Antivirus. Required to enable permanent virus protection

Part of Panda Antivirus. Required to enable permanent virus protection

"Panda ClientShield with TruPrevent is designed for companies that want the best protection for their workstations. It protects against viruses and other known and unknown threats including spam, spyware, dangerous or time-wasting content, phishing scams, hackers and intruders"

Wheel support for an Alps mouse

Added by the SDBOT.BTR WORM!

ScreenScenes "Aquatica Water Worlds" screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $30. Please note that Claria Corporation no longer support GAIN-Supported software - see here

Added by the AGENT.BG WORM!

Aqua Dock - "free program that allows you to have an ?OS X? style, nice animated launchbar / taskbar on your screen that reacts to your mouse when you mouse over it. Users can customize the look of each item on the dock and set various animation options for when the mouse is over an item on the dock. It is very easy to configure"

Added by the RANCK-CQ TROJAN!

Added by the SDBOT-YC WORM!

Added by the ANTINNY WORM!

ArabLionZ Drive - part of ArabLionZ XP Tools. What does it do and is it required?

Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do?

Arcade Rockstar (now Gamevance) - free arcade games and prize tournaments. The program itself is clean, but the TOS and privacy statement say that you agree to allow the program to track/report your surfing and put popup advertising on your computer

Adware - detected by Kaspersky as the CENTIM.A TROJAN!

Added by the MYTOB.GU WORM!

Backup software by Computer Associates - no longer supported

Ardakey keystroke logger/monitoring program - remove unless you installed it yourself!

"Ares is a free open source file sharing program that enables users to share any digital file including images, audio, video, software, documents, etc"

"Ares is a free open source file sharing program that enables users to share any digital file including images, audio, video, software, documents, etc"

Argentum Backup - a small backup program that lets you easily back up your documents and folders

Added by the ARITIM WORM!

Related to Armor2net personal firewall (possibly contains or is related to an anti-spyware product known as ArmorWall, which is a spyware remover - not recommended, see here

Added by the NUWAR.JQ WORM!

Advanced Registry Optimizer - "scan, identify, clean and repair errors in your Windows registry with a single click". Reminder that states that you are in trial mode

Related to HP and Compaq Desktop PCs. Read this article

Artera Turbo Internet Accelerator - "surf faster, boost download speed". Only required if you find it helps improve your performance

Software for Netgear wireless network cards. Unknown whether it is required for the wireless card to run but does not seem to be a resource hog. Not required for laptop to run if the wireless network card will not be used. Is it at all required?

Netgear wireless LAN configuration utility

Netgear RangeMax NEXT wireless adapter configuration utility

NetgearRev MFC Application - software for Netgear wireless network cards - what does it do and is it required in startup?

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

AsdPlug premium rate adult content dialer variant

Added by the LEGMIR-ARF TROJAN!

Added by the AGOBOT.VO WORM!

Aluria Software's spyware removal tool - we can't really recommend this product as Aluria have recently partnered with WhenU, the well known adware company, see here and here

Ashampoo FireWall Free version

Ashampoo FireWall PRO version

Ashampoo popup blocker, part of Magical Security (was Privacy Protector Plus)

Part of Avast antivirus

Added by a variant of the SDBOT WORM!

Ashlt adware

Part of Avast! anti-virus software - E-mail scanner

Added by the AGENT.AAJE WORM!

ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality

ASIO (Audio Stream In/Out) drivers for the SoundBlaster Audigy 2 series soundcards - for recording and home project studios. Required if you use this functionality

Stealth Keylogger keystroke logger/monitoring program - remove unless you installed it yourself! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Added by the BANCOS-CU TROJAN!

Active Security Monitor from AOL - helps you determine how vulnerable your PC is to computer viruses, spyware and other dangers and learn what steps you can take to improve your protection

Popup blocker, part of Asmw Soft PC Optimizer

Added by the RBOT.EVU TROJAN!

Added by the VB.CBW WORM!

Added by the AGOBOT-KG WORM!

Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Added by the BANLOAD-M TROJAN!

Added by the DADOBRA-I TROJAN!

System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel

System recovery software supplied with some Acer notebook PCs. Similar to GoBack and the restore program in WinXP, allowing you to restore a PC back to a working state with minimal re-entry

Added by the VB.ATZ TROJAN!

CnsMin (Chinese Keywords) hijacker related

Added by the TROJANDOWNLOADER.WIN32.VB.AH VIRUS!

Added by the VB.AH TROJAN!

AutoStarter parasite

ASUS TweakEnable - restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings

Added by the VB.AH TROJAN!

Voyetra Audio Station - part of Voyetra's Ultimate MP3 & CD Manager. MP3 and digital music jukebox/organizer

Checks for updates to Quicken on a system reboot

ASUS Live Update utility for their motherboards

ASUS video card fan/thermal monitor - only required if you overclock your card or live in a hot area

ASUS video card fan/thermal monitor

Restores manually changed settings for ASUS based video cards such as overclocking. Only required if you use non-standard settings

GamerOSD by ASUSTek - for "real-time overclocking, benchmarking and video capturing in any PC game." Free for ASUS graphics cards, 30-day trial for non-ASUS graphics cards

System tray Icon for quickly changing video modes

Asus tweaking utility - for fine tuning the settings of your ASUS display card

MLS Pulse - real estate software. Keeps the home buyer/seller continually informed on the status of his/her local/regional real estate market

Adult content dialler

AT&T Resolution Assistant. "matcli.exe is a motive Assistant Command line interface that gathers information about your system's identity like your name email address, city, state, etc and gets written to a log file". Resolution Assistant is required to run with the Help and Support program. If you uncheck Resolution Assistant and and then run Help and Support it will add another Resolution Assistant in the startup menu. If you remove the Resolution Assistant in the add/remove program some help menus in help and support will not be available. You decide

Anti-Trojan Watch - trojan detector

Added by the AGOBOT-SL WORM!

AMT Status Message from Intel. Users can manage this, read the article. See here for more information on Intel AMT

Athan - an application that calculates and reminds the five daily Islamic prayer times for anywhere in the world

Added by the IRCBOT-TL WORM!

Added by the RBOT-CCY WORM! Note - modifies the HOSTS file by appending numerous lines, preventing access to the virus cleaning websites

System Tray access to ATI's Catalyst™ CONTROL CENTER. Note that this has "SystemTray" appended to CLI.exe in the "Command" column of MSCONFIG. Not required to run the control center - which is available via a right-click on the desktop

Utility meant for future use of the ATI TV WONDER USB 2.0 video driver and can be disabled

Added by the BDOOR-AFH TROJAN!

Added by the RBOT-FOV WORM!

Added by the RBOT-GAS WORM!

Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed

Convenient way to start all your Multimedia Center applications (DVD, Video CD, CD Audio, File Player). You can right-click LaunchPad, and uncheck Load on Startup in the menu

Added by the AGOBOT-OG WORM!

Driver for the ATI REMOTE WONDER? RF remote control for ATI's All-In-Wonder graphic cards and other products. Required if you use it

ATI Remote Wonder? - PC wireless remote control driver. Required if you use it

Component that remains resident in memory and automatically launches the ATI VIDEO PLAYER at a user selected time and date. Delete the shortcut in the Start -> Programs -> Startup folder as well. Functions could re-enable the program to load at start-up and re-introduce the shortcut. Try it and see

System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

Added by the RBOT-AEU WORM!

Added by the RBOT-FWL WORM!

Added by a variant of the IRCBOT TROJAN!

Added by the SDBOT-DDS WORM!

Added by the SDBOT.UR WORM!

For some ATI video cards. Probably used to access features and may not be required - for example the ATI Radeon works fine without it

Added by the BACKDOOR-CPC TROJAN!

Added by the DLOADR-BBW TROJAN!

System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager

ATI's Catalyst™ CONTROL CENTER. Required if you want to change graphics settings on a regular basis but you must have internet access and Microsoft's .NET framework installed. Note that this has "runtime" appended to cli.exe in the "Command" column of MSCONFIG. Recommend that start the program manually via Start → Programs → ATI Catalyst Control Center → Advanced → Restart Runtime as it can cause problems when starting Windows

Puts the ATI Catalyst™ Control Center Icon/Shortcut on the System Tray - available via Start → Programs

Added by the RBOT-XP WORM!

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

This utility adds the ATI tab in the advanced display properties (gives the option for TV out). Do not uncheck if there is TV out on the video card

Added by the RBOT-VZ WORM!

Added by the WARPIGS-E WORM! Note the uppercase "I" in the filename, rather than a lower case "L"

Program that checks the motherboard chipset and determines which GART driver bundle to install on ATI video cards. If you have one, once installed it shouldn't be needed

System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

System Tray access and key-combo shortcuts to common display functions on ATI video cards. Can be run from Start -> Settings -> Control Panel -> Display

ATI Technologies Control Centre - installed alongside ATI graphics hardware and provides additional configuration options for these devices in the Managed Access to Catalyst™ Environment (MACE) component

System Tray icon to access ATI graphics card settings and the Hydravision Desktop Manager

Added by the TACTSLAY.U TROJAN!

Added by the SMALL-ED TROJAN!

ATI External Event Utility EXE Module. This task can comsume lots of CPU resources on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources

ATI Polling Program - part of the ATI graphics driver e.g. on some Fujitsu-Siemens Notebooks

ATI External Event Utility EXE Module. This task can comsume lots of CPU resources on some computers, but it can help with graphics card problems. Leave enabled unless it consumes too many CPU resources

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start → Settings → Control Panel → Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Control panel for the ATI series of video cards allowing access to such features as display resolution, colour depth, etc. Available via Start -> Settings -> Control Panel -> Display. Some users may need it if they have optimised their settings

Added by the COSIAM-A TROJAN!

Used for hardware DVD decoding on ATI video cards supporting this feature. Not required unless you regularly play DVD's

ATI's "SMARTGART", which is included with the Catalyst™ drivers. When the system boots, it runs a couple of bus tests & tries to apply the most stable settings

WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "ComRoot" subfolder

Added by the WINDFIND-A TROJAN!

Added by the ROAMER-A TROJAN!

ATI Tray Tools - allows quick access to ATI graphics card settings

ATI Tray Tools - allows quick access to ATI graphics card settings

Added by the DEBESKI.A TROJAN!

Added by the DELF.EP downloader TROJAN!

Added by the RBOT-ABX WORM!

Added by the SMALL.AOS TROJAN!

Premium rate adult content dialler

ATI Remote Wonder? - PC wireless remote control driver. Required if you use it

ATK Media utility for ASUS laptops - what does it do and is it required?

CoolWebSearch/HomeSearch adware - for examples, see this log

CoolWebSearch/HomeSearch adware - for examples, see this log

Added by the MMS.A WORM!

Loads the ATnotes program for virtual sticky notes for your desktop. Available via Start -> Programs

TimeSync - lets you synchronize your computer's clock with any internet atomic clock

Added by the KATOMIK-A WORM!

Added by the KATOMIK-A WORM!

Atomic Clock Sync - synchronizes your computer's time with the NIST time server

Atomica runs from the System Tray and allows the user to find out more about a word or phrase on any screen by pointing at it with the mouse and clicking button one while holding down the Alt key

AtomicTime - utility that synchronizes your PC clock to an atomic clock

New feature of Norton Internet Security (NIS) and Norton Personal Firewall (NPF) 3.0 is the Alert Tracker, an instant notification feature. The Alert Tracker displays information about events as they happen. This way, when a rule has been triggered or an access to the Internet made, you know about it immediately rather than finding out about it when you check your logs or notice that the NIS icon indicates a security alert

Active Tray is a utility which lets you configure the system tray. You can also create your own tray icons

DeskTopScout keystroke logger/monitoring program - remove unless you installed it yourself!

Big Brother from Quest Software. System and network monitor

Additional item added to start-ups after AT&T took over the now bankrupt Excite@home high-speed internet service. Included for automatically downloading and installing updates. Leave it unless you plan to regularly run it to check for updates

Aveo Attune automated helpdesk software - adware/spyware

Aveo Attune automated helpdesk software - adware/spyware

Aveo Attune automated helpdesk software - adware/spyware

Aveo Attune automated helpdesk software - adware/spyware

Aveo Attune automated helpdesk software - adware/spyware

aTuner - tweak tool for GeForce based graphics cards

USB interface for Aiptek Graphics Tablet (USB)

"Pop Marketing" adware

Dealio Toolbar is a free shopping comparison toolbar that allows users to search for a wide range of consumer products

Au Agent from Zilab Software. Win2K/NT enhancement tool. Allows you to run applications under any security context without closing the whole logon session to process a new logon

Added by the BEAGLE.B WORM!

Adaptec USB CardBus Safe-Eject - driver for the Adaptec USB 2.0 CardBus which provides USB 2.0 ports for laptop users via a PCMCIA card slot

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Audio control panel?

Added by the RANCK-FL TROJAN!

Added by the PLOYB-A TROJAN!

Detected by PCTools as the IRCBOT.BIV TROJAN! See here

Added by the BANKER.BTG TROJAN!

Detected by Kaspersky as the IRCBOT.AJL TROJAN! See here

Added by the VB.ATE WORM!

Added by a variant of the CRYPTER.C TROJAN!

ADeck.exe is a system tray application for VIA's sound cards which offers quick access to a number of sound card related items

Added by the CRYPTER-C TROJAN!

Related to Creative DLL Module Loader for the Sound Blaster X-Fi (and maybe others). This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems

For Creative Soundblaster Live! series soundcards. System tray application for SB Live! functions. Available via Start -> Programs

Added by the BANKER-EHK TROJAN!

System Tray application installed with the drivers for Creative Labs SoundBlaster Live! Can be run from Start -> Programs

Added by a variant of the CRYPTER.C TROJAN!

Added by the HUPIGON.IFZ BACKDOOR!

Added by the MAILBOT-CF TROJAN!

Added by the SLAPER.K TROJAN!

AUNPS adware

Added by the ABWIZ.D TROJAN!

Added by the ABWIZ.C TROJAN!

Added by the ORSE-M TROJAN!

For Aureal based 3D soundcards. A3D sound features won't work with this disabled

For Aureal based 3D soundcards. A3D sound features won't work with this disabled

Added by the AUTOUPDER TROJAN!

Added by the RBOT-WP WORM!

System Tray access to Child Control parental control software by Salfield

Authentic-ID Toolbar - website authentication utility. Warns you when a site is recognized for phishing or isn't authentic, for example

Added by an unidentified VIRUS, WORM or TROJAN!

Added by the SMALL!SD5 TROJAN!

Added by the SPYBOT.BLA WORM!

Epson Status Monitor 3 for the Stylus C45 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C48 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C48 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C60 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C62 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C64 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C82 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C84 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus C87 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX3200 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX3600 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX3800 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX4200 Series printer - for monitoring printer status, checking ink levels, etc, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX4500 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX5000 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX5400 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX6000 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX6400 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX6600 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX6600 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX7400 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX7800 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus CX9400Fax Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus D78 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus D88 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus DX3800 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus DX4800 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus DX6000 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo 820 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R1800 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R200 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R200 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R220 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R2400 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R260 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R300 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R320 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo R800 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo RX420 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo RX500 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Photo RX600 Series printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Epson Status Monitor 3 for the Stylus Pro 7600 printer - for monitoring printer status, checking ink levels, etc. "X" represents the computer's network name, ie, PAULS-PC, PETES-LAPTOP, etc

Added by the SDBOT.EYB WORM!

Added by an unidentified WORM or TROJAN - probably a SPYBOT variant

Related to 2-port Bitronics AutoSwitch kit from Belkin

If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled

Added by a variant of the FORBOT WORM!

Added by the SDBOT.AAG WORM!

Added by an unididentified WORM or TROJAN!

Added by the RBOT-AVO WORM!

Added by the DUMARDI-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the CHEUKO-A TROJAN! Note - this is not the legitimate svchost.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Winnt or Windows folder

Added by the RBOT-AFA WORM!

Added by the PUNYA-A WORM! Note - this is not the legitimate services.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup!

Connect buttons on the keyboard for internet direct access, etc. on HP computers

Preloads some libraries that are used by AutoCAD in order to make the software load faster

Autoclik is a Windows utility "that allows you to perform all mouse activity with absolutely no clicking"

For Creative Soundblaster Live! series soundcards. Specify for any audio application what audio preset to automatically associate with currently active speaker output. Available via AudioHQ

Added by the SEMAPI-A WORM!

Detected by Symantec as the SILLYFDC WORM! See here

Detected by Symantec as the SILLYFDC WORM! See here

Detected by Trend Micro as the POLYCRYP.DY TROJAN! See here

AproposMedia adware

AproposMedia adware

Envolo/AproposMedia adware updater

Task scheduler for Unisyn Automate 4 task automation/macro running software. Available via a desktop shortcut or Start -> Programs

"Automate is the Leading Software for Automation of front and back-office business processes.It provides all the tools necessary to completely automate business processes, regardless of their complexity"

AutoMate 6 for automating repetitive tasks

Added by the GAOBOT.AJD WORM!

Added by the RBOT-AKE WORM!

Added by an unidentified WORM/TROJAN!

Added by an unidentified WORM/TROJAN!

Added by the RBOT-EQ WORM!

Added by the IRCBOT-AAM TROJAN!

Added by the GAOBOT.AO WORM!

The United Devices Agent can recycle your PC's unused resources and use them to perform valuable scientific and medical research without disturbing your usual computer use - similar to SETI@home but for medical research. Available via Start > Programs

Added by the RBOT-AGL WORM!

Both the files are in the MS Office/Bots/FP_WMP directory. Apparently, it registers the FrontPage WiMP extension

Added by an unidentified WORM or TROJAN!

Added by a variant of the SDBOT WORM!

Autoroute SMTP - "automatic switching between SMTP servers depending on what network you are currently working in." You need to have two Internet service providers

Added by the AUTOM-B WORM!

Added by the SMALLVBS-A WORM!

Added by a variant of the DELF.CNS TROJAN!

Added by the AGENT-FPX TROJAN!

Utility to fix vCard Export in MS Outlook 2000 - although why are these together?

AutoSizer - utility that automatically maximizes windows when they're opened

AutoSpell - spell checker (version 6.*)

AutoSpell - spell checker

Winguardian surveillance software. Uninstall this software unless you put it there yourself

If you disable the HP VIEW toolbar in IE and rearrange the toolbars on a reboot they will be back as they were before if this is left enabled

On HP PC's. Unclear what purpose it serves - but there's a known issue with Internet Explorer Toolbar settings not being saved with it enabled

Raxco Software Auto Update utility."Used to keep your software up-to-date"

Added by an unidentified VIRUS, WORM or TROJAN! - found in a folder of the same name

Unidentified adware - detected by Panda antivirus as the CLICKER.CY TROJAN!

Added by a variant of the QOOLOGIC TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "DATADX.DLL" file is found in %System%

Added by a variant of the QOOLOGIC TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "SUPDATE.DLL" file is found in %System%

Added by a variant of the WINSPY.AA TROJAN! Note - this is not the legitimate smss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a "debug64" subfolder of the Winnt or Windows folder

Added by the SYMPE-B TROJAN!

Tinybar variant

PeopleonPage foistware

Added by the DROPPER-BM TROJAN!

Detected by Kaspersky as the AGENT.FQ TROJAN!

Added by a variant of the RBOT WORM!

Added by the BAGLEDI-AA TROJAN!

Added by the BAGLE.AB TROJAN!

Added by the ZINS TROJAN!

Added by the AIZU WORM!

System Tray application for Aureal Vortex based soundcards. Can be run manually via Start -> Settings -> Control Panel

Added by the MIDFIN WORM!

Added by the MYDOOM.AD WORM!

Added by the MYDOOM.AD WORM!

Added by the FUROOT-A TROJAN!

AvaFind file search utility

Added by the MSNVB-D WORM!

Added by the SMALL.CZ TROJAN!

Part of Avast! anti-virus software

Part of Avast! anti-virus software

Part of Avast! anti-virus software

Part of Avast! anti-virus software

Added by an unidentified TROJAN!

From McAfee VirusScan up to version 4.x and Dr Solomon's VirusScan. Used to schedule regular scans. If you don't have scans scheduled you don't need it

Added by the DELF.LJ TROJAN!

Aveo Attune automated helpdesk software - adware/spyware

Advanced Video FX - supported by a number of Creative Web Cameras. "Have more fun by adding a wide range of special effects and backgrounds to your video chat with Advanced Video FX"

Added by the RBOT-ZA WORM!

AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates

Added by the BANKER.BYU TROJAN!

Added by the AGOBOT-OT WORM!

AVG antivirus related

AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates

AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses

AVG Anti-Virus 7.0 related

System Tray access to AVG internet security software

AVG antivirus related

AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates

Part of AntiVir? PersonalEdition Classic antivirus

Firewall part of the AVG Plus Firewall Edition

AVG Anti-Virus 7.0 related

AntiVir? PersonalEdition Classic antivirus. System Tray icon and control program

AVG antivirus background monitoring

AntiVir? PersonalEdition Classic antivirus. Background task which scans files transparently

AVG anti-virus control center. Also enables scheduled tests, Outlook E-mail plug-in and automatic updates

AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses

AVG Anti-Virus 7.0 Registry Cleaner - for checking the registry for virus additions and other security problems

Detected by Kaspersky as the AGENT.PH TROJAN!

Added by the GEMA TROJAN!

Added by the GEMA TROJAN!

Command Antivirus related

Added by an unidentified WORM or TROJAN!

eXtendia AVK AntiVirus email checker

GData AntiVirusKit Anti-virus

System Tray access to AntiVirenKit InternetSecurity from G DATA Software AG

Part of Avast! anti-virus software - E-mail scanner

Part of the ArcaVir antivirus suite from Polish company Arcabit. What does this part do and is it required?

Related to broadband products from avm.de

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

Added by the SERFLOG.A WORM!

Kaspersky anti-virus and AOL's Active Virus Shield (by Kaspersky) - found in either a Kaspersky or AOL sub-directory

Added by the MUTBO-A TROJAN!

Detected by Kaspersky as the ALPHABET.B TROJAN!

Added by a variant of the ALPHABET TROJAN!

Detected by Kaspersky as the ALPHABET.B TROJAN!

Added by the AGOBOT.FS WORM!

Added by the LEGMIR-ARK TROJAN!

Kaspersky Labs anti-virus

Kaspersky anti-virus

Added by the STARTPAGE-ID TROJAN! Note - this is not the popular Kaspersky antivirus and this file is located in the WINDOWSpchealthUploadLBConfig directory

Detected by Kaspersky as the ONLINEGAMES.CPV TROJAN! See here

Added by the MYDOOM.AF WORM!

Added by the ONLINE-GEN TROJAN!

Added by the NOFERE-G TROJAN!

Added by the AGENT.JJO TROJAN!

Added by the AGENT.PKZ TROJAN!

Detected by Kaspersky as a variant of the AGENT.A TROJAN!

Added by the AVRIL-A WORM!

AntiVir? PersonalEdition Classic - antivirus

Command Antivirus related

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

Added by the SERFLOG.B WORM!

Added by the SASSER WORM!

Added by the SASSER.B or SASSER.C WORMS!

Added by the SASSER.G WORM!

Related to Samsung AV Station - instant playback of music, photos, videos

Added by the AGENT.AM TROJAN! Note - example names include "XviD", "Winamp Remote", "Windows Media Player" and "Futuremark"

Command Antivirus tray icon

Added by the RBOT.CNI TROJAN!

PRISM Status Tray Applet - but what is it for and is it required?

AntiVir? PersonalEdition Classic - updater

Anti-virus part of BitDefender virus scanner/firewall

Bullguard or BitDefender antivirus

Anti-virus part of BitDefender virus scanner/firewall

??

Diagnosis tool that monitors DSL connections, installed alongside DSL drivers from AVM Fritz's range of modem products

Part of the IBM ThinkVantage Productivity Center. "The Away Manager application allows you preselect and run routine tasks to maintain your system's performance"

Part of Symantec's pcAnywhere remote PC management software. Provides an automatic startup of the client PC in host mode in conjuction with a host-definition file, so system administrators can access the machine. Can cause a 10% reduction in speed and not recommended

Part of Lavasoft Ad-aware Plus - realtime spyware-monitor watching your memory and registry for spyware that tries to install or change your system

F-Secure Anti-Spyware

AllWallpapers Lite desktop wallpaper changer

Reportedly related to a USB Wifi Adapter - is it required at startup?

AwxDTools related - a Windows Shell-Extension for the Daemon-Tools. It extends the context-menu of ImageFiles supported by Daemon-Tools (i.e.: *.cue, *.iso, *.ccd ...)

??

AdvancedXPFixer rogue security software - not recommended, see here

Added by an unidentified TROJAN - see here

Related to Realtek_Azalia Mixer Selector

Aztech Labs modem driver

Located in the IBMTOOLSVPD sub-directory. What does it do and is it required?